BxDolAccountQuery.php 8.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) BoonEx Pty Limited - http://www.boonex.com/
  4. * CC-BY License - http://creativecommons.org/licenses/by/3.0/
  5. *
  6. * @defgroup TridentCore Trident Core
  7. * @{
  8. */
  9. /**
  10. * All queries related to account
  11. */
  12. class BxDolAccountQuery extends BxDolDb implements iBxDolSingleton
  13. {
  14. protected function __construct()
  15. {
  16. if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
  17. trigger_error ('Multiple instances are not allowed for the class: ' . get_class($this), E_USER_ERROR);
  18. parent::__construct();
  19. }
  20. /**
  21. * Prevent cloning the instance
  22. */
  23. public function __clone()
  24. {
  25. if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
  26. trigger_error('Clone is not allowed for the class: ' . get_class($this), E_USER_ERROR);
  27. }
  28. /**
  29. * Get singleton instance of the class
  30. */
  31. public static function getInstance()
  32. {
  33. if(!isset($GLOBALS['bxDolClasses'][__CLASS__]))
  34. $GLOBALS['bxDolClasses'][__CLASS__] = new BxDolAccountQuery();
  35. return $GLOBALS['bxDolClasses'][__CLASS__];
  36. }
  37. /**
  38. * Get account by specified field name and value.
  39. * It is for internal usage only.
  40. * Use other funtions to get account info, like getInfoById, etc.
  41. * @param string $sField database field name
  42. * @param mixed $sValue database field value
  43. * @return array with porfile info
  44. */
  45. protected function _getDataByField ($sField, $sValue)
  46. {
  47. $sSql = $this->prepare("SELECT * FROM `sys_accounts` WHERE `$sField` = ? LIMIT 1", $sValue);
  48. return $this->getRow($sSql);
  49. }
  50. /**
  51. * Get account info by id
  52. * @param int $iID account id
  53. * @return array with account info
  54. */
  55. public function getInfoById( $iID )
  56. {
  57. return $this->_getDataByField('id', (int)$iID);
  58. }
  59. /**
  60. * get account id by emial
  61. */
  62. public function getIdByEmail($sEmail)
  63. {
  64. return (int)$this->_getFieldByField('id', 'email', $sEmail);
  65. }
  66. /**
  67. * get account id by id
  68. */
  69. public function getIdById($iId)
  70. {
  71. return (int)$this->_getFieldByField('id', 'id', $iId);
  72. }
  73. /**
  74. * get first studio operator id
  75. */
  76. public function getStudioOperatorId()
  77. {
  78. return (int)$this->_getFieldByField('id', 'role', 3);
  79. }
  80. /**
  81. * Get account email by id
  82. * @param string $s search account by this id
  83. * @return account email
  84. */
  85. public function getEmail($iID)
  86. {
  87. return $this->_getFieldByField('email', 'id', (int)$iID);
  88. }
  89. /**
  90. * Get account password by id
  91. * @param string $s search account by this id
  92. * @return account password
  93. */
  94. public function getPassword($iID)
  95. {
  96. return $this->_getFieldByField('password', 'id', (int)$iID);
  97. }
  98. /**
  99. * Is account online by id
  100. * @param int $iId account id
  101. * @return account online status
  102. */
  103. public function isOnline($iId)
  104. {
  105. $sSql = $this->prepare("SELECT
  106. `ta`.`id`
  107. FROM `sys_accounts` AS `ta`
  108. INNER JOIN `sys_sessions` AS `ts` ON `ta`.`id`=`ts`.`user_id`
  109. WHERE
  110. `ta`.`id` = ? AND
  111. `ts`.`date` > (UNIX_TIMESTAMP() - 60 * ?)
  112. LIMIT 1", $iId, (int)getParam('sys_account_online_time'));
  113. return (int)$this->getOne($sSql) > 0;
  114. }
  115. /**
  116. * Update last logged in time
  117. * @param $sPasswordHash - password hash
  118. * @param $sSalt - pasword salt
  119. * @param $iAccountId - account id to update password for
  120. * @return number of affected rows
  121. */
  122. public function updatePassword($sPasswordHash, $sSalt, $iAccountId)
  123. {
  124. $sQuery = $this->prepare("UPDATE `sys_accounts` SET `password` = ?, `salt` = ? WHERE `id`= ?", $sPasswordHash, $sSalt, $iAccountId);
  125. return $this->query($sQuery);
  126. }
  127. /**
  128. * Update last logged in time
  129. * @param int $iID account id
  130. * @return number of affected rows
  131. */
  132. public function updateLoggedIn($iID)
  133. {
  134. return $this->_updateField ($iID, 'logged', time());
  135. }
  136. /**
  137. * Update language
  138. * @param int $iID account id
  139. * @return number of affected rows
  140. */
  141. public function updateLanguage($iID, $iLangId)
  142. {
  143. return $this->_updateField ($iID, 'lang_id', $iLangId);
  144. }
  145. /**
  146. * Update current profile id associated with account
  147. * @param int $iID account id
  148. * @param int $iProfileId set current profile id to this value
  149. * @return number of affected rows
  150. */
  151. public function updateCurrentProfile($iID, $iProfileId)
  152. {
  153. return $this->_updateField ($iID, 'profile_id', $iProfileId);
  154. }
  155. /**
  156. * Update 'email_confirmed' field.
  157. * @param int $isConfirmed - 0: mark email as unconfirmed, 1: as confirmed
  158. * @param int $iID - account id
  159. * @return number of affected rows
  160. */
  161. public function updateEmailConfirmed($isConfirmed, $iID)
  162. {
  163. return $this->_updateField ($iID, 'email_confirmed', $isConfirmed ? 1 : 0);
  164. }
  165. /**
  166. * Get account field by specified field name and value.
  167. * In most cases it is for internal usage only.
  168. * Use other funtions to get account info, like getIdByEmail, etc.
  169. * @param string $sFieldRequested database field name to return
  170. * @param string $sFieldSearch database field name to search for
  171. * @param mixed $sValue database field value
  172. * @return specified account field value
  173. */
  174. protected function _getFieldByField ($sFieldRequested, $sFieldSearch, $sValue)
  175. {
  176. $sSql = $this->prepare("SELECT `$sFieldRequested` FROM `sys_accounts` WHERE `$sFieldSearch` = ? LIMIT 1", $sValue);
  177. return $this->getOne($sSql);
  178. }
  179. /**
  180. * Update some field by account id
  181. * In most cases it is for internal usage only.
  182. * Use other funtions to get account info, like updateLogged, etc.
  183. * @param string $sFieldRequested database field name to return
  184. * @param string $sFieldSearch database field name to search for
  185. * @param mixed $sValue database field value
  186. * @return specified account field value
  187. */
  188. protected function _updateField ($iId, $sFieldForUpdate, $sValue)
  189. {
  190. $sSql = $this->prepare("UPDATE `sys_accounts` SET `$sFieldForUpdate` = ? WHERE `id` = ? LIMIT 1", $sValue, $iId);
  191. return $this->query($sSql);
  192. }
  193. /**
  194. * Delete account info by id
  195. * @param int $iID profile id
  196. * @return affected rows
  197. */
  198. public function delete($iID)
  199. {
  200. $sSql = $this->prepare("DELETE FROM `sys_accounts` WHERE `id` = ? LIMIT 1", $iID);
  201. return $this->query($sSql);
  202. }
  203. /**
  204. * Get account(s) by params
  205. * @param array $aParams browse params
  206. * @return array with account(s)
  207. */
  208. public function getAccounts($aParams)
  209. {
  210. $aMethod = array('name' => 'getAll', 'params' => array(0 => 'query'));
  211. $sFieldsClause = "`ta`.*";
  212. $sJoinClause = $sWhereClause = $sGroupClause = $sOrderClause = "";
  213. switch($aParams['type']) {
  214. case 'by_join_date':
  215. $aMethod['params'][1] = array(
  216. 'date' => $aParams['date']
  217. );
  218. $sWhereClause = " AND `ta`.`added` > :date AND `ta`.`added` < UNIX_TIMESTAMP()";
  219. break;
  220. }
  221. $sGroupClause = $sGroupClause ? "GROUP BY " . $sGroupClause : "";
  222. $sOrderClause = $sOrderClause ? "ORDER BY " . $sOrderClause : "";
  223. $aMethod['params'][0] = "SELECT
  224. " . $sFieldsClause . "
  225. FROM `sys_accounts` AS `ta`" . $sJoinClause . "
  226. WHERE 1" . $sWhereClause . " " . $sGroupClause . " " . $sOrderClause;
  227. return call_user_func_array(array($this, $aMethod['name']), $aMethod['params']);
  228. }
  229. /**
  230. * Search account profile by keyword
  231. */
  232. public function searchByTerm($sTerm, $iLimit)
  233. {
  234. $aBindings = array(
  235. 'system' => 'system',
  236. 'status' => BX_PROFILE_STATUS_ACTIVE,
  237. 'limit' => (int)$iLimit
  238. );
  239. $sWhere = '';
  240. $aFieldsQuickSearch = array('name', 'email');
  241. foreach ($aFieldsQuickSearch as $sField) {
  242. $aBindings[$sField] = '%' . $sTerm . '%';
  243. $sWhere .= " OR `c`.`$sField` LIKE :$sField ";
  244. }
  245. $sQuery = "SELECT `c`.`id` AS `content_id`, `p`.`account_id`, `p`.`id` AS `profile_id`, `p`.`status` AS `profile_status` FROM `sys_accounts` AS `c` INNER JOIN `sys_profiles` AS `p` ON (`p`.`content_id` = `c`.`id` AND `p`.`type` = :system) WHERE `p`.`status` = :status AND (0 $sWhere) ORDER BY `added` DESC LIMIT :limit";
  246. return $this->getAll($sQuery, $aBindings);
  247. }
  248. }
  249. /** @} */