<?php
    header('Access-Control-Allow-Origin: *');

    header('Access-Control-Allow-Methods: GET, POST');
    
    header("Access-Control-Allow-Headers: X-Requested-With");
    
    include ('database.php');

    $json = json_encode($_REQUEST['json']);
    $code = $conn->real_escape_string($_REQUEST['code']); 
    $id = $_REQUEST['slug'];

    $user_token = base64_decode(base64_decode($_REQUEST['user_token'])); // Sanitize the token
        
    $secret_key = 'P@ssW0rd'; // The same secret key used on the source site
    
    // Split the token into user ID and expiration time
    list($user_id, $expiration_time) = explode('|', $user_token);

  

    if($user_id != null){
        if(!isUnique($id,$user_id,$conn))
        {
            
            $sql = "UPDATE authoring_tool SET json=$json, code='$code' WHERE slug=$id AND user_id=$user_id";
        
            if ($conn->query($sql) === TRUE) {
                $data = array("status" => "success", "json"=>$json);

                header("Content-Type: application/json");
                echo json_encode($data);
            } else {
                $data = array("status" => "failed","message"=>$conn->error);
                header("Content-Type: application/json");
                echo json_encode($data);
            }
        }
        else{
            $sql = "INSERT INTO authoring_tool (`json`,`post_id`,`slug`,`user_id`,`code`) VALUES($json,0,$id,$user_id,'$code')";
                if ($conn->query($sql) === TRUE) {
                    $data = array("status" => "success");
                    header("Content-Type: application/json");
                    echo json_encode($data);
                } else {
                    $data = array("status" => "failed","message"=>$conn->error);
                    header("Content-Type: application/json");
                    echo json_encode($data);
                }
        }
    }
    else{
        $data = array("status" => "failed","message"=>"User not found");
        header("Content-Type: application/json");
        echo json_encode($data);
    }
    

    $conn->close();

    function isUnique($id,$user_id,$conn){
        $query = "SELECT id from authoring_tool where slug='$id' AND  user_id='$user_id'";
        
        if ($result = $conn->query($query)) {
            
            $rowcount = mysqli_num_rows( $result );
            
            if($rowcount == 0){
                return true;
            }
            else{
                return false;
            }
         }
    }
?>