<?php
    session_start();

    header("Access-Control-Allow-Origin: *");
    header('Content-Type: application/json; charset=UTF-8');

    require_once("constants.php");
	require_once("repositories/CommentRepository.php");
    require_once("repositories/UserRepository.php");
    require_once("utilities.php");

	/*$servername = "localhost";
	$username = "smartcharging";
	$password = "LXRLBaEAuRr7M7jY";*/

	//$params = json_decode($_REQUEST["params"], true);

    //$input = file_get_contents('php://input');
    $params = json_decode(file_get_contents('php://input'), true);

	$conn;
	//$risposta = array();
	$comment = new Comment();
	$comment_repo;

	try {
    	$conn = new PDO("mysql:host=".DB_SERVERNAME.";dbname=".DB_NAME, DB_USERNAME, DB_PASSWORD);
    	$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    	//echo "Connesso con successo al DB";

        //if (!array_key_exists("token", $params) || !UserRepository::checkToken($params["token"], $conn)) {
        if (!array_key_exists("token", $params) || $params["token"] === "" ||
            (!UserRepository::checkUserByToken($params["user_id"], $params["token"], $conn) &&
            !UserRepository::checkAdminByToken($params["token"], $conn))) {
            //$risposta["return"] = -1;
            $risposta = createErrorMessage(-1, "Token non valido");
            echo json_encode($risposta);
            die();
        }

    	$comment_repo = new CommentRepository($conn);

    	$comment->id_locale 		= $params["local_id"];
		$comment->id_user	        = $params["user_id"];
    	$comment->voto 			    = $params["voto"];
    	$comment->descrizione 		= $params["descrizione"];
    	//$comment->data 		        = $params["data"];
        $comment->data              = date(DATE_ATOM);
        //$comment->imgs              = $params["imgs"];

    	$risposta = $comment_repo->addComment($comment);

        /* ============= SUPPORTO IMMAGINI NEI COMMENTI DROPPATO =============== */

        /*$commentImgs = array_key_exists("imgs", $params) ? $params["imgs"] : null;

        if ($risposta["return"] == 0 && count($commentImgs)>0) {
            foreach($commentImgs as $image) {
                //rename($_SERVER['DOCUMENT_ROOT'].TEMP_IMAGES_PATH.session_id()."/".$image, $_SERVER['DOCUMENT_ROOT'].IMAGES_PATH.$image);
                rename($_SERVER['DOCUMENT_ROOT'].TEMP_IMAGES_PATH."/".$image, $_SERVER['DOCUMENT_ROOT'].IMAGES_PATH.$image);
            }
            //rmdir("./images/temp/".session_id()."/");
            //deleteDirectory($_SERVER['DOCUMENT_ROOT'].TEMP_IMAGES_PATH.session_id()."/");
            $comment_repo->addImages($risposta["id"], $commentImgs);
        }*/

        //unset($_SESSION["images"]);

        /* =========== FINE SUPPORTO IMMAGINI NEI COMMENTI DROPPATO ============= */

    }
	catch(PDOException $e)
    {
   		echo $e->getMessage();
   		//$risposta["return"] = 1;
        $risposta = createErrorMessage(2, "Errore DB");
    }

    echo json_encode($risposta);
	$conn = null; //Close the connection to the DBMS

?>