BxDolFormQuery.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. bx_import('BxDolForm');
  10. /**
  11. * Database queries for forms.
  12. * @see BxDolForm
  13. */
  14. class BxDolFormQuery extends BxDolDb
  15. {
  16. protected $_aObject;
  17. protected static $TYPES_SET = array (
  18. 'select_multiple' => 1,
  19. 'checkbox_set' => 1,
  20. );
  21. protected static $TYPES_TRANSLATABLE = array (
  22. 'submit' => 1,
  23. 'reset' => 1,
  24. 'button' => 1,
  25. );
  26. public function __construct($aObject)
  27. {
  28. parent::__construct();
  29. $this->_aObject = $aObject;
  30. }
  31. static public function getFormObject ($sObject)
  32. {
  33. $oDb = BxDolDb::getInstance();
  34. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `object` = ?", $sObject);
  35. return $oDb->fromMemory('sys_objects_form_' . $sObject, 'getRow', $sQuery);
  36. }
  37. static public function getNestedFormObjects ($sParentObject)
  38. {
  39. $oDb = BxDolDb::getInstance();
  40. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `parent_form` = ?", $sParentObject);
  41. return $oDb->fromMemory('sys_objects_form_' . $sParentObject . '_nested', 'getAll', $sQuery);
  42. }
  43. static public function deleteDataFromNestedForm ($sTableName, $iContentId)
  44. {
  45. $oDb = BxDolDb::getInstance();
  46. $sQuery = $oDb->prepare("DELETE FROM `" . $sTableName ."` WHERE `content_id` = ?", $iContentId);
  47. $oDb->query($sQuery);
  48. }
  49. static public function getFormArray ($sObject, $sDisplayName)
  50. {
  51. $oDb = BxDolDb::getInstance();
  52. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `active` = 1 AND `object` = ?", $sObject);
  53. $aObject = $oDb->fromMemory('sys_objects_form_' . $sObject, 'getRow', $sQuery);
  54. if (!$aObject || !is_array($aObject))
  55. return false;
  56. $sQuery = $oDb->prepare("SELECT * FROM `sys_form_displays` WHERE `object` = ? AND `display_name` = ?", $sObject, $sDisplayName);
  57. $aDisplay = $oDb->fromMemory('sys_form_displays_' . $sObject . '_' . $sDisplayName, 'getRow', $sQuery);
  58. if (!$aDisplay || !is_array($aDisplay))
  59. return false;
  60. $aForm = array ();
  61. // form attrs
  62. if (!empty($aObject['form_attrs']))
  63. $aAddFormAttrs = unserialize($aObject['form_attrs']);
  64. $aDefaultsFormAttrs = array(
  65. 'action' => $aObject['action'],
  66. 'name' => $aObject['object'],
  67. 'id' => $aObject['object'],
  68. );
  69. $aForm['form_attrs'] = array_merge($aDefaultsFormAttrs, !empty($aAddFormAttrs) && is_array($aAddFormAttrs) ? $aAddFormAttrs : array());
  70. // form action
  71. if (!empty($aForm['form_attrs']['action']) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'http://', 7) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'https://', 8))
  72. $aForm['form_attrs']['action'] = BX_DOL_URL_ROOT . BxDolPermalinks::getInstance()->permalink($aForm['form_attrs']['action']);
  73. // params
  74. if (!empty($aObject['params']))
  75. $aAddFormParams = unserialize($aObject['params']);
  76. $mixedSubminName = '';
  77. if (!empty($aObject['submit_name'])) {
  78. $mixedSubminName = @unserialize($aObject['submit_name']);
  79. if($mixedSubminName === false)
  80. $mixedSubminName = $aObject['submit_name'];
  81. }
  82. $aDefaultsFormParams = array(
  83. 'db' => array(
  84. 'submit_name' => $mixedSubminName,
  85. 'table' => $aObject['table'],
  86. 'key' => $aObject['key'],
  87. 'uri' => $aObject['uri'],
  88. 'uri_title' => $aObject['uri_title'],
  89. ),
  90. 'object' => $sObject,
  91. 'display' => $sDisplayName,
  92. 'view_mode' => $aDisplay['view_mode'],
  93. );
  94. $aForm['params'] = array_merge_recursive($aDefaultsFormParams, !empty($aAddFormParams) && is_array($aAddFormParams) ? $aAddFormParams : array());
  95. // form inputs
  96. $sQuery = $oDb->prepare("SELECT `i`.*, `d`.`visible_for_levels` FROM `sys_form_inputs` AS `i` INNER JOIN `sys_form_display_inputs` AS `d` ON (`d`.`input_name` = `i`.`name`) WHERE `d`.`active` = 1 AND `d`.`display_name` = ? AND `i`.`object` = ? ORDER BY `d`.`order` ASC", $aDisplay['display_name'], $sObject);
  97. $aInputs = $oDb->getAllWithKey($sQuery, 'name');
  98. $aForm['inputs'] = array();
  99. $aInputSets = array();
  100. foreach ($aInputs as $a) {
  101. // main attributes
  102. $aInput = array (
  103. 'id' => $a['id'],
  104. 'type' => $a['type'],
  105. 'name' => $a['name'],
  106. 'caption_system_src' => $a['caption_system'],
  107. 'caption_src' => $a['caption'],
  108. 'caption' => _t($a['caption']),
  109. 'info_src' => $a['info'] ? $a['info'] : '',
  110. 'info' => $a['info'] ? _t($a['info']) : '',
  111. 'help_src' => $a['help'] ? $a['help'] : '',
  112. 'help' => $a['help'] ? _t($a['help']) : '',
  113. 'required' => $a['required'] ? true : false,
  114. 'unique' => $a['unique'] ? true : false,
  115. 'collapsed' => $a['collapsed'] ? true : false,
  116. 'privacy' => $a['privacy'] ? true : false,
  117. 'rateable' => $a['rateable'],
  118. 'html' => $a['html'],
  119. 'attrs' => $a['attrs'] ? unserialize($a['attrs']) : false,
  120. 'tr_attrs' => $a['attrs_tr'] ? unserialize($a['attrs_tr']) : false,
  121. 'attrs_wrapper' => $a['attrs_wrapper'] ? unserialize($a['attrs_wrapper']) : false,
  122. 'visible_for_levels' => $a['visible_for_levels'],
  123. );
  124. // if type is input set stop to process other attribnutes
  125. if ('input_set' == $a['type']) {
  126. $aForm['inputs'][$a['name']] = $aInput;
  127. $aInputSets[] = $a['name'];
  128. continue;
  129. }
  130. // default value
  131. if (!empty($a['value']))
  132. $aInput['value'] = isset(self::$TYPES_TRANSLATABLE[$aInput['type']]) ? _t($a['value']) : $a['value'];
  133. if (!empty($a['values'])) {
  134. $aInput['values_src'] = $a['values'];
  135. if (0 === strncmp(BX_DATA_LISTS_KEY_PREFIX, $a['values'], 2)) {
  136. $aInput['values_list_name'] = trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' ');
  137. $aInput['values'] = self::getDataItems(trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' '), isset(self::$TYPES_SET[$aInput['type']]));
  138. } else {
  139. $aInput['values'] = unserialize($a['values']);
  140. }
  141. }
  142. $aInput['checked'] = $a['checked'] ? true : false;
  143. // checker function options
  144. if (!empty($a['checker_func'])) {
  145. $aChecker = array ('func' => $a['checker_func']);
  146. if ($a['checker_error'])
  147. $aChecker['error'] = _t($a['checker_error']);
  148. if ($a['checker_params'])
  149. $aChecker['params'] = unserialize($a['checker_params']);
  150. $aInput['checker'] = $aChecker;
  151. }
  152. // db processing options
  153. if (!empty($a['db_pass'])) {
  154. $aDb = array ('pass' => $a['db_pass']);
  155. if ($a['db_params'])
  156. $a['params'] = unserialize($a['db_params']);
  157. $aInput['db'] = $aDb;
  158. }
  159. $aForm['inputs'][$a['name']] = $aInput;
  160. }
  161. foreach ($aInputSets as $sName) {
  162. $a = explode(',', $aInputs[$sName]['values']);
  163. foreach ($a as $sInputName) {
  164. if (!isset($aForm['inputs'][$sInputName]))
  165. continue;
  166. $aForm['inputs'][$sName][] = $aForm['inputs'][$sInputName];
  167. unset($aForm['inputs'][$sInputName]);
  168. }
  169. }
  170. $aForm['override_class_name'] = $aObject['override_class_name'];
  171. $aForm['override_class_file'] = $aObject['override_class_file'];
  172. return $aForm;
  173. }
  174. static public function getDataItems($sKey, $isUseForSet = false, $sUseValues = BX_DATA_VALUES_DEFAULT)
  175. {
  176. $oDb = BxDolDb::getInstance();
  177. if(!in_array($sUseValues, array(BX_DATA_VALUES_DEFAULT, BX_DATA_VALUES_ADDITIONAL, BX_DATA_VALUES_ALL)))
  178. $sUseValues = BX_DATA_VALUES_DEFAULT;
  179. $sQuery = $oDb->prepare("SELECT `Value`, `LKey`, `LKey2`, `Data` FROM `sys_form_pre_values` WHERE `Key` = ? ORDER BY `Order` ASC", $sKey);
  180. if($sUseValues == BX_DATA_VALUES_ALL)
  181. return $oDb->getAllWithKey($sQuery, 'Value');
  182. $a = $oDb->getAll($sQuery);
  183. $iMaxValue = 0;
  184. if ($isUseForSet)
  185. $iMaxValue = log(BX_DOL_INT_MAX, 2) + 1;
  186. $aRet = array();
  187. foreach ($a as $r) {
  188. if ($isUseForSet && (!is_numeric($r['Value']) || $r['Value'] < 1 || $r['Value'] > $iMaxValue))
  189. continue;
  190. $aRet[$r['Value']] = BX_DATA_VALUES_ADDITIONAL == $sUseValues && !empty($r[BX_DATA_VALUES_ADDITIONAL]) ? _t($r[BX_DATA_VALUES_ADDITIONAL]) : _t($r[BX_DATA_VALUES_DEFAULT]);
  191. }
  192. return $aRet;
  193. }
  194. static public function fieldCheckUnique($sTable, $sField, $sValue)
  195. {
  196. return uriCheckUniq($sValue, $sTable, $sField);
  197. }
  198. static public function fieldGetValue($sTable, $sField, $sFieldKey, $sFieldKeyValue)
  199. {
  200. return BxDolDb::getInstance()->getOne("SELECT `" . $sField . "` FROM `" . $sTable . "` WHERE `" . $sFieldKey . "`=:field_key LIMIT 1", array(
  201. 'field_key' => $sFieldKeyValue
  202. ));
  203. }
  204. static public function getInputByName($sObject, $sName)
  205. {
  206. return BxDolDb::getInstance()->getRow("SELECT * FROM `sys_form_inputs` WHERE `object`=:object AND `name`=:name LIMIT 1", array(
  207. 'object' => $sObject,
  208. 'name' => $sName
  209. ));
  210. }
  211. static public function getInputPrivacy($iInputId, $iAuthorId, $sPrivacyField = '')
  212. {
  213. $sMethod = 'getRow';
  214. $sSelectClause = '*';
  215. if(!empty($sPrivacyField)) {
  216. $sMethod = 'getOne';
  217. $sSelectClause = '`' . $sPrivacyField . '`';
  218. }
  219. return BxDolDb::getInstance()->$sMethod("SELECT " . $sSelectClause . " FROM `sys_form_inputs_privacy` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", array(
  220. 'input_id' => $iInputId,
  221. 'author_id' => $iAuthorId,
  222. ));
  223. }
  224. static public function setInputPrivacy($iInputId, $iAuthorId, $sPrivacyField, $sPrivacyValue)
  225. {
  226. $oDb = BxDolDb::getInstance();
  227. $sTable = 'sys_form_inputs_privacy';
  228. $aBindingsSet = array(
  229. $sPrivacyField => $sPrivacyValue
  230. );
  231. $aBindingsWhere = array(
  232. 'input_id' => $iInputId,
  233. 'author_id' => $iAuthorId,
  234. );
  235. $bResult = false;
  236. if((int)$oDb->getOne("SELECT `id` FROM `" . $sTable . "` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", $aBindingsWhere) != 0)
  237. $bResult = $oDb->query("UPDATE `" . $sTable . "` SET " . $oDb->arrayToSQL($aBindingsSet) . " WHERE " . $oDb->arrayToSQL($aBindingsWhere, ' AND ')) !== false;
  238. else
  239. $bResult = (int)$oDb->query("INSERT `" . $sTable . "` SET " . $oDb->arrayToSQL(array_merge($aBindingsSet, $aBindingsWhere))) > 0;
  240. return $bResult;
  241. }
  242. static public function addFormField($sObjectForm, $sFieldName, $iContentId, $iAuthorId, $sModuleName, $iNestedContentId = 0)
  243. {
  244. $oDb = BxDolDb::getInstance();
  245. $aBindings = array(
  246. 'object_form' => $sObjectForm,
  247. 'field_name' => $sFieldName,
  248. 'content_id' => $iContentId,
  249. 'author_id' => $iAuthorId,
  250. 'module' => $sModuleName,
  251. 'nested_content_id' => $iNestedContentId
  252. );
  253. $oDb->query("INSERT `sys_form_fields_ids` SET `object_form`=:object_form, `field_name`=:field_name, `content_id`=:content_id, `author_id`=:author_id, `module`=:module, nested_content_id=:nested_content_id", $aBindings);
  254. }
  255. static public function getFormField($sObjectForm, $sFieldName, $iContentId, $iNestedContentId = 0)
  256. {
  257. $oDb = BxDolDb::getInstance();
  258. $aBindings = array(
  259. 'object_form' => $sObjectForm,
  260. 'field_name' => $sFieldName,
  261. 'content_id' => $iContentId,
  262. 'nested_content_id' => $iNestedContentId
  263. );
  264. return $oDb->getOne("SELECT `id` FROM `sys_form_fields_ids` WHERE `object_form`=:object_form AND `field_name`=:field_name AND `content_id`=:content_id AND nested_content_id=:nested_content_id", $aBindings);
  265. }
  266. static public function removeFormField($sObjectForm, $iContentId = 0)
  267. {
  268. $oDb = BxDolDb::getInstance();
  269. if ($iContentId > 0){
  270. $aBindings = array(
  271. 'object_form' => $sObjectForm,
  272. 'content_id' => $iContentId
  273. );
  274. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `object_form` = :object_form AND `content_id` = :content_id", $aBindings);
  275. }
  276. else{
  277. $aBindings = array(
  278. 'object_form' => $sObjectForm
  279. );
  280. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `object_form` = :object_form", $aBindings);
  281. }
  282. }
  283. static public function removeFormFields($sModule)
  284. {
  285. $oDb = BxDolDb::getInstance();
  286. $aBindings = array(
  287. 'module' => $sModule,
  288. );
  289. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `module` = :module", $aBindings);
  290. }
  291. public function getFormInputs()
  292. {
  293. $sQuery = $this->prepare("SELECT * FROM `sys_form_inputs` WHERE `object` = ? ORDER BY `order` ASC", $this->_aObject['object']);
  294. return $this->getAll($sQuery);
  295. }
  296. }
  297. /** @} */