<?php

/**
 * @package Dotclear
 * @subpackage Core
 *
 * @copyright Olivier Meunier & Association Dotclear
 * @copyright AGPL-3.0
 */
declare(strict_types=1);

namespace Dotclear\Core;

use ArrayObject;
use dcCore;
use Dotclear\App;
use Dotclear\Database\Cursor;
use Dotclear\Database\MetaRecord;
use Dotclear\Database\Record;
use Dotclear\Database\Statement\DeleteStatement;
use Dotclear\Database\Statement\JoinStatement;
use Dotclear\Database\Statement\SelectStatement;
use Dotclear\Database\Statement\UpdateStatement;
use Dotclear\Helper\Date;
use Dotclear\Helper\File\Path;
use Dotclear\Helper\Html\Html;
use Dotclear\Helper\Html\WikiToHtml;
use Dotclear\Helper\Network\Http;
use Dotclear\Helper\Text;
use Dotclear\Helper\TraitDynamicProperties;
use Dotclear\Exception\ConflictException;
use Dotclear\Exception\BadRequestException;
use Dotclear\Exception\UnauthorizedException;
use Dotclear\Interface\Core\BlogInterface;
use Dotclear\Interface\Core\BlogSettingsInterface;
use Dotclear\Interface\Core\CategoriesInterface;
use Dotclear\Schema\Extension\Comment;
use Dotclear\Schema\Extension\Dates;
use Dotclear\Schema\Extension\Post;
use stdClass;
use Throwable;

/**
 * @brief   Blog handler.
 *
 * @since   2.28, public properties become deprecated and will be protected soon
 * @since   2.28, blog could be (un)load in same instance
 * @since   2.28, container services have been added to constructor
 * @since   2.36, constructor arguments has been replaced by Core instance
 */
class Blog implements BlogInterface
{
    // deprecated since 2.28,
    use TraitDynamicProperties;

    /**
     * Database table prefix.
     *
     * @deprecated  since 2.28, use App::db()->con()->prefix() instead
     */
    public readonly string $prefix;

    /**
     * Blog ID.
     *
     * @deprecated  since 2.28, use App::blog()->id() instead
     */
    public string $id;

    /**
     * Blog unique ID.
     *
     * @deprecated  since 2.28, use App::blog()->uid() instead
     */
    public string $uid;

    /**
     * Blog name.
     *
     * @deprecated  since 2.28, use App::blog()->name() instead
     */
    public string $name;

    /**
     * Blog description.
     *
     * @deprecated  since 2.28, use App::blog()->desc() instead
     */
    public string $desc;

    /**
     * Blog URL.
     *
     * @deprecated  since 2.28, use App::blog()->url() instead
     */
    public string $url;

    /**
     * Blog host.
     *
     * @deprecated  since 2.28, use App::blog()->host() instead
     */
    public string $host;

    /**
     * Blog creation date.
     *
     * @deprecated  since 2.28, use App::blog()->creadt() instead
     */
    public int $creadt;

    /**
     * Blog last update date.
     *
     * @deprecated  since 2.28, use App::blog()->upddt() instead
     */
    public int $upddt;

    /**
     * Blog status.
     *
     * @deprecated  since 2.28, use App::blog()->status() instead
     */
    public int $status;

    /**
     * Blog theme path.
     *
     * @deprecated  since 2.28, use App::blog()->themesPath() instead
     */
    public string $themes_path;

    /**
     * Blog public path.
     *
     * @deprecated since 2.28, use App::blog()->publicPath() instead
     */
    public string $public_path;

    /**
     * Disallow entries password protection.
     *
     * @deprecated since 2.28, use App::blog()->withoutPassword() instead
     */
    public bool $without_password = true;

    /**
     * Blog settings
     *
     * @deprecated  since 2.28, use App::blog()->settings() instead
     */
    public BlogSettingsInterface $settings;

    /**
     * Blog categories.
     */
    protected CategoriesInterface $categories;

    /**
     * Constructs a new instance.
     *
     * @param   Core    $core       The core container
     * @param   string  $blog_id    The blog identifier
     */
    public function __construct(
        protected Core $core,
        string $blog_id = ''
    ) {
        $this->settings   = $this->core->blogSettings();
        $this->categories = $this->core->categories();
        $this->prefix     = $this->core->db()->con()->prefix();

        $this->loadFromBlog($blog_id);
    }

    public function loadFromBlog(string $blog_id): BlogInterface
    {
        // deprecated public readonly properties
        $id          = $blog_id;
        $uid         = '';
        $name        = '';
        $desc        = '';
        $url         = '';
        $host        = '';
        $creadt      = 0;
        $upddt       = 0;
        $status      = $this->core->status()->blog()::UNDEFINED;
        $themes_path = '';
        $public_path = '';

        if ($id !== '') {
            $blog = $this->core->blogs()->getBlog($id);
            if ($blog->count() > 0) {
                $uid    = $blog->strField('blog_uid');
                $name   = $blog->strField('blog_name');
                $desc   = $blog->strField('blog_desc');
                $url    = $blog->strField('blog_url');
                $host   = Http::getHostFromURL($url);
                $creadt = (int) strtotime($blog->strField('blog_creadt'));
                $upddt  = (int) strtotime($blog->strField('blog_upddt'));
                $status = $blog->intField('blog_status');

                $this->settings   = $this->settings()->createFromBlog($id);
                $this->categories = $this->categories()->createFromBlog($id);

                $themes_path = App::blog()->settings()->get('system')->getStr('themes_path', false);
                $themes_path = Path::fullFromRoot($themes_path, $this->core->config()->dotclearRoot());

                $public_path = App::blog()->settings()->get('system')->getStr('public_path', false);
                $public_path = Path::fullFromRoot($public_path, $this->core->config()->dotclearRoot());
            }
        }

        // Initialize deprecated public readonly properties
        $this->id          = $id;
        $this->uid         = $uid;
        $this->name        = $name;
        $this->desc        = $desc;
        $this->url         = $url;
        $this->host        = $host;
        $this->creadt      = $creadt;
        $this->upddt       = $upddt;
        $this->status      = $status;
        $this->themes_path = $themes_path;
        $this->public_path = $public_path;

        $this->core->filter()->loadFromBlog($this);
        $this->core->postMedia()->loadFromBlog($this);

        if ($id !== '') {
            # --BEHAVIOR-- coreBlogConstruct -- BlogInterface -- deprecated since 2.28, as plugins are not yet loaded here
            $this->core->behavior()->callBehavior('coreBlogConstruct', $this);
        }

        if (!App::config()->modern()) {
            dcCore::app()->blog = $uid === '' ? null : $this;
        }

        return $this;
    }

    /// @name Class public methods
    ///@{

    public function openBlogCursor(): Cursor
    {
        return $this->core->db()->con()->openCursor($this->prefix . self::BLOG_TABLE_NAME);
    }

    public function openPostCursor(): Cursor
    {
        return $this->core->db()->con()->openCursor($this->prefix . self::POST_TABLE_NAME);
    }

    public function openCommentCursor(): Cursor
    {
        return $this->core->db()->con()->openCursor($this->prefix . self::COMMENT_TABLE_NAME);
    }

    public function isDefined(): bool
    {
        return $this->status !== $this->core->status()->blog()::UNDEFINED;
    }

    ///@}

    /// @name Properties public methods
    ///@{

    public function id(): string
    {
        return $this->id;
    }

    public function uid(): string
    {
        return $this->uid;
    }

    public function name(): string
    {
        return $this->name;
    }

    public function desc(): string
    {
        return $this->desc;
    }

    public function url(): string
    {
        return $this->url;
    }

    public function host(): string
    {
        return $this->host;
    }

    public function creadt(): int
    {
        return $this->creadt;
    }

    public function upddt(): int
    {
        return $this->upddt;
    }

    public function status(): int
    {
        return $this->status;
    }

    public function settings(): BlogSettingsInterface
    {
        return $this->settings;
    }

    public function themesPath(): string
    {
        return $this->themes_path;
    }

    public function publicPath(): string
    {
        return $this->public_path;
    }

    ///@}

    /// @name Common public methods
    ///@{

    public function getQmarkURL(): string
    {
        return str_ends_with($this->url, '?') ? $this->url : $this->url . '?';
    }

    public function getJsJQuery(): string
    {
        $version = $this->settings()->get('system')->getStr('jquery_version', false);
        if ($version === '') {
            // Version not set, use default one
            $version = $this->core->config()->defaultJQuery(); // defined in src/App.php
        } elseif (!$this->settings()->get('system')->getBool('jquery_allow_old_version')
            && version_compare($version, $this->core->config()->defaultJQuery(), '<')
        ) {
            // Use the blog defined version only if more recent than default
            $version = $this->core->config()->defaultJQuery(); // defined in src/App.php
        }

        return 'jquery/' . $version;
    }

    public function getPF(string $pf, bool $strip_host = true): string
    {
        $ret = $this->getQmarkURL() . 'pf=' . $pf;
        if ($strip_host) {
            return Html::stripHostURL($ret);
        }

        return $ret;
    }

    public function getTF(string $tf, bool $strip_host = true): string
    {
        $ret = $this->getQmarkURL() . 'tf=' . $tf;
        if ($strip_host) {
            return Html::stripHostURL($ret);
        }

        return $ret;
    }

    public function getVF(string $vf, bool $strip_host = true): string
    {
        $ret = $this->getQmarkURL() . 'vf=' . $vf;
        if ($strip_host) {
            return Html::stripHostURL($ret);
        }

        return $ret;
    }

    public function getPostStatus(int $status): string
    {
        $this->core->deprecated()->set('$this->core->status()->post()->name($status)', '2.33');

        return $this->core->status()->post()->name($status); // default to unpublished
    }

    public function getAllPostStatus(): array
    {
        $this->core->deprecated()->set('$this->core->status()->post()->statuses()', '2.33');

        return $this->core->status()->post()->statuses();
    }

    public function getAllCommentStatus(): array
    {
        $this->core->deprecated()->set('$this->core->status()->comment()->statuses()', '2.33');

        return $this->core->status()->comment()->statuses();
    }

    public function withoutPassword(?bool $value = null): bool
    {
        return is_bool($value) ? $this->without_password = $value : $this->without_password;
    }

    ///@}

    /// @name Triggers methods
    ///@{

    public function triggerBlog(): void
    {
        $cur = $this->openBlogCursor();

        $cur->setStrField('blog_upddt', date('Y-m-d H:i:s'));

        $sql = new UpdateStatement();
        $sql->where('blog_id = ' . $sql->quote($this->id));

        $sql->update($cur);

        # --BEHAVIOR-- coreBlogAfterTriggerBlog -- Cursor
        $this->core->behavior()->callBehavior('coreBlogAfterTriggerBlog', $cur);
    }

    public function triggerComment(int $id, bool $del = false): void
    {
        $this->triggerComments($id, $del);
    }

    public function triggerComments($ids, bool $del = false, array $affected_posts = []): void
    {
        $comments_ids = $this->cleanIds($ids);

        // Get posts affected by comments edition
        if ($affected_posts === []) {
            $sql = new SelectStatement();
            $sql
                ->column('post_id')
                ->from($this->prefix . self::COMMENT_TABLE_NAME)
                ->where('comment_id' . $sql->in($comments_ids))
                ->group('post_id');

            $affected_posts = [];
            $rs             = $sql->select();
            if ($rs instanceof MetaRecord) {
                while ($rs->fetch()) {
                    $affected_posts[] = $rs->intField('post_id');
                }
            }
        }

        if ($affected_posts === []) {
            return;
        }

        // Count number of comments if exists for affected posts
        $sql = new SelectStatement();
        $sql
            ->columns([
                'post_id',
                $sql->count('post_id', 'nb_comment'),
                'comment_trackback',
            ])
            ->from($this->prefix . self::COMMENT_TABLE_NAME)
            ->where('comment_status > ' . $this->core->status()->comment()->threshold())
            ->and('post_id' . $sql->in($affected_posts))
            ->group([
                'post_id',
                'comment_trackback',
            ]);

        $posts = [];
        $rs    = $sql->select();
        if ($rs instanceof MetaRecord) {
            while ($rs->fetch()) {
                $post_id = $rs->intField('post_id');
                if ($rs->boolField('comment_trackback')) {
                    $posts[$post_id]['trackback'] = $rs->intField('nb_comment');
                } else {
                    $posts[$post_id]['comment'] = $rs->intField('nb_comment');
                }
            }
        }

        // Update number of comments on affected posts
        $cur = $this->openPostCursor();
        foreach ($affected_posts as $post_id) {
            $cur->clean();

            if (!array_key_exists($post_id, $posts)) {
                $cur->setIntField('nb_trackback', 0);
                $cur->setIntField('nb_comment', 0);
            } else {
                $cur->setIntField('nb_trackback', empty($posts[$post_id]['trackback']) ? 0 : $posts[$post_id]['trackback']);
                $cur->setIntField('nb_comment', empty($posts[$post_id]['comment']) ? 0 : $posts[$post_id]['comment']);
            }

            $sql = new UpdateStatement();
            $sql->where('post_id = ' . $post_id);

            $sql->update($cur);
        }

        # --BEHAVIOR-- coreBlogAfterTriggerComments -- Array, Array
        $this->core->behavior()->callBehavior('coreBlogAfterTriggerComments', $comments_ids, $affected_posts);
    }

    ///@}

    /// @name Categories management methods
    ///@{

    public function categories(): CategoriesInterface
    {
        return $this->categories;
    }

    public function getCategories($params = []): MetaRecord
    {
        $c_params = [];
        if (isset($params['post_type'])) {
            $c_params['post_type'] = $params['post_type'];
            unset($params['post_type']);
        }

        $counter = $this->getCategoriesCounter($c_params);

        if (isset($params['without_empty'])) {
            $without_empty = (bool) $params['without_empty'];
        } else {
            $without_empty = !$this->core->auth()->userID(); // Get all categories if in admin display
        }

        $start     = isset($params['start'])     && is_numeric($start = $params['start']) ? (int) $start : 0;
        $level     = isset($params['level'])     && is_numeric($level = $params['level']) ? (int) $level : 0;
        $max_level = isset($params['max_level']) && is_numeric($max_level = $params['max_level']) ? (int) $max_level : 0;

        $rs = $this->categories()->getChildren($start, null, 'desc', max_level: $max_level);

        // Get each categories total posts count
        $data          = [];
        $stack         = [];
        $current_level = 0;
        $cols          = $rs->columns();
        while ($rs->fetch()) {
            $cat_id    = $rs->intField('cat_id');
            $cat_level = $rs->intField('level');

            $nb_post = $counter[$cat_id] ?? 0;

            if ($cat_level > $current_level) {
                $nb_total          = $nb_post;
                $stack[$cat_level] = $nb_post;
            } elseif ($cat_level === $current_level) {
                $nb_total = $nb_post;
                $stack[$cat_level] += $nb_post;
            } else {
                $nb_total = $stack[$cat_level + 1] + $nb_post;
                if (isset($stack[$cat_level])) {
                    $stack[$cat_level] += $nb_total;
                } else {
                    $stack[$cat_level] = $nb_total;
                }

                unset($stack[$cat_level + 1]);
            }

            if ($nb_total === 0 && $without_empty) {
                continue;
            }

            $current_level = $cat_level;

            $counters = [];
            foreach ($cols as $c) {
                $counters[$c] = $rs->field($c);
            }

            $counters['nb_post']  = $nb_post;
            $counters['nb_total'] = $nb_total;

            if ($level === 0 || ($level > 0 && $level === $cat_level)) {
                array_unshift($data, $counters);
            }
        }

        // We need to apply filter after counting
        if (isset($params['cat_id']) && $params['cat_id'] !== '') {
            $found = false;
            foreach ($data as $value) {
                if ($value['cat_id'] == $params['cat_id']) {
                    $found = true;
                    $data  = [$value];

                    break;
                }
            }

            if (!$found) {
                $data = [];
            }
        }

        if (isset($params['cat_url']) && ($params['cat_url'] !== '') && !isset($params['cat_id'])) {
            $found = false;
            foreach ($data as $value) {
                if ($value['cat_url'] == $params['cat_url']) {
                    $found = true;
                    $data  = [$value];

                    break;
                }
            }

            if (!$found) {
                $data = [];
            }
        }

        // Convert to int some numeric-string fields
        $count = count($data);
        for ($index = 0; $index < $count; $index++) {
            $data[$index]['cat_id']  = is_numeric($data[$index]['cat_id']) ? (int) $data[$index]['cat_id'] : 0;
            $data[$index]['level']   = is_numeric($data[$index]['level']) ? (int) $data[$index]['level'] : 0;
            $data[$index]['cat_lft'] = is_numeric($data[$index]['cat_lft']) ? (int) $data[$index]['cat_lft'] : 0;
            $data[$index]['cat_rgt'] = is_numeric($data[$index]['cat_rgt']) ? (int) $data[$index]['cat_rgt'] : 0;
        }

        return MetaRecord::newFromArray($data);
    }

    public function getCategory(?int $id): MetaRecord
    {
        return $this->getCategories(['cat_id' => $id]);
    }

    public function getCategoryParents(?int $id): MetaRecord
    {
        return $this->categories()->getParents((int) $id);
    }

    public function getCategoryParent(?int $id): MetaRecord
    {
        return $this->categories()->getParent((int) $id);
    }

    public function getCategoryFirstChildren(int $id): MetaRecord
    {
        return $this->getCategories(['start' => $id, 'level' => $id === 0 ? 1 : 2]);
    }

    public function IsInCatSubtree(string $cat_url, string $start_url): bool
    {
        // Get cat_id from start_url
        $cat = $this->getCategories(['cat_url' => $start_url]);
        if ($cat->fetch()) {
            // cat_id found, get cat tree list
            $cats = $this->getCategories(['start' => $cat->intField('cat_id')]);
            while ($cats->fetch()) {
                // check if post category is one of the cat or sub-cats
                if ($cats->strField('cat_url') === $cat_url) {
                    return true;
                }
            }
        }

        return false;
    }

    /**
     * Gets the categories posts counter.
     *
     * @param      array<string, mixed>|ArrayObject<string, mixed>  $params  The parameters
     *
     * @return     array<int|string, int>  The categories counter.
     */
    private function getCategoriesCounter(array|ArrayObject $params = []): array
    {
        $params = $params instanceof ArrayObject ? $params : new ArrayObject($params);
        $sql    = new SelectStatement();
        $sql
            ->columns([
                'C.cat_id',
                $sql->count('P.post_id', 'nb_post'),
            ])
            ->from($sql->as($this->prefix . $this->categories()::CATEGORY_TABLE_NAME, 'C'))
            ->join(
                (new JoinStatement())
                    ->from($sql->as($this->prefix . self::POST_TABLE_NAME, 'P'))
                    ->on('C.cat_id = P.cat_id')
                    ->and('P.blog_id = ' . $sql->quote($this->id))
                    ->statement()
            )
            ->where('C.blog_id = ' . $sql->quote($this->id));

        $this->getPostsAddingParameters($params, $sql);

        $sql->group('C.cat_id');

        $counters = [];
        $rs       = $sql->select();
        if ($rs instanceof MetaRecord) {
            while ($rs->fetch()) {
                if ($rs->intField('cat_id') > 0) {
                    $counters[$rs->intField('cat_id')] = $rs->intField('nb_post');
                }
            }
        }

        return $counters;
    }

    public function addCategory(Cursor $cur, int $parent = 0): int
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CATEGORIES,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to add categories.'));
        }

        $url = [];
        if ($parent !== 0) {
            $rs = $this->getCategory($parent);
            if ($rs->isEmpty()) {
                $url = [];
            } else {
                $cat_url = $rs->strField('cat_url');
                if ($cat_url !== '') {
                    $url[] = $cat_url;
                }
            }
        }

        $cat_url   = $cur->strField('cat_url');
        $cat_title = $cur->strField('cat_title');
        $url[]     = $cat_url === '' ? Text::tidyURL($cat_title, false) : $cat_url;

        $cur->setStrField('cat_url', implode('/', $url));

        $this->fillCategoryCursor($cur);
        $cur->setStrField('blog_id', $this->id);

        # --BEHAVIOR-- coreBeforeCategoryCreate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreBeforeCategoryCreate', $this, $cur);

        $id = $this->categories()->addNode($cur, $parent);

        // Update category's Cursor in order to give an updated Cursor to callback behaviors
        $rs = $this->getCategory($id);
        if (!$rs->isEmpty()) {
            $cur->setIntField('cat_lft', $rs->intField('cat_lft', true));
            $cur->setIntField('cat_rgt', $rs->intField('cat_rgt', true));
        }

        # --BEHAVIOR-- coreAfterCategoryCreate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreAfterCategoryCreate', $this, $cur);
        $this->triggerBlog();

        return $cur->intField('cat_id');
    }

    public function updCategory(int $id, Cursor $cur): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CATEGORIES,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to update categories.'));
        }

        if ($cur->strField('cat_url') === '') {
            $url = [];
            $rs  = $this->categories()->getParents($id);
            while ($rs->fetch()) {
                if ($rs->index() == $rs->count() - 1) {
                    $cat_url = $rs->strField('cat_url');
                    if ($cat_url !== '') {
                        $url[] = $cat_url;
                    }
                }
            }

            $cat_title = $cur->strField('cat_title');
            $url[]     = Text::tidyURL($cat_title, false);
            $cur->setStrField('cat_url', implode('/', $url));
        }

        $this->fillCategoryCursor($cur, $id);

        # --BEHAVIOR-- coreBeforeCategoryUpdate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreBeforeCategoryUpdate', $this, $cur);

        $sql = new UpdateStatement();
        $sql
            ->where('cat_id = ' . $id)
            ->and('blog_id = ' . $sql->quote($this->id));

        $sql->update($cur);

        # --BEHAVIOR-- coreAfterCategoryUpdate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreAfterCategoryUpdate', $this, $cur);

        $this->triggerBlog();
    }

    public function updCategoryPosition(int $id, int $left, int $right): void
    {
        $this->categories()->updatePosition($id, $left, $right);
        $this->triggerBlog();
    }

    public function setCategoryParent(int $id, int $parent): void
    {
        $this->categories()->setNodeParent($id, $parent);
        $this->triggerBlog();
    }

    public function setCategoryPosition(int $id, int $sibling, string $move): void
    {
        $this->categories()->setNodePosition($id, $sibling, $move);
        $this->triggerBlog();
    }

    public function delCategory(int $id): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CATEGORIES,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to delete categories.'));
        }

        $sql = new SelectStatement();
        $sql
            ->column($sql->count('post_id', 'nb_post'))
            ->from($this->prefix . self::POST_TABLE_NAME)
            ->where('cat_id = ' . $id)
            ->and('blog_id = ' . $sql->quote($this->id));

        $rs = $sql->select();
        if ($rs instanceof MetaRecord) {
            if ($rs->intField('nb_post') > 0) {
                throw new ConflictException(__('This category is not empty.'));
            }

            $this->categories()->deleteNode($id, true);
            $this->triggerBlog();
        }
    }

    public function resetCategoriesOrder(): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CATEGORIES,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to reset categories order.'));
        }

        $this->categories()->resetOrder();
        $this->triggerBlog();
    }

    /**
     * Check if the category url is unique.
     *
     * @throws  BadRequestException
     *
     * @param   string  $url    The url
     * @param   int     $id     The identifier
     */
    private function checkCategory(string $url, ?int $id = null): string
    {
        # Let's check if URL is taken...
        $sql = new SelectStatement();
        $sql
            ->column('cat_url')
            ->from($this->prefix . $this->categories()::CATEGORY_TABLE_NAME)
            ->where('cat_url = ' . $sql->quote($url))
            ->and('blog_id = ' . $sql->quote($this->id))
            ->order('cat_url DESC');
        if ($id) {
            $sql->and('cat_id <> ' . $id);
        }

        $rs = $sql->select();
        if ($rs instanceof MetaRecord && !$rs->isEmpty()) {
            $sql = new SelectStatement();
            $sql
                ->column('cat_url')
                ->from($this->prefix . $this->categories()::CATEGORY_TABLE_NAME)
                ->where('cat_url' . $sql->regexp($url))
                ->and('blog_id = ' . $sql->quote($this->id))
                ->order('cat_url DESC');
            if ($id) {
                $sql->and('cat_id <> ' . $id);
            }

            $rs = $sql->select();
            if (!$rs instanceof MetaRecord || $rs->isEmpty()) {
                // First duplicate, add '1' to URL and return it
                return $url . '1';
            }

            $a = [];
            while ($rs->fetch()) {
                $a[] = $rs->strField('cat_url');
            }

            natsort($a);
            $t_url = end($a);

            if (preg_match('/(.*?)(\d+)$/', (string) $t_url, $m)) {
                $i   = (int) $m[2];
                $url = $m[1];
            } else {
                $i = 1;
            }

            // Return URL with it's counter incremented
            return $url . ($i + 1);
        }

        // URL empty?
        if ($url === '') {
            throw new BadRequestException(__('Empty category URL.'));
        }

        return $url;
    }

    /**
     * Fills the category Cursor.
     *
     * @throws  BadRequestException
     *
     * @param      Cursor     $cur    The category Cursor
     * @param      int        $id     The category ID
     */
    private function fillCategoryCursor(Cursor $cur, ?int $id = null): void
    {
        $cat_title = $cur->strField('cat_title');
        if ($cat_title === '') {
            throw new BadRequestException(__('You must provide a category title.'));
        }

        $cat_url = $cur->strField('cat_url');

        # If we don't have any cat_url, let's do one
        if ($cat_url === '') {
            $cat_url = Text::tidyURL($cat_title, false);
        }

        # Still empty ?
        if ($cat_url === '') {
            throw new BadRequestException(__('You must provide a category URL.'));
        }

        $cur->setStrField('cat_url', Text::tidyURL($cat_url, true));

        # Check if url is unique
        $cur->setStrField('cat_url', $this->checkCategory($cur->strField('cat_url'), $id));

        # --BEHAVIOR-- coreContentFilter -- string, array<int, array<int, string>> -- since 2.34
        $this->core->behavior()->callBehavior('coreContentFilter', 'category', [
            [&$cat_title, 'text'],
        ]);
        $cur->setStrField('cat_title', $cat_title);

        $cat_desc = $cur->strField('cat_desc', true);
        if ($cat_desc !== null) {
            $description = $this->core->filter()->HTMLfilter($cat_desc);
            # --BEHAVIOR-- coreContentFilter -- string, array<int, array<int, string>> -- since 2.34
            $this->core->behavior()->callBehavior('coreContentFilter', 'category', [
                [&$description, 'html'],
            ]);
            $cur->setStrField('cat_desc', $description);
        }
    }

    ///@}

    /// @name Entries management methods
    ///@{

    public function getPosts($params = [], bool $count_only = false, ?SelectStatement $ext_sql = null): MetaRecord
    {
        # --BEHAVIOR-- coreBlogBeforeGetPosts
        $params = $params instanceof ArrayObject ? $params : new ArrayObject($params);
        # --BEHAVIOR-- coreBlogBeforeGetPosts -- ArrayObject
        $this->core->behavior()->callBehavior('coreBlogBeforeGetPosts', $params);

        $sql = $ext_sql instanceof SelectStatement ? clone $ext_sql : new SelectStatement();

        if ($count_only) {
            $sql->column($sql->count($sql->unique('P.post_id')));
        } else {
            if (empty($params['no_content'])) {
                $sql->columns([
                    'post_excerpt',
                    'post_excerpt_xhtml',
                    'post_content',
                    'post_content_xhtml',
                    'post_notes',
                ]);
            }

            if (!empty($params['columns'])) {
                $values = [];
                if (is_array($params['columns'])) {
                    $values = array_map(fn (mixed $v): string => is_string($v) ? $v : '', $params['columns']);
                } elseif (is_string($params['columns'])) {
                    $values = [$params['columns']];
                }

                $sql->columns($values);
            }

            $sql->columns([
                'P.post_id',
                'P.blog_id',
                'P.user_id',
                'P.cat_id',
                'post_dt',
                'post_tz',
                'post_creadt',
                'post_upddt',
                'post_format',
                'post_password',
                'post_url',
                'post_lang',
                'post_title',
                'post_type',
                'post_meta',
                'post_status',
                'post_firstpub',
                'post_selected',
                'post_position',
                'post_open_comment',
                'post_open_tb',
                'nb_comment',
                'nb_trackback',
                'U.user_name',
                'U.user_firstname',
                'U.user_displayname',
                'U.user_email',
                'U.user_url',
                'C.cat_title',
                'C.cat_url',
                'C.cat_desc',
            ]);
        }

        $sql
            ->from($sql->as($this->prefix . self::POST_TABLE_NAME, 'P'), false, true)
            ->join(
                (new JoinStatement())
                    ->inner()
                    ->from($sql->as($this->prefix . $this->core->auth()::USER_TABLE_NAME, 'U'))
                    ->on('U.user_id = P.user_id')
                    ->statement()
            )
            ->join(
                (new JoinStatement())
                    ->left()
                    ->from($sql->as($this->prefix . $this->categories()::CATEGORY_TABLE_NAME, 'C'))
                    ->on('P.cat_id = C.cat_id')
                    ->statement()
            );

        if (!empty($params['join']) && is_string($params['join'])) {
            $sql->join($params['join']);
        }

        if (!empty($params['from']) && is_string($params['from'])) {
            $sql->from($params['from']);
        }

        if (!empty($params['where'])) {
            // Cope with legacy code
            $values = [];
            if (is_array($params['where'])) {
                $values = array_map(fn (mixed $v): string => is_string($v) ? $v : '', $params['where']);
            } elseif (is_string($params['where'])) {
                $values = [$params['where']];
            }

            $sql->where($values);
        } else {
            $sql->where('P.blog_id = ' . $sql->quote($this->id));
        }

        $this->getPostsAddingParameters($params, $sql);

        #Adding parameters

        if (isset($params['post_id'])) {
            $values = $sql->sanitizeIn($params['post_id'], 'int', false);
            if ($values !== []) {
                $sql->and('P.post_id' . $sql->in($values));
            }
        }

        if (isset($params['exclude_post_id']) && $params['exclude_post_id'] !== '') {
            $values = $sql->sanitizeIn($params['exclude_post_id'], 'int', false);
            if ($values !== []) {
                $sql->and('P.post_id NOT' . $sql->in($values));
            }
        }

        if (isset($params['post_url']) && is_string($params['post_url']) && $params['post_url'] !== '') {
            $sql->and('post_url = ' . $sql->quote($params['post_url']));
        }

        if (!empty($params['user_id']) && is_string($params['user_id'])) {
            $sql->and('U.user_id = ' . $sql->quote($params['user_id']));
        }

        if (isset($params['cat_id']) && $params['cat_id']) {
            $values = [];
            if (is_array($params['cat_id'])) {
                $values = array_map(fn (mixed $v): string => is_numeric($v) ? (string) $v : '', $params['cat_id']);
            } elseif (is_numeric($params['cat_id'])) {
                $values = [(string) $params['cat_id']];
            } elseif (is_string($params['cat_id'])) {
                $values = [$params['cat_id']];
            }

            if ($values !== []) {
                if (!empty($params['cat_id_not'])) {
                    foreach ($values as &$value) {
                        $value .= ' ?not';
                    }
                }

                $sql->and($this->getPostsCategoryFilter($values, 'cat_id'));
            }
        } elseif (isset($params['cat_url']) && $params['cat_url'] !== '') {
            $values = [];
            if (is_array($params['cat_url'])) {
                $values = array_map(fn (mixed $v): string => is_string($v) ? $v : '', $params['cat_url']);
            } elseif (is_string($params['cat_url'])) {
                $values = [$params['cat_url']];
            }

            if ($values !== []) {
                if (!empty($params['cat_url_not'])) {
                    foreach ($values as &$value) {
                        $value .= ' ?not';
                    }
                }

                $sql->and($this->getPostsCategoryFilter($values, 'cat_url'));
            }
        }

        /* Other filters */
        if (isset($params['post_firstpub'])) {
            $sql->and('post_firstpub = ' . (int) (bool) $params['post_firstpub']);
        }

        if (isset($params['post_selected'])) {
            $sql->and('post_selected = ' . (int) (bool) $params['post_selected']);
        }

        if (!empty($params['post_year']) && is_numeric($params['post_year'])) {
            $sql->and($sql->dateFormat('post_dt', '%Y') . ' = ' . $sql->quote(sprintf('%04d', (int) $params['post_year'])));
        }

        if (!empty($params['post_month']) && is_numeric($params['post_month'])) {
            $sql->and($sql->dateFormat('post_dt', '%m') . ' = ' . $sql->quote(sprintf('%02d', (int) $params['post_month'])));
        }

        if (!empty($params['post_day']) && is_numeric($params['post_day'])) {
            $sql->and($sql->dateFormat('post_dt', '%d') . ' = ' . $sql->quote(sprintf('%02d', (int) $params['post_day'])));
        }

        if (!empty($params['post_lang']) && is_string($params['post_lang'])) {
            $sql->and('P.post_lang = ' . $sql->quote($params['post_lang']));
        }

        if (!empty($params['search']) && is_string($params['search'])) {
            $words = Text::splitWords($params['search']);

            if ($words !== []) {
                # --BEHAVIOR-- corePostSearch
                if ($this->core->behavior()->hasBehavior('corePostSearch') || $this->core->behavior()->hasBehavior('corePostSearchV2')) {
                    # --BEHAVIOR-- corePostSearchV2 -- array<int,mixed>
                    $this->core->behavior()->callBehavior('corePostSearchV2', [&$words, &$params, $sql]);
                }

                foreach ($words as $i => $w) {
                    $words[$i] = $sql->like('post_words', '%' . $sql->escape($w) . '%');
                }

                $sql->and($words);
            }
        }

        if (isset($params['media'])) {
            $sqlExists = new SelectStatement();
            $sqlExists
                ->from($sql->as($this->prefix . $this->core->postMedia()::POST_MEDIA_TABLE_NAME, 'M'))
                ->column('M.post_id')
                ->where('M.post_id = P.post_id');

            if (isset($params['link_type']) && is_string($params['link_type'])) {
                $sqlExists->and('M.link_type' . $sqlExists->in($params['link_type']));
            }

            $sql->and(($params['media'] == '0' ? 'NOT ' : '') . 'EXISTS (' . $sqlExists->statement() . ')');
        }

        if (!empty($params['sql']) && is_string($params['sql'])) {
            $sql->sql($params['sql']);
        }

        if (!$count_only) {
            if (!empty($params['order']) && is_string($params['order'])) {
                $sql->order($sql->escape($params['order']));
            } else {
                $sql->order('post_dt DESC');
            }
        }

        if (!$count_only && !empty($params['limit'])) {
            $values = is_array($params['limit']) ? array_values($params['limit']) : [$params['limit']];
            // Make $values an array of integer values
            $values = array_map(fn (mixed $v): int => is_numeric($v) ? (int) $v : 0, $values);

            /**
             * @var array{0: int, 1?: int}  $limit
             */
            $limit = [
                $values[0],
            ];
            if (isset($values[1])) {
                $limit[1] = $values[1];
            }

            $sql->limit($limit);
        }

        $rs = $sql->select();
        if ($rs instanceof MetaRecord) {
            $rs->set('_nb_media', []);
            $rs->extend(Post::class);

            # --BEHAVIOR-- coreBlogGetPosts -- MetaRecord
            $this->core->behavior()->callBehavior('coreBlogGetPosts', $rs);

            /**
             * @var array{rs:null|Record|MetaRecord, params:ArrayObject<array-key, mixed>, count_only:bool}
             */
            $alt = ['rs' => null, 'params' => $params, 'count_only' => $count_only];
            $alt = new ArrayObject($alt);

            # --BEHAVIOR-- coreBlogAfterGetPosts -- MetaRecord, ArrayObject
            $this->core->behavior()->callBehavior('coreBlogAfterGetPosts', $rs, $alt);
            if ($alt['rs'] !== null) {
                if ($alt['rs'] instanceof Record) {
                    $rs = new MetaRecord($alt['rs']);
                } elseif ($alt['rs'] instanceof MetaRecord) {
                    $rs = $alt['rs'];
                }
            }
        }

        return $rs ?? MetaRecord::newFromArray([]);
    }

    public function getNextPost(MetaRecord $post, int $dir, bool $restrict_to_category = false, bool $restrict_to_lang = false): ?MetaRecord
    {
        $dt      = $post->strField('post_dt');
        $post_id = $post->intField('post_id');

        if ($dir > 0) {
            $sign  = '>';
            $order = 'ASC';
        } else {
            $sign  = '<';
            $order = 'DESC';
        }

        $params['post_type'] = $post->strField('post_type');
        $params['limit']     = 1;
        $params['order']     = 'post_dt ' . $order . ', P.post_id ' . $order;
        $params['sql']       = 'AND ( ' .
            "   (post_dt = '" . $this->core->db()->con()->escapeStr($dt) . "' AND P.post_id " . $sign . ' ' . $post_id . ') ' .
            '   OR post_dt ' . $sign . " '" . $this->core->db()->con()->escapeStr($dt) . "' " .
            ') ';

        if ($restrict_to_category) {
            $params['sql'] .= is_numeric($post->intField('cat_id', true)) ? 'AND P.cat_id = ' . $post->intField('cat_id') . ' ' : 'AND P.cat_id IS NULL ';
        }

        if ($restrict_to_lang) {
            $params['sql'] .= is_string($post->strField('post_lang', true)) && $post->strField('post_lang') !== '' ? 'AND P.post_lang = \'' . $this->core->db()->con()->escapeStr($post->strField('post_lang')) . '\' ' : 'AND P.post_lang IS NULL ';
        }

        $rs = $this->getPosts($params);

        if ($rs->isEmpty()) {
            return null;
        }

        return $rs;
    }

    public function getLangs($params = []): MetaRecord
    {
        $params = $params instanceof ArrayObject ? $params : new ArrayObject($params);
        $sql    = new SelectStatement();
        $sql
            ->columns([
                $sql->count('post_id', 'nb_post'),
                'post_lang',
            ])
            ->from($sql->as($this->prefix . self::POST_TABLE_NAME, 'P'))
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_lang <> ' . $sql->quote(''))
            ->and('post_lang IS NOT NULL');

        $this->getPostsAddingParameters($params, $sql);

        if (isset($params['lang']) && is_string($params['lang'])) {
            $sql->and('post_lang = ' . $sql->quote($params['lang']));
        }

        $sql->group('post_lang');

        $order = 'desc';
        if (!empty($params['order'])
            && is_string($params['order'])
            && preg_match('/^(desc|asc)$/i', $params['order'])
        ) {
            $order = $params['order'];
        }

        $order_by = 'post_lang';
        if (!empty($params['order_by'])
            && is_string($params['order_by'])
            && in_array($params['order_by'], ['nb_post', 'post_lang'], true)
        ) {
            $order_by = $params['order_by'];
        }

        $sql->order($order_by . ' ' . $order);

        return $sql->select() ?? MetaRecord::newFromArray([]);
    }

    public function getDates($params = []): MetaRecord
    {
        $dt_f  = '%Y-%m-%d';
        $dt_fc = '%Y%m%d';
        if (isset($params['type'])) {
            if ($params['type'] == 'year') {
                $dt_f  = '%Y-01-01';
                $dt_fc = '%Y0101';
            } elseif ($params['type'] == 'month') {
                $dt_f  = '%Y-%m-01';
                $dt_fc = '%Y%m01';
            }
        }

        $dt_f  .= ' 00:00:00';
        $dt_fc .= '000000';

        $params = $params instanceof ArrayObject ? $params : new ArrayObject($params);
        $sql    = new SelectStatement();
        $sql
            ->distinct()
            ->columns([
                $sql->dateFormat('post_dt', $dt_f) . ' AS dt',
                $sql->count('P.post_id', 'nb_post'),
            ])
            ->from($sql->as($this->prefix . self::POST_TABLE_NAME, 'P'))
            ->join(
                (new JoinStatement())
                    ->left()
                    ->from($sql->as($this->prefix . $this->categories()::CATEGORY_TABLE_NAME, 'C'))
                    ->on('P.cat_id = C.cat_id')
                    ->statement()
            )
            ->where('P.blog_id = ' . $sql->quote($this->id))
            ->group('dt');

        $this->getPostsAddingParameters($params, $sql);

        if (isset($params['cat_id'])
            && is_numeric($params['cat_id'])
        ) {
            $sql->and('P.cat_id = ' . (int) $params['cat_id']);
            $sql->column('C.cat_url');
            $sql->group('C.cat_url');
        } elseif (
            isset($params['cat_url'])
            && is_string($params['cat_url'])
        ) {
            $sql->and('C.cat_url = ' . $sql->quote($params['cat_url']));
            $sql->column('C.cat_url');
            $sql->group('C.cat_url');
        }

        if (!empty($params['post_lang']) && is_string($params['post_lang'])) {
            $sql->and('P.post_lang = ' . $sql->quote($params['post_lang']));
        }

        if (!empty($params['year']) && is_numeric($params['year'])) {
            $sql->and($sql->dateFormat('post_dt', '%Y') . ' = ' . $sql->quote(sprintf('%04d', (int) $params['year'])));
        }

        if (!empty($params['month']) && is_numeric($params['month'])) {
            $sql->and($sql->dateFormat('post_dt', '%m') . ' = ' . $sql->quote(sprintf('%02d', (int) $params['month'])));
        }

        if (!empty($params['day']) && is_numeric($params['day'])) {
            $sql->and($sql->dateFormat('post_dt', '%d') . ' = ' . $sql->quote(sprintf('%02d', (int) $params['day'])));
        }

        # Get next or previous date
        if (!empty($params['next']) || !empty($params['previous'])) {
            $pdir = '';
            $dt   = '';
            if (!empty($params['next']) && is_string($params['next'])) {
                $pdir            = ' > ';
                $params['order'] = 'asc';
                $dt              = $params['next'];
            } elseif (!empty($params['previous']) && is_string($params['previous'])) {
                $pdir            = ' < ';
                $params['order'] = 'desc';
                $dt              = $params['previous'];
            }

            if ($pdir !== '') {
                $dt = date('YmdHis', (int) strtotime($dt));

                $sql->and($sql->dateFormat('post_dt', $dt_fc) . $pdir . $sql->quote($dt));
                $sql->limit(1);
            }
        }

        $order = 'desc';
        if (!empty($params['order'])
            && is_string($params['order'])
            && preg_match('/^(desc|asc)$/i', $params['order'])) {
            $order = $params['order'];
        }

        $sql->order('dt ' . $order);

        $rs = $sql->select();
        if ($rs instanceof MetaRecord) {
            $rs->extend(Dates::class);
        }

        return $rs ?? MetaRecord::newFromArray([]);
    }

    public function addPost(Cursor $cur): int
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_USAGE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to create an entry.'));
        }

        $this->core->db()->con()->writeLock($this->prefix . self::POST_TABLE_NAME);

        try {
            # Get ID
            $sql = new SelectStatement();
            $sql
                ->column($sql->max('post_id'))
                ->from($this->prefix . self::POST_TABLE_NAME);
            $rs = $sql->select();

            $user_tz = is_string($user_tz = $this->core->auth()->getInfo('user_tz')) ? $user_tz : 'UTC';

            $cur->setIntField('post_id', $rs instanceof MetaRecord ? $rs->cardinal() + 1 : 1);
            $cur->setStrField('blog_id', $this->id);
            $cur->setStrField('post_creadt', date('Y-m-d H:i:s'));
            $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));
            $cur->setStrField('post_tz', $user_tz);

            # Post excerpt and content
            $this->getPostContent($cur, $cur->intField('post_id'));

            $this->getPostCursor($cur);

            $post_url   = $cur->strField('post_url');
            $post_dt    = $cur->strField('post_dt');
            $post_title = $cur->strField('post_title');
            $post_id    = $cur->intField('post_id');

            $cur->setStrField('post_url', $this->getPostURL($post_url, $post_dt, $post_title, $post_id));

            if (!$this->core->auth()->check($this->core->auth()->makePermissions([
                $this->core->auth()::PERMISSION_PUBLISH,
                $this->core->auth()::PERMISSION_CONTENT_ADMIN,
            ]), $this->id)) {
                $cur->setIntField('post_status', $this->core->status()->post()::PENDING);
            }

            # --BEHAVIOR-- coreBeforePostCreate -- BlogInterface, Cursor
            $this->core->behavior()->callBehavior('coreBeforePostCreate', $this, $cur);

            $cur->insert();
            $this->core->db()->con()->unlock();
        } catch (Throwable $throwable) {
            $this->core->db()->con()->unlock();

            throw $throwable;
        }

        # --BEHAVIOR-- coreAfterPostCreate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreAfterPostCreate', $this, $cur);

        $this->triggerBlog();

        $post_id = $cur->intField('post_id');

        $this->firstPublicationEntries($post_id);

        return $post_id;
    }

    public function updPost($id, Cursor $cur): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_USAGE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to update entries.'));
        }

        $id = (int) $id;

        if ($id === 0) {
            throw new BadRequestException(__('No such entry ID.'));
        }

        # Post excerpt and content
        $this->getPostContent($cur, $id);

        $this->getPostCursor($cur);

        if ($cur->strField('post_url') === '') {
            // Recompose post URL
            $post_url   = $cur->strField('post_url');
            $post_dt    = $cur->strField('post_dt');
            $post_title = $cur->strField('post_title');

            $cur->setStrField('post_url', $this->getPostURL($post_url, $post_dt, $post_title, $id));
        }

        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_PUBLISH,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $cur->unsetField('post_status');
        }

        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        #If user is only "usage", we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql = new SelectStatement();
            $sql
                ->column('post_id')
                ->from($this->prefix . self::POST_TABLE_NAME)
                ->where('post_id = ' . $id)
                ->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));

            $rs = $sql->select();
            if (!$rs instanceof MetaRecord || $rs->isEmpty()) {
                throw new UnauthorizedException(__('You are not allowed to edit this entry.'));
            }
        }

        # --BEHAVIOR-- coreBeforePostUpdate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreBeforePostUpdate', $this, $cur);

        $cur->update('WHERE post_id = ' . $id . ' ');

        # --BEHAVIOR-- coreAfterPostUpdate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreAfterPostUpdate', $this, $cur);

        $this->triggerBlog();

        $this->firstPublicationEntries($id);
    }

    public function updPostStatus($id, int $status): void
    {
        $this->updPostsStatus($id, $status);
    }

    public function updPostsStatus($ids, int $status): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_PUBLISH,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to change this entry status.'));
        }

        $posts_ids = $this->cleanIds($ids);

        $sql = new UpdateStatement();
        $sql
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_id' . $sql->in($posts_ids));

        #If user can only publish, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $cur = $this->openPostCursor();

        $cur->setIntField('post_status', $status);
        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        $sql->update($cur);
        $this->triggerBlog();

        $this->firstPublicationEntries($posts_ids);
    }

    public function updPostsFirstPub($ids, int $status): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_PUBLISH,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to change this entry status.'));
        }

        $posts_ids = $this->cleanIds($ids);

        $sql = new UpdateStatement();
        $sql
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_id' . $sql->in($posts_ids));

        #If user can only publish, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $cur = $this->openPostCursor();

        $cur->setBoolField('post_firstpub', $status);
        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        $sql->update($cur);
        $this->triggerBlog();

        $this->firstPublicationEntries($posts_ids);
    }

    public function updPostSelected($id, $selected): void
    {
        $this->updPostsSelected($id, $selected);
    }

    public function updPostsSelected($ids, $selected): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_USAGE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to change this entry category.'));
        }

        $posts_ids = $this->cleanIds($ids);
        $selected  = (bool) $selected;

        $sql = new UpdateStatement();
        $sql
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_id' . $sql->in($posts_ids));

        # If user is only usage, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $cur = $this->openPostCursor();

        $cur->setBoolField('post_selected', (int) $selected);
        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        $sql->update($cur);
        $this->triggerBlog();
    }

    public function updPostCategory($id, $cat_id): void
    {
        $this->updPostsCategory($id, $cat_id);
    }

    public function updPostsCategory($ids, $cat_id): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_USAGE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to change this entry category.'));
        }

        $posts_ids = $this->cleanIds($ids);
        $cat_id    = is_numeric($cat_id) ? (int) $cat_id : 0;

        $sql = new UpdateStatement();
        $sql
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_id' . $sql->in($posts_ids));

        # If user is only usage, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $cur = $this->openPostCursor();

        $cur->setIntField('cat_id', ($cat_id ?: null));
        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        $sql->update($cur);
        $this->triggerBlog();
    }

    public function changePostsCategory($old_cat_id, $new_cat_id): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CATEGORIES,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to change entries category.'));
        }

        $old_cat_id = is_numeric($old_cat_id) ? (int) $old_cat_id : 0;
        $new_cat_id = is_numeric($new_cat_id) ? (int) $new_cat_id : 0;

        $sql = new UpdateStatement();
        $sql
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('cat_id = ' . $old_cat_id);

        $cur = $this->openPostCursor();

        $cur->setIntField('cat_id', ($new_cat_id ?: null));
        $cur->setStrField('post_upddt', date('Y-m-d H:i:s'));

        $sql->update($cur);
        $this->triggerBlog();
    }

    public function delPost($id): void
    {
        $this->delPosts($id);
    }

    public function delPosts($ids): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_DELETE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to delete entries.'));
        }

        $posts_ids = $this->cleanIds($ids);

        if ($posts_ids === []) {
            throw new BadRequestException(__('No such entry ID.'));
        }

        $sql = new DeleteStatement();
        $sql
            ->from($this->prefix . self::POST_TABLE_NAME)
            ->where('blog_id = ' . $sql->quote($this->id))
            ->and('post_id' . $sql->in($posts_ids));

        #If user can only delete, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sql->and('user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $sql->delete();
        $this->triggerBlog();
    }

    public function publishScheduledEntries(): void
    {
        $sql = new SelectStatement();
        $sql
            ->columns([
                'post_id',
                'post_dt',
                'post_tz',
            ])
            ->from($this->prefix . self::POST_TABLE_NAME)
            ->where('post_status = ' . $this->core->status()->post()::SCHEDULED)
            ->and('blog_id = ' . $sql->quote($this->id));

        $rs = $sql->select();
        if (!$rs instanceof MetaRecord || $rs->isEmpty()) {
            return;
        }

        $now = Date::toUTC(time());

        /**
         * @var ArrayObject<int, int> $to_change
         */
        $to_change = new ArrayObject();

        while ($rs->fetch()) {
            $post_id = $rs->intField('post_id');
            if ($post_id === 0) {
                continue;
            }

            # Now timestamp with post timezone
            $post_tz = $rs->strField('post_tz') ?: 'UTC';
            $now_tz  = $now + Date::getTimeOffset($post_tz, $now);

            # Post timestamp
            $post_dt = $rs->strField('post_dt') ?: 'now';
            $post_ts = strtotime($post_dt);

            # If now_tz >= post_ts, we publish the entry
            if ($now_tz >= $post_ts) {
                $to_change->append($post_id);
            }
        }

        if (count($to_change) > 0) {
            # --BEHAVIOR-- coreBeforeScheduledEntriesPublish -- BlogInterface, ArrayObject<int, int>
            $this->core->behavior()->callBehavior('coreBeforeScheduledEntriesPublish', $this, $to_change);

            $sql = new UpdateStatement();
            $sql
                ->ref($this->prefix . self::POST_TABLE_NAME)
                ->set('post_status = ' . $this->core->status()->post()::PUBLISHED)
                ->where('blog_id = ' . $sql->quote($this->id))
                ->and('post_id' . $sql->in([...$to_change]));

            $sql->update();
            $this->triggerBlog();

            # --BEHAVIOR-- coreAfterScheduledEntriesPublish -- BlogInterface, ArrayObject<int, int>
            $this->core->behavior()->callBehavior('coreAfterScheduledEntriesPublish', $this, $to_change);

            $this->firstPublicationEntries($to_change);
        }
    }

    public function firstPublicationEntries($ids): void
    {
        $posts = $this->getPosts([
            'post_id'       => $this->cleanIds($ids),
            'post_status'   => $this->core->status()->post()::PUBLISHED,
            'post_firstpub' => 0,
        ]);

        /**
         * @var ArrayObject<int, int> $to_change
         */
        $to_change = new ArrayObject();
        while ($posts->fetch()) {
            $post_id = $posts->intField('post_id');
            if ($post_id === 0) {
                continue;
            }

            $to_change->append($post_id);
        }

        if (count($to_change) > 0) {
            $sql = new UpdateStatement();
            $sql
                ->ref($this->prefix . self::POST_TABLE_NAME)
                ->set('post_firstpub = 1')
                ->where('blog_id = ' . $sql->quote($this->id))
                ->and('post_id' . $sql->in([...$to_change]));

            $sql->update();

            # --BEHAVIOR-- coreFirstPublicationEntries -- BlogInterface, ArrayObject
            $this->core->behavior()->callBehavior('coreFirstPublicationEntries', $this, $to_change);
        }
    }

    public function getPostsUsers(string $post_type = 'post'): MetaRecord
    {
        $sql = new SelectStatement();
        $sql
            ->columns([
                'P.user_id',
                'user_name',
                'user_firstname',
                'user_displayname',
                'user_email',
            ])
            ->from([
                $sql->as($this->prefix . self::POST_TABLE_NAME, 'P'),
                $sql->as($this->prefix . $this->core->auth()::USER_TABLE_NAME, 'U'),
            ])
            ->where('P.user_id = U.user_id')
            ->and('blog_id = ' . $sql->quote($this->id))
            ->group([
                'P.user_id',
                'user_name',
                'user_firstname',
                'user_displayname',
                'user_email',
            ]);

        if ($post_type !== '') {
            $sql->and('post_type = ' . $sql->quote($post_type));
        }

        return $sql->select() ?? MetaRecord::newFromArray([]);
    }

    /**
     * Get a category filter SQL clause
     *
     * @param  array<string>    $arr        filters
     */
    private function getPostsCategoryFilter(array $arr, string $field = 'cat_id'): string
    {
        $field = $field === 'cat_id' ? 'cat_id' : 'cat_url';

        $sub = [];
        $not = [];

        /**
         * @var array<int|string, string>
         */
        $queries = [];

        foreach ($arr as $v) {
            $v    = trim((string) $v);
            $args = preg_split('/\s*[?]\s*/', $v, -1, PREG_SPLIT_NO_EMPTY);
            if ($args !== false) {
                $id   = array_shift($args);
                $args = array_flip($args);

                if (!is_null($id)) {
                    if (isset($args['not'])) {
                        $not[$id] = 1;
                    }

                    if (isset($args['sub'])) {
                        $sub[$id] = 1;
                    }

                    if ($field === 'cat_id') {
                        $queries[$id] = preg_match('/^null$/i', (string) $id) ? 'P.cat_id IS NULL' : 'P.cat_id = ' . (int) $id;
                    } else {
                        $queries[$id] = "C.cat_url = '" . $this->core->db()->con()->escapeStr((string) $id) . "' ";
                    }
                }
            }
        }

        if ($sub !== []) {
            $sql = new SelectStatement();
            $sql
                ->columns([
                    'cat_id',
                    'cat_url',
                    'cat_lft',
                    'cat_rgt',
                ])
                ->from($this->prefix . $this->categories()::CATEGORY_TABLE_NAME)
                ->where('blog_id = ' . $sql->quote($this->id))
                ->and($field . $sql->in(array_keys($sub)));

            $rs = $sql->select();
            if ($rs instanceof MetaRecord) {
                while ($rs->fetch()) {
                    $index = $rs->field($field);
                    if ($field === 'cat_url') {
                        if (!is_string($index)) {
                            continue;
                        }
                    } else {
                        if (!is_numeric($index)) {
                            continue;
                        }

                        $index = (int) $index;
                    }

                    $queries[$index] = '(C.cat_lft BETWEEN ' . $rs->intField('cat_lft') . ' AND ' . $rs->intField('cat_rgt') . ')';
                }
            }
        }

        # Create queries
        $sql = [
            0 => [], # wanted categories
            1 => [], # excluded categories
        ];

        foreach ($queries as $id => $q) {
            $sql[(int) isset($not[$id])][] = $q;
        }

        $sql[0] = implode(' OR ', $sql[0]);
        $sql[1] = implode(' OR ', $sql[1]);

        if ($sql[0] !== '') {
            $sql[0] = '(' . $sql[0] . ')';
        } else {
            unset($sql[0]);
        }

        if ($sql[1] !== '') {
            $sql[1] = '(P.cat_id IS NULL OR NOT(' . $sql[1] . '))';
        } else {
            unset($sql[1]);
        }

        return implode(' AND ', $sql);
    }

    /**
     * Gets the post Cursor.
     *
     * @throws     BadRequestException
     *
     * @param      Cursor      $cur      The post Cursor
     */
    private function getPostCursor(Cursor $cur): void
    {
        if ($cur->strField('post_title') === '') {
            throw new BadRequestException(__('No entry title'));
        }

        if ($cur->strField('post_content') === '') {
            throw new BadRequestException(__('No entry content'));
        }

        if ($cur->strField('post_password') === '') {
            $cur->setStrField('post_password', null);
        }

        if ($cur->strField('post_dt') === '') {
            $user_tz = is_string($user_tz = $this->core->auth()->getInfo('user_tz')) ? $user_tz : 'UTC';
            $offset  = Date::getTimeOffset($user_tz);
            $now     = time() + $offset;
            $cur->setStrField('post_dt', date('Y-m-d H:i:00', $now));
        }

        if ($cur->strField('post_content_xhtml') === '') {
            throw new BadRequestException(__('No entry content'));
        }

        # Words list
        if ($cur->strField('post_excerpt_xhtml') !== '') {
            $post_title   = $cur->strField('post_title');
            $post_excerpt = $cur->strField('post_excerpt_xhtml');
            $post_content = $cur->strField('post_content_xhtml');

            $words = $post_title . ' ' . $post_excerpt . ' ' . $post_content;

            $cur->setStrField('post_words', implode(' ', Text::splitWords($words)));
        }

        if ($cur->isField('post_firstpub')) {
            $cur->unsetField('post_firstpub');
        }
    }

    /**
     * Gets the post content.
     *
     * @param      Cursor  $cur      The post Cursor
     * @param      int     $post_id  The post identifier
     */
    private function getPostContent(Cursor $cur, int $post_id): void
    {
        $post_excerpt       = $cur->strField('post_excerpt');
        $post_excerpt_xhtml = $cur->strField('post_excerpt_xhtml');
        $post_content       = $cur->strField('post_content');
        $post_content_xhtml = $cur->strField('post_content_xhtml');
        $post_format        = $cur->strField('post_format');
        $post_lang          = $cur->strField('post_lang');

        $this->setPostContent(
            $post_id,
            $post_format,
            $post_lang,
            $post_excerpt,
            $post_excerpt_xhtml,
            $post_content,
            $post_content_xhtml
        );

        $cur->setStrField('post_excerpt', $post_excerpt);
        $cur->setStrField('post_excerpt_xhtml', $post_excerpt_xhtml);
        $cur->setStrField('post_content', $post_content);
        $cur->setStrField('post_content_xhtml', $post_content_xhtml);
    }

    public function setPostContent($post_id, $format, $lang, &$excerpt, &$excerpt_xhtml, &$content, &$content_xhtml): void
    {
        if ($format == 'wiki') {
            $this->core->filter()->initWikiPost();
            if ($this->core->filter()->wiki() instanceof WikiToHtml) {
                $this->core->filter()->wiki()->setOpt('note_prefix', 'pnote-' . $post_id);
                $tag = match ($this->settings()->get('system')->getInt('note_title_tag')) {
                    1       => 'h3',
                    2       => 'p',
                    default => 'h4',
                };
                $this->core->filter()->wiki()->setOpt('note_str', '<div class="footnotes"><' . $tag . ' class="footnotes-title">' .
                    __('Notes') . '</' . $tag . '>%s</div>');
                $this->core->filter()->wiki()->setOpt('note_str_single', '<div class="footnotes"><' . $tag . ' class="footnotes-title">' .
                    __('Note') . '</' . $tag . '>%s</div>');
                if (str_starts_with($lang, 'fr')) {
                    $this->core->filter()->wiki()->setOpt('active_fr_syntax', 1);
                }
            }
        }

        if ($excerpt) {
            $excerpt_xhtml = $this->core->formater()->callEditorFormater('dcLegacyEditor', $format, $excerpt);
            $excerpt_xhtml = $this->core->filter()->HTMLfilter($excerpt_xhtml);
        } else {
            $excerpt_xhtml = '';
        }

        if ($content) {
            $content_xhtml = $this->core->formater()->callEditorFormater('dcLegacyEditor', $format, $content);
            $content_xhtml = $this->core->filter()->HTMLfilter($content_xhtml);
        } else {
            $content_xhtml = '';
        }

        # --BEHAVIOR-- coreAfterPostContentFormat -- arra<string,string> -- deprecated since 2.34
        $this->core->behavior()->callBehavior('coreAfterPostContentFormat', [
            'excerpt'       => &$excerpt,
            'content'       => &$content,
            'excerpt_xhtml' => &$excerpt_xhtml,
            'content_xhtml' => &$content_xhtml,
        ]);

        # --BEHAVIOR-- coreContentFilter -- string, array<int, array<int, string>> -- since 2.34
        $this->core->behavior()->callBehavior('coreContentFilter', 'post', [
            [&$excerpt, $format],
            [&$content, $format],
            [&$excerpt_xhtml, 'html'],
            [&$content_xhtml, 'html'],
        ]);
    }

    public function getPostURL($url, $post_dt, $post_title, $post_id): string
    {
        $url = trim((string) $url);

        $dt = (int) strtotime($post_dt);

        /**
         * @var array<string, string>
         */
        $url_patterns = [
            '{y}'  => date('Y', $dt),
            '{m}'  => date('m', $dt),
            '{d}'  => date('d', $dt),
            '{t}'  => Text::tidyURL($post_title),
            '{id}' => (int) $post_id,
        ];

        # If URL is empty, we create a new one
        if ($url === '') {
            $post_url_format = $this->settings()->get('system')->getStr('post_url_format', false);
            # Transform with format
            $url = str_replace(
                array_keys($url_patterns),
                array_values($url_patterns),
                $post_url_format
            );
        } else {
            $url = Text::tidyURL($url);
        }

        # --BEHAVIOR-- coreGetPostURL
        $obj      = new stdClass();
        $obj->url = $url;
        $this->core->behavior()->callBehavior('coreGetPostURL', $obj);
        $url = $obj->url;

        # Let's check if URL is taken...
        $sql = new SelectStatement();
        $sql
            ->column('post_url')
            ->from($this->prefix . self::POST_TABLE_NAME)
            ->where('post_url = ' . $sql->quote($url))
            ->and('post_id <> ' . (int) $post_id)
            ->and('blog_id = ' . $sql->quote($this->id))
            ->order('post_url DESC');

        $rs = $sql->select();
        if ($rs instanceof MetaRecord && !$rs->isEmpty()) {
            $i   = 1;
            $sql = new SelectStatement();
            $sql
                ->column('post_url')
                ->from($this->prefix . self::POST_TABLE_NAME)
                ->where('post_url' . $sql->regexp($url))
                ->and('post_id <> ' . (int) $post_id)
                ->and('blog_id = ' . $sql->quote($this->id))
                ->order('post_url DESC');

            $rsOthers = $sql->select();
            if ($rsOthers instanceof MetaRecord && $rsOthers->count()) {
                $a = [];
                while ($rsOthers->fetch()) {
                    $a[] = $rsOthers->strField('post_url');
                }

                natsort($a);
                $t_url = end($a);
                if (preg_match('/(.*?)(\d+)$/', (string) $t_url, $m)) {
                    $i   = (int) $m[2];
                    $url = $m[1];
                }
            }

            return $url . ($i + 1);
        }

        # URL is empty?
        if ($url == '') {
            throw new BadRequestException(__('Empty entry URL'));
        }

        return $url;
    }

    public function getPostsAddingParameters(ArrayObject $params, SelectStatement $sql, bool $with_comment = false): void
    {
        $copy = clone $params;

        # --BEHAVIOR-- coreBlogBeforeGetPostsAddingParameters -- ArrayObject
        $this->core->behavior()->callBehavior('coreBlogBeforeGetPostsAddingParameters', $copy);

        # Allowed changes to limited fields.
        foreach (['post_type', 'post_status', 'comment_status'] as $type) {
            if (isset($copy[$type])) {
                $params[$type] = $copy[$type];
            }
        }

        if (isset($params['post_type'])) {
            $values = [];
            if (is_array($params['post_type'])) {
                $values = $sql->sanitizeIn($params['post_type'], 'string', false);
            } elseif (is_string($params['post_type']) && $params['post_type'] !== '') {
                $values = [$params['post_type']];
            }

            if ($values !== [] && $values !== ['']) {
                $sql->and('post_type' . $sql->in($values));
            }
        } else {
            // No post type, fallback to default one
            $sql->and('post_type = ' . $sql->quote('post'));
        }

        if (isset($params['post_status']) && $params['post_status'] !== '') {
            if (is_array($params['post_status'])) {
                array_walk($params['post_status'], function (&$v): void {
                    if ($v !== null && is_numeric($v)) {
                        $v = (int) $v;
                    }
                });
            } elseif (is_numeric($params['post_status'])) {
                $params['post_status'] = [(int) $params['post_status']];
            }
        }

        $frontend      = $this->core->task()->checkContext('FRONTEND');
        $preview_mode  = $frontend ? $this->core->frontend()->context()->preview : false;
        $content_admin = $this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id);

        // Permission reduced or (in frontend context and not in preview mode)
        if (!$content_admin || ($frontend && !$preview_mode)) {
            $and = [];

            if ($with_comment) {
                $and[] = 'comment_status > ' . $this->core->status()->comment()->threshold();
            }

            // limit to PUBLISHED by default but only if not in preview mode
            if (!$preview_mode) {
                $values = [];
                if (isset($params['post_status'])) {
                    if (is_array($params['post_status'])) {
                        $values = array_map(fn (mixed $v): int => is_numeric($v) ? (int) $v : 0, $params['post_status']);
                    } elseif (is_numeric($params['post_status'])) {
                        $values = [(int) $params['post_status']];
                    }
                }

                $values[] = $this->core->status()->post()::PUBLISHED;

                $and[] = 'post_status ' . $sql->in($values);
            }

            if ($this->without_password) {
                $and[] = 'post_password IS NULL';
            }

            $or = [$sql->andGroup($and)];

            if ($this->core->auth()->userID() && !$frontend) {
                $or[] = 'P.user_id = ' . $sql->quote($this->core->auth()->userID());
            }

            $sql->and($sql->orGroup($or));
        } elseif (!empty($params['post_status'])) {
            $values = $sql->sanitizeIn($params['post_status'], 'int', false);
            if ($values !== []) {
                $sql->and('post_status' . $sql->in($values));
            }
        }
    }

    ///@}

    /// @name Comments management methods
    ///@{

    public function getComments($params = [], bool $count_only = false, ?SelectStatement $ext_sql = null): MetaRecord
    {
        $params = $params instanceof ArrayObject ? $params : new ArrayObject($params);
        $sql    = $ext_sql instanceof SelectStatement ? clone $ext_sql : new SelectStatement();

        if ($count_only) {
            $sql->column($sql->count('comment_id'));
        } else {
            if (empty($params['no_content'])) {
                $sql->column('comment_content');
            }

            if (!empty($params['columns'])) {
                $values = [];
                if (is_array($params['columns'])) {
                    $values = array_map(fn (mixed $v): string => is_string($v) ? $v : '', $params['columns']);
                } elseif (is_string($params['columns'])) {
                    $values = [$params['columns']];
                }

                $sql->columns($values);
            }

            $sql->columns([
                'C.comment_id',
                'comment_dt',
                'comment_tz',
                'comment_upddt',
                'comment_author',
                'comment_email',
                'comment_site',
                'comment_trackback',
                'comment_status',
                'comment_spam_status',
                'comment_spam_filter',
                'comment_ip',
                'P.post_title',
                'P.post_url',
                'P.post_id',
                'P.post_password',
                'P.post_type',
                'P.post_dt',
                'P.user_id',
                'U.user_email',
                'U.user_url',
            ]);
        }

        $sql
            ->from($sql->as($this->prefix . self::COMMENT_TABLE_NAME, 'C'))
            ->join(
                (new JoinStatement())
                    ->inner()
                    ->from($sql->as($this->prefix . self::POST_TABLE_NAME, 'P'))
                    ->on('C.post_id = P.post_id')
                    ->statement()
            )
            ->join(
                (new JoinStatement())
                    ->inner()
                    ->from($sql->as($this->prefix . $this->core->auth()::USER_TABLE_NAME, 'U'))
                    ->on('P.user_id = U.user_id')
                    ->statement()
            );

        if (!empty($params['from']) && is_string($params['from'])) {
            $sql->from($params['from']);
        }

        if (!empty($params['where'])) {
            // Cope with legacy code
            $values = [];
            if (is_array($params['where'])) {
                $values = array_map(fn (mixed $v): string => is_string($v) ? $v : '', $params['where']);
            } elseif (is_string($params['where'])) {
                $values = [$params['where']];
            }

            $sql->where($values);
        } else {
            $sql->where('P.blog_id = ' . $sql->quote($this->id));
        }

        $params['post_type'] ??= '';

        $this->getPostsAddingParameters($params, $sql, true);

        if (isset($params['post_id']) && is_numeric($params['post_id'])) {
            $sql->and('P.post_id = ' . (int) $params['post_id']);
        }

        if (isset($params['cat_id']) && is_numeric($params['cat_id'])) {
            $sql->and('P.cat_id = ' . (int) $params['cat_id']);
        }

        if (isset($params['comment_id'])) {
            $values = $sql->sanitizeIn($params['comment_id'], 'int', false);
            if ($values !== []) {
                $sql->and('comment_id' . $sql->in($values));
            }
        }

        if (isset($params['comment_email']) && is_string($params['comment_email'])) {
            $comment_email = $sql->escape(str_replace('*', '%', $params['comment_email']));
            $sql->and($sql->like('comment_email', $comment_email));
        }

        if (isset($params['comment_site']) && is_string($params['comment_site'])) {
            $comment_site = $sql->escape(str_replace('*', '%', $params['comment_site']));
            $sql->and($sql->like('comment_site', $comment_site));
        }

        if (isset($params['comment_status']) && is_numeric($params['comment_status'])) {
            $sql->and('comment_status = ' . (int) $params['comment_status']);
        }

        if (!empty($params['comment_status_not']) && is_numeric($params['comment_status_not'])) {
            $sql->and('comment_status <> ' . (int) $params['comment_status_not']);
        }

        if (isset($params['comment_trackback'])) {
            $sql->and('comment_trackback = ' . (int) (bool) $params['comment_trackback']);
        }

        if (isset($params['comment_ip']) && is_string($params['comment_ip'])) {
            $comment_ip = $sql->escape(str_replace('*', '%', $params['comment_ip']));
            $sql->and($sql->like('comment_ip', $comment_ip));
        }

        if (isset($params['q_author']) && is_string($params['q_author'])) {
            $q_author = $sql->escape(str_replace('*', '%', strtolower($params['q_author'])));
            $sql->and($sql->like('LOWER(comment_author)', $q_author));
        }

        if (!empty($params['search']) && is_string($params['search'])) {
            $words = Text::splitWords($params['search']);

            if ($words !== []) {
                # --BEHAVIOR coreCommentSearch
                if ($this->core->behavior()->hasBehavior('coreCommentSearch') || $this->core->behavior()->hasBehavior('coreCommentSearchV2')) {
                    # --BEHAVIOR-- coreCommentSearchV2 -- array<int,mixed>
                    $this->core->behavior()->callBehavior('coreCommentSearchV2', [&$words, &$sql, &$params]);
                }

                foreach ($words as $i => $w) {
                    $words[$i] = $sql->like('comment_words', '%' . $sql->escape($w) . '%');
                }

                $sql->and($words);
            }
        }

        if (!empty($params['sql']) && is_string($params['sql'])) {
            $sql->sql($params['sql']);
        }

        if (!$count_only) {
            if (!empty($params['order']) && is_string($params['order'])) {
                $sql->order($sql->escape($params['order']));
            } else {
                $sql->order('comment_dt DESC');
            }
        }

        if (!$count_only && !empty($params['limit'])) {
            $values = is_array($params['limit']) ? array_values($params['limit']) : [$params['limit']];
            // Make $values an array of integer values
            $values = array_map(fn (mixed $v): int => is_numeric($v) ? (int) $v : 0, $values);

            /**
             * @var array{0: int, 1?: int}  $limit
             */
            $limit = [
                $values[0],
            ];
            if (isset($values[1])) {
                $limit[1] = $values[1];
            }

            $sql->limit($limit);
        }

        $rs = $sql->select();
        if ($rs instanceof MetaRecord) {
            $rs->extend(Comment::class);

            # --BEHAVIOR-- coreBlogGetComments -- MetaRecord
            $this->core->behavior()->callBehavior('coreBlogGetComments', $rs);
        }

        return $rs ?? MetaRecord::newFromArray([]);
    }

    public function addComment(Cursor $cur): int
    {
        $this->core->db()->con()->writeLock($this->prefix . self::COMMENT_TABLE_NAME);

        try {
            # Get ID
            $sql = new SelectStatement();
            $sql
                ->column($sql->max('comment_id'))
                ->from($this->prefix . self::COMMENT_TABLE_NAME);

            $rs = $sql->select();

            $cur->setIntField('comment_id', $rs instanceof MetaRecord ? $rs->cardinal() + 1 : 1);
            $cur->setStrField('comment_upddt', date('Y-m-d H:i:s'));

            $timezone = App::blog()->settings()->get('system')->getStr('blog_timezone', false) ?: 'UTC';
            $offset   = Date::getTimeOffset($timezone);

            $cur->setStrField('comment_dt', date('Y-m-d H:i:s', time() + $offset));
            $cur->setStrField('comment_tz', $this->settings()->get('system')->getStr('blog_timezone'));

            $this->getCommentCursor($cur);

            if ($cur->strField('comment_ip') === '') {
                $cur->setStrField('comment_ip', Http::realIP());
            }

            # --BEHAVIOR-- coreBeforeCommentCreate -- BlogInterface, Cursor
            $this->core->behavior()->callBehavior('coreBeforeCommentCreate', $this, $cur);

            $content = $cur->strField('comment_content');
            # --BEHAVIOR-- coreContentFilter -- string, array<int, array<int, string>> -- since 2.34
            $this->core->behavior()->callBehavior(
                'coreContentFilter',
                $cur->boolField('comment_trackback') ? 'trackback' : 'comment',
                [
                    [&$content, 'html'],
                ]
            );
            $cur->setStrField('comment_content', $content);

            $cur->insert();
            $this->core->db()->con()->unlock();
        } catch (Throwable $throwable) {
            $this->core->db()->con()->unlock();

            throw $throwable;
        }

        # --BEHAVIOR-- coreAfterCommentCreate -- BlogInterface, Cursor
        $this->core->behavior()->callBehavior('coreAfterCommentCreate', $this, $cur);

        $comment_id = $cur->intField('comment_id');
        if ($comment_id !== 0) {
            $this->triggerComment($comment_id);
            if ($cur->intField('comment_status') !== $this->core->status()->comment()::JUNK) {
                $this->triggerBlog();
            }
        }

        return $comment_id;
    }

    public function updComment($id, Cursor $cur): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_USAGE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to update comments.'));
        }

        $id = (int) $id;

        if ($id === 0) {
            throw new BadRequestException(__('No such comment ID.'));
        }

        $rs = $this->getComments(['comment_id' => $id]);

        if ($rs->isEmpty()) {
            throw new BadRequestException(__('No such comment ID.'));
        }

        #If user is only usage, we need to check the post's owner
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id) && $rs->strField('user_id') !== $this->core->auth()->userID()) {
            throw new UnauthorizedException(__('You are not allowed to update this comment.'));
        }

        $this->getCommentCursor($cur);

        $cur->setStrField('comment_upddt', date('Y-m-d H:i:s'));

        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_PUBLISH,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $cur->unsetField('comment_status');
        }

        # --BEHAVIOR-- coreBeforeCommentUpdate -- BlogInterface, Cursor, MetaRecord
        $this->core->behavior()->callBehavior('coreBeforeCommentUpdate', $this, $cur, $rs);

        $content = $cur->strField('comment_content');
        # --BEHAVIOR-- coreContentFilter -- string, array<int, array<int, string>> -- since 2.34
        $this->core->behavior()->callBehavior(
            'coreContentFilter',
            $cur->boolField('comment_trackback') ? 'trackback' : 'comment',
            [
                [&$content, 'html'],
            ]
        );
        $cur->setStrField('comment_content', $content);

        $sql = new UpdateStatement();
        $sql->where('comment_id = ' . $id);

        $sql->update($cur);

        # --BEHAVIOR-- coreAfterCommentUpdate -- BlogInterface, Cursor, MetaRecord
        $this->core->behavior()->callBehavior('coreAfterCommentUpdate', $this, $cur, $rs);

        $this->triggerComment($id);
        $this->triggerBlog();
    }

    public function updCommentStatus($id, $status): void
    {
        $this->updCommentsStatus($id, $status);
    }

    public function updCommentsStatus($ids, $status): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_PUBLISH,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__("You are not allowed to change this comment's status."));
        }

        $co_ids = $this->cleanIds($ids);
        $status = is_numeric($status) ? (int) $status : 0;

        $sql = new UpdateStatement();
        $sql
            ->ref($this->prefix . self::COMMENT_TABLE_NAME)
            ->set('comment_status = ' . $status)
            ->where('comment_id' . $sql->in($co_ids));

        $sqlIn = new SelectStatement();
        $sqlIn
            ->column('tp.post_id')
            ->from($sqlIn->as($this->prefix . self::POST_TABLE_NAME, 'tp'))
            ->where('tp.blog_id = ' . $sqlIn->quote($this->id));
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sqlIn->and('tp.user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $sql->and($sql->inSelect('post_id', $sqlIn));

        $sql->update();
        $this->triggerComments($co_ids);
        $this->triggerBlog();
    }

    public function delComment($id): void
    {
        $this->delComments($id);
    }

    public function delComments($ids): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_DELETE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to delete comments.'));
        }

        $co_ids = $this->cleanIds($ids);

        if ($co_ids === []) {
            throw new BadRequestException(__('No such comment ID.'));
        }

        # Retrieve posts affected by comments edition
        $affected_posts = [];
        $sql            = new SelectStatement();
        $sql
            ->column('post_id')
            ->from($this->prefix . self::COMMENT_TABLE_NAME)
            ->where('comment_id' . $sql->in($co_ids))
            ->group('post_id');

        $rs = $sql->select();
        if ($rs instanceof MetaRecord) {
            while ($rs->fetch()) {
                $affected_posts[] = $rs->intField('post_id');
            }
        }

        $sql = new DeleteStatement();
        $sql
            ->from($this->prefix . self::COMMENT_TABLE_NAME)
            ->where('comment_id' . $sql->in($co_ids));

        $sqlIn = new SelectStatement();
        $sqlIn
            ->column('tp.post_id')
            ->from($sqlIn->as($this->prefix . self::POST_TABLE_NAME, 'tp'))
            ->where('tp.blog_id = ' . $sqlIn->quote($this->id));
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sqlIn->and('tp.user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $sql->and($sql->inSelect('post_id', $sqlIn));

        $sql->delete();
        $this->triggerComments($co_ids, true, $affected_posts);
        $this->triggerBlog();
    }

    public function delJunkComments(): void
    {
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_DELETE,
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            throw new UnauthorizedException(__('You are not allowed to delete comments.'));
        }

        $sql = new DeleteStatement();
        $sql
            ->from($this->prefix . self::COMMENT_TABLE_NAME)
            ->where('comment_status = ' . $this->core->status()->comment()::JUNK);

        $sqlIn = new SelectStatement();
        $sqlIn
            ->column('tp.post_id')
            ->from($sqlIn->as($this->prefix . self::POST_TABLE_NAME, 'tp'))
            ->where('tp.blog_id = ' . $sqlIn->quote($this->id));
        if (!$this->core->auth()->check($this->core->auth()->makePermissions([
            $this->core->auth()::PERMISSION_CONTENT_ADMIN,
        ]), $this->id)) {
            $sqlIn->and('tp.user_id = ' . $sql->quote((string) $this->core->auth()->userID()));
        }

        $sql->and($sql->inSelect('post_id', $sqlIn));

        $sql->delete();
        $this->triggerBlog();
    }

    /**
     * Gets the comment Cursor.
     *
     * @param      Cursor     $cur    The comment Cursor
     *
     * @throws     BadRequestException
     */
    private function getCommentCursor(Cursor $cur): void
    {
        if ($cur->strField('comment_content') === '') {
            throw new BadRequestException(__('You must provide a comment.'));
        }

        if ($cur->strField('comment_author') === '') {
            throw new BadRequestException(__('You must provide an author name.'));
        }

        if ($cur->strField('comment_email') !== '' && !Text::isEmail($cur->strField('comment_email'))) {
            throw new BadRequestException(__('Email address is not valid.'));
        }

        if ($cur->strField('comment_site') !== '') {
            if (!preg_match('|^http(s?)://|i', $cur->strField('comment_site'), $matches)) {
                $cur->setStrField('comment_site', 'http://' . $cur->strField('comment_site'));
            } else {
                $cur->setStrField('comment_site', strtolower($matches[0]) . substr($cur->strField('comment_site'), strlen($matches[0])));
            }
        }

        if (is_null($cur->intField('comment_status', true))) {
            $cur->setIntField(
                'comment_status',
                $this->settings()->get('system')->getBool('comments_pub')
                    ? $this->core->status()->comment()::PUBLISHED
                    : $this->core->status()->comment()::UNPUBLISHED
            );
        }

        # Words list
        if ($cur->strField('comment_content') !== '') {
            $cur->setStrField('comment_words', implode(' ', Text::splitWords($cur->strField('comment_content'))));
        }
    }

    public function checkSleepmodeTimeout(bool $apply = true): bool
    {
        $sql  = new SelectStatement();
        $last = $sql
            ->column('post_upddt')
            ->from($this->prefix . self::POST_TABLE_NAME)
            ->where('blog_id = ' . $sql->quote($this->id))
            ->order('post_upddt DESC')
            ->limit(1)
            ->select();

        if (!$last instanceof MetaRecord || $last->isEmpty()) {
            return false;
        }

        $delay = $this->settings()->get('system')->getInt('sleepmode_timeout', false);

        if ($delay === 0 || (strtotime($last->strField('post_upddt')) + $delay) > time()) {
            return false;
        }

        if ($apply) {
            $this->settings()->get('system')->put('allow_comments', false);
            $this->settings()->get('system')->put('allow_trackbacks', false);
        }

        return true;
    }

    ///@}

    public function cleanIds($ids): array
    {
        $clean_ids = [];

        if (!is_array($ids) && !($ids instanceof ArrayObject)) {
            $ids = [$ids];
        }

        foreach ($ids as $id) {
            if (is_array($id) || ($id instanceof ArrayObject)) {
                $clean_ids = [...$clean_ids, ...$this->cleanIds($id)];
            } else {
                $id = is_numeric($id) ? abs((int) $id) : 0;

                if ($id !== 0) {
                    $clean_ids[] = (int) $id;
                }
            }
        }

        return $clean_ids;
    }
}
