BxDolFormQuery.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. bx_import('BxDolForm');
  10. /**
  11. * Database queries for forms.
  12. * @see BxDolForm
  13. */
  14. class BxDolFormQuery extends BxDolDb
  15. {
  16. protected $_aObject;
  17. protected static $TYPES_SET = array (
  18. 'select_multiple' => 1,
  19. 'checkbox_set' => 1,
  20. );
  21. protected static $TYPES_TRANSLATABLE = array (
  22. 'submit' => 1,
  23. 'reset' => 1,
  24. 'button' => 1,
  25. );
  26. public function __construct($aObject)
  27. {
  28. parent::__construct();
  29. $this->_aObject = $aObject;
  30. }
  31. static public function getFormObject ($sObject)
  32. {
  33. $oDb = BxDolDb::getInstance();
  34. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `object` = ?", $sObject);
  35. return $oDb->fromMemory('sys_objects_form_' . $sObject, 'getRow', $sQuery);
  36. }
  37. static public function getNestedFormObjects ($sParentObject)
  38. {
  39. $oDb = BxDolDb::getInstance();
  40. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `parent_form` = ?", $sParentObject);
  41. return $oDb->fromMemory('sys_objects_form_' . $sParentObject . '_nested', 'getAll', $sQuery);
  42. }
  43. static public function deleteDataFromNestedForm ($sTableName, $iContentId)
  44. {
  45. $oDb = BxDolDb::getInstance();
  46. $sQuery = $oDb->prepare("DELETE FROM `" . $sTableName ."` WHERE `content_id` = ?", $iContentId);
  47. $oDb->query($sQuery);
  48. }
  49. static public function getFormArray ($sObject, $sDisplayName)
  50. {
  51. $oDb = BxDolDb::getInstance();
  52. $sQuery = $oDb->prepare("SELECT * FROM `sys_objects_form` WHERE `active` = 1 AND `object` = ?", $sObject);
  53. $aObject = $oDb->fromMemory('sys_objects_form_' . $sObject, 'getRow', $sQuery);
  54. if (!$aObject || !is_array($aObject))
  55. return false;
  56. $sQuery = $oDb->prepare("SELECT * FROM `sys_form_displays` WHERE `object` = ? AND `display_name` = ?", $sObject, $sDisplayName);
  57. $aDisplay = $oDb->fromMemory('sys_form_displays_' . $sObject . '_' . $sDisplayName, 'getRow', $sQuery);
  58. if (!$aDisplay || !is_array($aDisplay))
  59. return false;
  60. $aForm = array ();
  61. // form attrs
  62. if (!empty($aObject['form_attrs']))
  63. $aAddFormAttrs = unserialize($aObject['form_attrs']);
  64. $aDefaultsFormAttrs = array(
  65. 'action' => $aObject['action'],
  66. 'name' => $aObject['object'],
  67. 'id' => $aObject['object'],
  68. );
  69. $aForm['form_attrs'] = array_merge($aDefaultsFormAttrs, !empty($aAddFormAttrs) && is_array($aAddFormAttrs) ? $aAddFormAttrs : array());
  70. // form action
  71. if (!empty($aForm['form_attrs']['action']) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'http://', 7) && 0 !== strncasecmp($aForm['form_attrs']['action'], 'https://', 8))
  72. $aForm['form_attrs']['action'] = BX_DOL_URL_ROOT . BxDolPermalinks::getInstance()->permalink($aForm['form_attrs']['action']);
  73. // params
  74. if (!empty($aObject['params']))
  75. $aAddFormParams = unserialize($aObject['params']);
  76. $mixedSubminName = '';
  77. if (!empty($aObject['submit_name'])) {
  78. $mixedSubminName = @unserialize($aObject['submit_name']);
  79. if($mixedSubminName === false)
  80. $mixedSubminName = $aObject['submit_name'];
  81. }
  82. $aDefaultsFormParams = array(
  83. 'db' => array(
  84. 'submit_name' => $mixedSubminName,
  85. 'table' => $aObject['table'],
  86. 'key' => $aObject['key'],
  87. 'uri' => $aObject['uri'],
  88. 'uri_title' => $aObject['uri_title'],
  89. ),
  90. 'object' => $sObject,
  91. 'display' => $sDisplayName,
  92. 'view_mode' => $aDisplay['view_mode'],
  93. );
  94. $aForm['params'] = array_merge_recursive($aDefaultsFormParams, !empty($aAddFormParams) && is_array($aAddFormParams) ? $aAddFormParams : array());
  95. // form inputs
  96. $sQuery = $oDb->prepare("SELECT `i`.*, `d`.`visible_for_levels` FROM `sys_form_inputs` AS `i` INNER JOIN `sys_form_display_inputs` AS `d` ON (`d`.`input_name` = `i`.`name`) WHERE `d`.`active` = 1 AND `d`.`display_name` = ? AND `i`.`object` = ? ORDER BY `d`.`order` ASC", $aDisplay['display_name'], $sObject);
  97. $aInputs = $oDb->getAllWithKey($sQuery, 'name');
  98. $aForm['inputs'] = array();
  99. $aInputSets = array();
  100. foreach ($aInputs as $a) {
  101. // main attributes
  102. $aInput = array (
  103. 'id' => $a['id'],
  104. 'type' => $a['type'],
  105. 'name' => $a['name'],
  106. 'caption_system_src' => $a['caption_system'],
  107. 'caption_src' => $a['caption'],
  108. 'caption' => _t($a['caption']),
  109. 'info_src' => $a['info'] ? $a['info'] : '',
  110. 'info' => $a['info'] ? _t($a['info']) : '',
  111. 'required' => $a['required'] ? true : false,
  112. 'unique' => $a['unique'] ? true : false,
  113. 'collapsed' => $a['collapsed'] ? true : false,
  114. 'privacy' => $a['privacy'] ? true : false,
  115. 'rateable' => $a['rateable'],
  116. 'html' => $a['html'],
  117. 'attrs' => $a['attrs'] ? unserialize($a['attrs']) : false,
  118. 'tr_attrs' => $a['attrs_tr'] ? unserialize($a['attrs_tr']) : false,
  119. 'attrs_wrapper' => $a['attrs_wrapper'] ? unserialize($a['attrs_wrapper']) : false,
  120. 'visible_for_levels' => $a['visible_for_levels'],
  121. );
  122. // if type is input set stop to process other attribnutes
  123. if ('input_set' == $a['type']) {
  124. $aForm['inputs'][$a['name']] = $aInput;
  125. $aInputSets[] = $a['name'];
  126. continue;
  127. }
  128. // default value
  129. if (!empty($a['value']))
  130. $aInput['value'] = isset(self::$TYPES_TRANSLATABLE[$aInput['type']]) ? _t($a['value']) : $a['value'];
  131. if (!empty($a['values'])) {
  132. $aInput['values_src'] = $a['values'];
  133. if (0 === strncmp(BX_DATA_LISTS_KEY_PREFIX, $a['values'], 2)) {
  134. $aInput['values_list_name'] = trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' ');
  135. $aInput['values'] = self::getDataItems(trim($a['values'], BX_DATA_LISTS_KEY_PREFIX . ' '), isset(self::$TYPES_SET[$aInput['type']]));
  136. } else {
  137. $aInput['values'] = unserialize($a['values']);
  138. }
  139. }
  140. $aInput['checked'] = $a['checked'] ? true : false;
  141. // checker function options
  142. if (!empty($a['checker_func'])) {
  143. $aChecker = array ('func' => $a['checker_func']);
  144. if ($a['checker_error'])
  145. $aChecker['error'] = _t($a['checker_error']);
  146. if ($a['checker_params'])
  147. $aChecker['params'] = unserialize($a['checker_params']);
  148. $aInput['checker'] = $aChecker;
  149. }
  150. // db processing options
  151. if (!empty($a['db_pass'])) {
  152. $aDb = array ('pass' => $a['db_pass']);
  153. if ($a['db_params'])
  154. $a['params'] = unserialize($a['db_params']);
  155. $aInput['db'] = $aDb;
  156. }
  157. $aForm['inputs'][$a['name']] = $aInput;
  158. }
  159. foreach ($aInputSets as $sName) {
  160. $a = explode(',', $aInputs[$sName]['values']);
  161. foreach ($a as $sInputName) {
  162. if (!isset($aForm['inputs'][$sInputName]))
  163. continue;
  164. $aForm['inputs'][$sName][] = $aForm['inputs'][$sInputName];
  165. unset($aForm['inputs'][$sInputName]);
  166. }
  167. }
  168. $aForm['override_class_name'] = $aObject['override_class_name'];
  169. $aForm['override_class_file'] = $aObject['override_class_file'];
  170. return $aForm;
  171. }
  172. static public function getDataItems($sKey, $isUseForSet = false, $sUseValues = BX_DATA_VALUES_DEFAULT)
  173. {
  174. $oDb = BxDolDb::getInstance();
  175. if(!in_array($sUseValues, array(BX_DATA_VALUES_DEFAULT, BX_DATA_VALUES_ADDITIONAL, BX_DATA_VALUES_ALL)))
  176. $sUseValues = BX_DATA_VALUES_DEFAULT;
  177. $sQuery = $oDb->prepare("SELECT `Value`, `LKey`, `LKey2`, `Data` FROM `sys_form_pre_values` WHERE `Key` = ? ORDER BY `Order` ASC", $sKey);
  178. if($sUseValues == BX_DATA_VALUES_ALL)
  179. return $oDb->getAllWithKey($sQuery, 'Value');
  180. $a = $oDb->getAll($sQuery);
  181. $iMaxValue = 0;
  182. if ($isUseForSet)
  183. $iMaxValue = log(BX_DOL_INT_MAX, 2) + 1;
  184. $aRet = array();
  185. foreach ($a as $r) {
  186. if ($isUseForSet && (!is_numeric($r['Value']) || $r['Value'] < 1 || $r['Value'] > $iMaxValue))
  187. continue;
  188. $aRet[$r['Value']] = BX_DATA_VALUES_ADDITIONAL == $sUseValues && !empty($r[BX_DATA_VALUES_ADDITIONAL]) ? _t($r[BX_DATA_VALUES_ADDITIONAL]) : _t($r[BX_DATA_VALUES_DEFAULT]);
  189. }
  190. return $aRet;
  191. }
  192. static public function fieldCheckUnique($sTable, $sField, $sValue)
  193. {
  194. return uriCheckUniq($sValue, $sTable, $sField);
  195. }
  196. static public function fieldGetValue($sTable, $sField, $sFieldKey, $sFieldKeyValue)
  197. {
  198. return BxDolDb::getInstance()->getOne("SELECT `" . $sField . "` FROM `" . $sTable . "` WHERE `" . $sFieldKey . "`=:field_key LIMIT 1", array(
  199. 'field_key' => $sFieldKeyValue
  200. ));
  201. }
  202. static public function getInputByName($sObject, $sName)
  203. {
  204. return BxDolDb::getInstance()->getRow("SELECT * FROM `sys_form_inputs` WHERE `object`=:object AND `name`=:name LIMIT 1", array(
  205. 'object' => $sObject,
  206. 'name' => $sName
  207. ));
  208. }
  209. static public function getInputPrivacy($iInputId, $iAuthorId, $sPrivacyField = '')
  210. {
  211. $sMethod = 'getRow';
  212. $sSelectClause = '*';
  213. if(!empty($sPrivacyField)) {
  214. $sMethod = 'getOne';
  215. $sSelectClause = '`' . $sPrivacyField . '`';
  216. }
  217. return BxDolDb::getInstance()->$sMethod("SELECT " . $sSelectClause . " FROM `sys_form_inputs_privacy` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", array(
  218. 'input_id' => $iInputId,
  219. 'author_id' => $iAuthorId,
  220. ));
  221. }
  222. static public function setInputPrivacy($iInputId, $iAuthorId, $sPrivacyField, $sPrivacyValue)
  223. {
  224. $oDb = BxDolDb::getInstance();
  225. $sTable = 'sys_form_inputs_privacy';
  226. $aBindingsSet = array(
  227. $sPrivacyField => $sPrivacyValue
  228. );
  229. $aBindingsWhere = array(
  230. 'input_id' => $iInputId,
  231. 'author_id' => $iAuthorId,
  232. );
  233. $bResult = false;
  234. if((int)$oDb->getOne("SELECT `id` FROM `" . $sTable . "` WHERE `input_id`=:input_id AND `author_id`=:author_id LIMIT 1", $aBindingsWhere) != 0)
  235. $bResult = $oDb->query("UPDATE `" . $sTable . "` SET " . $oDb->arrayToSQL($aBindingsSet) . " WHERE " . $oDb->arrayToSQL($aBindingsWhere, ' AND ')) !== false;
  236. else
  237. $bResult = (int)$oDb->query("INSERT `" . $sTable . "` SET " . $oDb->arrayToSQL(array_merge($aBindingsSet, $aBindingsWhere))) > 0;
  238. return $bResult;
  239. }
  240. static public function addFormField($sObjectForm, $sFieldName, $iContentId, $iAuthorId, $sModuleName, $iNestedContentId = 0)
  241. {
  242. $oDb = BxDolDb::getInstance();
  243. $aBindings = array(
  244. 'object_form' => $sObjectForm,
  245. 'field_name' => $sFieldName,
  246. 'content_id' => $iContentId,
  247. 'author_id' => $iAuthorId,
  248. 'module' => $sModuleName,
  249. 'nested_content_id' => $iNestedContentId
  250. );
  251. $oDb->query("INSERT `sys_form_fields_ids` SET `object_form`=:object_form, `field_name`=:field_name, `content_id`=:content_id, `author_id`=:author_id, `module`=:module, nested_content_id=:nested_content_id", $aBindings);
  252. }
  253. static public function getFormField($sObjectForm, $sFieldName, $iContentId, $iNestedContentId = 0)
  254. {
  255. $oDb = BxDolDb::getInstance();
  256. $aBindings = array(
  257. 'object_form' => $sObjectForm,
  258. 'field_name' => $sFieldName,
  259. 'content_id' => $iContentId,
  260. 'nested_content_id' => $iNestedContentId
  261. );
  262. return $oDb->getOne("SELECT `id` FROM `sys_form_fields_ids` WHERE `object_form`=:object_form AND `field_name`=:field_name AND `content_id`=:content_id AND nested_content_id=:nested_content_id", $aBindings);
  263. }
  264. static public function removeFormField($sObjectForm, $iContentId = 0)
  265. {
  266. $oDb = BxDolDb::getInstance();
  267. if ($iContentId > 0){
  268. $aBindings = array(
  269. 'object_form' => $sObjectForm,
  270. 'content_id' => $iContentId
  271. );
  272. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `object_form` = :object_form AND `content_id` = :content_id", $aBindings);
  273. }
  274. else{
  275. $aBindings = array(
  276. 'object_form' => $sObjectForm
  277. );
  278. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `object_form` = :object_form", $aBindings);
  279. }
  280. }
  281. static public function removeFormFields($sModule)
  282. {
  283. $oDb = BxDolDb::getInstance();
  284. $aBindings = array(
  285. 'module' => $sModule,
  286. );
  287. $oDb->query("DELETE FROM `sys_form_fields_ids` WHERE `module` = :module", $aBindings);
  288. }
  289. public function getFormInputs()
  290. {
  291. $sQuery = $this->prepare("SELECT * FROM `sys_form_inputs` WHERE `object` = ? ORDER BY `order` ASC", $this->_aObject['object']);
  292. return $this->getAll($sQuery);
  293. }
  294. }
  295. /** @} */