<?php
// JSON web service for PO terms: autocomplete and search methods

/* require the user as the parameter */
if(isset($_GET['user']) && ($_GET['user']) == 'paw') {

        $arr_field_names = array('name','acc');
    
        /* read the params and/or set our own */
        $type = isset($_GET['type']) ? $_GET['type'] : autocomplete; // autocomplete is the default
        
        // security measures; helps to avoid SQL injection attacks
        $field = isset($_GET['field']) && in_array($_GET['field'],$arr_field_names)
            ? $_GET['field']
            : die('"field" is a required parameter and must match an available data field.');
            
        $number_of_terms = isset($_GET['max']) ? intval($_GET['max']) : 10; //10 is the default
        if ($number_of_terms > 50) { $number_of_terms = 50; } 

        $qval = $_GET['qval'];
        
        $qval = isset($_GET['qval']) && strlen($_GET['qval']) > 0 
            ? strtolower($_GET['qval'])
            : die('Please provide a searchable value');

        $format = strtolower($_GET['format']) != 'json' 
            ? strtolower($_GET['format']) 
            : 'json'; //json is the default
        
        /* connect to the db */
        $link = mysql_connect($_SERVER['mysql_host'], $_SERVER['mysql_user'], $_SERVER['mysql_pw']) or die('Cannot connect to the DB');
        mysql_select_db($_SERVER['mysql_db'],$link) or die('Cannot select the DB');

        switch ($type) {
            case 'autocomplete':
                /* grab the terms from the db */
                $query = "SELECT t.$field FROM term t"
                    . " LEFT JOIN term_definition d ON d.term_id = t.id"
                    . " WHERE t.$field LIKE '%$qval%'"
                    . " AND t.term_type in ('plant_anatomy','plant_growth_and_development_stage')"
                    . " AND t.is_obsolete = 0"
                    . " AND UCASE(t.name) NOT LIKE 'OBSOLETE%'"
                    . " AND UCASE(d.term_definition) NOT LIKE 'OBSOLETE%'"
                    . " ORDER BY name LIMIT $number_of_terms";
                $result = mysql_query($query,$link) or die('Errant query:  '.$query);
            
                /* create one master array of the records */
                $terms = array();
                if(mysql_num_rows($result)) {
                    while($term = mysql_fetch_assoc($result)) {
                        $terms[] = array('title'=>$term[$field]);
                    }
                }

                /* output in necessary format */
                if($format == 'json') {
                    header('Content-type: application/json');
                    echo json_encode(array('sfautocomplete'=>$terms));
                }
                else {
                    die('Sorry, this request cannot be fulfilled in '.$format.' format.');
                }
                break;

            case 'term_detail':
                /* grab the ontology data from the db */
                $query = "SELECT DISTINCT t.acc as 'acc', t.term_type as 'type', d.term_definition as 'definition', d.term_comment as 'comment'"
                    . " FROM term t"
                    . " LEFT JOIN term_definition d ON d.term_id = t.id"
                    . " WHERE t.name = '$qval'"
                    . " AND t.term_type in ('plant_anatomy','plant_growth_and_development_stage')"
                    . " AND t.is_obsolete = 0"
                    . " AND UCASE(t.name) NOT LIKE 'OBSOLETE%'"
                    . " AND UCASE(d.term_definition) NOT LIKE 'OBSOLETE%'"
                    . " ORDER BY t.name LIMIT 1";
                $result = mysql_query($query,$link) or die('Errant query:  '.$query);
            
                /* create one master array of the records */
                $terms = array();
                if(mysql_num_rows($result)) {
                    while($term = mysql_fetch_assoc($result)) {
                        $terms[] = array(
                            'id'=>$term['acc'],
                            'aspect'=>$term['type'] == "plant_anatomy" ? "Plant Anatomy" : "Plant Growth and Development Stage",
                            'definition'=>$term['definition'],
                            'comment'=>$term['comment']);
                    }
                }
                /* output in necessary format */
                if($format == 'json') {
                    header('Content-type: application/json');
                    echo json_encode(array('PO_result'=>$terms));
                }
                else {
                    die('Sorry, this request cannot be fulfilled in '.$format.' format.');
                }
                break;
            default:
                die('Sorry, this web service method is not available.');
        }
        /* disconnect from the db */
        @mysql_close($link);
}
else { die('Not authorized.'); }
?>