<?php
require('../setClassPath.php');
require_once('db/TransManager.php');
require_once('db/UserDB.php');
require_once('object/User.php');
require_once('util/Util.php');
require_once('ui/Component.php');

$pictureId = intval($_GET['p']);

session_start();
$user = $_SESSION['user'];
if (!isset($user))
    exit();

$confirm        = (strlen($_GET['confirm_key']) > 0 && $_GET['confirm_key'] == $_SESSION['confirm_key']);

$trans = TransManager::getInstance();
$userdb     = new UserDB();
$trans->beginTrans();

if (!$confirm) {
    $confirmKey = Util::randomString(5);
    $_SESSION['confirm_key'] = $confirmKey;
    $picture = $userdb->getPictureById($pictureId, $trans->getPDO(), $user->getUserId());
}
else
    $userdb->deletePicture($user->getUserId(), $pictureId, $trans->getPDO());

$trans->commit();
$trans->disconnect();

if ($confirm || !$picture) {
    header('HTTP/1.1 302 Found');
    header('Location: /pictures/'. $user->getFName());
    exit();
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Delete Picture</title>
<link type="text/css" rel="stylesheet" href="/css/main.css">
<link type="text/css" rel="stylesheet" href="/css/comment.css">
</head>
<body>
<div id="body">
<h1>Delete Picture</h1>

<div id="msgsent">
  <p>Are you sure? <a href="delpic.html?p=<?= $pictureId ?>&confirm_key=<?= $confirmKey ?>">Click here</a> to confirm deletion of this picture.</p>
<?php
    if (isset($picture))
        echo '<img src="/pic/'. $picture->getDirName() . $picture->getFileName() .'">';
?>
</div>
<ul id="msglinx">
  <li><a href="/profile/<?= $user->getFName() ?>">View Your Profile</a></li>
  <li><a href="/pictures/<?= $user->getFName() ?>">View Your Pictures</a></li>
  <li><a href="/friends/<?= $user->getFName() ?>">View Your Friends</a></li>
</ul>

<?php
$ui = Component::getInstance();
$ui->drawHeader($user);
$ui->drawFooter();
?>
</div>
</body>
</html>
