<?php

/* For licensing terms, see /license.txt */

use Chamilo\CoreBundle\Entity\Portfolio;
use Chamilo\CoreBundle\Entity\PortfolioComment;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request as HttpRequest;
use Symfony\Component\HttpFoundation\Response;

require_once __DIR__.'/../global.inc.php';

$httpRequest = HttpRequest::createFromGlobals();

$action = $httpRequest->query->has('a') ? $httpRequest->query->get('a') : $httpRequest->request->get('a');
$currentUserId = api_get_user_id();
$currentUser = api_get_user_entity($currentUserId);

$em = Database::getManager();

$item = null;
$comment = null;

if ($httpRequest->query->has('item')) {
    /** @var Portfolio $item */
    $item = $em->find(
        Portfolio::class,
        $httpRequest->query->getInt('item')
    );
}

if ($httpRequest->query->has('comment')) {
    $comment = $em->find(
        PortfolioComment::class,
        $httpRequest->query->getInt('comment')
    );
}

$httpResponse = Response::create();

switch ($action) {
    case 'find_template':
        if (!$item) {
            $httpResponse->setStatusCode(Response::HTTP_NOT_FOUND);
            break;
        }

        if (!$item->isTemplate() || $item->getUser() !== $currentUser) {
            $httpResponse->setStatusCode(Response::HTTP_FORBIDDEN);
            break;
        }

        $httpResponse = JsonResponse::create(
            [
                'title' => $item->getTitle(),
                'content' => $item->getContent(),
            ]
        );
        break;
    case 'find_template_comment':
        if (!$comment) {
            $httpResponse->setStatusCode(Response::HTTP_NOT_FOUND);
            break;
        }

        if (!$comment->isTemplate() || $comment->getAuthor() !== $currentUser) {
            $httpResponse->setStatusCode(Response::HTTP_FORBIDDEN);
            break;
        }

        $httpResponse = JsonResponse::create(
            [
                'content' => $comment->getContent(),
            ]
        );
        break;
}

$httpResponse->send();