<?php
//session_start();
//require_once ('includes/config.inc.php'); 
$page_title = 'ArtRoom | User Profile';
//include ('includes/headr.php');

?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
 <head>
  <title> <?php echo $page_title; ?> </title>
  <link href="includes/grid.css" rel="stylesheet" type="text/css">
  <link href="includes/panels.css" rel="stylesheet" type="text/css">
  <link href="includes/main.css" rel="stylesheet" type="text/css">
  <link href="includes/tabmenu.css" rel="stylesheet" type="text/css">
  <script type="text/javascript" src="js/jquery.js"></script>
   <script>
  $(document).ready(function(){
  $("#fshow").click(function(){
    $("#togglef").toggle();
	if(document.getElementById("fshow").innerHTML=="Show All")
	document.getElementById("fshow").innerHTML="Hide All";
	else
	document.getElementById("fshow").innerHTML="Show All";
  });
  $("#foshow").click(function(){
    $("#togglefo").toggle();
	if(document.getElementById("foshow").innerHTML=="Show All")
	document.getElementById("foshow").innerHTML="Hide All";
	else
	document.getElementById("foshow").innerHTML="Show All";
  });
});
</script>
 </head>
 <body>

<div id="header"><?php include ('includes/headr.php'); ?></div>
 <?php //require_once (MYSQL); 
 
 if (isset ($_GET['name'])){ //directed from artwork page artist link
	$name = $_GET['name'];



		if ((isset($_SESSION['logged_in']))){ //if user is logged in
			if($_GET['name']==($_SESSION['username']))
				{$_SESSION['same'] ='1';
				$row = $_SESSION;
				}//!
			else
				{ $_SESSION['same'] ='0';
				$q = "SELECT * FROM user WHERE username ='".$_GET['name']."'";
				$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
				$row = mysqli_fetch_array ($r, MYSQLI_ASSOC); 
				}//!
		}else //if user isn't logged in 
			{$_SESSION['same'] ='0';
			$q = "SELECT * FROM user WHERE username ='".$_GET['name']."'";
			$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			$row = mysqli_fetch_array ($r, MYSQLI_ASSOC);
			}//!
	

 }
else{	//directed from Personal Profile Menu Option
$_SESSION['same'] = '1';
$row = $_SESSION;

}
//is the profile deactivated?
$q = "SELECT da_id FROM deactivated WHERE user_id ='".$row['user_id']."'";
$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
if (mysqli_num_rows($r)==1) {//yes, it is!
//profile is deactivated, redirect
print"Loop!";
header('Location: Access Error.php');

}
//text search? redirect!
if (isset ($_GET['sitesearch'])){
	header('Location: home.php?sitesearch='.$_GET['sitesearch'].'');

}


//is the user followed or reported by session user?
if (isset($_SESSION['logged_in'])&&isset($_SESSION['same'])&&($_SESSION['same']=='0')){
		//is the user followed by session user?
		$q = "SELECT * FROM users_followers WHERE user_id = '".$row['user_id']."' AND follower_id = '".$_SESSION['user_id']."'";
		$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q1\n<br />MySQL Error: " . mysqli_error($dbc));
		$flag = mysqli_num_rows($r); //0 if they aren't, 1 if they are
		if ($flag==1)
			$bvalue = "Unfollow";
		else
			$bvalue = "Follow";
		//is the user reported by session user?
		$q = "SELECT rep_id FROM reports WHERE type='1' AND byuser_id = '".$_SESSION['user_id']."' AND item_id ='".$row['user_id']."'";
		$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q1\n<br />MySQL Error: " . mysqli_error($dbc));
		$flag = mysqli_num_rows($r); //0 if not, 1 if it is
		if ($flag==1){
			$rvalue = "Reported";
		}
		else
			$rvalue = "Report User";		
	} //end if for follow and report
if (isset($_POST['followed'])){ //if user was followed

	//---------------------------------
	//----------------------------------
	if ($bvalue == "Follow"){
			//Add follower to the database:
			$q = "INSERT INTO users_followers(user_id, follower_id) VALUES ('".$row['user_id']."','".$_SESSION['user_id']."')";
			$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));			
			if (mysqli_affected_rows($dbc) == 1) { //One row affected, user successfully added
				//Update follower no
				//$q2 = "UPDATE user SET followers_no = (SELECT COUNT(*) FROM users_followers WHERE user_id ='".$row['user_id']."') WHERE user_id ='".$row['user_id']."'";
				//$r2 = mysqli_query ($dbc, $q2) or trigger_error("Query: $q2\n<br />MySQL Error: " . mysqli_error($dbc));
				//make notification
				$q3 = "INSERT INTO notification(to_user, from_user, itemref, type, seen) VALUES ('".$row['user_id']."','".$_SESSION['user_id']."','".$row['user_id']."','1', '0' )";
				$r3 = mysqli_query ($dbc, $q3) or trigger_error("Query: $q3\n<br />MySQL Error: " . mysqli_error($dbc));			

				$follow= "Done!";
				$bvalue = "Unfollow";
				header ('Location:profile.php?name='.$row['username'].'&content=1');
			}
			else {
				$follow= "System error. Please try again.";
			}
			
		}
		else {
			//Remove follower from database
			$q = "DELETE FROM users_followers WHERE user_id = '".$row['user_id']."' AND follower_id = '".$_SESSION['user_id']."'";
			$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			if (mysqli_affected_rows($dbc) == 1) { //One row affected
				$follow= "Unfollowed!";
				$bvalue = "Follow";
				//Update follower no
				//$q2 = "UPDATE user SET followers_no = (SELECT COUNT(*) FROM users_followers WHERE user_id ='".$row['user_id']."') WHERE user_id ='".$row['user_id']."'";
				//$r2 = mysqli_query ($dbc, $q2) or trigger_error("Query: $q2\n<br />MySQL Error: " . mysqli_error($dbc));
				header ('Location:profile.php?name='.$row['username'].'&content=1');			}//!
			else 
				$follow= "System error. Please click again.";
		}//end else-remove from database

}//end-if followed user


if (isset($_POST['reported'])){ //if user was reported

		 if ($rvalue != "Reported"){//Add user to reported table for further inspection by admin:
			$q = "INSERT INTO reports (byuser_id, type, item_id) VALUES ('".$_SESSION['user_id']."', '1', '".$row['user_id']."')";
			$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));			
			if (mysqli_affected_rows($dbc) == 1) { //One row affected, user successfully added
				$report= "Done!";
				$rvalue = "Reported";
			}//!
			else {
				$report= "System error. Please try again later.";
			}//!
		 }
		 else $report= "Already reported!";

		
    }//end if reported artwork
//-------------------------------------------START HTML PAGE
?>
  <div id="navbar">
  <div id="holder">
  <ul>
 <?php
 if (isset ($_GET['content'])){
	 switch ($_GET['content']){
		 case 1: default:
			 print '<li><a class="nav" href="profile.php?name='.$row['username'].'&content=1" id="selected" >Profile</a></li>
  <li><a class="nav"href="profile.php?name='.$row['username'].'&content=2">Gallery</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=3">Prints</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=4">Favorites</a></li>'; break;
		 case 2:
			 print '<li><a class="nav" href="profile.php?name='.$row['username'].'&content=1">Profile</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=2" id="selected" >Gallery</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=3">Prints</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=4">Favorites</a></li>'; break;
		 case 3:
			 print '<li><a class="nav" href="profile.php?name='.$row['username'].'&content=1">Profile</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=2">Gallery</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=3" id="selected" >Prints</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=4">Favorites</a></li>'; break;
		 case 4:
			 print '<li><a class="nav" href="profile.php?name='.$row['username'].'&content=1">Profile</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=2">Gallery</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=3">Prints</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=4" id="selected">Favorites</a></li>'; break;
	 }
}
else
	print '<li><a class="nav" href="profile.php?name='.$row['username'].'&content=1" id="selected" >Profile</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=2">Gallery</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=3">Prints</a></li>
  <li><a class="nav" href="profile.php?name='.$row['username'].'&content=4">Favorites</a></li>'; 
				
 ?>
  </ul>
  </div>
  </div>
  <?php
  print '<div class="options" id="userinfo">';
  if ($row['avatar_id']==0) $url="../main_site/includes/default.jpg";
  else {
	$q = "SELECT ava_url FROM avatar WHERE avatar_id='".$row['avatar_id']."'"; 
	$r = mysqli_query ($dbc, $q);
	$row1 = mysqli_fetch_array ($r, MYSQLI_ASSOC);
	$url= $row1['ava_url'];
  }
  print '<img class="avatar" src="'.$url.'" />';
  print '<h3>'.$row['username'].'</h3>';
  if (isset($row['age'])) print '<p>'.$row['age'].' years old</p>';
  if (isset($_SESSION['same'])&&($_SESSION['same']=='1')){
	  print '<form method="post" name="edit" id="editprof">
	  <a href="edit_profile.php"><input type="button" id="editprof" value="Edit Profile"></a>
	  </form>';
	  }
  if (isset($_SESSION['logged_in'])&&isset($_SESSION['same'])&&($_SESSION['same']=='0')){
	  print '<form method="post" action="profile.php?name='.$row['username'].'&content=1" name="follow" id="follow">
	  <input type="submit" name="follow" id="follow" value="'.$bvalue.'">
	  <span class="error">';if (isset ($follow))echo $follow;
	  print '</span>
	  <input type="hidden" name="followed" value="TRUE" />
	  </form>';
	 print '</form>';
	 print '<form method="post" name="reportuser" id="reportuser">
			 <input type="submit" name="report" id="reportuser" value="'.$rvalue.'">
			 <input type="hidden" name="reported" value="TRUE" />
			 </form>
	<span class="error">';
	if (isset($report))echo $report;
	print '</span>';
	  }
  print '</div>'; //end userinfo---------------------------------------------------------------------------------

 if (isset ($_GET['content'])){
	 switch ($_GET['content']){
		 case 1: default:			 
			 print '<div class="panel" id="gen_info">
			 <p>Bio - ';echo $row['username']; print'</p>';
			 if ($row['bio']!=NULL){
			 echo $row['bio']; }
			 else {
				 echo 'Shy user ahoy! No info available (yet) :)';
			 }
			 print'
			 </div>
			 <div class="panel" id="following">';
			  $q1 = "SELECT user_id FROM users_followers WHERE users_followers.follower_id ='".$row['user_id']."'";
			  //AND user.user_id=users_followers.user_id";
			 $r1 = mysqli_query ($dbc, $q1) or trigger_error("Query: $q1\n<br />MySQL Error: " . mysqli_error($dbc));
			 print'<p>Following ';
			 if(mysqli_num_rows($r1)>0){
			 echo 'these lovely people:</p>';
			 print'<button id="fshow">Show All</button></br><div id="togglef" style="display:none;">';
			 while($row1 = mysqli_fetch_array ($r1, MYSQLI_ASSOC)) {
				 $qa="SELECT username FROM user WHERE user_id='".$row1['user_id']."'"; 
				 $ra = mysqli_query ($dbc, $qa) or trigger_error("Query: $qa\n<br />MySQL Error: " . mysqli_error($dbc));
				 $rowa = mysqli_fetch_array ($ra, MYSQLI_ASSOC);
						echo '<a href="profile.php?name='.$rowa['username'].'&content=1">'.$rowa['username'].'</a></p>';
					}
					print'<div class="dummyClear"></div></div>';
			 }
			 else {
				 echo 'zero poeple. Maybe they\'re just new here :) </p>';
			 }
			 print'</div>
			 <div class="panel" id="followers">';
			 $fq= "SELECT COUNT(*) FROM users_followers WHERE user_id ='".$row['user_id']."'";
			 $fr= mysqli_query ($dbc, $fq) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			 $f = (int) mysqli_fetch_array ($fr, MYSQLI_ASSOC);
			 $q = "UPDATE user SET followers_no = '$f' WHERE user_id ='".$row['user_id']."'";
				$r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));

			  $q2 = "SELECT follower_id FROM users_followers WHERE users_followers.user_id ='".$row['user_id']."'";
			 $r2 = mysqli_query ($dbc, $q2) or trigger_error("Query: $q1\n<br />MySQL Error: " . mysqli_error($dbc));
			 print'<p>Followers:';
			 if (mysqli_num_rows($r2)>0){
			 echo'</p>';
			 print'<button id="foshow">Show All</button></br><div id="togglefo" style="display:none;">';
			 while($row2 = mysqli_fetch_array ($r2, MYSQLI_ASSOC)) { 
				 $qb="SELECT username FROM user WHERE user_id='".$row2['follower_id']."'"; 
				 $rb = mysqli_query ($dbc, $qb) or trigger_error("Query: $qa\n<br />MySQL Error: " . mysqli_error($dbc));
				 $rowb = mysqli_fetch_array ($rb, MYSQLI_ASSOC);
						echo '<a href="profile.php?name='.$rowb['username'].'&content=1">'.$rowb['username'].'</a></p>';
					}
					print'<div class="dummyClear"></div></div>';
			 
			 }
			 else {
				 echo ' No followers for this guy yet.';
			 }
			 print'</div>';
			 break;
		 case 2:
			 print '<div class="panel" id="gallery">
			 <p>Gallery</p>'; 
			 print'<div>';
			 $q = "SELECT * FROM artwork WHERE user_id ='".$row['user_id']."'ORDER BY artwork_id DESC";
			 $r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			 while($row1 = mysqli_fetch_array ($r, MYSQLI_ASSOC)) {
						echo '<a href="view_artwork.php?artwork_id='.$row1['artwork_id'].'&content=1"><img class="onload" src="'.$row1['url'].'" /></a>';

			 } 			 
			 print '</div></div>'; 
			 break;
		 case 3:
			 print'<div class="panel" id="prints">
			 <p>Prints</p>';
			 $q = "SELECT artwork.artwork_id AS artwork_id, url, cprint_id FROM canvas_prints, artwork WHERE artwork.user_id ='".$row['user_id']."' AND artwork.artwork_id=canvas_prints.artwork_id ORDER BY artwork_id DESC";
			 $r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			 while($row1 = mysqli_fetch_array ($r, MYSQLI_ASSOC)) {
							echo '<a href="view_print.php?cprint_id='.$row1['cprint_id'].'"><img class="onload" src="'.$row1['url'].'" /></a>';
						}
			 print'</div>'; 
			 break;
		 case 4:
			 print '<div class="panel" id="favorites">
			 <p>Favorites</p>';
			 $q = "SELECT artwork_id FROM users_favorites WHERE user_id ='".$row['user_id']."'ORDER BY artwork_id DESC";
			 $r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
			 while($row1 = mysqli_fetch_array ($r, MYSQLI_ASSOC)) {
						$q1 = "SELECT * FROM artwork WHERE artwork_id ='".$row1['artwork_id']."'";
						$r1 = mysqli_query ($dbc, $q1) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc));
						while($row2 = mysqli_fetch_array ($r1, MYSQLI_ASSOC)) {
							echo '<a href="view_artwork.php?artwork_id='.$row2['artwork_id'].'&content=1"><img class="onload" src="'.$row2['url'].'" /></a>';
						}
			 }
			 print'</div>'; 
			 break;
		
	 }
}
else //if there's no content specified
	{
	// Show an error message.
	$page_title = 'Error';
	//include ('includes/header.html');
		header('Location: Access Error.php');
	}

				
 mysqli_close($dbc); ?>
 <!--<div id="footer"><?php include ('includes/footer.php'); ?></div> --> 
</body>
<?php include ('includes/footer.php'); ?>

</html>
