<?php

	/*
		Sample Image Upload or Output
		---------------------------------------------
		David Book, buzztouch.com
		04/29/2010

		Re-save this file with a .PHP extention and place in on your PHP enabled web-server then read 1, 2, 3, 4
		
		
		CAUTION: THERE ARE NO SECURITY MEASURES TAKEN IN THIS SCRIPT. It is your responsibility to ensure the data
		you process does not harm your backend systems. 
	
		1) 	If this .PHP page is accessed via a regular browser, an upload form will show. The idea is that you can
			use this upload form to test your server configuration to make sure it can process image uploads before
			including it in your mobile app.
			
		2) 	If an image is uploaded from the a HTML form, it will re-display the form along with
			the images already uploaded to verify that it's working. This test is done with your regular browser, 
			not a mobile device.	
	
			***************************************
			*	IF #1 and #2 test work as expected.....add the Image Upload screen to your app then....
			***************************************
	
		3) 	If a mobile device POSTS's an image to this script it will save the image to the image directory then
			print a JSON result that is returned to the device. The script knows the device posted the image
			(and not the regular browser) when it finds a deviceId in the posted form variables. 

			The device will send up to 10 variables along with the image data when uploading. You can insert 
			these values in a database, ignore them, or use them in other creative ways. See the .PHP script below
			to see what variables it will try to send.

			When an upload occurs from a device, the final output of this script will look like this. 
			This is the format the mobile device expects. "valid" or "invalid" is returned, along with a message.
		
			{"result":"valid", "message":"The image was uploaded"}
		
			OR
		
			{"result":"failed", "message":"There was a problem saving the uploaded image"}
		
		 	If a mobile device sets this file as the dataURL for an Image Gallery, AND includes it's deviceId in the
			querystring, it will output JSON data to power the Image Gallery.
	
	*/
	
	

	/////////////////////////////////////////////////////////////////
	// SET THESE 3 VARIABLES TO YOUR NEEDS

	//max upload size, 8388608 is about 8MB, should probably be smaller?
	$maxUploadSize = 8388608;
		
	//The URL to prepend to images file names. Do not include the trailing slash (/)
	$urlToThisDirectory = "http://www.yourdomain.com/writeableImageFolder";
	
	//writeable image directory. It's assumed that this script is in the same directory as the images.
	$imageDirPath = "."; 
	
	/////////////////////////////////////////////////////////////////


	/////////////////////////////////////////////////////////////////
	// Variables passed by mobile device
	
	//command, will be "uploadImage"
	$command = "";
		if(isset($_POST["command"])) $command = $_POST["command"];	
		if(isset($_GET["command"])) $command = $_GET["command"];	
	
	//buzztouchAppId from control panel
	$buzztouchAppId = "";
		if(isset($_POST["buzztouchAppId"])) $buzztouchAppId = $_POST["buzztouchAppId"];	
		if(isset($_GET["buzztouchAppId"])) $buzztouchAppId = $_GET["buzztouchAppId"];	

	//buzztouchAPIKey from control panel
	$buzztouchAPIKey = "";
		if(isset($_POST["buzztouchAPIKey"])) $buzztouchAPIKey = $_POST["buzztouchAPIKey"];	
		if(isset($_GET["buzztouchAPIKey"])) $buzztouchAPIKey = $_GET["buzztouchAPIKey"];	

	//screenGuid from control panel
	$screenGuid = "";
		if(isset($_POST["screenGuid"])) $screenGuid = $_POST["screenGuid"];	
		if(isset($_GET["screenGuid"])) $screenGuid = $_GET["screenGuid"];	

	//userId for user if user is logged into app
	$userId = "";
		if(isset($_POST["userId"])) $userId = $_POST["userId"];	
		if(isset($_GET["userId"])) $userId = $_GET["userId"];	

	//userLogInId for user if user is logged into app
	$userLogInId = "";
		if(isset($_POST["userLogInId"])) $userLogInId = $_POST["userLogInId"];	
		if(isset($_GET["userLogInId"])) $userLogInId = $_GET["userLogInId"];	

	//deviceId, guaranteed unique id for device, provided by carrier and manufacture
	$deviceId = "";
		if(isset($_POST["deviceId"])) $deviceId = $_POST["deviceId"];	
		if(isset($_GET["deviceId"])) $deviceId = $_GET["deviceId"];	

		//some device include carriage in their id's returns, get rid of them!
		$deviceId = str_replace("\n\r", "", $deviceId);
		$deviceId = str_replace("\n", "", $deviceId);
		$deviceId = str_replace("\r", "", $deviceId);


	//deviceLatitude, decimal location if available. 0 (zero) or "" if not available.
	$deviceLatitude = "";
		if(isset($_POST["deviceLatitude"])) $deviceLatitude = $_POST["deviceLatitude"];	
		if(isset($_GET["deviceLatitude"])) $deviceLatitude = $_GET["deviceLatitude"];	
		if(!is_numeric($deviceLatitude)) $deviceLatitude = "0";
		
	//deviceLongitude, decimal location if available. 0 (zero) or "" if not available.
	$deviceLongitude = "";
		if(isset($_POST["deviceLongitude"])) $deviceLongitude = $_POST["deviceLongitude"];	
		if(isset($_GET["deviceLongitude"])) $deviceLongitude = $_GET["deviceLongitude"];	
		if(!is_numeric($deviceLongitude)) $deviceLongitude = "0";


	//deviceModel, description of device as provided by manufacturer.
	$deviceModel = "";
		if(isset($_POST["deviceModel"])) $deviceModel = $_POST["deviceModel"];	
		if(isset($_GET["deviceModel"])) $deviceModel = $_GET["deviceModel"];	
		
		//some device include carriage returns in their model names, get rid of them!
		$deviceModel = str_replace("\n\r", "", $deviceModel);
		$deviceModel = str_replace("\n", "", $deviceModel);
		$deviceModel = str_replace("\r", "", $deviceModel);
	
	/////////////////////////////////////////////////////////////////



	//when outputting images for an Image Gallery each image needs a unique BT_itemId, use this function to create one
	function fnCreateGuid(){
		$RandomStr_1 = md5(microtime()); 
		$RandomStr_2 = md5(microtime()); 
		$randomString = substr($RandomStr_2, 4, 4) . substr($RandomStr_1, 0, 15); 
		return $randomString;
	}
	
	//must be POST http method
	$reqMethod = "";
	if(isset($_SERVER["REQUEST_METHOD"])){
		$reqMethod = $_SERVER['REQUEST_METHOD'];
	}
	
	
	/////////////////////////////////////////////////////////////////////////////////////////////////////////
	if(strtoupper($reqMethod) == "POST"){
		
		//result, this is what we return after processing the upload. Return "failed" or "valid"
		$result = "failed";
		
		//information about the process returned in the JSON
		$message = "";
		
		//screen directory should exist now
		if(is_dir($imageDirPath)){
			if(is_writable($imageDirPath)){
				if(!empty($_FILES)){
					
					$tmpName = $_FILES['userfile']['tmp_name'];
					$size = $_FILES['userfile']['size'];
					if(!is_numeric($size)) $size = 0;
					$type = $_FILES['userfile']['type'];
					$name = $_FILES['userfile']['name'];
					
					//append the deviceId to the front of the image to prevent overwrites
					$name = trim(strtolower($deviceId) . "-" . $name);
					
					if($size < $maxUploadSize){
						if(move_uploaded_file($_FILES['userfile']['tmp_name'], $imageDirPath . "/" . $name)) {
							$result = "valid";

							//return this message									
							$message .= "Image saved successfully";
					
						}else{
							$message = "The server could not save the uploaded image";
						}
					}else{
						$message = "The uploaded image is too large for the server to handle";
					}
				}else{
					$message = "The server could not access the uploaded image";
				}
			}else{
				$message = "The image upload directory on the server is not writeable";
			}
		}else{
				$message = "The image upload directory on the server does not exist";
		}
	
		
		//if we have a deviceId, print the output then end the execution
		if(strlen($deviceId) > 0){
		
			//output
			echo "{\"status\":\"" . $result . "\", \"message\":\"" . $message . "\"}";
			exit();
		
		}
	
	}//POST method
	/////////////////////////////////////////////////////////////////////////////////////////////////////////


	/////////////////////////////////////////////////////////////////////////////////////////////////////////
	//GET requests with a deviceId should output all the images in the directory. 
	//This JSON output is used to power an Image Gallery Screen.
	if(strtoupper($reqMethod) == "GET" && strlen($deviceId) > 0){
		
		//start the JSON output
		$JSON = "{\"childItems\":[";
		
		//loop all the files in this directory and add image files to the JSON
		if(is_dir($imageDirPath)){
			if($handle = opendir($imageDirPath)){
				while (false !== ($file = readdir($handle))) {
					if(strlen($file) > 5){
				
						//image files must end with .jpg, .jpgeg or .png
						$ext = substr(strrchr($file, '.'), 1);
						
						//get rid of invalid returns in file name
						$file = str_replace("\n\r", "", $file);
						$file = str_replace("\n", "", $file);
						$file = str_replace("\r", "", $file);
						
						if(strtoupper($ext) == "JPG" || strtoupper($ext) == "JPEG" || strtoupper($ext) == "PNG"){
							$JSON .= "\n{\"itemId\":\"" . strtoupper(fnCreateGuid()) . "\",";
							$JSON .= "\"itemType\":\"BT_imageItem\", ";
							$JSON .= "\"imageName\":\"" . $file . "\",";
							$JSON .= "\"imageURL\":\"" . $urlToThisDirectory . "/" . $file . "\"},";
						}						
					}
				}
			}										
		}	
		
		
		//remove the comma after last image so JSON is valid
		$JSON = trim($JSON);
		if(substr(strtoupper($JSON), (strlen($JSON) - 1), 1) == ","){
			$JSON = substr($JSON, 0, strlen($JSON) - 1);
		}	
		
		//end the JSON
		$JSON .= "\n]}";					
		
		//print the output
		echo $JSON;
		exit();
		
		
	}//GET method
	/////////////////////////////////////////////////////////////////////////////////////////////////////////




	
	
	/*############################################################################################################
		The HTML form below will only show if the deviceId variable is empty. The form is desiged to allow you to 
		test the script using your regular browser.	
	############################################################################################################## */
	
	
	
?>	
	


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Sample Image Upload and Output</title>
</head>

<body>

<p>
	Use this page to test the web-server that handles your image uploads. 
    <hr>
    <ol>
    	<li>Save this file to your PHP enabled webserver with a .php extension. Example: image-upload.php</li>
        <li>Be sure the directory you save it in has "write" permissions. This is necessary to save the images when they are uploaded.</li>
        <li>Using your regular browser on your computer, visit the web-address at the location you saved the file on your
        	server. Example: http://www.mywebsite.com/imageuploader/image-upload.php</li>
        <li>Using your regular browser, test the script by uploading an image to make sure it works.</li>
        <li>After you confirm that your server is able to accept and save uploaded images, create an Image Gallery screen and
        	set the dataURL to this file with the deviceId appended to the end. YOU MUST INCLUDE THE DEVICEID IN THE URL
            OR THE IMAGE GALLERY WILL NOT WORK. Example: http://www.mywebsite.com/imageuploader/image-upload.php?deviceId=[deviceId]
            THe mobile app will merge the actual deviceId.
        </li>

    </ol>
</p>
<p>
	If your PHP enabled web-server is setup properly and allows file uploads (the folder is writeable) you will see each image you upload
    in a list.
</p>

<form id="frmMain" action="" method="post" enctype="multipart/form-data"  >

    <input type="hidden" name="command" id="command" value"<?php echo $command;?>"/>
    <input type="hidden" name="screenGuid" id="screenGuid" value"999999999"/>
	<input type="file" name="userfile" size="30" />
	<input type="submit" value="Upload"/>

</form>

<hr>
	
   Images in this directory
   <p>
   
   <?php

	//output all the images in this directory.
	if(is_dir($imageDirPath)){
		if($handle = opendir($imageDirPath)){
			while (false !== ($file = readdir($handle))) {
				if(strlen($file) > 5){
				
					//image files must end with .jpg, .jpgeg or .png
					$ext = substr(strrchr($file, '.'), 1);
					
					if(strtoupper($ext) == "JPG" || strtoupper($ext) == "JPEG" || strtoupper($ext) == "PNG"){
				
						echo "<img src='" . $urlToThisDirectory . "/" . $file . "' style='margin:5px;'/><br/>";
				
					}
					
				}
			}
		}										
	}	
	
	?>
    
</p>	




</body>
</html>