<?php 
include("include.db.php");
/* --- Variables globales --- */
//Obtenidas de BD:
$qVars=mysqli_query($link,'SELECT activa,var,value,tipo FROM vars');
while($rowVars=mysqli_fetch_assoc($qVars)){
	$globalDbVars[$rowVars['var']]['value']=$rowVars['value'];
	$globalDbVars[$rowVars['var']]['activa']=$rowVars['activa'];
	$globalDbVars[$rowVars['var']]['tipo']=$rowVars['tipo'];
}
$global = array(
	"title" => $globalDbVars['title']['value'],
	"modo_mantenimiento" => $globalDbVars['modo_mantenimiento']['value'],
	"subtitle" => $globalDbVars['subtitle']['value'],
	"secure_include" => "B3d4mfr@n",
	"meta_author" => $globalDbVars['meta_author']['value'],
	"meta_keywords" => $globalDbVars['meta_keywords']['value'],
	"meta_description" => $globalDbVars['meta_description']['value'],
	"canonical_url" => "http://mgproducciones.com/", //https://developers.facebook.com/docs/sharing/webmasters/getting-started/versioned-link
);
$user = null;
/* -------------------------- */
if(isset($_POST["usuario"])&&isset($_POST["password"])){
	$esc_pass = mysqli_real_escape_string($link,$_POST['password']);
	$esc_user = mysqli_real_escape_string($link,$_POST['usuario']);
	$q = mysqli_query($link,"SELECT * FROM usuarios WHERE usuario='".$esc_user."' AND password='".$esc_pass."' AND activo=1");
	if(mysqli_num_rows($q)==1) {
		$row = mysqli_fetch_assoc($q);
		if($row['activo']==1) {
			if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
				$ip = $_SERVER['HTTP_CLIENT_IP'];
			} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
				$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
			} else {
				$ip = $_SERVER['REMOTE_ADDR'];
			}
			//$ip;
			$browser = getBrowser();
			$_SESSION["loged"]=1;
			$_SESSION["id"]=$row["id"];
			$_SESSION["usuario"]=$row["usuario"];
			if($browser!=$row["last_device"]){
				$response = file_get_contents('api.mail.php?action=adminNotificacion&tipo=navegador&email='.$row["usuario"]);
				$response = json_decode($response);
			} elseif($ip!=$row["last_ip"]){
				$response = file_get_contents('api.mail.php?action=adminNotificacion&tipo=ip&email='.$row["usuario"]);
				$response = json_decode($response);
			}
			mysqli_query($link,"UPDATE usuarios SET last_login='".date('Y-m-d H:i:s')."',last_ip='".$ip."', last_device='".$browser."' WHERE id=".$row["id"]);
			header("location:index.php");
		} else {
			header("location:index.php?page=login&error=1");
		}
	} else {
		header("location:index.php?page=login&error=1");
	}
}
if(isset($_SESSION['loged'])) {
	/* --- Datos del usuario logeado --- */
	
	$q_user = mysqli_query($link,"SELECT * FROM usuarios WHERE activo=1 AND id=".$_SESSION['id']);
	if(mysqli_num_rows($q_user)==1) {
		$row_user = mysqli_fetch_assoc($q_user);
		$user = [
			"id" => $row_user["id"],
			"usuario" => $row_user["usuario"],
			"last_login" => $row_user["last_login"],
		];
		if(isset($_GET["action"])){
			switch($_GET["action"]){
				case 'dmm':
					mysqli_query($link,"UPDATE vars SET value='0' WHERE var='modo_mantenimiento'");
					header('location:index.php');
					break;
				default: break;
			}
		}
	} else {
		session_destroy();
		header('location:index.php');
	}
	
}
$page = getTemplate("template.index.php",array(
	'user' => $user, //user session or NULL
	'global' => $global, //global vars
	'globalDbVars' => $globalDbVars, 
	'link' => $link, //DB link
	'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
	'pageTitle' => 'Inicio', //post name or site name... For: Facebook Sharing and <title></title> 
	'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
	'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
	'page' => 'inicio'
));
if(isset($_GET['page'])) {
	switch($_GET['page']){
		case 'logout':
			session_destroy();
			header('location:index.php');
			break;
		case 'Producción':
		case 'Produccion':
		case 'producción':
		case 'produccion':
			$page = getTemplate("template.produccion.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Producción', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'produccion'
			));
			break;
		case 'Espectáculos':
		case 'Espectaculos':
		case 'espectáculos':
		case 'espectaculos':
			$page = getTemplate("template.espectaculos.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Espectáculos', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'espectaculos'
			));
			if(isset($_GET['tkn'])){
				$token = mysqli_real_escape_string($link,$_GET['tkn']);
					$q=mysqli_query($link,'SELECT * FROM espectaculo WHERE id='.$token);
					if(mysqli_num_rows($q)==1){
						$r=mysqli_fetch_assoc($q);
						$page = getTemplate("template.espectaculo.php",array(
							'user' => $user, //user session or NULL
							'global' => $global, //global vars
							'globalDbVars' => $globalDbVars, 
							'link' => $link, //DB link
							'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
							'pageTitle' => $r['nombre'], //post name or site name... For: Facebook Sharing and <title></title> 
							'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
							'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
							'page' => 'espectaculo',
							'espectaculo' => $r
						));
					}
			}
			break;
		case 'Eventos':
		case 'eventos':
			$page = getTemplate("template.eventos.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Eventos', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'eventos'
			));
			break;
		case 'Contacto':
		case 'contacto':
			$page = getTemplate("template.contacto.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Contacto', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'contacto'
			));
			break;
		case 'validateEmail':
			$page = getTemplate("template.validateEmail.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Suscripciones', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'Suscripciones'
			));
			break;
		case 'login':
			$page = getTemplate("template.login.php",array(
				'user' => $user, //user session or NULL
				'global' => $global, //global vars
				'globalDbVars' => $globalDbVars, 
				'link' => $link, //DB link
				'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
				'pageTitle' => 'Login', //post name or site name... For: Facebook Sharing and <title></title> 
				'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
				'page' => 'Login'
			));
			break;
		case 'configuracion':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.configuracion.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Configuración', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'Configuración web'
				));
			}
			break;
		case 'administracionEventos':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.administracionEventos.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Eventos', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'eventos'
				));
			}
			break;
		case 'administracionEspectaculos':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.administracionEspectaculos.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Espectaculos', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'espectaculos'
				));
			}
			break;
		case 'administracionProduccion':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.administracionProduccion.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Producción', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'produccion'
				));
			}
			break;
		case 'administracionSuscripciones':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.administracionSuscripciones.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Suscripciones', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'Suscripciones'
				));
			}
			break;
		case 'administracionContacto':
			if(isset($_SESSION["loged"])){ //SOLO USER LOGED . ADMIN...
				$page = getTemplate("template.administracionContacto.php",array(
					'user' => $user, //user session or NULL
					'global' => $global, //global vars
					'globalDbVars' => $globalDbVars, 
					'link' => $link, //DB link
					'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
					'pageTitle' => 'Contacto', //post name or site name... For: Facebook Sharing and <title></title> 
					'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
					'page' => 'contacto'
				));
			}
			break;
		default:break;
	}
}
if($global['modo_mantenimiento']=='1') {
	$saltar_mantenimiento=false;
	if(isset($_GET['page'])) {
		if($_GET['page']=='login'){
			$saltar_mantenimiento=true;
		}
	}
	if(isset($_SESSION["loged"])){
		$saltar_mantenimiento=true;
	}
	if(!$saltar_mantenimiento){
		$page = getTemplate("template.mantenimiento.php",array(
			'user' => $user, //user session or NULL
			'global' => $global, //global vars
			'globalDbVars' => $globalDbVars, 
			'link' => $link, //DB link
			'pageKeywords' => '', //for HEAD metadata. Format: '' or ', keyword1, keyword2, etc'
			'pageTitle' => 'Modo mantenimiento', //post name or site name... For: Facebook Sharing and <title></title> 
			'description' => '', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
			'sharedImage' => $global['canonical_url'].'images/logo_fucsia.jpg', //For: Facebook Sharing https://developers.facebook.com/docs/sharing/webmasters?locale=es_ES
			'page' => 'Mantenimiento'
		));
	}
}
echo $page;
function getTemplate($name, $in = null){
	extract($in);
    ob_start();
    include $name;
    $text = ob_get_clean();
    return $text;
}
?>