Ego_Input_Store.php

gehe zur Dokumentation dieser Datei

<?php
require_once('base/Ego_Store.php');

class Ego_Input_Store extends Ego_Store {
    protected $name = '';

    protected $value = '';

    protected $data = null;

    public function __construct($params = array(), $query = array()) {
        parent::__construct($params, $query);

        $this->name = str_replace(
            array('*', '. . '),
            array('%', ''),
            (string) $_REQUEST['name']
        );
        $this->value = (string) $_REQUEST['value'];
        $this->data = $_REQUEST['data'];
    }

    public function getData() {
        switch ($this->data) {
            // Benutzer ermitteln
            case 'user':
                $db = new_db_connection();

                // Nur anzeigen, wenn der Benutzer einer der übergebenen Gruppen/Rollen angehört
                $join = array();
                $bind = array();
                $where = '';
                if ($this->params['rights']) {
                    $join[] = 'egotec_user_group ON egotec_user.user_id = egotec_user_group.user_id';
                    $rights_or = array();
                    foreach (explode(';', $this->params['rights']) as $n => $right) {
                        list($group, $role) = explode(',', $right);
                        $rights_or[] = '(egotec_user_group.group_id = :group_id'.$n.' AND egotec_user_group.role_id = :role_id'.$n.')';
                        $bind['group_id'.$n] = $group;
                        $bind['role_id'.$n] = $role;
                    }
                    $where = '('.implode(' OR ', $rights_or).') AND ';
                }

                if (empty($this->value)) {
                    if (!$this->isValidSearch($this->name)) {
                        return;
                    }
                    $query = array(
                        'table' => 'egotec_user',
                        'where' => $where.'egotec_user.deleted = 0 AND LOWER(egotec_user.username) LIKE :username',
                        'join' => $join,
                        'order' => 'egotec_user.username ASC',
                        'bind' => array_merge($bind, array(
                            'username' => mb_strtolower($this->name)
                        ))
                    );
                    if ($this->limit > 0) {
                        $query['limit'] = "{$this->start},{$this->limit}";
                    }
                    $db->select($this->buildQuery($query));
                } else {
                    $db->select($this->buildQuery(array(
                        'table' => 'egotec_user',
                        'where' => $where.'egotec_user.user_id = :user_id',
                        'join' => $join,
                        'bind' => array_merge($bind, array(
                            'user_id' => $this->value
                        ))
                    )));
                }
                while ($db->nextRecord()) {
                    $user = new User_SQL($db->Record['user_id']);

                    // Nur anzeigen, wenn man berechtigt ist diesen Benutzer zu sehen
                    if (
                        empty($this->value)
                        && !$this->params['all_users']
                        && !$GLOBALS['auth']->hasSuperuserPermission()
                    ) {
                        $found = false;
                        foreach ($user->getGroupRoleRelations() as $group => $roles) {
                            foreach (explode(',', $roles) as $role) {
                                if ($GLOBALS['auth']->hasPermission($group, $role)) {
                                    $found = true;
                                    break 2;
                                }
                            }
                        }
                        if (!$found) {
                            continue;
                        }
                    }

                    $icon = $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/sitemap_img/';
                    if ($user->isInactive()) {
                        continue;
                    } else {
                        // Nur Benutzer, die sich im Adminbereich anmelden dürfen
                        if ($this->params['no_admin'] && $user->field['no_admin']) {
                            continue;
                        }

                        // Nur Benutzer, die sich auf dem Liveserver anmelden dürfen
                        if ($this->params['liveserver'] && $GLOBALS['egotec_conf']['liveserver'] && !$user->extra['liveserver']) {
                            continue;
                        }

                        if ($user->extra['gender'] == 'female') {
                            $icon .= 'user_female.png';
                        } else {
                            $icon .= 'user_male.png';
                        }
                    }
                    $this->addItem(array(
                        self::IDENTIFIER => $db->Record['user_id'],
                        'name' => $user->getFullname(),
                        'icon' => $icon
                    ));
                }
                break;

            // Gruppe ermitteln
            case 'group':
                $db = new_db_connection();
                if (empty($this->value)) {
                    if (trim($this->name, '%') != '') {
                        // Suche
                        if (!$this->isValidSearch($this->name)) {
                            return;
                        }

                        $where = '';
                        if (!$GLOBALS['auth']->hasSuperuserPermission()) {
                            // Nur die Gruppen anzeigen denen man selbst angehört
                            $groups = $GLOBALS['auth']->user->getAllGroups();
                            $group_ids = array();
                            foreach ($groups as $group) {
                                $group_ids[] = $group->field['group_id'];
                            }
                            $where = "group_id IN ('" . implode("','", $group_ids) . "') AND ";
                        }

                        $query = array(
                            'table' => 'egotec_group',
                            'where' => $where . 'LOWER(group_name) LIKE :group_name',
                            'order' => 'links ASC',
                            'bind' => array(
                                'group_name' => mb_strtolower($this->name)
                            )
                        );
                        if ($this->limit > 0) {
                            $query['limit'] = "{$this->start},{$this->limit}";
                        }
                        $db->select($this->buildQuery($query));
                    } else {
                        // Alle Gruppen
                        require_once('rights/Group_SQL.php');
                        $parent = new Group_SQL($GLOBALS['egotec_conf']['superuser']['group']);

                        $group_ids = array();
                        if (!$GLOBALS['auth']->hasSuperuserPermission()) {
                            // Nur die Gruppen anzeigen denen man selbst angehört
                            $groups = $GLOBALS['auth']->user->getAllGroups();
                            foreach ($groups as $group) {
                                $group_ids[] = $group->field['group_id'];
                            }
                        }

                        // Gruppe "Alle" ist auswählbar
                        if ($this->params['all_group']) {
                            $this->addItem(array(
                                self::IDENTIFIER => '*',
                                'name' => '(' . $GLOBALS['auth']->translate('Alle') . ')',
                                'icon' => $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/img/16x16/user-unknown2.png',
                                'indent' => 0
                            ));
                        }

                        $this->getNS($parent, $group_ids, 'group_id', 'group_name', 'groups.png');
                        return;
                    }
                } else {
                    $db->select($this->buildQuery(array(
                        'table' => 'egotec_group',
                        'where' => 'group_id = :group_id',
                        'bind' => array(
                            'group_id' => $this->value
                        )
                    )));
                }
                while ($db->nextRecord()) {
                    $group = new Group_SQL($db->Record['group_id'], $db->Record);
                    $name = $db->Record['group_name'];
                    $this->addItem(array(
                        self::IDENTIFIER => $db->Record['group_id'],
                        'name' => $name,
                        'icon' => $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/img/16x16/groups.png',
                        'indent' => $db->Record['tiefe'],
                        'hover' => ltrim($group->getPath(true).'/'.$name, '/')
                    ));
                }
                break;

            // Rolle ermitteln
            case 'role':
                $db = new_db_connection();
                if (empty($this->value)) {
                    if (trim($this->name, '%') != '') {
                        // Suche
                        if (!$this->isValidSearch($this->name)) {
                            return;
                        }

                        $where = '';
                        if (!$GLOBALS['auth']->hasSuperuserPermission()) {
                            // Nur die Rollen anzeigen denen man selbst angehört
                            $roles = $GLOBALS['auth']->user->getAllRoles();
                            $role_ids = array();
                            foreach ($roles as $role) {
                                $role_ids[] = $role->field['role_id'];
                            }
                            $where = "role_id IN ('".implode("','", $role_ids)."') AND ";
                        }

                        $query = array(
                            'table' => 'egotec_role',
                            'where' => $where.'LOWER(role_name) LIKE :role_name',
                            'order' => 'links ASC',
                            'bind' => array(
                                'role_name' => mb_strtolower($this->name)
                            )
                        );
                        if ($this->limit > 0) {
                            $query['limit'] = "{$this->start},{$this->limit}";
                        }
                        $db->select($this->buildQuery($query));
                    } else {
                        // Alle Rollen
                        require_once('rights/Role_SQL.php');
                        $parent = new Role_SQL($GLOBALS['egotec_conf']['superuser']['role']);

                        $role_ids = array();
                        if (!$GLOBALS['auth']->hasSuperuserPermission()) {
                            // Nur die Rollen anzeigen denen man selbst angehört
                            $roles = $GLOBALS['auth']->user->getAllRoles();
                            $role_ids = array();
                            foreach ($roles as $role) {
                                $role_ids[] = $role->field['role_id'];
                            }
                        }

                        $this->getNS($parent, $role_ids, 'role_id', 'role_name', 'roles.png');
                        return;
                    }
                } else {
                    $db->select($this->buildQuery(array(
                        'table' => 'egotec_role',
                        'where' => 'role_id = :role_id',
                        'bind' => array(
                            'role_id' => $this->value
                        )
                    )));
                }
                while ($db->nextRecord()) {
                    $role = new Role_SQL($db->Record['role_id'], $db->Record);
                    $name = $db->Record['role_name'];
                    $this->addItem(array(
                        self::IDENTIFIER => $db->Record['role_id'],
                        'name' => $name,
                        'icon' => $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/img/16x16/roles.png',
                        'indent' => $db->Record['tiefe'],
                        'hover' => ltrim($role->getPath(true).'/'.$name, '/')
                    ));
                }
                break;

            // Seite ermitteln
            case 'page':
                if (empty($this->value)) {
                    if (!$this->isValidSearch($this->name)) {
                        return;
                    }

                    if (!isset($this->params['query'])) {
                        $this->params['query'] = array();
                    }
                    if (!isset($this->params['query']['bind'])) {
                        $this->params['query']['bind'] = array();
                    }
                    if (!isset($this->params['param'])) {
                        $this->params['param'] = array();
                    }
                    if ($this->limit > 0) {
                        $this->params['query']['limit'] = "{$this->start},{$this->limit}";
                    }
                    $this->params['query']['where'] = ($this->params['query']['where']
                        ? $this->params['query']['where'] . ' AND '
                        : '')."LOWER(name) LIKE :name";
                    $this->params['query']['bind']['name'] = mb_strtolower($this->name);
                    $this->site->setRights(array('edit', 'view'));
                    if ($parent = $this->site->getPage($this->params['id'])) {
                        $pages = $parent->getChildren(
                            $this->buildQuery($this->params['query']),
                            $this->params['param']
                        );
                    } else {
                        $pages = array();
                    }
                } else {
                    $pages = array(Ego_System::urltopage($this->value));
                }
                foreach ($pages as $page) {
                    if ($page) {
                        $this->addItem(array(
                            self::IDENTIFIER => ltrim($page->getUrl(array('nonactive' => false)), $GLOBALS['egotec_conf']['url_dir']),
                            'name' => $page->field['name'],
                            'icon' => $page->getIconUrl()
                        ));
                    }
                }
                break;

            // Seitentyp ermitteln
            case 'types':
                $search = str_replace(array('*', '%'), '', $this->name);
                $site = $this->params['from'] ? new Site($this->params['from']) : ($this->site ? $this->site : new Site());
                $types = $this->params['type_list'] ? $this->params['type_list'] : $site->getTypes();
                foreach ($types as $type) {
                    if (
                        $site->admin['enabled_types'][$type['type']]
                        || !$type['global']
                        || $type['system']
                    ) {
                        if (empty($this->value)) {
                            if (
                                !empty($search)
                                && (empty($type['active'])
                                    || mb_stripos($type['fullname'], $search) === false)
                            ) {
                                continue;
                            }
                        } elseif ($type['type'] != $this->value) {
                            continue;
                        }

                        $this->addItem(array(
                            self::IDENTIFIER => $type['type'],
                            'name' => Ego_System::filterNonUtf8($type['fullname']),
                            'label' => Ego_System::filterNonUtf8(empty($search) ? $type['name'] : ''),
                            'icon' => $this->page && $this->page->field['type'] == $type['type']
                                ? $this->page->getIconUrl()
                                : ($type['icon']
                                    ? $type['icon']
                                    : $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/img/16x16/'
                                        .($type['type'] == 'multimedia/category'
                                            ? 'folder.png'
                                            : 'page.png')
                                ),
                            'disabled' => empty($type['active']) && $this->page->canChangeType(),
                            'indent' => empty($search) ? $type['depth'] : 0
                        ));
                        if (!empty($this->value)) {
                            break;
                        }
                    }
                }
        }
    }

    private function getNS($parent, $ids, $id_key, $name_key, $icon) {
        if (empty($ids) || in_array($parent->field[$id_key], $ids)) {
            $this->addItem(array(
                self::IDENTIFIER => $parent->field[$id_key],
                'name' => $parent->field[$name_key],
                'icon' => $GLOBALS['egotec_conf']['url_dir'].'bin/admin_skin/egotec/img/16x16/'.$icon,
                'indent' => $parent->field['tiefe'],
                'hover' => ltrim($parent->getPath(true).'/'.$parent->field[$name_key], '/')
            ));
        }

        foreach ($parent->getChildren() as $child) {
            $this->getNS($child, $ids, $id_key, $name_key, $icon);
        }
    }
}
?>