BxDolAccountQuery.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. /**
  10. * All queries related to account
  11. */
  12. class BxDolAccountQuery extends BxDolDb implements iBxDolSingleton
  13. {
  14. protected function __construct()
  15. {
  16. if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
  17. trigger_error ('Multiple instances are not allowed for the class: ' . get_class($this), E_USER_ERROR);
  18. parent::__construct();
  19. }
  20. /**
  21. * Prevent cloning the instance
  22. */
  23. public function __clone()
  24. {
  25. if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
  26. trigger_error('Clone is not allowed for the class: ' . get_class($this), E_USER_ERROR);
  27. }
  28. /**
  29. * Get singleton instance of the class
  30. */
  31. public static function getInstance()
  32. {
  33. if(!isset($GLOBALS['bxDolClasses'][__CLASS__]))
  34. $GLOBALS['bxDolClasses'][__CLASS__] = new BxDolAccountQuery();
  35. return $GLOBALS['bxDolClasses'][__CLASS__];
  36. }
  37. public function getOperators ()
  38. {
  39. $sSql = $this->prepare("SELECT `id` FROM `sys_accounts` WHERE `role`&" . BX_DOL_ROLE_ADMIN);
  40. return $this->getColumn($sSql);
  41. }
  42. /**
  43. * Get account by specified field name and value.
  44. * It is for internal usage only.
  45. * Use other funtions to get account info, like getInfoById, etc.
  46. * @param string $sField database field name
  47. * @param mixed $sValue database field value
  48. * @return array with porfile info
  49. */
  50. protected function _getDataByField ($sField, $sValue)
  51. {
  52. $sSql = $this->prepare("SELECT * FROM `sys_accounts` WHERE `$sField` = ? LIMIT 1", $sValue);
  53. return $this->getRow($sSql);
  54. }
  55. /**
  56. * Get account info by id
  57. * @param int $iID account id
  58. * @return array with account info
  59. */
  60. public function getInfoById( $iID )
  61. {
  62. return $this->_getDataByField('id', (int)$iID);
  63. }
  64. /**
  65. * get account id by emial
  66. */
  67. public function getIdByEmail($sEmail)
  68. {
  69. return (int)$this->_getFieldByField('id', 'email', $sEmail);
  70. }
  71. /**
  72. * get account id by phone
  73. */
  74. public function getIdByPhone($sPhone)
  75. {
  76. return (int)$this->_getFieldByField('id', 'phone', $sPhone);
  77. }
  78. /**
  79. * get account id by id
  80. */
  81. public function getIdById($iId, $bClearCache = false)
  82. {
  83. $sKey = 'BxDolAccountQuery::getIdById' . $iId;
  84. if ($bClearCache)
  85. $this->cleanMemory($sKey);
  86. $sSql = $this->prepare("SELECT `id` FROM `sys_accounts` WHERE `id` = ? LIMIT 1", $iId);
  87. $bResult = $this->fromMemory($sKey, 'getOne', $sSql);
  88. if (!$bResult)
  89. $this->cleanMemory($sKey);
  90. return $bResult;
  91. }
  92. /**
  93. * get first studio operator id
  94. */
  95. public function getStudioOperatorId()
  96. {
  97. return (int)$this->_getFieldByField('id', 'role', 3);
  98. }
  99. /**
  100. * Get account email by id
  101. * @param string $s search account by this id
  102. * @return account email
  103. */
  104. public function getEmail($iID)
  105. {
  106. return $this->_getFieldByField('email', 'id', (int)$iID);
  107. }
  108. /**
  109. * Get account password by id
  110. * @param string $s search account by this id
  111. * @return account password
  112. */
  113. public function getPassword($iID)
  114. {
  115. return $this->_getFieldByField('password', 'id', (int)$iID);
  116. }
  117. /**
  118. * Is account online by id
  119. * @param int $iId account id
  120. * @return account online status
  121. */
  122. public function isOnline($iId)
  123. {
  124. $sSql = $this->prepare("SELECT
  125. `ta`.`id`
  126. FROM `sys_accounts` AS `ta`
  127. INNER JOIN `sys_sessions` AS `ts` ON `ta`.`id`=`ts`.`user_id`
  128. WHERE
  129. `ta`.`id` = ? AND
  130. `ts`.`date` > (UNIX_TIMESTAMP() - 60 * ?)
  131. LIMIT 1", $iId, (int)getParam('sys_account_online_time'));
  132. return (int)$this->getOne($sSql) > 0;
  133. }
  134. /**
  135. * Update last logged in time
  136. * @param $sPasswordHash - password hash
  137. * @param $sSalt - pasword salt
  138. * @param $iAccountId - account id to update password for
  139. * @return number of affected rows
  140. */
  141. public function updatePassword($sPasswordHash, $sSalt, $iAccountId)
  142. {
  143. $sQuery = $this->prepare("UPDATE `sys_accounts` SET `password` = ?, `salt` = ? WHERE `id`= ?", $sPasswordHash, $sSalt, $iAccountId);
  144. return $this->query($sQuery);
  145. }
  146. /**
  147. * Update last logged in time
  148. * @param int $iID account id
  149. * @return number of affected rows
  150. */
  151. public function updateLoggedIn($iID)
  152. {
  153. $sQuery = $this->prepare("UPDATE `sys_accounts` SET `logged` = ?, `ip` = ? WHERE `id`= ?", time(), getVisitorIP(), $iID);
  154. return $this->query($sQuery);
  155. }
  156. /**
  157. * Update language
  158. * @param int $iID account id
  159. * @return number of affected rows
  160. */
  161. public function updateLanguage($iID, $iLangId)
  162. {
  163. return $this->_updateField ($iID, 'lang_id', $iLangId);
  164. }
  165. /**
  166. * Update current profile id associated with account
  167. * @param int $iID account id
  168. * @param int $iProfileId set current profile id to this value
  169. * @return number of affected rows
  170. */
  171. public function updateCurrentProfile($iID, $iProfileId)
  172. {
  173. if ($bResult = $this->_updateField ($iID, 'profile_id', $iProfileId))
  174. $this->cleanMemory('BxDolProfileQuery::getCurrentProfileByAccount');
  175. return $bResult;
  176. }
  177. /**
  178. * Update 'email_confirmed' field.
  179. * @param int $isConfirmed - 0: mark email as unconfirmed, 1: as confirmed
  180. * @param int $iID - account id
  181. * @return number of affected rows
  182. */
  183. public function updateEmailConfirmed($isConfirmed, $iID)
  184. {
  185. return $this->_updateField ($iID, 'email_confirmed', $isConfirmed ? 1 : 0);
  186. }
  187. /**
  188. * Update 'phone_confirmed' field.
  189. * @param int $isConfirmed - 0: mark phone as unconfirmed, 1: as confirmed
  190. * @param int $iID - account id
  191. * @return number of affected rows
  192. */
  193. public function updatePhoneConfirmed($isConfirmed, $iID)
  194. {
  195. return $this->_updateField ($iID, 'phone_confirmed', $isConfirmed ? 1 : 0);
  196. }
  197. /**
  198. * Update 'phone' field.
  199. * @param int $sPhone - phone number
  200. * @param int $iID - account id
  201. * @return number of affected rows
  202. */
  203. public function updatePhone($sPhone, $iID)
  204. {
  205. $sSql = $this->prepare("UPDATE `sys_accounts` SET `phone` = ?, `phone_confirmed` = 0 WHERE `id` = ? LIMIT 1", $sPhone, $iID);
  206. return $this->query($sSql);
  207. }
  208. /**
  209. * Get account field by specified field name and value.
  210. * In most cases it is for internal usage only.
  211. * Use other funtions to get account info, like getIdByEmail, etc.
  212. * @param string $sFieldRequested database field name to return
  213. * @param string $sFieldSearch database field name to search for
  214. * @param mixed $sValue database field value
  215. * @return specified account field value
  216. */
  217. protected function _getFieldByField ($sFieldRequested, $sFieldSearch, $sValue)
  218. {
  219. $sSql = $this->prepare("SELECT `$sFieldRequested` FROM `sys_accounts` WHERE `$sFieldSearch` = ? LIMIT 1", $sValue);
  220. return $this->getOne($sSql);
  221. }
  222. /**
  223. * Update some field by account id
  224. * In most cases it is for internal usage only.
  225. * Use other funtions to get account info, like updateLogged, etc.
  226. * @param string $sFieldRequested database field name to return
  227. * @param string $sFieldSearch database field name to search for
  228. * @param mixed $sValue database field value
  229. * @return specified account field value
  230. */
  231. protected function _updateField ($iId, $sFieldForUpdate, $sValue)
  232. {
  233. $sSql = $this->prepare("UPDATE `sys_accounts` SET `$sFieldForUpdate` = ? WHERE `id` = ? LIMIT 1", $sValue, $iId);
  234. return $this->query($sSql);
  235. }
  236. /**
  237. * Delete account info by id
  238. * @param int $iID profile id
  239. * @return affected rows
  240. */
  241. public function delete($iID)
  242. {
  243. $sSql = $this->prepare("DELETE FROM `sys_accounts` WHERE `id` = ? LIMIT 1", $iID);
  244. if ($res = $this->query($sSql)) {
  245. $this->getIdById($iID, true);
  246. }
  247. return $res;
  248. }
  249. /**
  250. * Get account(s) by params
  251. * @param array $aParams browse params
  252. * @return array with account(s)
  253. */
  254. public function getAccounts($aParams)
  255. {
  256. $aMethod = array('name' => 'getAll', 'params' => array(0 => 'query'));
  257. $sFieldsClause = "`ta`.*";
  258. $sJoinClause = $sWhereClause = $sGroupClause = $sOrderClause = "";
  259. switch($aParams['type']) {
  260. case 'by_join_date':
  261. $aMethod['params'][1] = array(
  262. 'date' => $aParams['date']
  263. );
  264. $sWhereClause = " AND `ta`.`added` > :date AND `ta`.`added` < UNIX_TIMESTAMP()";
  265. break;
  266. }
  267. $sGroupClause = $sGroupClause ? "GROUP BY " . $sGroupClause : "";
  268. $sOrderClause = $sOrderClause ? "ORDER BY " . $sOrderClause : "";
  269. $aMethod['params'][0] = "SELECT
  270. " . $sFieldsClause . "
  271. FROM `sys_accounts` AS `ta`" . $sJoinClause . "
  272. WHERE 1" . $sWhereClause . " " . $sGroupClause . " " . $sOrderClause;
  273. return call_user_func_array(array($this, $aMethod['name']), $aMethod['params']);
  274. }
  275. /**
  276. * Search account profile by keyword
  277. */
  278. public function searchByTerm($sTerm, $iLimit)
  279. {
  280. $aBindings = array(
  281. 'system' => 'system',
  282. 'status' => BX_PROFILE_STATUS_ACTIVE,
  283. 'limit' => (int)$iLimit
  284. );
  285. $sWhere = '';
  286. $aFieldsQuickSearch = array('name', 'email');
  287. foreach ($aFieldsQuickSearch as $sField) {
  288. $aBindings[$sField] = '%' . $sTerm . '%';
  289. $sWhere .= " OR `c`.`$sField` LIKE :$sField ";
  290. }
  291. $sQuery = "SELECT `c`.`id` AS `content_id`, `p`.`account_id`, `p`.`id` AS `profile_id`, `p`.`status` AS `profile_status` FROM `sys_accounts` AS `c` INNER JOIN `sys_profiles` AS `p` ON (`p`.`content_id` = `c`.`id` AND `p`.`type` = :system) WHERE `p`.`status` = :status AND (0 $sWhere) ORDER BY `added` DESC LIMIT :limit";
  292. return $this->getAll($sQuery, $aBindings);
  293. }
  294. }
  295. /** @} */