<?php
header("Content-Type: text/html; charset=utf-8");
header("X-Frame-Options: sameorigin");
header("X-XSS-Protection: 1; mode=block");
header("X-Content-Type-Options: nosniff");
header("Strict-Transport-Security: max-age=31536000");
header("Referrer-Policy: no-referrer-when-downgrade");

/*$headerCSP = "Content-Security-Policy:".
    "connect-src 'self' ;". // XMLHttpRequest (AJAX request), WebSocket or EventSource.
    "default-src 'self';". // Default policy for loading html elements
    "frame-ancestors 'self' ;". //allow parent framing - this one blocks click jacking and ui redress
    "frame-src 'none';". // vaid sources for frames
    "media-src 'self' ;". // vaid sources for media (audio and video html tags src)
    "object-src 'none'; ". // valid object embed and applet tags src
    "script-src 'nonce' ;". // allows js from self, jquery and google analytics.  Inline allows inline js
    "style-src 'nonce' ;";// allows css from self and inline allows inline css
//Sends the Header in the HTTP response to instruct the Browser how it should handle content and what is whitelisted
//Its up to the browser to follow the policy which each browser has varying support
header($headerCSP);
*/
//opcache_reset();
//ini_set('output_buffering','On');
date_default_timezone_set('Europe/Berlin');
// ini_set('display_errors',0);
// error_reporting(E_ALL);
//Vendor Autoloader
$currDir = __DIR__;
$rootDir = dirname(dirname($currDir));
$dcDir = $rootDir . '/mysyde';
include($rootDir .  '/vendor/autoload.php');


//Dc Autoloader
/*
include(rtrim($_SERVER['DOCUMENT_ROOT'],'/') . '/mysyde/DcAutoloader.php');
$dcAutoloader = new DcAutoloader();
$dcAutoloader->register();*/

//Load environment variables from config if exists
try {
    //code...

$baseDir = rtrim(dirname(__DIR__,2),'/');
$envDir = $baseDir . '/config';
$envFilePath = $envDir . '/.env';
if (is_dir($envDir) && file_exists($envFilePath) && is_file($envFilePath) && is_readable($envFilePath)) {
    $dotenv = new \Dotenv\Dotenv($envDir);
    $dotenv->load();
}

$envDirTracking = $envDir . '/tracking';
$envTrackingFilePath = $envDirTracking . '/.env';
if (is_dir($envDirTracking) && file_exists($envTrackingFilePath) && is_file($envTrackingFilePath) && is_readable($envTrackingFilePath)) {
    $dotenvTracking = new \Dotenv\Dotenv($envDirTracking);
    $dotenvTracking->load();
}

$trackingAPIRoot = getenv('TRACKING_API_ROOT');
$trackingAPIVersionString = getenv('TRACKING_API_VERSION');
$trackingAPIIndexRelPath = getenv('TRACKING_API_INDEX_FILE_PATH');
$trackingAPIIndexFilePath = $baseDir . DIRECTORY_SEPARATOR . $trackingAPIIndexRelPath;
$trackingAPIRequestURLPattern = '#\/' . $trackingAPIRoot . '\/' . $trackingAPIVersionString . '\/[^\/]+#i';


//extract_request_uri_variables();

// extract_request_uri_variables();

/* include($rootDir . '/mysyde/common/classes/GeneralErrorExceptionHandling.php');
$redirectToPath =  '/error.html';
if($_GET['language']!= "de")
{
    $redirectToPath = '/error_'.$_GET['language'].'.html';
}

$redirectMsg = 'We\'re sorry - an internal error occurred. The error has been logged and support notified. We expect the problem to be solved shorty.';


\DynCom\mysyde\common\classes\GeneralErrorExceptionHandling::setErrorHandler($redirectToPath,$redirectMsg);
\DynCom\mysyde\common\classes\GeneralErrorExceptionHandling::setExceptionHandler($redirectToPath,$redirectMsg);
*/

// $displayErrors = (bool)getenv('DISPLAY_ERRORS');
// ini_set('display_errors',$displayErrors);
// error_reporting(E_ERROR|E_WARNING|E_PARSE);
// header("Content-Type: text/html; charset=utf-8");
// mb_internal_encoding('UTF-8');

// require_once($dcDir . "/common/common_functions.inc.php");
// require_once($dcDir . "/dc-server.config.php");
// dcBasicAuth();


// require_once("frontend_functions.inc.php");

// require_once("start.inc.php");
 
// require_once("check_ip_switch.php");
// require_once("check_language_switch.php");
// if(isset($_GET['action']) && ($_GET['action'] == 'frontend_collection')){
     
//     $_GET['action'] = 'frontend_collection';
//     require_once(MODULE_PATH.'collection/edit_collection.inc.php');
     
// }else{
//     require_once($GLOBALS["layout"]["frontend_include"]);
// }

// require_once("close.inc.php");



function extract_request_uri_variables() {
    $is_shop = strpos($_SERVER['REQUEST_URI'],'/shop/') !== false;
    if ($is_shop) {
        extract_shop_request_uri_variables();
    } else {
        extract_site_request_uri_variables();
    }
}

function extract_shop_request_uri_variables() {
    $shop_base_pattern = '#/([^/]+)/([^/]+)/shop/([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}#';
    $shop_base_pattern_matches = [];
    preg_match($shop_base_pattern,$_SERVER['REQUEST_URI'],$shop_base_pattern_matches);
    if (
        array_key_exists(1,$shop_base_pattern_matches)
        &&  array_key_exists(2,$shop_base_pattern_matches)
        &&  !empty($shop_base_pattern_matches[1])
        &&  !empty($shop_base_pattern_matches[2])
    ) {
        $_GET['site'] = filter_var($shop_base_pattern_matches[1],FILTER_SANITIZE_STRING);
        if (empty($_GET['site'])) { $_GET['site'] = get_site_code_from_domain(); }
        $_GET['language'] = filter_var($shop_base_pattern_matches[2],FILTER_SANITIZE_STRING);
        $_GET['level_1'] = 'shop';


        //Try to max category level 5 (index 3 to 8)
        $noOfPathSegments = count($shop_base_pattern_matches);
        if ($noOfPathSegments > 8) {
            $noOfPathSegments = 8;
        }

        for ($i=3;$i<=$noOfPathSegments;$i++) {
            $levelindex = $i - 2;
            $matchedPattern = array_key_exists($i,$shop_base_pattern_matches) ? $shop_base_pattern_matches[$i] : '';
            $code = filter_var(rtrim($matchedPattern,'/'),FILTER_SANITIZE_STRING);
            if (!empty($code)) {
                $_GET['slevel_' . $levelindex] = $code;
            }
        }
    }
    if (!(strlen((string)$_GET['site']) > 0)) {
        $_GET['site'] = get_site_code_from_domain();
    }
}

function extract_site_request_uri_variables() {
    $site_base_pattern = '#/([^/]+)/([^/]+)/([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}#';
    //$site_base_pattern = '#/([^/]+)/([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}([^/]+/){0,1}#';
    $site_base_pattern_matches = [];
    preg_match($site_base_pattern,$_SERVER['REQUEST_URI'],$site_base_pattern_matches);

    if (
        array_key_exists(1,$site_base_pattern_matches)
        && !empty($site_base_pattern_matches[1])
        && array_key_exists(2,$site_base_pattern_matches)
        && !empty($site_base_pattern_matches[2])
    ) {
        $_GET['site'] = filter_var($site_base_pattern_matches[1],FILTER_SANITIZE_STRING);
        if (empty($_GET['site'])) { $_GET['site'] = get_site_code_from_domain(); }
        $_GET['language'] = filter_var($site_base_pattern_matches[2],FILTER_SANITIZE_STRING);

        $urlId = (int)substr( strrchr( $_SERVER['REQUEST_URI'], '-' ), 1 );

        //Try to max category level 5 (index 3 to 8)
        $noOfPathSegments = count($site_base_pattern_matches);
        if ($noOfPathSegments > 8) {
            $noOfPathSegments = 8;
        }

        // last number in the url is the collection id
        if($urlId > 0) {
            $noOfPathSegments -= 2;
            $_GET['collection_id'] = $urlId;
        }

        for ($i=3;$i<=$noOfPathSegments;$i++) {
            $levelindex = $i - 2;
            $matchedPattern = array_key_exists($i,$site_base_pattern_matches) ? $site_base_pattern_matches[$i] : '';
            $code = filter_var(rtrim($matchedPattern,'/'),FILTER_SANITIZE_STRING);
            if (!empty($code)) {
                $_GET['level_' . $levelindex] = $code;
            }
        }
    }
    if (!(strlen((string)$_GET['site']) > 0)) {
        $_GET['site'] = get_site_code_from_domain();
    }
   
}

function get_site_code_from_domain() {
    $prepStatement = 'SELECT id,code,is_standard_site FROM main_site WHERE site_url = :domain ORDER BY id';

    $siteDomain = $_SERVER['SERVER_NAME'];
    $siteDomain = str_replace('www.', '', $siteDomain);
    $siteCode = '';
    $dbHost = getenv('MAIN_MYSQL_DB_HOST');
    $dbPort = (int)getenv('MAIN_MYSQL_DB_PORT');
    $dbUser = getenv('MAIN_MYSQL_DB_USER');
    $dbSchema = getenv('MAIN_MYSQL_DB_SCHEMA');
    $dbPass = getenv('MAIN_MYSQL_DB_PASS');

    try {
        $pdo = new \DynCom\mysyde\common\classes\PDOQueryWrapper($dbHost,$dbPort,$dbSchema,$dbUser,$dbPass);
        $params = [
            [':domain',$siteDomain,PDO::PARAM_STR],
        ];
        $pdo->setQuery($prepStatement);
        $pdo->prepareQuery();
        $pdo->bindParameters($params);
        $pdo->executePreparedStatement();
        $resArr = $pdo->getResultArray();
        if (count($resArr) > 1) {
             foreach ($resArr as $site) {
                 if ($site["is_standard_site"] == 1) {
                     $resArr = array();
                     $resArr[0] = $site;
                     break;
                 }
             }
        }
        if (array_key_exists(0,$resArr) && array_key_exists('id',$resArr[0]) && $resArr[0]['id'] > 0) {
            $siteCode = $resArr[0]['code'];
        }
    } catch (Exception $e) {
        //Do noting
    }
    return $siteCode;
}

function check_and_redirect_tracking_api_requests($regexPattern,$tracking_index_path)
{
    $matches = [];
    $reqURI = $_SERVER['REQUEST_URI'];
    preg_match($regexPattern,$reqURI,$matches);
    if (array_key_exists(0,$matches) && file_exists($tracking_index_path) && is_file($tracking_index_path) && is_readable($tracking_index_path)) {
         include $tracking_index_path;
         exit(0);
    }
}

/* country Codes list
    http://dev.maxmind.com/geoip/legacy/codes/iso3166/
*/
function get_site_from_domain_countryCode($countryCode) {
    $prepStatement = "
      SELECT 
            id,
            code
      FROM
           main_site
      WHERE
          site_url = :domain 
            AND
              default_country_codes LIKE   CONCAT('%',:countryCode,'%')
      ORDER BY id LIMIT 1";

    $siteDomain = $_SERVER['SERVER_NAME'];
    $siteCode = '';
    $dbHost = getenv('MAIN_MYSQL_DB_HOST');
    $dbPort = (int)getenv('MAIN_MYSQL_DB_PORT');
    $dbUser = getenv('MAIN_MYSQL_DB_USER');
    $dbSchema = getenv('MAIN_MYSQL_DB_SCHEMA');
    $dbPass = getenv('MAIN_MYSQL_DB_PASS');

    try {
        $pdo = new \DynCom\mysyde\common\classes\PDOQueryWrapper($dbHost,$dbPort,$dbSchema,$dbUser,$dbPass);
        $params = [
            [':domain',$siteDomain,PDO::PARAM_STR],
            [':countryCode',$countryCode,PDO::PARAM_STR],
        ];
        $pdo->setQuery($prepStatement);
        $pdo->prepareQuery();
        $pdo->bindParameters($params);
        $pdo->executePreparedStatement();
        $resArr = $pdo->getResultArray();
        if (array_key_exists(0,$resArr) && array_key_exists('id',$resArr[0]) && $resArr[0]['id'] > 0) {
            $site = $resArr[0];
        }
    } catch (Exception $e) {
        //Do noting
    }
    return $site;
}
function get_language_by_site_id($siteId)
{

    $dbHost = getenv('MAIN_MYSQL_DB_HOST');
    $dbPort = (int)getenv('MAIN_MYSQL_DB_PORT');
    $dbUser = getenv('MAIN_MYSQL_DB_USER');
    $dbSchema = getenv('MAIN_MYSQL_DB_SCHEMA');
    $dbPass = getenv('MAIN_MYSQL_DB_PASS');

    $pdo = new \DynCom\mysyde\common\classes\PDOQueryWrapper($dbHost,$dbPort,$dbSchema,$dbUser,$dbPass);

    $prepStatement = '
              SELECT 
                id,
                code,
                name,
                std_main_navigation_id,
                related_language_codes
              FROM 
                main_language  
              WHERE 
                    main_site_id = :mainSiteId 
                  AND 
                    active = 1
               ORDER BY id   
            ';

    $params = [
        [':mainSiteId', $siteId, PDO::PARAM_STR],
    ];
    $pdo->setQuery($prepStatement);
    $pdo->prepareQuery();
    $pdo->bindParameters($params);
    $pdo->executePreparedStatement();
    $siteLanguagesArray = $pdo->getResultArray();

    return $siteLanguagesArray;

}



extract_request_uri_variables();

$displayErrors = (bool)getenv('DISPLAY_ERRORS');
ini_set('display_errors',$displayErrors);
error_reporting(E_ERROR|E_WARNING|E_PARSE);
header("Content-Type: text/html; charset=utf-8");
mb_internal_encoding('UTF-8');

require_once($dcDir . "/common/common_functions.inc.php");
require_once($dcDir . "/dc-server.config.php");
dcBasicAuth();


require_once("frontend_functions.inc.php");

require_once("start.inc.php");

if (isset($_POST["fgztiknxbhhk"])) {
    $con_user_id = $_POST["fgztiknxbhhk"];
}

if (isset($_GET["fgztiknxbhhk"])) {
    $iphone = $_GET["app"];
}
 
require_once("check_ip_switch.php");
require_once("check_language_switch.php");
if(isset($_GET['action']) && ($_GET['action'] == 'frontend_collection')){
     
    $_GET['action'] = 'frontend_collection';
    require_once(MODULE_PATH.'collection/edit_collection.inc.php');
     
}else{
    require_once($GLOBALS["layout"]["frontend_include"]);
}

require_once("close.inc.php");

} catch (\Throwable $th) {
    echo $th;
}