<?php

session_start();

// File locations.
$settings_file = "../config.php";
$htaccess_file = "../.htaccess";
$phpass_file   = '../dropplets/includes/phpass.php';

// Get existing settings.
if (file_exists($settings_file)) {
    include($settings_file);
}
if (file_exists($phpass_file))
{
    include($phpass_file);
    $hasher  = new PasswordHash(8,FALSE);
}
function settings_format($name, $value) {
    return sprintf("\$%s = \"%s\";", $name, $value);
}

/*-----------------------------------------------------------------------------------*/
/* Save Submitted Settings
/*-----------------------------------------------------------------------------------*/

// Should allow this only on first install or after the user is authenticated
// but this doesn't quite work. So back to default.
if ($_POST["submit"] == "submit" && (!file_exists($settings_file) || isset($_SESSION['user'])))
{
    // Get submitted setup values.
    if (isset($_POST["blog_email"])) {
        $blog_email = $_POST["blog_email"];
    }
    if (isset($_POST["blog_twitter"])) {
        $blog_twitter = $_POST["blog_twitter"];
    }
    if (isset($_POST["blog_url"])) {
        $blog_url = $_POST["blog_url"];
    }
    if (isset($_POST["blog_title"])) {
        $blog_title = $_POST["blog_title"];
    }
    if (isset($_POST["meta_description"])) {
        $meta_description = $_POST["meta_description"];
    }
    if (isset($_POST["intro_title"])) {
        $intro_title = $_POST["intro_title"];
    }
    if (isset($_POST["intro_text"])) {
        $intro_text = $_POST["intro_text"];
    }
    if (isset($_POST["template"])) {
        $template = $_POST["template"];
    }

    // There must always be a $password, but it can be changed optionally in the
    // settings, so you might not always get it in $_POST.
    if (!isset($password) || !empty($_POST["password"])) {
        $password = $hasher->HashPassword($_POST["password"]);
    }

    if(!isset($header_inject)) {
        $header_inject = "";        
    }

    if(isset($_POST["header_inject"])) {
        $header_inject = addslashes($_POST["header_inject"]);
    }

    if(!isset($footer_inject)) {
        $footer_inject = "";
    }
    
    if(isset($_POST["footer_inject"])) {
        $footer_inject = addslashes($_POST["footer_inject"]);
    }

    // Get subdirectory
    $dir .= str_replace('dropplets/save.php', '', $_SERVER["REQUEST_URI"]);

    // Output submitted setup values.
    $config[] = "<?php";
    $config[] = settings_format("blog_email", $blog_email);
    $config[] = settings_format("blog_twitter", $blog_twitter);
    $config[] = settings_format("blog_url", $blog_url);
    $config[] = settings_format("blog_title", $blog_title);
    $config[] = settings_format("meta_description", $meta_description);
    $config[] = settings_format("intro_title", $intro_title);
    $config[] = settings_format("intro_text", $intro_text);
    $config[] = "\$password = '".$password."';";
    $config[] = settings_format("header_inject", $header_inject);
    $config[] = settings_format("footer_inject", $footer_inject);
    $config[] = settings_format("template", $template);
    
    // Create the settings file.
    file_put_contents($settings_file, implode("\n", $config));
    
    // Generate the .htaccess file on initial setup only.
    if (!file_exists($htaccess_file)) {
    
        // Parameters for the htaccess file.
        $htaccess[] = "# Pretty Permalinks";
        $htaccess[] = "RewriteRule ^(images)($|/) - [L]";
        $htaccess[] = "RewriteCond %{REQUEST_URI} !^action=logout [NC]";
        $htaccess[] = "RewriteCond %{REQUEST_URI} !^action=login [NC]";
        $htaccess[] = "Options +FollowSymLinks -MultiViews";
        $htaccess[] = "RewriteEngine on";
        $htaccess[] = "RewriteBase " . $dir;
        $htaccess[] = "RewriteCond %{REQUEST_URI} !index\.php";
        $htaccess[] = "RewriteCond %{REQUEST_FILENAME} !-f";
        $htaccess[] = "RewriteRule ^(.*)$ index.php?filename=$1 [NC,QSA,L]";
    
        // Generate the .htaccess file.
        file_put_contents($htaccess_file, implode("\n", $htaccess));
    }

    // Redirect
    header("Location: " . $blog_url);
}

?>