<?php
$smarty->assign("election_year", ELECTION_YEAR);
$smarty->assign("title", "Executive Election " . ELECTION_YEAR);

function display_ballot()
{
    global $DB, $smarty, $output;

    require_once("../lib/members.php");
    $members = new Members;
    $role = $DB->GetAll("SELECT post FROM election_candidates GROUP BY post");

    foreach ($role as $post) {
        $candidate[$post['post']] = $DB->GetAll("SELECT username, manifesto_link FROM election_candidates WHERE post=? ORDER BY username ASC", $post['post']);

        $i = 0;
        foreach ($candidate[$post['post']] as $person) {
            $details = $members->memberView($person['username']);
            $candidate[$post['post']][$i]['realname'] = $details[0]['cn'];
            if (empty($person['manifesto_link'])) $candidate[$post['post']][$i]['manifesto_link'] = ELECTION_NO_MANIFESTO;
            $i++;
        }
    }

    $smarty->assign("candidate", $candidate);
    $output = $smarty->fetch('election-vote.tpl');
}


if (!$session->loggedin) {
    # You can't vote if you're not logged in!
    trigger_error("You are not logged in.", E_USER_WARNING);
} else {
    # The election hasn't started yet
    if (strtotime('now') < strtotime(ELECTION_START)) trigger_error("The polling station is not yet open. Voting begins on " . date('l jS F, Y \a\t H:i', strtotime(ELECTION_START)) . ".");

    # The election is over - display the results
    else if (strtotime('now') > strtotime(ELECTION_END)) {
        require_once("../lib/members.php");
        $members = new Members;
        $role = $DB->GetAll("SELECT post FROM election_candidates GROUP BY post");

        foreach ($role as $post) {
            $candidate[$post['post']] = $DB->GetAll("SELECT username, manifesto_link FROM election_candidates WHERE post=?", $post['post']);

            $i = 0;
            foreach ($candidate[$post['post']] as $person) {
                $details = $members->memberView($person['username']);
                $candidate[$post['post']][$i]['realname'] = $details[0]['cn'];
                if (empty($person['manifesto_link'])) $candidate[$post['post']][$i]['manifesto_link'] = ELECTION_NO_MANIFESTO;
                $candidate[$post['post']][$i]['votes'] = $DB->GetOne("SELECT count(username) FROM election_votes WHERE " . $post['post'] . "=?", array($person['username']));
                $i++;
            }
        }

        $smarty->assign("candidate", $candidate);
        $output = $smarty->fetch('election-results.tpl');
    } else {
        # It's election time
        # Check the user hasn't already voted
        $vote_details = $DB->GetRow("SELECT time, ipaddress FROM election_votes WHERE username=?", $session->username);
        if (count($vote_details) > 0) {
            trigger_error("You already voted on " . date('l jS F, Y \a\t H:i', strtotime($vote_details['time'])) . " from IP address " . $vote_details['ipaddress'] . ".", E_USER_WARNING);
            $output = "<p>Please email the Returning Officer at <a href=\"mailto:vote@sucs.org\">vote@sucs.org</a> with any queries.</p>\n<p>Once polling has closed on " . date('l jS F, Y \a\t H:i', strtotime(ELECTION_END)) . ", the election results will be available on this page.</p>";
        } else {
            if ($_POST['submit'] == "Cast Votes") {
                # We have a ballot paper to process
                $output = "<h2>Thank you for your vote</h2>\n<p>You will shortly receive an email confirming your vote.</p>\n<p>Once polling has closed on " . date('l jS F, Y \a\t H:i', strtotime(ELECTION_END)) . ", the election results will be available on this page.</p>";

                # Establish which positions are contested
                $role = $DB->GetCol("SELECT post FROM election_candidates GROUP BY post HAVING count(username) > 1");

                $fail = FALSE;
                $invalid_candidate = FALSE;
                $abstain_count = 0;
                foreach ($role as $post) {
                    if ($_POST[$post] == "abstain") $abstain_count++;
                    # check that we have a valid option selected
                    if (!($DB->GetOne("SELECT username FROM election_candidates WHERE post=? AND username=?", array($post, $_POST[$post])) || $_POST[$post] == "abstain")) $fail = TRUE;
                }


                # Check their password first
                if ($session->check_pass($session->username, $_POST['vote_passwd'])) {
                    if ($fail) {
                        # Either no option or an invalid candidate was supplied
                        trigger_error("An invalid option was selected in at least one ballot. Please try again.", E_USER_WARNING);
                        display_ballot();
                    } else {
                        # User has abstained in all votes
                        if ($abstain_count == count($role)) {
                            trigger_error("You have not selected any candidates in any ballots.", E_USER_WARNING);
                            display_ballot();
                        } else {
                            # The input is valid - record the vote
                            $vote = array(
                                'username' => $session->username,
                                'time' => 'now',
                                'ipaddress' => $_SERVER['REMOTE_ADDR']);

                            # Email the Returning Officer
                            $ro_message = "User: " . $vote['username'] . "\nIP:   " . $vote['ipaddress'] . "\n\n";

                            # Email the voter with confirmation
                            $voter_message = "Thank you for voting in the SUCS election this year. Here are the votes you cast:\n\n";

                            foreach ($role as $post) {
                                # Don't add votes up as we go
                                # $DB->Execute("UPDATE election_candidates SET votes=votes+1 WHERE post=? AND username=?", array($post, $_POST[$post]));
                                $vote[$post] = $_POST[$post];
                                $ro_message .= ucfirst($post) . ": " . $_POST[$post] . "\n";
                                $voter_message .= ucfirst($post) . ": " . $_POST[$post] . "\n";
                            }

                            $voter_message .= "\nResults of the election will be announced on " . date('l jS F, Y \a\t H:i', strtotime(ELECTION_END)) . " at http://sucs.org/Vote\n";

                            $DB->AutoExecute("election_votes", $vote, 'INSERT');

                            mail("SUCS Returning Officer <vote@sucs.org>", "[SUCS Election] Vote received from " . $vote['username'], $ro_message, "From: SUCS Election " . ELECTION_YEAR . " <vote@sucs.org>");
                            mail($session->fullname . " <" . $session->username . "@sucs.org>", "[SUCS Election] Thanks For Voting", $voter_message, "From: SUCS Election " . ELECTION_YEAR . " <vote@sucs.org>");
                        }
                    }
                } else {
                    display_ballot();
                }
            } else {
                # Display the ballot paper
                display_ballot();
            }
        }
    }
}

$smarty->assign("body", $output);

?>