/************************************************************************
qDecoder - Web Application Interface for C/C++    http://www.qDecoder.org

Copyright (C) 2001 The qDecoder Project.
Copyright (C) 1999,2000 Hongik Internet, Inc.
Copyright (C) 1998 Nobreak Technologies, Inc.
Copyright (C) 1996,1997 Seung-young Kim.

This library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 2.1 of the License, or (at your option) any later version.

This library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
Lesser General Public License for more details.

You should have received a copy of the GNU Lesser General Public
License along with this library; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

Copyright Disclaimer:
  Hongik Internet, Inc., hereby disclaims all copyright interest.
  President, Christopher Roh, 6 April 2000

  Nobreak Technologies, Inc., hereby disclaims all copyright interest.
  President, Yoon Cho, 6 April 2000

  Seung-young Kim, hereby disclaims all copyright interest.
  Author, Seung-young Kim, 6 April 2000
************************************************************************/

#include "qDecoder.h"
#include "qInternal.h"


/**********************************************
** Define Paragraph
**********************************************/

#ifdef _WIN32
#define	SESSION_DEFAULT_REPOSITORY	"C:\\Windows\\Temp"
#else
#define	SESSION_DEFAULT_REPOSITORY	"/tmp"
#endif

#define SESSION_ID			"QSESSIONID"
#define SESSION_PREFIX			"qsession-"
#define SESSION_STORAGE_EXTENSION	".properties"
#define SESSION_TIMEOUT_EXTENSION	".timeout"
#define SESSION_TIMETOCLEAR_FILENAME	"qsession-timetoclear"

#define INTER_PREFIX			"_Q_"
#define INTER_SESSIONID			INTER_PREFIX "SESSIONID"
#define INTER_CREATED_GMT		INTER_PREFIX "CREATED-GMT"
#define INTER_CREATED_SEC		INTER_PREFIX "CREATED"
#define INTER_INTERVAL_SEC		INTER_PREFIX "INTERVAL"
#define INTER_CONNECTIONS		INTER_PREFIX "CONNECTIONS"

#define SESSION_DEFAULT_TIMEOUT_INTERVAL	(30 * 60)


/**********************************************
** Internal Functions Definition
**********************************************/

static int _clearRepository(void);
static int _isValidSession(char *filename);
static time_t _updateTimeout(char *filename, time_t timeout_interval);


/**********************************************
** Static Values Definition used only internal
**********************************************/

static int _session_started = 0;
static int _session_new = 0;
static int _session_modified = 0;
static Q_Entry *_session_first_entry = NULL;

static char _session_repository_path[1024];
static char _session_storage_path[1024];
static char _session_timeout_path[1024];
static time_t _session_timeout_interval = (time_t)SESSION_DEFAULT_TIMEOUT_INTERVAL; /* seconds */


/**********************************************
** Usage : qSession(Repository Path);
** Do    : Start Session.
**
** ex) qSession(NULL);   // use default storage
**     qSession("/tmp"); // use /tmp for session storage
**********************************************/
/* Initialize session data */
void qSession(char *repository) {
  int new_session;
  char *sessionkey;

  /* check if session already started */
  if(_session_started) return;
  _session_first_entry = NULL;
  _session_started = 1;
  _session_modified = 0;

  /* check content flag */
  if(qGetContentFlag() == 1) qError("qSession(): must be called before qContentType() and any stream out.");

  /* check session status & get session id */
  sessionkey = qValue(SESSION_ID);
  if(sessionkey == NULL) {  /* new session */
    sessionkey = qUniqueID();
    new_session = 1;
  }
  else {
    new_session = 0;
  }

  /* make storage path for session */
  if (repository != NULL) strcpy(_session_repository_path, repository);
  else strcpy(_session_repository_path, SESSION_DEFAULT_REPOSITORY);
  sprintf(_session_storage_path, "%s/%s%s%s", _session_repository_path, SESSION_PREFIX, sessionkey, SESSION_STORAGE_EXTENSION);
  sprintf(_session_timeout_path, "%s/%s%s%s", _session_repository_path, SESSION_PREFIX, sessionkey, SESSION_TIMEOUT_EXTENSION);

  /* validate exist session */
  if(new_session == 0) {
    if(_isValidSession(_session_timeout_path) <= 0) { /* expired or not found */
      unlink(_session_storage_path);
      unlink(_session_timeout_path);
      sessionkey = qUniqueID();

      /* remake storage path */
      sprintf(_session_storage_path, "%s/%s%s%s", _session_repository_path, SESSION_PREFIX, sessionkey, SESSION_STORAGE_EXTENSION);
      sprintf(_session_timeout_path, "%s/%s%s%s", _session_repository_path, SESSION_PREFIX, sessionkey, SESSION_TIMEOUT_EXTENSION);

      /* set flag */
      new_session = 1;
    }
  }

  /* if new session, set session id */
  if(new_session == 1) {
    char created_gmt[32], created_sec[32];
    time_t nowtime;

    qCookieSet(SESSION_ID, sessionkey, 0, "/", NULL, NULL);
    qValueAdd(SESSION_ID, sessionkey); /* force to add session_in to query list */

    /* save session informations */
    nowtime = qGetGMTime(created_gmt, (time_t)0);
    sprintf(created_sec, "%ld", (long)nowtime);

    _session_first_entry = _EntryAdd(_session_first_entry, INTER_SESSIONID, sessionkey);
    _EntryAdd(_session_first_entry, INTER_CREATED_GMT, created_gmt);
    _EntryAdd(_session_first_entry, INTER_CREATED_SEC, created_sec);
    _EntryAdd(_session_first_entry, INTER_CONNECTIONS, "1");

    /* set timeout interval */
    qSessionSetTimeout(_session_timeout_interval);
  }
  /* else read session properties */
  else {
    int conns;
    char connstr[16];

    /* read exist session informations */
    _session_first_entry = _EntryLoad(_session_storage_path);

    /* update session informations */
    conns = qSessionValueInteger(INTER_CONNECTIONS);
    sprintf(connstr, "%d", ++conns);
    _EntryAdd(_session_first_entry, INTER_CONNECTIONS, connstr);

    /* set timeout interval */
    qSessionSetTimeout((time_t)atol(qSessionValue(INTER_INTERVAL_SEC)));
  }

  /* set globals */
  _session_new = new_session;
}

/**********************************************
** Usage : qSessionAdd(name, value);
** Return: Stored String pointer of value.
** Do    : Add session value.
**
** ex) qSessionAdd("name", "qDecoder");
**     qSessionAdd("cginame", "%s", qCGIname());
**********************************************/
char *qSessionAdd(char *name, char *format, ...) {
  Q_Entry *new_entry;
  char value[1024];
  int status;
  va_list arglist;

  if(_session_started == 0) qError("qSessionAdd(): qSession() must be called before.");
  if(!strcmp(name, "")) qError("qSessionAdd(): can not add empty name.");
  if(!strncmp(name, INTER_PREFIX, strlen(INTER_PREFIX))) qError("qSessionAdd(): Name can not start with %s. It's reserved for internal uses.", INTER_PREFIX);

  va_start(arglist, format);
  status = vsprintf(value, format, arglist);
  if(strlen(value) + 1 > sizeof(value) || status == EOF) qError("qSessionAdd(): Message is too long or invalid.");
  va_end(arglist);

  new_entry = _EntryAdd(_session_first_entry, name, value);
  if(!_session_first_entry) _session_first_entry = new_entry;

  /* set modified flag */
  _session_modified = 1;

  return qSessionValue(name);
}

/**********************************************
** Usage : qSessionAddInteger(name, integer);
** Return: Stored integer value.
** Do    : Add session value of integer type.
**
** ex) qSessionAddInteger("count", 32);
**********************************************/
int qSessionAddInteger(char *name, int valueint) {
  char value[32];

  sprintf(value, "%d", valueint);
  qSessionAdd(name, value);

  return qSessionValueInteger(name);
}

/**********************************************
** Usage : qSessionUpdateInteger(name, plus integer);
** Return: Updated integer value.
** Do    : Update session value of integer type.
**
** ex) qSessionUpdateInteger("count", -4);
**********************************************/
int qSessionUpdateInteger(char *name, int plusint) {
  qSessionAddInteger(name, qSessionValueInteger(name) + plusint);

  return qSessionValueInteger(name);
}

/**********************************************
** Usage : qSessionRemove(name);
** Do    : Remove session variable.
**
** ex) qSessionRemove("name");
**     qSessionRemove("%d.name", i);
**********************************************/
void qSessionRemove(char *format, ...) {
  char name[1024];
  int status;
  va_list arglist;

  va_start(arglist, format);
  status = vsprintf(name, format, arglist);
  if(strlen(name) + 1 > sizeof(name) || status == EOF) qError("qSessionRemove(): Message is too long or invalid.");
  va_end(arglist);

  if(!strcmp(name, "")) qError("qAddRemove(): can not remove empty name.");
  if(_session_started == 0) qError("qSessionRemove(): qSession() must be called before.");
  if(!strncmp(name, INTER_PREFIX, strlen(INTER_PREFIX))) qError("qSessionRemove(): can not remove reserved words.");

  _session_first_entry = _EntryRemove(_session_first_entry, name);

  /* set modified flag */
  _session_modified = 1;
}

/**********************************************
** Usage : qSessionValue(name);
** Return: Success pointer of value string, Fail NULL.
** Do    : Return session value.
**
** ex) char *value;
**     value = qSessionValue("name");
**     value = qSessionValue("%d.name", i);
**********************************************/
char *qSessionValue(char *format, ...) {
  char name[1024], *value;
  int status;
  va_list arglist;

  if(_session_started == 0) qError("qSessionValue(): qSession() must be called before.");

  va_start(arglist, format);
  status = vsprintf(name, format, arglist);
  if(strlen(name) + 1 > sizeof(name) || status == EOF) qError("qSessionValue(): Message is too long or invalid.");
  va_end(arglist);

  value = _EntryValue(_session_first_entry, name);

  return value;
}

/**********************************************
** Usage : qSessionValueInteger(name);
** Return: Success integer of value, Fail 0.
** Do    : Return session value.
**
** ex) int value;
**     value = qSessionValueInteger("count");
**********************************************/
int qSessionValueInteger(char *format, ...) {
  char name[1024];
  int value;
  int status;
  va_list arglist;

  if(_session_started == 0) qError("qSessionValue(): qSession() must be called before.");

  va_start(arglist, format);
  status = vsprintf(name, format, arglist);
  if(strlen(name) + 1 > sizeof(name) || status == EOF) qError("qSessionValue(): Message is too long or invalid.");
  va_end(arglist);

  value = _EntryiValue(_session_first_entry, name);

  return value;
}

/**********************************************
** Usage : qSessionPrint();
** Do    : Print all session variables for debugging
**********************************************/
int qSessionPrint(void) {
  if(_session_started == 0) qError("qSessionPrint(): qSession() must be called before.");
  return _EntryPrint(_session_first_entry);
}

/**********************************************
** Usage : qSessionSave();
** Do    : Save session data immediately.
**********************************************/
void qSessionSave(void) {
  if(_session_started == 0 || _session_first_entry == NULL) return;
  if(_session_new == 1 && _session_modified == 0) return;

  if(_EntrySave(_session_first_entry, _session_storage_path) == 0) {
    qError("qSessionSave(): Can not access session repository(%s).", _session_storage_path);
  }
  if(_updateTimeout(_session_timeout_path, _session_timeout_interval) == 0) {
    qError("qSessionSave(): Can not access session repository(%s).", _session_timeout_path);
  }

  /* clear modified flag */
  _session_modified = 0;
}

/**********************************************
** Usage : qSessionFree();
** Do    : Save session data and deallocate memories.
**********************************************/
/* Free & Save */
void qSessionFree(void) {
  if(_session_started == 0) return;

  qSessionSave();
  _clearRepository();

  if(_session_first_entry) _EntryFree(_session_first_entry);
  _session_first_entry = NULL;
  _session_started = 0;
  _session_new = 0;
  _session_modified = 0;
  _session_timeout_interval = (time_t)SESSION_DEFAULT_TIMEOUT_INTERVAL;
  strcpy(_session_repository_path, "");
  strcpy(_session_storage_path, "");
  strcpy(_session_timeout_path, "");
}

/**********************************************
** Usage : qSessionDestroy();
** Do    : Destroy current session and stored all session data
**         will be removed.
**********************************************/
void qSessionDestroy(void) {
  if(_session_started == 0) qError("qSessionDestroy(): qSession() must be called before.");

  unlink(_session_storage_path);
  unlink(_session_timeout_path);
  if(_session_first_entry) _EntryFree(_session_first_entry);
  _session_first_entry = NULL;

  qSessionFree();

  if(qGetContentFlag() == 0) {
    qCookieRemove(SESSION_ID, "/", NULL, NULL);
  }
}

/**********************************************
** Usage : qSessionSetTimeout(interval seconds);
** Return: New expiration period.
** Do    : Change session expiration period.
**
** ex) qSessionSetTimeout((time_t)3600);
**********************************************/
time_t qSessionSetTimeout(time_t seconds) {
  char interval_sec[32];

  if(_session_started == 0) qError("qSessionSetTimeout(): qSession() must be called before.");
  if(seconds <= (time_t)0) qError("qSessionSetTimeout(): can not set negative interval. Use qSessionDestory() instead.");

  _session_timeout_interval = seconds;

  /* save session informations */
  sprintf(interval_sec, "%ld", (long)_session_timeout_interval);
  _EntryAdd(_session_first_entry, INTER_INTERVAL_SEC, interval_sec);

  return _session_timeout_interval;
}

/**********************************************
** Usage : qSessionGetID();
** Return: String pointer of session id.
** Do    : Return current session id.
**
** ex) char *sessionid;
**     sessionid = qSessionGetID();
**********************************************/
char *qSessionGetID(void) {
  if(_session_started == 0) qError("qSessionGetID(): qSession() must be called before.");
  return qSessionValue(INTER_SESSIONID);
}

/**********************************************
** Usage : qSessionGetCreated();
** Return: Value of time in seconds since 0 hours,
**         0 minutes, 0 seconds, January 1, 1970.
** Do    : Return session created time in seconds.
**
** ex) time_t created;
**     struct tm *gmtime;
**     created = qSessionGetCreated();
**     gmtime = gmtime(&created);
**********************************************/
time_t qSessionGetCreated(void) {
  time_t created;
  char *tmp;

  if(_session_started == 0) qError("qSessionGetCreated(): qSession() must be called before.");
  tmp = qSessionValue(INTER_CREATED_SEC);
  created = (time_t)atol(tmp);

  return created;
}

/**********************************************
** Internal Functions
**********************************************/

static int _clearRepository(void) {
#ifdef _WIN32
  return 0;
#else
  DIR *dp;
  struct dirent *dirp;/* GCCÀÏ°æ¿ì È°¼ºÈ­ */
  char timeoutpath[1024];
  int clearcnt;

  if(_session_started == 0) qError("_clearRepository(): qSession() must be called before.");
  sprintf(timeoutpath, "%s/%s", _session_repository_path, SESSION_TIMETOCLEAR_FILENAME);

  if(_isValidSession(timeoutpath) > 0) return 0; /* Valid */

  /* expired or not found, main routine start here */
  /* to prevent race condition, update time stamp first */
  if(_updateTimeout(timeoutpath, _session_timeout_interval) == 0) {
    qError("_clearRepository(): Can not access session repository(%s).", timeoutpath);
  }

  /* clear old session data */
  if((dp = opendir(_session_repository_path)) == NULL) qError("_clearRepository(): Can not access session repository(%s).", _session_repository_path);

  for (clearcnt = 0; (dirp = readdir(dp)) != NULL; ) {
    if(strstr(dirp->d_name, SESSION_PREFIX) && strstr(dirp->d_name, SESSION_TIMEOUT_EXTENSION)) {
      sprintf(timeoutpath, "%s/%s", _session_repository_path, dirp->d_name);
      if(_isValidSession(timeoutpath) <= 0) { /* expired */
        /* remove timeout */
        unlink(timeoutpath);

        /* remove properties */
        timeoutpath[strlen(timeoutpath) - strlen(SESSION_TIMEOUT_EXTENSION)] = '\0';
        strcat(timeoutpath, SESSION_STORAGE_EXTENSION);
        unlink(timeoutpath);

        clearcnt++;
      }
    }
  }

  return clearcnt;
#endif
}

/* session not found 0, session expired -1, session valid 1 */
static int _isValidSession(char *filename) {
  FILE *fp;
  time_t timeout, timenow;
  double timediff;

  if((fp = fopen(filename, "rt")) == NULL) return 0;
  fscanf(fp, "%ld", &timeout);
  fclose(fp);

  timenow = time(NULL);
  timediff = difftime(timeout, timenow); /* return timeout - timenow */

  if(timediff >= (double)0) return 1; /* valid */
  return -1; /* expired */
}

/* success > 0, write fail 0 */
static time_t _updateTimeout(char *filename, time_t timeout_interval) {
  FILE *fp;
  time_t timeout;

  timeout = time(NULL);
  timeout += timeout_interval;

  if((fp = fopen(filename, "wt")) == NULL) return 0;
  fprintf(fp, "%ld\n", (long)timeout);
  fclose(fp);

  return timeout;
}