package main

import "fmt"
import "strings"
import "strconv"
import "net/http"
import "net/url"
import "database/sql"
import _ "github.com/lib/pq"
import "math/rand"
import "html/template"
import "time"
import "regexp"
import "os/exec"
import "bytes"
import "encoding/json"
import "io/ioutil"
import "mime/multipart"
import "os"
import "bufio"
import "io"
import "github.com/gofrs/uuid"

var Port = ":" + GetConfigValue("instanceport")
var TP   = GetConfigValue("instancetp")
var Domain = TP + "" + GetConfigValue("instance")

var authReq = []string{"captcha","email","passphrase"}

var supportedFiles = []string{"image/gif","image/jpeg","image/png","image/svg+xml","image/webp","image/avif","image/apng","video/mp4","video/ogg","video/webm","audio/mpeg","audio/ogg","audio/wav", "audio/wave", "audio/x-wav"}

var SiteEmail = GetConfigValue("emailaddress")        //contact@fchan.xyz
var SiteEmailPassword = GetConfigValue("emailpass")
var SiteEmailServer = GetConfigValue("emailserver")   //mail.fchan.xyz
var SiteEmailPort = GetConfigValue("emailport")       //587

var ldjson = "application/ld+json"		
var activitystreams = "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\""

func main() {

	if _, err := os.Stat("./public"); os.IsNotExist(err) {
    os.Mkdir("./public", 0755)
	}

	InitCache()

	db := ConnectDB();

	defer db.Close()

	go MakeCaptchas(db, 100)

	*Key = CreateClientKey()	

	following := 	GetActorFollowingDB(db, Domain)
	
	Boards = &following

	// root actor is used to follow remote feeds that are not local
	//name, prefname, summary, auth requirements, restricted
	if GetConfigValue("instancename") != "" {
		CreateNewBoardDB(db, *CreateNewActor("", GetConfigValue("instancename"), GetConfigValue("instancesummary"), authReq, false))
	}
	
	// Allow access to public media folder
	fileServer := http.FileServer(http.Dir("./public"))
	http.Handle("/public/", http.StripPrefix("/public", neuter(fileServer)))

	javascriptFiles := http.FileServer(http.Dir("./static"))
	http.Handle("/static/", http.StripPrefix("/static", neuter(javascriptFiles)))					

	// main routing
	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request){
		path := r.URL.Path

		// remove trailing slash
		if path != "/" {
			re := regexp.MustCompile(`/$`)
			path = re.ReplaceAllString(path, "")
		}

		var mainActor bool
		var mainInbox bool
		var mainOutbox bool
		var mainFollowing bool
		var mainFollowers bool		

		var actorMain bool
		var actorInbox bool
		var actorCatalog bool
		var actorOutbox bool
		var actorPost bool
		var actorFollowing bool
		var actorFollowers bool
		var actorReported bool		
		var actorVerification bool

		var accept = r.Header.Get("Accept")
		
		var method = r.Method

		var actor = GetActorFromPath(db, path, "/")

		if actor.Name == "main" {
			mainActor = (path == "/")			
			mainInbox = (path == "/inbox")
			mainOutbox = (path == "/outbox")
			mainFollowing = (path == "/following")
			mainFollowers = (path == "/followers")			
		} else {
			actorMain = (path == "/" + actor.Name)			
			actorInbox = (path == "/" + actor.Name + "/inbox")
			actorCatalog = (path == "/" + actor.Name + "/catalog")
			actorOutbox = (path == "/" + actor.Name + "/outbox")
			actorFollowing = (path == "/" + actor.Name + "/following")
			actorFollowers = (path == "/" + actor.Name + "/followers")
			actorReported = (path == "/" + actor.Name + "/reported")				
			actorVerification = (path == "/" + actor.Name + "/verification")
			
			re := regexp.MustCompile("/" + actor.Name + "/\\w+")
			actorPost = 	re.MatchString(path)				
		}

		if mainActor {
			if accept == activitystreams || accept == ldjson {
				GetActorInfo(w, db, Domain)
				return
			}

			IndexGet(w, r, db)
			
			return
		}
		
		if mainInbox {
			if method == "POST" {
				
			} else {
				w.WriteHeader(http.StatusForbidden)				
				w.Write([]byte("404 no path"))
			}
			return
		}
		
		if mainOutbox {
			if method == "GET" {
				GetActorOutbox(w, r, db)
			} else if method == "POST" {
				fmt.Println("parsing outbox req")
				ParseOutboxRequest(w, r, db)
			} else {
				w.WriteHeader(http.StatusForbidden)			
				w.Write([]byte("404 no path"))
			}
			return
		}

		if mainFollowing {
			GetActorFollowing(w, db, Domain)
			return
		}

		if mainFollowers {
			GetActorFollowers(w, db, Domain)
			return
		}

		if actorMain {
			if accept == activitystreams || accept == ldjson {
				GetActorInfo(w, db, actor.Id)
				return 
			}

			collection, valid := WantToServe(db, actor.Name)
			if valid {
				OutboxGet(w, r, db, collection)
			}			

			return
		}

		if actorFollowing {
			GetActorFollowing(w, db, actor.Id)
			return
		}

		if actorFollowers {
			GetActorFollowers(w, db, actor.Id)
			return
		}		

		if actorInbox {
			if method == "POST" {
				ParseInboxRequest(w, r, db)
			} else {
				w.WriteHeader(http.StatusForbidden)
				w.Write([]byte("404 no path"))							
			}
			return
		}

		if actorCatalog {
			collection, valid := WantToServe(db, actor.Id)
			if valid {
				CatalogGet(w, r, db, collection)
			}
			return
		}

		if actorOutbox {
			if method == "GET" {
				GetActorOutbox(w, r, db)				
			} else if method == "POST" {
				ParseOutboxRequest(w, r, db)
			} else {
				w.WriteHeader(http.StatusForbidden)
				w.Write([]byte("404 no path"))											
			}
			return
		}

		if actorReported {
			GetActorReported(w, r, db, actor.Id)
			return
		}

		if actorVerification {
			if method == "POST" {
				p, _ := url.ParseQuery(r.URL.RawQuery)
				if len(p["email"]) > 0 {
					email := p["email"][0]
					verify := GetVerificationByEmail(db, email)
					if verify.Identifier != "" || !IsEmailSetup() {
						w.WriteHeader(http.StatusForbidden)
						w.Write([]byte("400 no path"))																	
					} else {
						var nVerify Verify
						nVerify.Type = "email"						
						nVerify.Identifier = email
						nVerify.Code = CreateKey(32)
						nVerify.Board = actor.Id
						CreateVerification(db, nVerify)
						SendVerification(nVerify)
						w.WriteHeader(http.StatusCreated)
						w.Write([]byte("Verification added"))																							
					}

				} else {
					w.WriteHeader(http.StatusForbidden)
					w.Write([]byte("400 no path"))											
				}
			} else {
				w.WriteHeader(http.StatusForbidden)
				w.Write([]byte("400 no path"))											
			}
			return 
		}

		//catch all
		if actorPost {
			if accept == activitystreams || accept == ldjson {			
				GetActorPost(w, db, path)
				return 
			}

			PostGet(w, r, db)
			return			
		}		

		w.WriteHeader(http.StatusForbidden)			
		w.Write([]byte("404 no path"))

	})

	http.HandleFunc("/post", func(w http.ResponseWriter, r *http.Request){

		r.ParseMultipartForm(10 << 20)

		file, header, _ := r.FormFile("file")

		if(file != nil && header.Size > (7 << 20)){
			w.Write([]byte("7MB max file size"))
			return
		}

		if(r.FormValue("inReplyTo") == "" || file == nil) {
			if(r.FormValue("comment") == "" && r.FormValue("subject") == ""){
				w.Write([]byte("Comment or Subject required"))
				return
			}
		}

		if(r.FormValue("captcha") == "") {
			w.Write([]byte("Captcha required"))
			return
		}			
		
		b := bytes.Buffer{}
		we := multipart.NewWriter(&b)

		if(file != nil){
			var fw io.Writer
			
			fw, err := we.CreateFormFile("file", header.Filename)

			CheckError(err, "error with form file create")

			_, err = io.Copy(fw, file)
			
			CheckError(err, "error with form file copy")
		}

		reply := ParseCommentForReply(r.FormValue("comment"))

		for key, r0 := range r.Form {
			if(key == "captcha") {
				err := we.WriteField(key, r.FormValue("captchaCode") + ":" + r.FormValue("captcha"))
				CheckError(err, "error with writing field")					
			}else{
				err := we.WriteField(key, r0[0])
				CheckError(err, "error with writing field")
			}
		}
		
		if(r.FormValue("inReplyTo") == "" && reply != ""){
			err := we.WriteField("inReplyTo", reply)
			CheckError(err, "error with writing inReplyTo field")			
		}
		
		we.Close()

		req, err := http.NewRequest("POST", r.FormValue("sendTo"), &b)
		
		CheckError(err, "error with post form req")
		
		req.Header.Set("Content-Type", we.FormDataContentType())
		req.Header.Set("Authorization", "basic: " + *Key)		

		resp, err := http.DefaultClient.Do(req)

		CheckError(err, "error with post form resp")

		defer resp.Body.Close()

		if(resp.StatusCode == 200){
			
			body, _ := ioutil.ReadAll(resp.Body)
			
			var obj ObjectBase
			obj = ParseOptions(r, obj)
			for _, e := range obj.Option {
				if(e == "noko" || e == "nokosage"){
					http.Redirect(w, r, TP + "" + Domain + "/" + r.FormValue("boardName") + "/" + string(body) , http.StatusMovedPermanently)
					break
				}
			}

			http.Redirect(w, r, Domain + "/" + r.FormValue("boardName"), http.StatusMovedPermanently)
			return
		}

		if(resp.StatusCode == 403){
			w.Write([]byte("Wrong Captcha"))
			return
		}
		
		http.Redirect(w, r, Domain + "/" + r.FormValue("boardName"), http.StatusMovedPermanently)
	})

	http.HandleFunc("/" + *Key + "/", func(w http.ResponseWriter, r *http.Request) {

		id, _ := GetPasswordFromSession(r)
		
		actor := GetActorFromPath(db, r.URL.Path, "/" + *Key + "/")

		if actor.Id == "" {
			actor = GetActorFromDB(db, Domain)
		}

		if id == "" || (id != actor.Id && id != Domain) {
			t := template.Must(template.ParseFiles("./static/verify.html"))
			t.Execute(w, "")
			return
		}

		re := regexp.MustCompile("/" + *Key + "/" + actor.Name + "/follow")
		follow := re.MatchString(r.URL.Path)

		re = regexp.MustCompile("/" + *Key + "/" + actor.Name)
		manage := re.MatchString(r.URL.Path)

		re = regexp.MustCompile("/" + *Key )
		admin := re.MatchString(r.URL.Path)

		re = regexp.MustCompile("/" + *Key + "/follow" )
		adminFollow := re.MatchString(r.URL.Path)

		if follow || adminFollow {
			r.ParseForm()

			var followActivity Activity

			followActivity.AtContext.Context = "https://www.w3.org/ns/activitystreams"
			followActivity.Type = "Follow"
			var nactor Actor
			var obj ObjectBase 
			followActivity.Actor = &nactor
			followActivity.Object = &obj
			followActivity.Actor.Id = r.FormValue("actor")
			var mactor Actor
			followActivity.Object.Actor = &mactor
			followActivity.Object.Actor.Id = r.FormValue("follow")
			followActivity.To = append(followActivity.To, r.FormValue("follow"))

			enc, _ := json.Marshal(followActivity)
			
			req, err := http.NewRequest("POST", actor.Outbox, bytes.NewBuffer(enc))

			CheckError(err, "error with follow req")		

			_, pass := GetPasswordFromSession(r)
			
			req.Header.Set("Authorization", "Basic " + pass)
			
			req.Header.Set("Content-Type", activitystreams)

			_, err = http.DefaultClient.Do(req)

			CheckError(err, "error with add board follow resp")

			following := 	GetActorFollowingDB(db, Domain)
			
			Boards = &following			

			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
			
		} else if manage && actor.Name != "" {
			t := template.Must(template.ParseFiles("./static/main.html", "./static/manage.html"))

			follow := GetActorCollection(actor.Following)
			follower := GetActorCollection(actor.Followers)
			reported := GetActorCollectionReq(r, actor.Id + "/reported")

			var following []string
			var followers []string
			var reports   []Report

			for _, e := range follow.Items {
				following = append(following, e.Id)
			}

			for _, e := range follower.Items {
				followers = append(followers, e.Id)
			}

			for _, e := range reported.Items {
				var r Report
				r.Count = int(e.Size)
				r.ID    = e.Id
				reports = append(reports, r)
			}

			localReports := GetLocalReportDB(db, actor.Name)

			for _, e := range localReports {
				var r Report
				r.Count = e.Count
				r.ID    = e.ID
				reports = append(reports, r)
			}			

			var adminData AdminPage
			adminData.Following = following
			adminData.Followers = followers
			adminData.Reported  = reports
			adminData.Domain = Domain
			adminData.IsLocal = IsActorLocal(db, actor.Id)

			var boardCollection []Board

			boardCollection = GetBoardCollection(db)
			
			adminData.Title = "Manage /" + actor.Name + "/"
			adminData.Boards = boardCollection
			adminData.Board.Name = actor.Name
			adminData.Actor = actor.Id
			adminData.Key = *Key
			adminData.Board.TP = TP
			t.ExecuteTemplate(w, "layout", adminData)
			
		} else if admin || actor.Id == Domain {

			t := template.Must(template.ParseFiles("./static/main.html", "./static/nadmin.html"))						
	
			actor := GetActor(Domain)
			follow := GetActorCollection(actor.Following).Items
			follower := GetActorCollection(actor.Followers).Items

			var following []string
			var followers []string

			for _, e := range follow {
				following = append(following, e.Id)
			}

			for _, e := range follower {
				followers = append(followers, e.Id)
			}

			var adminData AdminPage
			adminData.Following = following
			adminData.Followers = followers
			adminData.Actor = actor.Id
			adminData.Key = *Key
			adminData.Domain = Domain
			adminData.Board.ModCred,_ = GetPasswordFromSession(r)

			var boardCollection []Board

			boardCollection = GetBoardCollection(db)
			adminData.Boards = boardCollection			

			t.ExecuteTemplate(w, "layout",  adminData)				
		}
	})

	http.HandleFunc("/" + *Key + "/addboard", func(w http.ResponseWriter, r *http.Request) {

		var newActorActivity Activity
		var board Actor
		r.ParseForm()

		actor := GetActorFromDB(db, Domain)

		var restrict bool
		if r.FormValue("restricted") == "True" {
			restrict = true
		} else {
			restrict = false
		}
		
		board.Name = r.FormValue("name")
		board.PreferredUsername = r.FormValue("prefname")
		board.Summary = r.FormValue("summary")
		board.Restricted = restrict

		newActorActivity.AtContext.Context = "https://www.w3.org/ns/activitystreams"
		newActorActivity.Type = "New"
		var nactor Actor
		var nobj ObjectBase
		newActorActivity.Actor = &nactor
		newActorActivity.Object = &nobj		
		newActorActivity.Actor.Id = actor.Id
		newActorActivity.Object.Actor = &board

		
		enc, _ := json.Marshal(newActorActivity)

		req, err := http.NewRequest("POST", actor.Outbox, bytes.NewBuffer(enc))

		CheckError(err, "error with add board follow req")		

		_, pass := GetPasswordFromSession(r)		
		req.Header.Set("Authorization", "Basic " + pass)
		req.Header.Set("Content-Type", activitystreams)
		
		resp, err := http.DefaultClient.Do(req)		

		CheckError(err, "error with add board follow resp")

		defer resp.Body.Close()

		body, _ := ioutil.ReadAll(resp.Body)

		var respActor Actor
		
		err = json.Unmarshal(body, &respActor)

		CheckError(err, "error getting actor from body in new board")		

		//update board list with new instances following
		if resp.StatusCode == 200 {
			var board []ObjectBase
			var item ObjectBase			
			var removed bool = false

			item.Id = respActor.Id
			for _, e := range *Boards {
				if e.Id != item.Id {
					board = append(board, e)
				} else {
					removed = true
				}
			}

			if !removed {
				board = append(board, item)
			}
				
			*Boards = board
		}		

    http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)				
	})

	http.HandleFunc("/verify", func(w http.ResponseWriter, r *http.Request){
		if(r.Method == "POST") {
			r.ParseForm()
			identifier := r.FormValue("id")
			code := r.FormValue("code")

			var verify Verify
			verify.Identifier = identifier
			verify.Code = code

			j, _ := json.Marshal(&verify)
			
			req, err := http.NewRequest("POST", Domain + "/auth", bytes.NewBuffer(j))

			CheckError(err, "error making verify req")

			req.Header.Set("Content-Type", activitystreams)			

			resp, err := http.DefaultClient.Do(req)

			CheckError(err, "error getting verify resp")

			defer resp.Body.Close()

			rBody, _ := ioutil.ReadAll(resp.Body)

			body := string(rBody)

			if(resp.StatusCode != 200) {
				t := template.Must(template.ParseFiles("./static/verify.html"))
				t.Execute(w, "wrong password " + verify.Code)			
			} else {
				
				sessionToken, _ := uuid.NewV4()

				_, err := cache.Do("SETEX", sessionToken, "86400", body + "|" + verify.Code)
				if err != nil {
					t := template.Must(template.ParseFiles("./static/verify.html"))
					t.Execute(w, "")			
					return
				}

				http.SetCookie(w, &http.Cookie{
					Name:    "session_token",
					Value:   sessionToken.String(),
					Expires: time.Now().Add(60 * 60 * 24 * 7 * time.Second),
				})

				http.Redirect(w, r, "/", http.StatusSeeOther)				
			}
		} else {
			t := template.Must(template.ParseFiles("./static/verify.html"))
			t.Execute(w, "")
		}
	})			

	http.HandleFunc("/getcaptcha", func(w http.ResponseWriter, r *http.Request){
		w.Write([]byte(GetRandomCaptcha(db)))
	})

	http.HandleFunc("/delete", func(w http.ResponseWriter, r *http.Request){
		id := r.URL.Query().Get("id")
		board := r.URL.Query().Get("board")		
		actor := GetActorFromPath(db, id, "/")
		_, auth := GetPasswordFromSession(r)

		if id == "" || auth == "" {
			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))
			return
		}

		if !HasAuth(db, auth, actor.Id) {
			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))
			return
		}

		if !IsIDLocal(db, id) {
			CreateLocalDeleteDB(db, id, "post")
			CloseLocalReportDB(db, id, board)
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
			return
		}


		var obj ObjectBase
		obj.Id = id
		
		count, _ := GetObjectRepliesDBCount(db, obj)		

		if count == 0 {
			DeleteObject(db, obj.Id)
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
			return
		} else {
			DeleteObjectAndReplies(db, obj.Id)
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
			return
		}

		
		w.WriteHeader(http.StatusBadRequest)
		w.Write([]byte(""))		
	})

	http.HandleFunc("/deleteattach", func(w http.ResponseWriter, r *http.Request){
		
		id := r.URL.Query().Get("id")

		_, auth := GetPasswordFromSession(r)

		if id == "" || auth == "" {
			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))
			return
		}

		actor := GetActorFromPath(db, id, "/")

		if !HasAuth(db, auth, actor.Id) {
			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))
			return
		}		

		if !IsIDLocal(db, id) {
			CreateLocalDeleteDB(db, id, "attachment")
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)									
			return
		}

		DeleteAttachmentFromFile(db, id)
		DeletePreviewFromFile(db, id)
		http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)									
	})

	http.HandleFunc("/report", func(w http.ResponseWriter, r *http.Request){
		
		id := r.URL.Query().Get("id")
		close := r.URL.Query().Get("close")
		board := r.URL.Query().Get("board")		
		actor := GetActorFromPath(db, id, "/")
		_, auth := GetPasswordFromSession(r)

		if id == "" || auth == "" {
			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))					
			return				
		}		

		if close == "1" {
			if !HasAuth(db, auth, actor.Id) {
				w.WriteHeader(http.StatusBadRequest)
				w.Write([]byte(""))
				return
			}

			if !IsIDLocal(db, id) {
				CloseLocalReportDB(db, id, board)				
				http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
				return 
			}

			reported := DeleteReportActivity(db, id)
			if reported {
				http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)							
				return
			}

			w.WriteHeader(http.StatusBadRequest)
			w.Write([]byte(""))
			return
		}

		if !IsIDLocal(db, id) {
			fmt.Println("not local")
			CreateLocalReportDB(db, id, board)
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)
			return			
		}
		
		reported := ReportActivity(db, id)
		if reported {
			http.Redirect(w, r, r.Header.Get("Referer"), http.StatusSeeOther)			
			return
		}

		w.WriteHeader(http.StatusBadRequest)
		w.Write([]byte(""))					
	})

	http.HandleFunc("/auth", func(w http.ResponseWriter, r *http.Request){
		var verify Verify
		defer r.Body.Close()

		body, _ := ioutil.ReadAll(r.Body)

		err := json.Unmarshal(body, &verify)

		CheckError(err, "error get verify from json")

		v := GetVerificationByCode(db, verify.Code)

		if v.Identifier == verify.Identifier {
			w.Write([]byte(v.Board))
			return
		}

		w.WriteHeader(http.StatusBadRequest)
		w.Write([]byte(""))		
	})

	fmt.Println("Server for " + Domain + " running on port " + Port)

	fmt.Println("Mod key: " + *Key)
	PrintAdminAuth(db)
	
	http.ListenAndServe(Port, nil)	
}

func CheckError(e error, m string) error{
	if e != nil {
		fmt.Println()		
		fmt.Println(m)
		fmt.Println()		
		panic(e)
	}

	return e
}

func ConnectDB() *sql.DB {

	host     := GetConfigValue("dbhost")
	port,_   := strconv.Atoi(GetConfigValue("dbport"))
	user     := GetConfigValue("dbuser")
	password := GetConfigValue("dbpass")
	dbname   := GetConfigValue("dbname")
	
	psqlInfo := fmt.Sprintf("host=%s port=%d user=%s password=%s " +
		"dbname=%s sslmode=disable", host, port, user, password, dbname)

	db, err := sql.Open("postgres", psqlInfo)
	CheckError(err, "error with db connection")

	err = db.Ping()

	CheckError(err, "error with db ping")

	fmt.Println("Successfully connected DB")
	return db
}

func CreateKey(len int) string {
	var key string
	str := (CreateTripCode(RandomID(len)))
	for i := 0; i < len; i++ {
		key += fmt.Sprintf("%c", str[i])			
	}
	return key
}

func neuter(next http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        if strings.HasSuffix(r.URL.Path, "/") {
            http.NotFound(w, r)
            return
        }

        next.ServeHTTP(w, r)
    })
}

func CreateTripCode(input string) string {
	cmd := exec.Command("sha512sum")
	cmd.Stdin = strings.NewReader(input)
	var out bytes.Buffer
	cmd.Stdout = &out
	err := cmd.Run()

	CheckError(err, "error with create trip code")

	return out.String()
}

func CreateNameTripCode(input string) string {
	re := regexp.MustCompile("#.+")
	chunck := re.FindString(input)
	hash := CreateTripCode(chunck)
	return re.ReplaceAllString(input, hash[0:8])
}

func GetActorFromPath(db *sql.DB, location string, prefix string) Actor {
	pattern := fmt.Sprintf("%s([^/\n]+)(/.+)?", prefix)
	re := regexp.MustCompile(pattern)
	match := re.FindStringSubmatch(location)

	var actor string

	if(len(match) < 1 ) {
		actor = "/"
	} else {
		actor = strings.Replace(match[1], "/", "", -1)
	}

	if actor == "/" || actor == "outbox" || actor == "inbox" || actor == "following" || actor == "followers" {
		actor = "main"
	}

	var nActor Actor

	nActor = 	GetActorByNameFromDB(db, actor)

	if nActor.Id == "" {
		nActor = 	GetActorByName(db, actor)
	}

	return nActor
}

func GetContentType(location string) string {
	elements := strings.Split(location, ";")
	if len(elements) > 0 {
		return elements[0]	
	} else {
		return location
	}
}

func RandomID(size int) string {
	rand.Seed(time.Now().UnixNano())
	domain := "0123456789ABCDEFG"
	rng := size
	newID := ""
	for i := 0; i < rng; i++ {
		newID += string(domain[rand.Intn(len(domain))])
	}
	
	return newID
}

func CreateUniqueID(db *sql.DB, actor string) string {
	var newID string	
	isUnique := false
	for !isUnique {
		newID = RandomID(8)
		
		query := fmt.Sprintf("select id from activitystream where id='%s/%s/%s'", Domain, actor, newID)

		rows, err := db.Query(query)

		CheckError(err, "error with unique id query")

		defer rows.Close()

		var count int = 0
		for rows.Next(){
			count += 1
		}
		
		if count < 1 {
			isUnique = true
		}
	}
	
	return newID
}

func CreateNewActor(board string, prefName string, summary string, authReq []string, restricted bool) *Actor{
	actor := new(Actor)

	var path string
	if board == "" {
		path = Domain
		actor.Name = "main"
	} else {
		path = Domain + "/" + board
		actor.Name = board
	}

	actor.Type = "Service"
	actor.Id = fmt.Sprintf("%s", path)
	actor.Following = fmt.Sprintf("%s/following", actor.Id)
	actor.Followers = fmt.Sprintf("%s/followers", actor.Id)
	actor.Inbox = fmt.Sprintf("%s/inbox", actor.Id)
	actor.Outbox = fmt.Sprintf("%s/outbox", actor.Id)
	actor.PreferredUsername = prefName
	actor.Restricted = restricted
	actor.Summary = summary
	actor.AuthRequirement = authReq

	return actor
}

func GetActorInfo(w http.ResponseWriter, db *sql.DB, id string) {
	actor := GetActorFromDB(db, id)
	enc, _ := json.MarshalIndent(actor, "", "\t")
	w.Header().Set("Content-Type", "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"")
	w.Write(enc)
}

func GetActorPost(w http.ResponseWriter, db *sql.DB, path string) {
	collection := GetCollectionFromPath(db, Domain + "" + path)
	if len(collection.OrderedItems) > 0 {
		enc, _ := json.MarshalIndent(collection, "", "\t")							
		w.Header().Set("Content-Type", "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"")
		w.Write(enc)
	}
}

func CreateObject(objType string) ObjectBase {
	var nObj ObjectBase

	nObj.Type = objType
	nObj.Published = time.Now().Format(time.RFC3339)
	nObj.Updated = time.Now().Format(time.RFC3339)

	return nObj
}

func AddFollowersToActivity(db *sql.DB, activity Activity) Activity{
	followers := GetActorFollowDB(db, activity.Actor.Id)
	
	var nActivity Activity
	for _, e := range followers {
		var tempActivity Activity		
		actor := GetActor(e.Id)
		aFollowers := GetActorCollection(actor.Followers)
		for _, k := range aFollowers.Items {
			tempActivity.To = append(tempActivity.To, k.Id)
		}
		tempActivity.To = append(tempActivity.To, e.Id)

		for _, k := range tempActivity.To {
			var alreadyTo = false
			for _, n := range nActivity.To {
				if k == n {
					alreadyTo = true
				}
			}

			if !alreadyTo {
				nActivity.To = append(nActivity.To, k)
			}
		}
	}

	activity.To = nActivity.To

	return activity
}

func CreateActivity(activityType string, obj ObjectBase) Activity {
	var newActivity Activity

	newActivity.AtContext.Context = "https://www.w3.org/ns/activitystreams"
	newActivity.Type = activityType
	newActivity.Published = obj.Published
	newActivity.Actor = obj.Actor
	newActivity.Object = &obj

	for _, e := range obj.To {
		if obj.Actor.Id != e {
			newActivity.To = append(newActivity.To, e)
		}
	}

	for _, e := range obj.Cc {
		if obj.Actor.Id != e {		
			newActivity.Cc = append(newActivity.Cc, e)
		}
	}	

	return newActivity
}

func ProcessActivity(db *sql.DB, activity Activity) {
	activityType := activity.Type

	if activityType == "Create" {
		for _, e := range activity.To {
			if GetActorFromDB(db, e).Id != "" {
				fmt.Println("actor is in the database")
			} else {
				fmt.Println("actor is NOT in the database")
			}
		}
	} else if activityType == "Follow" {

	} else if activityType == "Delete" {

	}
}

func CreatePreviewObject(obj ObjectBase) *NestedObjectBase {

	re := regexp.MustCompile(`/.+$`)

	mimetype := re.ReplaceAllString(obj.MediaType, "")

	var nPreview NestedObjectBase

	if mimetype != "image" {
		return &nPreview
	}

	re = regexp.MustCompile(`.+/`)

	file := re.ReplaceAllString(obj.MediaType, "")

	href := GetUniqueFilename(file)

	nPreview.Type = "Preview"
	nPreview.Name = obj.Name
	nPreview.Href = Domain + "" + href
	nPreview.MediaType = obj.MediaType
	nPreview.Size = obj.Size
	nPreview.Published = obj.Published

	re = regexp.MustCompile(`/public/.+`)

	objFile := re.FindString(obj.Href)

	cmd := exec.Command("convert", "." + objFile ,"-resize", "250x250>", "." + href)

	err := cmd.Run()

	if CheckError(err, "error with resize attachment preview")	!= nil {
		var preview NestedObjectBase
		return &preview
	}

	return &nPreview
}

func CreateAttachmentObject(file multipart.File, header *multipart.FileHeader) ([]ObjectBase, *os.File) {
	contentType, _ := GetFileContentType(file)
	filename := header.Filename
	size := header.Size

	re := regexp.MustCompile(`.+/`)

	fileType := re.ReplaceAllString(contentType, "")

	tempFile, _ := ioutil.TempFile("./public", "*." + fileType)

	var nAttachment []ObjectBase
	var image ObjectBase
	
	image.Type = "Attachment"
	image.Name = filename
	image.Href = Domain + "/" + tempFile.Name()
	image.MediaType = contentType
	image.Size = size
	image.Published = time.Now().Format(time.RFC3339)

	nAttachment = append(nAttachment, image)

	return nAttachment, tempFile
}

func ParseCommentForReplies(comment string) []ObjectBase {
	
	re := regexp.MustCompile("(>>)(https://|http://)?(www\\.)?.+\\/\\w+")
	match := re.FindAllStringSubmatch(comment, -1)

	var links []string

	for i:= 0; i < len(match); i++ {
		str := strings.Replace(match[i][0], ">>", "", 1)
		str = strings.Replace(str, "www.", "", 1)		
		str = strings.Replace(str, "http://", "", 1)
		str = strings.Replace(str, "https://", "", 1)		
		str = TP + "" + str
		if !IsInStringArray(links, str) {
			links = append(links, str)
		}
	}

	var validLinks []ObjectBase
	for i:= 0; i < len(links); i++ {
		_, isValid := CheckValidActivity(links[i])
		if(isValid) {
			var reply = new(ObjectBase)
			reply.Id = links[i]
			reply.Published = time.Now().Format(time.RFC3339)
			validLinks = append(validLinks, *reply)
		}
	}

	return validLinks
}

func CheckValidActivity(id string) (Collection, bool) {

	req, err := http.NewRequest("GET", id, nil)
	
	if err != nil {
		fmt.Println("error with request")
		panic(err)
	}

	req.Header.Set("Accept", activitystreams)

	resp, err := http.DefaultClient.Do(req)

	if err != nil {
		fmt.Println("error with response")
		panic(err)		
	}

	defer resp.Body.Close()

	body, _ := ioutil.ReadAll(resp.Body)

	var respCollection Collection

	err = json.Unmarshal(body, &respCollection)

	if err != nil {
		panic(err)
	}

	if respCollection.AtContext.Context == "https://www.w3.org/ns/activitystreams" &&  respCollection.OrderedItems[0].Id != "" {
		return respCollection, true;
	}

	return respCollection, false;
}

func GetActor(id string) Actor {

	var respActor Actor

	if id == "" {
		return respActor
	}

	req, err := http.NewRequest("GET", id, nil)

	CheckError(err, "error with getting actor req")

	req.Header.Set("Accept", activitystreams)

	resp, err := http.DefaultClient.Do(req)

	if err != nil {
		fmt.Println("error with getting actor resp " + id)
		return respActor
	}

	defer resp.Body.Close()

	body, _ := ioutil.ReadAll(resp.Body)

	err = json.Unmarshal(body, &respActor)

	CheckError(err, "error getting actor from body")

	return respActor
}

func GetActorCollectionCache(db *sql.DB, actor Actor) Collection {
	var collection Collection

	collection.OrderedItems = GetObjectFromCache(db, actor.Id).OrderedItems

	collection.Actor = &actor

	collection.TotalItems = GetObjectPostsTotalCache(db, actor)
	collection.TotalImgs = GetObjectImgsTotalCache(db, actor)

	return collection
}

func GetActorCollectionDB(db *sql.DB, actor Actor) Collection {
	var collection Collection
	
	collection.OrderedItems = GetObjectFromDB(db, actor).OrderedItems

	collection.Actor = &actor

	collection.TotalItems = GetObjectPostsTotalDB(db, actor)
	collection.TotalImgs = GetObjectImgsTotalDB(db, actor)
	
	return collection
}

func GetActorCollection(collection string) Collection {
	var nCollection Collection

	if collection == "" {
		return nCollection
	}

	req, err := http.NewRequest("GET", collection, nil)

	CheckError(err, "error with getting actor collection req " + collection)

	req.Header.Set("Accept", activitystreams)

	resp, err := http.DefaultClient.Do(req)

	if err != nil {
		fmt.Println("error with getting actor collection resp " + collection)		
		return nCollection
	}


	defer resp.Body.Close()

	if resp.StatusCode == 200 {
		body, _ := ioutil.ReadAll(resp.Body)

		if len(body) > 0 { 
			err = json.Unmarshal(body, &nCollection)
			
			CheckError(err, "error getting actor collection from body " + collection)
		}
	}
	
	return nCollection
}

func IsValidActor(id string) (Actor, bool) {
	var respCollection Actor	
	req, err := http.NewRequest("GET", id, nil)

	CheckError(err, "error with valid actor request")

	req.Header.Set("Accept", activitystreams)	

	resp, err := http.DefaultClient.Do(req)

	CheckError(err, "error with valid actor response")

	defer resp.Body.Close()	

	if resp.StatusCode == 403 {
		return respCollection, false;	
	}
	
	body, _ := ioutil.ReadAll(resp.Body)

	err = json.Unmarshal(body, &respCollection)

	if err != nil {
		panic(err)
	}

	if respCollection.Id != "" && respCollection.Inbox != "" && respCollection.Outbox != "" {
		return respCollection, true;
	}

	return respCollection, false;	
}

func IsActivityLocal(db *sql.DB, activity Activity) bool {
	for _, e := range activity.To {
		if GetActorFromDB(db, e).Id != "" {
			return true
		}
	}

	for _, e := range activity.Cc {
		if GetActorFromDB(db, e).Id != "" {
			return true
		}
	}

	if activity.Actor != nil && GetActorFromDB(db, activity.Actor.Id).Id != "" {
		return true
	}

	return false
}

func IsIDLocal(db *sql.DB, id string) bool {
	activity := GetActivityFromDB(db, id)
	return len(activity.OrderedItems) > 0 
}

func IsActorLocal(db *sql.DB, id string) bool {
	actor := GetActorFromDB(db, id)

	if actor.Id != "" {
		return true
	}

	return false
}

func IsObjectLocal(db *sql.DB, id string) bool {

	query := `select id from activitystream where id=$1`

	rows, _ := db.Query(query, id)

	var nID string
	defer rows.Close()
	rows.Next()
	rows.Scan(&nID)

	if nID == "" {
		return false
	}

	return true
}

func IsObjectCached(db *sql.DB, id string) bool {

	query := `select id from cacheactivitystream where id=$1`
	rows, _ := db.Query(query, id)

	var nID string
	defer rows.Close()
	rows.Next()
	rows.Scan(&nID)	

	if nID == "" {
		return false
	}

	return true	
}

func GetObjectFromActivity(activity Activity) ObjectBase {
	return *activity.Object 
}

func MakeCaptchas(db *sql.DB, total int) {
	difference := total - GetCaptchaTotal(db)
	
	for i := 0; i < difference; i++ {
		CreateNewCaptcha(db)
	}
}

func GetFileContentType(out multipart.File) (string, error) {

	buffer := make([]byte, 512)

	_, err := out.Read(buffer)
	if err != nil {
		return "", err
	}

	out.Seek(0, 0)

	contentType := http.DetectContentType(buffer)

	return contentType, nil
}

func IsReplyInThread(db *sql.DB, inReplyTo string, id string) bool {
	obj, _ := CheckValidActivity(inReplyTo)

	for _, e := range obj.OrderedItems[0].Replies.OrderedItems {
		if e.Id == id {
			return true
		}
	}
	return false
}

func SupportedMIMEType(mime string) bool {
	for _, e := range supportedFiles {
		if e == mime {
			return true
		}
	}
	
	return false
}	

func DeleteReportActivity(db *sql.DB, id string) bool {

	query := fmt.Sprintf("delete from reported where id='%s'", id)

	_, err := db.Exec(query)

	if err != nil {
		CheckError(err, "error closing reported activity")
		return false
	}
	
	return true
}

func ReportActivity(db *sql.DB, id string) bool {

	if !IsIDLocal(db, id) {
		return false
	}

	actor := GetActivityFromDB(db, id)
	
	query := fmt.Sprintf("select count from reported where id='%s'", id)

	rows, err := db.Query(query)

	CheckError(err, "could not select count from reported")

	defer rows.Close()
	var count int
	for rows.Next() {
		rows.Scan(&count)
	}

	if count < 1 {
		query = fmt.Sprintf("insert into reported (id, count, board) values ('%s', %d, '%s')", id, 1, actor.Actor.Id)

		_, err := db.Exec(query)

		if err != nil {
			CheckError(err, "error inserting new reported activity")
			return false
		}
		
	} else {
		count = count + 1
		query = fmt.Sprintf("update reported set count=%d where id='%s'", count, id)

		_, err := db.Exec(query)
		
		if err != nil {
			CheckError(err, "error updating reported activity")
			return false
		}
	}

	return true
}

func GetActorReported(w http.ResponseWriter, r *http.Request, db *sql.DB, id string) {

	auth := r.Header.Get("Authorization")
	verification := strings.Split(auth, " ")

	if len(verification) < 2 {
		w.WriteHeader(http.StatusBadRequest)
		w.Write([]byte(""))
		return
	}

	if !HasAuth(db, verification[1], id) {
		w.WriteHeader(http.StatusBadRequest)
		w.Write([]byte(""))
		return
	}
	
	var following Collection

	following.AtContext.Context = "https://www.w3.org/ns/activitystreams"
	following.Type = "Collection"
	following.TotalItems = GetActorReportedTotal(db, id)
	following.Items = GetActorReportedDB(db, id)

	enc, _ := json.MarshalIndent(following, "", "\t")							
	w.Header().Set("Content-Type", activitystreams)
	w.Write(enc)
}

func MakeActivityRequest(activity Activity) {

	j, _ := json.MarshalIndent(activity, "", "\t")
	
	for _, e := range activity.To {

		actor := GetActor(e)

		if actor.Inbox != "" {
			req, err := http.NewRequest("POST", actor.Inbox, bytes.NewBuffer(j))

			req.Header.Set("Content-Type", activitystreams)				

			CheckError(err, "error with sending activity req to")

			_, err = http.DefaultClient.Do(req)

			CheckError(err, "error with sending activity resp to")
		}
	}	
}

func GetCollectionFromID(id string) Collection {
	var nColl Collection
	
	req, err := http.NewRequest("GET", id, nil)

	CheckError(err, "could not get collection from id req")

	req.Header.Set("Accept", activitystreams)				
	
	resp, err := http.DefaultClient.Do(req)

	if err != nil {
		CheckError(err, "could not get collection from " + id)
		return nColl
	}

	if resp.StatusCode == 200 {
		defer resp.Body.Close()
		
		body, _ := ioutil.ReadAll(resp.Body)

		err = json.Unmarshal(body, &nColl)

		CheckError(err, "error getting collection resp from json body")

	}

	return nColl
}

func GetActorFromID(id string) Actor {
	req, err := http.NewRequest("GET", id, nil)

	CheckError(err, "error getting actor from id req")

	req.Header.Set("Accept", activitystreams)

	resp, err := http.DefaultClient.Do(req)

	CheckError(err, "error getting actor from id resp")

	defer resp.Body.Close()

	body, _ := ioutil.ReadAll(resp.Body)

	var respCollection Collection

	err = json.Unmarshal(body, &respCollection)

	CheckError(err, "error getting actor resp from json body")

	return *respCollection.OrderedItems[0].Actor
}

func GetConfigValue(value string) string{
	file, err := os.Open("config")

	CheckError(err, "there was an error opening the config file")

	defer file.Close()

	lines := bufio.NewScanner(file)

	for lines.Scan() {
		line := strings.SplitN(lines.Text(), ":", 2)
		if line[0] == value {
			return line[1]
		}
	}

	return ""
}

func PrintAdminAuth(db *sql.DB){
	query := fmt.Sprintf("select identifier, code from boardaccess where board='%s' and type='admin'", Domain)

	rows, err := db.Query(query)

	CheckError(err, "Error getting Domain auth")

	var code string
	var identifier string
	
	rows.Next()
	rows.Scan(&identifier, &code)

	fmt.Println("Admin Login: " + identifier + ", Code: " + code) 
}

func IsInStringArray(array []string, value string) bool {
	for _, e := range array {
		if e == value {
			return true
		}
	}
	return false
}

func GetUniqueFilename(_type string) string {
	id   := RandomID(8)
	file := "/public/" + id + "." + _type
	
	for true {
		if _, err := os.Stat("." + file); err == nil {
			id   = RandomID(8)			
			file = "/public/" + id + "." + _type
		}else{
			return "/public/" + id + "." + _type
		}
	}

	return ""
}

func DeleteObjectRequest(db *sql.DB, id string) {
	var nObj ObjectBase
	nObj.Id = id

	activity := CreateActivity("Delete", nObj)

	obj := GetObjectFromPath(db, id)
	followers := GetActorFollowDB(db, obj.Actor.Id)
	for _, e := range followers {
		activity.To = append(activity.To, e.Id)
	}

	following := GetActorFollowingDB(db, obj.Actor.Id)
	for _, e := range following {
		activity.To = append(activity.To, e.Id)
	}	

	MakeActivityRequest(activity)
}

func DeleteObjectAndRepliesRequest(db *sql.DB, id string) {
	var nObj ObjectBase
	nObj.Id = id
	
	activity := CreateActivity("Delete", nObj)
	
	obj := GetObjectFromPath(db, id)

	followers := GetActorFollowDB(db, obj.Actor.Id)	
	for _, e := range followers {
		activity.To = append(activity.To, e.Id)
	}

	MakeActivityRequest(activity)
}

func ResizeAttachmentToPreview(db *sql.DB) {
	query := `select id, href, mediatype, name, size, published from activitystream where id in (select attachment from activitystream where attachment!='' and preview='')`

	rows, err := db.Query(query)

	CheckError(err, "error getting attachments")


	defer rows.Close()
	for rows.Next() {

		var id string		
		var href string
		var mediatype string
		var name string
		var size int
		var published string
		
		rows.Scan(&id, &href, &mediatype, &name, &size, &published)

		re := regexp.MustCompile(`^\w+`)

		_type := re.FindString(mediatype)

		if _type == "image" {

			re = regexp.MustCompile(`.+/`)

			file := re.ReplaceAllString(mediatype, "")

			nHref := GetUniqueFilename(file)

			var nPreview NestedObjectBase

			re = regexp.MustCompile(`/\w+$`)
			actor := re.ReplaceAllString(id, "")
			
			nPreview.Type = "Preview"
			nPreview.Id = fmt.Sprintf("%s/%s", actor, CreateUniqueID(db, actor))		
			nPreview.Name = name
			nPreview.Href = Domain + "" + nHref
			nPreview.MediaType = mediatype
			nPreview.Size = int64(size)
			nPreview.Published = published
			nPreview.Updated = published		

			re = regexp.MustCompile(`/public/.+`)

			objFile := re.FindString(href)
			
			if(id != "") {
				cmd := exec.Command("convert", "." + objFile ,"-resize", "250x250>", "." + nHref)

				err := cmd.Run()

				CheckError(err, "error with resize attachment preview")

				if err == nil {
					fmt.Println(objFile + " -> " + nHref)				
					WritePreviewToDB(db, nPreview)
					UpdateObjectWithPreview(db, id, nPreview.Id)
				}			
			}
		}
	}
}

func UpdateObjectWithPreview(db *sql.DB, id string, preview string) {
	query := `update activitystream set preview=$1 where attachment=$2`

	_, err := db.Exec(query, preview, id)

	CheckError(err, "could not update activity stream with preview")

}

func ParseCommentForReply(comment string) string {
	
	re := regexp.MustCompile("(>>)(https://|http://)?(www\\.)?.+\\/\\w+")	
	match := re.FindAllStringSubmatch(comment, -1)

	var links []string

	for i:= 0; i < len(match); i++ {
		str := strings.Replace(match[i][0], ">>", "", 1)
		links = append(links, str)
	}

	if(len(links) > 0){
		_, isValid := CheckValidActivity(links[0])

		if(isValid) {
			return links[0]
		}
	}
	
	return ""
}

func GetActorByName(db *sql.DB, name string) Actor {
	var actor Actor
		for _, e := range *Boards {
			boardActor := GetActorFromDB(db, e.Id)
			if boardActor.Id == "" {
				boardActor = GetRemoteActor(e.Id)
			}
			
			if boardActor.Name == name {
				actor = boardActor
			}
		}

	return actor
}

func GetActorCollectionReq(r *http.Request, collection string) Collection {
	var nCollection Collection

	req, err := http.NewRequest("GET", collection, nil)

	CheckError(err, "error with getting actor collection req " + collection)

	_, pass := GetPasswordFromSession(r)

	req.Header.Set("Accept", activitystreams)

	req.Header.Set("Authorization", "Basic " + pass)		

	resp, err := http.DefaultClient.Do(req)

	CheckError(err, "error with getting actor collection resp " + collection)

	if resp.StatusCode == 200 {

		defer resp.Body.Close()

		body, _ := ioutil.ReadAll(resp.Body)

		err = json.Unmarshal(body, &nCollection)

		CheckError(err, "error getting actor collection from body " + collection)
	}
	
	return nCollection
}