<?php
$configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
include_once($configPath);
if (!empty($_SESSION["utente"]) && !empty($_GET["book"]) && is_numeric($_GET["book"]) && $_SESSION["utente"]->permission($radice)) {

    $book = sanitize_string($_GET["book"]);
    $ch = curl_init($config["docs"]["bookstackEndpoint"] . "/api/books/{$book}/compiled/pdf");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        "Authorization:Token " . $config["docs"]["token_id"] . ":" . $config["docs"]["token_secret"],
    ]);
    $result = curl_exec($ch);
    curl_close($ch);
    header("Content-type:application/pdf");
    echo $result;
}