<?php
/* For licensing terms, see /license.txt */

/**
 * Configure the portal homepage (manages multi-urls and languages)
 * @package chamilo.admin
 */

/**
 * Creates menu tabs for logged and anonymous users
 *
 * This function copies the file containing private a public tabs (home_tabs_logged_in_$language.html)
 * in to the public tab template (home_tabs_$language.html) but without the private tabs.
 * Private tabs are the ones including "?private" string in the end of the url, ex: http://google.com/?private
 *
 * @param  string Name of the file been updated by the administration, ex: home_tabs_logged_in_($language).html
 */
function home_tabs($file_logged_in)
{
	$post = strpos($file_logged_in, "_logged_in");
	if ($post !== false) {
		$file_logged_out = str_replace('_logged_in','', $file_logged_in);
		//variables initialization
		$data_logged_out = array();
		$data_logged_in  = array();

		//we read the file with all links
		$file = file($file_logged_in);
		foreach ($file as $line) {
			$line = str_replace("\n", '',$line);
			//not logged user only sees public links
			if (!preg_match('/::private/',$line)) {
				$data_logged_out[] = $line;
			}
			//logged user only sees all links
			$data_logged_in[] = $line;
		}
		//tabs file for logged out users
		if (file_exists($file_logged_out)) {
			$fp = fopen($file_logged_out, 'w');
			fputs($fp, implode("\n", $data_logged_out));
			fclose($fp);
		}
		//tabs file for logged in users
		$fp = fopen($file_logged_in, 'w');
		fputs($fp, implode("\n", $data_logged_in));
		fclose($fp);
	}
}

$cidReset = true;
require_once '../inc/global.inc.php';

$this_section = SECTION_PLATFORM_ADMIN;
$_SESSION['this_section'] = $this_section;
$this_page = '';

api_protect_admin_script();

$htmlHeadXtra[] = '<script>
$(function() {
    $("#all_langs").change(function() {
        var checkboxes = $(this).closest("form").find("#table_langs").find(":checkbox");
        if($(this).is(":checked")) {
            checkboxes.attr("checked", "checked");
        } else {
            checkboxes.removeAttr("checked");
        }
    });
});
</script>';

global $_configuration;

$action = isset($_GET['action']) ? Security::remove_XSS($_GET['action']) : null;
$tbl_category = Database::get_main_table(TABLE_MAIN_CATEGORY);
$tool_name = get_lang('ConfigureHomePage');
$_languages = api_get_languages();

$interbreadcrumb[] = array(
	'url' => 'index.php',
	'name' => get_lang('PlatformAdmin')
);

if (!empty($action)) {
	$interbreadcrumb[] = array(
		'url' => 'configure_homepage.php',
		'name' => get_lang('ConfigureHomePage')
	);

	switch ($action) {
		case 'edit_top':
			$tool_name = get_lang('EditHomePage');
			break;
		case 'edit_news':
			$tool_name = get_lang('EditNews');
			break;
		case 'edit_notice':
			$tool_name = get_lang('EditNotice');
			break;
		case 'insert_link':
			$tool_name = get_lang('InsertLink');
			break;
		case 'edit_link':
			$tool_name = get_lang('EditLink');
			break;
		case 'insert_tabs':
			$tool_name = get_lang('InsertTabs');
			break;
		case 'edit_tabs':
			$tool_name = get_lang('EditTabs');
			break;
	}
}

// The global logic for language priorities should be:
// - take language selected when connecting ($_SESSION['user_language_choice'])
//   or last language selected (taken from select box into SESSION by global.inc.php)
//   or, if unavailable;
// - take default user language ($_SESSION['_user']['language']) - which is taken from
//   the database in local.inc.php or, if unavailable;
// - take platform language (taken from the database campus setting 'platformLanguage')
// Then if a language file doesn't exist, it should be created.
// The default language for the homepage should use the default platform language
// (if nothing else is selected), which means the 'no-language' file should be taken
// to fill a new 'language-specified' language file, and then only the latter should be
// modified. The original 'no-language' files should never be modified.

// ----- Language selection -----
// The final language selected and used everywhere in this script follows the rules
// described above and is put into "$lang". Because this script includes
// global.inc.php, the variables used for language purposes below are considered safe.

$lang = ''; //el for "Edit Language"
if (!empty($_SESSION['user_language_choice'])) {
	$lang = $_SESSION['user_language_choice'];
} elseif (!empty($_SESSION['_user']['language'])) {
	$lang = $_SESSION['_user']['language'];
} else {
	$lang = api_get_setting('platformLanguage');
}

$languageGet = isset($_GET['language']) ? Security::remove_XSS($_GET['language']) : $lang;

// Ensuring availability of main files in the corresponding language
$homePath = api_get_path(SYS_APP_PATH).'home/';

if (api_is_multiple_url_enabled()) {
	$access_url_id = api_get_current_access_url_id();
	if ($access_url_id != -1) {
		$url_info = api_get_access_url($access_url_id);
		$url = api_remove_trailing_slash(preg_replace('/https?:\/\//i', '', $url_info['url']));
		$clean_url = api_replace_dangerous_char($url);
		$clean_url = str_replace('/', '-', $clean_url);
		$clean_url .= '/';

		$homep = $homePath; //homep for Home Path
		$homep_new = $homePath.'home/'.$clean_url; //homep for Home Path added the url
		$new_url_dir = $homePath.$clean_url;
		//we create the new dir for the new sites
		if (!is_dir($new_url_dir)) {
			mkdir($new_url_dir, api_get_permissions_for_new_directories());
		}
	}
} else {
	$homep_new = '';
	$homep = $homePath; //homep for Home Path
}

$menuf = 'home_menu'; //menuf for Menu File
$newsf = 'home_news'; //newsf for News File
$topf = 'home_top'; //topf for Top File
$noticef = 'home_notice'; //noticef for Notice File
$menutabs = 'home_tabs'; //menutabs for tabs Menu
$mtloggedin = 'home_tabs_logged_in'; //menutabs for tabs Menu
$ext = '.html'; //ext for HTML Extension - when used frequently, variables are
// faster than hardcoded strings
$homef = array($menuf, $newsf, $topf, $noticef, $menutabs, $mtloggedin);

// If language-specific file does not exist, create it by copying default file
foreach ($homef as $my_file) {
	if (api_is_multiple_url_enabled()) {
		if (!file_exists($homep_new.$my_file.'_'.$lang.$ext)) {
			if (!file_exists($homep.$my_file.$ext)) {
				touch($homep.$my_file.$ext);
			}
			@copy($homep.$my_file.$ext, $homep_new.$my_file.'_'.$lang.$ext);
		}
	} else {
		if (!file_exists($homep.$my_file.'_'.$lang.$ext)) {
			if (!file_exists($homep.$my_file.$ext)) {
				touch($homep.$my_file.$ext);
			}
			@copy($homep.$my_file.$ext, $homep.$my_file.'_'.$lang.$ext);
		}
	}
}

if (api_is_multiple_url_enabled()) {
	$homep = $homep_new;
}

// Check WCAG settings and prepare edition using WCAG
$errorMsg = '';

// Filter link param
$link = '';
if (!empty($_GET['link'])) {
	$link = $_GET['link'];
	// If the link parameter is suspicious, empty it
	if (strstr($link, '/') || !strstr($link, '.html') || strstr($link, '\\')) {
		$link = '';
		$action = '';
	}
}

// Start analysing requested actions
if (!empty($action)) {
	if (!empty($_POST['formSent'])) {
		// Variables used are $homep for home path, $menuf for menu file, $newsf
		// for news file, $topf for top file, $noticef for noticefile,
		// $ext for '.html'
		switch ($action) {
			case 'edit_top':
				// Filter
				$home_top = trim(stripslashes($_POST['home_top']));

				// Write
				if (is_writable($homep)) {
					// Default
					if (is_writable($homep.$topf.'_'.$lang.$ext)) {
						$fp = fopen($homep.$topf.'_'.$lang.$ext, 'w');
						fputs($fp, $home_top);
						fclose($fp);

						// Language
						foreach ($_languages['name'] as $key => $value) {
							$lang_name = $_languages['folder'][$key];
							if (isset($_POST[$lang_name])) {
								$fp = fopen($homep.$topf.'_'.$lang_name.$ext, 'w');
								fputs($fp, $home_top);
								fclose($fp);
							}
						}
					} else {
						$errorMsg = get_lang('HomePageFilesNotWritable');
					}
				} else {
					//File does not exist
					$fp = fopen($homep.$topf.'_'.$lang.$ext, 'w');
					fputs($fp, $home_top);
					fclose($fp);

					foreach ($_languages['name'] as $key => $value) {
						$lang_name = $_languages['folder'][$key];
						if (isset($_POST[$lang_name])) {
							if (file_exists($homep.$topf.'_'.$lang_name.$ext)) {
								$fp = fopen($homep.$topf.'_'.$lang_name.$ext, 'w');
								fputs($fp, $home_top);
								fclose($fp);
							}
						}
					}
				}

				if (EventsMail::check_if_using_class('portal_homepage_edited')) {
					EventsDispatcher::events('portal_homepage_edited',array('about_user' => api_get_user_id()));
				}
				Event::addEvent(
					LOG_HOMEPAGE_CHANGED,
					'edit_top',
					cut(strip_tags($home_top), 254),
					api_get_utc_datetime(),
					api_get_user_id()
				);
				break;
			case 'edit_notice':
				// Filter
				$notice_title = trim(strip_tags(stripslashes($_POST['notice_title'])));
				$notice_text = trim(str_replace(array("\r", "\n"), array('', '<br />'), strip_tags(stripslashes($_POST['notice_text']), '<a>')));
				if (empty($notice_title) || empty($notice_text)) {
					$errorMsg = get_lang('NoticeWillBeNotDisplayed');
				}
				// Write
				if (file_exists($homep.$noticef.'_'.$lang.$ext)) {
					if (is_writable($homep.$noticef.'_'.$lang.$ext)) {
						$fp = fopen($homep.$noticef.'_'.$lang.$ext, 'w');
						if ($errorMsg == '') {
							fputs($fp, "<b>$notice_title</b><br />\n$notice_text");

							foreach ($_languages['name'] as $key => $value) {
								$lang_name = $_languages['folder'][$key];
								if (isset($_POST[$lang_name])) {
									if (file_exists($homep.$noticef.'_'.$lang_name.$ext)) {
										if (is_writable($homep.$noticef.'_'.$lang_name.$ext)) {
											$fp = fopen($homep.$noticef.'_'.$lang_name.$ext, 'w');
											fputs($fp, "<b>$notice_title</b><br />\n$notice_text");
											fclose($fp);
										}
									}
								}
							}
						} else {
							fputs($fp, '');

							foreach ($_languages['name'] as $key => $value) {
								$lang_name = $_languages['folder'][$key];
								if (isset($_POST[$lang_name])) {
									if (file_exists($homep.$noticef.'_'.$lang_name.$ext)) {
										$fp1 = fopen($homep.$noticef.'_'.$lang_name.$ext, 'w');
										fputs($fp1, '');
										fclose($fp1);
									}
								}
							}
						}
						fclose($fp);
					} else {
						$errorMsg .= "<br/>\n".get_lang('HomePageFilesNotWritable');
					}
				} else {
					//File does not exist
					$fp = fopen($homep.$noticef.'_'.$lang.$ext, 'w');
					fputs($fp, "<b>$notice_title</b><br />\n$notice_text");
					fclose($fp);
				}
				Event::addEvent(
                    LOG_HOMEPAGE_CHANGED,
                    'edit_notice',
                    cut(strip_tags($notice_title), 254),
                    api_get_utc_datetime(),
                    api_get_user_id()
                );
				break;
			case 'edit_news':
				//Filter
				$home_news = trim(stripslashes($_POST['home_news']));

				//Write
				if ($s_languages_news != 'all') {
					if (file_exists($homep.$newsf.'_'.$s_languages_news.$ext)) {
						if (is_writable($homep.$newsf.'_'.$s_languages_news.$ext)) {
							$fp = fopen($homep.$newsf.'_'.$s_languages_news.$ext, 'w');
							fputs($fp, $home_news);
							fclose($fp);
						} else {
							$errorMsg = get_lang('HomePageFilesNotWritable');
						}
					} else {
						// File does not exist
						$fp = fopen($homep.$newsf.'_'.$s_languages_news.$ext, 'w');
						fputs($fp, $home_news);
						fclose($fp);
					}
				} else {
					// We update all the news file
					foreach ($_languages['name'] as $key => $value) {
						$english_name = $_languages['folder'][$key];
						if (file_exists($homep.$newsf.'_'.$english_name.$ext)) {
							if (is_writable($homep.$newsf.'_'.$english_name.$ext)) {
								$fp = fopen($homep.$newsf.'_'.$english_name.$ext, 'w');
								fputs($fp, $home_news);
								fclose($fp);
							} else {
								$errorMsg = get_lang('HomePageFilesNotWritable');
							}
						} else {
							// File does not exist
							$fp = fopen($homep.$newsf.'_'.$english_name.$ext, 'w');
							fputs($fp, $home_news);
							fclose($fp);
						}
					}
				}
				Event::addEvent(
                    LOG_HOMEPAGE_CHANGED,
                    'edit_news',
                    strip_tags(cut($home_news, 254)),
                    api_get_utc_datetime(),
                    api_get_user_id()
                );
				break;
			case 'insert_tabs':
			case 'edit_tabs':
			case 'insert_link':
			case 'edit_link':
				$link_index     = intval($_POST['link_index']);
				$insert_where   = intval($_POST['insert_where']);
				$link_name      = trim(stripslashes($_POST['link_name']));
				$link_url       = trim(stripslashes($_POST['link_url']));
				$add_in_tab     = intval($_POST['add_in_tab']);
				$link_html = trim(stripslashes($_POST['link_html']));
				$filename = trim(stripslashes($_POST['filename']));
				$target_blank = $_POST['target_blank'] ? true : false;

				if ($link_url == 'http://' || $link_url == 'https://') {
					$link_url = '';
				} elseif (!empty($link_url) && !strstr($link_url, '://')) {
					$link_url='http://'.$link_url;
				}
				$menuf = ($action == 'insert_tabs' || $action == 'edit_tabs')? $mtloggedin : $menuf;

				if (!is_writable($homep.$menuf.'_'.$lang.$ext)) {
					$errorMsg = get_lang('HomePageFilesNotWritable');
				} elseif (empty($link_name)) {
					$errorMsg = get_lang('PleaseEnterLinkName');
				} else {
					// New links are added as new files in the home/ directory
					if ($action == 'insert_link' || $action == 'insert_tabs' || empty($filename) || strstr($filename, '/') || !strstr($filename, '.html')) {
						$filename = api_replace_dangerous_char($link_name).'.html';
					}

					// "home_" prefix for links are renamed to "user_" prefix (to avoid name clash with existing home page files)
					if (!empty($filename)) {
						$filename = str_replace('home_', 'user_', $filename);
					}
					// If the typical language suffix is not found in the file name,
					// replace the ".html" suffix by "_en.html" or the active menu language
					if (!strstr($filename,'_'.$lang.$ext)) {
						$filename = str_replace($ext, '_'.$lang.$ext, $filename);
					}
					// Get the contents of home_menu_en.html (or active menu language
					// version) into $home_menu as an array of one entry per line
					$home_menu = file($homep.$menuf.'_'.$lang.$ext);
					$home_menu = implode("\n", $home_menu);
					$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
					$home_menu = explode("\n", $home_menu);
					$home_menu = array_values(array_filter(array_map('trim', $home_menu), 'strlen'));
					// Prepare place to insert the new link into (default is end of file)
					if ($insert_where < -1 || $insert_where > (sizeof($home_menu) - 1)) {
						$insert_where = sizeof($home_menu) - 1;
					}
					//
					// For each line of the file, remove trailing spaces and special chars
					//foreach ($home_menu as $key => $enreg) {
					//	$home_menu[$key] = trim($enreg);
					//}
					//
					// If the given link url is empty, then replace the link url by a link to the link file created

					if (empty($link_url) || $link_url == 'http://' ||  $link_url == 'https://') {
						$link_url = api_get_path(WEB_PATH).'index.php?include='.urlencode($filename);
						// If the file doesn't exist, then create it and
						// fill it with default text

						$fp = @fopen($homep.$filename, 'w');
						if ($fp) {
							if (empty($link_html)) {
								fputs($fp, get_lang('MyTextHere'));
								home_tabs($homep.$filename);
							} else {
								fputs($fp, $link_html);
								home_tabs($homep.$filename);
							}
							fclose($fp);
						}
					}
					// If the requested action is to edit a link, open the file and
					// write to it (if the file doesn't exist, create it)
					if (in_array($action, array('edit_link'))  && !empty($link_html)) {
						$fp = @fopen($homep.$filename, 'w');
						if ($fp) {
							fputs($fp, $link_html);
							home_tabs($homep.$filename);
							fclose($fp);
						}
					}

					$class_add_in_tab = 'class="show_menu"';
					if (!$add_in_tab) {
						$class_add_in_tab = 'class="hide_menu"';
					}

					// If the requested action is to create a link, make some room
					// for the new link in the home_menu array at the requested place
					// and insert the new link there
                    $icon = '<i class="fa fa-external-link"></i>';
					if ($action == 'insert_link' || $action == 'insert_tabs') {
						for ($i = sizeof($home_menu); $i; $i--) {
							if ($i > $insert_where) {
								$home_menu[$i] = $home_menu[$i - 1];
							} else {
								break;
							}
						}
						$home_menu[$insert_where + 1] = '<li '.$class_add_in_tab.'><a href="'.$link_url.'" target="'.($target_blank ? '_blank' : '_self').'">'.$icon.' '.$link_name.'</a></li>';
					} else {
						// If the request is about a link edition, change the link
						$home_menu[$link_index]='<li '.$class_add_in_tab.'><a href="'.$link_url.'" target="'.($target_blank?'_blank':'_self').'">'.$icon.' '.$link_name.'</a></li>';
					}
					// Re-build the file from the home_menu array
					$home_menu = implode("\n", $home_menu);
					// Write
					if (file_exists($homep.$menuf.'_'.$lang.$ext)) {
						if (is_writable($homep.$menuf.'_'.$lang.$ext)) {
							$fp = fopen($homep.$menuf.'_'.$lang.$ext, 'w');
							fputs($fp, $home_menu);
							home_tabs($homep.$menuf.'_'.$lang.$ext);
							fclose($fp);

							foreach ($_languages['name'] as $key => $value) {
								$lang_name = $_languages['folder'][$key];
								if (isset($_POST[$lang_name])) {
									$fp = fopen($homep.$menuf.'_'.$lang_name.$ext, 'w');
									fputs($fp, $home_menu);
									home_tabs($homep.$menuf.'_'.$lang_name.$ext);
									fclose($fp);
								}
							}

							if (file_exists($homep.$menuf.$ext)) {
								if (is_writable($homep.$menuf.$ext)) {
									$fpo = fopen($homep.$menuf.$ext, 'w');
									fputs($fpo, $home_menu);
									home_tabs($homep.$menuf.$ext);
									fclose($fpo);
								}
							}
						} else {
							$errorMsg = get_lang('HomePageFilesNotWritable');
						}
					} else {
						//File does not exist
						$fp = fopen($homep.$menuf.'_'.$lang.$ext, 'w');
						fputs($fp, $home_menu);
						home_tabs($homep.$menuf.'_'.$lang.$ext);
						fclose($fp);

						foreach ($_languages['name'] as $key => $value) {
							$lang_name = $_languages['folder'][$key];
							if (isset($_POST[$lang_name])) {
								$fp = fopen($homep.$menuf.'_'.$lang_name.$ext, 'w');
								fputs($fp, $home_menu);
								home_tabs($homep.$menuf.'_'.$lang_name.$ext);
								fclose($fp);
							}
						}
					}
				}
				Event::addEvent(
					LOG_HOMEPAGE_CHANGED,
					$action,
					cut($link_name . ':' . $link_url, 254),
					api_get_utc_datetime(),
					api_get_user_id()
				);
				break;
		} //end of switch($action)

		if (empty($errorMsg)) {
			header('Location: '.api_get_self().'?language='.$languageGet);
			exit();
		}
	} else {
		//if POST[formSent] is not set
		switch ($action) {
			case 'open_link':
				// Previously, filtering of GET['link'] was done here but it left
				// a security threat. Filtering has now been moved outside conditions
				break;
			case 'delete_tabs':
			case 'delete_link':
				// A link is deleted by getting the file into an array, removing the
				// link and re-writing the array to the file
				$link_index = intval($_GET['link_index']);
				$menuf = ($action == 'delete_tabs')? $mtloggedin : $menuf;
				$home_menu = @file($homep.$menuf.'_'.$lang.$ext);
				if (empty($home_menu)) {
					$home_menu = array();
				}
				foreach ($home_menu as $key => $enreg) {
					if ($key == $link_index) {
						unset($home_menu[$key]);
					} else {
						$home_menu[$key] = trim($enreg);
					}
				}
				$home_menu = implode("\n", $home_menu);
				$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));

				$fp = fopen($homep.$menuf.'_'.$lang.$ext, 'w');
				fputs($fp, $home_menu);
				home_tabs($homep.$menuf.'_'.$lang.$ext);
				fclose($fp);
				if (file_exists($homep.$menuf.$ext)) {
					if (is_writable($homep.$menuf.$ext)) {
						$fpo = fopen($homep.$menuf.$ext,'w');
						fputs($fpo, $home_menu);
						home_tabs($homep.$menuf.$ext);
						fclose($fpo);
					}
				}
				header('Location: '.api_get_self());
				exit();
				break;
			case 'edit_top':
				// This request is only the preparation for the update of the home_top
				$home_top = '';
				if (is_file($homep.$topf.'_'.$lang.$ext) && is_readable($homep.$topf.'_'.$lang.$ext)) {
					$home_top = @(string)file_get_contents($homep.$topf.'_'.$lang.$ext);
				} elseif (is_file($homep.$topf.$lang.$ext) && is_readable($homep.$topf.$lang.$ext)) {
					$home_top = @(string)file_get_contents($homep.$topf.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}
				$home_top = api_to_system_encoding($home_top, api_detect_encoding(strip_tags($home_top)));
				break;
			case 'edit_notice':
				// This request is only the preparation for the update of the home_notice
				$home_notice = '';
				if (is_file($homep.$noticef.'_'.$lang.$ext) && is_readable($homep.$noticef.'_'.$lang.$ext)) {
					$home_notice = @file($homep.$noticef.'_'.$lang.$ext);
				} elseif (is_file($homep.$noticef.$lang.$ext) && is_readable($homep.$noticef.$lang.$ext)) {
					$home_notice = @file($homep.$noticef.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}
				if (empty($home_notice)) {
					$home_notice = array();
				}
				$notice_title = strip_tags($home_notice[0]);
				$notice_title = api_to_system_encoding($notice_title, api_detect_encoding($notice_title));
				$notice_text = strip_tags(str_replace('<br />', "\n", $home_notice[1]), '<a>');
				$notice_text = api_to_system_encoding($notice_text, api_detect_encoding(strip_tags($notice_text)));
				break;
			case 'edit_news':
				// This request is the preparation for the update of the home_news page
				$home_news = '';
				if (is_file($homep.$newsf.'_'.$lang.$ext) && is_readable($homep.$newsf.'_'.$lang.$ext)) {
					$home_news = @(string)file_get_contents($homep.$newsf.'_'.$lang.$ext);
				} elseif (is_file($homep.$newsf.$lang.$ext) && is_readable($homep.$newsf.$lang.$ext)) {
					$home_news = @(string)file_get_contents($homep.$newsf.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}
				$home_news = api_to_system_encoding($home_news, api_detect_encoding(strip_tags($home_news)));
				break;
			case 'insert_link':
				// This request is the preparation for the addition of an item in home_menu
				$home_menu = '';
				$menuf = ($action == 'edit_tabs')? $mtloggedin : $menuf;
				if (is_file($homep.$menuf.'_'.$lang.$ext) && is_readable($homep.$menuf.'_'.$lang.$ext)) {
					$home_menu = @file($homep.$menuf.'_'.$lang.$ext);
				} elseif(is_file($homep.$menuf.$lang.$ext) && is_readable($homep.$menuf.$lang.$ext)) {
					$home_menu = @file($homep.$menuf.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}
				if (empty($home_menu)) {
					$home_menu = array();
				}
				if (!empty($home_menu)) {
					$home_menu = implode("\n", $home_menu);
					$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
					$home_menu = explode("\n", $home_menu);
				}
				$home_menu = array_values(array_filter(array_map('trim', $home_menu), 'strlen'));
				break;
			case 'insert_tabs':
				// This request is the preparation for the addition of an item in home_menu
				$home_menu = '';
				if (is_file($homep.$mtloggedin.'_'.$lang.$ext) && is_readable($homep.$mtloggedin.'_'.$lang.$ext)) {
					$home_menu = @file($homep.$mtloggedin.'_'.$lang.$ext);
				} elseif (is_file($homep.$mtloggedin.$lang.$ext) && is_readable($homep.$mtloggedin.$lang.$ext)) {
					$home_menu = @file($homep.$mtloggedin.$lang.$ext);
				} elseif (touch($homep.$mtloggedin.'_'.$lang.$ext)) {
					$home_menu = @file($homep.$mtloggedin.'_'.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}
				if (empty($home_menu)) {
					$home_menu = array();
				}
				if (!empty($home_menu)) {
					$home_menu = implode("\n", $home_menu);
					$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
					$home_menu = explode("\n", $home_menu);
				}
				$home_menu = array_values(array_filter(array_map('trim', $home_menu), 'strlen'));
				break;
			case 'edit_tabs':
			case 'edit_link':
				// This request is the preparation for the edition of the links array
				$home_menu = '';
				$menuf = ($action == 'edit_tabs')? $mtloggedin : $menuf;
				if (is_file($homep.$menuf.'_'.$lang.$ext) && is_readable($homep.$menuf.'_'.$lang.$ext)) {
					$home_menu = @file($homep.$menuf.'_'.$lang.$ext);
				} elseif(is_file($homep.$menuf.$lang.$ext) && is_readable($homep.$menuf.$lang.$ext)) {
					$home_menu = @file($homep.$menuf.$lang.$ext);
				} else {
					$errorMsg = get_lang('HomePageFilesNotReadable');
				}

				if (empty($home_menu)) {
					if (file_exists($homep.$menutabs.'_'.$lang.$ext)) {
						$home_menu = @file($homep.$menutabs.'_'.$lang.$ext);
					}
				}

				if (empty($home_menu)) {
					$home_menu = array();
				}
				if (!empty($home_menu)) {
					$home_menu = implode("\n", $home_menu);
					$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
					$home_menu = explode("\n", $home_menu);
				}

				$link_index = intval($_GET['link_index']);

				$target_blank = false;
				$link_name = '';
				$link_url = '';

				//$home_menu_new = array();
				//
				//Cleaning array
				//foreach ($home_menu as $item) {
				//	if(!empty($item)) {
				//		$home_menu_new[] = $item;
				//	}
				//}
				//$home_menu = $home_menu_new;

				// Cleaning the array
				$home_menu = array_values(array_filter(array_map('trim', $home_menu), 'strlen'));

				// For each line of the home_menu file
				foreach ($home_menu as $key => $enreg) {

					// Check if the current item is the one we want to update
					if ($key == $link_index) {
						// This is the link we want to update
						// Check if the target should be "_blank"
						if (strstr($enreg, 'target="_blank"')) {
							$target_blank = true;
						}

						if (strstr($enreg, 'hide_menu')) {
							$add_in_tab = false;
						} else {
							$add_in_tab = true;
						}

						// Remove dangerous HTML tags from the link itself (this is an
						// additional measure in case a link previously contained
						// unsecure tags)
						$link_name = strip_tags($enreg);

						// Get the contents of "href" attribute in $link_url
						$enreg = explode('href="',$enreg);
						list($link_url) = explode('"', $enreg[sizeof($enreg) - 1]);

						// If the link contains the web root of this portal, then strip
						// it off and keep only the name of the file that needs edition
						if (strstr($link_url, '?include=')) {
							$link_url = explode('?include=', $link_url);

							$filename = $link_url[sizeof($link_url) - 1];

							if (!strstr($filename, '/') && strstr($filename, '.html')) {
								// Get oonly the contents of the link file
								$link_html = @file($homep.$filename);
								$link_html = implode('', $link_html);
								$link_url = '';
							} else {
								$filename = '';
							}
						}
						break;
					}
				}
				break;
		}//end of second switch($action) (when POST['formSent'] was not set, yet)
	}// end of "else" in if($_POST['formSent']) condition
} else {
	//if $action is empty, then prepare a list of the course categories to display (?)
	$Categories = getCategoriesToDisplayInHomePage();
}

// Display section

Display::display_header($tool_name);

switch ($action) {
	case 'open_link':
		if (!empty($link)) {
			// $link is only set in case of action=open_link and is filtered
			$open = @(string)file_get_contents($homep.$link);
			$open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
			echo $open;
		}
		break;
	case 'edit_notice':
		// Display for edit_notice case
		?>
		<form action="<?php echo api_get_self(); ?>?action=<?php echo $action; ?>" method="post" style="margin:0px;">
			<legend><?php echo $tool_name; ?></legend>
			<input type="hidden" name="formSent" value="1"/>
			<?php
			if (!empty($errorMsg)) {
				Display::display_normal_message($errorMsg);
			}
			?>
			<table border="0" cellpadding="5" cellspacing="0">
				<tr><td colspan="2"><?php echo '<span style="font-style: italic;">'.get_lang('LetThoseFieldsEmptyToHideTheNotice').'</span>'; ?></tr>
				<tr>
					<td nowrap="nowrap"><?php echo get_lang('NoticeTitle'); ?> :</td>
					<td><input type="text" name="notice_title" size="30" maxlength="50" value="<?php echo $notice_title; ?>" style="width: 350px;"/></td>
				</tr>
				<tr>
					<td nowrap="nowrap" valign="top"><?php echo get_lang('NoticeText'); ?> :</td>
					<td><textarea name="notice_text" cols="30" rows="5" wrap="virtual" style="width: 350px;"><?php echo $notice_text; ?></textarea></td>
				</tr>
				<tr>
					<td><label><?php echo get_lang('ApplyAllLanguages'); ?></label>
					<td><input type="checkbox" name="all_langs" value="<?php echo get_lang('ApplyAllLanguages'); ?>"/></td>
				</tr>
				<tr>
					<td>&nbsp;</td>
					<td><button class="save" type="submit" value="<?php echo get_lang('Ok'); ?>"><?php echo get_lang('Ok'); ?></button></td>
				</tr>
			</table>
		</form>
		<?php
		break;
	case 'insert_tabs':
	case 'edit_tabs':
	case 'insert_link':
	case 'edit_link':
		$menuf = ($action == 'insert_tabs' || $action == 'edit_tabs') ? $mtloggedin : $menuf;
		if (!empty($errorMsg)) {
			Display::display_normal_message($errorMsg);
		}
		$default = array();
		$form = new FormValidator('configure_homepage_'.$action, 'post', api_get_self().'?action='.$action, '', array('style' => 'margin: 0px;'));
		$renderer =& $form->defaultRenderer();

		$form->addElement('header', '', $tool_name);
		$form->addElement('hidden', 'formSent', '1');
		$form->addElement('hidden', 'link_index', ($action == 'edit_link' || $action == 'edit_tabs') ? $link_index : '0');
		$form->addElement('hidden', 'filename', ($action == 'edit_link' || $action == 'edit_tabs') ? (!empty($filename) ? $filename : '') : '');

		$form->addElement('text', 'link_name', get_lang('LinkName'), array('size' => '30', 'maxlength' => '50'));
		if (!empty($link_name)) {
			$default['link_name'] = $link_name;
		}
		$default['link_url'] = empty($link_url) ? 'http://' : api_htmlentities($link_url, ENT_QUOTES);
		$linkUrlComment = ($action == 'insert_tabs') ? get_lang('Optional').'<br />'.get_lang('GlobalLinkUseDoubleColumnPrivateToShowPrivately') : '';
		$form->addElement('text', 'link_url', array(get_lang('LinkURL'), $linkUrlComment), array('size' => '30', 'maxlength' => '100', 'style' => 'width: 350px;'));

		$options = array('-1' => get_lang('FirstPlace'));

		$selected = '';

		if ($action == 'insert_link' || $action == 'insert_tabs') {
			$add_in_tab = 1;
			if (is_array($home_menu)){
				foreach ($home_menu as $key => $enreg) {
					if (strlen($enreg = trim(strip_tags($enreg))) > 0) {
						$options[$key] = get_lang('After').' &quot;'.$enreg.'&quot;';
						$formSentCheck = (!empty($_POST['formSent']) ? true : false);
						$selected = $formSentCheck && $insert_where == $key ? $key : '';
					}
				}
			}
			$default['insert_link'] = $selected;
			$form->addElement('select', 'insert_where', get_lang('InsertThisLink') , $options);
		}

		$target_blank_checkbox = $form->addElement('checkbox', 'target_blank', null, get_lang('OpenInNewWindow'), 1);

		if ($action == 'insert_tabs' || $action == 'edit_tabs') {
			$form->addElement('checkbox', 'add_in_tab', null, get_lang('AddInMenu'), 1);
			$default['add_in_tab'] = $add_in_tab;
		}

		if (!empty($target_blank)) { $target_blank_checkbox->setChecked(true); }

		if ($action == 'edit_link' && (empty($link_url) || $link_url == 'http://' || $link_url == 'https://')) {
			$default['link_html'] = isset($_POST['link_html']) ? $_POST['link_html'] : $link_html;
			$form->addHtmlEditor('link_html', get_lang('Content'), false, false, array('ToolbarSet' => 'PortalHomePage', 'Width' => '100%', 'Height' => '400'));
            $form->addButtonSave(get_lang('Save'),'submit');

		} else {
			if (in_array($action, array('edit_tabs','insert_tabs'))) {
				$default['link_html'] = isset($_POST['link_html']) ? $_POST['link_html'] : (!empty($link_html) ? $link_html : '');
				$form->addHtmlEditor('link_html', get_lang('Content'), false, false, array('ToolbarSet' => 'PortalHomePage', 'Width' => '100%', 'Height' => '400'));
			}
			$form->addElement('checkbox', 'all_langs', null, get_lang('ApplyAllLanguages'), array('id' => 'all_langs'));
			$form->addElement('html','<table id="table_langs" style="margin-left:159px;"><tr>');
			$i = 0;
			foreach ($_languages['name'] as $key => $value) {
				$i++;
				$lang_name = $_languages['folder'][$key];
				$html_langs = '<td width="300">';
				$html_langs .= '<label><input type="checkbox" id="lang" name="'.$lang_name.'" />&nbsp;'.$lang_name.'<label/>';
				$html_langs .= '</td>';
				if ($i % 5 == 0) {
					$html_langs .= '</tr><tr>';
				}
				$form->addElement('html', $html_langs);
			}
			$form->addElement('html','</tr></table><br/>');
            $form->addButtonSave(get_lang('Save'),'submit');
		}

		$form->setDefaults($default);
		$form->display();

		break;
	case 'edit_top':
	case 'edit_news':
		if ($action == 'edit_top') {
			$name = $topf;
			$open = $home_top;
		} else {
			$name = $newsf;
			$open = @(string)file_get_contents($homep.$newsf.'_'.$lang.$ext);
		}
		$open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));

		if (!empty($errorMsg)) {
			Display::display_normal_message($errorMsg); //main API
		}

		$default = array();
		$form = new FormValidator(
			'configure_homepage_'.$action,
			'post',
			api_get_self().'?action='.$action,
			'',
			array('style' => 'margin: 0px;')
		);
		$renderer =& $form->defaultRenderer();
		$renderer->setHeaderTemplate('');
		$renderer->setFormTemplate('<form{attributes}><table border="0" cellpadding="5" cellspacing="0" width="100%">{content}</table></form>');
		$renderer->setCustomElementTemplate('<tr><td>{element}</td></tr>');
		$renderer->setRequiredNoteTemplate('');
		$form->addElement('hidden', 'formSent', '1');

		if ($action == 'edit_news') {
			$_languages = api_get_languages();
			$html = '<tr><td>'.get_lang('ChooseNewsLanguage').' : ';
			$html .= '<select name="news_languages">';
			$html .= '<option value="all">'.get_lang('ApplyAllLanguages').'</option>';
			foreach ($_languages['name'] as $key => $value) {
				$english_name = $_languages['folder'][$key];
				if ($language == $english_name) {
					$html .= '<option value="'.$english_name.'" selected="selected">'.$value.'</option>';
				} else {
					$html .= '<option value="'.$english_name.'">'.$value.'</option>';
				}
			}
			$html .= '</select></td></tr>';
			$form->addElement('html', $html);
		}

		$default[$name] = str_replace('{rel_path}', api_get_path(REL_PATH), $open);
		$form->addHtmlEditor($name, '', true, false, array('ToolbarSet' => 'PortalHomePage', 'Width' => '100%', 'Height' => '400'));
		$form->addElement('checkbox', 'all_langs', null, get_lang('ApplyAllLanguages'),array('id' => 'all_langs'));
		$form->addElement('html','<table id="table_langs" style="margin-left:5px;"><tr>');

		$currentLanguage = api_get_interface_language();
		$i = 0;
		foreach ($_languages['name'] as $key => $value) {
			$lang_name = $_languages['folder'][$key];
			$i++;

			$checked = null;
			if ($languageGet == $lang_name)  {
				$checked = "checked";
			}
			$html_langs = '<td width="300">';
			$html_langs .= '<label><input type="checkbox" '.$checked.' id="lang" name="'.$lang_name.'" />&nbsp;'.$value.'<label/>';
			$html_langs .= '</td>';
			if ($i % 5 == 0) {
				$html_langs .= '</tr><tr>';
			}
			$form->addElement('html', $html_langs);
		}
		$form->addElement('html','</tr></table><br/>');
		$form->addButtonSave(get_lang('Save'));
		$form->setDefaults($default);
		$form->display();

		break;
	default: // When no action applies, default page to update campus homepage
		?>
		<table border="0" cellpadding="5" cellspacing="0" width="100%">
			<tr>
				<td width="70%" valign="top">
					<div class="actions">
						<a href="<?php echo api_get_self(); ?>?action=edit_top&language=<?php echo $languageGet; ?>">
							<?php Display::display_icon('edit.gif', get_lang('EditHomePage')); ?>
						</a>
						<a href="<?php echo api_get_self(); ?>?action=edit_top&language=<?php echo $languageGet; ?>">
							<?php echo get_lang('EditHomePage'); ?>
						</a>
					</div>

					<table border="0" cellpadding="5" cellspacing="0" width="100%">
						<tr>
							<td colspan="2">
								<?php
								//print home_top contents
								if (file_exists($homep.$topf.'_'.$lang.$ext)) {
									$home_top_temp = @(string)file_get_contents($homep.$topf.'_'.$lang.$ext);
								} else {
									$home_top_temp = @(string)file_get_contents($homep.$topf.$ext);
								}
								$open = str_replace('{rel_path}', api_get_path(REL_PATH), $home_top_temp);
								$open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
								echo $open;
								?>
							</td>
						</tr>
						<tr>
							<?php

							$access_url_id = 1;
							// we only show the category options for the main chamilo installation
							if (api_is_multiple_url_enabled()) {
								$access_url_id = api_get_current_access_url_id();
							}
							echo '<td width="50%">';
							if ($access_url_id == 1) {
								echo '<div class="actions">';
								echo '<a href="course_category.php">'.Display::display_icon('edit.gif', get_lang('Edit')).'</a>
					  <a href="course_category.php">'.get_lang('EditCategories').'</a>';
								echo '</div>';
							}
							echo '</td>
				  <td width="50%">
				  <br />';
							/* <!--<a href="<?php echo api_get_self(); ?>?action=edit_news"><?php Display::display_icon('edit.gif', get_lang('Edit')); ?></a> <a href="<?php echo api_get_self(); ?>?action=edit_news"><?php echo get_lang('EditNews'); ?></a>--> */
							echo '</td></tr>
				<tr>
				<td width="50%" valign="top">
				<table border="0" cellpadding="5" cellspacing="0" width="100%">';
							if ($access_url_id == 1) {
								if (sizeof($Categories)) {
									foreach ($Categories as $enreg) {
										echo '<tr><td>'.Display::return_icon('folder_document.gif', $enreg['name']).'&nbsp;'.$enreg['name'].'</td></tr>';
									}
									unset($Categories);
								} else {
									echo get_lang('NoCategories');
								}
							}

							echo '</table>';
							?>
							</td>
							<!--<td width="50%" valign="top">
				<?php
							if (file_exists($homep.$newsf.'_'.$lang.$ext)) {
								$open = @(string)file_get_contents($homep.$newsf.'_'.$lang.$ext);
								$open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
								echo $open;
							} else {
								$open = @(string)file_get_contents($homep.$newsf.$ext);
								$open = api_to_system_encoding($open, api_detect_encoding(strip_tags($open)));
								echo $open;
							}
							?>
			  </td>-->
						</tr>
					</table>
					<?php

					// Add new page

					$home_menu = '';

					if (file_exists($homep.$mtloggedin.'_'.$lang.$ext)) {
						$home_menu = @file($homep.$mtloggedin.'_'.$lang.$ext);
					} else {
						$home_menu = @file($homep.$mtloggedin.$ext);
					}

					if (empty($home_menu)) {
						if (file_exists($homep.$menutabs.'_'.$lang.$ext)) {
							$home_menu = @file($homep.$menutabs.'_'.$lang.$ext);
						}
					}

					if (empty($home_menu)) {
						$home_menu = array();
					}

					if (!empty($home_menu)) {
						$home_menu = implode("\n", $home_menu);
						$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
						$home_menu = explode("\n", $home_menu);
					}
					$link_list = '';
					$tab_counter = 0;
					foreach ($home_menu as $enreg) {
						$enreg = trim($enreg);
						if (!empty($enreg)) {
							$edit_link   = ' <a href="'.api_get_self().'?action=edit_tabs&amp;link_index='.$tab_counter.'" ><span>'.Display::return_icon('edit.gif', get_lang('Edit')).'</span></a>';
							$delete_link = ' <a href="'.api_get_self().'?action=delete_tabs&amp;link_index='.$tab_counter.'"  onclick="javascript: if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'), ENT_QUOTES)).'\')) return false;"><span>'.Display::return_icon('delete.gif', get_lang('Delete')).'</span></a>';
							$tab_string = str_replace(array('href="'.api_get_path(WEB_PATH).'index.php?include=', '</li>'),
								array('href="'.api_get_path(WEB_CODE_PATH).'admin/'.basename(api_get_self()).'?action=open_link&link=', $edit_link.$delete_link.'</li>'),
								$enreg);
							$tab_string = str_replace(array('<li>', '</li>','class="hide_menu"', 'hide_menu'), '', $tab_string);

							$link_list .= Display::tag('tr', Display::tag('td', $tab_string));
							$tab_counter++;
						}
					}
					?>
					<div class="actions">
						<a href="<?php echo api_get_self(); ?>?action=insert_tabs"><?php Display::display_icon('addd.gif', get_lang('InsertLink')); echo get_lang('InsertLink'); ?></a>
					</div>
					<?php
					echo '<table class="data_table">';
					echo $link_list;
					echo '</table>';
					?>
				</td>
				<td width="10%" valign="top"></td>
				<td width="20%" rowspan="3" valign="top">
					<div id="login_block" class="well sidebar-nav">
						<?php echo api_display_language_form(); ?>
						<form id="formLogin">
							<div><label><?php echo get_lang('LoginName'); ?></label></div>
							<div><input type="text" id="login" size="15" value="" disabled="disabled" /></div>
							<div><label><?php echo get_lang('UserPassword'); ?></label></div>
							<div><input type="password" id="password" size="15" value="" disabled="disabled" /></div>
							<div><button class="btn btn-default" type="button" name="submitAuth" value="<?php echo get_lang('Ok'); ?>" disabled="disabled"><?php echo get_lang('Ok'); ?></button></div>
						</form>
					</div>

					<div id="profile_block" class="well sidebar-nav">
						<h4><?php echo get_lang('MenuUser'); ?></h4>
						<ul class="nav nav-list">
							<li><span style="color: #9D9DA1; font-weight: bold;"><?php echo api_ucfirst(get_lang('Registration')); ?></span></li>
							<li><span style="color: #9D9DA1; font-weight: bold;"><?php echo api_ucfirst(get_lang('LostPassword')); ?></span></li>
						</ul>
					</div>

					<div id="notice_block" class="well sidebar-nav">
						<h4><?php echo get_lang('Notice'); ?>
							<a href="<?php echo api_get_self(); ?>?action=edit_notice"><?php Display::display_icon('edit.png', get_lang('Edit'), array(), ICON_SIZE_SMALL); ?></a>
						</h4>
						<?php
						$home_notice = '';
						if (file_exists($homep.$noticef.'_'.$lang.$ext)) {
							$home_notice = @(string)file_get_contents($homep.$noticef.'_'.$lang.$ext);
						} else {
							$home_notice = @(string)file_get_contents($homep.$noticef.$ext);
						}
						$home_notice = api_to_system_encoding($home_notice, api_detect_encoding(strip_tags($home_notice)));
						echo '<div class="homepage_notice">';
						echo $home_notice;
						echo '</div>';
						?>
					</div>
					<div class="well sidebar-nav">
						<a href="<?php echo api_get_self(); ?>?action=insert_link"><?php Display::display_icon('addd.gif', get_lang('InsertLink')); ?></a>
						<a href="<?php echo api_get_self(); ?>?action=insert_link"><?php echo get_lang('InsertLink'); ?></a>
						<h4><?php echo api_ucfirst(get_lang('General')); ?></h4>
						<ul class="menulist">
							<?php
							$home_menu = '';
							if (file_exists($homep.$menuf.'_'.$lang.$ext)) {
								$home_menu = @file($homep.$menuf.'_'.$lang.$ext);
							} else {
								$home_menu = @file($homep.$menuf.$ext);
							}
							if (empty($home_menu)) {
								$home_menu = array();
							}
							if (!empty($home_menu)) {
								$home_menu = implode("\n", $home_menu);
								$home_menu = api_to_system_encoding($home_menu, api_detect_encoding(strip_tags($home_menu)));
								$home_menu = explode("\n", $home_menu);
							}
							$i = 0;
							foreach ($home_menu as $enreg) {
								$enreg = trim($enreg);
								if (!empty($enreg)) {
									$edit_link = '<a href="'.api_get_self().'?action=edit_link&amp;link_index='.$i.'">'.Display::return_icon('edit.gif', get_lang('Edit')).'</a>';
									$delete_link = '<a href="'.api_get_self().'?action=delete_link&amp;link_index='.$i.'" onclick="javascript:if(!confirm(\''.addslashes(api_htmlentities(get_lang('ConfirmYourChoice'), ENT_QUOTES)).'\')) return false;">'.Display::return_icon('delete.gif', get_lang('Delete')).'</a>';
									echo str_replace(array('href="'.api_get_path(WEB_PATH).'index.php?include=', '</li>'), array('href="'.api_get_path(WEB_CODE_PATH).'admin/'.basename(api_get_self()).'?action=open_link&link=', '<br />'.$edit_link.' '.$delete_link.'</li>'), $enreg);
									$i++;
								}
							}
							?>
						</ul>
					</div>
				</td>
			</tr>
		</table>
		<?php
		break;
}
Display::display_footer();
