<?php
chdir(dirname(__FILE__));
require "../lib/connection.php";
require_once "../lib/mainLib.php";
$gs = new mainLib();
require_once "../lib/GJPCheck.php";
require_once "../lib/exploitPatch.php";
require_once "../lib/commands.php";
require_once "../../config/misc.php";
require_once "../lib/automod.php";
if(Automod::isLevelsDisabled(1)) exit(($_POST['gameVersion'] > 20 ? 'temp_0_Commenting is currently disabled!' : '-1'));
$userName = !empty($_POST['userName']) ? ExploitPatch::charclean($_POST['userName']) : "";
$comment = !empty($_POST['comment']) ? $_POST['comment'] : "";
$gameVersion = !empty($_POST['gameVersion']) ? ExploitPatch::number($_POST['gameVersion']) : 0;
$commentLength = ($gameVersion >= 20) ? mb_strlen(ExploitPatch::url_base64_decode($comment)) : mb_strlen($comment);
if($enableCommentLengthLimiter && $commentLength > $maxCommentLength) exit("temp_0_You cannot post comments above $maxCommentLength characters! (Your's ".$commentLength.")");
$comment = ($gameVersion < 20) ? ExploitPatch::url_base64_encode(ExploitPatch::rucharclean($comment)) : ExploitPatch::url_base64_encode(ExploitPatch::rucharclean(ExploitPatch::url_base64_decode($comment)));
$levelID = ExploitPatch::numbercolon($_POST["levelID"]);
$percent = !empty($_POST["percent"]) ? ExploitPatch::number($_POST["percent"]) : 0;

if(strpos($levelID, '-') === 0) {
    $checkLevelExist = $db->prepare("SELECT * FROM lists WHERE listID = :levelID");
	$checkLevelExist->execute([':levelID' => ltrim($levelID, '-')]);
} else {
    $checkLevelExist = $db->prepare("SELECT * FROM levels WHERE levelID = :levelID");
	$checkLevelExist->execute([':levelID' => $levelID]);
}
if($checkLevelExist->rowCount() == 0) die("-1");

$id = $gs->getIDFromPost();
$register = is_numeric($id);
$userID = $gs->getUserID($id, $userName);
$uploadDate = time();
$decodecomment = ExploitPatch::url_base64_decode($comment);
$command = Commands::doCommands($id, $decodecomment, $levelID);
if($command) ($_POST['gameVersion'] > 20 ? exit("temp_0_".$command) : exit('-1'));
if($percent < 0 || $percent > 100) exit("temp_0_Invalid percentage!");
$checkCommentBan = $gs->getPersonBan($id, $userID, 3);
if($checkCommentBan) ($_POST['gameVersion'] > 20 ? exit("temp_".($checkCommentBan['expires'] - time())."_".ExploitPatch::translit(ExploitPatch::url_base64_decode($checkCommentBan['reason']))) : exit('-10'));
if($checkLevelExist->fetch()['commentLocked']) exit("temp_0_Comments on this ".(strpos($levelID, '-') === 0 ? 'list' : 'level')." are locked!");
if($id != "" AND $comment != "") {
	$query = $db->prepare("INSERT INTO comments (userName, comment, levelID, userID, timeStamp, percent) VALUES (:userName, :comment, :levelID, :userID, :uploadDate, :percent)");
	$query->execute([':userName' => $userName, ':comment' => $comment, ':levelID' => $levelID, ':userID' => $userID, ':uploadDate' => $uploadDate, ':percent' => $percent]);
	$gs->logAction($id, 15, $userName, $comment, $db->lastInsertId(), $levelID); 
	Automod::checkCommentsSpamming($userID);
	echo 1;
	if($register) {
		if($percent != 0) {
			$query2 = $db->prepare("SELECT percent FROM levelscores WHERE accountID = :accountID AND levelID = :levelID");
			$query2->execute([':accountID' => $id, ':levelID' => $levelID]);
			$result = $query2->fetchColumn();
			if($query2->rowCount() == 0) {
				$query = $db->prepare("INSERT INTO levelscores (accountID, levelID, percent, uploadDate)
				VALUES (:accountID, :levelID, :percent, :uploadDate)");
				$gs->logAction($id, 34, $levelID, $percent);
			} else {
				if($result < $percent) {
					$gs->logAction($id, 35, $levelID, $percent);
					$query = $db->prepare("UPDATE levelscores SET percent=:percent, uploadDate=:uploadDate WHERE accountID=:accountID AND levelID=:levelID");
					$query->execute([':accountID' => $id, ':levelID' => $levelID, ':percent' => $percent, ':uploadDate' => $uploadDate]);
				}
			}
		}
	}
} else {
	echo -1;
}
?>