<?php
	include 'Redirect.php';
	include 'MarketStatCollect.php';
	include 'top.php';
	include 'WordFilter.php';
	
	$Page = "MakeReview";
	LogActivity($Page);
	
	$Comment = "";
	$CommentErr = "";
	$Rating = "";
	$RatingErr = "";
	$Error = 0;
	
	if ($_SERVER["REQUEST_METHOD"] == "POST") {
		if (empty($_POST["review"])) {
			$CommentErr = "Review is required";
			$Error++;
		}
		else {
			$Comment = test_input($_POST["review"]);
			$Comment = filter_var($Comment, FILTER_SANITIZE_STRING);
			if (!preg_match("/^[a-zA-Z0-9 ]*$/", $Comment)) {
				$CommentErr = "Review can only have letters and numbers";
				$Error++;
			}
			else {
				$tmp =  WordFilter($Comment);
				if ($tmp == FALSE) {
					$CommentErr = "Banned Word Found!";
					$Error++;
				}
			}
		}
		if (empty($_POST['star'])) {
			$Rating = "1";
		}
		else {
			$Rating = test_input($_POST["star"]);
			if (!preg_match("/^[0-9]*$/", $Rating)) {
				die("Fatal Error in rating");
			}
		}
		
		
		if ($Error == 0) {
			SubmitReview($Comment, $Rating);
		}
	}
	
	function test_input($data)
	{
		$data = trim($data);
		$data = stripslashes($data);
		$data = htmlspecialchars($data);
		return $data;
	}
	
	function SubmitReview($Comment, $Rating)
	{
		$UserName;
		session_start();
		if (isset($_SESSION['username'])) {
			$UserName = $_SESSION['username'];
		}
		else if (isset($_SESSION['adminusername'])) {
			$UserName = $_SESSION['adminusername'];
		}
		else {
			session_write_close();
			die ("Error 1");
		}
		session_write_close();
		
		$ServerName = "localhost";
		$ServerUserName = "root";
		$ServerPassword = "root";
		$dbName = "brentswelding";
		
		$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword);
		if ($conDataBase->connect_error) {
			die ("Connection Failed");
		}
		
		$sql = "INSERT INTO brentswelding.reviews (username,review,rating) VALUES('".$UserName."','".$Comment."','".$Rating."');";
		if ($conDataBase->query($sql) === TRUE) {
			echo("<script>window.location='Review.php';</script>");
		}
		else {
			echo("<script>alert('There was an error submiting your review. Please try again later');</script>");
		}
		$conDataBase->close();
		return;
	}
?>
<!DOCTYPE html>
<html>
	<head>
    	<script src="Script.js"></script>
 	  	<script>
			window.onload=Adjust;
			
			function star1()
			{
				document.getElementById('Star1').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star2').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star3').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star4').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/Other/StarEmpty.png";
			}
			
			function star2()
			{
				document.getElementById('Star1').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star2').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star3').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star4').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/Other/StarEmpty.png";
			}
			
			function star3()
			{
				document.getElementById('Star1').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star2').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star3').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star4').src = "Pictures/Other/StarEmpty.png";
				document.getElementById('Star5').src = "Pictures/Other/StarEmpty.png";
			}
			
			function star4()
			{
				document.getElementById('Star1').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star2').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star3').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star4').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star5').src = "Pictures/Other/StarEmpty.png";
			}
			
			function star5()
			{
				document.getElementById('Star1').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star2').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star3').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star4').src = "Pictures/Other/StarFull.png";
				document.getElementById('Star5').src = "Pictures/Other/StarFull.png";
			}
		</script>
    	<link rel="stylesheet" type="text/css" href="body.css">
        <style>
			label > input {display: none;}
			label > input + img {cursor: pointer;}
			.error {color: red;}
		</style>
    </head>
    <body class="background">
    	<div class="transparent">
        	<div class="fadeLeft" id="fadeLeft"></div>
    		<div class="bodyContainer" id="bodyContainer">
        		<form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">
        			<p><label>Review</label></p>
                    <p>
                    <label><input type="radio" name="star" value="1" onClick="star1();" /><img id="Star1" src="Pictures/Other/StarFull.png" style="height: 25px;" alt="Star"></label>
                    <label><input type="radio" name="star" value="2" onClick="star2();" /><img id="Star2" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label>
                    <label><input type="radio" name="star" value="3" onClick="star3();" /><img id="Star3" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label>
                    <label><input type="radio" name="star" value="4" onClick="star4();" /><img id="Star4" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label>
                    <label><input type="radio" name="star" value="5" onClick="star5();" /><img id="Star5" src="Pictures/Other/StarEmpty.png" style="height: 25px;" alt="Star"></label>
        	    	<p><textarea id="review" name="review" cols="50" rows="10"><?php echo $Comment;?></textarea>
        	    	<span class="error">* <?php echo $CommentErr;?></span></p>
        	    	<p><input type="submit" name="submit" value="Submit"></p>
        	    </form>
        	</div>
            <div class="fadeRight" id="fadeRight"></div>
        </div>
    </body>
</html>