<?php
defined('BASEPATH') OR exit('No direct script access allowed');

/**
 * Common hook class
 */

class _Common
{

    function init()
    {
        $CI =& get_instance();

        if ($CI->uri->segment(1) === 'api') {
			$headers = $CI->input->request_headers();
			if (!empty($headers['token'])) {
				if($headers['token']) {
					if(!$this->checkToken($headers['token'])) {
						$response = json_encode(array(
							'result' => 'error',
							'result_text' => "유효한 토큰이 아닙니다"
						));
						die($response);
					}else {
						$_POST['token'] = $headers['token'];
					}
				}else {
					$response = json_encode(array(
						'result' => 'error',
						'result_text' => "토큰 값이 넘어오지 않았습니다"
					));
					die($response);
				}		
			}else if($CI->uri->segment(2) === 'token') {
				$client_id = $CI->input->post_get('client_id');
				$client_secret = $CI->input->post_get('client_secret');
				$token = $this->requestToken($client_id, $client_secret);
				$response = json_encode(array(
					'result' => 'ok',
					'result_text' => $token
				));
				die($response);
			}
        }

		if ($CI->uri->segment(1) === 'install') {
            return;
        }

        if (config_item('use_lock_ip') && $CI->configlib->item('site_ip_whitelist')) {
            $whitelist = $CI->configlib->item('site_ip_whitelist');
            $whitelist = preg_replace("/[\r|\n|\r\n]+/", ',', $whitelist);
            $whitelist = preg_replace("/\s+/", '', $whitelist);
            if (preg_match('/(<\?|<\?php|\?>)/xsm', $whitelist)) {
                $whitelist = '';
            }
            if ($whitelist) {
                $whitelist = explode(',', trim($whitelist, ','));
                $whitelist = array_unique($whitelist);
                if (is_array($whitelist)) {
                    $CI->load->library('Ipfilter');
                    $ipfilter = new Ipfilter();
                    if ( ! $ipfilter->filter($whitelist)) {
                        $title = ($CI->configlib->item('site_blacklist_title'))
                            ? $CI->configlib->item('site_blacklist_title')
                            : 'Maintenance in progress...';
                        $message = $CI->configlib->item('site_blacklist_content');

                        show_error($message, '500', $title);

                        exit;
                    }
                }
            }
        }
        if (config_item('use_lock_ip') && $CI->configlib->item('site_ip_blacklist')) {
            $blacklist = $CI->configlib->item('site_ip_blacklist');
            $blacklist = preg_replace("/[\r|\n|\r\n]+/", ',', $blacklist);
            $blacklist = preg_replace("/\s+/", '', $blacklist);
            if (preg_match('/(<\?|<\?php|\?>)/xsm', $blacklist)) {
                $blacklist = '';
            }
            if ($blacklist) {
                $blacklist = explode(',', trim($blacklist, ','));
                $blacklist = array_unique($blacklist);
                if (is_array($blacklist)) {
                    $CI->load->library('Ipfilter');
                    $ipfilter = new Ipfilter();
                    if ($ipfilter->filter($blacklist)) {
                        $title = ($CI->configlib->item('site_blacklist_title'))
                            ? $CI->configlib->item('site_blacklist_title')
                            : 'Maintenance in progress...';
                        $message = $CI->configlib->item('site_blacklist_content');
                        show_error($message, '500', $title);
                        exit;
                    }
                }
            }
        }

        $CI->load->library('Mobile_detect');
        $detect = new Mobile_detect();

        $device_view_type = (get_cookie('device_view_type') === 'desktop' OR get_cookie('device_view_type') === 'mobile')
                ? get_cookie('device_view_type') : '';
        if (empty($device_view_type)) {
            $device_view_type = $detect->isMobile() ? 'mobile' : 'desktop';
        }
        $CI->configlib->set_device_view_type($device_view_type);

        $device_type = $detect->isMobile() ? 'mobile' : 'desktop';
        $CI->configlib->set_device_type($device_type);

        if ($CI->userlib->is_user()) {
            if ($CI->userlib->item('user_id') === false) {
                unset($CI->user);
                $CI->session->sess_destroy();
                redirect(current_full_url(), 'refresh');
            }
            $user_id = (int) $CI->userlib->item('user_id');
            if ($CI->userlib->item('user_denied')) {
                unset($CI->user);
                $CI->session->sess_destroy();
                redirect(current_full_url(), 'refresh');
            } else {
                if (substr($CI->userlib->item('user_lastlogin_datetime'), 0, 10) !== cdate('Y-m-d')) {
                    $updatedata = array(
                        'user_lastlogin_datetime' => cdate('Y-m-d H:i:s'),
                        'user_lastlogin_ip' => $CI->input->ip_address(),
                    );
                    $CI->User_model->update($user_id, $updatedata);
                }
            }
        }

        // 관리자 페이지
        if ($CI->userlib->is_admin() !== 'super'
			&& $CI->userlib->is_admin() !== 'general'
            && $CI->uri->segment(1) === config_item('uri_segment_admin')) {
            redirect('login?url=' . urlencode(current_full_url()));
        }

        if (config_item('use_lock_ip')
            && $CI->uri->segment(1) === config_item('uri_segment_admin')
            && $CI->configlib->item('admin_ip_whitelist')) {

            $whitelist = $CI->configlib->item('admin_ip_whitelist');
            $whitelist = preg_replace("/[\r|\n|\r\n]+/", ',', $whitelist);
            $whitelist = preg_replace("/\s+/", '', $whitelist);
            if (preg_match('/(<\?|<\?php|\?>)/xsm', $whitelist)) {
                $whitelist = '';
            }
            if ($whitelist) {
                $whitelist = explode(',', trim($whitelist, ','));
                $whitelist = array_unique($whitelist);
                if (is_array($whitelist)) {
                    $CI->load->library('Ipfilter');
                    if ( ! Ipfilter::filter($whitelist)) {
                        $title = '관리자 페이지';
                        $message = '현재 접속하신 아이피는 관리자 페이지 접근이 차단되었습니다';
                        show_error($message, '500', $title);
                        exit;
                    }
                }
            }
        }
    }

	private function checkToken($token) {
		$url = "https://api.fasterest.net:30443/api/test";

		$ch = curl_init();                                 //curl 초기화
		curl_setopt($ch, CURLOPT_URL, $url);               //URL 지정하기
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);    //요청 결과를 문자열로 반환 
		curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);      //connection timeout 10초 
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);   //원격 서버의 인증서가 유효한지 검사 안함
		curl_setopt($ch, CURLOPT_HTTPHEADER, array('Authorization: Bearer '. $token));		 
		$response = curl_exec($ch);
		curl_close($ch);
		return json_decode($response)->isValid;
	}

	private function requestToken($client_id, $client_secret) {
		$url = "https://api.fasterest.net:30443/oauth/token?client_id=".$client_id."&grant_type=client_credentials&client_secret=".$client_secret;

		$ch = curl_init();                                 //curl 초기화
		curl_setopt($ch, CURLOPT_URL, $url);               //URL 지정하기
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);    //요청 결과를 문자열로 반환 
		curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);      //connection timeout 10초 
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);   //원격 서버의 인증서가 유효한지 검사 안함
		 
		$response = curl_exec($ch);
		curl_close($ch);
		 
		$res = json_decode($response, true);
		if(empty($res['access_token'])) {
			return null;
		}else {
			return $res['access_token'];
		}
	}
}