<?php
include_once $_SERVER['DOCUMENT_ROOT'] . '/../include/magicquotes.inc.php';

require_once $_SERVER['DOCUMENT_ROOT'] . '/../include/access.inc.php';

if (!userIsLoggedIn())
{
	include '../login.html.php';
	exit();
}

if (!userIsAdmin())
{
	$error = 'Only the Administrator may access this page.';
	include '../accessdenied.html.php';
	exit();
}

// Inactivate all current book comments
if (isset($_GET['deleteAll']))
{
	include $_SERVER['DOCUMENT_ROOT'] . '/../include/db.inc.php';

	// Inactivate all current book comments
	$sql = "UPDATE comment SET
			active='0'";
	if (!mysqli_query($link, $sql))
	{
		$err = 'Error deleting book comments.';
		include $_SERVER['DOCUMENT_ROOT'] . '/../include/errmsg.html.php';
		exit();
	}

	header('Location: .');
	exit();
}

// Display list of book comments
include $_SERVER['DOCUMENT_ROOT'] . '/../include/db.inc.php';
$result = mysqli_query($link, "SELECT * FROM book");
if (!$result)
{
	$err = 'Error fetching book list from database!';
	include $_SERVER['DOCUMENT_ROOT'] . '/../include/errmsg.html.php';
	exit();
}

while ($row = mysqli_fetch_assoc($result))
{
	$book_id = $row['id'];
	$result2 = mysqli_query($link, "SELECT * FROM comment WHERE active='1' AND book='$book_id' 
							           ORDER BY posted DESC");
	if (!$result2)
	{
		$err = "Error fetching comments for {$row['title']} from database! ($book_id)";
		include $_SERVER['DOCUMENT_ROOT'] . '/../include/errmsg.html.php';
		exit();
	}
	$comments = array();
	$sumratings = 0;
	$sumuse_again = 0;
	$count = 0;
	while ($row2 = mysqli_fetch_assoc($result2)) 
	{
		if (trim($row2['comment'])) {
			$comments[] =  $row2['comment'];
		}
		$sumratings += $row2['rating'];
		$sumuse_again += $row2['use_again'];
		$count++;
	}
	$books[] = array('title' => $row['title'], 'author' => $row['author'], 
	                 'averating' => $sumratings/$count, 'aveuse_again' => $sumuse_again/$count, 'count' => $count,
					 'comments' => $comments);
}

include 'commentlist.html.php';
?>