<?php
	include 'Scripts/MS.php';
	include 'Scripts/Redirect.php';
	include 'Scripts/MarketStatCollect.php';
	include 'top.php';
	include 'Scripts/WordFilter.php';
	
	$Page = "MakeReview";
	LogActivity($Page, $ServerName, $ServerUserName, $ServerPassword);
	
	$Comment = "";
	$CommentErr = "";
	$Rating = "";
	$RatingErr = "";
	$Error = 0;
	
	if ($_SERVER["REQUEST_METHOD"] == "POST") {
		if (empty($_POST["review"])) {
			$CommentErr = "Review is required";
			$Error++;
		}
		else {
			$Comment = test_input($_POST["review"]);
			$Comment = filter_var($Comment, FILTER_SANITIZE_STRING);
			if (!preg_match("/^[a-zA-Z0-9!@#$%^*()-_=+`~;:,.?| ]*$/", $Comment)) {
				$CommentErr = "Review can only have letters and numbers";
				$Error++;
			}
			else {
				$tmp =  WordFilter($Comment);
				if ($tmp == FALSE) {
					$CommentErr = "Banned Word Found!";
					$Error++;
				}
			}
		}
		if (empty($_POST['star'])) {
			$Rating = "1";
		}
		else {
			$Rating = test_input($_POST["star"]);
			if (!preg_match("/^[0-9]*$/", $Rating)) {
				die("Fatal Error in rating");
			}
		}
		
		
		if ($Error == 0) {
			SubmitReview($Comment, $Rating, $ServerName, $ServerUserName, $ServerPassword);
		}
	}
	
	function test_input($data)
	{
		$data = trim($data);
		$data = stripslashes($data);
		$data = htmlspecialchars($data);
		return $data;
	}
	
	function SubmitReview($Comment, $Rating, $ServerName, $ServerUserName, $ServerPassword)
	{
		$UserName;
		session_start();
		if (isset($_SESSION['username'])) {
			$UserName = $_SESSION['username'];
		}
		else if (isset($_SESSION['adminusername'])) {
			$UserName = $_SESSION['adminusername'];
		}
		else {
			session_write_close();
			die ("Error 1");
		}
		session_write_close();
		
		$dbName = "brentswelding";
		
		$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword);
		if ($conDataBase->connect_error) {
			die ("Connection Failed");
		}
		
		$sql = "INSERT INTO brentswelding.reviews (username,review,rating) VALUES('".$UserName."','".$Comment."','".$Rating."');";
		if ($conDataBase->query($sql) === TRUE) {
			echo("<script>window.location='Review.php';</script>");
		}
		else {
			echo("<script>alert('There was an error submiting your review. Please try again later');</script>");
		}
		$conDataBase->close();
		return;
	}
?>
<!DOCTYPE html>
<html>
	<head>
    	<script src="Script.js"></script>
 	  	<script>
			window.onload=Adjust;
			
			function star1()
			{
				document.getElementById('Star1').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star2').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star3').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star4').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/\Other/\StarEmpty.png";
			}
			
			function star2()
			{
				document.getElementById('Star1').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star2').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star3').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star4').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/\Other/\StarEmpty.png";
			}
			
			function star3()
			{
				document.getElementById('Star1').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star2').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star3').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star4').src = "Pictures/\Other/\StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/\Other/\StarEmpty.png";
			}
			
			function star4()
			{
				document.getElementById('Star1').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star2').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star3').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star4').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star5').src = "Pictures/\Other/\StarEmpty.png";
			}
			
			function star5()
			{
				document.getElementById('Star1').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star2').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star3').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star4').src = "Pictures/\Other/\StarFull.png";
				document.getElementById('Star5').src = "Pictures/\Other/\StarFull.png";
			}
			
			function GetIEVersion() 
			{
  				var sAgent = window.navigator.userAgent;
  				var Idx = sAgent.indexOf("MSIE");

  				// If IE, return version number.
  				if (Idx > 0) 
    				return parseInt(sAgent.substring(Idx+ 5, sAgent.indexOf(".", Idx)));

  						// If IE 11 then look for Updated user agent string.
 			 	else if (!!navigator.userAgent.match(/Trident\/7\./)) 
    				return 11;

  				else
    				return 0; //It is not IE
			}
			
		</script>
        <link href='https://fonts.googleapis.com/css?family=Fira+Sans' rel='stylesheet' type='text/css'>
    	<link rel="stylesheet" type="text/css" href="body.css">
        <style>
			label > input {display: none;}
			label > input + img {cursor: pointer;}
			.error {color: red;}
		</style>
    </head>
    <body class="background">
    	<div class="transparent">
        	<div class="fadeLeft" id="fadeLeft"></div>
    		<div class="bodyContainer" id="bodyContainer">
        		<form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">
        			<p><label>Review</label></p>
                    <p>
                    	<table>
                        	<tr>
                    			<td><label><input type="radio" name="star" value="1" onClick="star1();" /><img id="Star1" src="Pictures/Other/StarFull.png" style="height: 25px;" alt="Star"></label></td>
                    			<td><label><input type="radio" name="star" value="2" onClick="star2();" /><img id="Star2" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label></td>
                    			<td><label><input type="radio" name="star" value="3" onClick="star3();" /><img id="Star3" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label></td>
                    			<td><label><input type="radio" name="star" value="4" onClick="star4();" /><img id="Star4" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label></td>
                    			<td><label><input type="radio" name="star" value="5" onClick="star5();" /><img id="Star5" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label></td>
                            </tr>
                            <tr>
                            <div id="test">
                            	<script>
									if (GetIEVersion() > 0) {
										document.getElementById('test').innerHTML += "<p><td>1<input type='radio' name='star' value='1' onClick='star1();' /></td> 2<td><input type='radio' name='star' value='2' onClick='star2();' /></td> 3<td><input type='radio' name='star' value='3' onClick='star3();' /></td> 4<td><input type='radio' name='star' value='4' onClick='star4();' /></td> 5<td><input type='radio' name='star' value='5' onClick='star5();' /></td>";
									}
								</script>
                            </div>
                            </tr>
                        </table>
                    </p>
        	    	<p><textarea id="review" name="review" cols="50" rows="10"><?php echo $Comment;?></textarea></p>
        	    	<span class="error">* <?php echo $CommentErr;?></span></p>
        	    	<p><input type="submit" name="submit" value="Submit"></p>
        	    </form>
                <div>
                	<?php
						include 'bottom.php';
					?>
                </div>
        	</div>
            <div class="fadeRight" id="fadeRight"></div>
        </div>
    </body>
</html>