ACC SHELL

<?php

//include_once($_SERVER['DOCUMENT_ROOT'] . '/administrace/config/config.php');

$valid = true;

$Komentar = new Komentare();

function sendMessageToAdmin($arr) {

    $mail = new NMail;
    $mail->setFrom(EMAIL_FROM);
    $mail->addTo(EMAIL_TO);
    if (MARTIN) {
	$mail->addBcc(MARTIN);
    }
    if (TOMAS) {
	$mail->addBcc(TOMAS);
    }
    $mail->setSubject('Nová recenze produktu');
    $mail_text = 'Recenze od uživatele: ' . $arr['jmeno'] . '<br /><br />';
    if (isset($arr['nazev'])) {
	if (isset($arr['url'])) {
	    $mail_text .= 'Produkt: <a href="' . $arr['url'] . '">' . $arr['nazev'] . '</a><br /><br />';
	} else {
	    $mail_text .= 'Produkt: ' . $arr['nazev'] . '<br /><br />';
	}
    }

    $mail_text .= 'Text: ' . $arr['text'] . '<br /><br />';
    $mail_text .= 'Hodnocení: ' . $arr['hodnoceni'] . '<br /><br />';
    $mail->setHTMLBody($mail_text);
    $mail->send();
}

if ($_POST['robot'] * 1 != 6) {
    Tools::message('Zodpověděli jste špatně kontrolní otázku.', 'ERR');
    $valid = false;
} else {

    $jmeno = Validate::validateString($_POST['komentar_jmeno'], 'Jméno', false);
    if (!$jmeno && $jmeno !== null) {
	$valid = false;
    }
    $text = Validate::validateString($_POST['komentar_text'], 'Text', false);
    if (!$text && $text !== null) {
	$valid = false;
    }
    $email = Validate::validateMail($_POST['komentar_email'], false);
    if (!$email && $email !== null) {
	//Tools::message('Problem se zpracovani emailu', 'ERR');
	$valid = false;
    }
    $ip = Validate::validateIp($_SERVER['REMOTE_ADDR']);
    if (!$ip) {
	$valid = false;
    }
}



if ($valid) {
    $arr = array(
	'id' => isset($_POST['komentar_id']) ? $_POST['komentar_id'] : false,
	'typ_kategorie' => $_POST['typ_kategorie'],
	'id_sablony' => $_POST['id_sablony'],
	'id_produktu' => isset($_POST['id_produktu']) ? $_POST['id_produktu'] : false,
	'hodnoceni' => isset($_POST['hodnoceni']) ? $_POST['hodnoceni'] : 0,
	'jmeno' => $jmeno,
	'email' => $email,
	'text' => $text,
	'ip' => $_SERVER['REMOTE_ADDR'],
	'ban' => '0',
	'datum' => isset($_POST['datum']) ? $_POST['datum'] : new DateTime,
    );

    //$Katalog = new Katalog();
    //$produkt['id'] = $arr['id_produktu'];
    //$produkt = $Katalog->fetchSingleById($produkt);
    //NDebugger::dump($arr['id_produktu']);
    //NDebugger::dump($_POST);NDebugger::dump($arr);exit;
    $Komentar->insertKomentar($arr);

    $rate = array(
	'id_produktu' => $arr['id_produktu'],
	'hodnoceni' => $arr['hodnoceni']
    );

    Query::insertRating($rate, 'katalog_hodnoceni');


    $arr['nazev'] = isset($_POST['nazev']) ? $_POST['nazev'] : null;
    $arr['url'] = isset($_POST['url']) ? $_POST['url'] : null;

    //if ($arr['ip'] != ADMIN_IP) {
    sendMessageToAdmin($arr);
    //}
    
    Tools::redirect($_SERVER['HTTP_REFERER']);
    return true;
}
?>