<?php
	require_once('login.php');
	require_once('sanitize.php');
	if (!empty($_POST['modify-photo'])) {
		$photo_query = $db_connection->prepare("SELECT photo_id, photo_file FROM photoblog_photo;");
		$photo_query->execute();
		$photo_results = $photo_query->fetchAll(PDO::FETCH_ASSOC);
		$category_change = "no";
		foreach ($photo_results as $photo) {
			$photo_id = $photo["photo_id"];
			if (!empty($_POST["title-$photo_id"])) {
				$photo_id_json = $photo["photo_id"];
				$photo_file_name = $photo["photo_file"];
				$title_photo = sanitize($_POST["title-$photo_id"]);
				$description_photo = sanitize($_POST["description-$photo_id"]);
				$tags_photo = sanitize($_POST["tags-$photo_id"]);
				if (!empty($title_photo)) {
					$modify_insert = $db_connection->prepare("UPDATE photoblog_photo SET photo_name = ? WHERE photo_id = ?;");
					$modify_insert->execute(array($title_photo,$photo_id));
				}
				if (!empty($description_photo)) {
					$description_insert = $db_connection->prepare("UPDATE photoblog_photo SET photo_description = ? WHERE photo_id = ?;");
					$description_insert->execute(array($description_photo,$photo_id));
				}
				if (!empty($tags_photo)) {
					$tags_insert = $db_connection->prepare("UPDATE photoblog_photo SET photo_tags = ? WHERE photo_id = ?;");
					$tags_insert->execute(array($tags_photo,$photo_id));
				}
				if (!empty($_FILES["file-$photo_id"]['tmp_name'])) {
					$file_name = $_FILES["file-$photo_id"]['name'];
					$file_size = $_FILES["file-$photo_id"]['size'];
					$file_tmp = $_FILES["file-$photo_id"]['tmp_name'];
					require_once('thumbnail.php');
					$images_dir = "../images/";
					$thumbnails_dir = "../thumbnails/";
					unlink($images_dir.$photo_file_name);
					unlink($thumbnails_dir.$photo_file_name);
					if (preg_match("/(gif|jpg|jpeg|png)$/",strtolower($file_name))) {
						$date = getdate();
						$photo_file_name = 'photo-'.mt_rand(1000, 3000).$date['mday'].strchr(strtolower($file_name), '.');
						$photo_path = $images_dir.$photo_file_name;
						if ($file_size > 3512100) {
							echo "<p>Image is larger than 3MB</p>\n";
						}
						if (move_uploaded_file($file_tmp, $photo_path)) {
							$permissions = 0644;
							chmod($photo_path,$permissions);
							$query_file = $db_connection->prepare('UPDATE photoblog_photo SET photo_file = ? WHERE photo_id = ?;');
							$query_file->execute(array($photo_file_name,$photo_id));
							make_thumb($images_dir,$photo_file_name,$thumbnails_dir);	
						}
					}
				}
				$delete_category = $db_connection->prepare('DELETE FROM photoblog_categories WHERE categories_photo_id = ?;');
				$delete_category->execute(array($photo_id));
				$query_categories = $db_connection->prepare('SELECT category_id, category_name FROM photoblog_category;');
				$query_categories->execute();
				$query_category = $query_categories->fetchAll(PDO::FETCH_ASSOC);
				foreach ($query_category as $category) {
					$category_id = $category["category_id"];
					$category_mixed = 'category-'.$category_id;
					if (isset($_POST[$category_mixed])) {
						$query_insert_category = $db_connection->prepare('INSERT INTO photoblog_categories (categories_photo_id, categories_category_id) VALUES (?, ?);');
						$query_insert_category->execute(array($photo_id,$category_id));
						$category_change = "yes";
					} else {
						$query_delete_category = $db_connection->prepare('DELETE FROM photoblog_categories WHERE categories_photo_id = ? AND categories_category_id = ?;');
						$query_delete_category->execute(array($photo_id,$category_id));
					}
				}
			}
		}
		$json = array("photo"=>array("id"=>$photo_id_json,"file"=>$photo_file_name,"name"=>$title_photo,"category"=>$category_change,"modified"=>"yes"));
		print json_encode($json);
	}
?>