/* ---------- 登录检测 ---------- */
session_start([
    'cookie_httponly' => true,
    'cookie_secure' => isset($_SERVER['HTTPS']),
    'use_strict_mode' => true
]);

if (!isset($_SESSION['uid'])) {
    header('Location: login.php'); 
    exit;
}
$uid = (int)$_SESSION['uid'];

/* ---------- CSRF 保护 ---------- */
if (empty($_SESSION['csrf_token'])) {
    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));
}
$csrf_token = $_SESSION['csrf_token'];

/* ---------- PDO ---------- */
require_once __DIR__ . '/../includes/hu.php'; 

// 调试模式 - 显示详细错误
error_reporting(E_ALL);
ini_set('display_errors', 1);

/* ---------- 文件上传接口 ---------- */
if (isset($_GET['upload'])) {
    header('Content-Type: application/json; charset=utf-8');
    try {
        // 验证CSRF令牌
        if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
            throw new RuntimeException('CSRF验证失败');
        }

        if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK)
            throw new RuntimeException('上传失败');

        $ext = strtolower(pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION));
        // 允许扩展名
        $allowed_ext = ['so','zip'];
        if (!in_array($ext, $allowed_ext))
            throw new RuntimeException('不允许的扩展名');

        // 创建按年月组织的目录
        $dir = __DIR__.'/uploads/'.date('Ym');
        if (!is_dir($dir)) mkdir($dir, 0755, true);
        
        $urlName = bin2hex(random_bytes(8)).'.'.$ext;
        $savePath = $dir.'/'.$urlName;

        if (!move_uploaded_file($_FILES['file']['tmp_name'], $savePath))
            throw new RuntimeException('移动文件失败');

        // 返回可访问 URL
        $url = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://')
             . $_SERVER['HTTP_HOST']
             . dirname($_SERVER['SCRIPT_NAME'])
             . '/uploads/'
             . date('Ym')
             . '/'
             . $urlName;
        echo json_encode(['code'=>0, 'url'=>$url]);
    } catch (Throwable $e) {
        http_response_code(400);
        echo json_encode(['code'=>1, 'msg'=>$e->getMessage()]);

    }
    exit;
}

/* ---------- 保证每个用户只有 1 条应用记录 ---------- */
try {
    // 首先检查表是否存在
    $tableCheck = $pdo->query("SHOW TABLES LIKE 'applications'")->fetch();
    if (!$tableCheck) {
        throw new Exception('applications 表不存在');
    }
    
    // 检查用户是否已有应用记录
    $stmt = $pdo->prepare('SELECT id FROM applications WHERE user_id = ?');
    $stmt->execute([$uid]);
    
    if (!$stmt->fetch()) {
        // 获取表结构信息
        $columns = $pdo->query("DESCRIBE applications")->fetchAll(PDO::FETCH_ASSOC);
        $columnNames = array_column($columns, 'Field');
        
        error_log("applications表字段: " . implode(', ', $columnNames));
        
        // 构建插入语句，只插入必需的字段
        $insertFields = [
            'user_id' => $uid,
            'name' => '我的应用',
            'api_key' => bin2hex(random_bytes(16)),
            'created_at' => date('Y-m-d H:i:s'),
            'CloudUpdate' => 1, // 默认开启主应用更新
            'DownloadURL' => 'https://example.com/app.so',
            'announcement' => '欢迎使用 勿忘 云更新系统！',
            'status' => 1,
            'CloudUpdateSO2' => 0,
            'DownloadURLSO2' => '',
            'rc4_key' => bin2hex(random_bytes(16)),
            'aes_key' => bin2hex(random_bytes(16)),
            'hmac_key' => bin2hex(random_bytes(16))
        ];
        
        // 过滤掉表中不存在的字段
        $filteredFields = [];
        foreach ($insertFields as $field => $value) {
            if (in_array($field, $columnNames)) {
                $filteredFields[$field] = $value;
            }
        }
        
        $fieldNames = implode(', ', array_keys($filteredFields));
        $placeholders = ':' . implode(', :', array_keys($filteredFields));
        
        $sql = "INSERT INTO applications ($fieldNames) VALUES ($placeholders)";
        $stmt = $pdo->prepare($sql);
        
        foreach ($filteredFields as $field => $value) {
            $stmt->bindValue(":$field", $value);
        }
        
        $stmt->execute();
        
        error_log("成功创建应用记录，用户ID: $uid");
    }
} catch (Throwable $e) {
    error_log('系统错误：' . $e->getMessage());
    error_log('错误位置：' . $e->getFile() . ':' . $e->getLine());
    exit('系统错误：' . $e->getMessage());
}

/* ---------- AJAX 接口 ---------- */
if (isset($_GET['ajax'])) {
    header('Content-Type: application/json; charset=utf-8');
    $act = $_POST['act'] ?? '';
    try {
        // 修复的CSRF验证部分
        if (!isset($_POST['csrf_token']) || $_POST['csrf_token'] !== $_SESSION['csrf_token']) {
            throw new Exception('CSRF验证失败');
        }

        if ($act === 'rename') {
            $new = trim($_POST['username'] ?? '');
            if ($new === '') throw new Exception('用户名不能为空');
            if (strlen($new) > 32) throw new Exception('用户名过长（最多32字符）');
            $stmt = $pdo->prepare('SELECT id FROM user WHERE username=? AND id!=? LIMIT 1');
            $stmt->execute([$new, $uid]);
            if ($stmt->fetch()) throw new Exception('用户名已存在');
            $pdo->prepare('UPDATE user SET username=?, updated_at=NOW() WHERE id=?')->execute([$new, $uid]);
            $_SESSION['username'] = $new;
            echo json_encode(['code'=>0, 'msg'=>'用户名已更新']);
        } elseif ($act === 'repass') {
            $old = $_POST['oldpass'] ?? '';
            $new = $_POST['newpass'] ?? '';
            if (strlen($new) < 6) throw new Exception('新密码至少6位');
            $stmt = $pdo->prepare('SELECT password FROM user WHERE id=?');
            $stmt->execute([$uid]);
            $row = $stmt->fetch();
            if (!$row || !password_verify($old, $row['password'])) throw new Exception('旧密码错误');
            $newHash = password_hash($new, PASSWORD_DEFAULT);
            $pdo->prepare('UPDATE user SET password=?, updated_at=NOW() WHERE id=?')->execute([$newHash, $uid]);
            echo json_encode(['code'=>0, 'msg'=>'密码已更新']);
        } elseif ($act === 'logout') {
            session_destroy();
            echo json_encode(['code'=>0, 'msg'=>'已退出']);
        } elseif ($act === 'saveapp') {
            $name = trim($_POST['name'] ?? '');
            $anno = trim($_POST['announcement'] ?? '');
            $link = trim($_POST['DownloadURL'] ?? '');
            $so2Link = trim($_POST['DownloadURLSO2'] ?? '');
            
            if ($name === '') throw new Exception('应用名称不能为空');
            
            $pdo->prepare('UPDATE applications SET 
                name=?, 
                announcement=?, 
                DownloadURL=?, 
                DownloadURLSO2=?,
                updated_at=NOW() 
                WHERE user_id=?')
                ->execute([$name, $anno, $link, $so2Link, $uid]);
            
            echo json_encode(['code'=>0, 'msg'=>'应用信息已保存']);
        } elseif ($act === 'newapikey') {
            $new = bin2hex(random_bytes(16));
            $pdo->prepare('UPDATE applications SET api_key=?, updated_at=NOW() WHERE user_id=?')->execute([$new, $uid]);
            echo json_encode(['code'=>0, 'msg'=>'API KEY 已更新', 'data'=>$new]);
        } elseif ($act === 'newallkeys') {
            $apiKey = bin2hex(random_bytes(16));
            $aesKey = bin2hex(random_bytes(16));
            $rc4Key = bin2hex(random_bytes(16));
            $hmacKey = bin2hex(random_bytes(16));
            
            $pdo->prepare('UPDATE applications SET 
                api_key=?, 
                aes_key=?, 
                rc4_key=?, 
                hmac_key=?, 
                updated_at=NOW() 
                WHERE user_id=?')
                ->execute([$apiKey, $aesKey, $rc4Key, $hmacKey, $uid]);
            
            echo json_encode([
                'code'=>0, 
                'msg'=>'所有密钥已更新',
                'data' => [
                    'apiKey' => $apiKey,
                    'aesKey' => $aesKey,
                    'rc4Key' => $rc4Key,
                    'hmacKey' => $hmacKey
                ]
            ]);
        } elseif ($act === 'toggleupdate') {
            $type = $_POST['type'] ?? '';
            $validTypes = ['CloudUpdate', 'CloudUpdateSO2'];
            if (!in_array($type, $validTypes)) throw new Exception('无效的更新类型');
            
            $stmt = $pdo->prepare("SELECT $type FROM applications WHERE user_id=?");
            $stmt->execute([$uid]);
            $current = $stmt->fetchColumn();
            $newValue = $current ? 0 : 1;
            
            $pdo->prepare("UPDATE applications SET $type=?, updated_at=NOW() WHERE user_id=?")
                ->execute([$newValue, $uid]);
            
            echo json_encode(['code'=>0, 'msg'=>'更新状态已切换', 'data'=>$newValue]);
        } else {
            throw new Exception('未知操作');
        }
    } catch (Exception $e) {
        http_response_code(400);
        echo json_encode(['code'=>1, 'msg'=>$e->getMessage()]);
    }
    exit;
}

/* ---------- 页面数据 ---------- */
$mode = $_GET['mode'] ?? 'home';
if ($mode === 'home') {
    try {
        $app = $pdo->prepare('SELECT * FROM applications WHERE user_id=?');
        $app->execute([$uid]);
        $app = $app->fetch();
        
        if (!$app) {
            throw new Exception('未找到应用记录');
        }
    } catch (Exception $e) {
        error_log('查询应用记录错误: ' . $e->getMessage());
        $app = [
            'name' => '我的应用',
            'announcement' => '欢迎使用 勿忘 云更新系统！',
            'DownloadURL' => 'https://example.com/app.so',
            'DownloadURLSO2' => '',
            'api_key' => '未生成',
            'aes_key' => '未生成',
            'rc4_key' => '未生成',
            'hmac_key' => '未生成',
            'CloudUpdate' => 1, // 默认开启
            'CloudUpdateSO2' => 0
        ];
    }
} else {
    try {
        $user = $pdo->prepare('SELECT username, qq, identity FROM user WHERE id=?');
        $user->execute([$uid]);
        $user = $user->fetch();
        
        if (!$user) {
            throw new Exception('未找到用户信息');
        }
        
        $avatar = "https://q1.qlogo.cn/g?b=qq&nk={$user['qq']}&s=100";
        $isAdmin = ($user['identity'] == 0);
    } catch (Exception $e) {
        error_log('查询用户信息错误: ' . $e->getMessage());
        $user = ['username' => '用户', 'qq' => '0'];
        $avatar = "https://q1.qlogo.cn/g?b=qq&nk=0&s=100";
        $isAdmin = false;
    }
}
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
    <title>勿忘 云 - <br />
<b>Warning</b>:  Undefined variable $mode in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>292</b><br />
我的</title>
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
            -webkit-tap-highlight-color: transparent;
        }
        
        body {
            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
            background: linear-gradient(135deg, #1a2a6c, #2a5298);
            color: #fff;
            line-height: 1.5;
            min-height: 100vh;
            padding-bottom: 60px;
        }
        
        header {
            background: rgba(0, 0, 0, 0.3);
            backdrop-filter: blur(10px);
            padding: 15px;
            text-align: center;
            position: sticky;
            top: 0;
            z-index: 100;
            border-bottom: 1px solid rgba(255, 255, 255, 0.1);
        }
        
        header h1 {
            font-size: 1.4rem;
            font-weight: 600;
            letter-spacing: 0.5px;
            text-shadow: 0 0 10px rgba(0, 212, 255, 0.7);
        }
        
        main {
            padding: 15px;
        }
        
        .bottom-nav {
            position: fixed;
            bottom: 0;
            left: 0;
            right: 0;
            display: flex;
            background: rgba(0, 0, 0, 0.8);
            backdrop-filter: blur(10px);
            border-top: 1px solid rgba(255, 255, 255, 0.1);
            z-index: 100;
        }
        
        .nav-item {
            flex: 1;
            text-align: center;
            padding: 12px 5px;
            color: #aaa;
            text-decoration: none;
            font-size: 0.85rem;
            display: flex;
            flex-direction: column;
            align-items: center;
            transition: all 0.3s;
        }
        
        .nav-item.active {
            color: #00d4ff;
        }
        
        .nav-item i {
            font-size: 1.2rem;
            margin-bottom: 4px;
        }
        
        .card {
            background: rgba(255, 255, 255, 0.08);
            border-radius: 12px;
            padding: 20极光云更新系统
            margin-bottom: 20px;
            border: 1px solid rgba(255, 255, 255, 0.1);
            box-shadow: 0 4px 20px rgba(0, 0, 0, 0.2);
        }
        
        .card-title {
            display: flex;
            align-items: center;
            margin-bottom: 20px;
            font-size: 1.2rem;
            font-weight: 500;
            color: #00d4ff;
        }
        
        .card-title i {
            margin-right: 10px;
        }
        
        .form-group {
            margin-bottom: 20px;
        }
        
        .form-label {
            display: block;
            margin-bottom: 8px;
            font-size: 0.95rem;
            color: #ccc;
        }
        
        .form-input, .form-textarea {
            width: 100%;
            padding: 14px;
            background: rgba(0, 0, 0, 0.3);
            border: 1px solid rgba(0, 212, 255, 0.4);
            border-radius: 8px;
            color: #fff;
            font-size: 1rem;
        }
        
        .form-textarea {
            min-height: 120px;
            resize: vertical;
        }
        
        .btn {
            display: block;
            width: 100%;
            padding: 16px;
            background: linear-gradient(45deg, #00d4ff, #0099cc);
            border: none;
            border-radius: 10px;
            color: #fff;
            font-size: 1.1rem;
            font-weight: 500;
            text-align: center;
            margin: 15px 0;
            cursor: pointer;
            transition: all 0.3s;
            box-shadow: 0 4px 15px rgba(0, 212, 255, 0.3);
        }
        
        .btn:hover, .btn:active {
            transform: translateY(-2px);
            box-shadow: 0 6px 20px rgba(0, 212, 255, 0.5);
        }
        
        .btn-secondary {
            background: rgba(255, 255, 255, 0.1);
            border: 1px solid rgba(0, 212, 255, 0.4);
        }
        
        .btn-admin {
            background: linear-gradient(45deg, #ff9800, #ff5722);
        }
        
        .btn-icon {
            margin-right: 8px;
        }
        
        .upload-btn-wrapper {
            position: relative;
            overflow: hidden;
            display: block;
            width: 100%;
            margin-top: 10px;
        }
        
        .upload-btn {
            width: 100%;
            padding: 14px;
            background: rgba(0, 0, 0, 0.3);
            border: 1px dashed rgba(0, 212, 255, 0.5);
            border-radius: 8px;
            color: #00d4ff;
            text-align: center;
            font-size: 1rem;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        
        .upload-btn i {
            margin-right: 8px;
        }
        
        .upload-btn-wrapper input[type=file] {
            position: absolute;
            left: 0;
            top: 0;
            width: 100%;
            height: 100%;
            opacity: 0;
            cursor: pointer;
        }
        
        .upload-status {
            margin-top: 10px;
            font-size: 0.9rem;
            color: #00d4ff;
            text-align: center;
        }
        
        .key-card {
            background: rgba(0, 0, 0, 0.3);
            border-radius: 10px;
            padding: 15px;
            margin-bottom: 15px;
            border: 1px solid rgba(0, 212, 255, 0.3);
        }
        
        .key-header {
            display: flex;
            align-items: center;
            margin-bottom: 10px;
            color: #00d4ff;
        }
        
        .key-header i {
            margin-right: 8px;
        }
        
        .key-value {
            display: flex;
            align-items: center;
            background: rgba(0, 0, 0, 0.4);
            border-radius: 8px;
            padding: 12px;
            font-family: monospace;
            font-size: 0.9rem;
            word-break: break-all;
        }
        
        .key-value span {
            flex: 1;
        }
        
        .copy-btn {
            background: rgba(0, 212, 255, 0.2);
            border: none;
            border-radius: 6px;
            color: #fff;
            padding: 8px 12px;
            margin-left: 10px;
            cursor: pointer;
        }
        
        .profile-card {
            text-align: center;
            padding: 30px 20px;
        }
        
        .avatar {
            width: 100px;
            height: 100px;
            border-radius: 50%;
            border: 3px solid #00d4ff;
            margin: 0 auto 20px;
            object-fit: cover;
        }
        
        .username {
            font-size: 1.3rem;
            margin-bottom: 30px;
            font-weight: 500;
        }
        
        .toggle-switch {
            position: relative;
            display: inline-block;
            width: 60px;
            height: 34px;
        }
        
        .toggle-switch input {
            opacity: 0;
            width: 0;
            height: 0;
        }
        
        .toggle-slider {
            position: absolute;
            cursor: pointer;
            top: 0;
            left: 0;
            right: 0;
            bottom: 0;
            background-color: #ccc;
            transition: .4s;
            border-radius: 34px;
        }
        
        .toggle-slider:before {
            position: absolute;
            content: "";
            height: 26px;
            width: 26px;
            left: 4px;
            bottom: 4px;
            background-color: white;
            transition: .4s;
            border-radius: 50%;
        }
        
        input:checked + .toggle-slider {
            background-color: #00d4ff;
        }
        
        input:checked + .toggle-slider:before {
            transform: translateX(26px);
        }
        
        .toggle-label {
            display: flex;
            align-items: center;
            margin-bottom: 15px;
        }
        
        .toggle-label span {
            margin-left: 10px;
            font-size: 0.95rem;
        }
        
        dialog {
            width: 90%;
            max-width: 400px;
            background: #001a2e;
            border: 1px solid #00d4ff;
            border-radius: 15px;
            padding: 25px;
            color: #fff;
            top: 50%;
            transform: translateY(-50%);
        }
        
        dialog::backdrop {
            background: rgba(0, 0, 0, 0.7);
        }
        
        dialog h4 {
            margin-bottom: 20px;
            text-align: center;
            font-size: 1.2rem;
        }
        
        dialog input {
            width: 100%;
            padding: 14px;
            margin: 8px 0;
            background: rgba(0, 0, 0, 0.3);
            border: 1px solid rgba(0, 212, 255, 0.5);
            border-radius: 6px;
            color: #fff;
            font-size: 1rem;
        }
        
        .dialog-actions {
            display: flex;
            gap: 10px;
            justify-content: flex-end;
            margin-top: 20px;
        }
        
        dialog button {
            padding: 8px 16px;
            border: none;
            border-radius: 6px;
            cursor: pointer;
        }
        
        .save {
            background: #00d4ff;
            color: #000;
        }
        
        .cancel {
            background: #555;
            color: #fff;
        }
        
        #loader {
            display: none;
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(0, 0, 0, 0.8);
            z-index: 9999;
            color: white;
            justify-content: center;
            align-items: center;
            flex-direction: column;
        }
        
        .loader-spinner {
            width: 50px;
            height: 50px;
            border: 5px solid rgba(255, 255, 255, 0.3);
            border-radius: 50%;
            border-top-color: #00d4ff;
            animation: spin 1s linear infinite;
            margin-bottom: 20px;
        }
        
        @keyframes spin {
            to { transform: rotate(360deg); }
        }
        
        .notification {
            position: fixed;
            bottom: 70px;
            left: 50%;
            transform: translateX(-50%);
            background: rgba(0, 212, 255, 0.9);
            color: #000;
            padding: 12px 25px;
            border-radius: 30px;
            font-size: 0.95rem;
            box-shadow: 0 4极光云更新系统
            opacity: 0;
            transition: opacity 0.3s;
            z-index: 1000;
            display: flex;
            align-items: center;
            max-width: 90%;
        }
        
        .notification.show {
            opacity: 1;
        }
        
        .notification i {
            margin-right: 8px;
        }
        
        .copy-notification {
            background: rgba(40, 167, 69, 0.9);
            color: white;
        }
    </style>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
</head>
<body>
<header>
    <h1>勿忘 云更新系统</h1>
</header>

<main>
<br />
<b>Warning</b>:  Undefined variable $mode in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>738</b><br />
    <div class="card profile-card">
        <img src="<br />
<b>Warning</b>:  Undefined variable $avatar in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>870</b><br />
" class="avatar" alt="头像">
        <div class="username" id="uname"><br />
<b>Warning</b>:  Undefined variable $user in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>871</b><br />
<br />
<b>Warning</b>:  Trying to access array offset on value of type null in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>871</b><br />
</div>
        
        <button class="btn" onclick="openDialog('rename')">
            <i class="fas fa-user-edit btn-icon"></i> 修改用户名
        </button>
        
        <button class="btn" onclick="openDialog('repass')">
            <i class="fas fa-lock btn-icon"></i> 修改密码
        </button>
        
        <br />
<b>Warning</b>:  Undefined variable $isAdmin in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>881</b><br />
        
        <button class="btn btn-secondary" onclick="logout()">
            <i class="fas fa-sign-out-alt btn-icon"></i> 退出登录
        </button>
    </div>
</main>

<div class="bottom-nav">
    <a href="index.php?mode=home" class="nav-item <br />
<b>Warning</b>:  Undefined variable $mode in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>895</b><br />
">
        <i class="fas fa-home"></i>
        <span>主页</span>
    </a>
    <a href="index.php?mode=my" class="nav-item <br />
<b>Warning</b>:  Undefined variable $mode in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>899</b><br />
">
        <i class="fas fa-user"></i>
        <span>我的</span>
    </a>
</div>

<dialog id="renameDia">
    <h4>修改用户名</h4>
    <input id="newUser" placeholder="新用户名" required>
    <div class="dialog-actions">
        <button class="cancel" onclick="this.closest('dialog').close()">取消</button>
        <button class="save" onclick="ajaxPost('rename',{username:document.getElementById('newUser').value})">保存</button>
    </div>
</dialog>

<dialog id="repassDia">
    <h4>修改密码</h4>
    <input type="password" id="oldPass" placeholder="旧密码" required>
    <input type="password" id="newPass" placeholder="新密码（≥6位）" required>
    <div class="dialog-actions">
        <button class="cancel" onclick="this.closest('dialog').close()">取消</button>
        <button class="save" onclick="ajaxPost('repass',{oldpass:document.getElementById('oldPass').value,newpass:document.getElementById('newPass').value})">保存</button>
    </div>
</dialog>

<div id="loader">
    <div class="loader-spinner"></div>
    <div>处理中，请稍候...</极光云更新系统
</div>

<div class="notification" id="saveNotification">
    <i class="fas fa-check-circle"></i> <span id="notificationText">已自动保存</span>
</div>

<div class="notification copy-notification" id="copyNotification">
    <i class="fas fa-check"></i> 已复制到剪贴板
</div>

<script>
const CSRF_TOKEN = "<br />
<b>Warning</b>:  Undefined variable $csrf_token in <b>/www/wwwroot/685zz.lygg.shop/user/index.php</b> on line <b>938</b><br />
";
let saveTimer = null;
const SAVE_DELAY = 2000;

function ajaxPost(act, data){
    showLoader();
    const postData = {
        act: act,
        csrf_token: CSRF_TOKEN,
        ...data
    };
    
    fetch('index.php?ajax=1', {
        method: 'POST',
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded'
        },
        body: new URLSearchParams(postData)
    })
    .then(r => r.json())
    .then(res => {
        hideLoader();
        if(res.code === 0){
            if(act === 'logout') {
                location.href = 'login.php';
            } else {
                showNotification(res.msg || '操作成功');
                
                if (act === 'newapikey') {
                    document.getElementById('apiKey').textContent = res.data;
                } else if (act === 'newallkeys') {
                    document.getElementById('apiKey').textContent = res.data.apiKey;
                    document.getElementById('aesKey').textContent = res.data.aesKey;
                    document.getElementById('rc4Key').textContent = res.data.rc4Key;
                    document.getElementById('hmacKey').textContent = res.data.hmacKey;
                }
                
                if (act === 'rename') {
                    document.getElementById('uname').textContent = data.username;
                    document.getElementById('renameDia').close();
                }
                
                if (act === 'toggleupdate') {
                    const checkbox = document.getElementById(data.type.toLowerCase());
                    if (checkbox) {
                        checkbox.checked = res.data;
                    }
                }
            }
        } else {
            alert(res.msg);
        }
    })
    .catch(err => {
        hideLoader();
        alert('请求失败：' + err);
    });
}

function autoSave() {
    if (saveTimer) {
        clearTimeout(saveTimer);
    }
    saveTimer = setTimeout(() => {
        saveApp();
    }, SAVE_DELAY);
}

document.getElementById('fileInput').addEventListener('change', function(e) {
    const file = e.target.files[0];
    if (!file) return;
    
    const statusEl = document.getElementById('uploadStatus');
    statusEl.textContent = `上传中: ${file.name} (${formatFileSize(file.size)})`;
    showLoader();
    
    const fd = new FormData();
    fd.append('file', file);
    fd.append('csrf_token', CSRF_TOKEN);
    
    fetch('index.php?upload=1', {
        method: 'POST',
        body: fd
    })
    .then(response => response.json())
    .then(result => {
        hideLoader();
        if (result.code === 0) {
            statusEl.textContent = '上传成功！';
            document.getElementById('appLink').value = result.url;
            saveApp();
            setTimeout(() => {
                statusEl.textContent = '';
            }, 3000);
        } else {
            statusEl.textContent = '上传失败: ' + result.msg;
        }
    })
    .catch(error => {
        hideLoader();
        statusEl.textContent = '上传失败: ' + error.message;
    });
});

function formatFileSize(bytes) {
    if (bytes === 0) return '0 Bytes';
    const k = 1024;
    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
    const i = Math.floor(Math.log(bytes) / Math.log(k));
    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
}

function saveApp(){
    ajaxPost('saveapp',{
        name:document.getElementById('appName').value,
        announcement:document.getElementById('appAnno').value,
        DownloadURL:document.getElementById('appLink').value,
        DownloadURLSO2:document.getElementById('so2Link').value
    });
}

function newApiKey(){
    if(!confirm('确定重新生成 API KEY？')) return;
    ajaxPost('newapikey',{});
}

function newAllKeys(){
    if(!confirm('确定重新生成所有密钥？此操作不可逆！')) return;
    ajaxPost('newallkeys',{});
}

function toggleUpdate(type){
    ajaxPost('toggleupdate',{type:type});
}

function copyToClipboard(id) {
    const element = document.getElementById(id);
    const text = element.textContent || element.innerText;
    
    const textarea = document.createElement('textarea');
    textarea.value = text;
    document.body.appendChild(textarea);
    textarea.select();
    document.execCommand('copy');
    document.body.removeChild(textarea);
    
    showCopyNotification();
}

function openDialog(type){
    document.getElementById(type+'Dia').showModal();
}

function logout(){
    if(confirm('确定退出登录？')) {
        ajaxPost('logout',{});
    }
}

function showLoader() {
    document.getElementById('loader').style.display = 'flex';
}

function hideLoader() {
    document.getElementById('loader').style.display = 'none';
}

function showNotification(msg) {
    const notification = document.getElementById('saveNotification');
    const textEl = document.getElementById('notificationText');
    
    textEl.textContent = msg;
    notification.classList.add('show');
    
    setTimeout(() => {
        notification.classList.remove('show');
    }, 3000);
}

function showCopyNotification() {
    const notification = document.getElementById('copyNotification');
    notification.classList.add('show');
    
    setTimeout(() => {
        notification.classList.remove('show');
    }, 2000);
}

window.addEventListener('load', () => {
    if (window.location.search.includes('mode=home')) {
        setTimeout(() => {
            showNotification('欢迎使用 勿忘 云更新系统');
        }, 1000);
    }
});
</script>
</body>
</html>