<?php include('_mod_security.php'); ?>
<?php
	session_start();
	switch ($_REQUEST['type']) :
		case 'batch_email_ical' :
			$sql = "SELECT * FROM events WHERE event_id = ".nz($_GET['event_id'], '0');
			$result = $db->query($sql) or die(json_encode(['result' => 'Database Error!']));
			if ($result->rowCount() > 0) :
				$row = $result->fetch(PDO::FETCH_OBJ);
				$downloadfile = APP_UPLOAD_DIR.'/eventdocs/batch_email_ical/'.str_pad($row->event_id, 10, '0', STR_PAD_LEFT).'/event.ics';
				header("Cache-Control: no-cache, must-revalidate"); 
				header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); 
				header('Content-type: application/force-download');
				header('Content-Disposition: attachment; filename="event_'.$row->event_id.'.ics"');
				readfile($downloadfile);		
			endif;
			break;
		case 'batch_email_attachment' :
			$sql = "SELECT * FROM events WHERE event_id = ".nz($_GET['event_id'], '0');
			$result = $db->query($sql) or die(json_encode(['result' => 'Database Error!']));
			if ($result->rowCount() > 0) :
				$ordinal = '';
				$allowed_ordinals = ['1', '2'];
				if (in_array($_GET['ordinal'], $allowed_ordinals)) :
					$ordinal = $_GET['ordinal'];
				endif;
				$row = $result->fetch(PDO::FETCH_OBJ);
				$downloadfile = APP_UPLOAD_DIR.'/eventdocs/batch_email_attachments/'.str_pad($row->event_id, 10, '0', STR_PAD_LEFT).'/'.$row->{'batch_email_attachment_'.$ordinal};
				header("Cache-Control: no-cache, must-revalidate"); 
				header("Expires: Sat, 26 Jul 1997 05:00:00 GMT"); 
				header('Content-type: application/force-download');
				header('Content-Disposition: attachment; filename="'.$row->{'batch_email_attachment_'.$ordinal}.'"');
				readfile($downloadfile);			
			endif;
			break;
	endswitch;
?>