<?php

declare(strict_types=1);

/**
 * Teampass - a collaborative passwords manager.
 * ---
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 * ---
 * @project   Teampass
 * @version   3.0.4
 * @file      items.queries.php
 * ---
 * @author    Nils Laumaillé (nils@teampass.net)
 * @copyright 2009-2023 Teampass.net
 * @license   https://spdx.org/licenses/GPL-3.0-only.html#licenseText GPL-3.0
 * ---
 * @see       https://www.teampass.net
 */


require_once 'SecureHandler.php';
session_name('teampass_session');
session_start();
if (!isset($_SESSION['CPM']) || $_SESSION['CPM'] === false || !isset($_SESSION['key']) || empty($_SESSION['key'])) {
    die('Hacking attempt...');
}

// Load config
if (file_exists('../includes/config/tp.config.php')) {
    include_once '../includes/config/tp.config.php';
} elseif (file_exists('./includes/config/tp.config.php')) {
    include_once './includes/config/tp.config.php';
} else {
    throw new Exception("Error file '/includes/config/tp.config.php' not exists", 1);
}

// Do checks
require_once $SETTINGS['cpassman_dir'] . '/includes/config/include.php';
require_once $SETTINGS['cpassman_dir'] . '/sources/checks.php';

if (checkUser($_SESSION['user_id'], $_SESSION['key'], 'items', $SETTINGS) === false) {
    // Not allowed page
    echo "> ".$_SESSION['user_id']." < - > ".$_SESSION['key']." <";
    $_SESSION['error']['code'] = ERR_NOT_ALLOWED;
    include $SETTINGS['cpassman_dir'] . '/error.php';
    exit;
}

/*
 * Define Timezone
*/
if (isset($SETTINGS['timezone']) === true) {
    date_default_timezone_set($SETTINGS['timezone']);
} else {
    date_default_timezone_set('UTC');
}

require_once $SETTINGS['cpassman_dir'] . '/includes/language/' . $_SESSION['user']['user_language'] . '.php';
require_once $SETTINGS['cpassman_dir'] . '/includes/config/settings.php';
header('Content-type: text/html; charset=utf-8');
header('Cache-Control: no-cache, must-revalidate');
require_once 'main.functions.php';

// Ensure Complexity levels are translated
if (defined('TP_PW_COMPLEXITY') === false) {
    define(
        'TP_PW_COMPLEXITY',
        array(
            TP_PW_STRENGTH_1 => array(TP_PW_STRENGTH_1, langHdl('complex_level1'), 'fas fa-thermometer-empty text-danger'),
            TP_PW_STRENGTH_2 => array(TP_PW_STRENGTH_2, langHdl('complex_level2'), 'fas fa-thermometer-quarter text-warning'),
            TP_PW_STRENGTH_3 => array(TP_PW_STRENGTH_3, langHdl('complex_level3'), 'fas fa-thermometer-half text-warning'),
            TP_PW_STRENGTH_4 => array(TP_PW_STRENGTH_4, langHdl('complex_level4'), 'fas fa-thermometer-three-quarters text-success'),
            TP_PW_STRENGTH_5 => array(TP_PW_STRENGTH_5, langHdl('complex_level5'), 'fas fa-thermometer-full text-success'),
        )
    );
}

// Load AntiXSS
include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/anti-xss-master/src/voku/helper/ASCII.php';
include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/anti-xss-master/src/voku/helper/UTF8.php';
include_once $SETTINGS['cpassman_dir'] . '/includes/libraries/anti-xss-master/src/voku/helper/AntiXSS.php';
$antiXss = new voku\helper\AntiXSS();

// Connect to mysql server
require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Database/Meekrodb/db.class.php';
if (defined('DB_PASSWD_CLEAR') === false) {
    define('DB_PASSWD_CLEAR', defuseReturnDecrypted(DB_PASSWD, $SETTINGS));
}
DB::$host = DB_HOST;
DB::$user = DB_USER;
DB::$password = DB_PASSWD_CLEAR;
DB::$dbName = DB_NAME;
DB::$port = DB_PORT;
DB::$encoding = DB_ENCODING;
DB::$ssl = DB_SSL;
DB::$connect_options = DB_CONNECT_OPTIONS;

// Load Tree
require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Tree/NestedTree/NestedTree.php';
$tree = new Tree\NestedTree\NestedTree(prefixTable('nested_tree'), 'id', 'parent_id', 'title');


// Prepare POST variables
$data = [
    'type' => isset($_POST['type']) === true ? $_POST['type'] : '',
    'data' => isset($_POST['data']) === true ? $_POST['data'] : '',
    'key' => isset($_POST['key']) === true ? $_POST['key'] : '',
    'label' => isset($_POST['label']) === true ? $_POST['label'] : '',
    'status' => isset($_POST['status']) === true ? $_POST['status'] : '',
    'cat' => isset($_POST['cat']) === true ? $_POST['cat'] : '',
    'receipt' => isset($_POST['receipt']) === true ? $_POST['receipt'] : '',
    'itemId' => isset($_POST['item_id']) === true ? $_POST['item_id'] : '',
    'folderId' => isset($_POST['folder_id']) === true ? $_POST['folder_id'] : '',
    'id' => isset($_POST['id']) === true ? $_POST['id'] : '',
    'destination' => isset($_POST['destination']) === true ? $_POST['destination'] : '',
    'source' => isset($_POST['source']) === true ? $_POST['source'] : '',
    'userId' => isset($_POST['user_id']) === true ? $_POST['user_id'] : '',
    'getType' => isset($_GET['type']) === true ? $_GET['type'] : '',
    'getTerm' => isset($_GET['term']) === true ? $_GET['term'] : '',
    'option' => isset($_POST['option']) === true ? $_POST['option'] : '',
    'fileSuffix' => isset($_POST['file_suffix']) === true ? $_POST['file_suffix'] : '',
    'context' => isset($_POST['context']) === true ? $_POST['context'] : '',
    'notifyType' => isset($_POST['notify_type']) === true ? $_POST['notify_type'] : '',
    'timestamp' => isset($_POST['timestamp']) === true ? $_POST['timestamp'] : '',
];

$filters = [
    'type' => 'trim|escape',
    'data' => 'trim|escape',
    'key' => 'trim|escape',
    'label' => 'trim|escape',
    'status' => 'trim|escape',
    'cat' => 'trim|escape',
    'receipt' => 'trim|escape',
    'itemId' => 'cast:integer',
    'folderId' => 'cast:integer',
    'id' => 'cast:integer',
    'destination' => 'cast:integer',
    'source' => 'cast:integer',
    'userId' => 'cast:integer',
    'getType' => 'trim|escape',
    'getTerm' => 'trim|escape',
    'option' => 'trim|escape',
    'fileSuffix' => 'trim|escape',
    'context' => 'trim|escape',
    'notifyType' => 'trim|escape',
    'timestamp' => 'cast:integer',
];

$inputData = dataSanitizer(
    $data,
    $filters,
    $SETTINGS['cpassman_dir']
);

// Do asked action
if (is_null($inputData['type']) === false) {
    switch ($inputData['type']) {
        /*
        * CASE
        * creating a new ITEM
        */
        case 'new_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // init
            $returnValues = array();
            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            if (is_array($dataReceived) === true && count($dataReceived) > 0) {
                // Prepare variables
                $post_anyone_can_modify = filter_var($dataReceived['anyone_can_modify'], FILTER_SANITIZE_NUMBER_INT);
                $post_complexity_level = filter_var($dataReceived['complexity_level'], FILTER_SANITIZE_NUMBER_INT);
                $post_description = $antiXss->xss_clean($dataReceived['description']);
                $post_diffusion_list = filter_var(
                    $dataReceived['diffusion_list'],
                    FILTER_SANITIZE_STRING
                );
                $post_diffusion_list = $post_diffusion_list !== false ? json_decode($post_diffusion_list) : '';
                $post_diffusion_list_names = filter_var_array(
                    $dataReceived['diffusion_list_names'],
                    FILTER_SANITIZE_STRING
                );
                $post_email = filter_var(htmlspecialchars_decode($dataReceived['email']), FILTER_SANITIZE_EMAIL);
                $post_fields = filter_var(
                    $dataReceived['fields'],
                    FILTER_SANITIZE_STRING
                );
                $post_fields = $post_fields !== false ? json_decode($post_fields) : '';
                $inputData['folderId'] = filter_var($dataReceived['folder'], FILTER_SANITIZE_NUMBER_INT);
                $post_folder_is_personal = filter_var($dataReceived['folder_is_personal'], FILTER_SANITIZE_NUMBER_INT);
                $inputData['label'] = filter_var($dataReceived['label'], FILTER_SANITIZE_STRING);
                $post_login = filter_var($dataReceived['login'], FILTER_SANITIZE_STRING);
                $post_password = htmlspecialchars_decode($dataReceived['pw']);
                $post_restricted_to = filter_var(
                    $dataReceived['restricted_to'],
                    FILTER_SANITIZE_STRING
                );
                $post_restricted_to = $post_restricted_to !== false ? json_decode($post_restricted_to) : '';
                $post_restricted_to_roles = filter_var(
                    $dataReceived['restricted_to_roles'],
                    FILTER_SANITIZE_STRING
                );
                $post_restricted_to_roles = $post_restricted_to_roles !== false ? json_decode($post_restricted_to_roles) : '';
                $post_salt_key_set = isset($_SESSION['user']['session_psk']) === true
                    && empty($_SESSION['user']['session_psk']) === false ? '1' : '0';
                $post_tags = htmlspecialchars_decode($dataReceived['tags']);
                $post_template_id = filter_var($dataReceived['template_id'], FILTER_SANITIZE_NUMBER_INT);
                $post_url = filter_var(htmlspecialchars_decode($dataReceived['url']), FILTER_SANITIZE_URL);
                $post_uploaded_file_id = filter_var($dataReceived['uploaded_file_id'], FILTER_SANITIZE_NUMBER_INT);
                $inputData['userId'] = filter_var($dataReceived['user_id'], FILTER_SANITIZE_NUMBER_INT);
                $post_to_be_deleted_after_date = filter_var($dataReceived['to_be_deleted_after_date'], FILTER_SANITIZE_STRING);
                $post_to_be_deleted_after_x_views = filter_var($dataReceived['to_be_deleted_after_x_views'], FILTER_SANITIZE_NUMBER_INT);
                $post_fa_icon = filter_var(($dataReceived['fa_icon']), FILTER_SANITIZE_STRING);

                //-> DO A SET OF CHECKS
                // Perform a check in case of Read-Only user creating an item in his PF
                if ($_SESSION['user_read_only'] === true
                    && (in_array($inputData['folderId'], $_SESSION['personal_folders']) === false
                    || $post_folder_is_personal !== 1)
                ) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to_access_this_folder'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Is author authorized to create in this folder
                if (count($_SESSION['list_folders_limited']) > 0) {
                    if (in_array($inputData['folderId'], array_keys($_SESSION['list_folders_limited'])) === false
                        && in_array($inputData['folderId'], $_SESSION['groupes_visibles']) === false
                        && in_array($inputData['folderId'], $_SESSION['personal_folders']) === false
                    ) {
                        echo (string) prepareExchangedData(
                            $SETTINGS['cpassman_dir'],
                            array(
                                'error' => true,
                                'message' => langHdl('error_not_allowed_to_access_this_folder'),
                            ),
                            'encode'
                        );
                        break;
                    }
                } else {
                    if (in_array($inputData['folderId'], $_SESSION['groupes_visibles']) === false) {
                        echo (string) prepareExchangedData(
                            $SETTINGS['cpassman_dir'],
                            array(
                                'error' => true,
                                'message' => langHdl('error_not_allowed_to_access_this_folder'),
                            ),
                            'encode'
                        );
                        break;
                    }
                }

                // perform a check in case of Read-Only user creating an item in his PF
                if (
                    $_SESSION['user_read_only'] === true
                    && in_array($inputData['folderId'], $_SESSION['personal_folders']) === false
                ) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to_access_this_folder'),
                        ),
                        'encode'
                    );
                    break;
                }

                // is pwd empty?
                if (
                    empty($post_password) === true
                    && isset($_SESSION['user']['create_item_without_password']) === true
                    && (int) $_SESSION['user']['create_item_without_password'] !== 1
                ) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('password_cannot_be_empty'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Check length
                if (strlen($post_password) > $SETTINGS['pwd_maximum_length']) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('password_too_long'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Need info in DB
                // About special settings
                $dataFolderSettings = DB::queryFirstRow(
                    'SELECT bloquer_creation, bloquer_modification, personal_folder
                    FROM ' . prefixTable('nested_tree') . ' 
                    WHERE id = %i',
                    $inputData['folderId']
                );
                $itemInfos = [];
                $itemInfos['personal_folder'] = $dataFolderSettings['personal_folder'];
                if ((int) $itemInfos['personal_folder'] === 1) {
                    $itemInfos['no_complex_check_on_modification'] = 1;
                    $itemInfos['no_complex_check_on_creation'] = 1;
                } else {
                    $itemInfos['no_complex_check_on_modification'] = (int) $dataFolderSettings['bloquer_modification'];
                    $itemInfos['no_complex_check_on_creation'] = (int) $dataFolderSettings['bloquer_creation'];
                }

                // Get folder complexity
                $folderComplexity = DB::queryfirstrow(
                    'SELECT valeur
                    FROM ' . prefixTable('misc') . '
                    WHERE type = %s AND intitule = %i',
                    'complex',
                    $inputData['folderId']
                );
                $itemInfos['requested_folder_complexity'] = $folderComplexity !== null ? (int) $folderComplexity['valeur'] : 0;

                // Check COMPLEXITY
                if ($post_complexity_level < $itemInfos['requested_folder_complexity'] && $itemInfos['no_complex_check_on_creation'] === 0) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_security_level_not_reached'),
                        ),
                        'encode'
                    );
                    break;
                }

                // ./ END

                // check if element doesn't already exist
                $itemExists = 0;
                $newID = '';
                $data = DB::queryfirstrow(
                    'SELECT * FROM ' . prefixTable('items') . '
                    WHERE label = %s AND inactif = %i',
                    $inputData['label'],
                    0
                );
                $counter = DB::count();
                if ($counter > 0) {
                    $itemExists = 1;
                } else {
                    $itemExists = 0;
                }

                // Manage case where item is personal.
                // In this case, duplication is allowed
                if (
                    isset($SETTINGS['duplicate_item']) === true
                    && (int) $SETTINGS['duplicate_item'] === 0
                    && (int) $post_salt_key_set === 1
                    && isset($post_salt_key_set) === true
                    && (int) $post_folder_is_personal === 1
                    && isset($post_folder_is_personal) === true
                ) {
                    $itemExists = 0;
                }

                if ((isset($SETTINGS['duplicate_item']) === true
                        && (int) $SETTINGS['duplicate_item'] === 0
                        && (int) $itemExists === 0)
                    || (isset($SETTINGS['duplicate_item']) === true
                        && (int) $SETTINGS['duplicate_item'] === 1)
                ) {
                    // Handle case where pw is empty
                    // if not allowed then warn user
                    if ((isset($_SESSION['user']['create_item_without_password']) === true
                            && (int) $_SESSION['user']['create_item_without_password'] !== 1) ||
                        empty($post_password) === false
                    ) {
                        // NEW ENCRYPTION
                        $cryptedStuff = doDataEncryption($post_password);
                    } else {
                        $cryptedStuff['encrypted'] = '';
                        $cryptedStuff['objectKey'] = '';
                    }

                    $post_password = $cryptedStuff['encrypted'];

                    // ADD item
                    DB::insert(
                        prefixTable('items'),
                        array(
                            'label' => $inputData['label'],
                            'description' => $post_description,
                            'pw' => $post_password,
                            'pw_iv' => '',
                            'email' => $post_email,
                            'url' => $post_url,
                            'id_tree' => $inputData['folderId'],
                            'login' => $post_login,
                            'inactif' => 0,
                            'restricted_to' => empty($post_restricted_to) === true ?
                                '' : (is_array($post_restricted_to) === true ? implode(';', $post_restricted_to) : $post_restricted_to),
                            'perso' => (isset($post_folder_is_personal) === true && (int) $post_folder_is_personal === 1) ?
                                1 : 0,
                            'anyone_can_modify' => (isset($post_anyone_can_modify) === true
                                && $post_anyone_can_modify === 'on') ? 1 : 0,
                            'complexity_level' => $post_complexity_level,
                            'encryption_type' => 'teampass_aes',
                            'fa_icon' => $post_fa_icon,
                        )
                    );
                    $newID = DB::insertId();

                    // Create sharekeys for users
                    storeUsersShareKey(
                        prefixTable('sharekeys_items'),
                        (int) $post_folder_is_personal,
                        (int) $inputData['folderId'],
                        (int) $newID,
                        $cryptedStuff['objectKey'],
                        $SETTINGS
                    );

                    /*
                    // Prepare shareKey for users
                    if ((int) $post_folder_is_personal === 1 && isset($post_folder_is_personal) === true) {
                        // If this is a personal object
                        DB::insert(
                            prefixTable('sharekeys_items'),
                            array(
                                'object_id' => $newID,
                                'user_id' => $_SESSION['user_id'],
                                'share_key' => encryptUserObjectKey($cryptedStuff['objectKey'], $_SESSION['user']['public_key']),
                            )
                        );
                    } else {
                        // This is a public object
                        $users = DB::query(
                            'SELECT id, public_key
                            FROM '.prefixTable('users').'
                            WHERE id NOT IN ("'.OTV_USER_ID.'","'.SSH_USER_ID.'","'.API_USER_ID.'")
                            AND public_key != ""'
                        );
                        foreach ($users as $user) {
                            // Insert in DB the new object key for this item by user
                            DB::insert(
                                prefixTable('sharekeys_items'),
                                array(
                                    'object_id' => $newID,
                                    'user_id' => (int) $user['id'],
                                    'share_key' => encryptUserObjectKey($cryptedStuff['objectKey'], $user['public_key']),
                                )
                            );
                        }
                    }
                    */

                    // update fields
                    if (
                        isset($SETTINGS['item_extra_fields']) === true
                        && (int) $SETTINGS['item_extra_fields'] === 1
                    ) {
                        foreach (explode('_|_', $post_fields) as $field) {
                            $field_data = explode('~~', $field);
                            if (count($field_data) > 1 && empty($field_data[1]) === false) {
                                // should we encrypt the data
                                $dataTmp = DB::queryFirstRow(
                                    'SELECT encrypted_data
                                    FROM ' . prefixTable('categories') . '
                                    WHERE id = %i',
                                    $field_data[0]
                                );

                                // Should we encrypt the data
                                if ((int) $dataTmp['encrypted_data'] === 1) {
                                    $cryptedStuff = doDataEncryption($field_data[1]);

                                    // Create sharekeys for users
                                    storeUsersShareKey(
                                        prefixTable('sharekeys_fields'),
                                        (int) $post_folder_is_personal,
                                        (int) $inputData['folderId'],
                                        (int) $newId,
                                        $cryptedStuff['objectKey'],
                                        $SETTINGS
                                    );

                                    // update value
                                    DB::insert(
                                        prefixTable('categories_items'),
                                        array(
                                            'item_id' => $newID,
                                            'field_id' => $field_data[0],
                                            'data' => $cryptedStuff['encrypted'],
                                            'data_iv' => '',
                                            'encryption_type' => TP_ENCRYPTION_NAME,
                                        )
                                    );
                                } else {
                                    // update value
                                    DB::insert(
                                        prefixTable('categories_items'),
                                        array(
                                            'item_id' => $newID,
                                            'field_id' => $field_data[0],
                                            'data' => $field_data[1],
                                            'data_iv' => '',
                                            'encryption_type' => 'not_set',
                                        )
                                    );
                                }
                            }
                        }
                    }

                    // If template enable, is there a main one selected?
                    if (
                        isset($SETTINGS['item_creation_templates']) === true
                        && (int) $SETTINGS['item_creation_templates'] === 1
                        && isset($post_template_id) === true
                        && empty($post_template_id) === false
                    ) {
                        DB::queryFirstRow(
                            'SELECT *
                            FROM ' . prefixTable('templates') . '
                            WHERE item_id = %i',
                            $newID
                        );
                        if (DB::count() === 0) {
                            // store field text
                            DB::insert(
                                prefixTable('templates'),
                                array(
                                    'item_id' => $newID,
                                    'category_id' => $post_template_id,
                                )
                            );
                        } else {
                            // Delete if empty
                            if (empty($post_template_id) === true) {
                                DB::delete(
                                    prefixTable('templates'),
                                    'item_id = %i',
                                    $newID
                                );
                            } else {
                                // Update value
                                DB::update(
                                    prefixTable('templates'),
                                    array(
                                        'category_id' => $post_template_id,
                                    ),
                                    'item_id = %i',
                                    $newID
                                );
                            }
                        }
                    }

                    // If automatic deletion asked
                    if (
                        isset($SETTINGS['enable_delete_after_consultation']) === true
                        && (int) $SETTINGS['enable_delete_after_consultation'] === 1
                        && is_null($post_to_be_deleted_after_x_views) === false
                        && is_null($post_to_be_deleted_after_date) === false
                    ) {
                        if (
                            empty($post_to_be_deleted_after_date) === false
                            || $post_to_be_deleted_after_x_views > 0
                        ) {
                            // Automatic deletion to be added
                            DB::insert(
                                prefixTable('automatic_del'),
                                array(
                                    'item_id' => $newID,
                                    'del_enabled' => 1,
                                    'del_type' => $post_to_be_deleted_after_x_views > 0 ? 1 : 2, //1 = numeric : 2 = date
                                    'del_value' => $post_to_be_deleted_after_x_views > 0 ? $post_to_be_deleted_after_x_views : dateToStamp($post_to_be_deleted_after_date, $SETTINGS['date_format']),
                                )
                            );
                        }
                    }

                    // Get readable list of restriction
                    $listOfRestricted = $oldRestrictionList = '';
                    if (
                        is_array($post_restricted_to) === true
                        && count($post_restricted_to) > 0
                        && isset($SETTINGS['restricted_to']) === true
                        && (int) $SETTINGS['restricted_to'] === 1
                    ) {
                        foreach ($post_restricted_to as $userRest) {
                            if (empty($userRest) === false) {
                                $dataTmp = DB::queryfirstrow('SELECT login FROM ' . prefixTable('users') . ' WHERE id= %i', $userRest);
                                if (empty($listOfRestricted)) {
                                    $listOfRestricted = $dataTmp['login'];
                                } else {
                                    $listOfRestricted .= ';' . $dataTmp['login'];
                                }
                            }
                        }
                    }
                    if (
                        $post_restricted_to !== null
                        && $data !== null
                        && $data['restricted_to'] !== $post_restricted_to
                        && (int) $SETTINGS['restricted_to'] === 1
                    ) {
                        if (empty($data['restricted_to']) === false) {
                            foreach (explode(';', $data['restricted_to']) as $userRest) {
                                if (empty($userRest) === false) {
                                    $dataTmp = DB::queryfirstrow('SELECT login FROM ' . prefixTable('users') . ' WHERE id= ' . $userRest);
                                    if (empty($oldRestrictionList) === true) {
                                        $oldRestrictionList = $dataTmp['login'];
                                    } else {
                                        $oldRestrictionList .= ';' . $dataTmp['login'];
                                    }
                                }
                            }
                        }
                    }
                    // Manage retriction_to_roles
                    if (
                        is_array($post_restricted_to_roles) === true
                        && count($post_restricted_to_roles) > 0
                        && isset($SETTINGS['restricted_to_roles']) === true
                        && (int) $SETTINGS['restricted_to_roles'] === 1
                    ) {
                        // add roles for item
                        if (
                            is_array($post_restricted_to_roles) === true
                            && count($post_restricted_to_roles) > 0
                        ) {
                            foreach ($post_restricted_to_roles as $role) {
                                if (count($role) > 1) {
                                    $role = $role[1];
                                } else {
                                    $role = $role[0];
                                }
                                DB::insert(
                                    prefixTable('restriction_to_roles'),
                                    array(
                                        'role_id' => $role,
                                        'item_id' => $inputData['itemId'],
                                    )
                                );
                            }
                        }
                    }

                    // log
                    logItems(
                        $SETTINGS,
                        (int) $newID,
                        $inputData['label'],
                        $_SESSION['user_id'],
                        'at_creation',
                        $_SESSION['login']
                    );

                    // Add tags
                    $tags = explode(' ', $post_tags);
                    foreach ($tags as $tag) {
                        if (empty($tag) === false) {
                            DB::insert(
                                prefixTable('tags'),
                                array(
                                    'item_id' => $newID,
                                    'tag' => strtolower($tag),
                                )
                            );
                        }
                    }

                    // Check if any files have been added
                    if (empty($post_uploaded_file_id) === false) {
                        $rows = DB::query(
                            'SELECT id
                            FROM ' . prefixTable('files') . '
                            WHERE id_item = %s',
                            $post_uploaded_file_id
                        );
                        foreach ($rows as $record) {
                            // update item_id in files table
                            DB::update(
                                prefixTable('files'),
                                array(
                                    'id_item' => $newID,
                                    'confirmed' => 1,
                                ),
                                'id=%i',
                                $record['id']
                            );
                        }
                    }

                    // Announce by email?
                    if (empty($post_diffusion_list) === false) {
                        // get links url
                        if (empty($SETTINGS['email_server_url'])) {
                            $SETTINGS['email_server_url'] = $SETTINGS['cpassman_url'];
                        }

                        // Get path
                        $path = geItemReadablePath(
                            (int) $inputData['folderId'],
                            $label,
                            $SETTINGS
                        );

                        // send email
                        if (is_array($post_diffusion_list) === true && count($post_diffusion_list) > 0) {
                            $cpt = 0;
                            foreach (explode(';', $post_diffusion_list) as $emailAddress) {
                                if (empty($emailAddress) === false) {
                                    prepareSendingEmail(
                                        langHdl('email_subject_item_updated'),
                                        str_replace(
                                            array('#label', '#link'),
                                                array($path, $SETTINGS['email_server_url'] . '/index.php?page=items&group=' . $inputData['folderId'] . '&id=' . $newID . $txt['email_body3']),
                                                langHdl('new_item_email_body')
                                        ),
                                        $emailAddress,
                                        $post_diffusion_list_names[$cpt],
                                        $SETTINGS
                                    );
                                }
                                $cpt++;
                            }
                        }
                    }
                } elseif (
                    isset($SETTINGS['duplicate_item']) === true
                    && (int) $SETTINGS['duplicate_item'] === 0
                    && (int) $itemExists === 1
                ) {
                    // Encrypt data to return
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_item_exists'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Add item to CACHE table if new item has been created
                if (isset($newID) === true) {
                    updateCacheTable(
                        'add_value',
                        $SETTINGS,
                        (int) $newID
                    );
                }

                $arrData = array(
                    'error' => false,
                );
            } else {
                // an error appears on JSON format
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('json_error_format'),
                    ),
                    'encode'
                );
            }

            // Encrypt data to return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $arrData,
                'encode'
            );
            break;

            /*
        * CASE
        * update an ITEM
        */
        case 'update_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // init
            $returnValues = array();
            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            if (is_array($dataReceived) === true && count($dataReceived) > 0) {
                // Prepare variables
                $itemInfos = array();
                $inputData['label'] = filter_var($dataReceived['label'], FILTER_SANITIZE_STRING);
                $post_url = filter_var(htmlspecialchars_decode($dataReceived['url']), FILTER_SANITIZE_URL);
                $post_password = $original_pw = filter_var($dataReceived['pw'], FILTER_SANITIZE_STRING);
                $post_login = filter_var(htmlspecialchars_decode($dataReceived['login']), FILTER_SANITIZE_STRING);
                $post_tags = htmlspecialchars_decode($dataReceived['tags']);
                $post_email = filter_var(htmlspecialchars_decode($dataReceived['email']), FILTER_SANITIZE_EMAIL);
                $post_template_id = (int) filter_var($dataReceived['template_id'], FILTER_SANITIZE_NUMBER_INT);
                $inputData['itemId'] = (int) filter_var($dataReceived['id'], FILTER_SANITIZE_NUMBER_INT);
                $post_anyone_can_modify = (int) filter_var($dataReceived['anyone_can_modify'], FILTER_SANITIZE_NUMBER_INT);
                $post_complexity_level = (int) filter_var($dataReceived['complexity_level'], FILTER_SANITIZE_NUMBER_INT);
                $inputData['folderId'] = (int) filter_var($dataReceived['folder'], FILTER_SANITIZE_NUMBER_INT);
                $post_folder_is_personal = (int) filter_var($dataReceived['folder_is_personal'], FILTER_SANITIZE_NUMBER_INT);
                $post_restricted_to = filter_var_array(
                    $dataReceived['restricted_to'],
                    FILTER_SANITIZE_STRING
                );
                $post_restricted_to_roles = filter_var_array(
                    $dataReceived['restricted_to_roles'],
                    FILTER_SANITIZE_STRING
                );
                $post_diffusion_list = filter_var_array(
                    $dataReceived['diffusion_list'],
                    FILTER_SANITIZE_STRING
                );
                $post_diffusion_list_names = filter_var_array(
                    $dataReceived['diffusion_list_names'],
                    FILTER_SANITIZE_STRING
                );
                //$post_diffusion_list_names = $post_diffusion_list_names !== false ? json_decode($post_diffusion_list_names) : '';
                $post_to_be_deleted_after_x_views = filter_var(
                    $dataReceived['to_be_deleted_after_x_views'],
                    FILTER_SANITIZE_NUMBER_INT
                );
                $post_to_be_deleted_after_date = filter_var(
                    $dataReceived['to_be_deleted_after_date'],
                    FILTER_SANITIZE_STRING
                );
                $post_fields = (filter_var_array(
                    $dataReceived['fields'],
                    FILTER_SANITIZE_STRING
                ));
                $post_description = $antiXss->xss_clean($dataReceived['description']);
                $post_fa_icon = filter_var(($dataReceived['fa_icon']), FILTER_SANITIZE_STRING);

                //-> DO A SET OF CHECKS
                // Perform a check in case of Read-Only user creating an item in his PF
                if (
                    $_SESSION['user_read_only'] === true
                    && (in_array($inputData['folderId'], $_SESSION['personal_folders']) === false
                        || $post_folder_is_personal !== 1)
                ) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to_access_this_folder'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Check PWD EMPTY
                if (
                    empty($pw) === true
                    && isset($_SESSION['user']['create_item_without_password']) === true
                    && (int) $_SESSION['user']['create_item_without_password'] !== 1
                ) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_pw'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Need info in DB
                // About special settings
                $dataFolderSettings = DB::queryFirstRow(
                    'SELECT bloquer_creation, bloquer_modification, personal_folder, title
                    FROM ' . prefixTable('nested_tree') . ' 
                    WHERE id = %i',
                    $inputData['folderId']
                );
                $itemInfos['personal_folder'] = (int) $dataFolderSettings['personal_folder'];
                if ((int) $itemInfos['personal_folder'] === 1) {
                    $itemInfos['no_complex_check_on_modification'] = 1;
                    $itemInfos['no_complex_check_on_creation'] = 1;
                } else {
                    $itemInfos['no_complex_check_on_modification'] = (int) $dataFolderSettings['bloquer_modification'];
                    $itemInfos['no_complex_check_on_creation'] = (int) $dataFolderSettings['bloquer_creation'];
                }

                // Get folder complexity
                $folderComplexity = DB::queryfirstrow(
                    'SELECT valeur
                    FROM ' . prefixTable('misc') . '
                    WHERE type = %s AND intitule = %i',
                    'complex',
                    $inputData['folderId']
                );
                $itemInfos['requested_folder_complexity'] = is_null($folderComplexity) === false ? (int) $folderComplexity['valeur'] : 0;
                // Check COMPLEXITY
                if ($post_complexity_level < $itemInfos['requested_folder_complexity'] && $itemInfos['no_complex_check_on_modification'] === 0) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_security_level_not_reached'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Check length
                if (strlen($post_password) > $SETTINGS['pwd_maximum_length']) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_pw_too_long'),
                        ),
                        'encode'
                    );
                    break;
                }

                // ./ END

                // Init
                $arrayOfChanges = array();

                // Get all informations for this item
                $dataItem = DB::queryfirstrow(
                    'SELECT *
                    FROM ' . prefixTable('items') . ' as i
                    INNER JOIN ' . prefixTable('log_items') . ' as l ON (l.id_item = i.id)
                    WHERE i.id=%i AND l.action = %s',
                    $inputData['itemId'],
                    'at_creation'
                );

                // Does the user has the sharekey
				//db::debugmode(true);
                DB::query(
                    'SELECT *
                    FROM ' . prefixTable('sharekeys_items') . '
                    WHERE object_id = %i AND user_id = %s',
                    $inputData['itemId'],
                    $_SESSION['user_id']
                );
                if (DB::count() === 0) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to'),
                        ),
                        'encode'
                    );
                    break;
                }

                // check that actual user can access this item
                $restrictionActive = true;
                $restrictedTo = is_null($dataItem['restricted_to']) === false ? array_filter(explode(';', $dataItem['restricted_to'])) : [];
                if (in_array($_SESSION['user_id'], $restrictedTo) === true) {
                    $restrictionActive = false;
                }
                if (empty($dataItem['restricted_to']) === true) {
                    $restrictionActive = false;
                }

                if ((in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) === true
                        && ((int) $dataItem['perso'] === 0
                            || ((int) $dataItem['perso'] === 1
                                //&& (int) $_SESSION['user_id'] === (int) $dataItem['id_user']))
                            ))
                        && $restrictionActive === false)
                    || (isset($SETTINGS['anyone_can_modify']) === true
                        && (int) $SETTINGS['anyone_can_modify'] === 1
                        && (int) $dataItem['anyone_can_modify'] === 1
                        && (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) === true
                            || (int) $_SESSION['is_admin'] === 1)
                        && $restrictionActive === false)
                    || (null !== $inputData['folderId']
                        && isset($_SESSION['list_restricted_folders_for_items'][$inputData['folderId']]) === true
                        && in_array($inputData['id'], $_SESSION['list_restricted_folders_for_items'][$inputData['folderId']]) === true
                        && $restrictionActive === false)
                ) {
                    // Get existing values
                    $data = DB::queryfirstrow(
                        'SELECT i.id as id, i.label as label, i.description as description, i.pw as pw, i.url as url, i.id_tree as id_tree, i.perso as perso, i.login as login, 
                        i.inactif as inactif, i.restricted_to as restricted_to, i.anyone_can_modify as anyone_can_modify, i.email as email, i.notification as notification,
                        u.login as user_login, u.email as user_email
                        FROM ' . prefixTable('items') . ' as i
                        INNER JOIN ' . prefixTable('log_items') . ' as l ON (i.id=l.id_item)
                        INNER JOIN ' . prefixTable('users') . ' as u ON (u.id=l.id_user)
                        WHERE i.id=%i',
                        $inputData['itemId']
                    );

                    // Should we log a password change?
                    $userKey = DB::queryFirstRow(
                        'SELECT share_key
                        FROM ' . prefixTable('sharekeys_items') . '
                        WHERE user_id = %i AND object_id = %i',
                        $_SESSION['user_id'],
                        $inputData['itemId']
                    );
                    if (DB::count() === 0 || empty($data['pw']) === true) {
                        // No share key found
                        $pw = '';
                    } else {
                        $pw = base64_decode(doDataDecryption(
                            $data['pw'],
                            decryptUserObjectKey(
                                $userKey['share_key'],
                                $_SESSION['user']['private_key']
                            )
                        ));
                    }

                    if ($post_password !== $pw) {
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_pw',
                            TP_ENCRYPTION_NAME
                        );

                        /*
                        // send email if asked
                        if (isKeyExistingAndEqual('enable_email_notification_on_user_pw_change', 1, $SETTINGS) === true) {
                            prepareSendingEmail(
                                langHdl('email_subject_item_updated'),
                                str_replace(
                                    array('#label', '#link'),
                                        array($path, $SETTINGS['email_server_url'] . '/index.php?page=items&group=' . $inputData['folderId'] . '&id=' . $newID . $txt['email_body3']),
                                        langHdl('new_item_email_body')
                                ),
                                $emailAddress,
                                $post_diffusion_list_names[$cpt],
                                $SETTINGS
                            );
                        }
                        */
                    }

                    // encrypt PW
                    if ((isset($_SESSION['user']['create_item_without_password']) === true
                            && (int) $_SESSION['user']['create_item_without_password'] !== 1)
                        || empty($post_password) === false
                    ) {
                        //-----
                        // NEW ENCRYPTION
                        $cryptedStuff = doDataEncryption($post_password);

                        $encrypted_password = $cryptedStuff['encrypted'];

                        // Create sharekeys for users
                        storeUsersShareKey(
                            prefixTable('sharekeys_items'),
                            (int) $post_folder_is_personal,
                            (int) $inputData['folderId'],
                            (int) $inputData['itemId'],
                            $cryptedStuff['objectKey'],
                            $SETTINGS
                        );
                    } else {
                        $encrypted_password = '';
                    }

                    // ---Manage tags
                    // Get list of tags
                    $itemTags = DB::queryFirstColumn(
                        'SELECT tag
                        FROM ' . prefixTable('tags') . '
                        WHERE item_id = %i',
                        $inputData['itemId']
                    );

                    // deleting existing tags for this item
                    DB::delete(
                        prefixTable('tags'),
                        'item_id = %i',
                        $inputData['itemId']
                    );

                    // Add new tags
                    $postArrayTags = [];
                    if (empty($post_tags) === false) {
                        $postArrayTags = explode(' ', $post_tags);
                        foreach ($postArrayTags as $tag) {
                            if (empty($tag) === false) {
                            // save in DB
                                DB::insert(
                                    prefixTable('tags'),
                                    array(
                                        'item_id' => $inputData['itemId'],
                                        'tag' => strtolower($tag),
                                    )
                                );
                            }
                        }
                    }

                    // Store LOG
                    if (count(array_diff($postArrayTags, $itemTags)) > 0) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            'tags'
                        );

                        // update LOG
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_tag : ' . implode(' ', $itemTags) . ' => ' . $post_tags
                        );
                    }

                    // update item
                    DB::update(
                        prefixTable('items'),
                        array(
                            'label' => $inputData['label'],
                            'description' => $post_description,
                            'pw' => $encrypted_password,
                            'email' => $post_email,
                            'login' => $post_login,
                            'url' => $post_url,
                            'id_tree' => $inputData['folderId'],
                            'restricted_to' => empty($post_restricted_to) === true || count($post_restricted_to) === 0 ? '' : implode(';', $post_restricted_to),
                            'anyone_can_modify' => (int) $post_anyone_can_modify,
                            'complexity_level' => (int) $post_complexity_level,
                            'encryption_type' => TP_ENCRYPTION_NAME,
                            'perso' => in_array($inputData['folderId'], $_SESSION['personal_folders']) === true ? 1 : 0,
                            'fa_icon' => $post_fa_icon,
                        ),
                        'id=%i',
                        $inputData['itemId']
                    );

                    // update fields
                    if (
                        isset($SETTINGS['item_extra_fields']) === true
                        && (int) $SETTINGS['item_extra_fields'] === 1
                        && empty($post_fields) === false
                    ) {
                        foreach ($post_fields as $field) {
                            if (empty($field['value']) === false) {
                                $dataTmpCat = DB::queryFirstRow(
                                    'SELECT c.id AS id, c.title AS title, i.data AS data, i.data_iv AS data_iv,
                                    i.encryption_type AS encryption_type, c.encrypted_data AS encrypted_data,
                                    c.masked AS masked, i.id AS field_item_id
                                    FROM ' . prefixTable('categories_items') . ' AS i
                                    INNER JOIN ' . prefixTable('categories') . ' AS c ON (i.field_id=c.id)
                                    WHERE i.field_id = %i AND i.item_id = %i',
                                    $field['id'],
                                    $inputData['itemId']
                                );

                                // store Field text in DB
                                if (DB::count() === 0) {
                                    // The data for this foeld doesn't exist
                                    // It has to be added

                                    // Perform new query
                                    $dataTmpCat = DB::queryFirstRow(
                                        'SELECT id, title, encrypted_data, masked
                                        FROM ' . prefixTable('categories') . '
                                        WHERE id = %i',
                                        $field['id']
                                    );

                                    // store field text
                                    DB::insert(
                                        prefixTable('categories_items'),
                                        array(
                                            'item_id' => $inputData['itemId'],
                                            'field_id' => $field['id'],
                                            'data' => $field['value'],
                                            'data_iv' => '',
                                            'encryption_type' => 'not_set',
                                        )
                                    );

                                    $newId = DB::insertId();

                                    // Should we encrypt the data
                                    if ((int) $dataTmpCat['encrypted_data'] === 1) {
                                        $cryptedStuff = doDataEncryption($field['value']);

                                        // Create sharekeys for users
                                        storeUsersShareKey(
                                            prefixTable('sharekeys_fields'),
                                            (int) $post_folder_is_personal,
                                            (int) $inputData['folderId'],
                                            (int) $newId,
                                            $cryptedStuff['objectKey'],
                                            $SETTINGS
                                        );

                                        // update value
                                        DB::update(
                                            prefixTable('categories_items'),
                                            array(
                                                'data' => $cryptedStuff['encrypted'],
                                                'data_iv' => '',
                                                'encryption_type' => TP_ENCRYPTION_NAME,
                                            ),
                                            'id = %i',
                                            $newId
                                        );
                                    } else {
                                        // update value
                                        DB::update(
                                            prefixTable('categories_items'),
                                            array(
                                                'data' => $field['value'],
                                                'data_iv' => '',
                                                'encryption_type' => 'not_set',
                                            ),
                                            'id = %i',
                                            $newId
                                        );
                                    }

                                    // Store updates performed
                                    array_push(
                                        $arrayOfChanges,
                                        $dataTmpCat['title']
                                    );

                                    // update LOG
                                    logItems(
                                        $SETTINGS,
                                        (int) $inputData['itemId'],
                                        $inputData['label'],
                                        $_SESSION['user_id'],
                                        'at_modification',
                                        $_SESSION['login'],
                                        'at_field : ' . $dataTmpCat['title'] . ' : ' . $field['value']
                                    );
                                } else {
                                    // compare the old and new value
                                    if ($dataTmpCat['encryption_type'] !== 'not_set') {
                                        // Get user sharekey for this field
                                        $userKey = DB::queryFirstRow(
                                            'SELECT share_key
                                            FROM ' . prefixTable('sharekeys_fields') . '
                                            WHERE user_id = %i AND object_id = %i',
                                            $_SESSION['user_id'],
                                            $dataTmpCat['field_item_id']
                                        );

                                        // Decrypt the current value
                                        $oldVal = base64_decode(doDataDecryption(
                                            $dataTmpCat['data'],
                                            decryptUserObjectKey(
                                                $userKey['share_key'],
                                                $_SESSION['user']['private_key']
                                            )
                                        ));
                                    } else {
                                        $oldVal = $dataTmpCat['data'];
                                    }

                                    // Compare both values to see if any change was done
                                    if ($field['value'] !== $oldVal) {
                                        // The strings are different
                                        $encrypt = [];

                                        // Should we encrypt the data
                                        if ((int) $dataTmpCat['encrypted_data'] === 1) {
                                            $cryptedStuff = doDataEncryption($field['value']);
                                            $encrypt['string'] = $cryptedStuff['encrypted'];
                                            $encrypt['type'] = TP_ENCRYPTION_NAME;

                                            // Create sharekeys for users
                                            storeUsersShareKey(
                                                prefixTable('sharekeys_fields'),
                                                (int) $post_folder_is_personal,
                                                (int) $inputData['folderId'],
                                                (int) $dataTmpCat['field_item_id'],
                                                $cryptedStuff['objectKey'],
                                                $SETTINGS
                                            );
                                        } else {
                                            $encrypt['string'] = $field['value'];
                                            $encrypt['type'] = 'not_set';
                                        }

                                        // update value
                                        DB::update(
                                            prefixTable('categories_items'),
                                            array(
                                                'data' => $encrypt['string'],
                                                'data_iv' => '',
                                                'encryption_type' => $encrypt['type'],
                                            ),
                                            'item_id = %i AND field_id = %i',
                                            $inputData['itemId'],
                                            $field['id']
                                        );

                                        // Store updates performed
                                        array_push(
                                            $arrayOfChanges,
                                            $dataTmpCat['title']
                                        );

                                        // update LOG
                                        logItems(
                                            $SETTINGS,
                                            (int) $inputData['itemId'],
                                            $inputData['label'],
                                            $_SESSION['user_id'],
                                            'at_modification',
                                            $_SESSION['login'],
                                            'at_field : ' . $dataTmpCat['title'] . ' => ' . $oldVal
                                        );
                                    }
                                }
                            } else {
                                if (empty($field_data[1]) === true) {
                                    DB::delete(
                                        prefixTable('categories_items'),
                                        'item_id = %i AND field_id = %s',
                                        $inputData['itemId'],
                                        $field['id']
                                    );
                                }
                            }
                        }
                    }

                    // If template enable, is there a main one selected?
                    if (
                        isset($SETTINGS['item_creation_templates']) === true
                        && (int) $SETTINGS['item_creation_templates'] === 1
                        && isset($post_template_id) === true
                    ) {
                        DB::queryFirstRow(
                            'SELECT *
                            FROM ' . prefixTable('templates') . '
                            WHERE item_id = %i',
                            $inputData['itemId']
                        );
                        if (DB::count() === 0 && empty($post_template_id) === false) {
                            // store field text
                            DB::insert(
                                prefixTable('templates'),
                                array(
                                    'item_id' => $inputData['itemId'],
                                    'category_id' => $post_template_id,
                                )
                            );
                        } else {
                            // Delete if empty
                            if (empty($post_template_id) === true) {
                                DB::delete(
                                    prefixTable('templates'),
                                    'item_id = %i',
                                    $inputData['itemId']
                                );
                            } else {
                                // Update value
                                DB::update(
                                    prefixTable('templates'),
                                    array(
                                        'category_id' => $post_template_id,
                                    ),
                                    'item_id = %i',
                                    $inputData['itemId']
                                );
                            }
                        }
                    }

                    // Update automatic deletion - Only by the creator of the Item
                    if (
                        isset($SETTINGS['enable_delete_after_consultation']) === true
                        && (int) $SETTINGS['enable_delete_after_consultation'] === 1
                    ) {
                        // check if elem exists in Table. If not add it or update it.
                        DB::query(
                            'SELECT *
                            FROM ' . prefixTable('automatic_del') . '
                            WHERE item_id = %i',
                            $inputData['itemId']
                        );

                        if (DB::count() === 0) {
                            // No automatic deletion for this item
                            if (
                                empty($post_to_be_deleted_after_date) === false
                                || (int) $post_to_be_deleted_after_x_views > 0
                            ) {
                                // Automatic deletion to be added
                                DB::insert(
                                    prefixTable('automatic_del'),
                                    array(
                                        'item_id' => $inputData['itemId'],
                                        'del_enabled' => 1,
                                        'del_type' => empty($post_to_be_deleted_after_x_views) === false ?
                                            1 : 2, //1 = numeric : 2 = date
                                        'del_value' => empty($post_to_be_deleted_after_x_views) === false ?
                                            (int) $post_to_be_deleted_after_x_views : dateToStamp($post_to_be_deleted_after_date, $SETTINGS['date_format']),
                                    )
                                );

                                // Store updates performed
                                array_push(
                                    $arrayOfChanges,
                                    langHdl('automatic_deletion_engaged') . ': ' . langHdl('enabled')
                                );

                                // update LOG
                                logItems(
                                    $SETTINGS,
                                    (int) $inputData['itemId'],
                                    $inputData['label'],
                                    $_SESSION['user_id'],
                                    'at_modification',
                                    $_SESSION['login'],
                                    'at_automatic_del : enabled'
                                );
                            }
                        } else {
                            // Automatic deletion exists for this item
                            if (
                                empty($post_to_be_deleted_after_date) === false
                                || (int) $post_to_be_deleted_after_x_views > 0
                            ) {
                                // Update automatic deletion
                                DB::update(
                                    prefixTable('automatic_del'),
                                    array(
                                        'del_type' => empty($post_to_be_deleted_after_x_views) === false ?
                                            1 : 2, //1 = numeric : 2 = date
                                        'del_value' => empty($post_to_be_deleted_after_x_views) === false ?
                                            $post_to_be_deleted_after_x_views : dateToStamp($post_to_be_deleted_after_date, $SETTINGS['date_format']),
                                    ),
                                    'item_id = %i',
                                    $inputData['itemId']
                                );
                            } else {
                                // delete automatic deleteion for this item
                                DB::delete(
                                    prefixTable('automatic_del'),
                                    'item_id = %i',
                                    $inputData['itemId']
                                );

                                // Store updates performed
                                array_push(
                                    $arrayOfChanges,
                                    langHdl('automatic_deletion_engaged') . ': ' . langHdl('disabled')
                                );

                                // update LOG
                                logItems(
                                    $SETTINGS,
                                    (int) $inputData['itemId'],
                                    $inputData['label'],
                                    $_SESSION['user_id'],
                                    'at_modification',
                                    $_SESSION['login'],
                                    'at_automatic_del : disabled'
                                );
                            }
                        }
                    }

                    // get readable list of restriction
                    $listOfRestricted = $oldRestrictionList = '';
                    $arrayOfUsersRestriction = array();
                    $arrayOfUsersIdRestriction = array();
                    $diffUsersRestiction = array();
                    $diffRolesRestiction = array();
                    if (
                        is_array($post_restricted_to) === true
                        && count($post_restricted_to) > 0
                        && isset($SETTINGS['restricted_to']) === true
                        && (int) $SETTINGS['restricted_to'] === 1
                    ) {
                        foreach ($post_restricted_to as $userId) {
                            if (empty($userId) === false) {
                                $dataTmp = DB::queryfirstrow(
                                    'SELECT id, name, lastname
                                    FROM ' . prefixTable('users') . '
                                    WHERE id= %i',
                                    $userId
                                );

                                // Add to array
                                array_push(
                                    $arrayOfUsersRestriction,
                                    $dataTmp['name'] . ' ' . $dataTmp['lastname']
                                );
                                array_push(
                                    $arrayOfUsersIdRestriction,
                                    $dataTmp['id']
                                );
                            }
                        }
                    }
                    if ((int) $SETTINGS['restricted_to'] === 1) {
                        $diffUsersRestiction = array_diff(
                            empty($data['restricted_to']) === false ?
                                explode(';', $data['restricted_to']) : array(),
                            $arrayOfUsersIdRestriction
                        );
                    }

                    // Manage retriction_to_roles
                    if (
                        is_array($post_restricted_to_roles) === true
                        && count($post_restricted_to_roles) > 0
                        && isset($SETTINGS['restricted_to_roles']) === true
                        && (int) $SETTINGS['restricted_to_roles'] === 1
                    ) {
                        // Init
                        $arrayOfRestrictionRolesOld = array();
                        $arrayOfRestrictionRoles = array();

                        // get values before deleting them
                        $rows = DB::query(
                            'SELECT t.title, t.id AS id
                            FROM ' . prefixTable('roles_title') . ' as t
                            INNER JOIN ' . prefixTable('restriction_to_roles') . ' as r ON (t.id=r.role_id)
                            WHERE r.item_id = %i
                            ORDER BY t.title ASC',
                            $inputData['itemId']
                        );
                        foreach ($rows as $record) {
                            // Add to array
                            array_push(
                                $arrayOfRestrictionRolesOld,
                                $record['title']
                            );
                        }
                        // delete previous values
                        DB::delete(
                            prefixTable('restriction_to_roles'),
                            'item_id = %i',
                            $inputData['itemId']
                        );

                        // add roles for item
                        if (
                            is_array($post_restricted_to_roles) === true
                            && count($post_restricted_to_roles) > 0
                        ) {
                            foreach ($post_restricted_to_roles as $role) {
                                DB::insert(
                                    prefixTable('restriction_to_roles'),
                                    array(
                                        'role_id' => $role,
                                        'item_id' => $inputData['itemId'],
                                    )
                                );
                                $dataTmp = DB::queryfirstrow(
                                    'SELECT title
                                    FROM ' . prefixTable('roles_title') . '
                                    WHERE id = %i',
                                    $role
                                );

                                // Add to array
                                array_push(
                                    $arrayOfRestrictionRoles,
                                    $dataTmp['title']
                                );
                            }

                            if ((int) $SETTINGS['restricted_to'] === 1) {
                                $diffRolesRestiction = array_diff(
                                    $arrayOfRestrictionRoles,
                                    $arrayOfRestrictionRolesOld
                                );
                            }
                        }
                    }
                    // Update CACHE table
                    updateCacheTable('update_value', $SETTINGS, (int) $inputData['itemId']);

                    //---- Log all modifications done ----

                    // RESTRICTIONS
                    if (count($diffRolesRestiction) > 0 || count($diffUsersRestiction) > 0) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_restriction')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_restriction : ' . (count($diffUsersRestiction) > 0 ?
                                implode(', ', $arrayOfUsersRestriction) . (count($diffRolesRestiction) > 0 ? ', ' : '') : '') . (count($diffRolesRestiction) > 0 ? implode(', ', $arrayOfRestrictionRoles) : '')
                        );
                    }

                    // LABEL
                    if ($data['label'] !== $inputData['label']) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_label')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_label : ' . $data['label'] . ' => ' . $inputData['label']
                        );
                    }
                    // LOGIN
                    if ($data['login'] !== $post_login) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_login')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_login : ' . $data['login'] . ' => ' . $post_login
                        );
                    }
                    // EMAIL
                    if ($post_email !== null && $data['email'] !== null && strcmp($data['email'], $post_email) !== 0) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_email')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_email : ' . $data['email'] . ' => ' . $post_email
                        );
                    }
                    // URL
                    if ($data['url'] !== $post_url && $post_url !== 'http://') {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_url')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_url : ' . $data['url'] . ' => ' . $post_url
                        );
                    }
                    // DESCRIPTION
                    if (strcmp(md5($data['description']), md5($post_description)) !== 0) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_description')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_description'
                        );
                    }
                    // FOLDER
                    if ((int) $data['id_tree'] !== (int) $inputData['folderId']) {
                        // Get name of folders
                        $dataTmp = DB::query('SELECT title FROM ' . prefixTable('nested_tree') . ' WHERE id IN %li', array($data['id_tree'], $inputData['folderId']));

                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_category')
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_category : ' . $dataTmp[0]['title'] . ' => ' . $dataTmp[1]['title']
                        );
                    }
                    // ANYONE_CAN_MODIFY
                    if ((int) $post_anyone_can_modify !== (int) $data['anyone_can_modify']) {
                        // Store updates performed
                        array_push(
                            $arrayOfChanges,
                            langHdl('at_anyoneconmodify') . ': ' . ((int) $post_anyone_can_modify === 0 ? langHdl('disabled') : langHdl('enabled'))
                        );

                        // Log
                        logItems(
                            $SETTINGS,
                            (int) $inputData['itemId'],
                            $inputData['label'],
                            $_SESSION['user_id'],
                            'at_modification',
                            $_SESSION['login'],
                            'at_anyoneconmodify : ' . ((int) $post_anyone_can_modify === 0 ? 'disabled' : 'enabled')
                        );
                    }

                    // Reload new values
                    $dataItem = DB::queryfirstrow(
                        'SELECT *
                        FROM ' . prefixTable('items') . ' as i
                        INNER JOIN ' . prefixTable('log_items') . ' as l ON (l.id_item = i.id)
                        WHERE i.id = %i AND l.action = %s',
                        $inputData['itemId'],
                        'at_creation'
                    );
                    // Reload History
                    $history = '';
                    $rows = DB::query(
                        'SELECT l.date as date, l.action as action, l.raison as raison, u.login as login
                        FROM ' . prefixTable('log_items') . ' as l
                        LEFT JOIN ' . prefixTable('users') . ' as u ON (l.id_user=u.id)
                        WHERE l.action <> %s AND id_item=%s',
                        'at_shown',
                        $inputData['itemId']
                    );
                    foreach ($rows as $record) {
                        if ($record['raison'] === NULL) continue;
                        $reason = explode(':', $record['raison']);
                        if (count($reason) > 0) {
                            $sentence = date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], (int) $record['date']) . ' - '
                                . $record['login'] . ' - ' . langHdl($record['action']) . ' - '
                                . (empty($record['raison']) === false ? (count($reason) > 1 ? langHdl(trim($reason[0])) . ' : ' . $reason[1]
                                    : langHdl(trim($reason[0]))) : '');
                            if (empty($history)) {
                                $history = $sentence;
                            } else {
                                $history .= '<br />' . $sentence;
                            }
                        }
                    }

                    // generate 2d key
                    $_SESSION['key_tmp'] = bin2hex(GenerateCryptKey(16, false, true, true, false, true, $SETTINGS));

                    // Send email
                    if (is_array($post_diffusion_list) === true && count($post_diffusion_list) > 0) {
                        $cpt = 0;
                        foreach ($post_diffusion_list as $emailAddress) {
                            if (empty($emailAddress) === false) {
                                prepareSendingEmail(
                                    langHdl('email_subject_item_updated'),
                                    str_replace(
                                        array('#item_label#', '#item_category#', '#item_id#', '#url#', '#name#', '#lastname#', '#folder_name#'),
                                        array($inputData['label'], $inputData['folderId'], $inputData['itemId'], $SETTINGS['cpassman_url'], $_SESSION['name'], $_SESSION['lastname'], $dataFolderSettings['title']),
                                        langHdl('email_body_item_updated')
                                    ),
                                    $emailAddress,
                                    $post_diffusion_list_names[$cpt],
                                    $SETTINGS
                                );
                                $cpt++;
                            }
                        }
                    }

                    // Notifiy changes to the users
                    notifyChangesToSubscribers($inputData['itemId'], $inputData['label'], $arrayOfChanges, $SETTINGS);

                    // Prepare some stuff to return
                    $arrData = array(
                        'error' => false,
                        'message' => '',
                    );
                } else {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to_edit_item'),
                        ),
                        'encode'
                    );
                    break;
                }
            } else {
                // an error appears on JSON format
                $arrData = array(
                    'error' => true,
                    'message' => 'ERR_JSON_FORMAT',
                );
            }
            // return data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $arrData,
                'encode'
            );
            break;

            /*
          * CASE
          * Copy an Item
        */
        case 'copy_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // Prepare POST variables
            $post_new_label = (string) filter_var($dataReceived['new_label'], FILTER_SANITIZE_STRING);
            $post_source_id = (int) filter_var($dataReceived['source_id'], FILTER_SANITIZE_NUMBER_INT);
            $post_dest_id = (int) filter_var($dataReceived['dest_id'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            // perform a check in case of Read-Only user creating an item in his PF
            if (
                (int) $_SESSION['user_read_only'] === 1
                && (in_array($post_source_id, $_SESSION['personal_folders']) === false
                    || in_array($post_dest_id, $_SESSION['personal_folders']) === false)
            ) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // Init
            $returnValues = '';
            $pw = '';
            $is_perso = 0;

            if (
                empty($inputData['itemId']) === false
                && empty($post_dest_id) === false
            ) {
                // load the original record into an array
                $originalRecord = DB::queryfirstrow(
                    'SELECT * FROM ' . prefixTable('items') . '
                    WHERE id = %i',
                    $inputData['itemId']
                );

                // Check if the folder where this item is accessible to the user
                if (in_array($originalRecord['id_tree'], $_SESSION['groupes_visibles']) === false) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Load the destination folder record into an array
                $dataDestination = DB::queryfirstrow(
                    'SELECT personal_folder FROM ' . prefixTable('nested_tree') . '
                    WHERE id = %i',
                    $post_dest_id
                );

                // Get the ITEM object key for the user
                $userKey = DB::queryFirstRow(
                    'SELECT share_key
                    FROM ' . prefixTable('sharekeys_items') . '
                    WHERE user_id = %i AND object_id = %i',
                    $_SESSION['user_id'],
                    $inputData['itemId']
                );
                if (DB::count() === 0) {
                    // ERROR - No sharekey found for this item and user
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to'),
                        ),
                        'encode'
                    );
                    break;
                }

                // Decrypt / Encrypt the password
                $cryptedStuff = doDataEncryption(
                    base64_decode(
                        doDataDecryption(
                            $originalRecord['pw'],
                            decryptUserObjectKey(
                                $userKey['share_key'],
                                $_SESSION['user']['private_key']
                            )
                        )
                    )
                );
                // reaffect pw
                $originalRecord['pw'] = $cryptedStuff['encrypted'];

                // generate the query to update the new record with the previous values
                $aSet = array();
                foreach ($originalRecord as $key => $value) {
                    if ($key === 'id_tree') {
                        $aSet['id_tree'] = $post_dest_id;
                    } elseif ($key === 'label') {
                        $aSet[$key] = $post_new_label;
                    } elseif ($key === 'viewed_no') {
                        $aSet['viewed_no'] = '0';
                    } elseif ($key === 'pw' && empty($pw) === false) {
                        $aSet['pw'] = $originalRecord['pw'];
                        $aSet['pw_iv'] = '';
                    } elseif ($key === 'perso') {
                        $aSet['perso'] = $is_perso;
                    } elseif ($key !== 'id' && $key !== 'key') {
                        $aSet[$key] = $value;
                    }
                }

                // insert the new record and get the new auto_increment id
                DB::insert(
                    prefixTable('items'),
                    $aSet
                );
                $newItemId = DB::insertId();

                // Create sharekeys for users of this new ITEM
                storeUsersShareKey(
                    prefixTable('sharekeys_items'),
                    (int) $dataDestination['personal_folder'],
                    (int) $post_dest_id,
                    (int) $newItemId,
                    $cryptedStuff['objectKey'],
                    $SETTINGS
                );

                // --------------------
                // Manage Custom Fields
                $rows = DB::query(
                    'SELECT *
                    FROM ' . prefixTable('categories_items') . '
                    WHERE item_id = %i',
                    $inputData['itemId']
                );
                foreach ($rows as $field) {
                    // Create the entry for the new item

                    // Is the data encrypted
                    if ((int) $field['encryption_type'] === TP_ENCRYPTION_NAME) {
                        $cryptedStuff = doDataEncryption($field['value']);
                    }

                    // store field text
                    DB::insert(
                        prefixTable('categories_items'),
                        array(
                            'item_id' => $newItemId,
                            'field_id' => $field['field_id'],
                            'data' => (int) $field['encryption_type'] === TP_ENCRYPTION_NAME ?
                                $cryptedStuff['encrypted'] : $field['data'],
                            'data_iv' => '',
                            'encryption_type' => (int) $field['encryption_type'] === TP_ENCRYPTION_NAME ?
                                TP_ENCRYPTION_NAME : 'not_set',
                        )
                    );
                    $newFieldId = DB::insertId();

                    // Create sharekeys for users
                    if ((int) $field['encryption_type'] === TP_ENCRYPTION_NAME) {
                        storeUsersShareKey(
                            prefixTable('sharekeys_fields'),
                            (int) $dataDestination['personal_folder'],
                            (int) $post_dest_id,
                            (int) $newFieldId,
                            $cryptedStuff['objectKey'],
                            $SETTINGS
                        );
                    }
                }
                // <---

                // ------------------
                // Manage attachments

                // get file key
                $rows = DB::query(
                    'SELECT f.id AS id, f.file AS file, f.name AS name, f.status AS status, f.extension AS extension,
                    f.size AS size, f.type AS type, s.share_key AS share_key
                    FROM ' . prefixTable('files') . ' AS f
                    INNER JOIN ' . prefixTable('sharekeys_files') . ' AS s ON (f.id = s.object_id)
                    WHERE s.user_id = %i AND f.id_item = %i',
                    $_SESSION['user_id'],
                    $inputData['itemId']
                );
                foreach ($rows as $record) {
                    // Check if file still exists
                    if (file_exists($SETTINGS['path_to_upload_folder'] . DIRECTORY_SEPARATOR . TP_FILE_PREFIX . base64_decode($record['file'])) === true) {
                        // Step1 - decrypt the file
                        $fileContent = decryptFile(
                            $record['file'],
                            $SETTINGS['path_to_upload_folder'],
                            decryptUserObjectKey($record['share_key'], $_SESSION['user']['private_key'])
                        );

                        // Step2 - create file
                        $newFileName = md5(time() . '_' . $record['id']) . '.' . $record['extension'];
                        $outstream = fopen($SETTINGS['path_to_upload_folder'] . DIRECTORY_SEPARATOR . $newFileName, 'ab');
                        if ($outstream === false) {
                            echo prepareExchangedData(
                                $SETTINGS['cpassman_dir'],
                                array(
                                    'error' => true,
                                    'message' => langHdl('error_cannot_open_file'),
                                ),
                                'encode'
                            );
                            break;
                        }
                        fwrite(
                            $outstream,
                            base64_decode($fileContent)
                        );

                        // Step3 - encrypt the file
                        $newFile = encryptFile($newFileName, $SETTINGS['path_to_upload_folder']);

                        // Step4 - store in database
                        DB::insert(
                            prefixTable('files'),
                            array(
                                'id_item' => $newItemId,
                                'name' => $record['name'],
                                'size' => $record['size'],
                                'extension' => $record['extension'],
                                'type' => $record['type'],
                                'file' => $newFile['fileHash'],
                                'status' => TP_ENCRYPTION_NAME,
                                'confirmed' => 1,
                            )
                        );
                        $newFileId = DB::insertId();

                        // Step5 - create sharekeys
                        storeUsersShareKey(
                            prefixTable('sharekeys_files'),
                            (int) $dataDestination['personal_folder'],
                            (int) $post_dest_id,
                            (int) $newFileId,
                            $newFile['objectKey'],
                            $SETTINGS
                        );
                    }
                }
                // <---

                // -------------------------
                // Add specific restrictions
                $rows = DB::query('SELECT * FROM ' . prefixTable('restriction_to_roles') . ' WHERE item_id = %i', $inputData['itemId']);
                foreach ($rows as $record) {
                    DB::insert(
                        prefixTable('restriction_to_roles'),
                        array(
                            'item_id' => $newItemId,
                            'role_id' => $record['role_id'],
                        )
                    );
                }

                // Add Tags
                $rows = DB::query('SELECT * FROM ' . prefixTable('tags') . ' WHERE item_id = %i', $inputData['itemId']);
                foreach ($rows as $record) {
                    DB::insert(
                        prefixTable('tags'),
                        array(
                            'item_id' => $newItemId,
                            'tag' => $record['tag'],
                        )
                    );
                }

                // Add this duplicate in logs
                logItems(
                    $SETTINGS,
                    (int) $newItemId,
                    $originalRecord['label'],
                    $_SESSION['user_id'],
                    'at_creation',
                    $_SESSION['login']
                );
                // Add the fact that item has been copied in logs
                logItems(
                    $SETTINGS,
                    (int) $newItemId,
                    $originalRecord['label'],
                    $_SESSION['user_id'],
                    'at_copy',
                    $_SESSION['login']
                );
                // reload cache table
                include_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php';
                updateCacheTable('reload', $SETTINGS, null);

                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => false,
                        'message' => '',
                        'new_id' => $newItemId
                    ),
                    'encode'
                );
            } else {
                // no item
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_missing_id'),
                    ),
                    'encode'
                );
            }
            break;

            /*
          * CASE
          * Display informations of selected item
        */
        case 'show_details_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }

            // Step #1
            $_SESSION['user']['show_step2'] = false;

            // Decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],$inputData['data'],
                'decode'
            );

            // Init post variables
            $inputData['id'] = filter_var(($dataReceived['id']), FILTER_SANITIZE_NUMBER_INT);
            $inputData['folderId'] = filter_var(($dataReceived['folder_id']), FILTER_SANITIZE_NUMBER_INT);
            $post_expired_item = filter_var(($dataReceived['expired_item']), FILTER_SANITIZE_NUMBER_INT);
            $post_restricted = filter_var(($dataReceived['restricted']), FILTER_SANITIZE_STRING);
            $post_folder_access_level = isset($dataReceived['folder_access_level']) === true ?
                filter_var(($dataReceived['folder_access_level']), FILTER_SANITIZE_STRING)
                : '';
            $post_item_rights = filter_var($dataReceived['rights'], FILTER_SANITIZE_NUMBER_INT);

            $arrData = array();
            // return ID
            $arrData['id'] = (int) $inputData['id'];
            $arrData['id_user'] = API_USER_ID;
            $arrData['author'] = 'API';

            // Check if item is deleted
            // taking into account that item can be restored.
            // so if restoration timestamp is higher than the deletion one
            // then we can show it
            $item_deleted = DB::queryFirstRow(
                'SELECT *
                FROM ' . prefixTable('log_items') . '
                WHERE id_item = %i AND action = %s
                ORDER BY date DESC
                LIMIT 0, 1',
                $inputData['id'],
                'at_delete'
            );
            $dataDeleted = DB::count();

            $item_restored = DB::queryFirstRow(
                'SELECT *
                FROM ' . prefixTable('log_items') . '
                WHERE id_item = %i AND action = %s
                ORDER BY date DESC
                LIMIT 0, 1',
                $inputData['id'],
                'at_restored'
            );

            if ($dataDeleted !== 0 && intval($item_deleted['date']) > intval($item_restored['date'])) {
                // This item is deleted => exit
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('not_allowed_to_see_pw'),
                        'show_detail_option' => 2,
                    ),
                    'encode'
                );
                break;
            }

            // Get all informations for this item
            $dataItem = DB::queryfirstrow(
                'SELECT *
                FROM ' . prefixTable('items') . ' as i
                INNER JOIN ' . prefixTable('log_items') . ' as l ON (l.id_item = i.id)
                WHERE i.id = %i AND l.action = %s',
                $inputData['id'],
                'at_creation'
            );

            // Notification
            DB::queryfirstrow(
                'SELECT *
                FROM ' . prefixTable('notification') . '
                WHERE item_id = %i AND user_id = %i',
                $inputData['id'],
                $_SESSION['user_id']
            );
            if (DB::count() > 0) {
                $arrData['notification_status'] = true;
            } else {
                $arrData['notification_status'] = false;
            }

            // Get all USERS infos
            $listeRestriction = is_null($dataItem['restricted_to']) === false ? array_filter(explode(';', $dataItem['restricted_to'])) : [];
            $_SESSION['listNotificationEmails'] = '';

            /*$user_in_restricted_list_of_item = false;
            $rows = DB::query(
                'SELECT id, login, email, admin, name, lastname
                FROM ' . prefixTable('users') .'
                WHERE id in %ls',
                replace(';', ',', $dataItem['restricted_to'])
            );
            $listeRestriction = [];
            foreach ($rows as $user) {
                // Get auhtor
                if ($user['id'] === $dataItem['id_user']) {
                    $arrData['author'] = $user['login'];
                    $arrData['author_email'] = $user['email'];
                    $arrData['id_user'] = (int) $dataItem['id_user'];
                }

                // Get restriction list for users
                if (in_array($user['id'], $listRest) === true) {
                    array_push($listeRestriction, $user['id']);
                    if ($_SESSION['user_id'] === $user['id']) {
                        $user_in_restricted_list_of_item = true;
                    }
                }
            }*/
            $user_in_restricted_list_of_item = in_array($_SESSION['user_id'], $listeRestriction) === true ? true : false;

            // manage case of API user
            if ($dataItem['id_user'] === API_USER_ID) {
                $arrData['author'] = 'API [' . $dataItem['description'] . ']';
                $arrData['id_user'] = API_USER_ID;
                $arrData['author_email'] = '';
                $arrData['notification_status'] = false;
            }

            // Get all tags for this item
            $tags = array();
            $rows = DB::query(
                'SELECT tag
                FROM ' . prefixTable('tags') . '
                WHERE item_id = %i',
                $inputData['id']
            );
            foreach ($rows as $record) {
                array_push($tags, $record['tag']);
            }

            // TODO -> improve this check
            // check that actual user can access this item
            $restrictionActive = true;
            $restrictedTo = is_null($dataItem['restricted_to']) === false ? array_filter(explode(';', $dataItem['restricted_to'])) : [];
            if (
                in_array($_SESSION['user_id'], $restrictedTo) === true
                || ((int) $_SESSION['user_manager'] === 1 && (int) $SETTINGS['manager_edit'] === 1)
            ) {
                $restrictionActive = false;
            }
            if (empty($dataItem['restricted_to']) === true) {
                $restrictionActive = false;
            }

            // Check if user has a role that is accepted
            $rows_tmp = DB::query(
                'SELECT role_id
                FROM ' . prefixTable('restriction_to_roles') . '
                WHERE item_id=%i',
                $inputData['id']
            );
            foreach ($rows_tmp as $rec_tmp) {
                if (in_array($rec_tmp['role_id'], explode(';', $_SESSION['fonction_id']))) {
                    $restrictionActive = false;
                }
            }

            // Uncrypt PW
            // Get the object key for the user
            $userKey = DB::queryFirstRow(
                'SELECT share_key
                FROM ' . prefixTable('sharekeys_items') . '
                WHERE user_id = %i AND object_id = %i',
                $_SESSION['user_id'],
                $inputData['id']
            );
            if (DB::count() === 0 || empty($dataItem['pw']) === true) {
                // No share key found
                // Is this a personal and defuse password?
                if ((int) $dataItem['perso'] === 1 && substr($dataItem['pw'], 0, 3) === 'def') {
                    // Yes, then ask for decryption with old personal salt key
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error'),
                            'show_detail_option' => 2,
                            'error_type' => 'private_items_to_encrypt',
                        ),
                        'encode'
                    );
                    break;
                } else {
                    $pw = '';
                }
            } else {
                $decryptedObject = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);
                // if null then we have an error.
                // suspecting bad password
                if (empty($decryptedObject) === false) {
                    $pw = doDataDecryption(
                        $dataItem['pw'],
                        $decryptedObject
                    );
                } else {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_new_ldap_password_detected'),
                            'show_detail_option' => 2,
                            'error_type' => 'user_should_reencrypt_private_key',
                        ),
                        'encode'
                    );
                    break;
                }
            }

            // echo $dataItem['id_tree']." ;; ";
            //print_r($_SESSION['groupes_visibles']);
            //echo in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']).' ;; '.$restrictionActive." ;; ";
            // check user is admin
            if (
                (int) $_SESSION['user_admin'] === 1
                && (int) $dataItem['perso'] !== 1
            ) {
                $arrData['show_details'] = 0;
                // ---
                // ---
            } elseif ((
                    (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) === true || (int) $_SESSION['is_admin'] === 1)
                    && ((int) $dataItem['perso'] === 0 || ((int) $dataItem['perso'] === 1 && in_array($dataItem['id_tree'], $_SESSION['personal_folders']) === true))
                    && $restrictionActive === false)
                || (isset($SETTINGS['anyone_can_modify']) && (int) $SETTINGS['anyone_can_modify'] === 1
                    && (int) $dataItem['anyone_can_modify'] === 1
                    && (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) || (int) $_SESSION['is_admin'] === 1)
                    && $restrictionActive === false)
                || (null !== $inputData['folderId']
                    && isset($_SESSION['list_restricted_folders_for_items'][$inputData['folderId']])
                    && in_array($inputData['id'], $_SESSION['list_restricted_folders_for_items'][$inputData['folderId']])
                    && (int) $post_restricted === 1
                    && $user_in_restricted_list_of_item === true)
                || (isset($SETTINGS['restricted_to_roles']) && (int) $SETTINGS['restricted_to_roles'] === 1
                    && $restrictionActive === false)
            ) {
                // Check if actual USER can see this ITEM
                // Allow show details
                $arrData['show_details'] = 1;

                // Regarding user's roles, what type of modification is allowed?
                /*$rows = DB::query(
                    'SELECT r.type
                    FROM '.prefixTable('roles_values').' AS r
                    WHERE r.folder_id = %i AND r.role_id IN %ls',
                    $dataItem['id_tree'],
                    $_SESSION['groupes_visibles']
                );
                foreach ($rows as $record) {
                    // TODO
                }*/

                // Display menu icon for deleting if user is allowed
                if (
                    (int) $dataItem['id_user'] === (int) $_SESSION['user_id']
                    || (int) $_SESSION['is_admin'] === 1
                    || ((int) $_SESSION['user_manager'] === 1 && (int) $SETTINGS['manager_edit'] === 1)
                    || (int) $dataItem['anyone_can_modify'] === 1
                    || in_array($dataItem['id_tree'], $_SESSION['list_folders_editable_by_role']) === true
                    || in_array($_SESSION['user_id'], $restrictedTo) === true
                    //|| count($restrictedTo) === 0
                    || (int) $post_folder_access_level === 30
                    || (int) $post_item_rights >= 40
                ) {
                    $arrData['user_can_modify'] = 1;
                    $user_is_allowed_to_modify = true;
                } else {
                    $arrData['user_can_modify'] = 0;
                    $user_is_allowed_to_modify = false;
                }

                // Get restriction list for roles
                $listRestrictionRoles = array();
                if (isset($SETTINGS['restricted_to_roles']) && (int) $SETTINGS['restricted_to_roles'] === 1) {
                    // Add restriction if item is restricted to roles
                    $rows = DB::query(
                        'SELECT t.title, t.id
                        FROM ' . prefixTable('roles_title') . ' AS t
                        INNER JOIN ' . prefixTable('restriction_to_roles') . ' AS r ON (t.id=r.role_id)
                        WHERE r.item_id = %i
                        ORDER BY t.title ASC',
                        $inputData['id']
                    );
                    foreach ($rows as $record) {
                        if (!in_array($record['title'], $listRestrictionRoles)) {
                            array_push($listRestrictionRoles, $record['id']);
                        }
                    }
                }
                // Check if any KB is linked to this item
                if (isset($SETTINGS['enable_kb']) && (int) $SETTINGS['enable_kb'] === 1) {
                    $tmp = array();
                    $rows = DB::query(
                        'SELECT k.label, k.id
                        FROM ' . prefixTable('kb_items') . ' as i
                        INNER JOIN ' . prefixTable('kb') . ' as k ON (i.kb_id=k.id)
                        WHERE i.item_id = %i
                        ORDER BY k.label ASC',
                        $inputData['id']
                    );
                    foreach ($rows as $record) {
                        array_push(
                            $tmp,
                            array(
                                'id' => $record['id'],
                                'label' => $record['label'],
                            )
                        );
                    }
                    $arrData['links_to_kbs'] = $tmp;
                }
                // Prepare DIalogBox data
                if ((int) $post_expired_item === 0) {
                    $arrData['show_detail_option'] = 0;
                } elseif ($user_is_allowed_to_modify === true && (int) $post_expired_item === 1) {
                    $arrData['show_detail_option'] = 1;
                } else {
                    $arrData['show_detail_option'] = 2;
                }

                $arrData['label'] = htmlspecialchars_decode($dataItem['label'], ENT_QUOTES);
                $arrData['pw'] = $pw;
                $arrData['email'] = empty($dataItem['email']) === true || $dataItem['email'] === null ? '' : $dataItem['email'];
                $arrData['url'] = empty($dataItem['url']) === true ? '' : '<a href="'.$dataItem['url'].'" target="_blank">'.$dataItem['url'].'</a>';
                $arrData['folder'] = $dataItem['id_tree'];

                $arrData['description'] = $dataItem['description'];
                $arrData['login'] = htmlspecialchars_decode(str_replace(array('"'), array('&quot;'), $dataItem['login']), ENT_QUOTES);
                $arrData['id_restricted_to'] = $listeRestriction;
                $arrData['id_restricted_to_roles'] = $listRestrictionRoles;
                $arrData['tags'] = $tags;
                $arrData['folder'] = (int) $dataItem['id_tree'];
                $arrData['fa_icon'] = $dataItem['fa_icon'];

                if (
                    isset($SETTINGS['enable_server_password_change'])
                    && (int) $SETTINGS['enable_server_password_change'] === 1
                ) {
                    $arrData['auto_update_pwd_frequency'] = $dataItem['auto_update_pwd_frequency'];
                } else {
                    $arrData['auto_update_pwd_frequency'] = '0';
                }

                $arrData['anyone_can_modify'] = (int) $dataItem['anyone_can_modify'];

                // Add the fact that item has been viewed in logs
                if (isset($SETTINGS['log_accessed']) && (int) $SETTINGS['log_accessed'] === 1) {
                    logItems(
                        $SETTINGS,
                        (int) $inputData['id'],
                        $dataItem['label'],
                        (int) $_SESSION['user_id'],
                        'at_shown',
                        $_SESSION['login']
                    );
                }

                // statistics
                DB::update(
                    prefixTable('items'),
                    array(
                        'viewed_no' => $dataItem['viewed_no'] + 1,
                    ),
                    'id = %i',
                    $inputData['id']
                );
                $arrData['viewed_no'] = $dataItem['viewed_no'] + 1;

                // get fields
                $fieldsTmp = array();
                $arrCatList = $template_id = '';
                if (isset($SETTINGS['item_extra_fields']) && (int) $SETTINGS['item_extra_fields'] === 1) {
                    // get list of associated Categories
                    $arrCatList = array();
                    $rows_tmp = DB::query(
                        'SELECT id_category
                        FROM ' . prefixTable('categories_folders') . '
                        WHERE id_folder=%i',
                        $inputData['folderId']
                    );
					
                    if (DB::count() > 0) {
                        foreach ($rows_tmp as $row) {
                            array_push($arrCatList, (int) $row['id_category']);
                        }

                        // get fields for this Item
                        $rows_tmp = DB::query(
                            'SELECT i.id AS id, i.field_id AS field_id, i.data AS data, i.item_id AS item_id,
                            i.encryption_type AS encryption_type, c.encrypted_data, c.parent_id AS parent_id,
                            c.type as field_type, c.masked AS field_masked, c.role_visibility AS role_visibility
                            FROM ' . prefixTable('categories_items') . ' AS i
                            INNER JOIN ' . prefixTable('categories') . ' AS c ON (i.field_id=c.id)
                            WHERE i.item_id=%i AND c.parent_id IN %ls',
                            $inputData['id'],
                            $arrCatList
                        );
                        foreach ($rows_tmp as $row) {
                            // Uncrypt data
                            // Get the object key for the user
							//db::debugmode(true);
                            $userKey = DB::queryFirstRow(
                                'SELECT share_key
                                FROM ' . prefixTable('sharekeys_fields') . '
                                WHERE user_id = %i AND object_id = %i',
                                $_SESSION['user_id'],
                                $row['id']
                            );//db::debugmode(false);
                            $fieldText = [];
                            if (DB::count() === 0) {
                                // Not encrypted
                                $fieldText['string'] = $row['data'];
                                $fieldText['encrypted'] = false;
                            } else {
                                $fieldText['string'] = doDataDecryption(
                                    $row['data'],
                                    decryptUserObjectKey(
                                        $userKey['share_key'],
                                        $_SESSION['user']['private_key']
                                    )
                                );
                                $fieldText['encrypted'] = true;
                            }

                            // Manage textarea string
                            if ($row['field_type'] === 'textarea') {
                                $fieldText = $fieldText;
                            }

                            // build returned list of Fields text
                            array_push(
                                $fieldsTmp,
                                array(
                                    'id' => (int) $row['field_id'],
                                    'value' => $fieldText['string'],
                                    'encrypted' => (int) $fieldText['encrypted'],
                                    'parent_id' => (int) $row['parent_id'],
                                    'type' => $row['field_type'],
                                    'masked' => (int) $row['field_masked'],
                                )
                            );
                        }
                    }
                }

                // Now get the selected template (if exists)
                if (isset($SETTINGS['item_creation_templates']) && (int) $SETTINGS['item_creation_templates'] === 1) {
                    $rows_tmp = DB::queryfirstrow(
                        'SELECT category_id
                        FROM ' . prefixTable('templates') . '
                        WHERE item_id = %i',
                        $inputData['id']
                    );
                    if (DB::count() > 0) {
                        $template_id = $rows_tmp['category_id'];
                    }
                }
                //}
                $arrData['fields'] = $fieldsTmp;
                $arrData['categories'] = $arrCatList;
                $arrData['template_id'] = (int) $template_id;
                $arrData['to_be_deleted'] = '';

                // Manage user restriction
                if (null !== $post_restricted) {
                    $arrData['restricted'] = $post_restricted;
                } else {
                    $arrData['restricted'] = '';
                }
                // Decrement the number before being deleted
                if (isset($SETTINGS['enable_delete_after_consultation']) && (int) $SETTINGS['enable_delete_after_consultation'] === 1) {
                    // Is the Item to be deleted?
                    $dataDelete = DB::queryfirstrow(
                        'SELECT * 
                        FROM ' . prefixTable('automatic_del') . '
                        WHERE item_id = %i',
                        $inputData['id']
                    );
                    if (DB::count() > 0) {
                        $arrData['to_be_deleted'] = $dataDelete['del_value'];
                        $arrData['to_be_deleted_type'] = (int) $dataDelete['del_type'];
                    }

                    // Now delete if required
                    if ($dataDelete !== null && ((int) $dataDelete['del_enabled'] === 1
                        || intval($arrData['id_user']) !== intval($_SESSION['user_id'])))
                    {
                        if ((int) $dataDelete['del_type'] === 1 && $dataDelete['del_value'] >= 1) {
                            // decrease counter
                            DB::update(
                                prefixTable('automatic_del'),
                                array(
                                    'del_value' => $dataDelete['del_value'] - 1,
                                ),
                                'item_id = %i',
                                $inputData['id']
                            );
                            // store value
                            $arrData['to_be_deleted'] = $dataDelete['del_value'] - 1;
                        } elseif (
                            (int) $dataDelete['del_type'] === 1
                            && $dataDelete['del_value'] <= 1
                            || (int) $dataDelete['del_type'] === 2
                            && $dataDelete['del_value'] < time()
                        ) {
                            $arrData['show_details'] = 0;
                            // delete item
                            DB::delete(prefixTable('automatic_del'), 'item_id = %i', $inputData['id']);
                            // make inactive object
                            DB::update(
                                prefixTable('items'),
                                array(
                                    'inactif' => 1,
                                ),
                                'id = %i',
                                $inputData['id']
                            );

                            // log
                            logItems(
                                $SETTINGS,
                                (int) $inputData['id'],
                                $dataItem['label'],
                                (int) $_SESSION['user_id'],
                                'at_delete',
                                $_SESSION['login'],
                                'at_automatically_deleted'
                            );

                            // Update cache table
                            updateCacheTable(
                                'delete_value',
                                $SETTINGS,
                                (int) $inputData['id']
                            );

                            $arrData['show_detail_option'] = 1;
                            $arrData['to_be_deleted'] = 0;
                        } elseif ($dataDelete['del_type'] === '2') {
                            $arrData['to_be_deleted'] = date($SETTINGS['date_format'], (int) $dataDelete['del_value']);
                        }
                    } else {
                        $arrData['to_be_deleted'] = '';
                    }
                } else {
                    $arrData['to_be_deleted'] = langHdl('no');
                }
                // ---
                // ---
            } else {
                $arrData['show_details'] = 0;
                // get readable list of restriction
                $listOfRestricted = '';
                if (empty($dataItem['restricted_to']) === false) {
                    foreach (explode(';', $dataItem['restricted_to']) as $userRest) {
                        if (empty($userRest) === false) {
                            $dataTmp = DB::queryfirstrow('SELECT login FROM ' . prefixTable('users') . ' WHERE id= ' . $userRest);
                            if (empty($listOfRestricted)) {
                                $listOfRestricted = $dataTmp['login'];
                            } else {
                                $listOfRestricted .= ';' . $dataTmp['login'];
                            }
                        }
                    }
                }
                $arrData['restricted_to'] = $listOfRestricted;
                $arrData['notification_list'] = '';
                $arrData['notification_status'] = '';
            }

            // Set a timestamp
            $arrData['timestamp'] = time();

            // Set temporary session variable to allow step2
            $_SESSION['user']['show_step2'] = true;

            // Error
            $arrData['error'] = '';

            // Encrypt data to return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $arrData, 
                'encode'
            );
            break;

            /*
           * CASE
           * Display History of the selected Item
        */
        case 'showDetailsStep2':
            // Is this query expected (must be run after a step1 and not standalone)
            if ($_SESSION['user']['show_step2'] !== true) {
                // Check KEY and rights
                if ($inputData['key'] !== $_SESSION['key']) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('key_is_not_correct'),
                        ),
                        'encode'
                    );
                    break;
                }
                if ($_SESSION['user_read_only'] === true) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to'),
                        ),
                        'encode'
                    );
                    break;
                }
            }
            $returnArray = array();

            // Load item data
            $dataItem = DB::queryFirstRow(
                'SELECT i.*, n.title AS folder_title
                FROM ' . prefixTable('items') . ' AS i
                INNER JOIN ' . prefixTable('nested_tree') . ' AS n ON (i.id_tree = n.id)
                WHERE i.id = %i',
                $inputData['id']
            );

            // check that actual user can access this item
            $restrictionActive = true;
            $restrictedTo = is_null($dataItem['restricted_to']) === false ? array_filter(explode(';', $dataItem['restricted_to'])) : [];
            if (
                in_array($_SESSION['user_id'], $restrictedTo)
                || (((int) $_SESSION['user_manager'] === 1 || (int) $_SESSION['user_can_manage_all_users'] === 1)
                    && (int) $SETTINGS['manager_edit'] === 1)
            ) {
                $restrictionActive = false;
            }
            if (empty($dataItem['restricted_to'])) {
                $restrictionActive = false;
            }

            // Check if user has a role that is accepted
            $rows_tmp = DB::query(
                'SELECT role_id
                FROM ' . prefixTable('restriction_to_roles') . '
                WHERE item_id=%i',
                $inputData['id']
            );
            foreach ($rows_tmp as $rec_tmp) {
                if (in_array($rec_tmp['role_id'], explode(';', $_SESSION['fonction_id']))) {
                    $restrictionActive = false;
                }
            }

            // check user is admin
            if (
                (int) $_SESSION['is_admin'] === 1
                && (int) $dataItem['perso'] === 0
            ) {
                $returnArray['show_details'] = 0;
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $returnArray,
                    'encode'
                );
            // Check if actual USER can see this ITEM
            } elseif ((
                    (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) === true || (int) $_SESSION['is_admin'] === 1)
                    && ((int) $dataItem['perso'] === 0 || ((int) $dataItem['perso'] === 1 && in_array($dataItem['id_tree'], $_SESSION['personal_folders']) === true))
                    && $restrictionActive === false) === true
                || (isset($SETTINGS['anyone_can_modify']) === true && (int) $SETTINGS['anyone_can_modify'] === 1
                    && (int) (int) $dataItem['anyone_can_modify'] === 1
                    && (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) || (int) $_SESSION['is_admin'] === 1)
                    && $restrictionActive === false) === true
                || (null !== $inputData['folderId']
                    && isset($_SESSION['list_restricted_folders_for_items'][$inputData['folderId']]) === true
                    && in_array($inputData['id'], $_SESSION['list_restricted_folders_for_items'][$inputData['folderId']]) === true
                    && (int) $post_restricted === 1
                    && $user_in_restricted_list_of_item === true) === true
                || (isset($SETTINGS['restricted_to_roles']) === true && (int) $SETTINGS['restricted_to_roles'] === 1
                    && $restrictionActive === false) === true
            ) {
                // generate 2d key
                $_SESSION['key_tmp'] = bin2hex(GenerateCryptKey(16, false, true, true, false, true, $SETTINGS));

                // Prepare files listing
                $attachments = array();
                
                // launch query
                $rows = DB::query(
                    'SELECT id, name, file, extension, size
                    FROM ' . prefixTable('files') . '
                    WHERE id_item = %i AND confirmed = 1',
                    $inputData['id']
                );
                foreach ($rows as $record) {
                    array_push(
                        $attachments,
                        array(
                            'icon' => fileFormatImage(strtolower($record['extension'])),
                            'filename' => basename($record['name'], '.' . $record['extension']),
                            'extension' => $record['extension'],
                            'size' => formatSizeUnits((int) $record['size']),
                            'is_image' => in_array(strtolower($record['extension']), TP_IMAGE_FILE_EXT) === true ? 1 : 0,
                            'id' => $record['id'],
                            'key' => $_SESSION['key_tmp'],
                        )
                    );
                }
                $returnArray['attachments'] = $attachments;

                // disable add bookmark if alread bookmarked
                $returnArray['favourite'] = in_array($inputData['id'], $_SESSION['favourites']) === true ? 1 : 0;

                // Add this item to the latests list
                if (isset($_SESSION['latest_items']) && isset($SETTINGS['max_latest_items']) && !in_array($dataItem['id'], $_SESSION['latest_items'])) {
                    if (count($_SESSION['latest_items']) >= $SETTINGS['max_latest_items']) {
                        array_pop($_SESSION['latest_items']); //delete last items
                    }
                    array_unshift($_SESSION['latest_items'], $dataItem['id']);
                    // update DB
                    DB::update(
                        prefixTable('users'),
                        array(
                            'latest_items' => implode(';', $_SESSION['latest_items']),
                        ),
                        'id=' . $_SESSION['user_id']
                    );
                }

                // get list of roles
                $listOptionsForUsers = array();
                $listOptionsForRoles = array();
                $rows = DB::query(
                    'SELECT r.role_id AS role_id, t.title AS title
                    FROM ' . prefixTable('roles_values') . ' AS r
                    INNER JOIN ' . prefixTable('roles_title') . ' AS t ON (r.role_id = t.id)
                    WHERE r.folder_id = %i',
                    $dataItem['id_tree']
                );
                foreach ($rows as $record) {
                    array_push(
                        $listOptionsForRoles,
                        array(
                            'id' => (int) $record['role_id'],
                            'title' => $record['title'],
                        )
                    );
                    $rows2 = DB::query(
                        'SELECT id, login, fonction_id, email, name, lastname
                        FROM ' . prefixTable('users') . '
                        WHERE fonction_id LIKE %s',
                        '%' . $record['role_id'] . '%'
                    );
                    foreach ($rows2 as $record2) {
                        foreach (explode(';', $record2['fonction_id']) as $role) {
                            if (
                                array_search($record2['id'], array_column($listOptionsForUsers, 'id')) === false
                                && $role === $record['role_id']
                            ) {
                                array_push(
                                    $listOptionsForUsers,
                                    array(
                                        'id' => (int) $record2['id'],
                                        'login' => $record2['login'],
                                        'name' => $record2['name'] . ' ' . $record2['lastname'],
                                        'email' => $record2['email'],
                                    )
                                );
                            }
                        }
                    }
                }

                $returnArray['users_list'] = $listOptionsForUsers;
                $returnArray['roles_list'] = $listOptionsForRoles;

                // send notification if enabled
                if (isset($SETTINGS['enable_email_notification_on_item_shown']) === true && (int) $SETTINGS['enable_email_notification_on_item_shown'] === 1) {
                    // Get path
                    $arbo = $tree->getPath($dataItem['id_tree'], true);
                    $path = '';
                    foreach ($arbo as $elem) {
                        if (empty($path) === true) {
                            $path = htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES) . ' ';
                        } else {
                            $path .= '&#8594; ' . htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES);
                        }
                    }
                    // Build text to show user
                    if (empty($path) === true) {
                        $path = addslashes($dataItem['label']);
                    } else {
                        $path = addslashes($dataItem['label']) . ' (' . $path . ')';
                    }

                    // Add Admins to notification list if expected
                    $reveivers = [];
                    $rows = DB::query(
                        'SELECT email
                        FROM ' . prefixTable('users').'
                        WHERE admin = %i',
                        1
                    );
                    foreach ($rows as $user) {
                        array_push($reveivers, $user['email']);
                    }

                    // prepare sending email
                    prepareSendingEmail(
                        langHdl('email_on_open_notification_subject'),
                        str_replace(
                            array('#tp_user#', '#tp_item#', '#tp_link#'),
                            array(
                                addslashes($_SESSION['login']),
                                $path,
                                $SETTINGS['cpassman_url'] . '/index.php?page=items&group=' . $dataItem['id_tree'] . '&id=' . $dataItem['id'],
                            ),
                            langHdl('email_on_open_notification_mail')
                        ),
                        implode(",", $reveivers),
                        "",
                        $SETTINGS
                    );
                }

                // has this item a change proposal
                DB::query('SELECT * FROM ' . prefixTable('items_change') . ' WHERE item_id = %i', $inputData['id']);
                $returnArray['has_change_proposal'] = DB::count();

                // Setting
                $returnArray['setting_restricted_to_roles'] = isset($SETTINGS['restricted_to_roles']) === true
                    && (int) $SETTINGS['restricted_to_roles'] === 1 ? 1 : 0;

                $_SESSION['user']['show_step2'] = false;
                
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $returnArray,
                    'encode'
                );
            } else {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $returnArray,
                    'encode'
                );
            }
            break;

            /*
         * CASE
         * Delete an item
        */
        case 'delete_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // Prepare POST variables
            $inputData['label'] = filter_var($dataReceived['label'], FILTER_SANITIZE_STRING);
            $inputData['folderId'] = (int) filter_var($dataReceived['folder_id'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);
            $post_access_level = (int) filter_var($dataReceived['access_level'], FILTER_SANITIZE_NUMBER_INT);

            // perform a check in case of Read-Only user creating an item in his PF
            if (($_SESSION['user_read_only'] === true
                    && in_array($inputData['label'], $_SESSION['personal_folders']) === false)
                || (int) $post_access_level <= 20
            ) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // Check that user can access this item
            $granted = accessToItemIsGranted($inputData['itemId'], $SETTINGS);
            if ($granted !== true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => $granted,
                    ),
                    'encode'
                );
                break;
            }

            // Load item data
            $data = DB::queryFirstRow(
                'SELECT id_tree
                FROM ' . prefixTable('items') . '
                WHERE id = %i',
                $inputData['itemId']
            );

            // delete item consists in disabling it
            DB::update(
                prefixTable('items'),
                array(
                    'inactif' => '1',
                ),
                'id = %i',
                $inputData['itemId']
            );

            // log
            logItems(
                $SETTINGS,
                (int) $inputData['itemId'],
                $inputData['label'],
                $_SESSION['user_id'],
                'at_delete',
                $_SESSION['login']
            );
            // Update CACHE table
            updateCacheTable('delete_value', $SETTINGS, (int) $inputData['itemId']);

            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'message' => '',
                ),
                'encode'
            );
            break;

            /*
        * CASE
        * Update a Group
        */
        case 'update_folder':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
    $SETTINGS['cpassman_dir'],$inputData['data'], 'decode');

            // Prepare variables
            $title = filter_var(htmlspecialchars_decode($dataReceived['title'], ENT_QUOTES), FILTER_SANITIZE_STRING);
            $inputData['folderId'] = filter_var(htmlspecialchars_decode($dataReceived['folder']), FILTER_SANITIZE_NUMBER_INT);

            // Check if user is allowed to access this folder
            if (!in_array($inputData['folderId'], $_SESSION['groupes_visibles'])) {
                echo '[{"error" : "' . langHdl('error_not_allowed_to') . '"}]';
                break;
            }

            // Check if title doesn't contains html codes
            if (preg_match_all('|<[^>]+>(.*)</[^>]+>|U', $title, $out)) {
                echo '[ { "error" : "' . langHdl('error_html_codes') . '" } ]';
                break;
            }
            // check that title is not numeric
            if (is_numeric($title) === true) {
                echo '[{"error" : "ERR_TITLE_ONLY_WITH_NUMBERS"}]';
                break;
            }

            // Check if duplicate folders name are allowed
            if (isset($SETTINGS['duplicate_folder']) && $SETTINGS['duplicate_folder'] === '0') {
                $data = DB::queryFirstRow('SELECT id, title FROM ' . prefixTable('nested_tree') . ' WHERE title = %s', $title);
                if (empty($data['id']) === false && $dataReceived['folder'] !== $data['id']) {
                    echo '[ { "error" : "' . langHdl('error_group_exist') . '" } ]';
                    break;
                }
            }

            // query on folder
            $data = DB::queryfirstrow(
                'SELECT parent_id, personal_folder
                FROM ' . prefixTable('nested_tree') . '
                WHERE id = %i',
                $inputData['folderId']
            );

            // check if complexity level is good
            // if manager or admin don't care
            if ($_SESSION['is_admin'] !== 1 && $_SESSION['user_manager'] !== 1 && $data['personal_folder'] === '0') {
                $data = DB::queryfirstrow(
                    'SELECT valeur
                    FROM ' . prefixTable('misc') . '
                    WHERE intitule = %i AND type = %s',
                    $data['parent_id'],
                    'complex'
                );
                if (intval($dataReceived['complexity']) < intval($data['valeur'])) {
                    echo '[ { "error" : "' . langHdl('error_folder_complexity_lower_than_top_folder') . ' [<b>' . TP_PW_COMPLEXITY[$data['valeur']][1] . '</b>]"} ]';
                    break;
                }
            }

            // update Folders table
            $tmp = DB::queryFirstRow(
                'SELECT title, parent_id, personal_folder FROM ' . prefixTable('nested_tree') . ' WHERE id = %i',
                $dataReceived['folder']
            );
            if ($tmp['parent_id'] !== 0 || $tmp['title'] !== $_SESSION['user_id'] || $tmp['personal_folder'] !== 1) {
                DB::update(
                    prefixTable('nested_tree'),
                    array(
                        'title' => $title,
                    ),
                    'id=%s',
                    $inputData['folderId']
                );
                // update complixity value
                DB::update(
                    prefixTable('misc'),
                    array(
                        'valeur' => $dataReceived['complexity'],
                    ),
                    'intitule = %s AND type = %s',
                    $inputData['folderId'],
                    'complex'
                );
                // rebuild fuild tree folder
                $tree->rebuild();
            }
            // send data
            echo '[{"error" : ""}]';
            break;

            /*
        * CASE
        * Move a Group including sub-folders
        */
        case 'move_folder':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
    $SETTINGS['cpassman_dir'],$inputData['data'], 'decode');
            $post_source_folder_id = filter_var(htmlspecialchars_decode($dataReceived['source_folder_id']), FILTER_SANITIZE_NUMBER_INT);
            $post_target_folder_id = filter_var(htmlspecialchars_decode($dataReceived['target_folder_id']), FILTER_SANITIZE_NUMBER_INT);

            // Check that user can access this folder
            if ((in_array($post_source_folder_id, $_SESSION['groupes_visibles']) === false ||
                    in_array($post_target_folder_id, $_SESSION['groupes_visibles']) === false) && ($post_target_folder_id === '0' &&
                    isset($SETTINGS['can_create_root_folder']) === true && (int) $SETTINGS['can_create_root_folder'] === 1)
            ) {
                $returnValues = '[{"error" : "' . langHdl('error_not_allowed_to') . '"}]';
                echo $returnValues;
                break;
            }

            $tmp_source = DB::queryFirstRow(
                'SELECT title, parent_id, personal_folder
                FROM ' . prefixTable('nested_tree') . '
                WHERE id = %i',
                $post_source_folder_id
            );

            $tmp_target = DB::queryFirstRow(
                'SELECT title, parent_id, personal_folder
                FROM ' . prefixTable('nested_tree') . '
                WHERE id = %i',
                $post_target_folder_id
            );

            // check if target is not a child of source
            if ($tree->isChildOf($post_target_folder_id, $post_source_folder_id) === true) {
                $returnValues = '[{"error" : "' . langHdl('error_not_allowed_to') . '"}]';
                echo $returnValues;
                break;
            }

            // check if source or target folder is PF. If Yes, then cancel operation
            if ((int) $tmp_source['personal_folder'] === 1 || (int) $tmp_target['personal_folder'] === 1) {
                $returnValues = '[{"error" : "' . langHdl('error_not_allowed_to') . '"}]';
                echo $returnValues;
                break;
            }

            // check if source or target folder is PF. If Yes, then cancel operation
            if ($tmp_source['title'] === $_SESSION['user_id'] || $tmp_target['title'] === $_SESSION['user_id']) {
                $returnValues = '[{"error" : "' . langHdl('error_not_allowed_to') . '"}]';
                echo $returnValues;
                break;
            }

            // moving SOURCE folder
            DB::update(
                prefixTable('nested_tree'),
                array(
                    'parent_id' => $post_target_folder_id,
                ),
                'id=%s',
                $post_source_folder_id
            );
            $tree->rebuild();

            // send data
            echo '[{"error" : ""}]';
            break;

            /*
        * CASE
        * Store hierarchic position of Group
        */
        case 'save_position':
            DB::update(
                prefixTable('nested_tree'),
                array(
                    'parent_id' => $inputData['destination'],
                ),
                'id = %i',
                $inputData['source']
            );
            $tree = new Tree\NestedTree\NestedTree(prefixTable('nested_tree'), 'id', 'parent_id', 'title');
            $tree->rebuild();
            break;

            /*
        * CASE
        * List items of a group
        */
        case 'do_items_list_in_folder':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            if (count($_SESSION['user_roles']) === 0) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            if (is_array($dataReceived) === true && array_key_exists('id', $dataReceived) === false) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_unknown'),
                    ),
                    'encode'
                );
                break;
            }

            // Prepare POST variables
            $inputData['id'] = filter_var($dataReceived['id'], FILTER_SANITIZE_NUMBER_INT);
            $post_restricted = filter_var($dataReceived['restricted'], FILTER_SANITIZE_NUMBER_INT);
            $post_start = filter_var($dataReceived['start'], FILTER_SANITIZE_NUMBER_INT);
            $post_nb_items_to_display_once = filter_var($dataReceived['nb_items_to_display_once'], FILTER_SANITIZE_NUMBER_INT);

            $arr_arbo = [];
            $folderIsPf = false;
            $showError = 0;
            $itemsIDList = $rights = $returnedData = $uniqueLoadData = $html_json = array();
            // Build query limits
            if (empty($post_start) === true) {
                $start = 0;
            } else {
                $start = $post_start;
            }

            // to do only on 1st iteration
            if ((int) $start === 0) {
                // Prepare tree
                $arbo = $tree->getPath($inputData['id'], true);
                foreach ($arbo as $elem) {
                    if ($elem->title === $_SESSION['user_id'] && (int) $elem->nlevel === 1) {
                        $elem->title = $_SESSION['login'];
                        $folderIsPf = true;
                    }
                    // Store path elements
                    array_push(
                        $arr_arbo,
                        array(
                            'id' => $elem->id,
                            'title' => htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES),
                            'visible' => in_array($elem->id, $_SESSION['groupes_visibles']) ? 1 : 0,
                        )
                    );
                }
                $uniqueLoadData['path'] = $arr_arbo;

                // store last folder accessed in cookie
                $arr_cookie_options = array (
                    'expires' => time() + TP_ONE_DAY_SECONDS * 5,
                    'path' => '/', 
                    'secure' => true,
                    'httponly' => true,
                    'samesite' => 'Lax' // None || Lax  || Strict
                );
                setcookie(
                    'jstree_select',
                    $inputData['id'],
                    $arr_cookie_options
                );

                // CHeck if roles have 'allow_pw_change' set to true
                $forceItemEditPrivilege = false;
                foreach ($_SESSION['user_roles'] as $role) {
                    $roleQ = DB::queryfirstrow(
                        'SELECT allow_pw_change
                        FROM ' . prefixTable('roles_title') . '
                        WHERE id = %i',
                        $role
                    );
                    if ((int) $roleQ['allow_pw_change'] === 1) {
                        $forceItemEditPrivilege = true;
                        break;
                    }
                }

                // is this folder a personal one
                $folder_is_personal = in_array($inputData['id'], $_SESSION['personal_folders']);
                $uniqueLoadData['folder_is_personal'] = $folder_is_personal;

                $folder_is_in_personal = in_array($inputData['id'], array_merge($_SESSION['personal_visible_groups'], $_SESSION['personal_folders']));
                $uniqueLoadData['folder_is_in_personal'] = $folder_is_in_personal;


                // check role access on this folder (get the most restrictive) (2.1.23)
                if ((int) $folder_is_personal === 0) {
                    $accessLevel = 20;
                    $arrTmp = [];
                    
                    foreach ($_SESSION['user_roles'] as $role) {
                        $access = DB::queryFirstRow(
                            'SELECT type FROM ' . prefixTable('roles_values') . ' WHERE role_id = %i AND folder_id = %i',
                            $role,
                            $inputData['id']
                        );
                        if (DB::count()>0) {
                            if ($access['type'] === 'R') {
                                array_push($arrTmp, 10);
                            } elseif ($access['type'] === 'W') {
                                array_push($arrTmp, 30);
                            } elseif (
                                $access['type'] === 'ND'
                                || ($forceItemEditPrivilege === true && $access['type'] === 'NDNE')
                            ) {
                                array_push($arrTmp, 20);
                            } elseif ($access['type'] === 'NE') {
                                array_push($arrTmp, 10);
                            } elseif ($access['type'] === 'NDNE') {
                                array_push($arrTmp, 15);
                            } else {
                                // Ensure to give access Right if allowed folder
                                if (in_array($inputData['id'], $_SESSION['groupes_visibles']) === true) {
                                    array_push($arrTmp, 30);
                                } else {
                                    array_push($arrTmp, 0);
                                }
                            }
                        }
                    }
                    // 3.0.0.0 - changed  MIN to MAX
                    $accessLevel = count($arrTmp) > 0 ? max($arrTmp) : $accessLevel;
                } else {
                    $accessLevel = 30;
                }
                $uniqueLoadData['accessLevel'] = $accessLevel;

                /*
                // check if this folder is a PF. If yes check if saltket is set
                if ((!isset($_SESSION['user']['encrypted_psk']) || empty($_SESSION['user']['encrypted_psk'])) && $folderIsPf === true) {
                    $showError = 'is_pf_but_no_saltkey';
                }
                */
                $uniqueLoadData['showError'] = $showError;

                // check if items exist
                $where = new WhereClause('and');
                if (null !== $post_restricted && (int) $post_restricted === 1 && empty($_SESSION['list_folders_limited'][$inputData['id']]) === false) {
                    $counter = count($_SESSION['list_folders_limited'][$inputData['id']]);
                    $uniqueLoadData['counter'] = $counter;
                    // check if this folder is visible
                } elseif (!in_array(
                    $inputData['id'],
                    array_merge(
                        $_SESSION['groupes_visibles'],
                        is_array($_SESSION['list_restricted_folders_for_items']) === true ? array_keys($_SESSION['list_restricted_folders_for_items']) : array(),
                        is_array($_SESSION['list_folders_limited']) === true ? array_keys($_SESSION['list_folders_limited']) : array()
                    )
                )) {
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        array(
                            'error' => 'not_authorized',
                            'arborescence' => $arr_arbo,
                        ),
                        'encode'
                    );
                    break;
                } else {
                    DB::query(
                        'SELECT *
                        FROM ' . prefixTable('items') . '
                        WHERE inactif = %i',
                        0
                    );
                    $counter = DB::count();
                    $uniqueLoadData['counter'] = $counter;
                }

                // Get folder complexity
                $folderComplexity = DB::queryFirstRow(
                    'SELECT valeur FROM ' . prefixTable('misc') . ' WHERE type = %s AND intitule = %i',
                    'complex',
                    $inputData['id']
                );
                $folderComplexity = $folderComplexity !== null ? (int) $folderComplexity['valeur'] : 0;
                $uniqueLoadData['folderComplexity'] = $folderComplexity;

                // Has this folder some categories to be displayed?
                $categoriesStructure = array();
                if (isset($SETTINGS['item_extra_fields']) && (int) $SETTINGS['item_extra_fields'] === 1) {
                    $folderRow = DB::query(
                        'SELECT id_category
                        FROM ' . prefixTable('categories_folders') . '
                        WHERE id_folder = %i',
                        $inputData['id']
                    );
                    foreach ($folderRow as $category) {
                        array_push(
                            $categoriesStructure,
                            $category['id_category']
                        );
                    }
                }
                $uniqueLoadData['categoriesStructure'] = $categoriesStructure;

                /*$categoriesStructure = array();
                if (isset($SETTINGS['item_extra_fields']) && (int) $SETTINGS['item_extra_fields'] === 1) {
                    $folderRow = DB::query(
                        'SELECT f.id_category, c.title AS title
                        FROM '.prefixTable('categories_folders').' AS f
                        INNER JOIN '.prefixTable('categories').' AS c ON (c.id = f.id_category)
                        WHERE f.id_folder = %i',
                        $inputData['id']
                    );
                    foreach ($folderRow as $category) {
                        $arrFields = array();
                        // Get each category definition with fields
                        $categoryRow = DB::query(
                            "SELECT *
                            FROM ".prefixTable("categories")."
                            WHERE parent_id=%i
                            ORDER BY `order` ASC",
                            $category['id_category']
                        );

                        if (DB::count() > 0) {
                            foreach ($categoryRow as $field) {
                                // Is this Field visibile by user?
                                if ($field['role_visibility'] === 'all'
                                    || count(
                                        array_intersect(
                                            explode(';', $_SESSION['fonction_id']),
                                            explode(',', $field['role_visibility'])
                                        )
                                    ) > 0
                                ) {
                                    array_push(
                                        $arrFields,
                                        array(
                                            $field['id'],
                                            $field['title'],
                                            $field['encrypted_data'],
                                            $field['type'],
                                            $field['masked'],
                                            $field['is_mandatory']
                                        )
                                    );
                                }
                            }
                        }

                        // store the categories
                        array_push(
                            $categoriesStructure,
                            array(
                                $category['id_category'],
                                $category['title'],
                                $arrFields
                            )
                        );
                    }
                }
                $uniqueLoadData['categoriesStructure'] = $categoriesStructure;
                */

                if (isset($_SESSION['list_folders_editable_by_role'])) {
                    $list_folders_editable_by_role = in_array($inputData['id'], $_SESSION['list_folders_editable_by_role']);
                } else {
                    $list_folders_editable_by_role = '';
                }
                $uniqueLoadData['list_folders_editable_by_role'] = $list_folders_editable_by_role;
            } else {
                $uniqueLoadData = json_decode(
                    filter_var($dataReceived['uniqueLoadData'], FILTER_UNSAFE_RAW),
                    true
                );

                // initialize main variables
                $showError = $uniqueLoadData['showError'];
                $accessLevel = $uniqueLoadData['accessLevel'];
                $counter = $uniqueLoadData['counter'];
                $counter_full = $uniqueLoadData['counter_full'];
                $categoriesStructure = $uniqueLoadData['categoriesStructure'];
                $folderComplexity = $uniqueLoadData['folderComplexity'];
                $folder_is_personal = $uniqueLoadData['folder_is_personal'];
                $folder_is_in_personal = $uniqueLoadData['folder_is_in_personal'];
                //$list_folders_editable_by_role = $uniqueLoadData['list_folders_editable_by_role'];
            }
            
            // prepare query WHere conditions
            $where = new WhereClause('and');
            if (null !== $post_restricted && (int) $post_restricted === 1 && empty($_SESSION['list_folders_limited'][$inputData['id']]) === false) {
                $where->add('i.id IN %ls', $_SESSION['list_folders_limited'][$inputData['id']]);
            } else {
                $where->add('i.id_tree=%i', $inputData['id']);
            }

            // build the HTML for this set of Items
            if ($counter > 0 && empty($showError)) {
                // init variables
                $expired_item = false;
                $limited_to_items = '';

                // List all ITEMS
                if ($folderIsPf === false) {
                    $where->add('i.inactif=%i', 0);
                    $where->add('l.date=%l', '(SELECT date FROM ' . prefixTable('log_items') . " WHERE action IN ('at_creation', 'at_modification') AND id_item=i.id ORDER BY date DESC LIMIT 1)");
                    if (empty($limited_to_items) === false) {
                        $where->add('i.id IN %ls', explode(',', $limited_to_items));
                    }

                    $query_limit = ' LIMIT ' .
                        $start . ',' .
                        $post_nb_items_to_display_once;
                    //db::debugmode(true);
                    $rows = DB::query(
                        'SELECT i.id AS id, MIN(i.restricted_to) AS restricted_to, MIN(i.perso) AS perso,
                        MIN(i.label) AS label, MIN(i.description) AS description, MIN(i.pw) AS pw, MIN(i.login) AS login,
                        MIN(i.anyone_can_modify) AS anyone_can_modify, l.date AS date, i.id_tree AS tree_id, i.fa_icon AS fa_icon,
                        MIN(n.renewal_period) AS renewal_period,
                        MIN(l.action) AS log_action,
                        l.id_user AS log_user,
                        i.url AS link
                        FROM ' . prefixTable('items') . ' AS i
                        INNER JOIN ' . prefixTable('nested_tree') . ' AS n ON (i.id_tree = n.id)
                        INNER JOIN ' . prefixTable('log_items') . ' AS l ON (i.id = l.id_item)
                        WHERE %l
                        GROUP BY i.id, l.date, l.id_user, l.action
                        ORDER BY i.label ASC, l.date DESC' . $query_limit,
                        $where
                    );
                    //db::debugmode(false);
                } else {
                    $post_nb_items_to_display_once = 'max';
                    $where->add('i.inactif=%i', 0);

                    $rows = DB::query(
                        'SELECT i.id AS id, MIN(i.restricted_to) AS restricted_to, MIN(i.perso) AS perso,
                        MIN(i.label) AS label, MIN(i.description) AS description, MIN(i.pw) AS pw, MIN(i.login) AS login,
                        MIN(i.anyone_can_modify) AS anyone_can_modify,l.date AS date, i.id_tree AS tree_id, i.fa_icon AS fa_icon,
                        MIN(n.renewal_period) AS renewal_period,
                        MIN(l.action) AS log_action,
                        l.id_user AS log_user,
                        i.url AS link
                        FROM ' . prefixTable('items') . ' AS i
                        INNER JOIN ' . prefixTable('nested_tree') . ' AS n ON (i.id_tree = n.id)
                        INNER JOIN ' . prefixTable('log_items') . ' AS l ON (i.id = l.id_item)
                        WHERE %l
                        GROUP BY i.id, l.date, l.id_user, l.action
                        ORDER BY i.label ASC, l.date DESC',
                        $where
                    );
                }

                $idManaged = '';

                foreach ($rows as $record) {
                    // exclude all results except the first one returned by query
                    if (empty($idManaged) === true || $idManaged !== $record['id']) {
                        // Fix a bug on Personal Item creation - field `perso` must be set to `1`
                        if ((int) $record['perso'] !== 1 && (int) $folder_is_personal === 1) {
                            DB::update(
                                prefixTable('items'),
                                array(
                                    'perso' => 1,
                                ),
                                'id=%i',
                                $record['id']
                            );
                            $record['perso'] = 1;
                        }

                        // Does this item has restriction to groups of users?
                        $item_is_restricted_to_role = false;
                        DB::queryfirstrow(
                            'SELECT role_id
                            FROM ' . prefixTable('restriction_to_roles') . '
                            WHERE item_id = %i',
                            $record['id']
                        );
                        if (DB::count() > 0) {
                            $item_is_restricted_to_role = true;
                        }

                        // Has this item a restriction to Groups of Users
                        $user_is_included_in_role = false;
                        DB::query(
                            'SELECT role_id
                            FROM ' . prefixTable('restriction_to_roles') . '
                            WHERE item_id = %i AND role_id IN %ls',
                            $record['id'],
                            $_SESSION['user_roles']
                        );
                        if (DB::count() > 0) {
                            $user_is_included_in_role = true;
                        }

                        // Is user in restricted list of users
                        if (empty($record['restricted_to']) === false) {
                            if (
                                in_array($_SESSION['user_id'], explode(';', $record['restricted_to'])) === true
                                || (((int) $_SESSION['user_manager'] === 1 || (int) $_SESSION['user_can_manage_all_users'] === 1)
                                    && (int) $SETTINGS['manager_edit'] === 1)
                            ) {
                                $user_is_in_restricted_list = true;
                            } else {
                                $user_is_in_restricted_list = false;
                            }
                        } else {
                            $user_is_in_restricted_list = false;
                        }

                        // Get Expiration date
                        $expired_item = 0;
                        if (
                            (int) $SETTINGS['activate_expiration'] === 1
                            && $record['renewal_period'] > 0
                            && ($record['date'] + ($record['renewal_period'] * TP_ONE_MONTH_SECONDS)) < time()
                        ) {
                            $expired_item = 1;
                        }
                        // Init
                        $html_json[$record['id']]['expired'] = (int) $expired_item;
                        $html_json[$record['id']]['item_id'] = (int) $record['id'];
                        $html_json[$record['id']]['tree_id'] = (int) $record['tree_id'];
                        $html_json[$record['id']]['label'] = strip_tags($record['label']);
                        if (isset($SETTINGS['show_description']) === true && (int) $SETTINGS['show_description'] === 1) {
                            $html_json[$record['id']]['desc'] = substr(preg_replace('#<[^>]+>#', ' ', $record['description']), 0, 200);
                        } else {
                            $html_json[$record['id']]['desc'] = '';
                        }
                        $html_json[$record['id']]['login'] = $record['login'];
                        $html_json[$record['id']]['anyone_can_modify'] = (int) $record['anyone_can_modify'];
                        $html_json[$record['id']]['is_result_of_search'] = 0;
                        $html_json[$record['id']]['is_favourited'] = in_array($record['id'], $_SESSION['favourites']) === true ? 1 : 0;
                        $html_json[$record['id']]['link'] = $record['link'];
                        $html_json[$record['id']]['fa_icon'] = $record['fa_icon'];

                        // Possible values:
                        // 0 -> no access to item
                        // 10 -> appears in list but no view
                        // 20 -> can view without edit (no copy) or move
                        // 30 -> can view without edit (no copy) but can move
                        // 40 -> can edit but not move
                        // 50 -> can edit and move
                        $itemIsPersonal = false;

                        // Let's identify the rights belonging to this ITEM
                        if (
                            (int) $record['perso'] === 1
                            && $record['log_action'] === 'at_creation'
                            && $record['log_user'] === $_SESSION['user_id']
                            && (int) $folder_is_in_personal === 1
                            && (int) $folder_is_personal === 1
                        ) {
                            // Case 1 - Is this item personal and user its owner?
                            // If yes then allow
                            // If no then continue
                            $itemIsPersonal = true;
                            $right = 70;
                            // ---
                            // ----- END CASE 1 -----
                        } elseif (((isset($_SESSION['user_manager']) === true && (int) $_SESSION['user_manager'] === 1)
                                || (isset($_SESSION['user_can_manage_all_users']) === true && (int) $_SESSION['user_can_manage_all_users'] === 1))
                            && (isset($SETTINGS['manager_edit']) === true && (int) $SETTINGS['manager_edit'] === 1)
                            && (int) $record['perso'] !== 1
                            && $user_is_in_restricted_list === true
                        ) {
                            // Case 2 - Is user manager and option "manager_edit" set to true?
                            // Allow all rights
                            $right = 70;
                            // ---
                            // ----- END CASE 2 -----
                        } elseif (
                            (int) $record['anyone_can_modify'] === 1
                            && (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] !== 1
                        ) {
                            // Case 3 - Has this item the setting "anyone can modify" set to true?
                            // Allow all rights
                            $right = 70;
                            // ---
                            // ----- END CASE 3 -----
                        } elseif (
                            $user_is_in_restricted_list === true
                            && (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] !== 1
                        ) {
                            // Case 4 - Is this item limited to Users? Is current user in this list?
                            // Allow all rights
                            $right = 70;
                            // ---
                            // ----- END CASE 4 -----
                        } elseif (
                            $user_is_included_in_role === true
                            && (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] !== 1
                        ) {
                            // Case 5 - Is this item limited to group of users? Is current user in one of those groups?
                            // Allow all rights
                            $right = 60;
                            // ---
                            // ----- END CASE 5 -----
                        } elseif (
                            (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] === 1
                        ) {
                            // Case 6 - Is user readonly?
                            // Allow limited rights
                            $right = 10;
                            // ---
                            // ----- END CASE 6 -----
                        } elseif (
                            (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] === 1
                        ) {
                            // Case 7 - Is user readonly?
                            // Allow limited rights
                            $right = 10;
                            // ---
                            // ----- END CASE 7 -----
                        } elseif (
                            (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] === 1
                        ) {
                            // Case 8 - Is user allowed to access?
                            // Allow rights
                            $right = 10;
                            // ---
                            // ----- END CASE 8 -----
                        } elseif (($user_is_included_in_role === false && $item_is_restricted_to_role === true)
                            && (int) $record['perso'] !== 1
                            && (int) $_SESSION['user_read_only'] !== 1
                        ) {
                            // Case 9 - Is this item limited to Users or Groups? Is current user in this list?
                            // If no then Allow none
                            $right = 10;
                            // ---
                            // ----- END CASE 9 -----
                        } else {
                            // Define the access based upon setting on folder
                            // 0 -> no access to item
                            // 10 -> appears in list but no view
                            // 20 -> can view without edit (no copy) or move or delete
                            // 30 -> can view without edit (no copy) or delete but can move
                            // 40 -> can edit but not move and not delete
                            // 50 -> can edit and delete but not move
                            // 60 -> can edit and move but not delete
                            // 70 -> can edit and move
                            if ((int) $accessLevel === 0) {
                                $right = 0;
                            } elseif ((10 <= (int) $accessLevel) && ((int) $accessLevel < 20)) {
                                $right = 20;
                            } elseif ((20 <= (int) $accessLevel) && ((int) $accessLevel < 30)) {
                                $right = 60;
                            } elseif ((int) $accessLevel === 30) {
                                $right = 70;
                            } else {
                                $right = 10;
                            }
                        }

                        // Now finalize the data to send back
                        $html_json[$record['id']]['rights'] = $right;
                        $html_json[$record['id']]['perso'] = 'fa-tag mi-red';
                        $html_json[$record['id']]['sk'] = $itemIsPersonal === true ? 1 : 0;
                        $html_json[$record['id']]['display'] = $right > 0 ? 1 : 0;
                        $html_json[$record['id']]['open_edit'] = in_array($right, array(40, 50, 60, 70)) === true ? 1 : 0;
                        $html_json[$record['id']]['canMove'] = in_array($right, array(30, 60, 70)) === true ? 1 : 0;

                        //*************** */

                        // Build array with items
                        array_push(
                            $itemsIDList,
                            array(
                                'id' => (int) $record['id'],
                                //'display' => $displayItem,
                                'edit' => $html_json[$record['id']]['open_edit'],
                            )
                        );
                    }
                    $idManaged = $record['id'];
                }

                $rights = recupDroitCreationSansComplexite($inputData['id']);
            }

            // DELETE - 2.1.19 - AND (l.action = 'at_creation' OR (l.action = 'at_modification' AND l.raison LIKE 'at_pw :%'))
            // count
            if ((int) $start === 0) {
                DB::query(
                    'SELECT i.id
                    FROM ' . prefixTable('items') . ' as i
                    INNER JOIN ' . prefixTable('nested_tree') . ' as n ON (i.id_tree = n.id)
                    INNER JOIN ' . prefixTable('log_items') . ' as l ON (i.id = l.id_item)
                    WHERE %l
                    ORDER BY i.label ASC, l.date DESC',
                    $where
                );
                $counter_full = DB::count();
                $uniqueLoadData['counter_full'] = $counter_full;
            }

            // Check list to be continued status
            if ($post_nb_items_to_display_once !== 'max' && ($post_nb_items_to_display_once + $start) < $counter_full) {
                $listToBeContinued = 'yes';
            } else {
                $listToBeContinued = 'end';
            }

            // Prepare returned values
            $returnValues = array(
                'html_json' => $html_json,
                //'folder_requests_psk' => $findPfGroup,
                'arborescence' => $arr_arbo,
                'array_items' => $itemsIDList,
                'error' => $showError,
                //'saltkey_is_required' => $folderIsPf === true ? 1 : 0,
                'show_clipboard_small_icons' => isset($SETTINGS['copy_to_clipboard_small_icons']) && (int) $SETTINGS['copy_to_clipboard_small_icons'] === 1 ? 1 : 0,
                'next_start' => intval($post_nb_items_to_display_once) + intval($start),
                'list_to_be_continued' => $listToBeContinued,
                'items_count' => $counter,
                'counter_full' => $counter_full,
                'folder_complexity' => (int) $folderComplexity,
                'categoriesStructure' => $categoriesStructure,
                'access_level' => $accessLevel,
                'IsPersonalFolder' => $folderIsPf === true ? 1 : 0,
                'uniqueLoadData' => json_encode($uniqueLoadData),
            );
            // Check if $rights is not null
            if (count($rights) > 0) {
                $returnValues = array_merge($returnValues, $rights);
            }

            // Encrypt data to return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $returnValues,
                'encode'
            );

            break;

        case 'show_item_password':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }

            // Run query
            $dataItem = DB::queryfirstrow(
                'SELECT i.pw AS pw, s.share_key AS share_key
                FROM ' . prefixTable('items') . ' AS i
                INNER JOIN ' . prefixTable('sharekeys_items') . ' AS s ON (s.object_id = i.id)
                WHERE user_id = %i AND i.id = %i',
                $_SESSION['user_id'],
                $inputData['itemId']
            );

            // Uncrypt PW
            if (DB::count() === 0) {
                // No share key found
                $pw = '';
            } else {
                $pw = doDataDecryption(
                    $dataItem['pw'],
                    decryptUserObjectKey(
                        $dataItem['share_key'],
                        $_SESSION['user']['private_key']
                    )
                );
            }

            $returnValues = array(
                'error' => false,
                'password' => $pw,
                'password_error' => '',
            );

            // Encrypt data to return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $returnValues,
                'encode'
            );
            break;

            /*
        * CASE
        * Get complexity level of a group
        */
        case 'get_complixity_level':
            // get some info about ITEM
            if (null !== $inputData['itemId'] && empty($inputData['itemId']) === false) {
                $dataItem = DB::queryfirstrow(
                    'SELECT perso, anyone_can_modify
                    FROM ' . prefixTable('items') . '
                    WHERE id=%i',
                    $inputData['itemId']
                );
                
                /*
                // is user allowed to access this folder - readonly
                if (null !== $inputData['folderId'] && empty($inputData['folderId']) === false) {
                    if (
                        in_array($inputData['folderId'], $_SESSION['read_only_folders']) === true
                        || in_array($inputData['folderId'], $_SESSION['groupes_visibles']) === false
                    ) {
                        // check if this item can be modified by anyone
                        if (isset($SETTINGS['anyone_can_modify']) && (int) $SETTINGS['anyone_can_modify'] === 1) {
                            if ((int) $dataItem['anyone_can_modify'] !== 1) {
                                // else return not authorized
                                $returnValues = array(
                                    'error' => true,
                                    'message' => langHdl('error_not_allowed_to'),
                                );
                                echo (string) prepareExchangedData(
    $SETTINGS['cpassman_dir'],$returnValues, 'encode');
                                break;
                            }
                        } else {
                            // else return not authorized
                            $returnValues = array(
                                'error' => true,
                                'message' => langHdl('error_not_allowed_to'),
                            );
                            echo (string) prepareExchangedData(
    $SETTINGS['cpassman_dir'],$returnValues, 'encode');
                            break;
                        }
                    }
                }
                */

                // Lock Item (if already locked), go back and warn
                $dataTmp = DB::queryFirstRow('SELECT timestamp, user_id FROM ' . prefixTable('items_edition') . ' WHERE item_id = %i', $inputData['itemId']);

                // If token is taken for this Item and delay is passed then delete it.
                if (
                    isset($SETTINGS['delay_item_edition']) &&
                    $SETTINGS['delay_item_edition'] > 0 && empty($dataTmp['timestamp']) === false &&
                    round(abs(time() - $dataTmp['timestamp']) / 60, 2) > $SETTINGS['delay_item_edition']
                ) {
                    DB::delete(prefixTable('items_edition'), 'item_id = %i', $inputData['itemId']);
                    //reload the previous data
                    $dataTmp = DB::queryFirstRow(
                        'SELECT timestamp, user_id FROM ' . prefixTable('items_edition') . ' WHERE item_id = %i',
                        $inputData['itemId']
                    );
                }

                // If edition by same user (and token not freed before for any reason, then update timestamp)
                if (empty($dataTmp['timestamp']) === false && $dataTmp['user_id'] === $_SESSION['user_id']) {
                    DB::update(
                        prefixTable('items_edition'),
                        array(
                            'timestamp' => time(),
                        ),
                        'user_id = %i AND item_id = %i',
                        $_SESSION['user_id'],
                        $inputData['itemId']
                    );
                    // If no token for this Item, then initialize one
                } elseif (empty($dataTmp[0])) {
                    DB::insert(
                        prefixTable('items_edition'),
                        array(
                            'timestamp' => time(),
                            'item_id' => $inputData['itemId'],
                            'user_id' => (int) $_SESSION['user_id'],
                        )
                    );
                    // Edition not possible
                } else {
                    $returnValues = array(
                        'error' => true,
                        'message' => langHdl('error_no_edition_possible_locked'),
                    );
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        $returnValues,
                        'encode'
                    );
                    break;
                }
            }

            // do query on this folder
            $data_this_folder = DB::queryFirstRow(
                'SELECT id, personal_folder, title
                FROM ' . prefixTable('nested_tree') . '
                WHERE id = %s',
                $inputData['folderId']
            );

            // check if user can perform this action
            if (
                null !== $inputData['context']
                && empty($inputData['context']) === false
            ) {
                if (
                    $inputData['context'] === 'create_folder'
                    || $inputData['context'] === 'edit_folder'
                    || $inputData['context'] === 'delete_folder'
                    || $inputData['context'] === 'copy_folder'
                ) {
                    if (
                        (int) $_SESSION['is_admin'] !== 1
                        && ((int) $_SESSION['user_manager'] !== 1)
                        && (isset($SETTINGS['enable_user_can_create_folders'])
                            && (int) $SETTINGS['enable_user_can_create_folders'] !== 1)
                        && ((int) $data_this_folder['personal_folder'] !== 1 && $data_this_folder['title'] !== $_SESSION['user_id'])   // take into consideration if this is a personal folder
                    ) {
                        $returnValues = array(
                            'error' => true,
                            'message' => langHdl('error_not_allowed_to'),
                        );
                        echo (string) prepareExchangedData(
                            $SETTINGS['cpassman_dir'],
                            $returnValues,
                            'encode'
                        );
                        break;
                    }
                }
            }

            // Get required Complexity for this Folder
            $visibilite = '';
            $data = DB::queryFirstRow(
                'SELECT m.valeur, n.personal_folder
                FROM ' . prefixTable('misc') . ' AS m
                INNER JOIN ' . prefixTable('nested_tree') . ' AS n ON (m.intitule = n.id)
                WHERE type=%s AND intitule = %s',
                'complex',
                $inputData['folderId']
            );

            if (isset($data['valeur']) === true && (empty($data['valeur']) === false || $data['valeur'] === '0')) {
                $complexity = TP_PW_COMPLEXITY[$data['valeur']][1];
                $folder_is_personal = (int) $data['personal_folder'];

                // Prepare Item actual visibility (what Users/Roles can see it)
                $rows = DB::query(
                    'SELECT t.title
                    FROM ' . prefixTable('roles_values') . ' as v
                    INNER JOIN ' . prefixTable('roles_title') . ' as t ON (v.role_id = t.id)
                    WHERE v.folder_id = %i
                    GROUP BY title',
                    $inputData['folderId']
                );
                foreach ($rows as $record) {
                    if (empty($visibilite)) {
                        $visibilite = $record['title'];
                    } else {
                        $visibilite .= ' - ' . $record['title'];
                    }
                }
            } else {
                $complexity = langHdl('not_defined');

                // if not defined, then previous query failed and personal_folder is null
                // do new query to know if current folder is pf
                $data_pf = DB::queryFirstRow(
                    'SELECT personal_folder
                    FROM ' . prefixTable('nested_tree') . '
                    WHERE id = %s',
                    $inputData['folderId']
                );
                
                $folder_is_personal = $data_pf !== null ? (int) $data_pf['personal_folder'] : 0;
                
                $visibilite = $_SESSION['name'] . ' ' . $_SESSION['lastname'] . ' (' . $_SESSION['login'] . ')';
            }

            recupDroitCreationSansComplexite($inputData['folderId']);

            // get list of roles
            $listOptionsForUsers = array();
            $listOptionsForRoles = array();
            $rows = DB::query(
                'SELECT r.role_id AS role_id, t.title AS title
                FROM ' . prefixTable('roles_values') . ' AS r
                INNER JOIN ' . prefixTable('roles_title') . ' AS t ON (r.role_id = t.id)
                WHERE r.folder_id = %i',
                $inputData['folderId']
            );
            foreach ($rows as $record) {
                array_push(
                    $listOptionsForRoles,
                    array(
                        'id' => $record['role_id'],
                        'title' => $record['title'],
                    )
                );
                $rows2 = DB::query(
                    'SELECT id, login, fonction_id, email, name, lastname
                    FROM ' . prefixTable('users') . '
                    WHERE admin = 0 AND fonction_id is not null'
                );
                foreach ($rows2 as $record2) {
                    foreach (explode(';', $record2['fonction_id']) as $role) {
                        if (
                            array_search($record2['id'], array_column($listOptionsForUsers, 'id')) === false
                            && $role === $record['role_id']
                        ) {
                            array_push(
                                $listOptionsForUsers,
                                array(
                                    'id' => $record2['id'],
                                    'login' => $record2['login'],
                                    'name' => $record2['name'] . ' ' . $record2['lastname'],
                                    'email' => $record2['email'],
                                )
                            );
                        }
                    }
                }
            }
			
			// Get access level for this folder
			$accessLevel = 20;
			if ($folder_is_personal === 0) {
				$arrTmp = [];
				foreach ($_SESSION['user_roles'] as $role) {
					//db::debugmode(true);
					$access = DB::queryFirstRow(
						'SELECT type
						FROM ' . prefixTable('roles_values') . '
						WHERE role_id = %i AND folder_id = %i',
						$role,
						$inputData['folderId']
					);
					//db::debugmode(false);
                    if (DB::count()>0) {
                        if ($access['type'] === 'R') {
                            array_push($arrTmp, 10);
                        } elseif ($access['type'] === 'W') {
                            array_push($arrTmp, 30);
                        } elseif ($access['type'] === 'ND') {
                            array_push($arrTmp, 20);
                        } elseif ($access['type'] === 'NE') {
                            array_push($arrTmp, 10);
                        } elseif ($access['type'] === 'NDNE') {
                            array_push($arrTmp, 15);
                        } else {
                            // Ensure to give access Right if allowed folder
                            if (in_array($inputData['id'], $_SESSION['groupes_visibles']) === true) {
                                array_push($arrTmp, 30);
                            } else {
                                array_push($arrTmp, 0);
                            }
                        }
                    }
				}
				// 3.0.0.0 - changed  MIN to MAX
				$accessLevel = count($arrTmp) > 0 ? max($arrTmp) : $accessLevel;
			} elseif ($folder_is_personal === 1) {
				$accessLevel = 30;
			}

            $returnValues = array(
                'folderId' => (int) $inputData['folderId'],
                'error' => false,
                'val' => $data !== null ? (int) $data['valeur'] : 0,
                'visibility' => $visibilite,
                'complexity' => $complexity,
                'personal' => $folder_is_personal,
                'usersList' => $listOptionsForUsers,
                'rolesList' => $listOptionsForRoles,
                'setting_restricted_to_roles' => isset($SETTINGS['restricted_to_roles']) === true
                    && (int) $SETTINGS['restricted_to_roles'] === 1 ? 1 : 0,
                'itemAccessRight' => isset($accessLevel) === true ? $accessLevel : '',
            );
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $returnValues,
                'encode'
            );
            break;

            /*
        * CASE
        * DELETE attached file from an item
        */
        case 'delete_attached_file':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            $fileId = filter_var($dataReceived['file_id'], FILTER_SANITIZE_NUMBER_INT);

            // Get some info before deleting
            $data = DB::queryFirstRow(
                'SELECT name, id_item, file
                FROM ' . prefixTable('files') . '
                WHERE id = %i',
                $fileId
            );

            // Load item data
            $data_item = DB::queryFirstRow(
                'SELECT id_tree
                FROM ' . prefixTable('items') . '
                WHERE id = %i',
                $data['id_item']
            );

            // Check that user can access this folder
            if (in_array($data_item['id_tree'], $_SESSION['groupes_visibles']) === false) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array('error' => 'ERR_FOLDER_NOT_ALLOWED'),
                    'encode'
                );
                break;
            }

            if (empty($data['id_item']) === false) {
                // Delete from FILES table
                DB::delete(
                    prefixTable('files'),
                    'id = %i',
                    $fileId
                );

                // Update the log
                logItems(
                    $SETTINGS,
                    (int) $data['id_item'],
                    $data['name'],
                    $_SESSION['user_id'],
                    'at_modification',
                    $_SESSION['login'],
                    'at_del_file : ' . $data['name']
                );

                // DElete sharekeys
                DB::delete(
                    prefixTable('sharekeys_files'),
                    'object_id = %i',
                    $fileId
                );

                // Delete file from server
                fileDelete($SETTINGS['path_to_upload_folder'] . '/' . TP_FILE_PREFIX . base64_decode($data['file']), $SETTINGS);
            }

            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'message' => '',
                ),
                'encode'
            );
            break;

            /*
        * FUNCTION
        * Launch an action when clicking on a quick icon
        * $action = 0 => Make not favorite
        * $action = 1 => Make favorite
        */
        case 'action_on_quick_icon':
            // Check KEY and rights
            if (
                $inputData['key'] !== $_SESSION['key']
                || $_SESSION['user_read_only'] === true || !isset($SETTINGS['pwd_maximum_length'])
            ) {
                // error
                exit;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            $inputData['action'] = (int) filter_var($dataReceived['action'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            if ((int) $inputData['action'] === 0) {
                // Add new favourite
                array_push($_SESSION['favourites'], $inputData['itemId']);
                //print_r($_SESSION['favourites']);
                DB::update(
                    prefixTable('users'),
                    array(
                        'favourites' => implode(';', $_SESSION['favourites']),
                    ),
                    'id = %i',
                    $_SESSION['user_id']
                );
                // Update SESSION with this new favourite
                $data = DB::queryfirstrow(
                    'SELECT label,id_tree
                    FROM ' . prefixTable('items') . '
                    WHERE id = %i',
                    $inputData['itemId']
                );
                $_SESSION['favourites_tab'][$inputData['itemId']] = array(
                    'label' => $data['label'],
                    'url' => 'index.php?page=items&amp;group=' . $data['id_tree'] . '&amp;id=' . $inputData['itemId'],
                );
            } elseif ((int) $inputData['action'] === 1) {
                // delete from session
                foreach ($_SESSION['favourites'] as $key => $value) {
                    if ($_SESSION['favourites'][$key] === $inputData['itemId']) {
                        unset($_SESSION['favourites'][$key]);
                        break;
                    }
                }
                // delete from DB
                DB::update(
                    prefixTable('users'),
                    array(
                        'favourites' => implode(';', $_SESSION['favourites']),
                    ),
                    'id = %i',
                    $_SESSION['user_id']
                );
                // refresh session fav list
                if (isset($_SESSION['favourites_tab'])) {
                    foreach ($_SESSION['favourites_tab'] as $key => $value) {
                        if ($key === $inputData['id']) {
                            unset($_SESSION['favourites_tab'][$key]);
                            break;
                        }
                    }
                }
            }
            break;

            /*
        * CASE
        * Move an ITEM
        */
        case 'move_item':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true || isset($SETTINGS['pwd_maximum_length']) === false) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            $inputData['folderId'] = (int) filter_var($dataReceived['folder_id'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            // get data about item
            $dataSource = DB::queryfirstrow(
                'SELECT i.pw, f.personal_folder,i.id_tree, f.title,i.label
                FROM ' . prefixTable('items') . ' as i
                INNER JOIN ' . prefixTable('nested_tree') . ' as f ON (i.id_tree=f.id)
                WHERE i.id=%i',
                $inputData['itemId']
            );

            // get data about new folder
            $dataDestination = DB::queryfirstrow(
                'SELECT personal_folder, title
                FROM ' . prefixTable('nested_tree') . '
                WHERE id = %i',
                $inputData['folderId']
            );

            // Check that user can access this folder
            if (
                in_array($dataSource['id_tree'], $_SESSION['groupes_visibles']) === false
                || in_array($inputData['folderId'], $_SESSION['groupes_visibles']) === false
                //|| (int) $dataSource['personal_folder'] === (int) $dataDestination['personal_folder']
            ) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // Manage possible cases
            if ((int) $dataSource['personal_folder'] === 0 && (int) $dataDestination['personal_folder'] === 0) {
                // Previous is non personal folder and new too
                // Just update is needed. Item key is the same
                DB::update(
                    prefixTable('items'),
                    array(
                        'id_tree' => $inputData['folderId'],
                    ),
                    'id=%i',
                    $inputData['itemId']
                );
                // ---
                // ---
            } elseif ((int) $dataSource['personal_folder'] === 0 && (int) $dataDestination['personal_folder'] === 1) {
                // Source is public and destination is personal
                // Decrypt and remove all sharekeys (items, fields, files)
                // Encrypt only for the user

                // Remove all item sharekeys items
                DB::delete(
                    prefixTable('sharekeys_items'),
                    'object_id = %i AND user_id != %i',
                    $inputData['itemId'],
                    $_SESSION['user_id']
                );

                // Remove all item sharekeys fields
                // Get fields for this Item
                $rows = DB::query(
                    'SELECT id
                    FROM ' . prefixTable('categories_items') . '
                    WHERE item_id = %i',
                    $inputData['itemId']
                );
                foreach ($rows as $field) {
                    DB::delete(
                        prefixTable('sharekeys_fields'),
                        'object_id = %i AND user_id != %i',
                        $field['id'],
                        $_SESSION['user_id']
                    );
                }

                // Remove all item sharekeys files
                // Get FILES for this Item
                $rows = DB::query(
                    'SELECT id
                    FROM ' . prefixTable('files') . '
                    WHERE id_item = %i',
                    $inputData['itemId']
                );
                foreach ($rows as $attachment) {
                    DB::delete(
                        prefixTable('sharekeys_files'),
                        'object_id = %i AND user_id != %i',
                        $attachment['id'],
                        $_SESSION['user_id']
                    );
                }

                // update pw
                DB::update(
                    prefixTable('items'),
                    array(
                        'id_tree' => $inputData['folderId'],
                        'perso' => 1,
                    ),
                    'id=%i',
                    $inputData['itemId']
                );
                // ---
                // ---
            } elseif ((int) $dataSource['personal_folder'] === 1 && (int) $dataDestination['personal_folder'] === 1) {
                // If previous is personal folder and new is personal folder too => no key exist on item
                // just update is needed. Item key is the same
                DB::update(
                    prefixTable('items'),
                    array(
                        'id_tree' => $inputData['folderId'],
                    ),
                    'id=%i',
                    $inputData['itemId']
                );
                // ---
                // ---
            } elseif ((int) $dataSource['personal_folder'] === 1 && (int) $dataDestination['personal_folder'] === 0) {
                // If previous is personal folder and new is not personal folder => no key exist on item => add new
                // Create keys for all users

                // Get the ITEM object key for the user
                $userKey = DB::queryFirstRow(
                    'SELECT share_key
                    FROM ' . prefixTable('sharekeys_items') . '
                    WHERE user_id = %i AND object_id = %i',
                    $_SESSION['user_id'],
                    $inputData['itemId']
                );
                if (DB::count() > 0) {
                    $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                    // This is a public object
                    $users = DB::query(
                        'SELECT id, public_key
                        FROM ' . prefixTable('users') . '
                        WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                        AND public_key != ""'
                    );
                    foreach ($users as $user) {
                        // Insert in DB the new object key for this item by user
                        DB::insert(
                            prefixTable('sharekeys_items'),
                            array(
                                'object_id' => $inputData['itemId'],
                                'user_id' => (int) $user['id'],
                                'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                            )
                        );
                    }
                }

                // Get the FIELDS object key for the user
                // Get fields for this Item
                $rows = DB::query(
                    'SELECT id
                    FROM ' . prefixTable('categories_items') . '
                    WHERE item_id = %i',
                    $inputData['itemId']
                );
                foreach ($rows as $field) {
                    $userKey = DB::queryFirstRow(
                        'SELECT share_key
                        FROM ' . prefixTable('sharekeys_fields') . '
                        WHERE user_id = %i AND object_id = %i',
                        $_SESSION['user_id'],
                        $field['id']
                    );
                    if (DB::count() > 0) {
                        $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                        // This is a public object
                        $users = DB::query(
                            'SELECT id, public_key
                            FROM ' . prefixTable('users') . '
                            WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                            AND public_key != ""'
                        );
                        foreach ($users as $user) {
                            // Insert in DB the new object key for this item by user
                            DB::insert(
                                prefixTable('sharekeys_fields'),
                                array(
                                    'object_id' => $field['id'],
                                    'user_id' => (int) $user['id'],
                                    'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                                )
                            );
                        }
                    }
                }

                // Get the FILE object key for the user
                // Get FILES for this Item
                $rows = DB::query(
                    'SELECT id
                    FROM ' . prefixTable('files') . '
                    WHERE id_item = %i',
                    $inputData['itemId']
                );
                foreach ($rows as $attachment) {
                    $userKey = DB::queryFirstRow(
                        'SELECT share_key
                        FROM ' . prefixTable('sharekeys_files') . '
                        WHERE user_id = %i AND object_id = %i',
                        $_SESSION['user_id'],
                        $attachment['id']
                    );
                    if (DB::count() > 0) {
                        $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                        // This is a public object
                        $users = DB::query(
                            'SELECT id, public_key
                            FROM ' . prefixTable('users') . '
                            WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                            AND public_key != ""'
                        );
                        foreach ($users as $user) {
                            // Insert in DB the new object key for this item by user
                            DB::insert(
                                prefixTable('sharekeys_files'),
                                array(
                                    'object_id' => $attachment['id'],
                                    'user_id' => (int) $user['id'],
                                    'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                                )
                            );
                        }
                    }
                }

                // update item
                DB::update(
                    prefixTable('items'),
                    array(
                        'id_tree' => $inputData['folderId'],
                        'perso' => 0,
                    ),
                    'id=%i',
                    $inputData['itemId']
                );
            }

            // Log item moved
            logItems(
                $SETTINGS,
                (int) $inputData['itemId'],
                $dataSource['label'],
                $_SESSION['user_id'],
                'at_modification',
                $_SESSION['login'],
                'at_moved : ' . $dataSource['title'] . ' -> ' . $dataDestination['title']
            );

            // Update cache table
            updateCacheTable(
                'update_value',
                $SETTINGS,
                (int) $inputData['itemId']
            );

            $returnValues = array(
                'error' => '',
                'message' => '',
                'from_folder' => $dataSource['id_tree'],
                'to_folder' => $inputData['folderId'],
            );
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $returnValues,
                'encode'
            );
            break;

            /*
        * CASE
        * MASSIVE Move an ITEM
        */
        case 'mass_move_items':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true || isset($SETTINGS['pwd_maximum_length']) === false) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            $inputData['folderId'] = filter_var($dataReceived['folder_id'], FILTER_SANITIZE_NUMBER_INT);
            $post_item_ids = filter_var($dataReceived['item_ids'], FILTER_SANITIZE_STRING);

            // loop on items to move
            foreach (explode(';', $post_item_ids) as $item_id) {
                if (empty($item_id) === false) {
                    // get data about item
                    $dataSource = DB::queryfirstrow(
                        'SELECT i.pw, f.personal_folder,i.id_tree, f.title,i.label
                        FROM ' . prefixTable('items') . ' as i
                        INNER JOIN ' . prefixTable('nested_tree') . ' as f ON (i.id_tree=f.id)
                        WHERE i.id=%i',
                        $item_id
                    );

                    // Check that user can access this folder
                    if (
                        in_array($dataSource['id_tree'], $_SESSION['groupes_visibles']) === false
                        || in_array($inputData['folderId'], $_SESSION['groupes_visibles']) === false
                    ) {
                        echo (string) prepareExchangedData(
                            $SETTINGS['cpassman_dir'],
                            array(
                                'error' => true,
                                'message' => langHdl('error_not_allowed_to'),
                            ),
                            'encode'
                        );
                        exit;
                    }

                    // get data about new folder
                    $dataDestination = DB::queryfirstrow(
                        'SELECT personal_folder, title FROM ' . prefixTable('nested_tree') . ' WHERE id = %i',
                        $inputData['folderId']
                    );

                    // previous is non personal folder and new too
                    if (
                        (int) $dataSource['personal_folder'] === 0
                        && (int) $dataDestination['personal_folder'] === 0
                    ) {
                        // just update is needed. Item key is the same
                        DB::update(
                            prefixTable('items'),
                            array(
                                'id_tree' => $inputData['folderId'],
                            ),
                            'id = %i',
                            $item_id
                        );
                        // ---
                        // ---
                        // ---
                    } elseif (
                        (int) $dataSource['personal_folder'] === 0
                        && (int) $dataDestination['personal_folder'] === 1
                    ) {
                        // Source is public and destination is personal
                        // Decrypt and remove all sharekeys (items, fields, files)
                        // Encrypt only for the user

                        // Remove all item sharekeys items
                        DB::delete(
                            prefixTable('sharekeys_items'),
                            'object_id = %i AND user_id != %i',
                            $item_id,
                            $_SESSION['user_id']
                        );

                        // Remove all item sharekeys fields
                        // Get fields for this Item
                        $rows = DB::query(
                            'SELECT id
                            FROM ' . prefixTable('categories_items') . '
                            WHERE item_id = %i',
                            $item_id
                        );
                        foreach ($rows as $field) {
                            DB::delete(
                                prefixTable('sharekeys_fields'),
                                'object_id = %i AND user_id != %i',
                                $field['id'],
                                $_SESSION['user_id']
                            );
                        }

                        // Remove all item sharekeys files
                        // Get FILES for this Item
                        $rows = DB::query(
                            'SELECT id
                            FROM ' . prefixTable('files') . '
                            WHERE id_item = %i',
                            $item_id
                        );
                        foreach ($rows as $attachment) {
                            DB::delete(
                                prefixTable('sharekeys_files'),
                                'object_id = %i AND user_id != %i',
                                $attachment['id'],
                                $_SESSION['user_id']
                            );
                        }

                        // update pw
                        DB::update(
                            prefixTable('items'),
                            array(
                                'id_tree' => $inputData['folderId'],
                                'perso' => 1,
                            ),
                            'id = %i',
                            $item_id
                        );
                        // ---
                        // ---
                        // ---
                    } elseif (
                        (int) $dataSource['personal_folder'] === 1
                        && (int) $dataDestination['personal_folder'] === 1
                    ) {
                        // If previous is personal folder and new is personal folder too => no key exist on item
                        // just update is needed. Item key is the same
                        DB::update(
                            prefixTable('items'),
                            array(
                                'id_tree' => $inputData['folderId'],
                            ),
                            'id = %i',
                            $item_id
                        );
                        // ---
                        // ---
                        // ---
                    } elseif (
                        (int) $dataSource['personal_folder'] === 1
                        && (int) $dataDestination['personal_folder'] === 0
                    ) {
                        // If previous is personal folder and new is not personal folder => no key exist on item => add new
                        // Create keys for all users

                        // Get the ITEM object key for the user
                        $userKey = DB::queryFirstRow(
                            'SELECT share_key
                            FROM ' . prefixTable('sharekeys_items') . '
                            WHERE user_id = %i AND object_id = %i',
                            $_SESSION['user_id'],
                            $item_id
                        );
                        if (DB::count() > 0) {
                            $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                            // This is a public object
                            $users = DB::query(
                                'SELECT id, public_key
                                FROM ' . prefixTable('users') . '
                                WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                                AND public_key != ""'
                            );
                            foreach ($users as $user) {
                                // Insert in DB the new object key for this item by user
                                DB::insert(
                                    prefixTable('sharekeys_items'),
                                    array(
                                        'object_id' => $item_id,
                                        'user_id' => (int) $user['id'],
                                        'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                                    )
                                );
                            }
                        }

                        // Get the FIELDS object key for the user
                        // Get fields for this Item
                        $rows = DB::query(
                            'SELECT id
                            FROM ' . prefixTable('categories_items') . '
                            WHERE item_id = %i',
                            $item_id
                        );
                        foreach ($rows as $field) {
                            $userKey = DB::queryFirstRow(
                                'SELECT share_key
                                FROM ' . prefixTable('sharekeys_fields') . '
                                WHERE user_id = %i AND object_id = %i',
                                $_SESSION['user_id'],
                                $field['id']
                            );
                            if (DB::count() > 0) {
                                $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                                // This is a public object
                                $users = DB::query(
                                    'SELECT id, public_key
                                    FROM ' . prefixTable('users') . '
                                    WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                                    AND public_key != ""'
                                );
                                foreach ($users as $user) {
                                    // Insert in DB the new object key for this item by user
                                    DB::insert(
                                        prefixTable('sharekeys_fields'),
                                        array(
                                            'object_id' => $field['id'],
                                            'user_id' => (int) $user['id'],
                                            'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                                        )
                                    );
                                }
                            }
                        }

                        // Get the FILE object key for the user
                        // Get FILES for this Item
                        $rows = DB::query(
                            'SELECT id
                            FROM ' . prefixTable('files') . '
                            WHERE id_item = %i',
                            $item_id
                        );
                        foreach ($rows as $attachment) {
                            $userKey = DB::queryFirstRow(
                                'SELECT share_key
                                FROM ' . prefixTable('sharekeys_files') . '
                                WHERE user_id = %i AND object_id = %i',
                                $_SESSION['user_id'],
                                $attachment['id']
                            );
                            if (DB::count() > 0) {
                                $objectKey = decryptUserObjectKey($userKey['share_key'], $_SESSION['user']['private_key']);

                                // This is a public object
                                $users = DB::query(
                                    'SELECT id, public_key
                                    FROM ' . prefixTable('users') . '
                                    WHERE id NOT IN ("' . OTV_USER_ID . '","' . SSH_USER_ID . '","' . API_USER_ID . '","' . $_SESSION['user_id'] . '")
                                    AND public_key != ""'
                                );
                                foreach ($users as $user) {
                                    // Insert in DB the new object key for this item by user
                                    DB::insert(
                                        prefixTable('sharekeys_files'),
                                        array(
                                            'object_id' => $attachment['id'],
                                            'user_id' => (int) $user['id'],
                                            'share_key' => encryptUserObjectKey($objectKey, $user['public_key']),
                                        )
                                    );
                                }
                            }
                        }

                        // update item
                        DB::update(
                            prefixTable('items'),
                            array(
                                'id_tree' => $inputData['folderId'],
                                'perso' => 0,
                            ),
                            'id=%i',
                            $item_id
                        );
                    }
                    // Log item moved
                    logItems(
                        $SETTINGS,
                        (int) $item_id,
                        $dataSource['label'],
                        $_SESSION['user_id'],
                        'at_modification',
                        $_SESSION['login'],
                        'at_moved : ' . $dataSource['title'] . ' -> ' . $dataDestination['title']
                    );
                }
            }

            // reload cache table
            require_once $SETTINGS['cpassman_dir'] . '/sources/main.functions.php';
            updateCacheTable('reload', $SETTINGS, null);

            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'message' => '',
                ),
                'encode'
            );
            break;

            /*
         * CASE
         * MASSIVE Delete an item
        */
        case 'mass_delete_items':
            // Check KEY and rights
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
    $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            $post_item_ids = filter_var($dataReceived['item_ids'], FILTER_SANITIZE_STRING);

            // perform a check in case of Read-Only user creating an item in his PF
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // loop on items to move
            foreach (explode(';', $post_item_ids) as $item_id) {
                if (empty($item_id) === false) {
                    // get info
                    $dataSource = DB::queryfirstrow(
                        'SELECT label, id_tree
                        FROM ' . prefixTable('items') . '
                        WHERE id=%i',
                        $item_id
                    );

                    // Check that user can access this folder
                    if (
                        in_array($dataSource['id_tree'], $_SESSION['groupes_visibles']) === false
                    ) {
                        echo (string) prepareExchangedData(
    $SETTINGS['cpassman_dir'],
                            array(
                                'error' => true,
                                'message' => langHdl('error_not_allowed_to'),
                            ),
                            'encode'
                        );
                        break;
                    }

                    // delete item consists in disabling it
                    DB::update(
                        prefixTable('items'),
                        array(
                            'inactif' => '1',
                        ),
                        'id = %i',
                        $item_id
                    );

                    // log
                    logItems(
                        $SETTINGS,
                        (int) $item_id,
                        $dataSource['label'],
                        $_SESSION['user_id'],
                        'at_delete',
                        $_SESSION['login']
                    );

                    // Update CACHE table
                    updateCacheTable('delete_value', $SETTINGS, (int) $item_id);
                }
            }

            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'message' => '',
                ),
                'encode'
            );
            break;

            break;

            /*
           * CASE
           * Send email
        */
        case 'send_email':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            if ($_SESSION['user_read_only'] === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('error_not_allowed_to'),
                    ),
                    'encode'
                );
                break;
            }

            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // Prepare variables
            $inputData['id'] = filter_var($dataReceived['id'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['receipt'] = filter_var($dataReceived['receipt'], FILTER_SANITIZE_STRING);
            $inputData['cat'] = filter_var($dataReceived['cat'], FILTER_SANITIZE_STRING);
            $post_content = isset($_POST['name']) === true ? explode(',', filter_input(INPUT_POST, 'content', FILTER_SANITIZE_STRING)) : '';

            // get links url
            if (empty($SETTINGS['email_server_url']) === true) {
                $SETTINGS['email_server_url'] = $SETTINGS['cpassman_url'];
            }
            if ($inputData['cat'] === 'request_access_to_author') {
                // Variables
                $dataAuthor = DB::queryfirstrow('SELECT email,login FROM ' . prefixTable('users') . ' WHERE id = ' . $post_content[1]);
                $dataItem = DB::queryfirstrow('SELECT label, id_tree FROM ' . prefixTable('items') . ' WHERE id = ' . $post_content[0]);

                // Get path
                $path = geItemReadablePath(
                    (int) $dataItem['id_tree'],
                    $dataItem['label'],
                    $SETTINGS
                );

                // Prepare email
                prepareSendingEmail(
                    langHdl('email_request_access_subject'),
                    str_replace(
                        array('#tp_item_author#', '#tp_user#', '#tp_item#'),
                        array(' ' . addslashes($dataAuthor['login']), addslashes($_SESSION['login']), $path),
                        langHdl('email_request_access_mail')
                    ),
                    $dataAuthor['email'],
                    "",
                    $SETTINGS
                );
            } elseif ($inputData['cat'] === 'share_this_item') {
                $dataItem = DB::queryfirstrow(
                    'SELECT label,id_tree
                    FROM ' . prefixTable('items') . '
                    WHERE id= %i',
                    $inputData['id']
                );

                // Get path
                $path = geItemReadablePath(
                    (int) $dataItem['id_tree'],
                    $dataItem['label'],
                    $SETTINGS
                );

                // Prepare email
                prepareSendingEmail(
                    langHdl('email_share_item_subject'),
                    str_replace(
                        array(
                            '#tp_link#',
                            '#tp_user#',
                            '#tp_item#',
                        ),
                        array(
                            empty($SETTINGS['email_server_url']) === false ?
                                $SETTINGS['email_server_url'] . '/index.php?page=items&group=' . $dataItem['id_tree'] . '&id=' . $inputData['id'] : $SETTINGS['cpassman_url'] . '/index.php?page=items&group=' . $dataItem['id_tree'] . '&id=' . $inputData['id'],
                            addslashes($_SESSION['login']),
                            addslashes($path),
                        ),
                        langHdl('email_share_item_mail')
                    ),
                    $inputData['receipt'],
                    "",
                    $SETTINGS
                );
            }

            break;

            /*
           * CASE
           * manage notification of an Item
        */
        case 'notify_a_user':
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[{"error" : "something_wrong"}]';
                break;
            }
            if ($inputData['notifyType'] === 'on_show') {
                // Check if values already exist
                $data = DB::queryfirstrow(
                    'SELECT notification FROM ' . prefixTable('items') . ' WHERE id = %i',
                    $inputData['itemId']
                );
                $notifiedUsers = explode(';', $data['notification']);
                // User is not in actual notification list
                if ($inputData['status'] === 'true' && !in_array($inputData['userId'], $notifiedUsers)) {
                    // User is not in actual notification list and wants to be notified
                    DB::update(
                        prefixTable('items'),
                        array(
                            'notification' => empty($data['notification']) ?
                                $inputData['userId'] . ';'
                                : $data['notification'] . $inputData['userId'] ,
                        ),
                        'id=%i',
                        $inputData['itemId']
                    );
                    echo '[{"error" : "", "new_status":"true"}]';
                    break;
                }
                if ($inputData['status'] === false && in_array($inputData['userId'], $notifiedUsers)) {
                    // TODO : delete user from array and store in DB
                    // User is in actual notification list and doesn't want to be notified
                    DB::update(
                        prefixTable('items'),
                        array(
                            'notification' => empty($data['notification']) ?
                            $inputData['userId']
                                : $data['notification'] . ';' . $inputData['userId'],
                        ),
                        'id=%i',
                        $inputData['itemId']
                    );
                }
            }
            break;

            /*
        * CASE
        * Item History Log - add new entry
        */
        case 'history_entry_add':
            if ($inputData['key'] !== $_SESSION['key']) {
                $data = array('error' => 'key_is_wrong');
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $data,
                    'encode'
                );
                break;
            }

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            // Get all informations for this item
            $dataItem = DB::queryfirstrow(
                'SELECT *
                FROM ' . prefixTable('items') . ' as i
                INNER JOIN ' . prefixTable('log_items') . ' as l ON (l.id_item = i.id)
                WHERE i.id=%i AND l.action = %s',
                $dataReceived['item_id'],
                'at_creation'
            );
            // check that actual user can access this item
            $restrictionActive = true;
            $restrictedTo = is_null($dataItem['restricted_to']) === false ? array_filter(explode(';', $dataItem['restricted_to'])) : [];
            if (in_array($_SESSION['user_id'], $restrictedTo)) {
                $restrictionActive = false;
            }
            if (empty($dataItem['restricted_to'])) {
                $restrictionActive = false;
            }

            if (((in_array($dataItem['id_tree'], $_SESSION['groupes_visibles'])) && ((int) $dataItem['perso'] === 0 || ((int) $dataItem['perso'] === 1 && $dataItem['id_user'] === $_SESSION['user_id'])) && $restrictionActive === false)
                || (isset($SETTINGS['anyone_can_modify']) && (int) $SETTINGS['anyone_can_modify'] === 1 && (int) $dataItem['anyone_can_modify'] === 1 && (in_array($dataItem['id_tree'], $_SESSION['groupes_visibles']) || (int) $_SESSION['is_admin'] === 1) && $restrictionActive === false)
                || (is_array($_SESSION['list_folders_limited'][$inputData['folderId']]) === true && in_array($inputData['id'], $_SESSION['list_folders_limited'][$inputData['folderId']]) === true)
            ) {
                // Query
                logItems(
                    $SETTINGS,
                    (int) $dataReceived['item_id'],
                    $dataItem['label'],
                    $_SESSION['user_id'],
                    'at_manual',
                    $_SESSION['login'],
                    htmlspecialchars_decode($dataReceived['label'], ENT_QUOTES)
                );
                // Prepare new line
                $data = DB::queryfirstrow(
                    'SELECT * FROM ' . prefixTable('log_items') . ' WHERE id_item = %i ORDER BY date DESC',
                    $dataReceived['item_id']
                );
                $historic = date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], $data['date']) . ' - ' . $_SESSION['login'] . ' - ' . langHdl($data['action']) . ' - ' . $data['raison'];
                // send back
                $data = array(
                    'error' => '',
                    'new_line' => '<br>' . addslashes($historic),
                );
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $data,
                    'encode'
                );
            } else {
                $data = array('error' => 'something_wrong');
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    $data,
                    'encode'
                );
                break;
            }
            break;

            /*
        * CASE
        * Free Item for Edition
        */
        case 'free_item_for_edition':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[ { "error" : "key_not_conform" } ]';
                break;
            }
            // Do
            DB::delete(
                prefixTable('items_edition'),
                'item_id = %i',
                $inputData['id']
            );
            break;

            /*
        * CASE
        * Check if Item has been changed since loaded
        */
        /*
        case 'is_item_changed':
            $data = DB::queryFirstRow(
                'SELECT date FROM ' . prefixTable('log_items') . ' WHERE action = %s AND id_item = %i ORDER BY date DESC',
                'at_modification',
                $inputData['itemId']
            );
            // Check if it's in a personal folder. If yes, then force complexity overhead.
            if ((int) $data['date'] > (int) $inputData['timestamp']) {
                echo '{ "modified" : "1" }';
            } else {
                echo '{ "modified" : "0" }';
            }
            break;
            */

            /*
        * CASE
        * Check if Item has been changed since loaded
        */
        case 'generate_OTV_url':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[ { "error" : "key_not_conform" } ]';
                break;
            }

            // delete all existing old otv codes
            $rows = DB::query('SELECT id FROM ' . prefixTable('otv') . ' WHERE timestamp < ' . (time() - $SETTINGS['otv_expiration_period'] * 86400));
            foreach ($rows as $record) {
                DB::delete(prefixTable('otv'), 'id=%i', $record['id']);
            }

            // generate session
            $otv_code = GenerateCryptKey(32, false, true, true, false, true, $SETTINGS);
            $otv_key = GenerateCryptKey(32, false, true, true, false, true, $SETTINGS);

            // Generate Defuse key
            $otv_user_code_encrypted = defuse_generate_personal_key($otv_key);

            // check if psk is correct.
            $otv_key_encoded = defuse_validate_personal_key(
                $otv_key,
                $otv_user_code_encrypted
            );

            // Decrypt the pwd
            // Should we log a password change?
            $itemQ = DB::queryFirstRow(
                'SELECT s.share_key, i.pw
                FROM ' . prefixTable('items') . ' AS i
                INNER JOIN ' . prefixTable('sharekeys_items') . ' AS s ON (i.id = s.object_id)
                WHERE s.user_id = %i AND s.object_id = %i',
                $_SESSION['user_id'],
                $inputData['id']
            );
            if (DB::count() === 0 || empty($itemQ['pw']) === true) {
                // No share key found
                $pw = '';
            } else {
                $pw = base64_decode(doDataDecryption(
                    $itemQ['pw'],
                    decryptUserObjectKey(
                        $itemQ['share_key'],
                        $_SESSION['user']['private_key']
                    )
                ));
            }

            // Encrypt it with DEFUSE using the generated code as key
            // This is required as the OTV is used by someone without any Teampass account
            $passwd = cryption(
                $pw,
                $otv_key_encoded,
                'encrypt',
                $SETTINGS
            );

            DB::insert(
                prefixTable('otv'),
                array(
                    'id' => null,
                    'item_id' => $inputData['id'],
                    'timestamp' => time(),
                    'originator' => intval($_SESSION['user_id']),
                    'code' => $otv_code,
                    'encrypted' => $passwd['string'],
                )
            );
            $newID = DB::insertId();

            // Prepare URL content
            $otv_session = array(
                'code' => $otv_code,
                'key' => $otv_key_encoded,
                'stamp' => time(),
            );

            if (isset($SETTINGS['otv_expiration_period']) === false) {
                $SETTINGS['otv_expiration_period'] = 7;
            }
            $url = $SETTINGS['cpassman_url'] . '/index.php?otv=true&' . http_build_query($otv_session);
            //$exp_date = date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], time() + (intval($SETTINGS['otv_expiration_period']) * 86400));

            echo json_encode(
                array(
                    'error' => '',
                    'url' => $url,
                    /*'text' => str_replace(
                        array('#URL#', '#DAY#'),
                        array('<span id=\'otv_link\'>'.$url.'</span>&nbsp;<span class=\'fa-stack tip" title=\''.langHdl('copy').'\' style=\'cursor:pointer;\' id=\'button_copy_otv_link\'><span class=\'fa fa-square fa-stack-2x\'></span><span class=\'fa fa-clipboard fa-stack-1x fa-inverse\'></span></span>', $exp_date),
                        langHdl('one_time_view_item_url_box')
                    ),*/
                )
            );
            break;

            /*
        * CASE
        * Free Item for Edition
        */
        case 'image_preview_preparation':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }

            // get file info
            $file_info = DB::queryfirstrow(
                'SELECT f.id AS id, f.file AS file, f.name AS name, f.status AS status,
                f.extension AS extension, f.type AS type,
                s.share_key AS share_key
                FROM ' . prefixTable('files') . ' AS f
                INNER JOIN ' . prefixTable('sharekeys_files') . ' AS s ON (f.id = s.object_id)
                WHERE s.user_id = %i AND s.object_id = %i',
                $_SESSION['user_id'],
                $inputData['id']
            );

            // Check if user has this sharekey
            if (empty($file_info['share_key']) === true) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('no_sharekey_found'),
                    ),
                    'encode'
                );
                break;
            }

            //$fileName = basename($file_info['name'], '.'.$file_info['extension']);

            // prepare image info
            $post_title = basename($file_info['name'], '.' . $file_info['extension']);
            $post_title = isBase64($post_title) === true ?
                base64_decode($post_title) : $post_title;
            $image_code = $file_info['file'];
            //$extension = $file_info['extension'];

            // Get image content
            $fileContent = decryptFile(
                $image_code,
                $SETTINGS['path_to_upload_folder'],
                decryptUserObjectKey($file_info['share_key'], $_SESSION['user']['private_key'])
            );

            // Encrypt data to return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'filename' => $post_title . '.' . $file_info['extension'],
                    'file_type' => $file_info['type'],
                    'file_content' => $fileContent,
                ),
                'encode'
            );
            break;

            /*
        * CASE
        * Free Item for Edition
        */
        /*
        case 'delete_file':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[ { "error" : "key_not_conform" } ]';
                break;
            }

            // get file info
            $result = DB::queryfirstrow(
                'SELECT file FROM ' . prefixTable('files') . ' WHERE id=%i',
                intval(substr(filter_input(INPUT_POST, 'uri', FILTER_SANITIZE_STRING), 1))
            );

            fileDelete($SETTINGS['path_to_upload_folder'] . '/' . $result['file'] . $inputData['fileSuffix'], $SETTINGS);

            break;
            */

            /*
        * CASE
        * Get list of users that have access to the folder
        */
        case 'check_for_title_duplicate':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[ { "error" : "key_not_conform" } ]';
                break;
            }
            $duplicate = 0;

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );
            // Prepare variables
            $label = htmlspecialchars_decode($dataReceived['label']);
            $idFolder = $dataReceived['idFolder'];

            // don't check if Personal Folder
            $data = DB::queryFirstRow('SELECT title FROM ' . prefixTable('nested_tree') . ' WHERE id = %i', $idFolder);
            if ($data['title'] === $_SESSION['user_id']) {
                // send data
                echo '[{"duplicate" : "' . $duplicate . '" , error" : ""}]';
            } else {
                if ($inputData['option'] === 'same_folder') {
                    // case unique folder
                    DB::query(
                        'SELECT label
                        FROM ' . prefixTable('items') . '
                        WHERE id_tree = %i AND label = %s',
                        $idFolder,
                        $label
                    );
                } else {
                    // case complete database

                    //get list of personal folders
                    $arrayPf = array();
                    if (empty($row['id']) === false) {
                        $rows = DB::query(
                            'SELECT id FROM ' . prefixTable('nested_tree') . ' WHERE personal_folder = %i',
                            '1'
                        );
                        foreach ($rows as $record) {
                            if (!in_array($record['id'], $arrayPf)) {
                                array_push($arrayPf, $record['id']);
                            }
                        }
                    }

                    // build WHERE condition
                    $where = new WhereClause('and');
                    $where->add('id_tree = %i', $idFolder);
                    $where->add('label = %s', $label);
                    if (empty($arrayPf) === false) {
                        $where->add('id_tree NOT IN (' . implode(',', $arrayPf) . ')');
                    }

                    DB::query(
                        'SELECT label
                        FROM ' . prefixTable('items') . '
                        WHERE %l',
                        $where
                    );
                }

                // count results
                if (DB::count() > 0) {
                    $duplicate = 1;
                }

                // send data
                echo '[{"duplicate" : "' . $duplicate . '" , "error" : ""}]';
            }
            break;

            /*
        * CASE
        * Get list of users that have access to the folder
        */
        case 'refresh_visible_folders':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            $arr_data = [];
            $arr_folders = [];

            // decrypt and retreive data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // Will we show the root folder?
            if (
                isset($_SESSION['can_create_root_folder']) === true
                && (int) $_SESSION['can_create_root_folder'] === 1
            ) {
                $arr_data['can_create_root_folder'] = 1;
            } else {
                $arr_data['can_create_root_folder'] = 0;
            }

            // do we have a cache to be used?
            if (isset($dataReceived['force_refresh_cache']) === true && $dataReceived['force_refresh_cache'] === false) {
                $goCachedFolders = loadFoldersListByCache('visible_folders', 'folders');
                if ($goCachedFolders['state'] === true) {
                    $arr_data['folders'] = json_decode($goCachedFolders['data'], true);//print_r($arr_data);
                    // send data
                    echo (string) prepareExchangedData(
                        $SETTINGS['cpassman_dir'],
                        [
                            'error' => 'false',
                            'html_json' => $arr_data,
                        ],
                        'encode'
                    );
                    break;
                }
            }

            // Build list of visible folders
            if (
                (int) $_SESSION['user_admin'] === 1
            ) {
                $_SESSION['groupes_visibles'] = $_SESSION['personal_visible_groups'];
            }

            if (isset($_SESSION['list_folders_limited']) && count($_SESSION['list_folders_limited']) > 0) {
                $listFoldersLimitedKeys = is_array($_SESSION['list_folders_limited']) === true ? array_keys($_SESSION['list_folders_limited']) : [];
            } else {
                $listFoldersLimitedKeys = array();
            }
            // list of items accessible but not in an allowed folder
            if (
                isset($_SESSION['list_restricted_folders_for_items'])
                && count($_SESSION['list_restricted_folders_for_items']) > 0
            ) {
                $listRestrictedFoldersForItemsKeys = is_array($_SESSION['list_restricted_folders_for_items']) === true ? array_keys($_SESSION['list_restricted_folders_for_items']) : [];
            } else {
                $listRestrictedFoldersForItemsKeys = array();
            }

            //Build tree
            require_once $SETTINGS['cpassman_dir'] . '/includes/libraries/Tree/NestedTree/NestedTree.php';
            $tree = new Tree\NestedTree\NestedTree(prefixTable('nested_tree'), 'id', 'parent_id', 'title');
            $tree->rebuild();
            $folders = $tree->getDescendants();
            $inc = 0;

            foreach ($folders as $folder) {
                // Be sure that user can only see folders he/she is allowed to
                if (
                    in_array($folder->id, $_SESSION['forbiden_pfs']) === false
                    || in_array($folder->id, $_SESSION['groupes_visibles']) === true
                    || in_array($folder->id, $listFoldersLimitedKeys) === true
                    || in_array($folder->id, $listRestrictedFoldersForItemsKeys) === true
                ) {
                    // Init
                    $displayThisNode = false;

                    // Check if any allowed folder is part of the descendants of this node
                    $nodeDescendants = $tree->getDescendants($folder->id, true, false, true);
                    foreach ($nodeDescendants as $node) {
                        // manage tree counters
                        if (
                            in_array($node, array_merge($_SESSION['groupes_visibles'], $_SESSION['list_restricted_folders_for_items'])) === true
                            || (is_array($listFoldersLimitedKeys) === true && in_array($node, $listFoldersLimitedKeys) === true)
                            || (is_array($listRestrictedFoldersForItemsKeys) === true && in_array($node, $listRestrictedFoldersForItemsKeys) === true)
                        ) {
                            $displayThisNode = true;
                            //break;
                        }
                    }

                    if ($displayThisNode === true) {
                        // ALL FOLDERS
                        // Is this folder disabled?
                        $disabled = 0;
                        if (
                            in_array($folder->id, $_SESSION['groupes_visibles']) === false
                            || in_array($folder->id, $_SESSION['read_only_folders']) === true
                            //|| ((int) $_SESSION['user_read_only'] === 1 && in_array($folder->id, $_SESSION['personal_visible_groups']) === false)
                        ) {
                            $disabled = 1;
                        }

                        // Build path
                        $arbo = $tree->getPath($folder->id, false);
                        $arr_data['folders'][$inc]['path'] = '';
                        foreach ($arbo as $elem) {
                            if (empty($arr_data['folders'][$inc]['path']) === true) {
                                $arr_data['folders'][$inc]['path'] = htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES);
                            } else {
                                $arr_data['folders'][$inc]['path'] .= ' / ' . htmlspecialchars(stripslashes(htmlspecialchars_decode($elem->title, ENT_QUOTES)), ENT_QUOTES);
                            }
                        }

                        // Build array
                        $arr_data['folders'][$inc]['id'] = (int) $folder->id;
                        $arr_data['folders'][$inc]['level'] = (int) $folder->nlevel;
                        $arr_data['folders'][$inc]['title'] = ((int) $folder->title === (int) $_SESSION['user_id'] && (int) $folder->nlevel === 1) ? htmlspecialchars_decode($_SESSION['login']) : htmlspecialchars_decode($folder->title, ENT_QUOTES);
                        $arr_data['folders'][$inc]['disabled'] = $disabled;
                        $arr_data['folders'][$inc]['parent_id'] = (int) $folder->parent_id;
                        $arr_data['folders'][$inc]['perso'] = (int) $folder->personal_folder;
                        //array_push($arr_folders, (int) $folder->id);

                        // Is this folder an active folders? (where user can do something)
                        $is_visible_active = 0;
                        if (
                            isset($_SESSION['read_only_folders']) === true
                            && in_array($folder->id, $_SESSION['read_only_folders']) === true
                        ) {
                            $is_visible_active = 1;
                        }
                        $arr_data['folders'][$inc]['is_visible_active'] = $is_visible_active;

                        ++$inc;
                    }
                }
            }
            /*
            if (isset($arr_data['folders']) === true) {
                // save to cache_tree
                cacheTreeUserHandler(
                    (int) $_SESSION['user_id'],
                    json_encode($arr_data['folders']),
                    $SETTINGS,
                    'visible_folders',
                );

                // save to cache_tree
                cacheTreeUserHandler(
                    (int) $_SESSION['user_id'],
                    json_encode($arr_folders),
                    $SETTINGS,
                    'folders',
                );
            }
            */

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                [
                    'error' => 'false',
                    'html_json' => $arr_data,
                ],
                'encode'
            );

            break;

            /*
        * CASE
        * Get list of users that have access to the folder
        */
        case 'refresh_folders_other_info':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => true,
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }

            $ret = [];
            $foldersArray = json_decode($inputData['data'], true);
            if (is_array($foldersArray) === true && $inputData['data'] !== '[null]') {
                $rows = DB::query(
                    'SELECT id, categories
                    FROM ' . prefixTable('nested_tree') . '
                    WHERE id IN (%l)',
                    implode(',', $foldersArray)
                );
                foreach ($rows as $record) {
                    if (empty($record['categories']) === false) {
                        array_push(
                            $ret,
                            array($record['id'] => json_decode($record['categories'], true))
                        );
                    }
                }
            }

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                [
                    'error' => '',
                    'result' => $ret,
                ],
                'encode'
            );

            break;

            /*
        * CASE
        * Load item history
        */
        case 'load_item_history':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array('error' => 'ERR_KEY_NOT_CORRECT'),
                    'encode'
                );
                break;
            }
            
            // get item info
            $dataItem = DB::queryFirstRow(
                'SELECT *
                FROM ' . prefixTable('items') . '
                WHERE id=%i',
                $inputData['itemId']
            );

            // get item history
            $history = [];
            $rows = DB::query(
                'SELECT l.date as date, l.action as action, l.raison as raison,
                u.login as login, u.avatar_thumb as avatar_thumb, u.name as name, u.lastname as lastname
                FROM ' . prefixTable('log_items') . ' as l
                LEFT JOIN ' . prefixTable('users') . ' as u ON (l.id_user=u.id)
                WHERE id_item=%i AND l.action NOT IN (%l)
                ORDER BY date DESC',
                $inputData['itemId'],
                '"at_shown","at_password_copied", "at_shown", "at_password_shown"'
            );
            foreach ($rows as $record) {
                if (empty($record['raison']) === true) {
                    $reason[0] = '';
                } else {
                    $reason = array_map('trim', explode(':', $record['raison']));
                }
                
                // imported via API
                if (empty($record['login']) === true) {
                    $record['login'] = langHdl('imported_via_api') . ' [' . $record['raison'] . ']';
                }
                
                // Prepare avatar
                if (isset($record['avatar_thumb']) && empty($record['avatar_thumb']) === false) {
                    if (file_exists($SETTINGS['cpassman_dir'] . '/includes/avatars/' . $record['avatar_thumb'])) {
                        $avatar = $SETTINGS['cpassman_url'] . '/includes/avatars/' . $record['avatar_thumb'];
                    } else {
                        $avatar = $SETTINGS['cpassman_url'] . '/includes/images/photo.jpg';
                    }
                } else {
                    $avatar = $SETTINGS['cpassman_url'] . '/includes/images/photo.jpg';
                }

                // Prepare action
                $action = '';
                $detail = '';
                if ($reason[0] === 'at_pw') {
                    $action = langHdl($reason[0]);
                } elseif ($record['action'] === 'at_manual') {
                    $detail = $reason[0];
                    $action = langHdl($record['action']);
                } elseif ($reason[0] === 'at_description') {
                    $action = langHdl('description_has_changed');
                } elseif (empty($record['raison']) === false && $reason[0] !== 'at_creation') {
                    $action = langHdl($reason[0]);
                    if ($reason[0] === 'at_moved') {
                        $tmp = explode(' -> ', $reason[1]);
                        $detail = langHdl('from') . ' <span class="font-weight-light">' . $tmp[0] . '</span> ' . langHdl('to') . ' <span class="font-weight-light">' . $tmp[1] . ' </span>';
                    } elseif ($reason[0] === 'at_field') {
                        $tmp = explode(' => ', $reason[1]);
                        if (count($tmp) > 1) {
                            $detail = '<b>' . trim($tmp[0]) . '</b> | ' . langHdl('previous_value') .
                                ': <span class="font-weight-light">' . trim($tmp[1]) . '</span>';
                        } else {
                            $detail = trim($reason[1]);
                        }
                    } elseif (in_array($reason[0], array('at_restriction', 'at_email', 'at_login', 'at_label', 'at_url', 'at_tag')) === true) {
                        $tmp = explode(' => ', $reason[1]);
                        $detail = empty(trim($tmp[0])) === true ?
                            langHdl('no_previous_value') : langHdl('previous_value') . ': <span class="font-weight-light">' . $tmp[0] . ' </span>';
                    } elseif ($reason[0] === 'at_automatic_del') {
                        $detail = langHdl($reason[1]);
                    } elseif ($reason[0] === 'at_anyoneconmodify') {
                        $detail = langHdl($reason[1]);
                    } elseif ($reason[0] === 'at_add_file' || $reason[0] === 'at_del_file') {
                        $tmp = explode(':', $reason[1]);
                        $tmp = explode('.', $tmp[0]);
                        $detail = isBase64($tmp[0]) === true ?
                            base64_decode($tmp[0]) . '.' . $tmp[1] : $tmp[0];
                    } elseif ($reason[0] === 'at_import') {
                        $detail = '';
                    } elseif (in_array($reason[0], array('csv', 'pdf')) === true) {
                        $detail = $reason[0];
                        $action = langHdl('exported_to_file');
                    } else {
                        $detail = $reason[0];
                    }
                } else {
                    $detail = langHdl($record['action']);
                    $action = '';
                }

                array_push(
                    $history,
                    array(
                        'avatar' => $avatar,
                        'login' => $record['login'],
                        'name' => $record['name'] . ' ' . $record['lastname'],
                        'date' => date($SETTINGS['date_format'] . ' ' . $SETTINGS['time_format'], (int) $record['date']),
                        'action' => $action,
                        'detail' => $detail,
                    )
                );
            }

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                [
                    'error' => '',
                    'history' => $history,
                ],
                'encode'
            );

            break;

        case 'suggest_item_change':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $data_received = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            $label = htmlspecialchars_decode($data_received['label'], ENT_QUOTES);
            $pwd = htmlspecialchars_decode($data_received['password']);
            $login = htmlspecialchars_decode($data_received['login'], ENT_QUOTES);
            $email = htmlspecialchars_decode($data_received['email']);
            $url = htmlspecialchars_decode($data_received['url']);
            $folder = htmlspecialchars_decode($data_received['folder_id']);
            $comment = htmlspecialchars_decode($data_received['comment']);
            $item_id = htmlspecialchars_decode($data_received['item_id']);

            if (empty($pwd)) {
                $cryptedStuff['encrypted'] = '';
                $cryptedStuff['objectKey'] = '';
            } else {
                $cryptedStuff = doDataEncryption($pwd);
            }

            // query
            DB::insert(
                prefixTable('items_change'),
                array(
                    'item_id' => $item_id,
                    'label' => $label,
                    'pw' => $encrypt['string'],
                    'login' => $login,
                    'email' => $email,
                    'url' => $url,
                    'description' => '',
                    'comment' => $comment,
                    'folder_id' => $folder,
                    'user_id' => (int) $_SESSION['user_id'],
                    'timestamp' => time(),
                )
            );
            $newID = DB::insertId();

            // Create sharekeys for users
            storeUsersShareKey(
                prefixTable('sharekeys_items'),
                0,
                (int) $folder,
                (int) $newID,
                $cryptedStuff['objectKey'],
                $SETTINGS
            );

            // get some info to add to the notification email
            $resp_user = DB::queryfirstrow(
                'SELECT login FROM ' . prefixTable('users') . ' WHERE id = %i',
                $_SESSION['user_id']
            );
            $resp_folder = DB::queryfirstrow(
                'SELECT title FROM ' . prefixTable('nested_tree') . ' WHERE id = %i',
                $folder
            );

            // notify Managers
            $rows = DB::query(
                'SELECT email
                FROM ' . prefixTable('users') . '
                WHERE `gestionnaire` = %i AND `email` IS NOT NULL',
                1
            );
            foreach ($rows as $record) {
                sendEmail(
                    langHdl('suggestion_notify_subject'),
                    str_replace(array('#tp_label#', '#tp_user#', '#tp_folder#'), array(addslashes($label), addslashes($resp_user['login']), addslashes($resp_folder['title'])), langHdl('suggestion_notify_body')),
                    $record['email'],
                    $SETTINGS
                );
            }

            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => '',
                ),
                'encode'
            );
            break;

        case 'build_list_of_users':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo '[ { "error" : "key_not_conform" } ]';
                break;
            }

            // Get list of users
            $usersList = array();
            $usersString = '';
            $rows = DB::query('SELECT id,login,email FROM ' . prefixTable('users') . ' ORDER BY login ASC');
            foreach ($rows as $record) {
                $usersList[$record['login']] = array(
                    'id' => $record['id'],
                    'login' => $record['login'],
                    'email' => $record['email'],
                );
                $usersString .= $record['id'] . '#' . $record['login'] . ';';
            }

            $data = array(
                'error' => '',
                'list' => $usersString,
            );

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $data,
                'encode'
            );
            break;

        case 'send_request_access':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            //$post_email_body = filter_var($dataReceived['email'], FILTER_SANITIZE_STRING);
            $inputData['itemId'] = (int) filter_var($dataReceived['id'], FILTER_SANITIZE_NUMBER_INT);

            // Send email
            $dataItem = DB::queryfirstrow(
                'SELECT label, id_tree
                FROM ' . prefixTable('items') . '
                WHERE id = %i',
                $inputData['itemId']
            );
            /*
            $dataItemLog = DB::queryfirstrow(
                'SELECT id_user
                FROM ' . prefixTable('log_items') . '
                WHERE id_item = %i AND action = %s',
                $inputData['itemId'],
                'at_creation'
            );
            $dataAuthor = DB::queryfirstrow(
                'SELECT email, login
                FROM ' . prefixTable('users') . '
                WHERE id = %i',
                $dataItemLog['id_user']
            );

            // Get path
            $path = geItemReadablePath(
                $dataItem['id_tree'],
                $dataItem['label'],
                $SETTINGS
            );
            */

            /*$ret = sendEmail(
                langHdl('email_request_access_subject'),
                str_replace(
                    array(
                        '#tp_item_author#',
                        '#tp_user#',
                        '#tp_item#',
                        '#tp_reason#',
                    ),
                    array(
                        ' '.addslashes($dataAuthor['login']),
                        addslashes($_SESSION['login']),
                        $path,
                        nl2br(addslashes($post_email_body)),
                    ),
                    langHdl('email_request_access_mail')
                ),
                $dataAuthor['email'],
                $SETTINGS
            );*/

            // Do log
            logItems(
                $SETTINGS,
                (int) $inputData['itemId'],
                $dataItem['label'],
                $_SESSION['user_id'],
                'at_access',
                $_SESSION['login']
            );

            // Return
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                array(
                    'error' => false,
                    'message' => '',
                ),
                'encode'
            );

            break;

            /*
        * CASE
        * save_notification_status
        */
        case 'save_notification_status':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            $post_notification_status = (int) filter_var($dataReceived['notification_status'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            DB::query(
                'SELECT *
                FROM ' . prefixTable('notification') . '
                WHERE item_id = %i AND user_id = %i',
                $inputData['itemId'],
                $_SESSION['user_id']
            );
            if (DB::count() > 0) {
                // Notification is set for this user on this item
                if ((int) $post_notification_status === 0) {
                    // Remove the notification
                    DB::delete(
                        prefixTable('notification'),
                        'item_id = %i AND user_id = %i',
                        $inputData['itemId'],
                        $_SESSION['user_id']
                    );
                }
            } else {
                // Notification is not set on this item
                if ((int) $post_notification_status === 1) {
                    // Add the notification
                    DB::insert(
                        prefixTable('notification'),
                        array(
                            'item_id' => $inputData['itemId'],
                            'user_id' => (int) $_SESSION['user_id'],
                        )
                    );
                }
            }

            $data = array(
                'error' => false,
                'message' => '',
            );

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $data,
                'encode'
            );

            break;

            /*
        * CASE
        * delete_uploaded_files_but_not_saved
        */
        case 'delete_uploaded_files_but_not_saved':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            // Delete non confirmed files for this item
            // And related logs
            $rows = DB::query(
                'SELECT id, file AS filename
                FROM ' . prefixTable('files') . '
                WHERE id_item = %i AND confirmed = %i',
                $inputData['itemId'],
                0
            );
            foreach ($rows as $file) {
                // Delete file in DB
                DB::delete(
                    prefixTable('files'),
                    'id = %i',
                    $file['id']
                );

                // Delete file on server
                unlink($SETTINGS['path_to_upload_folder'] . '/' . TP_FILE_PREFIX . base64_decode($file['filename']));

                // Delete related logs
                $logFile = DB::query(
                    'SELECT increment_id, raison
                    FROM ' . prefixTable('log_items') . '
                    WHERE id_item = %i AND id_user = %i AND action = %s AND raison LIKE "at_add_file :%"',
                    $inputData['itemId'],
                    $_SESSION['user_id'],
                    'at_modification'
                );
                foreach ($logFile as $log) {
                    $tmp = explode(':', $log['raison']);
                    if (count($tmp) === 3 && (int) $tmp[2] === (int) $file['id']) {
                        DB::delete(
                            prefixTable('log_items'),
                            'increment_id = %i',
                            $log['increment_id']
                        );
                    }
                }
            }

            $data = array(
                'error' => false,
                'message' => '',
            );

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $data,
                'encode'
            );

            break;

            /*
        * CASE
        * confirm_attachments
        */
        case 'confirm_attachments':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            $inputData['itemId'] = (int) filter_var($dataReceived['item_id'], FILTER_SANITIZE_NUMBER_INT);

            // Confirm attachments
            $rows = DB::query(
                'SELECT id, file AS filename
                FROM ' . prefixTable('files') . '
                WHERE id_item = %i AND confirmed = %i',
                $inputData['itemId'],
                0
            );
            foreach ($rows as $file) {
                DB::update(
                    prefixTable('files'),
                    array(
                        'confirmed' => 1,
                    ),
                    'id_item = %i',
                    $inputData['itemId']
                );
            }

            $data = array(
                'error' => false,
                'message' => '',
            );

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $data,
                'encode'
            );

            break;

        /*
        * CASE
        * check_current_access_rights
        */
        case 'check_current_access_rights':
            // Check KEY
            if ($inputData['key'] !== $_SESSION['key']) {
                echo (string) prepareExchangedData(
                    $SETTINGS['cpassman_dir'],
                    array(
                        'error' => 'key_not_conform',
                        'message' => langHdl('key_is_not_correct'),
                    ),
                    'encode'
                );
                break;
            }
            // decrypt and retrieve data in JSON format
            $dataReceived = prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $inputData['data'],
                'decode'
            );

            // prepare variables
            $inputData['userId'] = (int) filter_var($dataReceived['userId'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['itemId'] = (int) filter_var($dataReceived['itemId'], FILTER_SANITIZE_NUMBER_INT);
            $inputData['treeId'] = (int) filter_var($dataReceived['treeId'], FILTER_SANITIZE_NUMBER_INT);

            $data = DB::queryFirstRow(
                'SELECT visible_folders
                FROM ' . prefixTable('cache_tree') . ' WHERE user_id = %i',
                $inputData['userId']
            );
            // Check if tree ID is in visible folders.
            if (null !== $data['visible_folders']) {
                $arr = json_decode($data['visible_folders'], true);
                $ids = is_null($arr) === true ? [] : array_column($arr, 'id');
            }


            $data = array(
                'error' => false,
                'access' => isset($inputData['treeId']) === true && in_array($inputData['treeId'], $ids) === true ? true : false,
            );

            // send data
            echo (string) prepareExchangedData(
                $SETTINGS['cpassman_dir'],
                $data,
                'encode'
            );

            break;
    }
}
// Build the QUERY in case of GET
if (isset($inputData['getType'])) {
    switch ($inputData['getType']) {
        /*
        * CASE
        * Autocomplet for TAGS
        */
        case 'autocomplete_tags':
            // Get a list off all existing TAGS
            $listOfTags = '';
            $rows = DB::query('SELECT tag FROM ' . prefixTable('tags') . ' WHERE tag LIKE %ss GROUP BY tag', $inputData['getTerm']);
            foreach ($rows as $record) {
                if (empty($listOfTags)) {
                    $listOfTags = '"' . $record['tag'] . '"';
                } else {
                    $listOfTags .= ', "' . $record['tag'] . '"';
                }
            }
            echo '[' . $listOfTags . ']';
            break;
    }
}

/**
 * Identify if this group authorize creation of item without the complexit level reached
 *
 * @param int $groupe ID for group
 *
 * @return array list of roles
*/
function recupDroitCreationSansComplexite($groupe)
{
    $data = DB::queryFirstRow(
        'SELECT bloquer_creation, bloquer_modification, personal_folder
        FROM ' . prefixTable('nested_tree') . ' WHERE id = %i',
        $groupe
    );
    // Check if it's in a personal folder. If yes, then force complexity overhead.
    if ($data !== null && (int) $data['personal_folder'] === 1) {
        return array(
            'bloquer_modification_complexite' => 1,
            'bloquer_creation_complexite' => 1,
        );
    }

    return array(
        'bloquer_modification_complexite' => $data !== null ? (int) $data['bloquer_modification'] : 0,
        'bloquer_creation_complexite' => $data !== null ? (int) $data['bloquer_creation'] : 0,
    );
}

/**
 * Permits to identify what icon to display depending on file extension.
 *
 * @param string $ext extension
 *
 * @return string
 */
function fileFormatImage($ext)
{
    if (in_array($ext, TP_OFFICE_FILE_EXT)) {
        $image = 'fas fa-file-word';
    } elseif ($ext === 'pdf') {
        $image = 'fas fa-file-pdf';
    } elseif (in_array($ext, TP_IMAGE_FILE_EXT)) {
        $image = 'fas fa-file-image';
    } elseif ($ext === 'txt') {
        $image = 'fas fa-file-alt';
    } else {
        $image = 'fas fa-file';
    }

    return $image;
}

/**
 * Returns a cleaned up password.
 *
 * @param string $pwd String for pwd
 *
 * @return string
 */
function passwordReplacement($pwd)
{
    $pwPatterns = array('/ETCOMMERCIAL/', '/SIGNEPLUS/');
    $pwRemplacements = array('&', '+');

    return preg_replace($pwPatterns, $pwRemplacements, $pwd);
}
