<?php

namespace okapi\services\caches\geocaches;

use Exception;
use ArrayObject;
use okapi\Okapi;
use okapi\Db;
use okapi\Settings;
use okapi\OkapiRequest;
use okapi\ParamMissing;
use okapi\InvalidParam;
use okapi\BadRequest;
use okapi\OkapiInternalRequest;
use okapi\OkapiServiceRunner;
use okapi\OkapiAccessToken;
use okapi\services\caches\search\SearchAssistant;
use okapi\services\attrs\AttrHelper;

class WebService
{
	public static function options()
	{
		return array(
			'min_auth_level' => 1
		);
	}

	private static $valid_field_names = array('code', 'name', 'names', 'location', 'type',
		'status', 'url', 'owner', 'distance', 'bearing', 'bearing2', 'bearing3', 'is_found',
		'is_not_found', 'founds', 'notfounds', 'size', 'size2', 'oxsize', 'difficulty', 'terrain',
		'rating', 'rating_votes', 'recommendations', 'req_passwd', 'description',
		'descriptions', 'hint', 'hints', 'images', 'attr_acodes', 'attrnames', 'latest_logs',
		'my_notes', 'trackables_count', 'trackables', 'alt_wpts', 'last_found',
		'last_modified', 'date_created', 'date_hidden', 'internal_id', 'is_watched',
		'is_ignored', 'willattends', 'country', 'state', 'preview_image',
		'trip_time', 'trip_distance', 'attribution_note','gc_code', 'hint2', 'hints2',
		'protection_areas');

	public static function call(OkapiRequest $request)
	{
		$cache_codes = $request->get_parameter('cache_codes');
		if ($cache_codes === null) throw new ParamMissing('cache_codes');
		if ($cache_codes === "")
		{
			# Issue 106 requires us to allow empty list of cache codes to be passed into this method.
			# All of the queries below have to be ready for $cache_codes to be empty!
			$cache_codes = array();
		}
		else
			$cache_codes = explode("|", $cache_codes);

		if ((count($cache_codes) > 500) && (!$request->skip_limits))
			throw new InvalidParam('cache_codes', "Maximum allowed number of referenced ".
				"caches is 500. You provided ".count($cache_codes)." cache codes.");
		if (count($cache_codes) != count(array_unique($cache_codes)))
			throw new InvalidParam('cache_codes', "Duplicate codes detected (make sure each cache is referenced only once).");

		$langpref = $request->get_parameter('langpref');
		if (!$langpref) $langpref = "en";
		$langpref = explode("|", $langpref);

		$fields = $request->get_parameter('fields');
		if (!$fields) $fields = "code|name|location|type|status";
		$fields = explode("|", $fields);
		foreach ($fields as $field)
			if (!in_array($field, self::$valid_field_names))
				throw new InvalidParam('fields', "'$field' is not a valid field code.");

		# Some fields need to be temporarily included whenever the "description"
		# or "attribution_note" field are included. That's a little ugly, but
		# helps performance and conforms to the DRY rule.

		$fields_to_remove_later = array();
		if (
			in_array('description', $fields) || in_array('descriptions', $fields)
			|| in_array('hint', $fields) || in_array('hints', $fields)
			|| in_array('hint2', $fields) || in_array('hints2', $fields)
			|| in_array('attribution_note', $fields)
		)
		{
			if (!in_array('owner', $fields))
			{
				$fields[] = "owner";
				$fields_to_remove_later[] = "owner";
			}
			if (!in_array('internal_id', $fields))
			{
				$fields[] = "internal_id";
				$fields_to_remove_later[] = "internal_id";
			}
		}

		$attribution_append = $request->get_parameter('attribution_append');
		if (!$attribution_append) $attribution_append = 'full';
		if (!in_array($attribution_append, array('none', 'static', 'full')))
			throw new InvalidParam('attribution_append');

		$log_fields = $request->get_parameter('log_fields');
		if (!$log_fields) $log_fields = "uuid|date|user|type|comment";  // validation is done on call

		$user_uuid = $request->get_parameter('user_uuid');
		if ($user_uuid != null)
		{
			$user_id = Db::select_value("select user_id from user where uuid='".mysql_real_escape_string($user_uuid)."'");
			if ($user_id == null)
				throw new InvalidParam('user_uuid', "User not found.");
			if (($request->token != null) && ($this->token->user_id != $user_id))
				throw new InvalidParam('user_uuid', "User does not match the Access Token used.");
		}
		elseif (($user_uuid == null) && ($request->token != null))
			$user_id = $request->token->user_id;
		else
			$user_id = null;

		$lpc = $request->get_parameter('lpc');
		if ($lpc === null) $lpc = 10;
		if ($lpc == 'all')
			$lpc = null;
		else
		{
			if (!is_numeric($lpc))
				throw new InvalidParam('lpc', "Invalid number: '$lpc'");
			$lpc = intval($lpc);
			if ($lpc < 0)
				throw new InvalidParam('lpc', "Must be a positive value.");
		}

		if (in_array('distance', $fields) || in_array('bearing', $fields) || in_array('bearing2', $fields)
			|| in_array('bearing3', $fields))
		{
			$tmp = $request->get_parameter('my_location');
			if (!$tmp)
				throw new BadRequest("When using 'distance' or 'bearing' fields, you have to supply 'my_location' parameter.");
			$parts = explode('|', $tmp);
			if (count($parts) != 2)
				throw new InvalidParam('my_location', "Expecting 2 pipe-separated parts, got ".count($parts).".");
			foreach ($parts as &$part_ref)
			{
				if (!preg_match("/^-?[0-9]+(\.?[0-9]*)$/", $part_ref))
					throw new InvalidParam('my_location', "'$part_ref' is not a valid float number.");
				$part_ref = floatval($part_ref);
			}
			list($center_lat, $center_lon) = $parts;
			if ($center_lat > 90 || $center_lat < -90)
				throw new InvalidParam('current_position', "Latitudes have to be within -90..90 range.");
			if ($center_lon > 180 || $center_lon < -180)
				throw new InvalidParam('current_position', "Longitudes have to be within -180..180 range.");
		}

		if (Settings::get('OC_BRANCH') == 'oc.de')
		{
			# DE branch:
			# - Caches do not have ratings.
			# - Total numbers of founds and notfounds are kept in the "stat_caches" table.
			# - search_time and way_length are both round trip values and cannot be null;
			#     0 = not specified
			# - will-attend-count is stored in separate field

			$rs = Db::query("
				select
					c.cache_id, c.name, c.longitude, c.latitude, c.listing_last_modified as last_modified,
					c.date_created, c.type, c.status, c.date_hidden, c.size, c.difficulty,
					c.terrain, c.wp_oc, c.wp_gc, c.logpw, c.user_id,
					if(c.search_time=0, null, c.search_time) as trip_time,
					if(c.way_length=0, null, c.way_length) as trip_distance,

					ifnull(sc.toprating, 0) as topratings,
					ifnull(sc.found, 0) as founds,
					ifnull(sc.notfound, 0) as notfounds,
					ifnull(sc.will_attend, 0) as willattends,
					sc.last_found,
					0 as votes, 0 as score
					-- SEE ALSO OC.PL BRANCH BELOW
				from
					caches c
					left join stat_caches as sc on c.cache_id = sc.cache_id
				where
					wp_oc in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
					and status in (1,2,3)
			");
		}
		elseif (Settings::get('OC_BRANCH') == 'oc.pl')
		{
			# PL branch:
			# - Caches have ratings.
			# - Total numbers of found and notfounds are kept in the "caches" table.
			# - search_time is round trip and way_length one way or both ways (this is different on OCDE!);
			#   both can be null; 0 or null = not specified
			# - will-attend-count is stored in caches.notfounds

			$rs = Db::query("
				select
					c.cache_id, c.name, c.longitude, c.latitude, c.last_modified,
					c.date_created, c.type, c.status, c.date_hidden, c.size, c.difficulty,
					c.terrain, c.wp_oc, c.wp_gc, c.logpw, c.user_id,
					if(c.search_time=0, null, c.search_time) as trip_time,
					if(c.way_length=0, null, c.way_length) as trip_distance,

					c.topratings,
					c.founds,
					c.notfounds,
					c.notfounds as willattends,
					c.last_found,
					c.votes, c.score
					-- SEE ALSO OC.DE BRANCH ABOVE
				from
					caches c
				where
					wp_oc in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
					and c.status in (1,2,3)
			");
		}

		$results = new ArrayObject();
		$cacheid2wptcode = array();
		$owner_ids = array();
		while ($row = mysql_fetch_assoc($rs))
		{
			$entry = array();
			$cacheid2wptcode[$row['cache_id']] = $row['wp_oc'];
			foreach ($fields as $field)
			{
				switch ($field)
				{
					case 'code': $entry['code'] = $row['wp_oc']; break;
					case 'gc_code':
						// OC software allows entering anything here, and that's what users do.
						// We do a formal verification so that only a valid GC code is returned:
						if (preg_match('/^\s*[Gg][Cc][A-Za-z0-9]+\s*$/', $row['wp_gc']))
							$entry['gc_code'] = strtoupper(trim($row['wp_gc']));
						else
							$entry['gc_code'] = null;
						break;
					case 'name': $entry['name'] = $row['name']; break;
					case 'names': $entry['names'] = array(Settings::get('SITELANG') => $row['name']); break; // for the future
					case 'location': $entry['location'] = round($row['latitude'], 6)."|".round($row['longitude'], 6); break;
					case 'type': $entry['type'] = Okapi::cache_type_id2name($row['type']); break;
					case 'status': $entry['status'] = Okapi::cache_status_id2name($row['status']); break;
					case 'url': $entry['url'] = Settings::get('SITE_URL')."viewcache.php?wp=".$row['wp_oc']; break;
					case 'owner':
						$owner_ids[$row['wp_oc']] = $row['user_id'];
						/* continued later */
						break;
					case 'distance':
						$entry['distance'] = (int)Okapi::get_distance($center_lat, $center_lon, $row['latitude'], $row['longitude']);
						break;
					case 'bearing':
						$tmp = Okapi::get_bearing($center_lat, $center_lon, $row['latitude'], $row['longitude']);
						$entry['bearing'] = ($tmp !== null) ? ((int)(10*$tmp)) / 10.0 : null;
						break;
					case 'bearing2':
						$tmp = Okapi::get_bearing($center_lat, $center_lon, $row['latitude'], $row['longitude']);
						$entry['bearing2'] = Okapi::bearing_as_two_letters($tmp);
						break;
					case 'bearing3':
						$tmp = Okapi::get_bearing($center_lat, $center_lon, $row['latitude'], $row['longitude']);
						$entry['bearing3'] = Okapi::bearing_as_three_letters($tmp);
						break;
					case 'is_found': /* handled separately */ break;
					case 'is_not_found': /* handled separately */ break;
					case 'is_watched': /* handled separately */ break;
					case 'is_ignored': /* handled separately */ break;
					case 'founds': $entry['founds'] = $row['founds'] + 0; break;
					case 'notfounds':
						if ($row['type'] != 6) {  # non-event
							$entry['notfounds'] = $row['notfounds'] + 0;
						} else {  # event
							$entry['notfounds'] = 0;
						}
						break;
					case 'willattends':
						if ($row['type'] == 6) {  # event
							$entry['willattends'] = $row['willattends'] + 0;
						} else {  # non-event
							$entry['willattends'] = 0;
						}
						break;
					case 'size':
						# Deprecated. Leave it for backward-compatibility. See issue 155.
						switch (Okapi::cache_sizeid_to_size2($row['size']))
						{
							case 'none': $entry['size'] = null; break;
							case 'nano': $entry['size'] = 1.0; break;  # same as micro
							case 'micro': $entry['size'] = 1.0; break;
							case 'small': $entry['size'] = 2.0; break;
							case 'regular': $entry['size'] = 3.0; break;
							case 'large': $entry['size'] = 4.0; break;
							case 'xlarge': $entry['size'] = 5.0; break;
							case 'other': $entry['size'] = null; break;  # same as none
							default: throw new Exception();
						}
						break;
					case 'size2': $entry['size2'] = Okapi::cache_sizeid_to_size2($row['size']); break;
					case 'oxsize': $entry['oxsize'] = Okapi::cache_size2_to_oxsize(Okapi::cache_sizeid_to_size2($row['size'])); break;
					case 'difficulty': $entry['difficulty'] = round($row['difficulty'] / 2.0, 1); break;
					case 'terrain': $entry['terrain'] = round($row['terrain'] / 2.0, 1); break;
					case 'trip_time':
						# search time is entered in hours:minutes and converted to decimal hours,
						# which can produce lots of unneeded decimal places; 2 of them are sufficient here
						$entry['trip_time'] = $row['trip_time'] === null ? null : round($row['trip_time'],2); break;
						break;
					case 'trip_distance':
						# way length is entered in km as decimal fraction, but number conversions can
						# create fake digits which should be stripped; meter precision is sufficient here
						$entry['trip_distance'] = $row['trip_distance'] === null ? null : round($row['trip_distance'],3); break;
						break;
					case 'rating':
						if ($row['votes'] < 3) $entry['rating'] = null;
						elseif ($row['score'] >= 2.2) $entry['rating'] = 5.0;
						elseif ($row['score'] >= 1.4) $entry['rating'] = 4.0;
						elseif ($row['score'] >= 0.1) $entry['rating'] = 3.0;
						elseif ($row['score'] >= -1.0) $entry['rating'] = 2.0;
						else $entry['rating'] = 1.0;
						break;
					case 'rating_votes': $entry['rating_votes'] = $row['votes'] + 0; break;
					case 'recommendations': $entry['recommendations'] = $row['topratings'] + 0; break;
					case 'req_passwd': $entry['req_passwd'] = $row['logpw'] ? true : false; break;
					case 'description': /* handled separately */ break;
					case 'descriptions': /* handled separately */ break;
					case 'hint': /* handled separately */ break;
					case 'hints': /* handled separately */ break;
					case 'hint2': /* handled separately */ break;
					case 'hints2': /* handled separately */ break;
					case 'images': /* handled separately */ break;
					case 'preview_image': /* handled separately */ break;
					case 'attr_acodes': /* handled separately */ break;
					case 'attrnames': /* handled separately */ break;
					case 'latest_logs': /* handled separately */ break;
					case 'my_notes': /* handles separately */ break;
					case 'trackables_count': /* handled separately */ break;
					case 'trackables': /* handled separately */ break;
					case 'alt_wpts': /* handled separately */ break;
					case 'country': /* handled separately */ break;
					case 'state': /* handled separately */ break;
					case 'last_found': $entry['last_found'] = ($row['last_found'] > '1980') ? date('c', strtotime($row['last_found'])) : null; break;
					case 'last_modified': $entry['last_modified'] = date('c', strtotime($row['last_modified'])); break;
					case 'date_created': $entry['date_created'] = date('c', strtotime($row['date_created'])); break;
					case 'date_hidden': $entry['date_hidden'] = date('c', strtotime($row['date_hidden'])); break;
					case 'internal_id': $entry['internal_id'] = $row['cache_id']; break;
					case 'attribution_note': /* handled separately */ break;
					case 'protection_areas': /* handled separately */ break;
					default: throw new Exception("Missing field case: ".$field);
				}
			}
			$results[$row['wp_oc']] = $entry;
		}
		mysql_free_result($rs);

		# owner

		if (in_array('owner', $fields) && (count($results) > 0))
		{
			$rs = Db::query("
				select user_id, uuid, username
				from user
				where user_id in ('".implode("','", array_map('mysql_real_escape_string', array_values($owner_ids)))."')
			");
			$tmp = array();
			while ($row = mysql_fetch_assoc($rs))
				$tmp[$row['user_id']] = $row;
			foreach ($results as $cache_code => &$result_ref)
			{
				$row = $tmp[$owner_ids[$cache_code]];
				$result_ref['owner'] = array(
					'uuid' => $row['uuid'],
					'username' => $row['username'],
					'profile_url' => Settings::get('SITE_URL')."viewprofile.php?userid=".$row['user_id']
				);
			}
		}

		# is_found

		if (in_array('is_found', $fields))
		{
			if ($user_id == null)
				throw new BadRequest("Either 'user_uuid' parameter OR Level 3 Authentication is required to access 'is_found' field.");
			$tmp = Db::select_column("
				select c.wp_oc
				from
					caches c,
					cache_logs cl
				where
					c.cache_id = cl.cache_id
					and cl.type in (
						'".mysql_real_escape_string(Okapi::logtypename2id("Found it"))."',
						'".mysql_real_escape_string(Okapi::logtypename2id("Attended"))."'
					)
					and cl.user_id = '".mysql_real_escape_string($user_id)."'
					".((Settings::get('OC_BRANCH') == 'oc.pl') ? "and cl.deleted = 0" : "")."
			");
			$tmp2 = array();
			foreach ($tmp as $cache_code)
				$tmp2[$cache_code] = true;
			foreach ($results as $cache_code => &$result_ref)
				$result_ref['is_found'] = isset($tmp2[$cache_code]);
		}

		# is_not_found

		if (in_array('is_not_found', $fields))
		{
			if ($user_id == null)
				throw new BadRequest("Either 'user_uuid' parameter OR Level 3 Authentication is required to access 'is_not_found' field.");
			$tmp = Db::select_column("
				select c.wp_oc
				from
					caches c,
					cache_logs cl
				where
					c.cache_id = cl.cache_id
					and cl.type = '".mysql_real_escape_string(Okapi::logtypename2id("Didn't find it"))."'
					and cl.user_id = '".mysql_real_escape_string($user_id)."'
					".((Settings::get('OC_BRANCH') == 'oc.pl') ? "and cl.deleted = 0" : "")."
			");
			$tmp2 = array();
			foreach ($tmp as $cache_code)
				$tmp2[$cache_code] = true;
			foreach ($results as $cache_code => &$result_ref)
				$result_ref['is_not_found'] = isset($tmp2[$cache_code]);
		}

		# is_watched

		if (in_array('is_watched', $fields))
		{
			if ($request->token == null)
				throw new BadRequest("Level 3 Authentication is required to access 'is_watched' field.");
			$tmp = Db::select_column("
				select c.wp_oc
				from
					caches c,
					cache_watches cw
				where
					c.cache_id = cw.cache_id
					and cw.user_id = '".mysql_real_escape_string($request->token->user_id)."'
			");
			$tmp2 = array();
			foreach ($tmp as $cache_code)
				$tmp2[$cache_code] = true;
			foreach ($results as $cache_code => &$result_ref)
				$result_ref['is_watched'] = isset($tmp2[$cache_code]);
		}

		# is_ignored

		if (in_array('is_ignored', $fields))
		{
			if ($request->token == null)
				throw new BadRequest("Level 3 Authentication is required to access 'is_ignored' field.");
			$tmp = Db::select_column("
				select c.wp_oc
				from
					caches c,
					cache_ignore ci
				where
					c.cache_id = ci.cache_id
					and ci.user_id = '".mysql_real_escape_string($request->token->user_id)."'
			");
			$tmp2 = array();
			foreach ($tmp as $cache_code)
				$tmp2[$cache_code] = true;
			foreach ($results as $cache_code => &$result_ref)
				$result_ref['is_ignored'] = isset($tmp2[$cache_code]);
		}

		# Descriptions and hints.

		if (in_array('description', $fields) || in_array('descriptions', $fields)
			|| in_array('hint', $fields) || in_array('hints', $fields)
			|| in_array('hint2', $fields) || in_array('hints2', $fields))
		{
			# At first, we will fill all those 4 fields, even if user requested just one
			# of them. We will chop off the remaining three at the end.

			foreach ($results as &$result_ref)
			{
				$result_ref['descriptions'] = array();
				$result_ref['hints'] = array();
				$result_ref['hints2'] = array();
			}

			# Get cache descriptions and hints.

			$rs = Db::query("
				select cache_id, language, `desc`, hint
				from cache_desc
				where cache_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
			");
			while ($row = mysql_fetch_assoc($rs))
			{
				$cache_code = $cacheid2wptcode[$row['cache_id']];
				// strtolower - ISO 639-1 codes are lowercase
				if ($row['desc'])
				{
					/* Note, that the "owner" and "internal_id" fields are automatically included,
					 * whenever the cache description is included. */

					$tmp = $row['desc'];
					if ($attribution_append != 'none')
					{
						$tmp .= "\n<p><em>".
							self::get_cache_attribution_note(
								$row['cache_id'], strtolower($row['language']), $langpref,
								$results[$cache_code]['owner'], $attribution_append
							).
							"</em></p>";
					}
					$results[$cache_code]['descriptions'][strtolower($row['language'])] = $tmp;
				}
				if ($row['hint'])
				{
					$results[$cache_code]['hints'][strtolower($row['language'])] = $row['hint'];
					$results[$cache_code]['hints2'][strtolower($row['language'])]
						= htmlspecialchars_decode(mb_ereg_replace("<br />", "" , $row['hint']), ENT_COMPAT);
				}
			}
			foreach ($results as &$result_ref)
			{
				$result_ref['description'] = Okapi::pick_best_language($result_ref['descriptions'], $langpref);
				$result_ref['hint'] = Okapi::pick_best_language($result_ref['hints'], $langpref);
				$result_ref['hint2'] = Okapi::pick_best_language($result_ref['hints2'], $langpref);
			}

			# Remove unwanted fields.

			foreach (array('description', 'descriptions', 'hint', 'hints', 'hint2', 'hints2') as $field)
				if (!in_array($field, $fields))
					foreach ($results as &$result_ref)
						unset($result_ref[$field]);
		}

		# Images.

		if (in_array('images', $fields) || in_array('preview_image', $fields))
		{
			if (in_array('images', $fields))
				foreach ($results as &$result_ref)
					$result_ref['images'] = array();
			if (in_array('preview_image', $fields))
				foreach ($results as &$result_ref)
					$result_ref['preview_image'] = null;

			if (Db::field_exists('pictures', 'mappreview'))
				$preview_field = "mappreview";
			else
				$preview_field = "0";
			$rs = Db::query("
				select object_id, uuid, url, title, spoiler, ".$preview_field." as preview
				from pictures
				where
					object_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
					and display = 1
					and object_type = 2
					and unknown_format = 0
				order by object_id, date_created
			");
			$prev_cache_code = null;
			while ($row = mysql_fetch_assoc($rs))
			{
				$cache_code = $cacheid2wptcode[$row['object_id']];
				if ($cache_code != $prev_cache_code)
				{
					# Group images together. Images must have unique captions within one cache.
					self::reset_unique_captions();
					$prev_cache_code = $cache_code;
				}
				$image = array(
					'uuid' => $row['uuid'],
					'url' => $row['url'],
					'thumb_url' => Settings::get('SITE_URL') . 'thumbs.php?uuid=' . $row['uuid'],
					'caption' => $row['title'],
					'unique_caption' => self::get_unique_caption($row['title']),
					'is_spoiler' => ($row['spoiler'] ? true : false),
				);
				if (in_array('images', $fields))
					$results[$cache_code]['images'][] = $image;
				if ($row['preview'] != 0 && in_array('preview_image', $fields))
					$results[$cache_code]['preview_image'] = $image;
			}
		}

		# A-codes and attrnames

		if (in_array('attr_acodes', $fields) || in_array('attrnames', $fields))
		{
			# Either case, we'll need acodes. If the user didn't want them,
			# remember to remove them later.

			if (!in_array('attr_acodes', $fields))
			{
				$fields_to_remove_later[] = 'attr_acodes';
			}
			foreach ($results as &$result_ref)
				$result_ref['attr_acodes'] = array();

			# Load internal_attr_id => acode mapping.

			require_once($GLOBALS['rootpath'].'okapi/services/attrs/attr_helper.inc.php');
			$internal2acode = AttrHelper::get_internal_id_to_acode_mapping();

			$rs = Db::query("
				select cache_id, attrib_id
				from caches_attributes
				where cache_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
			");
			while ($row = mysql_fetch_assoc($rs))
			{
				$cache_code = $cacheid2wptcode[$row['cache_id']];
				$attr_internal_id = $row['attrib_id'];
				if (!isset($internal2acode[$attr_internal_id]))
				{
					# Unknown attribute. Ignore.
					continue;
				}
				$results[$cache_code]['attr_acodes'][] = $internal2acode[$attr_internal_id];
			}

			# Now, each cache object has a list of its acodes. We can get
			# the attrnames now.

			if (in_array('attrnames', $fields))
			{
				$acode2bestname = AttrHelper::get_acode_to_name_mapping($langpref);
				foreach ($results as &$result_ref)
				{
					$result_ref['attrnames'] = array();
					foreach ($result_ref['attr_acodes'] as $acode)
						$result_ref['attrnames'][] = $acode2bestname[$acode];
				}
			}
		}

		# Latest log entries.

		if (in_array('latest_logs', $fields))
		{
			foreach ($results as &$result_ref)
				$result_ref['latest_logs'] = array();

			# Get all log IDs with dates. Sort in groups. Filter out latest ones. This is the fastest
			# technique I could think of...

			$rs = Db::query("
				select cache_id, uuid, date
				from cache_logs
				where
					cache_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
					and ".((Settings::get('OC_BRANCH') == 'oc.pl') ? "deleted = 0" : "true")."
				order by cache_id, date desc, date_created desc
			");
			$loguuids = array();
			$log2cache_map = array();
			if ($lpc !== null)
			{
				# User wants some of the latest logs.
				$tmp = array();
				while ($row = mysql_fetch_assoc($rs))
					$tmp[$row['cache_id']][] = $row;
				foreach ($tmp as $cache_key => &$rowslist_ref)
				{
					usort($rowslist_ref, function($rowa, $rowb) {
						# (reverse order by date)
						return ($rowa['date'] < $rowb['date']) ? 1 : (($rowa['date'] == $rowb['date']) ? 0 : -1);
					});
					for ($i = 0; $i < min(count($rowslist_ref), $lpc); $i++)
					{
						$loguuids[] = $rowslist_ref[$i]['uuid'];
						$log2cache_map[$rowslist_ref[$i]['uuid']] = $cacheid2wptcode[$rowslist_ref[$i]['cache_id']];
					}
				}
			}
			else
			{
				# User wants ALL logs.
				while ($row = mysql_fetch_assoc($rs))
				{
					$loguuids[] = $row['uuid'];
					$log2cache_map[$row['uuid']] = $cacheid2wptcode[$row['cache_id']];
				}
			}

			# We need to retrieve logs/entry for each of the $logids. We do this in groups
			# (there is a limit for log uuids passed to logs/entries method).

			try
			{
				foreach (Okapi::make_groups($loguuids, 500) as $subset)
				{
					$entries = OkapiServiceRunner::call(
						"services/logs/entries",
						new OkapiInternalRequest(
							$request->consumer, $request->token, array(
								'log_uuids' => implode("|", $subset),
								'fields' => $log_fields
							)
						)
					);
					foreach ($subset as $log_uuid)
					{
						if ($entries[$log_uuid])
							$results[$log2cache_map[$log_uuid]]['latest_logs'][] = $entries[$log_uuid];
					}
				}
			}
			catch (Exception $e)
			{
				if (($e instanceof InvalidParam) && ($e->paramName == 'fields'))
				{
					throw new InvalidParam('log_fields', $e->whats_wrong_about_it);
				}
				else
				{
					/* Something is wrong with OUR code. */
					throw new Exception($e);
				}
			}
		}

		# My notes

		if (in_array('my_notes', $fields))
		{
			if ($request->token == null)
				throw new BadRequest("Level 3 Authentication is required to access 'my_notes' field.");
			foreach ($results as &$result_ref)
				$result_ref['my_notes'] = null;
			if (Settings::get('OC_BRANCH') == 'oc.pl')
			{
				# OCPL uses cache_notes table to store notes.

				$rs = Db::query("
					select cache_id, max(date) as date, group_concat(`desc`) as `desc`
					from cache_notes
					where
						cache_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
						and user_id = '".mysql_real_escape_string($request->token->user_id)."'
					group by cache_id
				");
			}
			else
			{
				# OCDE uses coordinates table (with type == 2) to store notes (this is somewhat weird).

				$rs = Db::query("
					select cache_id, null as date, group_concat(description) as `desc`
					from coordinates
					where
						type = 2  -- personal note
						and cache_id in ('".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."')
						and user_id = '".mysql_real_escape_string($request->token->user_id)."'
					group by cache_id
				");
			}
			while ($row = mysql_fetch_assoc($rs))
			{
				# This one is plain-text. We may add my_notes_html for those who want it in HTML.
				$results[$cacheid2wptcode[$row['cache_id']]]['my_notes'] = strip_tags($row['desc']);
			}
		}

		if (in_array('trackables', $fields))
		{
			# Currently we support Geokrety only. But this interface should remain
			# compatible. In future, other trackables might be returned the same way.

			$rs = Db::query("
				select
					gkiw.wp as cache_code,
					gki.id as gk_id,
					gki.name
				from
					gk_item_waypoint gkiw,
					gk_item gki
				where
					gkiw.id = gki.id
					and gkiw.wp in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
			");
			$trs = array();
			while ($row = mysql_fetch_assoc($rs))
				$trs[$row['cache_code']][] = $row;
			foreach ($results as $cache_code => &$result_ref)
			{
				$result_ref['trackables'] = array();
				if (!isset($trs[$cache_code]))
					continue;
				foreach ($trs[$cache_code] as $t)
				{
					$result_ref['trackables'][] = array(
						'code' => 'GK'.str_pad(strtoupper(dechex($t['gk_id'])), 4, "0", STR_PAD_LEFT),
						'name' => $t['name'],
						'url' => 'http://geokrety.org/konkret.php?id='.$t['gk_id']
					);
				}
			}
			unset($trs);
		}
		if (in_array('trackables_count', $fields))
		{
			if (in_array('trackables', $fields))
			{
				# We already got all trackables data, no need to query database again.
				foreach ($results as $cache_code => &$result_ref)
					$result_ref['trackables_count'] = count($result_ref['trackables']);
			}
			else
			{
				$rs = Db::query("
					select wp as cache_code, count(*) as count
					from gk_item_waypoint
					where wp in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
					group by wp
				");
				$tr_counts = array();
				while ($row = mysql_fetch_assoc($rs))
					$tr_counts[$row['cache_code']] = $row['count'];
				foreach ($results as $cache_code => &$result_ref)
				{
					if (isset($tr_counts[$cache_code]))
						$result_ref['trackables_count'] = $tr_counts[$cache_code] + 0;
					else
						$result_ref['trackables_count'] = 0;
				}
				unset($tr_counts);
			}
		}

		# Alternate/Additional waypoints.

		if (in_array('alt_wpts', $fields))
		{
			$internal_wpt_type_id2names = array();
			if (Settings::get('OC_BRANCH') == 'oc.de')
			{
				$rs = Db::query("
					select
						ct.id,
						LOWER(stt.lang) as language,
						stt.`text`
					from
						coordinates_type ct
						left join sys_trans_text stt on stt.trans_id = ct.trans_id
				");
				while ($row = mysql_fetch_assoc($rs))
					$internal_wpt_type_id2names[$row['id']][$row['language']] = $row['text'];
				mysql_free_result($rs);
			}
			else
			{
				$rs = Db::query("
					select id, pl, en
					from waypoint_type
					where id > 0
				");
				while ($row = mysql_fetch_assoc($rs))
				{
					$internal_wpt_type_id2names[$row['id']]['pl'] = $row['pl'];
					$internal_wpt_type_id2names[$row['id']]['en'] = $row['en'];
				}
			}

			foreach ($results as &$result_ref)
				$result_ref['alt_wpts'] = array();
			$cache_codes_escaped_and_imploded = "'".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."'";

			if (Settings::get('OC_BRANCH') == 'oc.pl')
			{
				# OCPL uses 'waypoints' table to store additional waypoints and defines
				# waypoint types in 'waypoint_type' table.
				# OCPL also have a special 'status' field to denote a hidden waypoint
				# (i.e. final location of a multicache). Such hidden waypoints are not
				# exposed by OKAPI.

				$cacheid2waypoints = Db::select_group_by("cache_id", "
					select
						cache_id, stage, latitude, longitude, `desc`,
						type as internal_type_id,
						case type
							when 3 then 'Flag, Red'
							when 4 then 'Circle with X'
							when 5 then 'Parking Area'
							else 'Flag, Green'
						end as sym,
						case type
							when 1 then 'physical-stage'
							when 2 then 'virtual-stage'
							when 3 then 'final'
							when 4 then 'poi'
							when 5 then 'parking'
							else 'other'
						end as okapi_type
					from waypoints
					where
						cache_id in (".$cache_codes_escaped_and_imploded.")
						and status = 1
					order by cache_id, stage, `desc`
				");
			}
			else
			{
				# OCDE uses 'coordinates' table (with type=1) to store additional waypoints
				# and defines waypoint types in 'coordinates_type' table.
				# All additional waypoints are public.

				$cacheid2waypoints = Db::select_group_by("cache_id", "
					select
						cache_id,
						false as stage,
						latitude, longitude,
						description as `desc`,
						subtype as internal_type_id,
						case subtype
							when 1 then 'Parking Area'
							when 3 then 'Flag, Blue'
							when 4 then 'Circle with X'
							when 5 then 'Diamond, Green'
							else 'Flag, Green'
						end as sym,
						case subtype
							when 1 then 'parking'
							when 2 then 'stage'
							when 3 then 'path'
							when 4 then 'final'
							when 5 then 'poi'
							else 'other'
						end as okapi_type
					from coordinates
					where
						type = 1
						and cache_id in (".$cache_codes_escaped_and_imploded.")
					order by cache_id, id
				");
			}

			foreach ($cacheid2waypoints as $cache_id => $waypoints)
			{
				$cache_code = $cacheid2wptcode[$cache_id];
				$wpt_format = $cache_code."-%0".strlen(count($waypoints))."d";
				$index = 0;
				foreach ($waypoints as $row)
				{
					if (!isset($internal_wpt_type_id2names[$row['internal_type_id']]))
					{
						# Sanity check. Waypoints of undefined type won't be accessible via OKAPI.
						# See issue 219.
						continue;
					}
					$index++;
					$results[$cache_code]['alt_wpts'][] = array(
						'name' => sprintf($wpt_format, $index),
						'location' => round($row['latitude'], 6)."|".round($row['longitude'], 6),
						'type' => $row['okapi_type'],
						'type_name' => Okapi::pick_best_language($internal_wpt_type_id2names[$row['internal_type_id']], $langpref),
						'sym' => $row['sym'],
						'description' => ($row['stage'] ? _("Stage")." ".$row['stage'].": " : "").$row['desc'],
					);
				}
			}
		}

		# Country and/or state.

		if (in_array('country', $fields) || in_array('state', $fields))
		{
			$countries = array();
			$states = array();

			if (Settings::get('OC_BRANCH') == 'oc.de')
			{
				# OCDE:
				#  - cache_location entries are created by a cronjob *after* listing the
				#      caches and may not yet exist.
				#  - The state is in adm2 field.
				#  - caches.country overrides cache_location.code1/adm1. If both differ,
				#      cache_location.adm2 to adm4 is invalid and the state unknown.
				#  - OCDE databases may contain caches with invalid country code.
				#      Such errors must be handled gracefully.
				#  - adm1 should always be ignored. Instead, code1 should be translated
				#      into a country name, depending on langpref.

				# build country code translation table
				$rs = Db::query("
					select distinct
						c.country,
						lower(stt.lang) as language,
						stt.`text`
					from
						caches c
						inner join countries on countries.short=c.country
						inner join sys_trans_text stt on stt.trans_id = countries.trans_id
					where
						c.wp_oc in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
				");
				$country_codes2names = array();
				while ($row = mysql_fetch_assoc($rs))
					$country_codes2names[$row['country']][$row['language']] = $row['text'];
				mysql_free_result($rs);

				# get geocache countries and states
				$rs = Db::query("
					select
						c.wp_oc as cache_code,
						c.country as country_code,
						ifnull(if(c.country<>cl.code1,'',cl.adm2),'') as state
					from
						caches c
						left join cache_location cl on c.cache_id = cl.cache_id
					where
						c.wp_oc in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
				");
				while ($row = mysql_fetch_assoc($rs))
				{
					if (!isset($country_codes2names[$row['country_code']]))
						$countries[$row['cache_code']] = '';
					else
						$countries[$row['cache_code']] = Okapi::pick_best_language($country_codes2names[$row['country_code']], $langpref);
					$states[$row['cache_code']] = $row['state'];
				}
				mysql_free_result($rs);
			}
			else
			{
				# OCPL:
				#  - cache_location data is entered by the user.
				#  - The state is in adm3 field.

				# get geocache countries and states
				$rs = Db::query("
					select
						c.wp_oc as cache_code,
						cl.adm1 as country,
						cl.adm3 as state
					from
						caches c,
						cache_location cl
					where
						c.wp_oc in ('".implode("','", array_map('mysql_real_escape_string', $cache_codes))."')
						and c.cache_id = cl.cache_id
				");
				while ($row = mysql_fetch_assoc($rs))
				{
					$countries[$row['cache_code']] = $row['country'];
					$states[$row['cache_code']] = $row['state'];
				}
				mysql_free_result($rs);
			}

			if (in_array('country', $fields))
			{
				foreach ($results as $cache_code => &$row_ref)
					$row_ref['country'] = isset($countries[$cache_code]) ? $countries[$cache_code] : null;
			}
			if (in_array('state', $fields))
			{
				foreach ($results as $cache_code => &$row_ref)
					$row_ref['state'] = isset($states[$cache_code]) ? $states[$cache_code] : null;
			}
			unset($countries);
			unset($states);
		}

		# Attribution note

		if (in_array('attribution_note', $fields))
		{
			/* Note, that the "owner" and "internal_id" fields are automatically included,
			 * whenever the attribution_note is included. */

			foreach ($results as $cache_code => &$result_ref)
				$result_ref['attribution_note'] =
					self::get_cache_attribution_note(
						$result_ref['internal_id'], $langpref[0], $langpref,
						$results[$cache_code]['owner'], 'full'
					);
		}

		# Protection areas

		if (in_array('protection_areas', $fields))
		{
			$cache_ids_escaped_and_imploded = "'".implode("','", array_map('mysql_real_escape_string', array_keys($cacheid2wptcode)))."'";

			if (Settings::get('OC_BRANCH') == 'oc.de')
			{
				$rs = Db::query("
					select
						c.wp_oc as cache_code,
						npa_types.name as type,
						npa_areas.name as name
					from
						caches c
						inner join cache_npa_areas on cache_npa_areas.cache_id=c.cache_id
						inner join npa_areas on cache_npa_areas.npa_id = npa_areas.id
						inner join npa_types on npa_areas.type_id = npa_types.id
					where
						c.cache_id in (".$cache_ids_escaped_and_imploded.")
					group by npa_areas.type_id, npa_areas.name
					order by npa_types.ordinal
				");
			}
			else if (Settings::get('ORIGIN_URL') == 'http://opencaching.pl/' ||
			         Settings::get('ORIGIN_URL') == 'http://www.opencaching.nl/')
			{
				# Current OCPL table definitions use collation 'latin1' for parkipl
				# and 'utf8' for np_areas. Union needs identical collations.
				# To be sure, we convert both to utf8.
				$rs = Db::query("
					select
						c.wp_oc as cache_code,
						'"._('National Park / Landscape')."' as type,
						CONVERT(parkipl.name USING utf8) as name
					from
						caches c
						inner join cache_npa_areas on cache_npa_areas.cache_id=c.cache_id
						inner join parkipl on cache_npa_areas.parki_id=parkipl.id
					where
						c.cache_id in (".$cache_ids_escaped_and_imploded.")
						and cache_npa_areas.parki_id != 0
					union
					select
						c.wp_oc as cache_code,
						'Natura 2000' as type,
						CONVERT(npa_areas.sitename USING utf8) as name
					from
						caches c
						inner join cache_npa_areas on cache_npa_areas.cache_id=c.cache_id
						inner join npa_areas on cache_npa_areas.npa_id=npa_areas.id
					where
						c.cache_id in (".$cache_ids_escaped_and_imploded.")
						and cache_npa_areas.npa_id != 0
					");
			}
			else
			{
				# OC.US and .UK do not have a 'parkipl' table.
				# OC.US has a 'us_parks' table instead.
				# Natura 2000 is Europe-only.
				$rs = null;
			}

			foreach ($results as &$result_ref)
				$result_ref['protection_areas'] = array();
			if ($rs)
			{
				while ($row = mysql_fetch_assoc($rs))
				{
					$results[$row['cache_code']]['protection_areas'][] = array(
						'type' => $row['type'],
						'name' => $row['name'],
					);
				}
				mysql_free_result($rs);
			}
		}

		# Check which cache codes were not found and mark them with null.
		foreach ($cache_codes as $cache_code)
			if (!isset($results[$cache_code]))
				$results[$cache_code] = null;

		if (count($fields_to_remove_later) > 0)
		{
			# Some of the fields in $results were added only temporarily
			# (the Consumer did not ask for them). We will remove these fields now.

			foreach ($results as &$result_ref)
				foreach ($fields_to_remove_later as $field)
					unset($result_ref[$field]);
		}

		# Order the results in the same order as the input codes were given.
		# This might come in handy for languages which support ordered dictionaries
		# (especially with conjunction with the search_and_retrieve method).
		# See issue#97. PHP dictionaries (assoc arrays) are ordered structures,
		# so we just have to rewrite it (sequentially).

		$ordered_results = new ArrayObject();
		foreach ($cache_codes as $cache_code)
			$ordered_results[$cache_code] = $results[$cache_code];

		return Okapi::formatted_response($request, $ordered_results);
	}

	/**
	 * Create unique caption, safe to be used as a file name for images
	 * uploaded into Garmin's GPS devices. Use reset_unique_captions to reset
	 * unique counter.
	 */
	private static function get_unique_caption($caption)
	{
		# Garmins keep hanging on long file names. We don't have any specification from
		# Garmin and cannot determine WHY. That's why we won't use captions until we
		# know more.

		$caption = self::$caption_no."";
		self::$caption_no++;
		return $caption;

		/* This code is harmful for Garmins!
		$caption = preg_replace('#[^\\pL\d ]+#u', '-', $caption);
		$caption = trim($caption, '-');
		if (function_exists('iconv'))
		{
			$new = iconv("utf-8", "ASCII//TRANSLIT", $caption);
			if (!$new)
				$new = iconv("UTF-8", "ASCII//IGNORE", $caption);
		} else {
			$new = $caption;
		}
		$new = str_replace(array('/', '\\', '?', '%', '*', ':', '|', '"', '<', '>', '.'), '', $new);
		$new = trim($new);
		if ($new == "")
			$new = "(no caption)";
		if (strlen($new) > 240)
			$new = substr($new, 0, 240);
		$new = self::$caption_no." - ".$new;
		self::$caption_no++;
		return $new;*/
	}
	private static $caption_no = 1;
	private static function reset_unique_captions()
	{
		self::$caption_no = 1;
	}

	/**
	 * Return attribution note for the given geocache.
	 *
	 * The $lang parameter identifies the language of the cache description
	 * to which the attribution note will be appended to (one cache may
	 * have descriptions in multiple languages!).
	 *
	 * The $langpref parameter is *an array* of language preferences
	 * extracted from the langpref parameter passed to the method by the
	 * OKAPI Consumer.
	 *
	 * Both values ($lang and $langpref) will be taken into account when
	 * generating the attribution note, but $lang will have a higher
	 * priority than $langpref (we don't want to mix the languages in the
	 * descriptions if we don't have to).
	 *
	 * $owner is in object describing the user, it has the same format as
	 * defined in "geocache" method specs (see the "owner" field).
	 *
	 * The $type is either "full" or "static". Full attributions may contain
	 * dates and are not suitable for the replicate module. Static attributions
	 * don't change that frequently.
	 */
	public static function get_cache_attribution_note(
		$cache_id, $lang, array $langpref, $owner, $type
	) {
		$site_url = Settings::get('SITE_URL');
		$site_name = Okapi::get_normalized_site_name();
		$cache_url = $site_url."viewcache.php?cacheid=$cache_id";

		Okapi::gettext_domain_init(array_merge(array($lang), $langpref));
		if (Settings::get('OC_BRANCH') == 'oc.pl')
		{
			# This does not vary on $type (yet).

			$note = sprintf(
				_("This <a href='%s'>geocache</a> description comes from the <a href='%s'>%s</a> site."),
				$cache_url, $site_url, $site_name
			);
		}
		else
		{
			# OC.de wants the tld in lowercase here
			$site_name = ucfirst(strtolower($site_name));
			if ($type == 'full')
			{
				$note = sprintf(
					_(
						"&copy; <a href='%s'>%s</a>, <a href='%s'>%s</a>, ".
						"<a href='http://creativecommons.org/licenses/by-nc-nd/3.0/de/deed.en'>CC-BY-NC-ND</a>, ".
						"as of %s; all log entries &copy; their authors"
					),
					$owner['profile_url'], $owner['username'], $cache_url, $site_name, strftime('%x')
				);
			}
			elseif ($type == 'static')
			{
				$note = sprintf(
					_(
						"&copy; <a href='%s'>%s</a>, <a href='%s'>%s</a>, ".
						"<a href='http://creativecommons.org/licenses/by-nc-nd/3.0/de/deed.en'>CC-BY-NC-ND</a>; ".
						"all log entries &copy; their authors"
					),
					$owner['profile_url'], $owner['username'], $cache_url, $site_name
				);
			}
		}

		Okapi::gettext_domain_restore();

		return $note;
	}
}
