BxDolFormQuery.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. bx_import('BxDolForm');
  10. /**
  11. * Database queries for forms.
  12. * @see BxDolForm
  13. */
  14. class BxDolFormQuery extends BxDolDb
  15. {
  16. protected $_aObject;
  17. protected static $TYPES_SET = array (
  18. 'select_multiple' => 1,
  19. 'checkbox_set' => 1,
  20. );
  21. protected static $TYPES_TRANSLATABLE = array (
  22. 'submit' => 1,
  23. 'reset' => 1,
  24. 'button' => 1,
  25. );
  26. public function __construct($aObject)
  27. {
  28. parent::__construct();
  29. $this->_aObject = $aObject;
  30. }
  31. static public function getFormArray ($sObject, $sDisplayName)
  32. {
  33. $oDb = BxDolDb::getInstance();
  34. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `active` = 1 AND `object` = ?", $sObject);
  35. $aObject = $oDb->getRow($sQuery);
  36. if (!$aObject || !is_array($aObject))
  37. return false;
  38. $sQuery = $oDb->prepare("SELECT * FROM `sys_form_displays` WHERE `object` = ? AND `display_name` = ?", $sObject, $sDisplayName);
  39. $aDisplay = $oDb->getRow($sQuery);
  40. if (!$aDisplay || !is_array($aDisplay))
  41. return false;
  42. $aForm = array ();
  43. // form attrs
  44. if (!empty($aObject['form_attrs']))
  45. $aAddFormAttrs = unserialize($aObject['form_attrs']);
  46. $aDefaultsFormAttrs = array(
  47. 'action' => $aObject['action'],
  48. 'name' => $aObject['object'],
  49. 'id' => $aObject['object'],
  50. );
  51. $aForm['form_attrs'] = array_merge($aDefaultsFormAttrs, !empty($aAddFormAttrs) && is_array($aAddFormAttrs) ? $aAddFormAttrs : array());
  52. // form action
  53. if (!empty($aForm['form_attrs']['action']) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'http://', 7) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'https://', 8))
  54. $aForm['form_attrs']['action'] = BX_DOL_URL_ROOT . BxDolPermalinks::getInstance()->permalink($aForm['form_attrs']['action']);
  55. // params
  56. if (!empty($aObject['params']))
  57. $aAddFormParams = unserialize($aObject['params']);
  58. $mixedSubminName = '';
  59. if (!empty($aObject['submit_name'])) {
  60. $mixedSubminName = @unserialize($aObject['submit_name']);
  61. if($mixedSubminName === false)
  62. $mixedSubminName = $aObject['submit_name'];
  63. }
  64. $aDefaultsFormParams = array(
  65. 'db' => array(
  66. 'submit_name' => $mixedSubminName,
  67. 'table' => $aObject['table'],
  68. 'key' => $aObject['key'],
  69. 'uri' => $aObject['uri'],
  70. 'uri_title' => $aObject['uri_title'],
  71. ),
  72. 'object' => $sObject,
  73. 'display' => $sDisplayName,
  74. 'view_mode' => $aDisplay['view_mode'],
  75. );
  76. $aForm['params'] = array_merge_recursive($aDefaultsFormParams, !empty($aAddFormParams) && is_array($aAddFormParams) ? $aAddFormParams : array());
  77. // form inputs
  78. $sQuery = $oDb->prepare("SELECT `i`.*, `d`.`visible_for_levels` FROM `sys_form_inputs` AS `i` INNER JOIN `sys_form_display_inputs` AS `d` ON (`d`.`input_name` = `i`.`name`) WHERE `d`.`active` = 1 AND `d`.`display_name` = ? AND `i`.`object` = ? ORDER BY `d`.`order` ASC", $aDisplay['display_name'], $sObject);
  79. $aInputs = $oDb->getAllWithKey($sQuery, 'name');
  80. $aForm['inputs'] = array();
  81. $aInputSets = array();
  82. foreach ($aInputs as $a) {
  83. // main attributes
  84. $aInput = array (
  85. 'id' => $a['id'],
  86. 'type' => $a['type'],
  87. 'name' => $a['name'],
  88. 'caption_system_src' => $a['caption_system'],
  89. 'caption_src' => $a['caption'],
  90. 'caption' => _t($a['caption']),
  91. 'info_src' => $a['info'] ? $a['info'] : '',
  92. 'info' => $a['info'] ? _t($a['info']) : '',
  93. 'required' => $a['required'] ? true : false,
  94. 'unique' => $a['unique'] ? true : false,
  95. 'collapsed' => $a['collapsed'] ? true : false,
  96. 'privacy' => $a['privacy'] ? true : false,
  97. 'html' => $a['html'],
  98. 'attrs' => $a['attrs'] ? unserialize($a['attrs']) : false,
  99. 'tr_attrs' => $a['attrs_tr'] ? unserialize($a['attrs_tr']) : false,
  100. 'attrs_wrapper' => $a['attrs_wrapper'] ? unserialize($a['attrs_wrapper']) : false,
  101. 'visible_for_levels' => $a['visible_for_levels'],
  102. );
  103. // if type is input set stop to process other attribnutes
  104. if ('input_set' == $a['type']) {
  105. $aForm['inputs'][$a['name']] = $aInput;
  106. $aInputSets[] = $a['name'];
  107. continue;
  108. }
  109. // default value
  110. if (!empty($a['value']))
  111. $aInput['value'] = isset(self::$TYPES_TRANSLATABLE[$aInput['type']]) ? _t($a['value']) : $a['value'];
  112. if (!empty($a['values'])) {
  113. $aInput['values_src'] = $a['values'];
  114. if (0 === strncmp(BX_DATA_LISTS_KEY_PREFIX, $a['values'], 2)) {
  115. $aInput['values_list_name'] = trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' ');
  116. $aInput['values'] = self::getDataItems(trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' '), isset(self::$TYPES_SET[$aInput['type']]));
  117. } else {
  118. $aInput['values'] = unserialize($a['values']);
  119. }
  120. }
  121. $aInput['checked'] = $a['checked'] ? true : false;
  122. // checker function options
  123. if (!empty($a['checker_func'])) {
  124. $aChecker = array ('func' => $a['checker_func']);
  125. if ($a['checker_error'])
  126. $aChecker['error'] = _t($a['checker_error']);
  127. if ($a['checker_params'])
  128. $aChecker['params'] = unserialize($a['checker_params']);
  129. $aInput['checker'] = $aChecker;
  130. }
  131. // db processing options
  132. if (!empty($a['db_pass'])) {
  133. $aDb = array ('pass' => $a['db_pass']);
  134. if ($a['db_params'])
  135. $a['params'] = unserialize($a['db_params']);
  136. $aInput['db'] = $aDb;
  137. }
  138. $aForm['inputs'][$a['name']] = $aInput;
  139. }
  140. foreach ($aInputSets as $sName) {
  141. $a = explode(',', $aInputs[$sName]['values']);
  142. foreach ($a as $sInputName) {
  143. if (!isset($aForm['inputs'][$sInputName]))
  144. continue;
  145. $aForm['inputs'][$sName][] = $aForm['inputs'][$sInputName];
  146. unset($aForm['inputs'][$sInputName]);
  147. }
  148. }
  149. $aForm['override_class_name'] = $aObject['override_class_name'];
  150. $aForm['override_class_file'] = $aObject['override_class_file'];
  151. return $aForm;
  152. }
  153. static public function getDataItems($sKey, $isUseForSet = false, $sUseValues = BX_DATA_VALUES_DEFAULT)
  154. {
  155. $oDb = BxDolDb::getInstance();
  156. if(!in_array($sUseValues, array(BX_DATA_VALUES_DEFAULT, BX_DATA_VALUES_ADDITIONAL, BX_DATA_VALUES_ALL)))
  157. $sUseValues = BX_DATA_VALUES_DEFAULT;
  158. $sQuery = $oDb->prepare("SELECT `Value`, `LKey`, `LKey2`, `Data` FROM `sys_form_pre_values` WHERE `Key` = ? ORDER BY `Order` ASC", $sKey);
  159. if($sUseValues == BX_DATA_VALUES_ALL)
  160. return $oDb->getAllWithKey($sQuery, 'Value');
  161. $a = $oDb->getAll($sQuery);
  162. $iMaxValue = 0;
  163. if ($isUseForSet)
  164. $iMaxValue = log(BX_DOL_INT_MAX, 2) + 1;
  165. $aRet = array();
  166. foreach ($a as $r) {
  167. if ($isUseForSet && (!is_numeric($r['Value']) || $r['Value'] < 1 || $r['Value'] > $iMaxValue))
  168. continue;
  169. $aRet[$r['Value']] = BX_DATA_VALUES_ADDITIONAL == $sUseValues && !empty($r[BX_DATA_VALUES_ADDITIONAL]) ? _t($r[BX_DATA_VALUES_ADDITIONAL]) : _t($r[BX_DATA_VALUES_DEFAULT]);
  170. }
  171. return $aRet;
  172. }
  173. static public function fieldCheckUnique($sTable, $sField, $sValue)
  174. {
  175. return uriCheckUniq($sValue, $sTable, $sField);
  176. }
  177. static public function fieldGetValue($sTable, $sField, $sFieldKey, $sFieldKeyValue)
  178. {
  179. return BxDolDb::getInstance()->getOne("SELECT `" . $sField . "` FROM `" . $sTable . "` WHERE `" . $sFieldKey . "`=:field_key LIMIT 1", array(
  180. 'field_key' => $sFieldKeyValue
  181. ));
  182. }
  183. static public function getInputByName($sObject, $sName)
  184. {
  185. return BxDolDb::getInstance()->getRow("SELECT * FROM `sys_form_inputs` WHERE `object`=:object AND `name`=:name LIMIT 1", array(
  186. 'object' => $sObject,
  187. 'name' => $sName
  188. ));
  189. }
  190. static public function getInputPrivacy($iInputId, $iAuthorId, $sPrivacyField = '')
  191. {
  192. $sMethod = 'getRow';
  193. $sSelectClause = '*';
  194. if(!empty($sPrivacyField)) {
  195. $sMethod = 'getOne';
  196. $sSelectClause = '`' . $sPrivacyField . '`';
  197. }
  198. return BxDolDb::getInstance()->$sMethod("SELECT " . $sSelectClause . " FROM `sys_form_inputs_privacy` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", array(
  199. 'input_id' => $iInputId,
  200. 'author_id' => $iAuthorId,
  201. ));
  202. }
  203. static public function setInputPrivacy($iInputId, $iAuthorId, $sPrivacyField, $sPrivacyValue)
  204. {
  205. $oDb = BxDolDb::getInstance();
  206. $sTable = 'sys_form_inputs_privacy';
  207. $aBindingsSet = array(
  208. $sPrivacyField => $sPrivacyValue
  209. );
  210. $aBindingsWhere = array(
  211. 'input_id' => $iInputId,
  212. 'author_id' => $iAuthorId,
  213. );
  214. $bResult = false;
  215. if((int)$oDb->getOne("SELECT `id` FROM `" . $sTable . "` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", $aBindingsWhere) != 0)
  216. $bResult = $oDb->query("UPDATE `" . $sTable . "` SET " . $oDb->arrayToSQL($aBindingsSet) . " WHERE " . $oDb->arrayToSQL($aBindingsWhere, ' AND ')) !== false;
  217. else
  218. $bResult = (int)$oDb->query("INSERT `" . $sTable . "` SET " . $oDb->arrayToSQL(array_merge($aBindingsSet, $aBindingsWhere))) > 0;
  219. return $bResult;
  220. }
  221. public function getFormInputs()
  222. {
  223. $sQuery = $this->prepare("SELECT * FROM `sys_form_inputs` WHERE `object` = ? ORDER BY `order` ASC", $this->_aObject['object']);
  224. return $this->getAll($sQuery);
  225. }
  226. }
  227. /** @} */