(* COCANWIKI scripts.
 * Written by Richard W.M. Jones <rich@merjis.com>.
 * Copyright (C) 2004 Merjis Ltd.
 * $Id: upload_file.ml,v 1.3 2004/09/07 14:58:34 rich Exp $
 *)

open Apache
open Registry
open Cgi
open Printf

open ExtString

open Cocanwiki
open Cocanwiki_template
open Cocanwiki_ok
open Cocanwiki_emailnotify
open Cocanwiki_images

let is_ws_re = Pcre.regexp "^\\s*$"
let is_whitespace str = Pcre.pmatch ~rex:is_ws_re str

(* Valid file names. *)
let file_ok_re = Pcre.regexp "^[a-z0-9][-._a-z0-9]*$"

let run r (q : cgi) (dbh : Dbi.connection) (hostid, hostname, _) _ =
  let name = q#param "name" in
  let title = q#param "title" in

  (* See if there was an upload. *)
  let file =
    try
      let upload = q#upload "file" in
      upload.upload_value
    with
	Not_found ->
	  error ~title:"No file" ~back_button:true
	    q "No file was uploaded.";
	  raise CgiExit in

  (* Check the name is valid. *)
  if not (Pcre.pmatch ~rex:file_ok_re name) then (
    error ~title:"Bad File Name" ~back_button:true
      q ("The File Name must contain only lowercase English letters, " ^
	 "numbers, dots, dashes and underscore.");
    raise CgiExit
  );

  (* Identify the MIME type from the extension. *)
  let mime_type = mime_type_of_filename name in

  let title = if is_whitespace title then `Null else `String title in

  (* Put the file into the database. *)
  let sth =
    dbh#prepare_cached
      "insert into files (hostid, name, content, title, mime_type)
       values (?, ?, ?, ?, ?)" in
  sth#execute [`Int hostid; `String name; `Binary file; title;
	       `String mime_type];

  dbh#commit ();

  (* Email notify. *)
  let subject = "File " ^ name ^ " has been uploaded." in
  let body = fun () ->
    "Page: http://" ^ hostname ^ "/_files" in

  email_notify ~body ~subject dbh hostid;

  let buttons = [ ok_button "/_files" ] in
  ok ~title:"File uploaded" ~buttons
    q "File was uploaded successfully."

let () =
  register_script run