Files
jric11 1e63076123
Security and workflow regressions / regression (push) Has been cancelled
Chat's updates for security, db and workflow
2026-10-20 06:45:30 -04:00

289 lines
7.7 KiB
PHP

<?php
class Statuses extends Base {
// Variables.
private $current_user_serial = 0;
private $current_user_name = "";
private $current_user_email = "";
private $pagination_size = 20;
private $pagination_page = 1;
// =================
// Class Constructor
// =================
public function __construct() {
set_error_handler(array($this, "displayError"));
date_default_timezone_set(self::TIMEZONE);
$this->current_user_serial = $_SESSION[self::USER_SERIAL] ?? 0;
$this->current_user_name = $_SESSION[self::USER_NAME] ?? "";
$this->current_user_email = $_SESSION[self::USER_EMAIL] ?? "";
$this->pagination_page = 1;
}
// ==========
// Add Status
// ==========
public function addStatus() {
$step = filter_input(INPUT_POST, "step") ?: "prompt";
switch ($step) {
case "prompt":
$content = $this->applyXSL("", $this->getXSL("addStatus"));
$this->displayContent($content);
break;
case "add":
(new MaintenanceService())->saveStatus(0,$_POST);
break;
default:
$this->displayHome();
}
}
// =============
// Delete Status
// =============
public function deleteStatus() {
(new MaintenanceService())->deleteStatus(MaintenanceService::id($_POST['status_serial']??null));
}
// ============================
// Determine if a Status exists
// ============================
public function statusExists() {
$status_serial = filter_input(INPUT_POST, "status_serial", FILTER_SANITIZE_NUMBER_INT) ?: 0;
$status_name = filter_input(INPUT_POST, "status_name") ?: "";
$SQL = "select status_serial
from view_statuses
where status_serial != :status_serial
and lower(status_name) = :status_name";
$statement = $this->connect()->prepare($SQL);
$statement->bindValue(":status_serial", $status_serial);
$statement->bindValue(":status_name", strtolower($status_name));
$statement->execute();
$recordset = $statement->fetchAll(PDO::FETCH_ASSOC);
$exists = (count($recordset) > 0) ? true : false;
echo json_encode($exists);
}
// ======================================
// Determine if a Status is Active (AJAX)
// ======================================
public function statusActive() {
$stmt=$this->connect()->prepare('SELECT status_default FROM statuses WHERE status_serial=?');
$stmt->execute([MaintenanceService::id($_POST['status_serial']??null)]);$row=$stmt->fetch();
if(!$row)throw new AppException('Status not found.',404);
echo json_encode((bool)$row['status_default']);
}
// =============
// Edit a Status
// =============
public function editStatus() {
$step = filter_input(INPUT_POST, "step") ?: "prompt";
switch ($step) {
case "prompt":
$status_serial = filter_input(INPUT_POST, "status_serial", FILTER_SANITIZE_NUMBER_INT) ?: 0;
$status = $this->getStatus($status_serial);
if ($status->count() == 0) {
$this->logError("Invalid Status ({$status_serial}). " . __METHOD__);
}
$XML = $this->mergeXML($status, "<XML/>");
$content = $this->applyXSL($XML, $this->getXSL("editStatus"));
$this->displayContent($content);
break;
case "update":
(new MaintenanceService())->saveStatus(MaintenanceService::id($_POST['status_serial']??null),$_POST);
break;
default:
$this->displayHome();
}
}
// ================================
// Return an Active Statuses Object
// ================================
public function getActiveStatuses() {
$SQL = "select view_statuses.*
from view_statuses
where status_active is true";
return $this->getTable("statuses", $SQL);
}
// -------------------------
// Return the Default Status
// -------------------------
public function getDefaultStatus() {
$SQL = "select status_serial
from view_statuses
where status_default is true";
return $this->getTable("statuses", $SQL);
}
// =======================
// Return an Status Object
// =======================
public function getStatus($status_serial = 0) {
$SQL = "select view_statuses.*
from view_statuses
where status_serial = {$status_serial}";
return $this->getTable("statuses", $SQL);
}
// ===========================
// Return a Statuss Object
// ===========================
public function getStatuses() {
$SQL = "select view_statuses.*
from view_statuses";
return $this->getTable("statuses", $SQL);
}
// ============================
// Return a Statuss Page Object
// ============================
public function getStatusesPage() {
$this->pagination_size=(int)($_POST['statuses_per_page']??20);
// Find Criteria
$find_status = filter_input(INPUT_POST, "find_status") ?: "";
$find_status = trim($find_status);
$find_words = implode("|", array_map(static fn($word) => preg_quote($word), explode(" ", $find_status)));
// Record Count
$connection = $this->connect();
$SQL = "select count(*) as count
from view_statuses
where status_name regexp :status_name
or status_classes regexp :status_classes";
$statement = $connection->prepare($SQL);
$statement->bindValue(":status_name", $find_words);
$statement->bindValue(":status_classes", $find_words);
$statement->execute();
$recordset = $statement->fetch(PDO::FETCH_ASSOC);
$count = (count($recordset) > 0) ? (int) $recordset["count"] : (int) 0;
// Pagination
$pagination = filter_input(INPUT_POST, "pagination") ?: "";
$paging=Pagination::session(__METHOD__,$count,(int)$this->pagination_size,$pagination);
$this->pagination_size=$paging['size'];$this->pagination_page=$paging['page'];
$offset=$paging['offset'];$start=$paging['start'];$end=$paging['end'];
// Data
$SQL = "select view_statuses.*
from view_statuses
where status_name regexp :status_name
or status_classes regexp :status_classes
order by status_name,status_serial
limit {$this->pagination_size}
offset {$offset}";
$statement = $connection->prepare($SQL);
$statement->bindValue(":status_name", $find_words);
$statement->bindValue(":status_classes", $find_words);
$statement->execute();
$statuses = $this->getTableXML("statuses", $statement);
// Insert Pagination Attributes
$statuses->addAttribute("count", $count);
$statuses->addAttribute("start", $start);
$statuses->addAttribute("end", $end);
$statuses->addAttribute("page", $this->pagination_page);
return $statuses;
}
// ==============
// Setup Statuses
// ==============
public function setupStatuses() {
$statuses = $this->getStatusesPage();
$popovers = (new Popovers())->getPopovers();
$XML = $this->mergeXML($statuses, "<XML/>");
$XML = $this->mergeXML($popovers, $XML);
$content = $this->applyXSL($XML, $this->getXSL("setupStatuses"));
$this->displayContent($content);
}
}
?>