ChPageACModule.php

Go to the documentation of this file.

<?php
 
ch_import('ChWsbModule');
ch_import('ChWsbCacheFile');
 
class ChPageACModule extends ChWsbModule
{
    function __construct($aModule)
    {
        parent::__construct($aModule);
    }
    //--- Pages (tabs) ---//
    function actionGetPageRules()
    {
        send_headers_page_changed();
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        header('Content-Type: text/html; charset=utf-8');
 
        $sRet = DesignBoxAdmin(_t('_ch_pageac_current_rules'), $this->actionGetRulesList(true), '', '', 11);
        $sRet .= DesignBoxAdmin(_t('_ch_pageac_new_rule'), $this->_oTemplate->displayNewRuleForm(), '', '', 11);
        $sRet .= DesignBoxAdmin(_t('_ch_pageac_note'), $GLOBALS['oAdmTemplate']->parseHtmlByName('design_box_content.html', array('content' => _t('_ch_pageac_note_text'))));
        return $sRet;
    }
    function actionGetPageTopMenu()
    {
        send_headers_page_changed();
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        header('Content-Type: text/html; charset=utf-8');
 
        $aTopMenuArray = $this->_oDb->getTopMenuArray();
        return $this->_oTemplate->displayTopMenuCompose($aTopMenuArray);
    }
    function actionGetPageMemberMenu()
    {
        send_headers_page_changed();
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        header('Content-Type: text/html; charset=utf-8');
 
        $aMemberMenuArray = $this->_oDb->getMemberMenuArray();
        return $this->_oTemplate->displayMemberMenuCompose($aMemberMenuArray);
    }
    function actionGetPagePageBlocks($sPage = '')
    {
        send_headers_page_changed();
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        header('Content-Type: text/html; charset=utf-8');
 
        if (empty($sPage)) {
            return $this->_oTemplate->_getAvailablePages($this->_oDb->getAvailablePages());
        } else {
            $aColumns = $this->_oDb->getPageBlocks($sPage);
            return $this->_oTemplate->_getPageBlocks($aColumns);
        }
    }
    //--- Actions ---//
    function actionGetRulesList($bAddWrapper = false)
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        $aRules = $this->_oDb->getAllRules();
        $sRet = $this->_oTemplate->displayRulesList($aRules);
        if ($bAddWrapper) $sRet= '<div id="rules_list">'.$sRet.'</div>';
 
        header('Content-Type: text/html; charset=utf-8');
        return $sRet;
    }
 
    function actionNewRule()
    {
        if(!isAdmin()) return 'Hack attempt';
 
        $sRule = $this->_validateRule($_POST['rule'], $_POST['advanced']);
        if (!empty($sRule)) {
            $aMemLevels = array();
            foreach ($_POST['memlevels'] as $iID) {
                $aMemLevels[$iID] = 1;
            }
 
            $this->_oDb->addRule($sRule, $aMemLevels);
            return '';
        } else {
            header('Content-Type: text/html; charset=utf-8');
            return _t('_ch_pageac_page_url_empty');
        }
 
    }
    function actionSaveRule()
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        $iRuleID = intval($_POST['rule_id']);
        $sRule = $this->_validateRule($_POST['rule_text'], true);
        if (!strlen($sRule)) {
            return $this->actionDeleteRule();
        } else {
            $aMemLevels = array();
            $aData = explode(',', $_POST['rule_mlvs']);
            foreach ($aData as $iID) {
                if ($iID) $aMemLevels[$iID] = 1;
            }
            $this->_oDb->updateRule($iRuleID, $sRule, $aMemLevels);
            return MsgBox(_t('_ch_pageac_saved'), 1).$this->actionGetRulesList();
        }
    }
 
    function actionDeleteRule()
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        $iRuleID = intval($_POST['rule_id']);
 
        $this->_oDb->deleteRule($iRuleID);
        return MsgBox(_t('_ch_pageac_deleted'), 1).$this->actionGetRulesList();
    }
 
    function actionTopMenu($sAction, $iMenuItemID)
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        if ($sAction == 'edit') {
            $aMenuItemVisibility = $this->_oDb->getMenuItemVisibility('top', $iMenuItemID);
 
            header('Content-Type: text/html; charset=utf-8');
            return PopupBox('pageac_popup_edit_form', _t('_ch_pageac_visible_for'), $GLOBALS['oAdmTemplate']->parseHtmlByName('design_box_content.html', array('content' => $this->_oTemplate->getMenuItemEditForm('top', $iMenuItemID, $aMenuItemVisibility).LoadingBox('formItemEditLoading'))));
        }elseif ($sAction == 'save') {
            $this->saveMenuItem('top', $iMenuItemID);
            $aResult = array('message' => MsgBox(_t('_Saved')), 'timer' => 1);
            return json_encode($aResult);
        }
    }
    function actionMemberMenu($sAction, $iMenuItemID)
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        if ($sAction == 'edit') {
            $aMenuItemVisibility = $this->_oDb->getMenuItemVisibility('member', $iMenuItemID);
 
            header('Content-Type: text/html; charset=utf-8');
            return PopupBox('pageac_popup_edit_form', _t('_ch_pageac_visible_for'), $GLOBALS['oAdmTemplate']->parseHtmlByName('design_box_content.html', array('content' => $this->_oTemplate->getMenuItemEditForm('member', $iMenuItemID, $aMenuItemVisibility).LoadingBox('formItemEditLoading'))));
        }elseif ($sAction == 'save') {
            $this->saveMenuItem('member', $iMenuItemID);
            $aResult = array('message' => MsgBox(_t('_Saved')), 'timer' => 1);
            return json_encode($aResult);
        }
    }
    function saveMenuItem($sType, $iMenuItemID)
    {
        $aVisibleTo = array();
        if (is_array($_POST['mlv_visible_to'])) {
            $aData = array_flip($_POST['mlv_visible_to']);
            if ( !isset($aData[-1]) ) {
                foreach ($aData as $iLevel => $dummy) {
                    $aVisibleTo[$iLevel] = 1;
                }
            }
        }
        if (empty($aVisibleTo) && !isset($aData[-1])) $aVisibleTo[] = 0;
        $this->_oDb->setMenuItemVisibility($sType, $iMenuItemID, $aVisibleTo);
    }
    function actionPageBlock($sAction, $iID)
    {
        if(!isAdmin()) $this->_oTemplate->displayAccessDenied();
 
        if ($sAction == 'edit') {
            $aVisibility = $this->_oDb->getPageBlockVisibility($iID);
 
            header('Content-Type: text/html; charset=utf-8');
            return PopupBox('pageac_popup_edit_form', _t('_ch_pageac_visible_for'), $GLOBALS['oAdmTemplate']->parseHtmlByName('design_box_content.html', array('content' => $this->_oTemplate->getPageBlockEditForm($iID, $aVisibility).LoadingBox('formItemEditLoading'))));
        }elseif ($sAction == 'save') {
            $aVisibleTo = array();
            if (is_array($_POST['mlv_visible_to'])) {
                $aData = array_flip($_POST['mlv_visible_to']);
                if ( !isset($aData[-1]) ) {
                    foreach ($aData as $iMemLevel => $dummy) {
                        $aVisibleTo[$iMemLevel] = 1;
                    }
                }
            }
            if (empty($aVisibleTo) && !isset($aData[-1])) $aVisibleTo[] = 0;
            $this->_oDb->setPageBlockVisibility($iID, $aVisibleTo);
            $aResult = array('message' => MsgBox(_t('_Saved')), 'timer' => 1);
            return json_encode($aResult);
        }
    }
    function _validateRule($sRule, $bIsAdvanced)
    {
        $sRule = trim($sRule);
        if (empty($sRule)) return '';
 
        $sBaseURL = basename(CH_WSB_URL_ROOT);
 
        if (strpos($sRule, CH_WSB_URL_ROOT) === 0) $sRule = substr($sRule, strlen(CH_WSB_URL_ROOT)); //if URL starts from http://www.site.com
        elseif (strpos($sRule, $sBaseURL) === 0) $sRule = substr($sRule, strlen($sBaseURL)+1); //if URL starts from www.site.com
        else {
            if (strpos($sBaseURL, 'www.') === 0) {
                $sBaseURL = substr($sBaseURL, 4);
                if (strpos($sRule, $sBaseURL) === 0) $sRule = substr($sRule, strlen($sBaseURL)+1); //if URL starts from site.com
            }
        }
 
        if (!$bIsAdvanced) {
            $sRule = addcslashes($sRule, '|\\{}[]()#:^$.?+*'); //   |\{}[]()#:^$.?+* - special regex characters
            if (!empty($sRule)) $sRule .= '.*';
        }
 
        return $sRule;
    }
 
    //--- Services ---//
    function serviceMenuItemsFilter($sType, &$aItems)
    {
        //to avoid menu filtering during module uninstallation.
        if(isset($_REQUEST['modules-uninstall']) && $_REQUEST['modules-uninstall'] && in_array('cheetah/pageac/', $_REQUEST['pathes']))
            return ;
 
        if(!defined('CH_WSB_ROLE_MEMBER'))
            define('CH_WSB_ROLE_MEMBER', 1);    //this code is required here because at the time of ChWsbMenu::load function call profiles.inc.php isn't fully included yet,
        if(!defined('CH_WSB_ROLE_ADMIN'))
            define('CH_WSB_ROLE_ADMIN', 2); //thus all defines and function calls located in profiles.inc.php aren't executed at this moment
 
        check_logged(); //so a call to isLogged or check_logged always would fail here because CH_WSB_ROLE_MEMBER/CH_WSB_ROLE_ADMIN aren't defined yet.
 
        if(!isLogged())
            return; //non-members visibility controlled by default in builders
        else if (isRole(CH_WSB_ROLE_ADMIN, getLoggedId()))
            return; //admin isn't affected by this module
 
        $aMembership = getMemberMembershipInfo(getLoggedId());
        $iMemLevel = intval($aMembership['ID']);
 
        $aMenuCache = $this->_oDb->getAllMenuItems($sType);
 
        if ($sType == 'member') {
            foreach ($aItems as $sSection => $aSubItems) {
                if (!is_array($aSubItems)) continue;
                foreach ($aSubItems as $iItem => $aItem) {
                    $iRealID = $aSubItems[$iItem]['menu_id'];
                    if (!empty($aMenuCache[$iRealID]['MemLevels']) && !$aMenuCache[$iRealID]['MemLevels'][$iMemLevel]) unset($aItems[$sSection][$iItem]);
                }
                $aItems[$sSection] = array_values($aItems[$sSection]);
            }
        } else {
            foreach ($aItems as $iItem => $aItem) {
                if (!empty($aMenuCache[$iItem]['MemLevels']) && !$aMenuCache[$iItem]['MemLevels'][$iMemLevel]) unset($aItems[$iItem]);
            }
        }
    }
 
    function servicePageBlocksFilter(&$oChWsbPageView)
    {
        if (!isLogged()) return; //non-members visibility controlled by default in builders
        elseif (isRole(CH_WSB_ROLE_ADMIN, getLoggedId())) return; //admin isn't affected by this module
 
        $aMembership = getMemberMembershipInfo(getLoggedId());
        $iMemLevel = $aMembership['ID'];
 
        $aPageBlocksCache = $this->_oDb->getAllPageBlocks();
 
        foreach ($oChWsbPageView->aPage['Columns'] as $iColumn => $aColumn) {
            foreach ($aColumn['Blocks'] as $iBlockID => $aBlock) {
                if (!empty($aPageBlocksCache[$iBlockID]) && !$aPageBlocksCache[$iBlockID]['MemLevels'][$iMemLevel]) unset($oChWsbPageView->aPage['Columns'][$iColumn]['Blocks'][$iBlockID]);
            }
        }
    }
    function serviceIsUrlAccessable($sURL, $iUserId = 0)
    {
        if ($iUserId && isRole(CH_WSB_ROLE_ADMIN, $iUserId) || strpos($sURL, '/'.$GLOBALS['admin_dir']) === 0) return true; //admin isn't affected by this module also access to admin panel shouldn't ever be protected
 
        $aMemLevel = getMemberMembershipInfo($iUserId);
        $iMemLevel = $aMemLevel['ID'];
 
        if ($iMemLevel) {
            $aRules = $this->_oDb->getAllRules();
            foreach ($aRules as $aRule) {
                if ($aRule['MemLevels'][$iMemLevel] && @preg_match('#'.$aRule['Rule'].'#i', $sURL))
                    return false;
            }
        }
 
        return true;
    }
    function serviceResponceProtectURL($sURL)
    {
        if (!isLogged() && ch_get('oid') && ch_get('pwd')) { // in case of request from flash, cookies are not passed, and we have to set it explicitly
            $_COOKIE['memberID'] = ch_get('oid');
            $_COOKIE['memberPassword'] = ch_get('pwd');
            check_logged();
        }
 
        if (!$this->serviceIsUrlAccessable($sURL, getLoggedId())) {
            global $_page;
            global $_page_cont;
            $_page['name_index'] = -1;
            $_page['header'] = _t("_ch_pageac_access_denied");
            $_page_cont[$_page['name_index']]['page_main_code'] = MsgBox(_t("_ch_pageac_deny_text"));
            PageCode();
            exit;
        }
    }
}