<?php
	require_once("check_login.php");

	require_once("function_cropimg.php");
	require_once("mime_type_lib.php");


	// Sort
	$sql     = "select max(slideid) as maxid from slideshow ";
	$row     = bind_pdo($sql, NULL, "selectone");
	$slideid = $row{"maxid"} + 1;

	$sql        = "select max(sort) as maxid from slideshow where deleted = ? ";
	$parameters = array("0");
	$row        = bind_pdo($sql, $parameters, "selectone");
	$sort       = $row{"maxid"} + 1;


	foreach ($arraylangcode as $langcode => $langname) {
		$slidelink[$langcode] = $_POST["slidelink_" . $langcode];
		$slidetext1[$langcode] = $_POST["slidetext1_" . $langcode];
		$slidetext2[$langcode] = $_POST["slidetext2_" . $langcode];

		// Upload File
		$filelimit = 10 * 1048576; //Filelimit in 10MB
		if ($_FILES["slideimg_" . $langcode]['name'] <> '') {
			if ($_FILES["slideimg_" . $langcode]['size'] < $filelimit) {

				//check if image type is valid or not
				$mime = get_file_mime_type($_FILES["slideimg_" . $langcode]['name']);

				if (($mime == "image/gif") || ($mime == "image/jpeg") || ($mime == "image/png")) {

					$filename = $_FILES["slideimg_" . $langcode]['name'];
					preg_match("/\.([^\.]+)$/", $filename, $file_ext);
					$newfilename = random_string() . "_slideid_" . $slideid . "." . $file_ext[1]; // default length 8

					move_uploaded_file($_FILES["slideimg_" . $langcode]['tmp_name'], "../images/slideshow/" . $newfilename) or die ("Could not copy the file");

					//$slideimg_path = "../images/slideshow/".$newfilename;

					//createthumb($slideimg_path, $slideimg_path, 680, 350);

					$slideimg[$langcode] = $newfilename;

				} else {
					echo '<script language="javascript">
				alert("圖片格式必須為 JPEG, GIF, or PNG 及小於 10MB.");
				history.back();
			</script>';

					exit;
				}

			} else {
				echo '<script language="javascript">
				alert("圖片格式必須為 JPEG, GIF, or PNG 及小於 10MB.");
				history.back();
			</script>';

				exit;
			}

		} else {
			$slideimg[$langcode] = "";
		}


	}

	$sql        = "insert into slideshow set slideid=?, sort=?, createdate=?, createby=?, lastupdate=?, lastupby=?, ";
	$parameters = array($slideid, $sort, $nowdate, $_SESSION['cmsloginid'], $nowdate, $_SESSION['cmsloginid']);

	foreach ($arraylangcode as $langcode => $langname) {
		$sql .= "slideimg_" . $langcode . "=?, slidelink_" . $langcode . "=?, slidetext1_".$langcode."=?, slidetext2_".$langcode."=?, ";
		$parameters[] = $slideimg[$langcode];
		$parameters[] = $slidelink[$langcode];
		$parameters[] = $slidetext1[$langcode];
		$parameters[] = $slidetext2[$langcode];
	}

	$sql = substr_replace($sql, "", -2);

	bind_pdo($sql, $parameters);

	header("Location: slideshow_index.php?msg=新增成功");