[1698] | 1 | <?php |
---|
| 2 | // +-----------------------------------------------------------------------+ |
---|
[8728] | 3 | // | Piwigo - a PHP based photo gallery | |
---|
[2297] | 4 | // +-----------------------------------------------------------------------+ |
---|
[8728] | 5 | // | Copyright(C) 2008-2011 Piwigo Team http://piwigo.org | |
---|
[2297] | 6 | // | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net | |
---|
| 7 | // | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick | |
---|
| 8 | // +-----------------------------------------------------------------------+ |
---|
| 9 | // | This program is free software; you can redistribute it and/or modify | |
---|
| 10 | // | it under the terms of the GNU General Public License as published by | |
---|
| 11 | // | the Free Software Foundation | |
---|
| 12 | // | | |
---|
| 13 | // | This program is distributed in the hope that it will be useful, but | |
---|
| 14 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
---|
| 15 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
---|
| 16 | // | General Public License for more details. | |
---|
| 17 | // | | |
---|
| 18 | // | You should have received a copy of the GNU General Public License | |
---|
| 19 | // | along with this program; if not, write to the Free Software | |
---|
| 20 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
---|
| 21 | // | USA. | |
---|
| 22 | // +-----------------------------------------------------------------------+ |
---|
[1698] | 23 | |
---|
| 24 | /**** IMPLEMENTATION OF WEB SERVICE METHODS ***********************************/ |
---|
| 25 | |
---|
| 26 | /** |
---|
[1768] | 27 | * Event handler for method invocation security check. Should return a PwgError |
---|
| 28 | * if the preconditions are not satifsied for method invocation. |
---|
| 29 | */ |
---|
| 30 | function ws_isInvokeAllowed($res, $methodName, $params) |
---|
| 31 | { |
---|
[2572] | 32 | global $conf; |
---|
[2119] | 33 | |
---|
[1849] | 34 | if ( strpos($methodName,'reflection.')===0 ) |
---|
| 35 | { // OK for reflection |
---|
| 36 | return $res; |
---|
| 37 | } |
---|
[2119] | 38 | |
---|
[1849] | 39 | if ( !is_autorize_status(ACCESS_GUEST) and |
---|
| 40 | strpos($methodName,'pwg.session.')!==0 ) |
---|
[1768] | 41 | { |
---|
[1849] | 42 | return new PwgError(401, 'Access denied'); |
---|
| 43 | } |
---|
[2119] | 44 | |
---|
[1768] | 45 | return $res; |
---|
| 46 | } |
---|
| 47 | |
---|
| 48 | /** |
---|
[1698] | 49 | * returns a "standard" (for our web service) array of sql where clauses that |
---|
[1711] | 50 | * filters the images (images table only) |
---|
| 51 | */ |
---|
[1698] | 52 | function ws_std_image_sql_filter( $params, $tbl_name='' ) |
---|
| 53 | { |
---|
| 54 | $clauses = array(); |
---|
| 55 | if ( is_numeric($params['f_min_rate']) ) |
---|
| 56 | { |
---|
| 57 | $clauses[] = $tbl_name.'average_rate>'.$params['f_min_rate']; |
---|
| 58 | } |
---|
| 59 | if ( is_numeric($params['f_max_rate']) ) |
---|
| 60 | { |
---|
| 61 | $clauses[] = $tbl_name.'average_rate<='.$params['f_max_rate']; |
---|
| 62 | } |
---|
| 63 | if ( is_numeric($params['f_min_hit']) ) |
---|
| 64 | { |
---|
| 65 | $clauses[] = $tbl_name.'hit>'.$params['f_min_hit']; |
---|
| 66 | } |
---|
| 67 | if ( is_numeric($params['f_max_hit']) ) |
---|
| 68 | { |
---|
| 69 | $clauses[] = $tbl_name.'hit<='.$params['f_max_hit']; |
---|
| 70 | } |
---|
[9576] | 71 | if ( isset($params['f_min_date_available']) ) |
---|
[1698] | 72 | { |
---|
[9576] | 73 | $clauses[] = $tbl_name."date_available>='".$params['f_min_date_available']."'"; |
---|
[1698] | 74 | } |
---|
[9576] | 75 | if ( isset($params['f_max_date_available']) ) |
---|
[1698] | 76 | { |
---|
[9576] | 77 | $clauses[] = $tbl_name."date_available<'".$params['f_max_date_available']."'"; |
---|
[1698] | 78 | } |
---|
| 79 | if ( isset($params['f_min_date_created']) ) |
---|
| 80 | { |
---|
| 81 | $clauses[] = $tbl_name."date_creation>='".$params['f_min_date_created']."'"; |
---|
| 82 | } |
---|
| 83 | if ( isset($params['f_max_date_created']) ) |
---|
| 84 | { |
---|
| 85 | $clauses[] = $tbl_name."date_creation<'".$params['f_max_date_created']."'"; |
---|
| 86 | } |
---|
| 87 | if ( is_numeric($params['f_min_ratio']) ) |
---|
| 88 | { |
---|
| 89 | $clauses[] = $tbl_name.'width/'.$tbl_name.'height>'.$params['f_min_ratio']; |
---|
| 90 | } |
---|
| 91 | if ( is_numeric($params['f_max_ratio']) ) |
---|
| 92 | { |
---|
| 93 | $clauses[] = $tbl_name.'width/'.$tbl_name.'height<='.$params['f_max_ratio']; |
---|
| 94 | } |
---|
| 95 | if ( $params['f_with_thumbnail'] ) |
---|
| 96 | { |
---|
| 97 | $clauses[] = $tbl_name.'tn_ext IS NOT NULL'; |
---|
| 98 | } |
---|
| 99 | return $clauses; |
---|
| 100 | } |
---|
| 101 | |
---|
| 102 | /** |
---|
| 103 | * returns a "standard" (for our web service) ORDER BY sql clause for images |
---|
[1711] | 104 | */ |
---|
[1698] | 105 | function ws_std_image_sql_order( $params, $tbl_name='' ) |
---|
| 106 | { |
---|
| 107 | $ret = ''; |
---|
| 108 | if ( empty($params['order']) ) |
---|
| 109 | { |
---|
| 110 | return $ret; |
---|
| 111 | } |
---|
| 112 | $matches = array(); |
---|
| 113 | preg_match_all('/([a-z_]+) *(?:(asc|desc)(?:ending)?)? *(?:, *|$)/i', |
---|
| 114 | $params['order'], $matches); |
---|
| 115 | for ($i=0; $i<count($matches[1]); $i++) |
---|
| 116 | { |
---|
| 117 | switch ($matches[1][$i]) |
---|
| 118 | { |
---|
| 119 | case 'date_created': |
---|
| 120 | $matches[1][$i] = 'date_creation'; break; |
---|
| 121 | case 'date_posted': |
---|
| 122 | $matches[1][$i] = 'date_available'; break; |
---|
| 123 | case 'rand': case 'random': |
---|
[4367] | 124 | $matches[1][$i] = DB_RANDOM_FUNCTION.'()'; break; |
---|
[1698] | 125 | } |
---|
[1711] | 126 | $sortable_fields = array('id', 'file', 'name', 'hit', 'average_rate', |
---|
[4367] | 127 | 'date_creation', 'date_available', DB_RANDOM_FUNCTION.'()' ); |
---|
[1698] | 128 | if ( in_array($matches[1][$i], $sortable_fields) ) |
---|
| 129 | { |
---|
| 130 | if (!empty($ret)) |
---|
| 131 | $ret .= ', '; |
---|
[4367] | 132 | if ($matches[1][$i] != DB_RANDOM_FUNCTION.'()' ) |
---|
[1698] | 133 | { |
---|
| 134 | $ret .= $tbl_name; |
---|
| 135 | } |
---|
| 136 | $ret .= $matches[1][$i]; |
---|
| 137 | $ret .= ' '.$matches[2][$i]; |
---|
| 138 | } |
---|
| 139 | } |
---|
| 140 | return $ret; |
---|
| 141 | } |
---|
| 142 | |
---|
| 143 | /** |
---|
| 144 | * returns an array map of urls (thumb/element) for image_row - to be returned |
---|
| 145 | * in a standard way by different web service methods |
---|
[1711] | 146 | */ |
---|
[1698] | 147 | function ws_std_get_urls($image_row) |
---|
| 148 | { |
---|
| 149 | $ret = array( |
---|
[1711] | 150 | 'tn_url' => get_thumbnail_url($image_row), |
---|
[1698] | 151 | 'element_url' => get_element_url($image_row) |
---|
| 152 | ); |
---|
| 153 | global $user; |
---|
| 154 | if ($user['enabled_high'] and $image_row['has_high'] ) |
---|
| 155 | { |
---|
| 156 | $ret['high_url'] = get_high_url($image_row); |
---|
| 157 | } |
---|
| 158 | return $ret; |
---|
| 159 | } |
---|
| 160 | |
---|
[1845] | 161 | /** |
---|
| 162 | * returns an array of image attributes that are to be encoded as xml attributes |
---|
| 163 | * instead of xml elements |
---|
| 164 | */ |
---|
| 165 | function ws_std_get_image_xml_attributes() |
---|
| 166 | { |
---|
| 167 | return array( |
---|
[11115] | 168 | 'id','tn_url','element_url','high_url', 'file','width','height','hit','date_available','date_creation' |
---|
[1845] | 169 | ); |
---|
| 170 | } |
---|
[1698] | 171 | |
---|
[1781] | 172 | /** |
---|
| 173 | * returns PWG version (web service method) |
---|
| 174 | */ |
---|
[1698] | 175 | function ws_getVersion($params, &$service) |
---|
| 176 | { |
---|
[1852] | 177 | global $conf; |
---|
[9742] | 178 | if ($conf['show_version'] or is_admin() ) |
---|
[1852] | 179 | return PHPWG_VERSION; |
---|
| 180 | else |
---|
| 181 | return new PwgError(403, 'Forbidden'); |
---|
[1698] | 182 | } |
---|
| 183 | |
---|
[10022] | 184 | /** |
---|
| 185 | * returns general informations (web service method) |
---|
| 186 | */ |
---|
| 187 | function ws_getInfos($params, &$service) |
---|
| 188 | { |
---|
[10062] | 189 | if (!is_admin()) |
---|
[10022] | 190 | { |
---|
[10062] | 191 | return new PwgError(403, 'Forbidden'); |
---|
[10022] | 192 | } |
---|
[10062] | 193 | |
---|
| 194 | $infos['version'] = PHPWG_VERSION; |
---|
[10022] | 195 | |
---|
| 196 | $query = 'SELECT COUNT(*) FROM '.IMAGES_TABLE.';'; |
---|
| 197 | list($infos['nb_elements']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 198 | |
---|
| 199 | $query = 'SELECT COUNT(*) FROM '.CATEGORIES_TABLE.';'; |
---|
| 200 | list($infos['nb_categories']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 201 | |
---|
| 202 | $query = 'SELECT COUNT(*) FROM '.CATEGORIES_TABLE.' WHERE dir IS NULL;'; |
---|
| 203 | list($infos['nb_virtual']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 204 | |
---|
| 205 | $query = 'SELECT COUNT(*) FROM '.CATEGORIES_TABLE.' WHERE dir IS NOT NULL;'; |
---|
| 206 | list($infos['nb_physical']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 207 | |
---|
| 208 | $query = 'SELECT COUNT(*) FROM '.IMAGE_CATEGORY_TABLE.';'; |
---|
| 209 | list($infos['nb_image_category']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 210 | |
---|
| 211 | $query = 'SELECT COUNT(*) FROM '.TAGS_TABLE.';'; |
---|
| 212 | list($infos['nb_tags']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 213 | |
---|
| 214 | $query = 'SELECT COUNT(*) FROM '.IMAGE_TAG_TABLE.';'; |
---|
| 215 | list($infos['nb_image_tag']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 216 | |
---|
| 217 | $query = 'SELECT COUNT(*) FROM '.USERS_TABLE.';'; |
---|
| 218 | list($infos['nb_users']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 219 | |
---|
| 220 | $query = 'SELECT COUNT(*) FROM '.GROUPS_TABLE.';'; |
---|
| 221 | list($infos['nb_groups']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 222 | |
---|
| 223 | $query = 'SELECT COUNT(*) FROM '.COMMENTS_TABLE.';'; |
---|
| 224 | list($infos['nb_comments']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 225 | |
---|
| 226 | // first element |
---|
| 227 | if ($infos['nb_elements'] > 0) |
---|
| 228 | { |
---|
| 229 | $query = 'SELECT MIN(date_available) FROM '.IMAGES_TABLE.';'; |
---|
| 230 | list($infos['first_date']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 231 | } |
---|
| 232 | |
---|
| 233 | // unvalidated comments |
---|
[10062] | 234 | if ($infos['nb_comments'] > 0) |
---|
[10022] | 235 | { |
---|
| 236 | $query = 'SELECT COUNT(*) FROM '.COMMENTS_TABLE.' WHERE validated=\'false\';'; |
---|
| 237 | list($infos['nb_unvalidated_comments']) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 238 | } |
---|
| 239 | |
---|
| 240 | foreach ($infos as $name => $value) |
---|
| 241 | { |
---|
| 242 | $output[] = array( |
---|
| 243 | 'name' => $name, |
---|
| 244 | 'value' => $value, |
---|
| 245 | ); |
---|
| 246 | } |
---|
| 247 | |
---|
| 248 | return array('infos' => new PwgNamedArray($output, 'item')); |
---|
| 249 | } |
---|
| 250 | |
---|
[2429] | 251 | function ws_caddie_add($params, &$service) |
---|
| 252 | { |
---|
| 253 | if (!is_admin()) |
---|
| 254 | { |
---|
| 255 | return new PwgError(401, 'Access denied'); |
---|
| 256 | } |
---|
[2770] | 257 | $params['image_id'] = array_map( 'intval',$params['image_id'] ); |
---|
[2429] | 258 | if ( empty($params['image_id']) ) |
---|
| 259 | { |
---|
| 260 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 261 | } |
---|
| 262 | global $user; |
---|
| 263 | $query = ' |
---|
| 264 | SELECT id |
---|
| 265 | FROM '.IMAGES_TABLE.' LEFT JOIN '.CADDIE_TABLE.' ON id=element_id AND user_id='.$user['id'].' |
---|
| 266 | WHERE id IN ('.implode(',',$params['image_id']).') |
---|
| 267 | AND element_id IS NULL'; |
---|
| 268 | $datas = array(); |
---|
| 269 | foreach ( array_from_query($query, 'id') as $id ) |
---|
| 270 | { |
---|
| 271 | array_push($datas, array('element_id'=>$id, 'user_id'=>$user['id']) ); |
---|
| 272 | } |
---|
| 273 | if (count($datas)) |
---|
| 274 | { |
---|
| 275 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 276 | mass_inserts(CADDIE_TABLE, array('element_id','user_id'), $datas); |
---|
| 277 | } |
---|
| 278 | return count($datas); |
---|
| 279 | } |
---|
[1781] | 280 | |
---|
[1698] | 281 | /** |
---|
[1781] | 282 | * returns images per category (web service method) |
---|
[1711] | 283 | */ |
---|
[1698] | 284 | function ws_categories_getImages($params, &$service) |
---|
| 285 | { |
---|
| 286 | @include_once(PHPWG_ROOT_PATH.'include/functions_picture.inc.php'); |
---|
| 287 | global $user, $conf; |
---|
| 288 | |
---|
| 289 | $images = array(); |
---|
| 290 | |
---|
| 291 | //------------------------------------------------- get the related categories |
---|
| 292 | $where_clauses = array(); |
---|
| 293 | foreach($params['cat_id'] as $cat_id) |
---|
| 294 | { |
---|
| 295 | $cat_id = (int)$cat_id; |
---|
| 296 | if ($cat_id<=0) |
---|
| 297 | continue; |
---|
| 298 | if ($params['recursive']) |
---|
| 299 | { |
---|
[4367] | 300 | $where_clauses[] = 'uppercats '.DB_REGEX_OPERATOR.' \'(^|,)'.$cat_id.'(,|$)\''; |
---|
[1698] | 301 | } |
---|
| 302 | else |
---|
| 303 | { |
---|
| 304 | $where_clauses[] = 'id='.$cat_id; |
---|
| 305 | } |
---|
| 306 | } |
---|
| 307 | if (!empty($where_clauses)) |
---|
| 308 | { |
---|
| 309 | $where_clauses = array( '('. |
---|
| 310 | implode(' |
---|
| 311 | OR ', $where_clauses) . ')' |
---|
| 312 | ); |
---|
| 313 | } |
---|
[2119] | 314 | $where_clauses[] = get_sql_condition_FandF( |
---|
| 315 | array('forbidden_categories' => 'id'), |
---|
| 316 | NULL, true |
---|
| 317 | ); |
---|
[1698] | 318 | |
---|
| 319 | $query = ' |
---|
[1866] | 320 | SELECT id, name, permalink, image_order |
---|
[1698] | 321 | FROM '.CATEGORIES_TABLE.' |
---|
| 322 | WHERE '. implode(' |
---|
| 323 | AND ', $where_clauses); |
---|
| 324 | $result = pwg_query($query); |
---|
| 325 | $cats = array(); |
---|
[4325] | 326 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1698] | 327 | { |
---|
| 328 | $row['id'] = (int)$row['id']; |
---|
| 329 | $cats[ $row['id'] ] = $row; |
---|
| 330 | } |
---|
| 331 | |
---|
| 332 | //-------------------------------------------------------- get the images |
---|
| 333 | if ( !empty($cats) ) |
---|
| 334 | { |
---|
| 335 | $where_clauses = ws_std_image_sql_filter( $params, 'i.' ); |
---|
| 336 | $where_clauses[] = 'category_id IN (' |
---|
| 337 | .implode(',', array_keys($cats) ) |
---|
| 338 | .')'; |
---|
[1781] | 339 | $where_clauses[] = get_sql_condition_FandF( array( |
---|
| 340 | 'visible_images' => 'i.id' |
---|
| 341 | ), null, true |
---|
| 342 | ); |
---|
[1756] | 343 | |
---|
[1698] | 344 | $order_by = ws_std_image_sql_order($params, 'i.'); |
---|
[1852] | 345 | if ( empty($order_by) |
---|
| 346 | and count($params['cat_id'])==1 |
---|
| 347 | and isset($cats[ $params['cat_id'][0] ]['image_order']) |
---|
| 348 | ) |
---|
[1698] | 349 | { |
---|
[1852] | 350 | $order_by = $cats[ $params['cat_id'][0] ]['image_order']; |
---|
[1698] | 351 | } |
---|
[1852] | 352 | $order_by = empty($order_by) ? $conf['order_by'] : 'ORDER BY '.$order_by; |
---|
| 353 | |
---|
[1698] | 354 | $query = ' |
---|
[6652] | 355 | SELECT i.*, GROUP_CONCAT(category_id) AS cat_ids |
---|
[1698] | 356 | FROM '.IMAGES_TABLE.' i |
---|
| 357 | INNER JOIN '.IMAGE_CATEGORY_TABLE.' ON i.id=image_id |
---|
| 358 | WHERE '. implode(' |
---|
| 359 | AND ', $where_clauses).' |
---|
| 360 | GROUP BY i.id |
---|
| 361 | '.$order_by.' |
---|
[4334] | 362 | LIMIT '.(int)$params['per_page'].' OFFSET '.(int)($params['per_page']*$params['page']); |
---|
[1698] | 363 | |
---|
| 364 | $result = pwg_query($query); |
---|
[4325] | 365 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1698] | 366 | { |
---|
| 367 | $image = array(); |
---|
| 368 | foreach ( array('id', 'width', 'height', 'hit') as $k ) |
---|
| 369 | { |
---|
| 370 | if (isset($row[$k])) |
---|
| 371 | { |
---|
| 372 | $image[$k] = (int)$row[$k]; |
---|
| 373 | } |
---|
| 374 | } |
---|
[11115] | 375 | foreach ( array('file', 'name', 'comment', 'date_creation', 'date_available') as $k ) |
---|
[1698] | 376 | { |
---|
| 377 | $image[$k] = $row[$k]; |
---|
| 378 | } |
---|
| 379 | $image = array_merge( $image, ws_std_get_urls($row) ); |
---|
| 380 | |
---|
| 381 | $image_cats = array(); |
---|
| 382 | foreach ( explode(',', $row['cat_ids']) as $cat_id ) |
---|
| 383 | { |
---|
| 384 | $url = make_index_url( |
---|
| 385 | array( |
---|
[1861] | 386 | 'category' => $cats[$cat_id], |
---|
[1698] | 387 | ) |
---|
| 388 | ); |
---|
| 389 | $page_url = make_picture_url( |
---|
| 390 | array( |
---|
[1861] | 391 | 'category' => $cats[$cat_id], |
---|
[1698] | 392 | 'image_id' => $row['id'], |
---|
| 393 | 'image_file' => $row['file'], |
---|
| 394 | ) |
---|
| 395 | ); |
---|
| 396 | array_push( $image_cats, array( |
---|
| 397 | WS_XML_ATTRIBUTES => array ( |
---|
| 398 | 'id' => (int)$cat_id, |
---|
| 399 | 'url' => $url, |
---|
| 400 | 'page_url' => $page_url, |
---|
| 401 | ) |
---|
| 402 | ) |
---|
| 403 | ); |
---|
| 404 | } |
---|
| 405 | |
---|
| 406 | $image['categories'] = new PwgNamedArray( |
---|
| 407 | $image_cats,'category', array('id','url','page_url') |
---|
| 408 | ); |
---|
| 409 | array_push($images, $image); |
---|
| 410 | } |
---|
| 411 | } |
---|
| 412 | |
---|
| 413 | return array( 'images' => |
---|
| 414 | array ( |
---|
| 415 | WS_XML_ATTRIBUTES => |
---|
| 416 | array( |
---|
| 417 | 'page' => $params['page'], |
---|
| 418 | 'per_page' => $params['per_page'], |
---|
| 419 | 'count' => count($images) |
---|
| 420 | ), |
---|
[1711] | 421 | WS_XML_CONTENT => new PwgNamedArray($images, 'image', |
---|
[1845] | 422 | ws_std_get_image_xml_attributes() ) |
---|
[1698] | 423 | ) |
---|
| 424 | ); |
---|
| 425 | } |
---|
| 426 | |
---|
[1781] | 427 | |
---|
[1698] | 428 | /** |
---|
[1781] | 429 | * returns a list of categories (web service method) |
---|
[1698] | 430 | */ |
---|
| 431 | function ws_categories_getList($params, &$service) |
---|
| 432 | { |
---|
[1820] | 433 | global $user,$conf; |
---|
[1698] | 434 | |
---|
[11152] | 435 | if ($params['tree_output']) |
---|
| 436 | { |
---|
| 437 | if (!isset($_GET['format']) or !in_array($_GET['format'], array('php', 'json'))) |
---|
| 438 | { |
---|
| 439 | // the algorithm used to build a tree from a flat list of categories |
---|
| 440 | // keeps original array keys, which is not compatible with |
---|
| 441 | // PwgNamedArray. |
---|
| 442 | // |
---|
| 443 | // PwgNamedArray is useful to define which data is an attribute and |
---|
| 444 | // which is an element in the XML output. The "hierarchy" output is |
---|
| 445 | // only compatible with json/php output. |
---|
| 446 | |
---|
| 447 | return new PwgError(405, "The tree_output option is only compatible with json/php output formats"); |
---|
| 448 | } |
---|
| 449 | } |
---|
| 450 | |
---|
[4884] | 451 | $where = array('1=1'); |
---|
| 452 | $join_type = 'INNER'; |
---|
| 453 | $join_user = $user['id']; |
---|
[1698] | 454 | |
---|
| 455 | if (!$params['recursive']) |
---|
| 456 | { |
---|
| 457 | if ($params['cat_id']>0) |
---|
[1820] | 458 | $where[] = '(id_uppercat='.(int)($params['cat_id']).' |
---|
| 459 | OR id='.(int)($params['cat_id']).')'; |
---|
[1698] | 460 | else |
---|
| 461 | $where[] = 'id_uppercat IS NULL'; |
---|
| 462 | } |
---|
[1820] | 463 | else if ($params['cat_id']>0) |
---|
| 464 | { |
---|
[4367] | 465 | $where[] = 'uppercats '.DB_REGEX_OPERATOR.' \'(^|,)'. |
---|
[1820] | 466 | (int)($params['cat_id']) |
---|
| 467 | .'(,|$)\''; |
---|
| 468 | } |
---|
[1698] | 469 | |
---|
| 470 | if ($params['public']) |
---|
| 471 | { |
---|
| 472 | $where[] = 'status = "public"'; |
---|
[1711] | 473 | $where[] = 'visible = "true"'; |
---|
[4884] | 474 | |
---|
| 475 | $join_user = $conf['guest_id']; |
---|
[1698] | 476 | } |
---|
[4884] | 477 | elseif (is_admin()) |
---|
[1698] | 478 | { |
---|
[4884] | 479 | // in this very specific case, we don't want to hide empty |
---|
| 480 | // categories. Function calculate_permissions will only return |
---|
| 481 | // categories that are either locked or private and not permitted |
---|
| 482 | // |
---|
| 483 | // calculate_permissions does not consider empty categories as forbidden |
---|
| 484 | $forbidden_categories = calculate_permissions($user['id'], $user['status']); |
---|
| 485 | $where[]= 'id NOT IN ('.$forbidden_categories.')'; |
---|
| 486 | $join_type = 'LEFT'; |
---|
[1698] | 487 | } |
---|
| 488 | |
---|
[1711] | 489 | $query = ' |
---|
[11152] | 490 | SELECT id, name, permalink, uppercats, global_rank, id_uppercat, |
---|
[7550] | 491 | comment, |
---|
[1845] | 492 | nb_images, count_images AS total_nb_images, |
---|
| 493 | date_last, max_date_last, count_categories AS nb_categories |
---|
[1711] | 494 | FROM '.CATEGORIES_TABLE.' |
---|
[4884] | 495 | '.$join_type.' JOIN '.USER_CACHE_CATEGORIES_TABLE.' ON id=cat_id AND user_id='.$join_user.' |
---|
[1698] | 496 | WHERE '. implode(' |
---|
| 497 | AND ', $where); |
---|
| 498 | |
---|
| 499 | $result = pwg_query($query); |
---|
| 500 | |
---|
| 501 | $cats = array(); |
---|
[4325] | 502 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1698] | 503 | { |
---|
| 504 | $row['url'] = make_index_url( |
---|
| 505 | array( |
---|
[1861] | 506 | 'category' => $row |
---|
[1698] | 507 | ) |
---|
| 508 | ); |
---|
[1845] | 509 | foreach( array('id','nb_images','total_nb_images','nb_categories') as $key) |
---|
[1698] | 510 | { |
---|
| 511 | $row[$key] = (int)$row[$key]; |
---|
| 512 | } |
---|
[2572] | 513 | |
---|
[4903] | 514 | $row['name'] = strip_tags( |
---|
| 515 | trigger_event( |
---|
| 516 | 'render_category_name', |
---|
| 517 | $row['name'], |
---|
| 518 | 'ws_categories_getList' |
---|
| 519 | ) |
---|
| 520 | ); |
---|
| 521 | |
---|
[7550] | 522 | $row['comment'] = strip_tags( |
---|
| 523 | trigger_event( |
---|
| 524 | 'render_category_description', |
---|
| 525 | $row['comment'], |
---|
| 526 | 'ws_categories_getList' |
---|
| 527 | ) |
---|
| 528 | ); |
---|
| 529 | |
---|
[1698] | 530 | array_push($cats, $row); |
---|
| 531 | } |
---|
| 532 | usort($cats, 'global_rank_compare'); |
---|
[11152] | 533 | |
---|
| 534 | if ($params['tree_output']) |
---|
| 535 | { |
---|
| 536 | return categories_flatlist_to_tree($cats); |
---|
| 537 | } |
---|
| 538 | else |
---|
| 539 | { |
---|
| 540 | return array( |
---|
| 541 | 'categories' => new PwgNamedArray( |
---|
| 542 | $cats, |
---|
| 543 | 'category', |
---|
| 544 | array( |
---|
| 545 | 'id', |
---|
| 546 | 'url', |
---|
| 547 | 'nb_images', |
---|
| 548 | 'total_nb_images', |
---|
| 549 | 'nb_categories', |
---|
| 550 | 'date_last', |
---|
| 551 | 'max_date_last', |
---|
| 552 | ) |
---|
[2548] | 553 | ) |
---|
[11152] | 554 | ); |
---|
| 555 | } |
---|
[1698] | 556 | } |
---|
| 557 | |
---|
[2563] | 558 | /** |
---|
| 559 | * returns the list of categories as you can see them in administration (web |
---|
| 560 | * service method). |
---|
| 561 | * |
---|
| 562 | * Only admin can run this method and permissions are not taken into |
---|
| 563 | * account. |
---|
| 564 | */ |
---|
| 565 | function ws_categories_getAdminList($params, &$service) |
---|
| 566 | { |
---|
| 567 | if (!is_admin()) |
---|
| 568 | { |
---|
| 569 | return new PwgError(401, 'Access denied'); |
---|
| 570 | } |
---|
[1781] | 571 | |
---|
[2563] | 572 | $query = ' |
---|
| 573 | SELECT |
---|
| 574 | category_id, |
---|
| 575 | COUNT(*) AS counter |
---|
| 576 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 577 | GROUP BY category_id |
---|
| 578 | ;'; |
---|
| 579 | $nb_images_of = simple_hash_from_query($query, 'category_id', 'counter'); |
---|
| 580 | |
---|
| 581 | $query = ' |
---|
| 582 | SELECT |
---|
| 583 | id, |
---|
| 584 | name, |
---|
[7550] | 585 | comment, |
---|
[2563] | 586 | uppercats, |
---|
| 587 | global_rank |
---|
| 588 | FROM '.CATEGORIES_TABLE.' |
---|
| 589 | ;'; |
---|
| 590 | $result = pwg_query($query); |
---|
| 591 | $cats = array(); |
---|
| 592 | |
---|
[4325] | 593 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[2563] | 594 | { |
---|
| 595 | $id = $row['id']; |
---|
| 596 | $row['nb_images'] = isset($nb_images_of[$id]) ? $nb_images_of[$id] : 0; |
---|
[4903] | 597 | $row['name'] = strip_tags( |
---|
| 598 | trigger_event( |
---|
| 599 | 'render_category_name', |
---|
| 600 | $row['name'], |
---|
| 601 | 'ws_categories_getAdminList' |
---|
| 602 | ) |
---|
| 603 | ); |
---|
[7550] | 604 | $row['comment'] = strip_tags( |
---|
| 605 | trigger_event( |
---|
| 606 | 'render_category_description', |
---|
| 607 | $row['comment'], |
---|
| 608 | 'ws_categories_getAdminList' |
---|
| 609 | ) |
---|
| 610 | ); |
---|
[2563] | 611 | array_push($cats, $row); |
---|
[2585] | 612 | } |
---|
| 613 | |
---|
[2563] | 614 | usort($cats, 'global_rank_compare'); |
---|
| 615 | return array( |
---|
| 616 | 'categories' => new PwgNamedArray( |
---|
| 617 | $cats, |
---|
| 618 | 'category', |
---|
| 619 | array( |
---|
| 620 | 'id', |
---|
| 621 | 'nb_images', |
---|
| 622 | 'name', |
---|
| 623 | 'uppercats', |
---|
| 624 | 'global_rank', |
---|
| 625 | ) |
---|
| 626 | ) |
---|
| 627 | ); |
---|
| 628 | } |
---|
| 629 | |
---|
[1781] | 630 | /** |
---|
| 631 | * returns detailed information for an element (web service method) |
---|
| 632 | */ |
---|
[1849] | 633 | function ws_images_addComment($params, &$service) |
---|
| 634 | { |
---|
[1852] | 635 | if (!$service->isPost()) |
---|
| 636 | { |
---|
| 637 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 638 | } |
---|
[1849] | 639 | $params['image_id'] = (int)$params['image_id']; |
---|
| 640 | $query = ' |
---|
[2119] | 641 | SELECT DISTINCT image_id |
---|
[1849] | 642 | FROM '.IMAGE_CATEGORY_TABLE.' INNER JOIN '.CATEGORIES_TABLE.' ON category_id=id |
---|
[2119] | 643 | WHERE commentable="true" |
---|
[1849] | 644 | AND image_id='.$params['image_id']. |
---|
| 645 | get_sql_condition_FandF( |
---|
| 646 | array( |
---|
| 647 | 'forbidden_categories' => 'id', |
---|
| 648 | 'visible_categories' => 'id', |
---|
| 649 | 'visible_images' => 'image_id' |
---|
| 650 | ), |
---|
| 651 | ' AND' |
---|
| 652 | ); |
---|
[4325] | 653 | if ( !pwg_db_num_rows( pwg_query( $query ) ) ) |
---|
[1849] | 654 | { |
---|
| 655 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 656 | } |
---|
[2119] | 657 | |
---|
[1849] | 658 | $comm = array( |
---|
[6437] | 659 | 'author' => trim( $params['author'] ), |
---|
| 660 | 'content' => trim( $params['content'] ), |
---|
[1849] | 661 | 'image_id' => $params['image_id'], |
---|
| 662 | ); |
---|
| 663 | |
---|
| 664 | include_once(PHPWG_ROOT_PATH.'include/functions_comment.inc.php'); |
---|
[2119] | 665 | |
---|
| 666 | $comment_action = insert_user_comment( |
---|
[1849] | 667 | $comm, $params['key'], $infos |
---|
| 668 | ); |
---|
| 669 | |
---|
| 670 | switch ($comment_action) |
---|
| 671 | { |
---|
| 672 | case 'reject': |
---|
[5021] | 673 | array_push($infos, l10n('Your comment has NOT been registered because it did not pass the validation rules') ); |
---|
[7782] | 674 | return new PwgError(403, implode("; ", $infos) ); |
---|
[1849] | 675 | case 'validate': |
---|
| 676 | case 'moderate': |
---|
[2119] | 677 | $ret = array( |
---|
[1849] | 678 | 'id' => $comm['id'], |
---|
| 679 | 'validation' => $comment_action=='validate', |
---|
| 680 | ); |
---|
| 681 | return new PwgNamedStruct( |
---|
| 682 | 'comment', |
---|
[2119] | 683 | $ret, |
---|
| 684 | null, array() |
---|
[1849] | 685 | ); |
---|
| 686 | default: |
---|
| 687 | return new PwgError(500, "Unknown comment action ".$comment_action ); |
---|
| 688 | } |
---|
| 689 | } |
---|
| 690 | |
---|
| 691 | /** |
---|
| 692 | * returns detailed information for an element (web service method) |
---|
| 693 | */ |
---|
[1698] | 694 | function ws_images_getInfo($params, &$service) |
---|
| 695 | { |
---|
| 696 | @include_once(PHPWG_ROOT_PATH.'include/functions_picture.inc.php'); |
---|
[1849] | 697 | global $user, $conf; |
---|
[1698] | 698 | $params['image_id'] = (int)$params['image_id']; |
---|
| 699 | if ( $params['image_id']<=0 ) |
---|
| 700 | { |
---|
| 701 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 702 | } |
---|
[1781] | 703 | |
---|
[1698] | 704 | $query=' |
---|
| 705 | SELECT * FROM '.IMAGES_TABLE.' |
---|
[1711] | 706 | WHERE id='.$params['image_id']. |
---|
| 707 | get_sql_condition_FandF( |
---|
| 708 | array('visible_images' => 'id'), |
---|
| 709 | ' AND' |
---|
[2516] | 710 | ).' |
---|
| 711 | LIMIT 1'; |
---|
[1711] | 712 | |
---|
[4325] | 713 | $image_row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
[1698] | 714 | if ($image_row==null) |
---|
| 715 | { |
---|
[1852] | 716 | return new PwgError(404, "image_id not found"); |
---|
[1698] | 717 | } |
---|
[1845] | 718 | $image_row = array_merge( $image_row, ws_std_get_urls($image_row) ); |
---|
[1698] | 719 | |
---|
| 720 | //-------------------------------------------------------- related categories |
---|
| 721 | $query = ' |
---|
[1866] | 722 | SELECT id, name, permalink, uppercats, global_rank, commentable |
---|
[1698] | 723 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
[1849] | 724 | INNER JOIN '.CATEGORIES_TABLE.' ON category_id = id |
---|
[2119] | 725 | WHERE image_id = '.$image_row['id']. |
---|
| 726 | get_sql_condition_FandF( |
---|
| 727 | array( 'forbidden_categories' => 'category_id' ), |
---|
| 728 | ' AND' |
---|
| 729 | ).' |
---|
[1698] | 730 | ;'; |
---|
| 731 | $result = pwg_query($query); |
---|
[1849] | 732 | $is_commentable = false; |
---|
[1698] | 733 | $related_categories = array(); |
---|
[4325] | 734 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1698] | 735 | { |
---|
[1849] | 736 | if ($row['commentable']=='true') |
---|
| 737 | { |
---|
| 738 | $is_commentable = true; |
---|
| 739 | } |
---|
| 740 | unset($row['commentable']); |
---|
[1698] | 741 | $row['url'] = make_index_url( |
---|
| 742 | array( |
---|
[1861] | 743 | 'category' => $row |
---|
[1698] | 744 | ) |
---|
| 745 | ); |
---|
| 746 | |
---|
| 747 | $row['page_url'] = make_picture_url( |
---|
| 748 | array( |
---|
| 749 | 'image_id' => $image_row['id'], |
---|
| 750 | 'image_file' => $image_row['file'], |
---|
[1861] | 751 | 'category' => $row |
---|
[1698] | 752 | ) |
---|
| 753 | ); |
---|
[1849] | 754 | $row['id']=(int)$row['id']; |
---|
[1698] | 755 | array_push($related_categories, $row); |
---|
| 756 | } |
---|
| 757 | usort($related_categories, 'global_rank_compare'); |
---|
| 758 | if ( empty($related_categories) ) |
---|
| 759 | { |
---|
| 760 | return new PwgError(401, 'Access denied'); |
---|
| 761 | } |
---|
| 762 | |
---|
| 763 | //-------------------------------------------------------------- related tags |
---|
[1815] | 764 | $related_tags = get_common_tags( array($image_row['id']), -1 ); |
---|
| 765 | foreach( $related_tags as $i=>$tag) |
---|
[1698] | 766 | { |
---|
[1815] | 767 | $tag['url'] = make_index_url( |
---|
[1698] | 768 | array( |
---|
[1815] | 769 | 'tags' => array($tag) |
---|
[1698] | 770 | ) |
---|
| 771 | ); |
---|
[1815] | 772 | $tag['page_url'] = make_picture_url( |
---|
[1698] | 773 | array( |
---|
| 774 | 'image_id' => $image_row['id'], |
---|
| 775 | 'image_file' => $image_row['file'], |
---|
[1815] | 776 | 'tags' => array($tag), |
---|
[1698] | 777 | ) |
---|
| 778 | ); |
---|
[1815] | 779 | unset($tag['counter']); |
---|
[1849] | 780 | $tag['id']=(int)$tag['id']; |
---|
[1815] | 781 | $related_tags[$i]=$tag; |
---|
[1698] | 782 | } |
---|
[1849] | 783 | //------------------------------------------------------------- related rates |
---|
| 784 | $query = ' |
---|
| 785 | SELECT COUNT(rate) AS count |
---|
| 786 | , ROUND(AVG(rate),2) AS average |
---|
| 787 | FROM '.RATE_TABLE.' |
---|
| 788 | WHERE element_id = '.$image_row['id'].' |
---|
| 789 | ;'; |
---|
[4325] | 790 | $rating = pwg_db_fetch_assoc(pwg_query($query)); |
---|
[1849] | 791 | $rating['count'] = (int)$rating['count']; |
---|
| 792 | |
---|
[1698] | 793 | //---------------------------------------------------------- related comments |
---|
[1849] | 794 | $related_comments = array(); |
---|
[2119] | 795 | |
---|
[1849] | 796 | $where_comments = 'image_id = '.$image_row['id']; |
---|
| 797 | if ( !is_admin() ) |
---|
| 798 | { |
---|
| 799 | $where_comments .= ' |
---|
| 800 | AND validated="true"'; |
---|
| 801 | } |
---|
| 802 | |
---|
[1698] | 803 | $query = ' |
---|
[6652] | 804 | SELECT COUNT(id) AS nb_comments |
---|
[1698] | 805 | FROM '.COMMENTS_TABLE.' |
---|
[1849] | 806 | WHERE '.$where_comments; |
---|
[1698] | 807 | list($nb_comments) = array_from_query($query, 'nb_comments'); |
---|
[1849] | 808 | $nb_comments = (int)$nb_comments; |
---|
[1698] | 809 | |
---|
[1849] | 810 | if ( $nb_comments>0 and $params['comments_per_page']>0 ) |
---|
| 811 | { |
---|
| 812 | $query = ' |
---|
[1698] | 813 | SELECT id, date, author, content |
---|
| 814 | FROM '.COMMENTS_TABLE.' |
---|
[1849] | 815 | WHERE '.$where_comments.' |
---|
| 816 | ORDER BY date |
---|
[4334] | 817 | LIMIT '.(int)$params['comments_per_page']. |
---|
| 818 | ' OFFSET '.(int)($params['comments_per_page']*$params['comments_page']); |
---|
[1698] | 819 | |
---|
[1849] | 820 | $result = pwg_query($query); |
---|
[4325] | 821 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1849] | 822 | { |
---|
| 823 | $row['id']=(int)$row['id']; |
---|
| 824 | array_push($related_comments, $row); |
---|
| 825 | } |
---|
| 826 | } |
---|
[2119] | 827 | |
---|
[1849] | 828 | $comment_post_data = null; |
---|
[2119] | 829 | if ($is_commentable and |
---|
[2029] | 830 | (!is_a_guest() |
---|
| 831 | or (is_a_guest() and $conf['comments_forall'] ) |
---|
[1849] | 832 | ) |
---|
| 833 | ) |
---|
[1698] | 834 | { |
---|
[4304] | 835 | $comment_post_data['author'] = stripslashes($user['username']); |
---|
[7495] | 836 | $comment_post_data['key'] = get_ephemeral_key(2, $params['image_id']); |
---|
[1698] | 837 | } |
---|
| 838 | |
---|
[1849] | 839 | $ret = $image_row; |
---|
| 840 | foreach ( array('id','width','height','hit','filesize') as $k ) |
---|
| 841 | { |
---|
| 842 | if (isset($ret[$k])) |
---|
| 843 | { |
---|
| 844 | $ret[$k] = (int)$ret[$k]; |
---|
| 845 | } |
---|
| 846 | } |
---|
| 847 | foreach ( array('path', 'storage_category_id') as $k ) |
---|
| 848 | { |
---|
| 849 | unset($ret[$k]); |
---|
| 850 | } |
---|
[1698] | 851 | |
---|
[1849] | 852 | $ret['rates'] = array( WS_XML_ATTRIBUTES => $rating ); |
---|
[1698] | 853 | $ret['categories'] = new PwgNamedArray($related_categories, 'category', array('id','url', 'page_url') ); |
---|
[2585] | 854 | $ret['tags'] = new PwgNamedArray($related_tags, 'tag', array('id','url_name','url','name','page_url') ); |
---|
[1849] | 855 | if ( isset($comment_post_data) ) |
---|
| 856 | { |
---|
| 857 | $ret['comment_post'] = array( WS_XML_ATTRIBUTES => $comment_post_data ); |
---|
| 858 | } |
---|
[1698] | 859 | $ret['comments'] = array( |
---|
[2119] | 860 | WS_XML_ATTRIBUTES => |
---|
[1849] | 861 | array( |
---|
| 862 | 'page' => $params['comments_page'], |
---|
| 863 | 'per_page' => $params['comments_per_page'], |
---|
| 864 | 'count' => count($related_comments), |
---|
| 865 | 'nb_comments' => $nb_comments, |
---|
| 866 | ), |
---|
| 867 | WS_XML_CONTENT => new PwgNamedArray($related_comments, 'comment', array('id','date') ) |
---|
[1698] | 868 | ); |
---|
[1845] | 869 | |
---|
[1698] | 870 | return new PwgNamedStruct('image',$ret, null, array('name','comment') ); |
---|
| 871 | } |
---|
| 872 | |
---|
[2435] | 873 | |
---|
[1837] | 874 | /** |
---|
[2435] | 875 | * rates the image_id in the parameter |
---|
| 876 | */ |
---|
| 877 | function ws_images_Rate($params, &$service) |
---|
| 878 | { |
---|
| 879 | $image_id = (int)$params['image_id']; |
---|
| 880 | $query = ' |
---|
| 881 | SELECT DISTINCT id FROM '.IMAGES_TABLE.' |
---|
| 882 | INNER JOIN '.IMAGE_CATEGORY_TABLE.' ON id=image_id |
---|
| 883 | WHERE id='.$image_id |
---|
| 884 | .get_sql_condition_FandF( |
---|
| 885 | array( |
---|
| 886 | 'forbidden_categories' => 'category_id', |
---|
| 887 | 'forbidden_images' => 'id', |
---|
| 888 | ), |
---|
| 889 | ' AND' |
---|
| 890 | ).' |
---|
| 891 | LIMIT 1'; |
---|
[4325] | 892 | if ( pwg_db_num_rows( pwg_query($query) )==0 ) |
---|
[2435] | 893 | { |
---|
| 894 | return new PwgError(404, "Invalid image_id or access denied" ); |
---|
| 895 | } |
---|
| 896 | $rate = (int)$params['rate']; |
---|
| 897 | include_once(PHPWG_ROOT_PATH.'include/functions_rate.inc.php'); |
---|
| 898 | $res = rate_picture( $image_id, $rate ); |
---|
| 899 | if ($res==false) |
---|
| 900 | { |
---|
| 901 | global $conf; |
---|
| 902 | return new PwgError( 403, "Forbidden or rate not in ". implode(',',$conf['rate_items'])); |
---|
| 903 | } |
---|
| 904 | return $res; |
---|
| 905 | } |
---|
| 906 | |
---|
| 907 | |
---|
| 908 | /** |
---|
[1837] | 909 | * returns a list of elements corresponding to a query search |
---|
| 910 | */ |
---|
| 911 | function ws_images_search($params, &$service) |
---|
| 912 | { |
---|
| 913 | global $page; |
---|
| 914 | $images = array(); |
---|
| 915 | include_once( PHPWG_ROOT_PATH .'include/functions_search.inc.php' ); |
---|
| 916 | include_once(PHPWG_ROOT_PATH.'include/functions_picture.inc.php'); |
---|
[1698] | 917 | |
---|
[2135] | 918 | $where_clauses = ws_std_image_sql_filter( $params, 'i.' ); |
---|
| 919 | $order_by = ws_std_image_sql_order($params, 'i.'); |
---|
[1837] | 920 | |
---|
[2451] | 921 | $super_order_by = false; |
---|
[2135] | 922 | if ( !empty($order_by) ) |
---|
[1837] | 923 | { |
---|
[2135] | 924 | global $conf; |
---|
| 925 | $conf['order_by'] = 'ORDER BY '.$order_by; |
---|
[2451] | 926 | $super_order_by=true; // quick_search_result might be faster |
---|
[1837] | 927 | } |
---|
| 928 | |
---|
[2135] | 929 | $search_result = get_quick_search_results($params['query'], |
---|
[2451] | 930 | $super_order_by, |
---|
| 931 | implode(',', $where_clauses) |
---|
| 932 | ); |
---|
[2119] | 933 | |
---|
[2451] | 934 | $image_ids = array_slice( |
---|
| 935 | $search_result['items'], |
---|
| 936 | $params['page']*$params['per_page'], |
---|
| 937 | $params['per_page'] |
---|
| 938 | ); |
---|
[1837] | 939 | |
---|
| 940 | if ( count($image_ids) ) |
---|
| 941 | { |
---|
| 942 | $query = ' |
---|
| 943 | SELECT * FROM '.IMAGES_TABLE.' |
---|
[2451] | 944 | WHERE id IN ('.implode(',', $image_ids).')'; |
---|
[1837] | 945 | |
---|
[2451] | 946 | $image_ids = array_flip($image_ids); |
---|
[1837] | 947 | $result = pwg_query($query); |
---|
[4325] | 948 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1837] | 949 | { |
---|
| 950 | $image = array(); |
---|
| 951 | foreach ( array('id', 'width', 'height', 'hit') as $k ) |
---|
| 952 | { |
---|
| 953 | if (isset($row[$k])) |
---|
| 954 | { |
---|
| 955 | $image[$k] = (int)$row[$k]; |
---|
| 956 | } |
---|
| 957 | } |
---|
[11115] | 958 | foreach ( array('file', 'name', 'comment', 'date_creation', 'date_available') as $k ) |
---|
[1837] | 959 | { |
---|
| 960 | $image[$k] = $row[$k]; |
---|
| 961 | } |
---|
| 962 | $image = array_merge( $image, ws_std_get_urls($row) ); |
---|
[2451] | 963 | $images[$image_ids[$image['id']]] = $image; |
---|
[1837] | 964 | } |
---|
[2451] | 965 | ksort($images, SORT_NUMERIC); |
---|
| 966 | $images = array_values($images); |
---|
[1837] | 967 | } |
---|
| 968 | |
---|
| 969 | |
---|
| 970 | return array( 'images' => |
---|
| 971 | array ( |
---|
| 972 | WS_XML_ATTRIBUTES => |
---|
| 973 | array( |
---|
| 974 | 'page' => $params['page'], |
---|
| 975 | 'per_page' => $params['per_page'], |
---|
| 976 | 'count' => count($images) |
---|
| 977 | ), |
---|
| 978 | WS_XML_CONTENT => new PwgNamedArray($images, 'image', |
---|
[1845] | 979 | ws_std_get_image_xml_attributes() ) |
---|
[1837] | 980 | ) |
---|
| 981 | ); |
---|
| 982 | } |
---|
| 983 | |
---|
[2413] | 984 | function ws_images_setPrivacyLevel($params, &$service) |
---|
| 985 | { |
---|
[8126] | 986 | if (!is_admin()) |
---|
[2413] | 987 | { |
---|
| 988 | return new PwgError(401, 'Access denied'); |
---|
| 989 | } |
---|
[4513] | 990 | if (!$service->isPost()) |
---|
| 991 | { |
---|
| 992 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 993 | } |
---|
[2770] | 994 | $params['image_id'] = array_map( 'intval',$params['image_id'] ); |
---|
[2413] | 995 | if ( empty($params['image_id']) ) |
---|
| 996 | { |
---|
| 997 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 998 | } |
---|
| 999 | global $conf; |
---|
| 1000 | if ( !in_array( (int)$params['level'], $conf['available_permission_levels']) ) |
---|
| 1001 | { |
---|
| 1002 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid level"); |
---|
| 1003 | } |
---|
[4513] | 1004 | |
---|
[2413] | 1005 | $query = ' |
---|
| 1006 | UPDATE '.IMAGES_TABLE.' |
---|
| 1007 | SET level='.(int)$params['level'].' |
---|
| 1008 | WHERE id IN ('.implode(',',$params['image_id']).')'; |
---|
| 1009 | $result = pwg_query($query); |
---|
[5930] | 1010 | $affected_rows = pwg_db_changes($result); |
---|
[2413] | 1011 | if ($affected_rows) |
---|
| 1012 | { |
---|
| 1013 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1014 | invalidate_user_cache(); |
---|
| 1015 | } |
---|
| 1016 | return $affected_rows; |
---|
| 1017 | } |
---|
| 1018 | |
---|
[11371] | 1019 | function ws_images_setRank($params, &$service) |
---|
| 1020 | { |
---|
| 1021 | if (!is_admin()) |
---|
| 1022 | { |
---|
| 1023 | return new PwgError(401, 'Access denied'); |
---|
| 1024 | } |
---|
| 1025 | |
---|
| 1026 | if (!$service->isPost()) |
---|
| 1027 | { |
---|
| 1028 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 1029 | } |
---|
| 1030 | |
---|
| 1031 | // is the image_id valid? |
---|
| 1032 | $params['image_id'] = (int)$params['image_id']; |
---|
| 1033 | if ($params['image_id'] <= 0) |
---|
| 1034 | { |
---|
| 1035 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 1036 | } |
---|
| 1037 | |
---|
| 1038 | // is the category valid? |
---|
| 1039 | $params['category_id'] = (int)$params['category_id']; |
---|
| 1040 | if ($params['category_id'] <= 0) |
---|
| 1041 | { |
---|
| 1042 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid category_id"); |
---|
| 1043 | } |
---|
| 1044 | |
---|
| 1045 | // is the rank valid? |
---|
| 1046 | $params['rank'] = (int)$params['rank']; |
---|
| 1047 | if ($params['rank'] <= 0) |
---|
| 1048 | { |
---|
| 1049 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid rank"); |
---|
| 1050 | } |
---|
| 1051 | |
---|
| 1052 | // does the image really exist? |
---|
| 1053 | $query=' |
---|
| 1054 | SELECT |
---|
| 1055 | * |
---|
| 1056 | FROM '.IMAGES_TABLE.' |
---|
| 1057 | WHERE id = '.$params['image_id'].' |
---|
| 1058 | ;'; |
---|
| 1059 | |
---|
| 1060 | $image_row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
| 1061 | if ($image_row == null) |
---|
| 1062 | { |
---|
| 1063 | return new PwgError(404, "image_id not found"); |
---|
| 1064 | } |
---|
| 1065 | |
---|
| 1066 | // is the image associated to this category? |
---|
| 1067 | $query = ' |
---|
| 1068 | SELECT |
---|
| 1069 | image_id, |
---|
| 1070 | category_id, |
---|
| 1071 | rank |
---|
| 1072 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 1073 | WHERE image_id = '.$params['image_id'].' |
---|
| 1074 | AND category_id = '.$params['category_id'].' |
---|
| 1075 | ;'; |
---|
| 1076 | $category_row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
| 1077 | if ($category_row == null) |
---|
| 1078 | { |
---|
| 1079 | return new PwgError(404, "This image is not associated to this category"); |
---|
| 1080 | } |
---|
| 1081 | |
---|
| 1082 | // what is the current higher rank for this category? |
---|
| 1083 | $query = ' |
---|
| 1084 | SELECT |
---|
| 1085 | MAX(rank) AS max_rank |
---|
| 1086 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 1087 | WHERE category_id = '.$params['category_id'].' |
---|
| 1088 | ;'; |
---|
| 1089 | $result = pwg_query($query); |
---|
| 1090 | $row = pwg_db_fetch_assoc($result); |
---|
| 1091 | |
---|
| 1092 | if (is_numeric($row['max_rank'])) |
---|
| 1093 | { |
---|
| 1094 | if ($params['rank'] > $row['max_rank']) |
---|
| 1095 | { |
---|
| 1096 | $params['rank'] = $row['max_rank'] + 1; |
---|
| 1097 | } |
---|
| 1098 | } |
---|
| 1099 | else |
---|
| 1100 | { |
---|
| 1101 | $params['rank'] = 1; |
---|
| 1102 | } |
---|
| 1103 | |
---|
| 1104 | // update rank for all other photos in the same category |
---|
| 1105 | $query = ' |
---|
| 1106 | UPDATE '.IMAGE_CATEGORY_TABLE.' |
---|
| 1107 | SET rank = rank + 1 |
---|
| 1108 | WHERE category_id = '.$params['category_id'].' |
---|
| 1109 | AND rank IS NOT NULL |
---|
| 1110 | AND rank >= '.$params['rank'].' |
---|
| 1111 | ;'; |
---|
| 1112 | pwg_query($query); |
---|
| 1113 | |
---|
| 1114 | // set the new rank for the photo |
---|
| 1115 | $query = ' |
---|
| 1116 | UPDATE '.IMAGE_CATEGORY_TABLE.' |
---|
| 1117 | SET rank = '.$params['rank'].' |
---|
| 1118 | WHERE image_id = '.$params['image_id'].' |
---|
| 1119 | AND category_id = '.$params['category_id'].' |
---|
| 1120 | ;'; |
---|
| 1121 | pwg_query($query); |
---|
| 1122 | |
---|
| 1123 | // return data for client |
---|
| 1124 | return array( |
---|
| 1125 | 'image_id' => $params['image_id'], |
---|
| 1126 | 'category_id' => $params['category_id'], |
---|
| 1127 | 'rank' => $params['rank'], |
---|
| 1128 | ); |
---|
| 1129 | } |
---|
| 1130 | |
---|
[3193] | 1131 | function ws_images_add_chunk($params, &$service) |
---|
| 1132 | { |
---|
[5014] | 1133 | global $conf; |
---|
| 1134 | |
---|
[4900] | 1135 | ws_logfile('[ws_images_add_chunk] welcome'); |
---|
[3193] | 1136 | // data |
---|
| 1137 | // original_sum |
---|
| 1138 | // type {thumb, file, high} |
---|
| 1139 | // position |
---|
[3488] | 1140 | |
---|
[8126] | 1141 | if (!is_admin()) |
---|
[3193] | 1142 | { |
---|
| 1143 | return new PwgError(401, 'Access denied'); |
---|
| 1144 | } |
---|
| 1145 | |
---|
[4511] | 1146 | if (!$service->isPost()) |
---|
| 1147 | { |
---|
| 1148 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 1149 | } |
---|
| 1150 | |
---|
[4900] | 1151 | foreach ($params as $param_key => $param_value) { |
---|
| 1152 | if ('data' == $param_key) { |
---|
| 1153 | continue; |
---|
| 1154 | } |
---|
| 1155 | |
---|
| 1156 | ws_logfile( |
---|
| 1157 | sprintf( |
---|
| 1158 | '[ws_images_add_chunk] input param "%s" : "%s"', |
---|
| 1159 | $param_key, |
---|
| 1160 | is_null($param_value) ? 'NULL' : $param_value |
---|
| 1161 | ) |
---|
| 1162 | ); |
---|
| 1163 | } |
---|
| 1164 | |
---|
[5014] | 1165 | $upload_dir = $conf['upload_dir'].'/buffer'; |
---|
[3193] | 1166 | |
---|
| 1167 | // create the upload directory tree if not exists |
---|
| 1168 | if (!is_dir($upload_dir)) { |
---|
| 1169 | umask(0000); |
---|
| 1170 | $recursive = true; |
---|
| 1171 | if (!@mkdir($upload_dir, 0777, $recursive)) |
---|
| 1172 | { |
---|
| 1173 | return new PwgError(500, 'error during buffer directory creation'); |
---|
| 1174 | } |
---|
| 1175 | } |
---|
| 1176 | |
---|
| 1177 | if (!is_writable($upload_dir)) |
---|
| 1178 | { |
---|
| 1179 | // last chance to make the directory writable |
---|
| 1180 | @chmod($upload_dir, 0777); |
---|
| 1181 | |
---|
| 1182 | if (!is_writable($upload_dir)) |
---|
| 1183 | { |
---|
| 1184 | return new PwgError(500, 'buffer directory has no write access'); |
---|
| 1185 | } |
---|
| 1186 | } |
---|
| 1187 | |
---|
| 1188 | secure_directory($upload_dir); |
---|
| 1189 | |
---|
| 1190 | $filename = sprintf( |
---|
| 1191 | '%s-%s-%05u.block', |
---|
| 1192 | $params['original_sum'], |
---|
| 1193 | $params['type'], |
---|
| 1194 | $params['position'] |
---|
| 1195 | ); |
---|
| 1196 | |
---|
[3240] | 1197 | ws_logfile('[ws_images_add_chunk] data length : '.strlen($params['data'])); |
---|
| 1198 | |
---|
[3193] | 1199 | $bytes_written = file_put_contents( |
---|
| 1200 | $upload_dir.'/'.$filename, |
---|
[3240] | 1201 | base64_decode($params['data']) |
---|
[3193] | 1202 | ); |
---|
| 1203 | |
---|
| 1204 | if (false === $bytes_written) { |
---|
| 1205 | return new PwgError( |
---|
| 1206 | 500, |
---|
| 1207 | 'an error has occured while writting chunk '.$params['position'].' for '.$params['type'] |
---|
| 1208 | ); |
---|
| 1209 | } |
---|
| 1210 | } |
---|
| 1211 | |
---|
| 1212 | function merge_chunks($output_filepath, $original_sum, $type) |
---|
| 1213 | { |
---|
[5014] | 1214 | global $conf; |
---|
| 1215 | |
---|
[3193] | 1216 | ws_logfile('[merge_chunks] input parameter $output_filepath : '.$output_filepath); |
---|
| 1217 | |
---|
[4348] | 1218 | if (is_file($output_filepath)) |
---|
| 1219 | { |
---|
| 1220 | unlink($output_filepath); |
---|
[4513] | 1221 | |
---|
[4348] | 1222 | if (is_file($output_filepath)) |
---|
| 1223 | { |
---|
| 1224 | new PwgError(500, '[merge_chunks] error while trying to remove existing '.$output_filepath); |
---|
| 1225 | exit(); |
---|
| 1226 | } |
---|
| 1227 | } |
---|
[4513] | 1228 | |
---|
[5014] | 1229 | $upload_dir = $conf['upload_dir'].'/buffer'; |
---|
[3193] | 1230 | $pattern = '/'.$original_sum.'-'.$type.'/'; |
---|
| 1231 | $chunks = array(); |
---|
[3488] | 1232 | |
---|
[3193] | 1233 | if ($handle = opendir($upload_dir)) |
---|
| 1234 | { |
---|
| 1235 | while (false !== ($file = readdir($handle))) |
---|
| 1236 | { |
---|
| 1237 | if (preg_match($pattern, $file)) |
---|
| 1238 | { |
---|
| 1239 | ws_logfile($file); |
---|
| 1240 | array_push($chunks, $upload_dir.'/'.$file); |
---|
| 1241 | } |
---|
| 1242 | } |
---|
| 1243 | closedir($handle); |
---|
| 1244 | } |
---|
| 1245 | |
---|
| 1246 | sort($chunks); |
---|
[3240] | 1247 | |
---|
[4425] | 1248 | if (function_exists('memory_get_usage')) { |
---|
| 1249 | ws_logfile('[merge_chunks] memory_get_usage before loading chunks: '.memory_get_usage()); |
---|
| 1250 | } |
---|
[3488] | 1251 | |
---|
[3514] | 1252 | $i = 0; |
---|
[4513] | 1253 | |
---|
[3240] | 1254 | foreach ($chunks as $chunk) |
---|
| 1255 | { |
---|
| 1256 | $string = file_get_contents($chunk); |
---|
[3488] | 1257 | |
---|
[4425] | 1258 | if (function_exists('memory_get_usage')) { |
---|
| 1259 | ws_logfile('[merge_chunks] memory_get_usage on chunk '.++$i.': '.memory_get_usage()); |
---|
| 1260 | } |
---|
[3488] | 1261 | |
---|
[3240] | 1262 | if (!file_put_contents($output_filepath, $string, FILE_APPEND)) |
---|
| 1263 | { |
---|
[4346] | 1264 | new PwgError(500, '[merge_chunks] error while writting chunks for '.$output_filepath); |
---|
| 1265 | exit(); |
---|
[3240] | 1266 | } |
---|
[3488] | 1267 | |
---|
[3193] | 1268 | unlink($chunk); |
---|
| 1269 | } |
---|
[3240] | 1270 | |
---|
[4425] | 1271 | if (function_exists('memory_get_usage')) { |
---|
| 1272 | ws_logfile('[merge_chunks] memory_get_usage after loading chunks: '.memory_get_usage()); |
---|
| 1273 | } |
---|
[3193] | 1274 | } |
---|
| 1275 | |
---|
[4346] | 1276 | /* |
---|
| 1277 | * The $file_path must be the path of the basic "web sized" photo |
---|
| 1278 | * The $type value will automatically modify the $file_path to the corresponding file |
---|
| 1279 | */ |
---|
| 1280 | function add_file($file_path, $type, $original_sum, $file_sum) |
---|
| 1281 | { |
---|
[8249] | 1282 | include_once(PHPWG_ROOT_PATH.'admin/include/functions_upload.inc.php'); |
---|
| 1283 | |
---|
[4347] | 1284 | $file_path = file_path_for_type($file_path, $type); |
---|
[4346] | 1285 | |
---|
| 1286 | $upload_dir = dirname($file_path); |
---|
[4900] | 1287 | if (substr(PHP_OS, 0, 3) == 'WIN') |
---|
| 1288 | { |
---|
| 1289 | $upload_dir = str_replace('/', DIRECTORY_SEPARATOR, $upload_dir); |
---|
| 1290 | } |
---|
[4513] | 1291 | |
---|
[4900] | 1292 | ws_logfile('[add_file] file_path : '.$file_path); |
---|
| 1293 | ws_logfile('[add_file] upload_dir : '.$upload_dir); |
---|
| 1294 | |
---|
[4346] | 1295 | if (!is_dir($upload_dir)) { |
---|
| 1296 | umask(0000); |
---|
| 1297 | $recursive = true; |
---|
| 1298 | if (!@mkdir($upload_dir, 0777, $recursive)) |
---|
| 1299 | { |
---|
| 1300 | new PwgError(500, '[add_file] error during '.$type.' directory creation'); |
---|
| 1301 | exit(); |
---|
| 1302 | } |
---|
| 1303 | } |
---|
| 1304 | |
---|
| 1305 | if (!is_writable($upload_dir)) |
---|
| 1306 | { |
---|
| 1307 | // last chance to make the directory writable |
---|
| 1308 | @chmod($upload_dir, 0777); |
---|
| 1309 | |
---|
| 1310 | if (!is_writable($upload_dir)) |
---|
| 1311 | { |
---|
| 1312 | new PwgError(500, '[add_file] '.$type.' directory has no write access'); |
---|
| 1313 | exit(); |
---|
| 1314 | } |
---|
| 1315 | } |
---|
| 1316 | |
---|
| 1317 | secure_directory($upload_dir); |
---|
| 1318 | |
---|
| 1319 | // merge the thumbnail |
---|
| 1320 | merge_chunks($file_path, $original_sum, $type); |
---|
| 1321 | chmod($file_path, 0644); |
---|
| 1322 | |
---|
| 1323 | // check dumped thumbnail md5 |
---|
| 1324 | $dumped_md5 = md5_file($file_path); |
---|
| 1325 | if ($dumped_md5 != $file_sum) { |
---|
| 1326 | new PwgError(500, '[add_file] '.$type.' transfer failed'); |
---|
| 1327 | exit(); |
---|
| 1328 | } |
---|
| 1329 | |
---|
| 1330 | list($width, $height) = getimagesize($file_path); |
---|
| 1331 | $filesize = floor(filesize($file_path)/1024); |
---|
| 1332 | |
---|
| 1333 | return array( |
---|
| 1334 | 'width' => $width, |
---|
| 1335 | 'height' => $height, |
---|
| 1336 | 'filesize' => $filesize, |
---|
| 1337 | ); |
---|
| 1338 | } |
---|
| 1339 | |
---|
[4348] | 1340 | function ws_images_addFile($params, &$service) |
---|
| 1341 | { |
---|
| 1342 | // image_id |
---|
| 1343 | // type {thumb, file, high} |
---|
| 1344 | // sum |
---|
| 1345 | |
---|
| 1346 | global $conf; |
---|
[8126] | 1347 | if (!is_admin()) |
---|
[4348] | 1348 | { |
---|
| 1349 | return new PwgError(401, 'Access denied'); |
---|
| 1350 | } |
---|
| 1351 | |
---|
| 1352 | $params['image_id'] = (int)$params['image_id']; |
---|
| 1353 | if ($params['image_id'] <= 0) |
---|
| 1354 | { |
---|
| 1355 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 1356 | } |
---|
| 1357 | |
---|
| 1358 | // |
---|
| 1359 | // what is the path? |
---|
| 1360 | // |
---|
| 1361 | $query = ' |
---|
| 1362 | SELECT |
---|
| 1363 | path, |
---|
| 1364 | md5sum |
---|
| 1365 | FROM '.IMAGES_TABLE.' |
---|
| 1366 | WHERE id = '.$params['image_id'].' |
---|
| 1367 | ;'; |
---|
[6500] | 1368 | list($file_path, $original_sum) = pwg_db_fetch_row(pwg_query($query)); |
---|
[4348] | 1369 | |
---|
| 1370 | // TODO only files added with web API can be updated with web API |
---|
| 1371 | |
---|
| 1372 | // |
---|
| 1373 | // makes sure directories are there and call the merge_chunks |
---|
| 1374 | // |
---|
| 1375 | $infos = add_file($file_path, $params['type'], $original_sum, $params['sum']); |
---|
| 1376 | |
---|
| 1377 | // |
---|
| 1378 | // update basic metadata from file |
---|
| 1379 | // |
---|
| 1380 | $update = array(); |
---|
[4513] | 1381 | |
---|
[4348] | 1382 | if ('high' == $params['type']) |
---|
| 1383 | { |
---|
| 1384 | $update['high_filesize'] = $infos['filesize']; |
---|
| 1385 | $update['has_high'] = 'true'; |
---|
| 1386 | } |
---|
| 1387 | |
---|
| 1388 | if ('file' == $params['type']) |
---|
| 1389 | { |
---|
| 1390 | $update['filesize'] = $infos['filesize']; |
---|
| 1391 | $update['width'] = $infos['width']; |
---|
| 1392 | $update['height'] = $infos['height']; |
---|
| 1393 | } |
---|
| 1394 | |
---|
| 1395 | // we may have nothing to update at database level, for example with a |
---|
| 1396 | // thumbnail update |
---|
| 1397 | if (count($update) > 0) |
---|
| 1398 | { |
---|
| 1399 | $update['id'] = $params['image_id']; |
---|
[4513] | 1400 | |
---|
[4348] | 1401 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1402 | mass_updates( |
---|
| 1403 | IMAGES_TABLE, |
---|
| 1404 | array( |
---|
| 1405 | 'primary' => array('id'), |
---|
| 1406 | 'update' => array_diff(array_keys($update), array('id')) |
---|
| 1407 | ), |
---|
| 1408 | array($update) |
---|
| 1409 | ); |
---|
| 1410 | } |
---|
| 1411 | } |
---|
| 1412 | |
---|
[2463] | 1413 | function ws_images_add($params, &$service) |
---|
| 1414 | { |
---|
[8464] | 1415 | global $conf, $user; |
---|
[8126] | 1416 | if (!is_admin()) |
---|
[2496] | 1417 | { |
---|
| 1418 | return new PwgError(401, 'Access denied'); |
---|
| 1419 | } |
---|
| 1420 | |
---|
[3662] | 1421 | foreach ($params as $param_key => $param_value) { |
---|
| 1422 | ws_logfile( |
---|
| 1423 | sprintf( |
---|
| 1424 | '[pwg.images.add] input param "%s" : "%s"', |
---|
| 1425 | $param_key, |
---|
| 1426 | is_null($param_value) ? 'NULL' : $param_value |
---|
| 1427 | ) |
---|
| 1428 | ); |
---|
| 1429 | } |
---|
[2496] | 1430 | |
---|
[2592] | 1431 | // does the image already exists ? |
---|
[4954] | 1432 | if ('md5sum' == $conf['uniqueness_mode']) |
---|
| 1433 | { |
---|
| 1434 | $where_clause = "md5sum = '".$params['original_sum']."'"; |
---|
| 1435 | } |
---|
| 1436 | if ('filename' == $conf['uniqueness_mode']) |
---|
| 1437 | { |
---|
| 1438 | $where_clause = "file = '".$params['original_filename']."'"; |
---|
| 1439 | } |
---|
| 1440 | |
---|
[2592] | 1441 | $query = ' |
---|
| 1442 | SELECT |
---|
| 1443 | COUNT(*) AS counter |
---|
| 1444 | FROM '.IMAGES_TABLE.' |
---|
[4954] | 1445 | WHERE '.$where_clause.' |
---|
[2592] | 1446 | ;'; |
---|
[4325] | 1447 | list($counter) = pwg_db_fetch_row(pwg_query($query)); |
---|
[2592] | 1448 | if ($counter != 0) { |
---|
| 1449 | return new PwgError(500, 'file already exists'); |
---|
| 1450 | } |
---|
| 1451 | |
---|
[2463] | 1452 | // current date |
---|
[4325] | 1453 | list($dbnow) = pwg_db_fetch_row(pwg_query('SELECT NOW();')); |
---|
[2463] | 1454 | list($year, $month, $day) = preg_split('/[^\d]/', $dbnow, 4); |
---|
[2496] | 1455 | |
---|
[2501] | 1456 | // upload directory hierarchy |
---|
[2463] | 1457 | $upload_dir = sprintf( |
---|
[5014] | 1458 | $conf['upload_dir'].'/%s/%s/%s', |
---|
[2463] | 1459 | $year, |
---|
| 1460 | $month, |
---|
| 1461 | $day |
---|
| 1462 | ); |
---|
| 1463 | |
---|
[2501] | 1464 | // compute file path |
---|
[2463] | 1465 | $date_string = preg_replace('/[^\d]/', '', $dbnow); |
---|
| 1466 | $random_string = substr($params['file_sum'], 0, 8); |
---|
| 1467 | $filename_wo_ext = $date_string.'-'.$random_string; |
---|
[2501] | 1468 | $file_path = $upload_dir.'/'.$filename_wo_ext.'.jpg'; |
---|
[2496] | 1469 | |
---|
[4346] | 1470 | // add files |
---|
| 1471 | $file_infos = add_file($file_path, 'file', $params['original_sum'], $params['file_sum']); |
---|
| 1472 | $thumb_infos = add_file($file_path, 'thumb', $params['original_sum'], $params['thumbnail_sum']); |
---|
[2463] | 1473 | |
---|
[3193] | 1474 | if (isset($params['high_sum'])) |
---|
[2670] | 1475 | { |
---|
[4346] | 1476 | $high_infos = add_file($file_path, 'high', $params['original_sum'], $params['high_sum']); |
---|
[2670] | 1477 | } |
---|
| 1478 | |
---|
[2463] | 1479 | // database registration |
---|
| 1480 | $insert = array( |
---|
[4911] | 1481 | 'file' => !empty($params['original_filename']) ? $params['original_filename'] : $filename_wo_ext.'.jpg', |
---|
[2463] | 1482 | 'date_available' => $dbnow, |
---|
| 1483 | 'tn_ext' => 'jpg', |
---|
| 1484 | 'name' => $params['name'], |
---|
| 1485 | 'path' => $file_path, |
---|
[4346] | 1486 | 'filesize' => $file_infos['filesize'], |
---|
| 1487 | 'width' => $file_infos['width'], |
---|
| 1488 | 'height' => $file_infos['height'], |
---|
[3065] | 1489 | 'md5sum' => $params['original_sum'], |
---|
[8464] | 1490 | 'added_by' => $user['id'], |
---|
[2463] | 1491 | ); |
---|
| 1492 | |
---|
[2569] | 1493 | $info_columns = array( |
---|
| 1494 | 'name', |
---|
| 1495 | 'author', |
---|
| 1496 | 'comment', |
---|
| 1497 | 'level', |
---|
| 1498 | 'date_creation', |
---|
| 1499 | ); |
---|
| 1500 | |
---|
| 1501 | foreach ($info_columns as $key) |
---|
| 1502 | { |
---|
| 1503 | if (isset($params[$key])) |
---|
| 1504 | { |
---|
| 1505 | $insert[$key] = $params[$key]; |
---|
| 1506 | } |
---|
| 1507 | } |
---|
| 1508 | |
---|
[3193] | 1509 | if (isset($params['high_sum'])) |
---|
[2670] | 1510 | { |
---|
| 1511 | $insert['has_high'] = 'true'; |
---|
[4346] | 1512 | $insert['high_filesize'] = $high_infos['filesize']; |
---|
[2670] | 1513 | } |
---|
| 1514 | |
---|
[2463] | 1515 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1516 | mass_inserts( |
---|
| 1517 | IMAGES_TABLE, |
---|
| 1518 | array_keys($insert), |
---|
| 1519 | array($insert) |
---|
| 1520 | ); |
---|
| 1521 | |
---|
[4892] | 1522 | $image_id = pwg_db_insert_id(IMAGES_TABLE); |
---|
[2463] | 1523 | |
---|
[2569] | 1524 | // let's add links between the image and the categories |
---|
| 1525 | if (isset($params['categories'])) |
---|
| 1526 | { |
---|
[2919] | 1527 | ws_add_image_category_relations($image_id, $params['categories']); |
---|
[2553] | 1528 | } |
---|
[2569] | 1529 | |
---|
| 1530 | // and now, let's create tag associations |
---|
[3660] | 1531 | if (isset($params['tag_ids']) and !empty($params['tag_ids'])) |
---|
[2553] | 1532 | { |
---|
[2569] | 1533 | set_tags( |
---|
| 1534 | explode(',', $params['tag_ids']), |
---|
| 1535 | $image_id |
---|
| 1536 | ); |
---|
[2553] | 1537 | } |
---|
[2585] | 1538 | |
---|
[4685] | 1539 | // update metadata from the uploaded file (exif/iptc) |
---|
| 1540 | require_once(PHPWG_ROOT_PATH.'admin/include/functions_metadata.php'); |
---|
| 1541 | update_metadata(array($image_id=>$file_path)); |
---|
| 1542 | |
---|
[2501] | 1543 | invalidate_user_cache(); |
---|
[2463] | 1544 | } |
---|
| 1545 | |
---|
[8249] | 1546 | function ws_images_addSimple($params, &$service) |
---|
| 1547 | { |
---|
| 1548 | global $conf; |
---|
[8274] | 1549 | if (!is_admin()) |
---|
[8249] | 1550 | { |
---|
| 1551 | return new PwgError(401, 'Access denied'); |
---|
| 1552 | } |
---|
| 1553 | |
---|
| 1554 | if (!$service->isPost()) |
---|
| 1555 | { |
---|
| 1556 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 1557 | } |
---|
[11117] | 1558 | |
---|
| 1559 | if (!isset($_FILES['image'])) |
---|
| 1560 | { |
---|
| 1561 | return new PwgError(405, "The image (file) parameter is missing"); |
---|
| 1562 | } |
---|
[9191] | 1563 | |
---|
| 1564 | $params['image_id'] = (int)$params['image_id']; |
---|
| 1565 | if ($params['image_id'] > 0) |
---|
| 1566 | { |
---|
| 1567 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
[8249] | 1568 | |
---|
[9191] | 1569 | $query=' |
---|
| 1570 | SELECT * |
---|
| 1571 | FROM '.IMAGES_TABLE.' |
---|
| 1572 | WHERE id = '.$params['image_id'].' |
---|
| 1573 | ;'; |
---|
| 1574 | |
---|
| 1575 | $image_row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
| 1576 | if ($image_row == null) |
---|
| 1577 | { |
---|
| 1578 | return new PwgError(404, "image_id not found"); |
---|
| 1579 | } |
---|
| 1580 | } |
---|
| 1581 | |
---|
[8249] | 1582 | // category |
---|
| 1583 | $params['category'] = (int)$params['category']; |
---|
[9191] | 1584 | if ($params['category'] <= 0 and $params['image_id'] <= 0) |
---|
[8249] | 1585 | { |
---|
| 1586 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid category_id"); |
---|
| 1587 | } |
---|
| 1588 | |
---|
| 1589 | include_once(PHPWG_ROOT_PATH.'admin/include/functions_upload.inc.php'); |
---|
| 1590 | prepare_upload_configuration(); |
---|
| 1591 | |
---|
| 1592 | $image_id = add_uploaded_file( |
---|
| 1593 | $_FILES['image']['tmp_name'], |
---|
| 1594 | $_FILES['image']['name'], |
---|
[9191] | 1595 | $params['category'] > 0 ? array($params['category']) : null, |
---|
| 1596 | 8, |
---|
| 1597 | $params['image_id'] > 0 ? $params['image_id'] : null |
---|
[8249] | 1598 | ); |
---|
| 1599 | |
---|
| 1600 | $info_columns = array( |
---|
| 1601 | 'name', |
---|
| 1602 | 'author', |
---|
| 1603 | 'comment', |
---|
| 1604 | 'level', |
---|
| 1605 | 'date_creation', |
---|
| 1606 | ); |
---|
| 1607 | |
---|
| 1608 | foreach ($info_columns as $key) |
---|
| 1609 | { |
---|
| 1610 | if (isset($params[$key])) |
---|
| 1611 | { |
---|
| 1612 | $update[$key] = $params[$key]; |
---|
| 1613 | } |
---|
| 1614 | } |
---|
| 1615 | |
---|
| 1616 | if (count(array_keys($update)) > 0) |
---|
| 1617 | { |
---|
| 1618 | $update['id'] = $image_id; |
---|
| 1619 | |
---|
| 1620 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1621 | mass_updates( |
---|
| 1622 | IMAGES_TABLE, |
---|
| 1623 | array( |
---|
| 1624 | 'primary' => array('id'), |
---|
| 1625 | 'update' => array_diff(array_keys($update), array('id')) |
---|
| 1626 | ), |
---|
| 1627 | array($update) |
---|
| 1628 | ); |
---|
| 1629 | } |
---|
| 1630 | |
---|
| 1631 | |
---|
| 1632 | if (isset($params['tags']) and !empty($params['tags'])) |
---|
| 1633 | { |
---|
| 1634 | $tag_ids = array(); |
---|
| 1635 | $tag_names = explode(',', $params['tags']); |
---|
| 1636 | foreach ($tag_names as $tag_name) |
---|
| 1637 | { |
---|
| 1638 | $tag_id = tag_id_from_tag_name($tag_name); |
---|
| 1639 | array_push($tag_ids, $tag_id); |
---|
| 1640 | } |
---|
| 1641 | |
---|
| 1642 | add_tags($tag_ids, array($image_id)); |
---|
| 1643 | } |
---|
| 1644 | |
---|
[9191] | 1645 | $url_params = array('image_id' => $image_id); |
---|
| 1646 | |
---|
| 1647 | if ($params['category'] > 0) |
---|
| 1648 | { |
---|
| 1649 | $query = ' |
---|
[8249] | 1650 | SELECT id, name, permalink |
---|
| 1651 | FROM '.CATEGORIES_TABLE.' |
---|
| 1652 | WHERE id = '.$params['category'].' |
---|
| 1653 | ;'; |
---|
[9191] | 1654 | $result = pwg_query($query); |
---|
| 1655 | $category = pwg_db_fetch_assoc($result); |
---|
[8249] | 1656 | |
---|
[9191] | 1657 | $url_params['section'] = 'categories'; |
---|
| 1658 | $url_params['category'] = $category; |
---|
| 1659 | } |
---|
| 1660 | |
---|
[9944] | 1661 | // update metadata from the uploaded file (exif/iptc), even if the sync |
---|
| 1662 | // was already performed by add_uploaded_file(). |
---|
| 1663 | $query = ' |
---|
| 1664 | SELECT |
---|
| 1665 | path |
---|
| 1666 | FROM '.IMAGES_TABLE.' |
---|
| 1667 | WHERE id = '.$image_id.' |
---|
| 1668 | ;'; |
---|
| 1669 | list($file_path) = pwg_db_fetch_row(pwg_query($query)); |
---|
| 1670 | |
---|
| 1671 | require_once(PHPWG_ROOT_PATH.'admin/include/functions_metadata.php'); |
---|
| 1672 | update_metadata(array($image_id=>$file_path)); |
---|
| 1673 | |
---|
[8249] | 1674 | return array( |
---|
| 1675 | 'image_id' => $image_id, |
---|
[9191] | 1676 | 'url' => make_picture_url($url_params), |
---|
[8249] | 1677 | ); |
---|
| 1678 | } |
---|
| 1679 | |
---|
[1781] | 1680 | /** |
---|
| 1681 | * perform a login (web service method) |
---|
| 1682 | */ |
---|
[1698] | 1683 | function ws_session_login($params, &$service) |
---|
| 1684 | { |
---|
| 1685 | global $conf; |
---|
| 1686 | |
---|
| 1687 | if (!$service->isPost()) |
---|
| 1688 | { |
---|
[1852] | 1689 | return new PwgError(405, "This method requires HTTP POST"); |
---|
[1698] | 1690 | } |
---|
[1744] | 1691 | if (try_log_user($params['username'], $params['password'],false)) |
---|
[1698] | 1692 | { |
---|
| 1693 | return true; |
---|
| 1694 | } |
---|
| 1695 | return new PwgError(999, 'Invalid username/password'); |
---|
| 1696 | } |
---|
| 1697 | |
---|
[1781] | 1698 | |
---|
| 1699 | /** |
---|
| 1700 | * performs a logout (web service method) |
---|
| 1701 | */ |
---|
[1698] | 1702 | function ws_session_logout($params, &$service) |
---|
| 1703 | { |
---|
[2029] | 1704 | if (!is_a_guest()) |
---|
[1698] | 1705 | { |
---|
[2757] | 1706 | logout_user(); |
---|
[1698] | 1707 | } |
---|
| 1708 | return true; |
---|
| 1709 | } |
---|
| 1710 | |
---|
| 1711 | function ws_session_getStatus($params, &$service) |
---|
| 1712 | { |
---|
[2356] | 1713 | global $user; |
---|
[1698] | 1714 | $res = array(); |
---|
[4304] | 1715 | $res['username'] = is_a_guest() ? 'guest' : stripslashes($user['username']); |
---|
[6437] | 1716 | foreach ( array('status', 'theme', 'language') as $k ) |
---|
[1849] | 1717 | { |
---|
| 1718 | $res[$k] = $user[$k]; |
---|
| 1719 | } |
---|
[7212] | 1720 | $res['pwg_token'] = get_pwg_token(); |
---|
[2126] | 1721 | $res['charset'] = get_pwg_charset(); |
---|
[11755] | 1722 | |
---|
| 1723 | list($dbnow) = pwg_db_fetch_row(pwg_query('SELECT NOW();')); |
---|
| 1724 | $res['current_datetime'] = $dbnow; |
---|
| 1725 | |
---|
[1698] | 1726 | return $res; |
---|
| 1727 | } |
---|
| 1728 | |
---|
| 1729 | |
---|
[1781] | 1730 | /** |
---|
| 1731 | * returns a list of tags (web service method) |
---|
| 1732 | */ |
---|
[1698] | 1733 | function ws_tags_getList($params, &$service) |
---|
| 1734 | { |
---|
[1711] | 1735 | $tags = get_available_tags(); |
---|
[1698] | 1736 | if ($params['sort_by_counter']) |
---|
| 1737 | { |
---|
| 1738 | usort($tags, create_function('$a,$b', 'return -$a["counter"]+$b["counter"];') ); |
---|
| 1739 | } |
---|
| 1740 | else |
---|
| 1741 | { |
---|
[2409] | 1742 | usort($tags, 'tag_alpha_compare'); |
---|
[1698] | 1743 | } |
---|
| 1744 | for ($i=0; $i<count($tags); $i++) |
---|
| 1745 | { |
---|
[1815] | 1746 | $tags[$i]['id'] = (int)$tags[$i]['id']; |
---|
[1698] | 1747 | $tags[$i]['counter'] = (int)$tags[$i]['counter']; |
---|
| 1748 | $tags[$i]['url'] = make_index_url( |
---|
| 1749 | array( |
---|
| 1750 | 'section'=>'tags', |
---|
| 1751 | 'tags'=>array($tags[$i]) |
---|
| 1752 | ) |
---|
| 1753 | ); |
---|
| 1754 | } |
---|
[2585] | 1755 | return array('tags' => new PwgNamedArray($tags, 'tag', array('id','url_name','url', 'name', 'counter' )) ); |
---|
[1698] | 1756 | } |
---|
| 1757 | |
---|
[2584] | 1758 | /** |
---|
| 1759 | * returns the list of tags as you can see them in administration (web |
---|
| 1760 | * service method). |
---|
| 1761 | * |
---|
| 1762 | * Only admin can run this method and permissions are not taken into |
---|
| 1763 | * account. |
---|
| 1764 | */ |
---|
| 1765 | function ws_tags_getAdminList($params, &$service) |
---|
| 1766 | { |
---|
| 1767 | if (!is_admin()) |
---|
| 1768 | { |
---|
| 1769 | return new PwgError(401, 'Access denied'); |
---|
| 1770 | } |
---|
[2585] | 1771 | |
---|
[2584] | 1772 | $tags = get_all_tags(); |
---|
| 1773 | return array( |
---|
| 1774 | 'tags' => new PwgNamedArray( |
---|
| 1775 | $tags, |
---|
| 1776 | 'tag', |
---|
| 1777 | array( |
---|
| 1778 | 'name', |
---|
| 1779 | 'id', |
---|
| 1780 | 'url_name', |
---|
| 1781 | ) |
---|
| 1782 | ) |
---|
| 1783 | ); |
---|
| 1784 | } |
---|
[1781] | 1785 | |
---|
| 1786 | /** |
---|
| 1787 | * returns a list of images for tags (web service method) |
---|
| 1788 | */ |
---|
[1698] | 1789 | function ws_tags_getImages($params, &$service) |
---|
| 1790 | { |
---|
| 1791 | @include_once(PHPWG_ROOT_PATH.'include/functions_picture.inc.php'); |
---|
[1816] | 1792 | global $conf; |
---|
[2119] | 1793 | |
---|
[1698] | 1794 | // first build all the tag_ids we are interested in |
---|
[1852] | 1795 | $params['tag_id'] = array_map( 'intval',$params['tag_id'] ); |
---|
| 1796 | $tags = find_tags($params['tag_id'], $params['tag_url_name'], $params['tag_name']); |
---|
[1698] | 1797 | $tags_by_id = array(); |
---|
| 1798 | foreach( $tags as $tag ) |
---|
| 1799 | { |
---|
[1852] | 1800 | $tags['id'] = (int)$tag['id']; |
---|
[1815] | 1801 | $tags_by_id[ $tag['id'] ] = $tag; |
---|
[1698] | 1802 | } |
---|
| 1803 | unset($tags); |
---|
[1852] | 1804 | $tag_ids = array_keys($tags_by_id); |
---|
[1698] | 1805 | |
---|
| 1806 | |
---|
[8726] | 1807 | $where_clauses = ws_std_image_sql_filter($params); |
---|
| 1808 | if (!empty($where_clauses)) |
---|
| 1809 | { |
---|
| 1810 | $where_clauses = implode( ' AND ', $where_clauses); |
---|
| 1811 | } |
---|
| 1812 | $image_ids = get_image_ids_for_tags( |
---|
| 1813 | $tag_ids, |
---|
| 1814 | $params['tag_mode_and'] ? 'AND' : 'OR', |
---|
| 1815 | $where_clauses, |
---|
| 1816 | ws_std_image_sql_order($params) ); |
---|
| 1817 | |
---|
| 1818 | |
---|
| 1819 | $image_ids = array_slice($image_ids, (int)($params['per_page']*$params['page']), (int)$params['per_page'] ); |
---|
| 1820 | |
---|
[1698] | 1821 | $image_tag_map = array(); |
---|
[8726] | 1822 | if ( !empty($image_ids) and !$params['tag_mode_and'] ) |
---|
[1698] | 1823 | { // build list of image ids with associated tags per image |
---|
[8726] | 1824 | $query = ' |
---|
[6652] | 1825 | SELECT image_id, GROUP_CONCAT(tag_id) AS tag_ids |
---|
[1698] | 1826 | FROM '.IMAGE_TAG_TABLE.' |
---|
[8726] | 1827 | WHERE tag_id IN ('.implode(',',$tag_ids).') AND image_id IN ('.implode(',',$image_ids).') |
---|
[1698] | 1828 | GROUP BY image_id'; |
---|
[8726] | 1829 | $result = pwg_query($query); |
---|
| 1830 | while ( $row=pwg_db_fetch_assoc($result) ) |
---|
| 1831 | { |
---|
| 1832 | $row['image_id'] = (int)$row['image_id']; |
---|
| 1833 | array_push( $image_ids, $row['image_id'] ); |
---|
| 1834 | $image_tag_map[ $row['image_id'] ] = explode(',', $row['tag_ids']); |
---|
[1698] | 1835 | } |
---|
| 1836 | } |
---|
| 1837 | |
---|
| 1838 | $images = array(); |
---|
[8726] | 1839 | if (!empty($image_ids)) |
---|
[1698] | 1840 | { |
---|
[8726] | 1841 | $rank_of = array_flip($image_ids); |
---|
| 1842 | $result = pwg_query(' |
---|
| 1843 | SELECT * FROM '.IMAGES_TABLE.' |
---|
| 1844 | WHERE id IN ('.implode(',',$image_ids).')'); |
---|
[4325] | 1845 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1698] | 1846 | { |
---|
[2119] | 1847 | $image = array(); |
---|
[8726] | 1848 | $image['rank'] = $rank_of[ $row['id'] ]; |
---|
[1698] | 1849 | foreach ( array('id', 'width', 'height', 'hit') as $k ) |
---|
| 1850 | { |
---|
| 1851 | if (isset($row[$k])) |
---|
| 1852 | { |
---|
| 1853 | $image[$k] = (int)$row[$k]; |
---|
| 1854 | } |
---|
| 1855 | } |
---|
[11115] | 1856 | foreach ( array('file', 'name', 'comment', 'date_creation', 'date_available') as $k ) |
---|
[1698] | 1857 | { |
---|
| 1858 | $image[$k] = $row[$k]; |
---|
| 1859 | } |
---|
| 1860 | $image = array_merge( $image, ws_std_get_urls($row) ); |
---|
| 1861 | |
---|
| 1862 | $image_tag_ids = ($params['tag_mode_and']) ? $tag_ids : $image_tag_map[$image['id']]; |
---|
| 1863 | $image_tags = array(); |
---|
| 1864 | foreach ($image_tag_ids as $tag_id) |
---|
| 1865 | { |
---|
| 1866 | $url = make_index_url( |
---|
| 1867 | array( |
---|
| 1868 | 'section'=>'tags', |
---|
| 1869 | 'tags'=> array($tags_by_id[$tag_id]) |
---|
| 1870 | ) |
---|
| 1871 | ); |
---|
| 1872 | $page_url = make_picture_url( |
---|
| 1873 | array( |
---|
| 1874 | 'section'=>'tags', |
---|
| 1875 | 'tags'=> array($tags_by_id[$tag_id]), |
---|
| 1876 | 'image_id' => $row['id'], |
---|
| 1877 | 'image_file' => $row['file'], |
---|
| 1878 | ) |
---|
| 1879 | ); |
---|
| 1880 | array_push($image_tags, array( |
---|
| 1881 | 'id' => (int)$tag_id, |
---|
| 1882 | 'url' => $url, |
---|
| 1883 | 'page_url' => $page_url, |
---|
| 1884 | ) |
---|
| 1885 | ); |
---|
| 1886 | } |
---|
[1711] | 1887 | $image['tags'] = new PwgNamedArray($image_tags, 'tag', |
---|
| 1888 | array('id','url_name','url','page_url') |
---|
[1698] | 1889 | ); |
---|
| 1890 | array_push($images, $image); |
---|
| 1891 | } |
---|
[8726] | 1892 | usort($images, 'rank_compare'); |
---|
| 1893 | unset($rank_of); |
---|
[1698] | 1894 | } |
---|
| 1895 | |
---|
| 1896 | return array( 'images' => |
---|
| 1897 | array ( |
---|
| 1898 | WS_XML_ATTRIBUTES => |
---|
| 1899 | array( |
---|
| 1900 | 'page' => $params['page'], |
---|
| 1901 | 'per_page' => $params['per_page'], |
---|
| 1902 | 'count' => count($images) |
---|
| 1903 | ), |
---|
[1711] | 1904 | WS_XML_CONTENT => new PwgNamedArray($images, 'image', |
---|
[1845] | 1905 | ws_std_get_image_xml_attributes() ) |
---|
[1698] | 1906 | ) |
---|
| 1907 | ); |
---|
| 1908 | } |
---|
[2583] | 1909 | |
---|
| 1910 | function ws_categories_add($params, &$service) |
---|
| 1911 | { |
---|
[8126] | 1912 | if (!is_admin()) |
---|
[2583] | 1913 | { |
---|
| 1914 | return new PwgError(401, 'Access denied'); |
---|
| 1915 | } |
---|
| 1916 | |
---|
| 1917 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1918 | |
---|
| 1919 | $creation_output = create_virtual_category( |
---|
| 1920 | $params['name'], |
---|
| 1921 | $params['parent'] |
---|
| 1922 | ); |
---|
| 1923 | |
---|
| 1924 | if (isset($creation_output['error'])) |
---|
| 1925 | { |
---|
| 1926 | return new PwgError(500, $creation_output['error']); |
---|
| 1927 | } |
---|
[2585] | 1928 | |
---|
[2644] | 1929 | invalidate_user_cache(); |
---|
[2757] | 1930 | |
---|
[2583] | 1931 | return $creation_output; |
---|
| 1932 | } |
---|
[2634] | 1933 | |
---|
| 1934 | function ws_tags_add($params, &$service) |
---|
| 1935 | { |
---|
[8126] | 1936 | if (!is_admin()) |
---|
[2634] | 1937 | { |
---|
| 1938 | return new PwgError(401, 'Access denied'); |
---|
| 1939 | } |
---|
| 1940 | |
---|
| 1941 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 1942 | |
---|
| 1943 | $creation_output = create_tag($params['name']); |
---|
| 1944 | |
---|
| 1945 | if (isset($creation_output['error'])) |
---|
| 1946 | { |
---|
| 1947 | return new PwgError(500, $creation_output['error']); |
---|
| 1948 | } |
---|
| 1949 | |
---|
| 1950 | return $creation_output; |
---|
| 1951 | } |
---|
[2683] | 1952 | |
---|
| 1953 | function ws_images_exist($params, &$service) |
---|
| 1954 | { |
---|
[4954] | 1955 | global $conf; |
---|
| 1956 | |
---|
[8126] | 1957 | if (!is_admin()) |
---|
[2683] | 1958 | { |
---|
| 1959 | return new PwgError(401, 'Access denied'); |
---|
| 1960 | } |
---|
| 1961 | |
---|
[4954] | 1962 | $split_pattern = '/[\s,;\|]/'; |
---|
| 1963 | |
---|
| 1964 | if ('md5sum' == $conf['uniqueness_mode']) |
---|
| 1965 | { |
---|
| 1966 | // search among photos the list of photos already added, based on md5sum |
---|
| 1967 | // list |
---|
| 1968 | $md5sums = preg_split( |
---|
| 1969 | $split_pattern, |
---|
| 1970 | $params['md5sum_list'], |
---|
| 1971 | -1, |
---|
| 1972 | PREG_SPLIT_NO_EMPTY |
---|
[2683] | 1973 | ); |
---|
[2757] | 1974 | |
---|
[4954] | 1975 | $query = ' |
---|
[2683] | 1976 | SELECT |
---|
| 1977 | id, |
---|
| 1978 | md5sum |
---|
| 1979 | FROM '.IMAGES_TABLE.' |
---|
[2757] | 1980 | WHERE md5sum IN (\''.implode("','", $md5sums).'\') |
---|
[2683] | 1981 | ;'; |
---|
[4954] | 1982 | $id_of_md5 = simple_hash_from_query($query, 'md5sum', 'id'); |
---|
[2683] | 1983 | |
---|
[4954] | 1984 | $result = array(); |
---|
[2757] | 1985 | |
---|
[4954] | 1986 | foreach ($md5sums as $md5sum) |
---|
| 1987 | { |
---|
| 1988 | $result[$md5sum] = null; |
---|
| 1989 | if (isset($id_of_md5[$md5sum])) |
---|
| 1990 | { |
---|
| 1991 | $result[$md5sum] = $id_of_md5[$md5sum]; |
---|
| 1992 | } |
---|
| 1993 | } |
---|
| 1994 | } |
---|
| 1995 | |
---|
| 1996 | if ('filename' == $conf['uniqueness_mode']) |
---|
[2683] | 1997 | { |
---|
[4954] | 1998 | // search among photos the list of photos already added, based on |
---|
| 1999 | // filename list |
---|
| 2000 | $filenames = preg_split( |
---|
| 2001 | $split_pattern, |
---|
| 2002 | $params['filename_list'], |
---|
| 2003 | -1, |
---|
| 2004 | PREG_SPLIT_NO_EMPTY |
---|
| 2005 | ); |
---|
| 2006 | |
---|
| 2007 | $query = ' |
---|
| 2008 | SELECT |
---|
| 2009 | id, |
---|
| 2010 | file |
---|
| 2011 | FROM '.IMAGES_TABLE.' |
---|
| 2012 | WHERE file IN (\''.implode("','", $filenames).'\') |
---|
| 2013 | ;'; |
---|
| 2014 | $id_of_filename = simple_hash_from_query($query, 'file', 'id'); |
---|
| 2015 | |
---|
| 2016 | $result = array(); |
---|
| 2017 | |
---|
| 2018 | foreach ($filenames as $filename) |
---|
[2683] | 2019 | { |
---|
[4954] | 2020 | $result[$filename] = null; |
---|
| 2021 | if (isset($id_of_filename[$filename])) |
---|
| 2022 | { |
---|
| 2023 | $result[$filename] = $id_of_filename[$filename]; |
---|
| 2024 | } |
---|
[2683] | 2025 | } |
---|
| 2026 | } |
---|
| 2027 | |
---|
| 2028 | return $result; |
---|
| 2029 | } |
---|
[2919] | 2030 | |
---|
[4347] | 2031 | function ws_images_checkFiles($params, &$service) |
---|
| 2032 | { |
---|
[8126] | 2033 | if (!is_admin()) |
---|
[4347] | 2034 | { |
---|
| 2035 | return new PwgError(401, 'Access denied'); |
---|
| 2036 | } |
---|
| 2037 | |
---|
| 2038 | // input parameters |
---|
| 2039 | // |
---|
| 2040 | // image_id |
---|
| 2041 | // thumbnail_sum |
---|
| 2042 | // file_sum |
---|
| 2043 | // high_sum |
---|
| 2044 | |
---|
| 2045 | $params['image_id'] = (int)$params['image_id']; |
---|
| 2046 | if ($params['image_id'] <= 0) |
---|
| 2047 | { |
---|
| 2048 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 2049 | } |
---|
| 2050 | |
---|
| 2051 | $query = ' |
---|
| 2052 | SELECT |
---|
| 2053 | path |
---|
| 2054 | FROM '.IMAGES_TABLE.' |
---|
| 2055 | WHERE id = '.$params['image_id'].' |
---|
| 2056 | ;'; |
---|
| 2057 | $result = pwg_query($query); |
---|
[6500] | 2058 | if (pwg_db_num_rows($result) == 0) { |
---|
[4347] | 2059 | return new PwgError(404, "image_id not found"); |
---|
| 2060 | } |
---|
[6500] | 2061 | list($path) = pwg_db_fetch_row($result); |
---|
[4347] | 2062 | |
---|
| 2063 | $ret = array(); |
---|
| 2064 | |
---|
| 2065 | foreach (array('thumb', 'file', 'high') as $type) { |
---|
| 2066 | $param_name = $type; |
---|
| 2067 | if ('thumb' == $type) { |
---|
| 2068 | $param_name = 'thumbnail'; |
---|
| 2069 | } |
---|
| 2070 | |
---|
| 2071 | if (isset($params[$param_name.'_sum'])) { |
---|
[8249] | 2072 | include_once(PHPWG_ROOT_PATH.'admin/include/functions_upload.inc.php'); |
---|
[4347] | 2073 | $type_path = file_path_for_type($path, $type); |
---|
| 2074 | if (!is_file($type_path)) { |
---|
| 2075 | $ret[$param_name] = 'missing'; |
---|
| 2076 | } |
---|
| 2077 | else { |
---|
| 2078 | if (md5_file($type_path) != $params[$param_name.'_sum']) { |
---|
| 2079 | $ret[$param_name] = 'differs'; |
---|
| 2080 | } |
---|
| 2081 | else { |
---|
| 2082 | $ret[$param_name] = 'equals'; |
---|
| 2083 | } |
---|
| 2084 | } |
---|
| 2085 | } |
---|
| 2086 | } |
---|
| 2087 | |
---|
| 2088 | return $ret; |
---|
| 2089 | } |
---|
| 2090 | |
---|
[2919] | 2091 | function ws_images_setInfo($params, &$service) |
---|
| 2092 | { |
---|
| 2093 | global $conf; |
---|
[8126] | 2094 | if (!is_admin()) |
---|
[2919] | 2095 | { |
---|
| 2096 | return new PwgError(401, 'Access denied'); |
---|
| 2097 | } |
---|
| 2098 | |
---|
[4511] | 2099 | if (!$service->isPost()) |
---|
| 2100 | { |
---|
| 2101 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2102 | } |
---|
| 2103 | |
---|
[2919] | 2104 | $params['image_id'] = (int)$params['image_id']; |
---|
| 2105 | if ($params['image_id'] <= 0) |
---|
| 2106 | { |
---|
| 2107 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 2108 | } |
---|
| 2109 | |
---|
[7613] | 2110 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2111 | |
---|
[2919] | 2112 | $query=' |
---|
| 2113 | SELECT * |
---|
| 2114 | FROM '.IMAGES_TABLE.' |
---|
| 2115 | WHERE id = '.$params['image_id'].' |
---|
| 2116 | ;'; |
---|
| 2117 | |
---|
[4325] | 2118 | $image_row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
[2919] | 2119 | if ($image_row == null) |
---|
| 2120 | { |
---|
| 2121 | return new PwgError(404, "image_id not found"); |
---|
| 2122 | } |
---|
| 2123 | |
---|
| 2124 | // database registration |
---|
[4460] | 2125 | $update = array(); |
---|
[2919] | 2126 | |
---|
| 2127 | $info_columns = array( |
---|
| 2128 | 'name', |
---|
| 2129 | 'author', |
---|
| 2130 | 'comment', |
---|
| 2131 | 'level', |
---|
| 2132 | 'date_creation', |
---|
| 2133 | ); |
---|
| 2134 | |
---|
| 2135 | foreach ($info_columns as $key) |
---|
| 2136 | { |
---|
| 2137 | if (isset($params[$key])) |
---|
| 2138 | { |
---|
[4460] | 2139 | if ('fill_if_empty' == $params['single_value_mode']) |
---|
| 2140 | { |
---|
| 2141 | if (empty($image_row[$key])) |
---|
| 2142 | { |
---|
| 2143 | $update[$key] = $params[$key]; |
---|
| 2144 | } |
---|
| 2145 | } |
---|
| 2146 | elseif ('replace' == $params['single_value_mode']) |
---|
| 2147 | { |
---|
| 2148 | $update[$key] = $params[$key]; |
---|
| 2149 | } |
---|
| 2150 | else |
---|
| 2151 | { |
---|
| 2152 | new PwgError( |
---|
| 2153 | 500, |
---|
| 2154 | '[ws_images_setInfo]' |
---|
| 2155 | .' invalid parameter single_value_mode "'.$params['single_value_mode'].'"' |
---|
| 2156 | .', possible values are {fill_if_empty, replace}.' |
---|
| 2157 | ); |
---|
| 2158 | exit(); |
---|
| 2159 | } |
---|
[2919] | 2160 | } |
---|
| 2161 | } |
---|
| 2162 | |
---|
[4460] | 2163 | if (count(array_keys($update)) > 0) |
---|
[2919] | 2164 | { |
---|
[4460] | 2165 | $update['id'] = $params['image_id']; |
---|
| 2166 | |
---|
[2919] | 2167 | mass_updates( |
---|
| 2168 | IMAGES_TABLE, |
---|
| 2169 | array( |
---|
| 2170 | 'primary' => array('id'), |
---|
| 2171 | 'update' => array_diff(array_keys($update), array('id')) |
---|
| 2172 | ), |
---|
| 2173 | array($update) |
---|
| 2174 | ); |
---|
| 2175 | } |
---|
[3145] | 2176 | |
---|
[2919] | 2177 | if (isset($params['categories'])) |
---|
| 2178 | { |
---|
| 2179 | ws_add_image_category_relations( |
---|
| 2180 | $params['image_id'], |
---|
[4445] | 2181 | $params['categories'], |
---|
[4460] | 2182 | ('replace' == $params['multiple_value_mode'] ? true : false) |
---|
[2919] | 2183 | ); |
---|
| 2184 | } |
---|
| 2185 | |
---|
| 2186 | // and now, let's create tag associations |
---|
| 2187 | if (isset($params['tag_ids'])) |
---|
| 2188 | { |
---|
[4445] | 2189 | $tag_ids = explode(',', $params['tag_ids']); |
---|
| 2190 | |
---|
[4460] | 2191 | if ('replace' == $params['multiple_value_mode']) |
---|
[4445] | 2192 | { |
---|
| 2193 | set_tags( |
---|
| 2194 | $tag_ids, |
---|
| 2195 | $params['image_id'] |
---|
| 2196 | ); |
---|
| 2197 | } |
---|
[4460] | 2198 | elseif ('append' == $params['multiple_value_mode']) |
---|
[4445] | 2199 | { |
---|
| 2200 | add_tags( |
---|
| 2201 | $tag_ids, |
---|
| 2202 | array($params['image_id']) |
---|
| 2203 | ); |
---|
| 2204 | } |
---|
[4460] | 2205 | else |
---|
| 2206 | { |
---|
| 2207 | new PwgError( |
---|
| 2208 | 500, |
---|
| 2209 | '[ws_images_setInfo]' |
---|
| 2210 | .' invalid parameter multiple_value_mode "'.$params['multiple_value_mode'].'"' |
---|
| 2211 | .', possible values are {replace, append}.' |
---|
| 2212 | ); |
---|
| 2213 | exit(); |
---|
| 2214 | } |
---|
[2919] | 2215 | } |
---|
| 2216 | |
---|
| 2217 | invalidate_user_cache(); |
---|
| 2218 | } |
---|
| 2219 | |
---|
[8266] | 2220 | function ws_images_delete($params, &$service) |
---|
| 2221 | { |
---|
| 2222 | global $conf; |
---|
[8274] | 2223 | if (!is_admin()) |
---|
[8266] | 2224 | { |
---|
| 2225 | return new PwgError(401, 'Access denied'); |
---|
| 2226 | } |
---|
| 2227 | |
---|
| 2228 | if (!$service->isPost()) |
---|
| 2229 | { |
---|
| 2230 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2231 | } |
---|
| 2232 | |
---|
| 2233 | if (empty($params['pwg_token']) or get_pwg_token() != $params['pwg_token']) |
---|
| 2234 | { |
---|
| 2235 | return new PwgError(403, 'Invalid security token'); |
---|
| 2236 | } |
---|
| 2237 | |
---|
| 2238 | $params['image_id'] = preg_split( |
---|
| 2239 | '/[\s,;\|]/', |
---|
| 2240 | $params['image_id'], |
---|
| 2241 | -1, |
---|
| 2242 | PREG_SPLIT_NO_EMPTY |
---|
| 2243 | ); |
---|
| 2244 | $params['image_id'] = array_map('intval', $params['image_id']); |
---|
| 2245 | |
---|
| 2246 | $image_ids = array(); |
---|
| 2247 | foreach ($params['image_id'] as $image_id) |
---|
| 2248 | { |
---|
| 2249 | if ($image_id > 0) |
---|
| 2250 | { |
---|
| 2251 | array_push($image_ids, $image_id); |
---|
| 2252 | } |
---|
| 2253 | } |
---|
| 2254 | |
---|
| 2255 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2256 | delete_elements($image_ids, true); |
---|
| 2257 | } |
---|
| 2258 | |
---|
[4445] | 2259 | function ws_add_image_category_relations($image_id, $categories_string, $replace_mode=false) |
---|
[2919] | 2260 | { |
---|
| 2261 | // let's add links between the image and the categories |
---|
| 2262 | // |
---|
| 2263 | // $params['categories'] should look like 123,12;456,auto;789 which means: |
---|
| 2264 | // |
---|
| 2265 | // 1. associate with category 123 on rank 12 |
---|
| 2266 | // 2. associate with category 456 on automatic rank |
---|
| 2267 | // 3. associate with category 789 on automatic rank |
---|
| 2268 | $cat_ids = array(); |
---|
| 2269 | $rank_on_category = array(); |
---|
| 2270 | $search_current_ranks = false; |
---|
| 2271 | |
---|
| 2272 | $tokens = explode(';', $categories_string); |
---|
| 2273 | foreach ($tokens as $token) |
---|
| 2274 | { |
---|
[2920] | 2275 | @list($cat_id, $rank) = explode(',', $token); |
---|
[2919] | 2276 | |
---|
[4445] | 2277 | if (!preg_match('/^\d+$/', $cat_id)) |
---|
| 2278 | { |
---|
| 2279 | continue; |
---|
| 2280 | } |
---|
| 2281 | |
---|
[2919] | 2282 | array_push($cat_ids, $cat_id); |
---|
| 2283 | |
---|
| 2284 | if (!isset($rank)) |
---|
| 2285 | { |
---|
| 2286 | $rank = 'auto'; |
---|
| 2287 | } |
---|
| 2288 | $rank_on_category[$cat_id] = $rank; |
---|
| 2289 | |
---|
| 2290 | if ($rank == 'auto') |
---|
| 2291 | { |
---|
| 2292 | $search_current_ranks = true; |
---|
| 2293 | } |
---|
| 2294 | } |
---|
| 2295 | |
---|
| 2296 | $cat_ids = array_unique($cat_ids); |
---|
| 2297 | |
---|
[4445] | 2298 | if (count($cat_ids) == 0) |
---|
[2919] | 2299 | { |
---|
[4445] | 2300 | new PwgError( |
---|
| 2301 | 500, |
---|
| 2302 | '[ws_add_image_category_relations] there is no category defined in "'.$categories_string.'"' |
---|
| 2303 | ); |
---|
| 2304 | exit(); |
---|
| 2305 | } |
---|
[4513] | 2306 | |
---|
[4445] | 2307 | $query = ' |
---|
| 2308 | SELECT |
---|
| 2309 | id |
---|
| 2310 | FROM '.CATEGORIES_TABLE.' |
---|
| 2311 | WHERE id IN ('.implode(',', $cat_ids).') |
---|
| 2312 | ;'; |
---|
| 2313 | $db_cat_ids = array_from_query($query, 'id'); |
---|
| 2314 | |
---|
| 2315 | $unknown_cat_ids = array_diff($cat_ids, $db_cat_ids); |
---|
| 2316 | if (count($unknown_cat_ids) != 0) |
---|
| 2317 | { |
---|
| 2318 | new PwgError( |
---|
| 2319 | 500, |
---|
| 2320 | '[ws_add_image_category_relations] the following categories are unknown: '.implode(', ', $unknown_cat_ids) |
---|
| 2321 | ); |
---|
| 2322 | exit(); |
---|
| 2323 | } |
---|
[4513] | 2324 | |
---|
[4445] | 2325 | $to_update_cat_ids = array(); |
---|
[4513] | 2326 | |
---|
[4445] | 2327 | // in case of replace mode, we first check the existing associations |
---|
| 2328 | $query = ' |
---|
| 2329 | SELECT |
---|
| 2330 | category_id |
---|
| 2331 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 2332 | WHERE image_id = '.$image_id.' |
---|
| 2333 | ;'; |
---|
| 2334 | $existing_cat_ids = array_from_query($query, 'category_id'); |
---|
| 2335 | |
---|
| 2336 | if ($replace_mode) |
---|
| 2337 | { |
---|
| 2338 | $to_remove_cat_ids = array_diff($existing_cat_ids, $cat_ids); |
---|
| 2339 | if (count($to_remove_cat_ids) > 0) |
---|
[2919] | 2340 | { |
---|
| 2341 | $query = ' |
---|
[4445] | 2342 | DELETE |
---|
| 2343 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 2344 | WHERE image_id = '.$image_id.' |
---|
| 2345 | AND category_id IN ('.implode(', ', $to_remove_cat_ids).') |
---|
| 2346 | ;'; |
---|
| 2347 | pwg_query($query); |
---|
| 2348 | update_category($to_remove_cat_ids); |
---|
| 2349 | } |
---|
| 2350 | } |
---|
[4513] | 2351 | |
---|
[4445] | 2352 | $new_cat_ids = array_diff($cat_ids, $existing_cat_ids); |
---|
| 2353 | if (count($new_cat_ids) == 0) |
---|
| 2354 | { |
---|
| 2355 | return true; |
---|
| 2356 | } |
---|
[4513] | 2357 | |
---|
[4445] | 2358 | if ($search_current_ranks) |
---|
| 2359 | { |
---|
| 2360 | $query = ' |
---|
[2919] | 2361 | SELECT |
---|
| 2362 | category_id, |
---|
| 2363 | MAX(rank) AS max_rank |
---|
| 2364 | FROM '.IMAGE_CATEGORY_TABLE.' |
---|
| 2365 | WHERE rank IS NOT NULL |
---|
[4445] | 2366 | AND category_id IN ('.implode(',', $new_cat_ids).') |
---|
[2919] | 2367 | GROUP BY category_id |
---|
| 2368 | ;'; |
---|
[4445] | 2369 | $current_rank_of = simple_hash_from_query( |
---|
| 2370 | $query, |
---|
| 2371 | 'category_id', |
---|
| 2372 | 'max_rank' |
---|
| 2373 | ); |
---|
[2919] | 2374 | |
---|
[4445] | 2375 | foreach ($new_cat_ids as $cat_id) |
---|
| 2376 | { |
---|
| 2377 | if (!isset($current_rank_of[$cat_id])) |
---|
[2919] | 2378 | { |
---|
[4445] | 2379 | $current_rank_of[$cat_id] = 0; |
---|
[2919] | 2380 | } |
---|
[4513] | 2381 | |
---|
[4445] | 2382 | if ('auto' == $rank_on_category[$cat_id]) |
---|
| 2383 | { |
---|
| 2384 | $rank_on_category[$cat_id] = $current_rank_of[$cat_id] + 1; |
---|
| 2385 | } |
---|
[2919] | 2386 | } |
---|
[4445] | 2387 | } |
---|
[4513] | 2388 | |
---|
[4445] | 2389 | $inserts = array(); |
---|
[4513] | 2390 | |
---|
[4445] | 2391 | foreach ($new_cat_ids as $cat_id) |
---|
| 2392 | { |
---|
| 2393 | array_push( |
---|
| 2394 | $inserts, |
---|
| 2395 | array( |
---|
| 2396 | 'image_id' => $image_id, |
---|
| 2397 | 'category_id' => $cat_id, |
---|
| 2398 | 'rank' => $rank_on_category[$cat_id], |
---|
| 2399 | ) |
---|
[2919] | 2400 | ); |
---|
| 2401 | } |
---|
[4513] | 2402 | |
---|
[4445] | 2403 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2404 | mass_inserts( |
---|
| 2405 | IMAGE_CATEGORY_TABLE, |
---|
| 2406 | array_keys($inserts[0]), |
---|
| 2407 | $inserts |
---|
| 2408 | ); |
---|
[4513] | 2409 | |
---|
[4445] | 2410 | update_category($new_cat_ids); |
---|
[2919] | 2411 | } |
---|
[3193] | 2412 | |
---|
[3454] | 2413 | function ws_categories_setInfo($params, &$service) |
---|
| 2414 | { |
---|
| 2415 | global $conf; |
---|
[8126] | 2416 | if (!is_admin()) |
---|
[3454] | 2417 | { |
---|
| 2418 | return new PwgError(401, 'Access denied'); |
---|
| 2419 | } |
---|
| 2420 | |
---|
[4511] | 2421 | if (!$service->isPost()) |
---|
| 2422 | { |
---|
| 2423 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2424 | } |
---|
| 2425 | |
---|
[3454] | 2426 | // category_id |
---|
| 2427 | // name |
---|
| 2428 | // comment |
---|
| 2429 | |
---|
| 2430 | $params['category_id'] = (int)$params['category_id']; |
---|
| 2431 | if ($params['category_id'] <= 0) |
---|
| 2432 | { |
---|
| 2433 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid category_id"); |
---|
| 2434 | } |
---|
| 2435 | |
---|
| 2436 | // database registration |
---|
| 2437 | $update = array( |
---|
| 2438 | 'id' => $params['category_id'], |
---|
| 2439 | ); |
---|
| 2440 | |
---|
| 2441 | $info_columns = array( |
---|
| 2442 | 'name', |
---|
| 2443 | 'comment', |
---|
| 2444 | ); |
---|
| 2445 | |
---|
| 2446 | $perform_update = false; |
---|
| 2447 | foreach ($info_columns as $key) |
---|
| 2448 | { |
---|
| 2449 | if (isset($params[$key])) |
---|
| 2450 | { |
---|
| 2451 | $perform_update = true; |
---|
| 2452 | $update[$key] = $params[$key]; |
---|
| 2453 | } |
---|
| 2454 | } |
---|
| 2455 | |
---|
| 2456 | if ($perform_update) |
---|
| 2457 | { |
---|
| 2458 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2459 | mass_updates( |
---|
| 2460 | CATEGORIES_TABLE, |
---|
| 2461 | array( |
---|
| 2462 | 'primary' => array('id'), |
---|
| 2463 | 'update' => array_diff(array_keys($update), array('id')) |
---|
| 2464 | ), |
---|
| 2465 | array($update) |
---|
| 2466 | ); |
---|
| 2467 | } |
---|
[3488] | 2468 | |
---|
[3454] | 2469 | } |
---|
| 2470 | |
---|
[11745] | 2471 | function ws_categories_setRepresentative($params, &$service) |
---|
| 2472 | { |
---|
| 2473 | global $conf; |
---|
| 2474 | |
---|
| 2475 | if (!is_admin()) |
---|
| 2476 | { |
---|
| 2477 | return new PwgError(401, 'Access denied'); |
---|
| 2478 | } |
---|
| 2479 | |
---|
| 2480 | if (!$service->isPost()) |
---|
| 2481 | { |
---|
| 2482 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2483 | } |
---|
| 2484 | |
---|
| 2485 | // category_id |
---|
| 2486 | // image_id |
---|
| 2487 | |
---|
| 2488 | $params['category_id'] = (int)$params['category_id']; |
---|
| 2489 | if ($params['category_id'] <= 0) |
---|
| 2490 | { |
---|
| 2491 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid category_id"); |
---|
| 2492 | } |
---|
| 2493 | |
---|
| 2494 | // does the category really exist? |
---|
| 2495 | $query=' |
---|
| 2496 | SELECT |
---|
| 2497 | * |
---|
| 2498 | FROM '.CATEGORIES_TABLE.' |
---|
| 2499 | WHERE id = '.$params['category_id'].' |
---|
| 2500 | ;'; |
---|
| 2501 | $row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
| 2502 | if ($row == null) |
---|
| 2503 | { |
---|
| 2504 | return new PwgError(404, "category_id not found"); |
---|
| 2505 | } |
---|
| 2506 | |
---|
| 2507 | $params['image_id'] = (int)$params['image_id']; |
---|
| 2508 | if ($params['image_id'] <= 0) |
---|
| 2509 | { |
---|
| 2510 | return new PwgError(WS_ERR_INVALID_PARAM, "Invalid image_id"); |
---|
| 2511 | } |
---|
| 2512 | |
---|
| 2513 | // does the image really exist? |
---|
| 2514 | $query=' |
---|
| 2515 | SELECT |
---|
| 2516 | * |
---|
| 2517 | FROM '.IMAGES_TABLE.' |
---|
| 2518 | WHERE id = '.$params['image_id'].' |
---|
| 2519 | ;'; |
---|
| 2520 | |
---|
| 2521 | $row = pwg_db_fetch_assoc(pwg_query($query)); |
---|
| 2522 | if ($row == null) |
---|
| 2523 | { |
---|
| 2524 | return new PwgError(404, "image_id not found"); |
---|
| 2525 | } |
---|
| 2526 | |
---|
| 2527 | // apply change |
---|
| 2528 | $query = ' |
---|
| 2529 | UPDATE '.CATEGORIES_TABLE.' |
---|
| 2530 | SET representative_picture_id = '.$params['image_id'].' |
---|
| 2531 | WHERE id = '.$params['category_id'].' |
---|
| 2532 | ;'; |
---|
| 2533 | pwg_query($query); |
---|
| 2534 | |
---|
| 2535 | $query = ' |
---|
| 2536 | UPDATE '.USER_CACHE_CATEGORIES_TABLE.' |
---|
| 2537 | SET user_representative_picture_id = NULL |
---|
| 2538 | WHERE cat_id = '.$params['category_id'].' |
---|
| 2539 | ;'; |
---|
| 2540 | pwg_query($query); |
---|
| 2541 | } |
---|
| 2542 | |
---|
[8266] | 2543 | function ws_categories_delete($params, &$service) |
---|
| 2544 | { |
---|
| 2545 | global $conf; |
---|
[8274] | 2546 | if (!is_admin()) |
---|
[8266] | 2547 | { |
---|
| 2548 | return new PwgError(401, 'Access denied'); |
---|
| 2549 | } |
---|
| 2550 | |
---|
| 2551 | if (!$service->isPost()) |
---|
| 2552 | { |
---|
| 2553 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2554 | } |
---|
| 2555 | |
---|
| 2556 | if (empty($params['pwg_token']) or get_pwg_token() != $params['pwg_token']) |
---|
| 2557 | { |
---|
| 2558 | return new PwgError(403, 'Invalid security token'); |
---|
| 2559 | } |
---|
| 2560 | |
---|
| 2561 | $modes = array('no_delete', 'delete_orphans', 'force_delete'); |
---|
| 2562 | if (!in_array($params['photo_deletion_mode'], $modes)) |
---|
| 2563 | { |
---|
| 2564 | return new PwgError( |
---|
| 2565 | 500, |
---|
| 2566 | '[ws_categories_delete]' |
---|
| 2567 | .' invalid parameter photo_deletion_mode "'.$params['photo_deletion_mode'].'"' |
---|
| 2568 | .', possible values are {'.implode(', ', $modes).'}.' |
---|
| 2569 | ); |
---|
| 2570 | } |
---|
| 2571 | |
---|
| 2572 | $params['category_id'] = preg_split( |
---|
| 2573 | '/[\s,;\|]/', |
---|
| 2574 | $params['category_id'], |
---|
| 2575 | -1, |
---|
| 2576 | PREG_SPLIT_NO_EMPTY |
---|
| 2577 | ); |
---|
| 2578 | $params['category_id'] = array_map('intval', $params['category_id']); |
---|
| 2579 | |
---|
| 2580 | $category_ids = array(); |
---|
| 2581 | foreach ($params['category_id'] as $category_id) |
---|
| 2582 | { |
---|
| 2583 | if ($category_id > 0) |
---|
| 2584 | { |
---|
| 2585 | array_push($category_ids, $category_id); |
---|
| 2586 | } |
---|
| 2587 | } |
---|
| 2588 | |
---|
| 2589 | if (count($category_ids) == 0) |
---|
| 2590 | { |
---|
| 2591 | return; |
---|
| 2592 | } |
---|
| 2593 | |
---|
| 2594 | $query = ' |
---|
| 2595 | SELECT id |
---|
| 2596 | FROM '.CATEGORIES_TABLE.' |
---|
| 2597 | WHERE id IN ('.implode(',', $category_ids).') |
---|
| 2598 | ;'; |
---|
| 2599 | $category_ids = array_from_query($query, 'id'); |
---|
| 2600 | |
---|
| 2601 | if (count($category_ids) == 0) |
---|
| 2602 | { |
---|
| 2603 | return; |
---|
| 2604 | } |
---|
| 2605 | |
---|
| 2606 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2607 | delete_categories($category_ids, $params['photo_deletion_mode']); |
---|
| 2608 | update_global_rank(); |
---|
| 2609 | } |
---|
| 2610 | |
---|
[8272] | 2611 | function ws_categories_move($params, &$service) |
---|
| 2612 | { |
---|
| 2613 | global $conf, $page; |
---|
| 2614 | |
---|
[8274] | 2615 | if (!is_admin()) |
---|
[8272] | 2616 | { |
---|
| 2617 | return new PwgError(401, 'Access denied'); |
---|
| 2618 | } |
---|
| 2619 | |
---|
| 2620 | if (!$service->isPost()) |
---|
| 2621 | { |
---|
| 2622 | return new PwgError(405, "This method requires HTTP POST"); |
---|
| 2623 | } |
---|
| 2624 | |
---|
| 2625 | if (empty($params['pwg_token']) or get_pwg_token() != $params['pwg_token']) |
---|
| 2626 | { |
---|
| 2627 | return new PwgError(403, 'Invalid security token'); |
---|
| 2628 | } |
---|
| 2629 | |
---|
| 2630 | $params['category_id'] = preg_split( |
---|
| 2631 | '/[\s,;\|]/', |
---|
| 2632 | $params['category_id'], |
---|
| 2633 | -1, |
---|
| 2634 | PREG_SPLIT_NO_EMPTY |
---|
| 2635 | ); |
---|
| 2636 | $params['category_id'] = array_map('intval', $params['category_id']); |
---|
| 2637 | |
---|
| 2638 | $category_ids = array(); |
---|
| 2639 | foreach ($params['category_id'] as $category_id) |
---|
| 2640 | { |
---|
| 2641 | if ($category_id > 0) |
---|
| 2642 | { |
---|
| 2643 | array_push($category_ids, $category_id); |
---|
| 2644 | } |
---|
| 2645 | } |
---|
| 2646 | |
---|
| 2647 | if (count($category_ids) == 0) |
---|
| 2648 | { |
---|
| 2649 | return new PwgError(403, 'Invalid category_id input parameter, no category to move'); |
---|
| 2650 | } |
---|
| 2651 | |
---|
| 2652 | // we can't move physical categories |
---|
| 2653 | $categories_in_db = array(); |
---|
| 2654 | |
---|
| 2655 | $query = ' |
---|
| 2656 | SELECT |
---|
| 2657 | id, |
---|
| 2658 | name, |
---|
| 2659 | dir |
---|
| 2660 | FROM '.CATEGORIES_TABLE.' |
---|
| 2661 | WHERE id IN ('.implode(',', $category_ids).') |
---|
| 2662 | ;'; |
---|
| 2663 | $result = pwg_query($query); |
---|
| 2664 | while ($row = pwg_db_fetch_assoc($result)) |
---|
| 2665 | { |
---|
| 2666 | $categories_in_db[$row['id']] = $row; |
---|
| 2667 | // we break on error at first physical category detected |
---|
| 2668 | if (!empty($row['dir'])) |
---|
| 2669 | { |
---|
| 2670 | $row['name'] = strip_tags( |
---|
| 2671 | trigger_event( |
---|
| 2672 | 'render_category_name', |
---|
| 2673 | $row['name'], |
---|
| 2674 | 'ws_categories_move' |
---|
| 2675 | ) |
---|
| 2676 | ); |
---|
| 2677 | |
---|
| 2678 | return new PwgError( |
---|
| 2679 | 403, |
---|
| 2680 | sprintf( |
---|
| 2681 | 'Category %s (%u) is not a virtual category, you cannot move it', |
---|
| 2682 | $row['name'], |
---|
| 2683 | $row['id'] |
---|
| 2684 | ) |
---|
| 2685 | ); |
---|
| 2686 | } |
---|
| 2687 | } |
---|
| 2688 | |
---|
| 2689 | if (count($categories_in_db) != count($category_ids)) |
---|
| 2690 | { |
---|
| 2691 | $unknown_category_ids = array_diff($category_ids, array_keys($categories_in_db)); |
---|
| 2692 | |
---|
| 2693 | return new PwgError( |
---|
| 2694 | 403, |
---|
| 2695 | sprintf( |
---|
| 2696 | 'Category %u does not exist', |
---|
| 2697 | $unknown_category_ids[0] |
---|
| 2698 | ) |
---|
| 2699 | ); |
---|
| 2700 | } |
---|
| 2701 | |
---|
| 2702 | // does this parent exists? This check should be made in the |
---|
| 2703 | // move_categories function, not here |
---|
| 2704 | // |
---|
| 2705 | // 0 as parent means "move categories at gallery root" |
---|
| 2706 | if (!is_numeric($params['parent'])) |
---|
| 2707 | { |
---|
| 2708 | return new PwgError(403, 'Invalid parent input parameter'); |
---|
| 2709 | } |
---|
| 2710 | |
---|
| 2711 | if (0 != $params['parent']) { |
---|
| 2712 | $params['parent'] = intval($params['parent']); |
---|
| 2713 | $subcat_ids = get_subcat_ids(array($params['parent'])); |
---|
| 2714 | if (count($subcat_ids) == 0) |
---|
| 2715 | { |
---|
| 2716 | return new PwgError(403, 'Unknown parent category id'); |
---|
| 2717 | } |
---|
| 2718 | } |
---|
| 2719 | |
---|
| 2720 | $page['infos'] = array(); |
---|
| 2721 | $page['errors'] = array(); |
---|
| 2722 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
| 2723 | move_categories($category_ids, $params['parent']); |
---|
| 2724 | invalidate_user_cache(); |
---|
| 2725 | |
---|
| 2726 | if (count($page['errors']) != 0) |
---|
| 2727 | { |
---|
| 2728 | return new PwgError(403, implode('; ', $page['errors'])); |
---|
| 2729 | } |
---|
| 2730 | } |
---|
| 2731 | |
---|
[3193] | 2732 | function ws_logfile($string) |
---|
| 2733 | { |
---|
[3662] | 2734 | global $conf; |
---|
[3488] | 2735 | |
---|
[3662] | 2736 | if (!$conf['ws_enable_log']) { |
---|
| 2737 | return true; |
---|
| 2738 | } |
---|
| 2739 | |
---|
[3193] | 2740 | file_put_contents( |
---|
[3662] | 2741 | $conf['ws_log_filepath'], |
---|
[3193] | 2742 | '['.date('c').'] '.$string."\n", |
---|
| 2743 | FILE_APPEND |
---|
| 2744 | ); |
---|
| 2745 | } |
---|
[6049] | 2746 | |
---|
| 2747 | function ws_images_checkUpload($params, &$service) |
---|
| 2748 | { |
---|
| 2749 | global $conf; |
---|
| 2750 | |
---|
[8126] | 2751 | if (!is_admin()) |
---|
[6049] | 2752 | { |
---|
| 2753 | return new PwgError(401, 'Access denied'); |
---|
| 2754 | } |
---|
| 2755 | |
---|
[8249] | 2756 | include_once(PHPWG_ROOT_PATH.'admin/include/functions_upload.inc.php'); |
---|
[6051] | 2757 | $ret['message'] = ready_for_upload_message(); |
---|
| 2758 | $ret['ready_for_upload'] = true; |
---|
| 2759 | |
---|
| 2760 | if (!empty($ret['message'])) |
---|
| 2761 | { |
---|
| 2762 | $ret['ready_for_upload'] = false; |
---|
| 2763 | } |
---|
| 2764 | |
---|
| 2765 | return $ret; |
---|
| 2766 | } |
---|
[8273] | 2767 | |
---|
| 2768 | function ws_plugins_getList($params, &$service) |
---|
| 2769 | { |
---|
| 2770 | global $conf; |
---|
| 2771 | |
---|
| 2772 | if (!is_admin()) |
---|
| 2773 | { |
---|
| 2774 | return new PwgError(401, 'Access denied'); |
---|
| 2775 | } |
---|
| 2776 | |
---|
| 2777 | include_once(PHPWG_ROOT_PATH.'admin/include/plugins.class.php'); |
---|
| 2778 | $plugins = new plugins(); |
---|
| 2779 | $plugins->sort_fs_plugins('name'); |
---|
| 2780 | $plugin_list = array(); |
---|
| 2781 | |
---|
| 2782 | foreach($plugins->fs_plugins as $plugin_id => $fs_plugin) |
---|
| 2783 | { |
---|
| 2784 | if (isset($plugins->db_plugins_by_id[$plugin_id])) |
---|
| 2785 | { |
---|
| 2786 | $state = $plugins->db_plugins_by_id[$plugin_id]['state']; |
---|
| 2787 | } |
---|
| 2788 | else |
---|
| 2789 | { |
---|
| 2790 | $state = 'uninstalled'; |
---|
| 2791 | } |
---|
| 2792 | |
---|
| 2793 | array_push( |
---|
| 2794 | $plugin_list, |
---|
| 2795 | array( |
---|
| 2796 | 'id' => $plugin_id, |
---|
| 2797 | 'name' => $fs_plugin['name'], |
---|
| 2798 | 'version' => $fs_plugin['version'], |
---|
| 2799 | 'state' => $state, |
---|
| 2800 | 'description' => $fs_plugin['description'], |
---|
| 2801 | ) |
---|
| 2802 | ); |
---|
| 2803 | } |
---|
| 2804 | |
---|
| 2805 | return $plugin_list; |
---|
| 2806 | } |
---|
| 2807 | |
---|
| 2808 | function ws_plugins_performAction($params, &$service) |
---|
| 2809 | { |
---|
| 2810 | global $template; |
---|
| 2811 | |
---|
| 2812 | if (!is_admin()) |
---|
| 2813 | { |
---|
| 2814 | return new PwgError(401, 'Access denied'); |
---|
| 2815 | } |
---|
| 2816 | |
---|
| 2817 | if (empty($params['pwg_token']) or get_pwg_token() != $params['pwg_token']) |
---|
| 2818 | { |
---|
| 2819 | return new PwgError(403, 'Invalid security token'); |
---|
| 2820 | } |
---|
| 2821 | |
---|
| 2822 | define('IN_ADMIN', true); |
---|
| 2823 | include_once(PHPWG_ROOT_PATH.'admin/include/plugins.class.php'); |
---|
| 2824 | $plugins = new plugins(); |
---|
| 2825 | $errors = $plugins->perform_action($params['action'], $params['plugin']); |
---|
| 2826 | |
---|
| 2827 | |
---|
| 2828 | if (!empty($errors)) |
---|
| 2829 | { |
---|
| 2830 | return new PwgError(500, $errors); |
---|
| 2831 | } |
---|
| 2832 | else |
---|
| 2833 | { |
---|
| 2834 | if (in_array($params['action'], array('activate', 'deactivate'))) |
---|
| 2835 | { |
---|
| 2836 | $template->delete_compiled_templates(); |
---|
| 2837 | } |
---|
| 2838 | return true; |
---|
| 2839 | } |
---|
| 2840 | } |
---|
| 2841 | |
---|
[8297] | 2842 | function ws_themes_performAction($params, &$service) |
---|
| 2843 | { |
---|
| 2844 | global $template; |
---|
| 2845 | |
---|
[8726] | 2846 | if (!is_admin()) |
---|
[8297] | 2847 | { |
---|
| 2848 | return new PwgError(401, 'Access denied'); |
---|
| 2849 | } |
---|
| 2850 | |
---|
| 2851 | if (empty($params['pwg_token']) or get_pwg_token() != $params['pwg_token']) |
---|
| 2852 | { |
---|
| 2853 | return new PwgError(403, 'Invalid security token'); |
---|
| 2854 | } |
---|
| 2855 | |
---|
| 2856 | define('IN_ADMIN', true); |
---|
| 2857 | include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php'); |
---|
| 2858 | $themes = new themes(); |
---|
| 2859 | $errors = $themes->perform_action($params['action'], $params['theme']); |
---|
| 2860 | |
---|
| 2861 | if (!empty($errors)) |
---|
| 2862 | { |
---|
| 2863 | return new PwgError(500, $errors); |
---|
| 2864 | } |
---|
| 2865 | else |
---|
| 2866 | { |
---|
| 2867 | if (in_array($params['action'], array('activate', 'deactivate'))) |
---|
| 2868 | { |
---|
| 2869 | $template->delete_compiled_templates(); |
---|
| 2870 | } |
---|
| 2871 | return true; |
---|
| 2872 | } |
---|
| 2873 | } |
---|
[1698] | 2874 | ?> |
---|