<?php

	require_once "config.php";

	$op = $_REQUEST["op"];

	header("Content-type: text/json");

	$ldb = new SQLite3(SCRATCH_DB);
	$ldb->busyTimeout(10*1000);

	$owner = SQLite3::escapeString($_SERVER["PHP_AUTH_USER"]);

	if (!$owner) {
		print json_encode(["error" => "NOT_AUTHENTICATED"]);
		die;
	}

	ob_start("ob_gzhandler");

	switch ($op) {
	case "cover":
		$id = (int) $_REQUEST["id"];

		$db = new SQLite3(CALIBRE_DB, SQLITE3_OPEN_READONLY);
		$result = $db->query("SELECT has_cover, path FROM books WHERE id = " . $id);

		while ($line = $result->fetchArray(SQLITE3_ASSOC)) {
			$filename = BOOKS_DIR . "/" . $line["path"] . "/" . "cover.jpg";

			if (file_exists($filename)) {
				$base_filename = basename($filename);

				header("Content-type: " . mime_content_type($filename));
				header('Cache-control: max-age= ' . (86400*24));

				readfile($filename);
			} else {
				header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found");
				echo "File not found.";
			}
		}

		break;

	case "download":
		$id = (int) $_REQUEST["id"];

		$db = new SQLite3(CALIBRE_DB, SQLITE3_OPEN_READONLY);
		$result = $db->query("SELECT path, name, format FROM data LEFT JOIN books ON (data.book = books.id) WHERE data.id = " . $id);

		while ($line = $result->fetchArray(SQLITE3_ASSOC)) {
			$filename = BOOKS_DIR . "/" . $line["path"] . "/" . $line["name"] . "." . strtolower($line["format"]);

			if (file_exists($filename)) {
				$base_filename = basename($filename);

				header("Content-type: " . mime_content_type($filename));
				header("Content-Disposition: attachment; filename=\"$base_filename\"");

				readfile($filename);
			} else {
				header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found");
				echo "File not found.";
			}
		}

		break;

	case "getpagination":
		$bookid = (int) $_REQUEST["id"];

		if ($bookid) {
			$result = $ldb->query("SELECT pagination FROM epube_pagination WHERE bookid = '$bookid' LIMIT 1");

			if ($line = $result->fetchArray()) {
				print $line["pagination"];
			} else {
				print json_encode(["error" => "NOT_FOUND"]);
			}
		}

		break;
	case "storepagination":
		$bookid = (int) $_REQUEST["id"];
		$payload = SQLite3::escapeString($_REQUEST["payload"]);
		$total_pages = (int) $_REQUEST["total"];

		if ($bookid && $payload && $total_pages) {

			$ldb->query("BEGIN");

			$result = $ldb->query("SELECT id FROM epube_pagination WHERE bookid = '$bookid' LIMIT 1");

			if ($line = $result->fetchArray()) {
				$id = $line["id"];

				$ldb->query("UPDATE epube_pagination SET pagination = '$payload',
					total_pages = '$total_pages' WHERE id = '$id'");

			} else {
				$ldb->query("INSERT INTO epube_pagination (bookid, pagination, total_pages) VALUES
					('$bookid', '$payload', '$total_pages')");

			}

			$ldb->query("COMMIT");
		}

		break;
	case "getlastread":
		$bookid = (int) $_REQUEST["id"];
		$lastread = 0;
		$lastcfi = "";

		if ($bookid) {

			$result = $ldb->query("SELECT id, lastread, lastcfi FROM epube_books
				WHERE bookid = '$bookid' AND owner = '$owner' LIMIT 1");

			if ($line = $result->fetchArray()) {
				$lastread = (int) $line["lastread"];
				$lastcfi = $line["lastcfi"];
			}
		}

		print json_encode(["page" => $lastread, "cfi" => $lastcfi]);

		break;

	case "storelastread":
		$page = (int) $_REQUEST["page"];
		$bookid = (int) $_REQUEST["id"];
		$cfi = SQLite3::escapeString($_REQUEST["cfi"]);

		if ($page && $bookid) {

			$ldb->query("BEGIN");

			$result = $ldb->query("SELECT id, lastread, lastcfi FROM epube_books
				WHERE bookid = '$bookid' AND owner = '$owner' LIMIT 1");

			if ($line = $result->fetchArray()) {
				$id = $line["id"];
				$lastread = (int) $line["lastread"];

				if ($lastread < $page || $page == -1) {

					if ($page == -1) $page = 0;

					$ldb->query("UPDATE epube_books SET lastread = '$page', lastcfi = '$cfi' WHERE id = '$id'");
				}
			} else {
				$ldb->query("INSERT INTO epube_books (bookid, owner, lastread, lastcfi) VALUES
					('$bookid', '$owner', '$page', '$cfi')");

			}

			$ldb->query("COMMIT");
		}

		print json_encode(["page" => $page, "cfi" => $cfi]);

		break;

	default:
		print json_encode(["error" => "UNKNOWN_METHOD"]);
	}


?>