<?php
# $Id$
# http://www.mapbender.org/index.php/security_proxy.php
# Copyright (C) 2002 CCGIS 
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2, or (at your option)
# any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

ob_start();
session_start();

require_once("../classes/class_stripRequest.php");
require_once("../classes/class_mb_exception.php");
include("../../conf/mapbender.conf");

$mr = urldecode($_REQUEST["mb_ows_security_proxy"]);
$perm = false;

$r = new stripRequest($mr);
$width = $r->get("width");
$height = $r->get("height");
$format = $r->get("format");
$request = $r->get("request");

# strRequest und überprüfen ob getMap, getfeat


function validatePermission($gui, $mr){
	global $DBSERVER,$OWNER,$PW;
	$con = db_connect($DBSERVER,$OWNER,$PW);
	db_select_db(DB,$con);
	$column = "wms_getmap"; # flexible
	$xperm = false;
	$sql = "SELECT ".$column." FROM gui_wms INNER JOIN wms ON gui_wms.fkey_wms_id = wms.wms_id ";
	$sql .= " WHERE gui_wms.fkey_gui_id = '".$gui."'";
	$res = db_query($sql);
	$cnt = 0;
	while(db_fetch_row($res)){
		$prefix = "http://wms1.ccgis.de/mapbender22/extensions/security_proxy.php?mb_ows_security_proxy=";
		if(strpos($mr,str_replace($prefix,"",mysql_result($res,$cnt,0))) === 0){
			$xperm = true;	
		}
		$cnt++;
	}
	
	return $xperm;
}

if(isset($_SESSION["mb_user_id"]) && isset($_SESSION["mb_user_ip"]) && $_SESSION['mb_user_ip'] == $_SERVER['REMOTE_ADDR']){
	$perm = validatePermission($_SESSION["mb_user_gui"], $mr);
}
# HEADER:
ob_clean();
if(strtolower($format) == 'image/png' || strtolower($format) == 'png'){
	header ("Content-type: image/png");
}
if(strtolower($format) == 'image/jpeg' || strtolower($format) == 'jpeg'){
	header ("Content-type: image/jpeg");
}
if(strtolower($format) == 'image/gif' || strtolower($format) == 'gif'){
	header ("Content-type: image/gif");
}
# OUTPUT:

if($perm == true){
	$mr = str_replace("localhost","192.168.0.101",$mr);
#    $mr = str_replace(",Grenze,Bundeslaender,Staedte,Postleitzahlbereiche,Bahnlinien,Fluesse,Strassen,Staedtepunkte,Staedtenamen","",$mr);
#    $mr = str_replace("mapserv","mapserv46",$mr);
	$im = imagecreate($width, $height);
	$white = ImageColorAllocate($im,255,255,255);
    $red =  ImageColorAllocate($im,255,0,0);
	ImageFilledRectangle($im,0,0,$width,$height,$white);
    if(strtolower($format) == 'image/png' || strtolower($format) == 'png'){
		$i = @ImageCreateFromPNG($mr);
	}
	if(strtolower($format) == 'image/jpeg' || strtolower($format) == 'jpeg'){
		$i = @ImageCreateFromJPEG($mr);
	}
	if(strtolower($format) == 'image/gif' || strtolower($format) == 'gif'){
		$i = @ImageCreateFromGIF($mr);
	}
    
    if($i){    
	    imagecopy($im, $i, 0, 0, 0, 0, $width, $height);
    }
    else{
    	$e = new mb_exception("error while loading imgage: ".$mr);
    	$text_color = ImageColorAllocate ($im, 233, 14, 91);
		ImageString ($im, 1, 5, 5, "error loading image.", $text_color);
    }
    imagepng($im);
#    readfile($mr);
}
else{
	$im = @ImageCreate ($width, $height);
	$background_color = ImageColorAllocate ($im, 255, 255, 255);
	imagecolortransparent($im, $background_color);
	$text_color = ImageColorAllocate ($im, 233, 14, 91);
	ImageString ($im, 1, 5, 5, "Permission denied.", $text_color);
	if(strtolower($format) == 'image/png' || strtolower($format) == 'png'){
		ImagePNG ($im);
	}
	if(strtolower($format) == 'image/jpeg' || strtolower($format) == 'jpeg'){
		Imagejpeg ($im);
	}
	if(strtolower($format) == 'image/gif' || strtolower($format) == 'gif'){
		ImageGIF ($im);
	}
}
?>