<?php
/**
    Fotoo Hosting v1.1.0
    Copyright 2010 BohwaZ - http://dev.kd2.org/
    Licensed under the GNU AGPLv3

    This software is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This software is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this software. If not, see <http://www.gnu.org/licenses/>.
*/

error_reporting(E_ALL);

if (!version_compare(phpversion(), '5.2', '>='))
{
    die("You need at least PHP 5.2 to use this application.");
}

if (!class_exists('SQLite3'))
{
    die("You need PHP SQLite3 extension to use this application.");
}

define('UPLOAD_ERR_INVALID_IMAGE', 42);

error_reporting(E_ALL);

class FotooException extends Exception {}

function exception_error_handler($errno, $errstr, $errfile, $errline )
{
    // For @ ignored errors
    if (error_reporting() === 0) return;
    throw new ErrorException($errstr, 0, $errno, $errfile, $errline);
}

set_error_handler("exception_error_handler");

require_once dirname(__FILE__) . '/lib.image.php';

$default_style = '
    * { margin: 0; padding: 0; }
    body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; background: #fff; color: #000; padding: 1em; }
    h2, h3, h4, p { margin-bottom: 0.8em; }
    input[type=text], textarea { color: #000; background: #fff; border: 1px solid #000; -moz-border-radius: 3px; border-radius: 3px; }
    h1, #footer, #page, #header { text-align: center; font-size: 1em; max-width: 60em; margin: 0.5em auto; }
    h1 a { font-size: 2em; color: #000; }
    #header a { color: #666; }
    #header { color: #999; font-size: 0.9em; }
    .error { color: red; }
    form dl dt { font-weight: bold; padding: 0.4em 0; width: 25%; float: left; clear: left; text-align: right; margin-bottom: 1em; }
    form dl dd { margin-left: 30%; text-align: left; margin-bottom: 1em; }
    #f_preview_item { margin-top: 1em; }
    input#f_name, input#f_file { padding: 0.3em; width: 80%; }
    dd.private { padding: 0.4em; }
    dd.private input { padding: 0.2em; margin-right: 1em; }
    p.submit { width: 100%; }
    p.submit img { display: none; }
    p.submit input { padding: 0.3em; font-size: 1.2em; cursor: pointer; }
    p.uploading input { display: none; }
    p.uploading img { display: inline; }
    #footer { margin-top: 2em; border-top: 1px solid #ccc; padding: 0.5em; text-align: center; }
    .examples textarea, .examples input { width: 95%; padding: 0.3em; font-family: Sans-serif; font-size: 11px; }
    .examples dt { font-weight: bold; padding: 0.5em; }
    a img { border: none; }
    p.thumb img { background-image: url("bg.png"); border: 1px solid #999; max-width: 100%; }
    p.info { color: #999; font-size: 0.9em; }
    p.info a { color: #666; }
    table.list { width: 100%; }
    table.list td { width: 20%; height: 12em; margin: 1em; vertical-align: bottom; padding: 0; overflow: hidden; }
    table.list td a { font-weight: bold; color: #000; }
    table.list td .thumb img { background: url("bg.png"); border: 1px solid #999; max-width: 10em; max-height: 9em; }
    table.list td.thumb { background: url("bg.png"); border: 1px solid #999; }
    table.list td.thumb div { background: no-repeat center center; width: 100%; height: 12em; }
    table.list td.thumb a.trick { display: block; width: 100%; height: 10.5em; }
    table.list td.thumb a { color: #fff; text-shadow: #000 0 0 5px; }
    .pagination { list-style-type: none; text-align: center; }
    .pagination li { display: inline; margin: 0.5em; }
    .pagination a { color: #666; }
    .pagination .selected a { font-weight: bold; font-size: 1.3em; color: #000; }
    .admin { color: red; text-align: center; }
    .admin a { color: red; font-size: 1.3em; border: 2px outset #ccc; padding: 5px; }
';

class Fotoo_Hosting_Config
{
    private $db_file = null;
    private $storage_path = null;

    private $base_url = null;
    private $storage_url = null;
    private $image_page_url = null;

    private $max_width = null;
    private $max_height = null;

    private $thumb_width = null;
    private $thumb_height = null;

    private $title = null;
    private $style = null;

    private $max_file_size = null;
    private $allow_upload = null;
    private $nb_pictures_by_page = null;

    private $enable_admin = null;

    public function __set($key, $value)
    {
        switch ($key)
        {
            case 'max_width':
            case 'max_height':
            case 'thumb_width':
            case 'thumb_height':
            case 'max_file_size':
            case 'nb_pictures_by_page':
                $this->$key = (int) $value;
                break;
            case 'db_file':
            case 'storage_path':
            case 'base_url':
            case 'storage_url':
            case 'title':
            case 'style':
            case 'image_page_url':
                $this->$key = (string) $value;
                break;
            case 'allow_upload':
            case 'enable_admin':
                $this->$key = is_bool($value) ? (bool) $value : $value;
                break;
            case 'allowed_formats':
                if (is_string($value))
                {
                    $this->$key = explode(',', strtoupper(str_replace(' ', '', $value)));
                }
                else
                {
                    $this->$key = (array) $value;
                }
                break;
            default:
                throw new FotooException("Unknown configuration property $key");
        }
    }

    public function __get($key)
    {
        if (isset($this->$key))
            return $this->$key;
        else
            throw new FotooException("Unknown configuration property $key");
    }

    public function exportJSON()
    {
        $vars = get_object_vars($this);

        unset($vars['db_file']);
        unset($vars['storage_path']);

        return json_encode($vars);
    }

    public function exportPHP()
    {
        $vars = get_object_vars($this);

        $out = "<?php\n\n";
        $out.= '// Do not edit the line below';
        $out.= "\n";
        $out.= 'if (!isset($config) || !($config instanceof Fotoo_Hosting_Config)) die("Invalid call.");';
        $out.= "\n\n";
        $out.= '// To edit one of the following configuration options, comment it out and change it';
        $out.= "\n\n";

        foreach ($vars as $key=>$value)
        {
            $out .= "// ".wordwrap($this->getComment($key), 70, "\n// ")."\n";
            $line = '$config->'.$key.' = '.var_export($value, true).";";

            if (strpos($line, "\n") !== false)
                $out .= "/*\n".$line."\n*/\n\n";
            else
                $out .= '#'.$line."\n\n";
        }

        $out.= "\n?>";

        return $out;
    }

    public function getComment($key)
    {
        switch ($key)
        {
            case 'max_width':       return 'Max image width, bigger images will be resized.';
            case 'max_height':      return 'Max image height, bigger images will be resized.';
            case 'thumb_width':     return 'Thumb width, used for creating thumbnails.';
            case 'thumb_height':    return 'Thumb height, used for creating thumbnails.';
            case 'max_file_size':   return 'Maximum uploaded file size (in bytes). By default it\'s the maximum size allowed by the PHP configuration. See the FAQ for more informations.';
            case 'nb_pictures_by_page': return 'Number of images to display on each page in the pictures list.';
            case 'db_file':         return 'Path to the SQLite DB file.';
            case 'storage_path':    return 'Path to where the pictures are stored.';
            case 'base_url':        return 'URL of the webservice index.';
            case 'storage_url':     return 'URL to where the pictures are stored. Filename is added at the end.';
            case 'title':           return 'Title of the service.';
            case 'style':           return 'CSS style used on the pages.';
            case 'image_page_url':  return 'URL to the picture information page, hash is added at the end.';
            case 'allow_upload':    return 'Allow upload of files? You can use this to restrict upload access. Can be a boolean or a PHP callback. See the FAQ for more informations.';
            case 'enable_admin':    return 'Enable admin interface? (edit/delete files, see private pictures)';
            case 'allowed_formats': return 'Allowed formats, separated by a comma';
            default: return '';
        }
    }

    public function __construct()
    {
        // Defaults
        $this->db_file = dirname(__FILE__) . '/datas.db';
        $this->storage_path = dirname(__FILE__) . '/i/';
        $this->base_url = 'http://'. $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']);

        if ($this->base_url[strlen($this->base_url) - 1] != '/')
            $this->base_url .= '/';

        $this->storage_url = $this->base_url . str_replace(dirname(__FILE__) . '/', '', $this->storage_path);
        $this->image_page_url = $this->base_url . '?';

        if (substr(basename($_SERVER['PHP_SELF']), 0, 5) != 'index')
            $this->base_url .= basename($_SERVER['PHP_SELF']);

        $this->max_width = 1920;
        $this->max_height = 1200;
        $this->thumb_width = 320;
        $this->thumb_height = 240;

        $this->title = 'Fotoo Image Hosting service';
        $this->style = $GLOBALS['default_style'];

        $size = self::return_bytes(ini_get('upload_max_filesize'));
        $post = self::return_bytes(ini_get('post_max_size'));

        if ($post < $size)
            $size = $post;

        $memory = self::return_bytes(ini_get('memory_limit'));

        if ($memory < $size)
            $size = $memory;

        $this->max_file_size = $size;
        $this->allow_upload = true;
        $this->enable_admin = false;
        $this->nb_pictures_by_page = 20;

        $this->allowed_formats = array('PNG', 'JPEG', 'GIF', 'SVG', 'XCF');
    }

    static public function return_bytes ($size_str)
    {
        switch (substr($size_str, -1))
        {
            case 'G': case 'g': return (int)$size_str * pow(1024, 3);
            case 'M': case 'm': return (int)$size_str * pow(1024, 2);
            case 'K': case 'k': return (int)$size_str * 1024;
            default: return $size_str;
        }
    }
}

class Fotoo_Hosting
{
    static private $base_index = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';

    private $db = null;
    private $config = null;

    public function __construct(&$config)
    {
        $init = file_exists($config->db_file) ? false : true;
        $this->db = new SQLite3($config->db_file);

        if (!$this->db)
        {
            throw new FotooException("SQLite database init error.");
        }

        if ($init)
        {
            $this->db->exec('
                CREATE TABLE pictures (
                    hash TEXT PRIMARY KEY NOT NULL,
                    filename TEXT NOT NULL,
                    date INT NOT NULL,
                    format TEXT NOT NULL,
                    width INT NOT NULL,
                    height INT NOT NULL,
                    thumb INT NOT NULL DEFAULT 0,
                    private INT NOT NULL DEFAULT 0,
                    size INT NOT NULL DEFAULT 0
                );

                CREATE INDEX date ON pictures (private, date);
            ');
        }

        $this->config =& $config;

        if (!file_exists($config->storage_path))
            mkdir($config->storage_path);
    }

    static private function baseConv($num, $base=null)
    {
        if (is_null($base))
            $base = strlen(self::$base_index);

        $index = substr(self::$base_index, 0, $base);

        $out = "";
        for ($t = floor(log10($num) / log10($base)); $t >= 0; $t--)
        {
            $a = floor($num / pow($base, $t));
            $out = $out . substr($index, $a, 1);
            $num = $num - ($a * pow($base, $t));
        }

        return $out;
    }

    static public function getErrorMessage($error)
    {
        switch ($error)
        {
            case UPLOAD_ERR_INI_SIZE:
                return 'The uploaded file exceeds the allowed file size (ini).';
            case UPLOAD_ERR_FORM_SIZE:
                return 'The uploaded file exceeds the allowed file size (html).';
            case UPLOAD_ERR_PARTIAL:
                return 'The uploaded file was only partially uploaded.';
            case UPLOAD_ERR_NO_FILE:
                return 'No file was uploaded.';
            case UPLOAD_ERR_NO_TMP_DIR:
                return 'Missing a temporary folder.';
            case UPLOAD_ERR_CANT_WRITE:
                return 'Failed to write file to disk.';
            case UPLOAD_ERR_EXTENSION:
                return 'A server extension stopped the file upload.';
            case UPLOAD_ERR_INVALID_IMAGE:
                return 'Invalid image format.';
            default:
                return 'Unknown error.';
        }
    }

    public function upload($file, $name = '', $private = false)
    {
        if (!isset($file['error']))
        {
            return false;
        }

        if ($file['error'] != UPLOAD_ERR_OK)
        {
            throw new FotooException("Upload error.", $file['error']);
        }

        if (!empty($name))
        {
            $name = preg_replace('!\s+!', '-', $name);
            $name = preg_replace('![^a-z0-9_.-]!i', '', $name);
            $name = preg_replace('!([_.-]){2,}!', '\\1', $name);
            $name = substr($name, 0, 30);
        }

        if (!trim($name))
        {
            $name = '';
        }

        $options = array();
        $options[image::USE_GD_FAST_RESIZE_TRICK] = true;
        $ext = false;

        if (!preg_match('!\.(\w+)$!i', $file['name'], $match))
        {
            $ext = strtolower($match[1]);
        }

        // Pour les formats exotiques, on essaye Imagick
        if ($ext != 'jpeg' && $ext != 'png' && $ext != 'jpg' && $ext != 'gif')
        {
            $options[image::FORCE_IMAGICK] = true;
        }

        $img = image::identify($file['tmp_name'], $options);

        if (empty($img) || empty($img['format']) || empty($img['width']) || empty($img['height'])
            || !in_array($img['format'], $this->config->allowed_formats))
        {
            @unlink($file['tmp_name']);
            throw new FotooException("Invalid image format.", UPLOAD_ERR_INVALID_IMAGE);
        }

        if ($img['format'] == 'PNG' || $img['format'] == 'JPEG' || $img['format'] == 'GIF')
        {
            $options[image::FORCE_IMAGICK] = false;
        }

        $size = filesize($file['tmp_name']);

        $hash = md5($file['tmp_name'] . time() . $img['width'] . $img['height'] . $img['format'] . $size . $file['name']);
        $dest = $this->config->storage_path . substr($hash, -2);

        if (!file_exists($dest))
            mkdir($dest);

        $base = self::baseConv(hexdec(uniqid()));
        $dest .= '/' . $base;
        $ext = '.' . strtolower($img['format']);

        if (trim($name) && !empty($name))
            $dest .= '.' . $name;

        $width = ($img['width'] > $this->config->max_width) ? $this->config->max_width : $img['width'];
        $height = ($img['height'] > $this->config->max_height) ? $this->config->max_height : $img['height'];

        // If JPEG or big PNG/GIF, then resize (always resize JPEG to reduce file size)
        if ($img['format'] == 'JPEG' || (($img['format'] == 'GIF' || $img['format'] == 'PNG') && $file['size'] > (1024 * 1024)))
        {
            $res = image::resize(
                $file['tmp_name'],
                $dest . $ext,
                $width,
                $height,
                array(
                    image::JPEG_QUALITY => 80,
                    image::USE_GD_FAST_RESIZE_TRICK => true
                )
            );

            if (!$res)
            {
                return false;
            }
            else
            {
                list($width, $height) = $res;
            }
        }
        else
        {
            move_uploaded_file($file['tmp_name'], $dest . $ext);
        }

        $size = filesize($dest . $ext);

        // Create thumb when needed
        if ($width > $this->config->thumb_width || $height > $this->config->thumb_height
            || $size > (100 * 1024) || ($img['format'] != 'JPEG' && $img['format'] != 'PNG'))
        {
            $options[image::JPEG_QUALITY] = 70;
            $thumb_ext = '.s.' . strtolower($img['format']);

            if ($img['format'] != 'JPEG' && $img['format'] != 'PNG')
            {
                $options[image::FORCE_OUTPUT_FORMAT] = 'JPEG';
                $thumb_ext = '.s.jpeg';
            }

            image::resize(
                $dest . $ext,
                $dest . $thumb_ext,
                ($width > $this->config->thumb_width) ? $this->config->thumb_width : $width,
                ($height > $this->config->thumb_height) ? $this->config->thumb_height : $height,
                $options
            );

            $thumb = true;
        }
        else
        {
            $thumb = false;
        }

        $hash = substr($hash, -2) . '/' . $base;

        $this->db->exec('INSERT INTO pictures (hash, filename, date, format,
            width, height, thumb, private, size)
            VALUES (
                \''.$this->db->escapeString($hash).'\',
                \''.$this->db->escapeString($name).'\',
                \''.time().'\',
                \''.$img['format'].'\',
                \''.(int)$width.'\',
                \''.(int)$height.'\',
                \''.(int)$thumb.'\',
                \''.($private ? '1' : '0').'\',
                \''.(int)$size.'\'
            );');

        return $hash;
    }

    public function get($hash)
    {
        $res = $this->db->querySingle(
            'SELECT * FROM pictures WHERE hash = \''.$this->db->escapeString($hash).'\';',
            true
        );

        if (empty($res))
            return false;

        $file = $this->_getPath($res);
        $th = $this->_getPath($res, 's');

        if (!file_exists($file))
        {
            if (file_exists($th))
                @unlink($th);

            $this->db->exec('DELETE FROM pictures WHERE hash = \''.$res['hash'].'\';');
            return false;
        }

        return $res;
    }

    public function remove($hash)
    {
        $img = $this->get($hash);

        $file = $this->_getPath($img);

        if (file_exists($file))
            unlink($file);

        return $this->get($hash) ? false : true;
    }

    public function getList($page)
    {
        $begin = ($page - 1) * $this->config->nb_pictures_by_page;
        $where = $this->config->enable_admin ? '' : 'WHERE private != 1';

        $out = array();
        $res = $this->db->query('SELECT * FROM pictures '.$where.' ORDER BY date DESC LIMIT '.$begin.','.$this->config->nb_pictures_by_page.';');

        while ($row = $res->fetchArray(SQLITE3_ASSOC))
        {
            $out[] = $row;
        }

        return $out;
    }

    public function countList()
    {
        $where = $this->config->enable_admin ? '' : 'WHERE private != 1';
        return $this->db->querySingle('SELECT COUNT(*) FROM pictures '.$where.';');
    }

    protected function _getPath($img, $optional = '')
    {
        return $this->config->storage_path . $img['hash']
            . ($img['filename'] ? '.' . $img['filename'] : '')
            . ($optional ? '.' . $optional : '')
            . '.' . strtolower($img['format']);
    }

    public function getUrl($img)
    {
        return $this->config->image_page_url
            . $img['hash']
            . ($img['filename'] ? '.' . $img['filename'] : '')
            . '.' . strtolower($img['format']);
    }

    public function getImageUrl($img)
    {
        $url = $this->config->storage_url . $img['hash'];
        $url.= !empty($img['filename']) ? '.' . $img['filename'] : '';
        $url.= '.' . strtolower($img['format']);
        return $url;
    }

    public function getImageThumbUrl($img)
    {
        if (!$img['thumb'])
        {
            return $this->getImageUrl($img);
        }

        if ($img['format'] != 'JPEG' && $img['format'] != 'PNG')
        {
            $format = 'jpeg';
        }
        else
        {
            $format = strtolower($img['format']);
        }

        $url = $this->config->storage_url . $img['hash'];
        $url.= !empty($img['filename']) ? '.' . $img['filename'] : '';
        $url.= '.s.' . $format;
        return $url;
    }

    public function getShortImageUrl($img)
    {
        return $this->config->image_page_url
            . 'r.' . $img['hash'];
    }
}

$config = new Fotoo_Hosting_Config;

$config_file = dirname(__FILE__) . '/config.php';

if (file_exists($config_file))
{
    require_once $config_file;
}
elseif (isset($_GET['create_config']))
{
    file_put_contents($config_file, $config->exportPHP());
    die("Default configuration created in config.php file, edit it to change default values.");
}

// Check upload access
if (!is_bool($config->allow_upload) && is_callable($config->allow_upload))
{
    $config->allow_upload = (bool) call_user_func($config->allow_upload);
}

if (!is_bool($config->enable_admin) && is_callable($config->enable_admin))
{
    $config->enable_admin = (bool) call_user_func($config->enable_admin);
}

$fh = new Fotoo_Hosting($config);

if ($config->enable_admin && !empty($_GET['delete']))
{
    if ($fh->remove($_GET['delete']))
    {
        header('Location: '.$config->base_url);
    }
    else
    {
        echo "Can't delete picture";
    }

    exit;
}

if (isset($_GET['upload']))
{
    $error = false;

    if (empty($_FILES['upload']))
    {
        $error = UPLOAD_ERR_INI_SIZE;
    }
    else
    {
        try {
            $res = $fh->upload($_FILES['upload'],
                isset($_POST['name']) ? trim($_POST['name']) : '',
                isset($_POST['private']) ? (bool) $_POST['private'] : false
            );
        }
        catch (FotooException $e)
        {
            if ($e->getCode())
                $error = $e->getCode();
            else
                throw $e;
        }
    }

    if ($error)
    {
        if (isset($_GET['from_flash']))
        {
            echo "ERROR\n" . Fotoo_Hosting::getErrorMessage($error);
        }
        else
        {
            $url = $config->base_url . '?error=' . $error;
            $url.= isset($_GET['classic']) ? '&classic' : '';
            header('Location: ' . $url);
        }

        exit;
    }
    else
    {
        $img = $fh->get($res);
        $url = $fh->getUrl($img);

        if (isset($_GET['from_flash']))
        {
            echo "OK\n" . $url;
        }
        else
        {
            header('Location: ' . $url);
        }

        exit;
    }
}

$html = $title = '';

if (isset($_GET['list']))
{
    $title = 'Image list';

    if (!empty($_GET['list']) && is_numeric($_GET['list']))
        $page = (int) $_GET['list'];
    else
        $page = 1;

    $list = $fh->getList($page);
    $max = $fh->countList();

    $html = '
        <h2>Pictures list</h2>
        <table class="list">';

    $i = 0;

    foreach ($list as &$img)
    {
        if ($i > 0 && $i % 4 == 0)
        {
            $html .= '
            </tr>';
        }

        if ($i % 4 == 0)
        {
            $html .= '
            <tr>';
        }

        $thumb_url = $fh->getImageThumbUrl($img);
        $url = $fh->getUrl($img);

        $label = $img['filename'] ? htmlspecialchars(preg_replace('![_-]!', ' ', $img['filename'])) : 'View image';

        if ($img['thumb'] && ($img['width'] > $config->thumb_width || $img['height'] > $config->thumb_height))
        {
            $html .= '
                <td class="thumb">
                    <div style="background-image: url(\''.$thumb_url.'\');">
                        <a class="trick" href="'.$url.'"></a>
                        <a href="'.$url.'">'.$label.'</a>
                    </div>
                </td>';
        }
        else
        {
            $html .= '
                <td>
                    <p class="thumb">
                        <a href="'.$url.'"><img src="'.$thumb_url.'" alt="" /></a>
                    </p>
                    <a href="'.$url.'">'.$label.'</a>
                </td>';
        }

        $i++;
    }

    $html .= '
            </tr>
        </table>';

    if ($max > $config->nb_pictures_by_page)
    {
        $max_page = ceil($max / $config->nb_pictures_by_page);
        $html .= '
        <ul class="pagination">
        ';

        for ($p = 1; $p <= $max_page; $p++)
        {
            $html .= '<li'.($page == $p ? ' class="selected"' : '').'><a href="?list='.$p.'">'.$p.'</a></li>';
        }

        $html .= '
        </ul>';
    }
}
elseif (!isset($_GET['classic']) && !isset($_GET['error']) && !empty($_SERVER['QUERY_STRING']))
{
    $query = explode('.', $_SERVER['QUERY_STRING']);
    $hash = ($query[0] == 'r') ? $query[1] : $query[0];
    $img = $fh->get($hash);

    if (empty($img))
    {
        header('HTTP/1.1 404 Not Found', true, 404);
        echo '
            <h1>Not Found</h1>
            <p><a href="'.$config->base_url.'">'.$config->title.'</a></p>
        ';
        exit;
    }

    $img_url = $fh->getImageUrl($img);

    if ($query[0] == 'r')
    {
        header('Location: '.$img_url);
        exit;
    }

    $url = $fh->getUrl($img);
    $thumb_url = $fh->getImageThumbUrl($img);
    $short_url = $fh->getShortImageUrl($img);
    $title = $img['filename'] ? $img['filename'] : 'Image';

    // Short URL auto discovery
    header('Link: <'.$short_url.'>; rel=shorturl');

    $bbcode = '[url='.$img_url.'][img]'.$thumb_url.'[/img][/url]';
    $html_code = '<a href="'.$img_url.'"><img src="'.$thumb_url.'" alt="'.(trim($img['filename']) ? $img['filename'] : '').'" /></a>';

    $size = $img['size'];
    if ($size > (1024 * 1024))
        $size = round($size / 1024 / 1024, 2) . ' MB';
    elseif ($size > 1024)
        $size = round($size / 1024, 2) . ' KB';
    else
        $size = $size . ' B';

    $html = '
        '.(trim($img['filename']) ? '<h2>' . htmlspecialchars(strtr($img['filename'], '-_.', '   ')) . '</h2>' : '').'
        <p class="info">
            Uploaded on '.strftime('%c', $img['date']).'<br />
            Size: '.$img['width'].' x '.$img['height'].'
        </p>
        <p class="thumb">
            <a href="'.$img_url.'"><img src="'.$thumb_url.'" alt="'.htmlspecialchars($title).'" /></a>
        </p>
        <p>
            <a href="'.$img_url.'">View original file ('.$img['format'].', '.$size.')</a>
        </p>';

    if ($config->enable_admin)
    {
        $html .= '
        <p class="admin">
            <a href="?delete='.rawurlencode($img['hash']).'" onclick="return confirm(\'Really?\');">Delete image</a>
        </p>';
    }

    $html .= '
        <dl class="examples">
            <dt>BBCode</dt>
            <dd><input type="text" onclick="this.select();" value="'.htmlspecialchars($bbcode).'" /></dd>
            <dt>HTML code</dt>
            <dd><input type="text" onclick="this.select();" value="'.htmlspecialchars($html_code).'" /></dd>
            <dt>Short Image URL</dt>
            <dd><input type="text" onclick="this.select();" value="'.htmlspecialchars($short_url).'" /></dd>
        </dl>
    ';
}
elseif (!$config->allow_upload)
{
    $html = '<p class="error">Uploading is not allowed.</p>';
}
else
{
    $html = '
        <script type="text/javascript">
        var config = '.$config->exportJSON().';
        </script>
        <h2>Upload a file</h2>';

    if (isset($_GET['classic']))
    {
        $html .= '<p class="info" id="upload_switch"><a href="'.$config->base_url.'">Switch to Flash upload</a></p>';
    }
    else
    {
        $html .= '<p class="info" id="upload_switch" style="display: none;">A problem with this form? <a href="'.$config->base_url.'?classic">Switch to classic upload</a></p>';
    }

    if (!empty($_GET['error']))
    {
        $html .= '<p class="error">'.htmlspecialchars(Fotoo_Hosting::getErrorMessage($_GET['error'])).'</p>';
    }

    $html .= '
        <p class="info">
            Maximum file size: '.round($config->max_file_size / 1024 / 1024, 2).'MB
            | Maximum image dimensions: 8191x8191
            | Image types accepted: '.implode(', ', $config->allowed_formats).'
        </p>
        <form method="post" enctype="multipart/form-data" action="'.$config->base_url.'?upload'.(isset($_GET['classic']) ? '&amp;classic' :'').'" id="f_upload">
        <input type="hidden" name="MAX_FILE_SIZE" value="'.($config->max_file_size - 1024).'" />
        <dl>
            <dt><label for="f_file">File:</label></dt>
            <dd id="f_file_container"><input type="file" name="upload" id="f_file" onchange="upload.updateNameField(this.value);" /></dd>
            <dt><label for="f_name">Name:</label></dt>
            <dd><input type="text" name="name" id="f_name" maxlength="30" /></dd>
            <dt><label for="f_private">Private</label></dt>
            <dd class="private"><label><input type="checkbox" name="private" id="f_private" value="1" />
                (If checked, picture won\'t appear in pictures list)</label></dd>
        </dl>
        <p class="submit">
            <input type="submit" id="f_submit" value="Upload" />
            <img src="progress.gif" alt="" />
        </p>
        </form>
        <script type="text/javascript" src="upload.js"></script>
    ';
}

echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
    <title>'.($title ? htmlspecialchars($title) . ' - ' : '').$config->title.'</title>
    <meta name="viewport" content="width=device-width" />
    <style type="text/css">
    '.$config->style.'
    </style>
</head>

<body>
<h1><a href="'.$config->base_url.'">'.$config->title.'</a></h1>
'.($config->enable_admin ? '<p class="admin">(admin mode)</p>' : '').'
<p id="header"><a href="'.$config->base_url.'">Upload</a> | <a href="'.$config->base_url.'?list">Pictures list</a></p>
<div id="page">
    '.$html.'
</div>
<div id="footer">
    Powered by Fotoo Hosting application from <a href="http://kd2.org/">KD2.org</a>.
</div>
</body>
</html>';


?>