<?php /** * EGroupare - InfoLog - Storage object * * @link http://www.egroupware.org * @author Ralf Becker <RalfBecker-AT-outdoor-training.de> * @package infolog * @copyright (c) 2003-17 by Ralf Becker <RalfBecker-AT-outdoor-training.de> * @license http://opensource.org/licenses/gpl-license.php GPL - GNU General Public License */ use EGroupware\Api; use EGroupware\Api\Link; use EGroupware\Api\Acl; /** * storage object / db-layer for InfoLog * * all values passed to this class are run either through intval or addslashes to prevent query-insertion * and for pgSql 7.3 compatibility */ class infolog_so { /** * Instance of the db class * * @var Api\Db */ var $db; /** * Grants from other users * * @var array */ var $grants; /** * Internal data array * * @var array */ var $data = array( ); /** * Current user (account_id) * * @var int */ var $user; /** * Infolog table-name * * @var string */ var $info_table = 'egw_infolog'; /** * Infolog custom fileds table-name * * @var string */ var $extra_table = 'egw_infolog_extra'; /** * Infolog delegation / iCal attendees * * @var string */ var $users_table = 'egw_infolog_users'; /** * Offset between server- and user-time in h * * @var int */ var $tz_offset; /** * Constructor * * @param array $grants =array() * @return soinfolog */ function __construct( $grants=array() ) { $this->db = clone($GLOBALS['egw']->db); $this->db->set_app('infolog'); $this->grants = $grants; $this->user = $GLOBALS['egw_info']['user']['account_id']; $this->tz_offset = $GLOBALS['egw_info']['user']['preferences']['common']['tz_offset']; } /** * Check if user is responsible for an entry: he or one of his memberships is in responsible * * @param array $info infolog entry as array * @param int $user =null user to check for, default $this->user * @return boolean */ function is_responsible($info,$user=null) { if (!$user) $user = $this->user; return self::is_responsible_user($info, $user); } /** * Check if user is responsible for an entry: he or one of his memberships is in responsible * * @param array $info infolog entry as array * @param int $user =null user to check for * @return boolean */ static function is_responsible_user($info, $user) { static $um_cache = array(); $user_and_memberships =& $um_cache[$user]; if (!isset($user_and_memberships)) { $user_and_memberships = $GLOBALS['egw']->accounts->memberships($user,true); $user_and_memberships[] = $user; } return $info['info_responsible'] && array_intersect((array)$info['info_responsible'],$user_and_memberships); } /** * checks if user has the $required_rights to access $info_id (private access is handled too) * * @param array|int $info data or info_id of InfoLog entry * @param int $required_rights EGW_ACL_xyz anded together * @param boolean $implicit_edit =false responsible has only implicit read and add rigths, unless this is set to true * @param array $grants =null grants to use, default (null) $this->grants * @param int $user =null user to check, default (null) $this->user * @return boolean True if access is granted else False */ function check_access( $info,$required_rights,$implicit_edit=false,array $grants=null,$user=null ) { if (is_null($grants)) $grants = $this->grants; if (!$user) $user = $this->user; // if info-array, but no owner given, force reading of info from db if (is_array($info) && !$info['info_owner']) $info = $info['info_id']; if (is_array($info)) { } elseif ((int) $info != $this->data['info_id']) // already loaded? { // dont change our own internal data, $backup_data = $this->data; $info = $this->read(array('info_id'=>$info)); $this->data = $backup_data; } else { $info = $this->data; } if (!$info) { return False; } $owner = $info['info_owner']; $access_ok = $owner == $user || // user has all rights // ACL only on public entrys || $owner granted _PRIVATE (!!($grants[$owner] & $required_rights) || $this->is_responsible($info,$user) && // implicite rights for responsible user(s) and his memberships ($required_rights == Acl::READ || $required_rights == Acl::ADD || $implicit_edit && $required_rights == Acl::EDIT)) && ($info['info_access'] == 'public' || !!($this->grants[$user] & Acl::PRIVAT)); // error_log(__METHOD__."($info[info_id],$required_rights,$implicit_edit,".array2string($grants).",$user) returning ".array2string($access_ok)); return $access_ok; } /** * Filter for a given responsible user: info_responsible either contains a the user or one of his memberships * * @param int|array $users one or more account_ids * @param boolean $deleted_too =false true: also use deleted entries * @return string */ function responsible_filter($users, $deleted_too=false) { if (!$users) return '0'; $responsible = array(); foreach((array)$users as $user) { $responsible = array_merge($responsible,(array) ($user > 0 ? $GLOBALS['egw']->accounts->memberships($user,true) : $GLOBALS['egw']->accounts->members($user,true))); $responsible[] = $user; } if (is_array($users)) { $responsible = array_unique($responsible); } $sql = "$this->users_table.account_id IN (".implode(',', array_map(array($this->db, 'quote'), $responsible)).')'; if (!$deleted_too) { // we use NULL or true, not false! $sql .= " AND $this->users_table.info_res_deleted IS NULL"; } return $sql; } /** * generate sql to be AND'ed into a query to ensure ACL is respected (incl. _PRIVATE) * * @param string $_filter ''|all - list all entrys user have rights to see<br> * private|own - list only his personal entrys (incl. those he is responsible for !!!), * responsible|my = entries the user is responsible for * delegated = entries the user delegated to someone else * @return string the necesary sql */ function aclFilter($_filter = False) { $vars = null; preg_match('/(my|responsible|delegated|own|privat|private|all|user)([0-9,-]*)(\+deleted)?/',$_filter,$vars); $filter = $vars[1]; $f_user = $vars[2]; $deleted_too = !empty($vars[3]); if (isset($this->acl_filter[$filter.$f_user])) { return $this->acl_filter[$filter.$f_user]; // used cached filter if found } if ($f_user && strpos($f_user,',') !== false) { $f_user = explode(',',$f_user); } $filtermethod = " (info_owner=$this->user"; // user has all rights if ($filter == 'my' || $filter == 'responsible') { $filtermethod .= " AND $this->users_table.account_id IS NULL"; } if ($filter == 'delegated') { $filtermethod .= " AND $this->users_table.account_id IS NOT NULL)"; } else { if (is_array($this->grants)) { foreach($this->grants as $user => $grant) { // echo "<p>grants: user=$user, grant=$grant</p>"; if ($grant & (EGW_ACL_READ|EGW_ACL_EDIT)) { $public_user_list[] = $user; } if ($grant & Acl::PRIVAT) { $private_user_list[] = $user; } } if (count($private_user_list)) { $has_private_access = $this->db->expression($this->info_table,array('info_owner' => $private_user_list)); } } $public_access = $this->db->expression($this->info_table,array('info_owner' => $public_user_list)); // implicit read-rights for responsible user $filtermethod .= " OR (".$this->responsible_filter($this->user, $deleted_too).')'; // private: own entries plus the one user is responsible for if ($filter == 'private' || $filter == 'privat' || $filter == 'own') { $filtermethod .= " OR (".$this->responsible_filter($this->user, $deleted_too). ($filter == 'own' && count($public_user_list) ? // offer's should show up in own, eg. startpage, but need read-access " OR info_status = 'offer' AND $public_access" : '').")". " AND (info_access='public'".($has_private_access?" OR $has_private_access":'').')'; } elseif ($filter != 'my' && $filter != 'responsible') // none --> all entrys user has rights to see { if ($has_private_access) { $filtermethod .= " OR $has_private_access"; } if (count($public_user_list)) { $filtermethod .= " OR (info_access='public' AND $public_access)"; } } $filtermethod .= ') '; if ($filter == 'user' && $f_user) { $filtermethod .= $this->db->expression($this->info_table,' AND (',array( 'info_owner' => $f_user, )," AND $this->users_table.account_id IS NULL OR ",$this->responsible_filter($f_user, $deleted_too),')'); } } //echo "<p>aclFilter(filter='$_filter',user='$f_user') = '$filtermethod', privat_user_list=".print_r($privat_user_list,True).", public_user_list=".print_r($public_user_list,True)."</p>\n"; return $this->acl_filter[$filter.$f_user] = $filtermethod; // cache the filter } /** * generate sql to filter based on the status of the log-entry * * @param string $_filter done = done or billed, open = not (done, billed, cancelled or deleted), offer = offer * @param boolean $prefix_and =true if true prefix the fileter with ' AND ' * @return string the necesary sql */ function statusFilter($_filter = '',$prefix_and=true) { $vars = null; preg_match('/(done|open|offer|deleted|\+deleted)/',$_filter,$vars); $filter = $vars[1]; switch ($filter) { case 'done': $filter = "info_status IN ('done','billed','cancelled')"; break; case 'open': $filter = "NOT (info_status IN ('done','billed','cancelled','deleted','template','nonactive','archive'))"; break; case 'offer': $filter = "info_status = 'offer'"; break; case 'deleted': $filter = "info_status = 'deleted'"; break; case '+deleted':$filter = "NOT (info_status IN ('template','nonactive','archive'))"; break; default: $filter = "NOT (info_status IN ('deleted','template','nonactive','archive'))"; break; } return ($prefix_and ? ' AND ' : '').$filter; } /** * generate sql to filter based on the start- and enddate of the log-entry * * @param string $_filter upcoming = startdate is in the future * today: startdate < tomorrow * overdue: enddate < tomorrow * date: today <= startdate && startdate < tomorrow * enddate: today <= enddate && enddate < tomorrow * limitYYYY/MM/DD not older or open * @return string the necesary sql */ function dateFilter($_filter = '') { $vars = null; preg_match('/(open-upcoming|upcoming|today|overdue|date|enddate)([-\\/.0-9]*)/',$_filter,$vars); $filter = $vars[1]; if (isset($vars[2]) && !empty($vars[2]) && ($date = preg_split('/[-\\/.]/',$vars[2]))) { $today = mktime(-$this->tz_offset,0,0,intval($date[1]),intval($date[2]),intval($date[0])); $tomorrow = mktime(-$this->tz_offset,0,0,intval($date[1]),intval($date[2])+1,intval($date[0])); } else { $now = getdate(time()-60*60*$this->tz_offset); $tomorrow = mktime(-$this->tz_offset,0,0,$now['mon'],$now['mday']+1,$now['year']); } switch ($filter) { case 'open-upcoming': return "AND (info_startdate >= $tomorrow OR NOT (info_status IN ('done','billed','cancelled','deleted','template','nonactive','archive')))"; case 'upcoming': return " AND info_startdate >= $tomorrow"; case 'today': return " AND info_startdate < $tomorrow"; case 'overdue': return " AND (info_enddate != 0 AND info_enddate < $tomorrow)"; case 'date': if (!$today || !$tomorrow) { return ''; } return " AND ($today <= info_startdate AND info_startdate < $tomorrow)"; case 'enddate': if (!$today || !$tomorrow) { return ''; } return " AND ($today <= info_enddate AND info_enddate < $tomorrow)"; case 'limit': return " AND (info_modified >= $today OR NOT (info_status IN ('done','billed','cancelled')))"; } return ''; } /** * initialise the internal $this->data to be empty * * only non-empty values got initialised */ function init() { $this->data = array( 'info_owner' => $this->user, 'info_priority' => 1, 'info_responsible' => array(), ); } /** * read InfoLog entry $info_id * * some cacheing is done to prevent multiple reads of the same entry * * @param array $where where clause for entry to read * @return array|boolean the entry as array or False on error (eg. entry not found) */ function read(array $where) // did _not_ ensure ACL { //error_log(__METHOD__.'('.array2string($where).')'); if (isset($GLOBALS['egw_info']['user']['preferences']['syncml']['minimum_uid_length'])) { $minimum_uid_length = $GLOBALS['egw_info']['user']['preferences']['syncml']['minimum_uid_length']; } else { $minimum_uid_length = 8; } if (isset($where['info_id'])) { $where[] = $this->db->expression($this->info_table, $this->info_table.'.', array('info_id' => $where['info_id'])); unset($where['info_id']); } if (!$where || !($this->data = $this->db->select($this->info_table, $this->info_table.'.*,'.$this->db->group_concat('account_id').' AS info_responsible,'. $this->db->group_concat('info_res_attendee').' AS info_cc,'. $this->info_table.'.info_id AS info_id', $where, __LINE__, __FILE__, false, "GROUP BY $this->info_table.info_id", 'infolog', 1, "LEFT JOIN $this->users_table ON $this->info_table.info_id=$this->users_table.info_id AND $this->users_table.info_res_deleted IS NULL")->fetch())) { $this->init( ); //error_log(__METHOD__.'('.array2string($where).') returning FALSE'); return False; } // entry without uid --> create one based on our info_id and save it if (!$this->data['info_uid'] || strlen($this->data['info_uid']) < $minimum_uid_length) { $this->data['info_uid'] = Api\CalDAV::generate_uid('infolog', $this->data['info_id']); $this->db->update($this->info_table, array('info_uid' => $this->data['info_uid']), array('info_id' => $this->data['info_id']), __LINE__,__FILE__); } if (!is_array($this->data['info_responsible'])) { $this->data['info_responsible'] = $this->data['info_responsible'] ? explode(',',$this->data['info_responsible']) : array(); foreach($this->data['info_responsible'] as $k => $v) { if (!is_numeric($v)) unset($this->data['info_responsible'][$k]); } $this->data['info_responsible'] = array_values($this->data['info_responsible']); } // Cast back to integer $this->data['info_id_parent'] = (int)$this->data['info_id_parent']; foreach($this->db->select($this->extra_table,'info_extra_name,info_extra_value',array('info_id'=>$this->data['info_id']),__LINE__,__FILE__) as $row) { $this->data['#'.$row['info_extra_name']] = $row['info_extra_value']; } //error_log(__METHOD__.'('.array2string($where).') returning '.array2string($this->data)); return $this->data; } /** * delete InfoLog entry $info_id AND the links to it * * @param int $info_id id of log-entry * @param boolean $delete_children delete the children, if not set there parent-id to $new_parent * @param int $new_parent new parent-id to set for subs */ function delete($info_id,$delete_children=True,$new_parent=0) // did _not_ ensure ACL { //echo "<p>soinfolog::delete($info_id,'$delete_children',$new_parent)</p>\n"; if ((int) $info_id <= 0) { return; } $this->db->delete($this->info_table,array('info_id'=>$info_id),__LINE__,__FILE__); $this->db->delete($this->extra_table,array('info_id'=>$info_id),__LINE__,__FILE__); $this->db->delete($this->users_table,array('info_id'=>$info_id),__LINE__,__FILE__); Link::unlink(0,'infolog',$info_id); if ($this->data['info_id'] == $info_id) { $this->init( ); } // delete children, if they are owned by the user if ($delete_children) { $db2 = clone($this->db); // we need an extra result-set foreach($db2->select($this->info_table,'info_id',array( 'info_id_parent' => $info_id, 'info_owner' => $this->user, ),__LINE__,__FILE__) as $row) { $this->delete($row['info_id'], $delete_children); } } // set parent_id to $new_parent or 0 for all not deleted children $this->db->update($this->info_table,array('info_id_parent'=>$new_parent),array('info_id_parent'=>$info_id),__LINE__,__FILE__); } /** * Return array with children of $info_id as info_id => info_owner pairs * * @param int $info_id * @return array with info_id => info_owner pairs */ function get_children($info_id) { $children = array(); foreach($this->db->select($this->info_table, 'info_id,info_owner', array( 'info_id_parent' => $info_id, ),__LINE__,__FILE__) as $row) { $children[$row['info_id']] = $row['info_owner']; } return $children; } /** * changes or deletes entries with a spezified owner (for hook_delete_account) * * @param array $args hook arguments * @param int $args['account_id'] account to delete * @param int $args['new_owner']=0 new owner * @todo test deleting an owner with replace and without */ function change_delete_owner(array $args) // new_owner=0 means delete { if (!(int) $args['new_owner']) { foreach($this->db->select($this->info_table,'info_id',array('info_owner'=>$args['account_id']),__LINE__,__FILE__,false,'','infolog') as $row) { $this->delete($row['info_id'],False); } } else { $this->db->update($this->info_table,array('info_owner'=>$args['new_owner']),array('info_owner'=>$args['account_id']),__LINE__,__FILE__,'infolog'); } if ($args['new_owner']) { // we cant just set the new owner, as he might be already set and we have a unique index $this->db->query('UPDATE '.$this->users_table. " LEFT JOIN $this->users_table new_owner ON new_owner.info_id=$this->users_table.info_id". " AND new_owner.account_id=".$this->db->quote($args['new_owner']). ' SET '.$this->users_table.'.account_id='.$this->db->quote($args['new_owner']). ' WHERE '.$this->users_table.'.account_id='.$this->db->quote($args['account_id']). ' AND new_owner.account_id IS NULL', __LINE__, __FILE__); } $this->db->delete($this->users_table, array('account_id' => $args['account_id']), __LINE__, __FILE__, 'infolog'); } /** * writes the given $values to InfoLog, a new entry gets created if info_id is not set or 0 * * @param array $values with the data of the log-entry * @param int $check_modified =0 old modification date to check before update (include in WHERE) * @param string $purge_cfs =null null=dont, 'ical'=only iCal X-properties (cfs name starting with "#"), 'all'=all cfs * @param boolean $force_insert =false force using insert, even if an id is given eg. for import * @return int|boolean info_id, false on error or 0 if the entry has been updated in the meantime */ function write($values, $check_modified=0, $purge_cfs=null, $force_insert=false) // did _not_ ensure ACL { if (isset($GLOBALS['egw_info']['user']['preferences']['syncml']['minimum_uid_length'])) { $minimum_uid_length = $GLOBALS['egw_info']['user']['preferences']['syncml']['minimum_uid_length']; } else { $minimum_uid_length = 8; } //echo "soinfolog::write(,$check_modified) values="; _debug_array($values); $info_id = (int) $values['info_id']; $table_def = $this->db->get_table_definitions('infolog',$this->info_table); $to_write = array(); foreach($values as $key => $val) { if (($key != 'info_id' || $force_insert && $info_id > 0) && isset($table_def['fd'][$key])) { $to_write[$key] = $this->data[$key] = $val; // update internal data } } // writing no price as SQL NULL (required by postgres) if ($to_write['info_price'] === '') $to_write['info_price'] = NULL; if (($this->data['info_id'] = $info_id) && !$force_insert) { $where = array('info_id' => $info_id); if ($check_modified) $where['info_datemodified'] = $check_modified; if (!$this->db->update($this->info_table,$to_write,$where,__LINE__,__FILE__)) { //error_log("### soinfolog::write(".print_r($to_write,true).") where=".print_r($where,true)." returning false"); return false; // Error } if ($check_modified && $this->db->affected_rows() < 1) { //error_log("### soinfolog::write(".print_r($to_write,true).") where=".print_r($where,true)." returning 0 (nothing updated, eg. condition not met)"); return 0; // someone else updated the modtime or deleted the entry } } else { if (!isset($to_write['info_id_parent'])) $to_write['info_id_parent'] = 0; // must not be null $this->db->insert($this->info_table,$to_write,false,__LINE__,__FILE__); $info_id = $this->data['info_id'] = $this->db->get_last_insert_id($this->info_table,'info_id'); } $update = array(); // entry without (reasonable) uid --> create one based on our info_id and save it if (!$this->data['info_uid'] || strlen($this->data['info_uid']) < $minimum_uid_length) { $update['info_uid'] = $this->data['info_uid'] = Api\CalDAV::generate_uid('infolog', $info_id); } // entry without caldav_name --> generate one based on info_id plus '.ics' extension if (empty($this->data['caldav_name'])) { $update['caldav_name'] = $this->data['caldav_name'] = $info_id.'.ics'; } if ($update) { $this->db->update($this->info_table,$update, array('info_id' => $info_id), __LINE__,__FILE__); } //echo "<p>soinfolog.write values= "; _debug_array($values); // write customfields now if ($purge_cfs) { $where = array('info_id' => $info_id); if ($purge_cfs == 'ical') $where[] = "info_extra_name LIKE '#%'"; $this->db->delete($this->extra_table,$where,__LINE__,__FILE__); } $to_delete = array(); // Deal with files in new entries Api\Storage\Customfields::handle_files('infolog',$info_id,$values); foreach($values as $key => $val) { if ($key[0] != '#') { continue; // no customfield } $this->data[$key] = $val; // update internal data if ($val) { $this->db->insert($this->extra_table,array( // store multivalued CalDAV properties as serialized array, everything else get comma-separated 'info_extra_value' => is_array($val) ? ($key[1] == '#' ? serialize($val) : implode(',',$val)) : $val, ),array( 'info_id' => $info_id, 'info_extra_name' => substr($key,1), ),__LINE__,__FILE__); } else { $to_delete[] = substr($key,1); } } if ($to_delete && !$purge_cfs) { $this->db->delete($this->extra_table,array( 'info_id' => $info_id, 'info_extra_name' => $to_delete, ),__LINE__,__FILE__); } // echo "<p>soinfolog.write this->data= "; _debug_array($this->data); //error_log("### soinfolog::write(".print_r($to_write,true).") where=".print_r($where,true)." returning id=".$this->data['info_id']); // update attendees/delegates if (array_key_exists('info_responsible', $values) || array_key_exists('info_cc', $values)) { $users = empty($values['info_responsible']) ? array() : array_combine($values['info_responsible'], array_fill(0, count($values['info_responsible']), null)); foreach(!empty($values['info_cc']) ? explode(',', $values['info_cc']) : array() as $email) { $email = trim($email); $matches = null; if (preg_match('/<[^>]+@[^>]+>$/', $email, $matches)) { $hash = md5(strtolower($matches[1])); } else { $hash = md5(strtolower($email)); } $users[$hash] = $email; } // mark removed attendees as deleted $this->db->update($this->users_table, array( 'info_res_deleted' => true, 'info_res_modifier' => $this->user, ), array( 'info_id' => $this->data['info_id'], 'info_res_deleted IS NULL', )+(!$values['info_responsible'] ? array() : array(1=>'account_id NOT IN ('.implode(',', array_map(array($this->db, 'quote'), array_keys($users))).')')), __LINE__, __FILE__, 'infolog'); // add newly added attendees if ($users) { $old_users = array(); foreach($this->db->select($this->users_table,'account_id,info_res_attendee',array( 'info_id' => $this->data['info_id'], 'info_res_deleted IS NULL', ), __LINE__, __FILE__, false, '', 'infolog') as $row) { $old_users[] = $row['account_id']; } foreach(array_diff(array_keys($users), $old_users) as $account_id) { $this->db->insert($this->users_table, array( 'info_res_modifier' => $this->user, 'info_res_status' => 'NEEDS-ACTION', 'info_res_attendee' => $users[$account_id], 'info_res_deleted' => null, ), array( 'info_id' => $this->data['info_id'], 'account_id' => $account_id, ), __LINE__, __FILE__, 'infolog'); } } } return $this->data['info_id']; } /** * count the sub-entries of $info_id * * This is done now be search too (in key info_anz_subs), if DB can use sub-queries * * @param int|array $info_id id(s) of log-entry * @return int|array the number of sub-entries or indexed by info_id, if array as param given */ function anzSubs( $info_id ) { if (!is_array($info_id) || !$info_id) { if ((int)$info_id <= 0) return 0; } $counts = array(); foreach($this->db->select($this->info_table,'info_id_parent,COUNT(*) AS info_anz_subs',array( 'info_id_parent' => $info_id, "info_status != 'deleted'", // dont count deleted subs as subs, as they are not shown by default ),__LINE__,__FILE__, false,'GROUP BY info_id_parent','infolog') as $row) { $counts[$row['info_id_parent']] = (int)$row['info_anz_subs']; } //echo '<p>'.__METHOD__."($info_id) = ".array2string($counts)."</p>\n"; return is_array($info_id) ? $counts : (int)array_pop($counts); } /** * searches InfoLog for a certain pattern in $query * * @param string $query[order] column-name to sort after * @param string $query[sort] sort-order DESC or ASC * @param string $query[filter] string with combination of acl-, date- and status-filters, eg. 'own-open-today' or '' * @param int $query[cat_id] category to use or 0 or unset * @param string $query[search] pattern to search, search is done in info_from, info_subject and info_des * @param string $query[action] / $query[action_id] if only entries linked to a specified app/entry show be used * @param int &$query[start], &$query[total] nextmatch-parameters will be used and set if query returns less entries * @param array $query[col_filter] array with column-name - data pairs, data == '' means no filter (!) * @param boolean $query[subs] return subs or not, if unset the user preference is used * @param int $query[num_rows] number of rows to return if $query[start] is set, default is to use the value from the general prefs * @param string|array $query[cols]=null what to query, if set the recordset / iterator get's returned * @param string $query[append]=null get's appended to sql query, eg. for GROUP BY * @param boolean $query['custom_fields']=false query custom-fields too, default not * @param boolean $no_acl =false true: ignore all acl * @return array|iterator with id's as key of the matching log-entries or recordset/iterator if cols is set */ function search(&$query, $no_acl=false) { //error_log(__METHOD__.'('.array2string($query).')'); $action2app = array( 'addr' => 'addressbook', 'proj' => 'projects', 'event' => 'calendar' ); // query children independent of action if ((string)$query['col_filter']['info_id_parent'] === '') { $action = isset($action2app[$query['action']]) ? $action2app[$query['action']] : $query['action']; if ($action) { $links = Link\Storage::get_links($action=='sp'?'infolog':$action, is_array($query['action_id']) ? $query['action_id'] : explode(',',$query['action_id']),'infolog','',$query['col_filter']['info_status'] =='deleted'); if (count($links)) { $links = call_user_func_array('array_merge',$links); // flatten the array $link_extra = ($action == 'sp' ? 'OR' : 'AND')." main.info_id IN (".implode(',',$links).')'; } } } $sortbycf=''; if (!empty($query['order']) && (preg_match('/^[a-z_0-9, ]+$/i',$query['order']) || stripos($query['order'],'#')!==FALSE ) && (empty($query['sort']) || preg_match('/^(DESC|ASC)$/i',$query['sort']))) { $order = array(); foreach(explode(',',$query['order']) as $val) { $val = trim($val); if ($val[0] == '#') { $sortbycf = substr($val,1); $val = "cfsortcrit IS NULL,cfsortcrit"; } else { static $table_def = null; if (is_null($table_def)) $table_def = $this->db->get_table_definitions('infolog',$this->info_table); if (substr($val,0,5) != 'info_' && isset($table_def['fd']['info_'.$val])) $val = 'info_'.$val; if ($val == 'info_des' && $this->db->capabilities['order_on_text'] !== true) { if (!$this->db->capabilities['order_on_text']) continue; $val = sprintf($this->db->capabilities['order_on_text'],$val); } } $order[] = $val; } $ordermethod = 'ORDER BY ' . implode(',',$order) . ' ' . $query['sort']; } else { $ordermethod = 'ORDER BY info_datemodified DESC'; // newest first } $filtermethod = $no_acl ? '1=1' : $this->aclFilter($query['filter']); if (!$query['col_filter']['info_status']) $filtermethod .= $this->statusFilter($query['filter']); $filtermethod .= $this->dateFilter($query['filter']); $cfcolfilter=0; if (is_array($query['col_filter'])) { foreach($query['col_filter'] as $col => $data) { if (is_int($col)) { $filtermethod .= ' AND '.$data; continue; } if ($col[0] != '#' && substr($col,0,5) != 'info_' && isset($table_def['fd']['info_'.$col])) $col = 'info_'.$col; if ((string)$data !== '' && preg_match('/^[a-z_0-9]+$/i',$col)) { switch ($col) { case 'info_responsible': $data = (int) $data; if (!$data) continue 2; // +1 for switch $filtermethod .= ' AND ('.$this->responsible_filter($data)." OR $this->users_table.account_id IS NULL AND ". $this->db->expression($this->info_table,array( 'info_owner' => $data > 0 ? $data : $GLOBALS['egw']->accounts->members($data,true) )).')'; break; case 'info_id': // info_id itself is ambigous $filtermethod .= ' AND '.$this->db->expression($this->info_table,'main.',array('info_id' => $data)); break; default: $filtermethod .= ' AND '.$this->db->expression($this->info_table,array($col => $data)); break; } } if ($col[0] == '#' && $query['custom_fields'] && $data) { $filtermethod .= " AND main.info_id IN (SELECT DISTINCT info_id FROM $this->extra_table WHERE "; $custom_fields = Api\Storage\Customfields::get('infolog'); if($custom_fields[substr($col,1)]['type'] == 'select' && $custom_fields[substr($col,1)]['rows'] > 1) { // Multi-select - any entry with the filter value selected matches $filtermethod .= $this->db->expression($this->extra_table, array( 'info_extra_name' => substr($col,1), $this->db->concat("','",'info_extra_value',"','").' '.$this->db->capabilities[Api\Db::CAPABILITY_CASE_INSENSITIV_LIKE].' '.$this->db->quote('%,'.$data.',%'), )).')'; } else { $filtermethod .= $this->db->expression($this->extra_table,array( 'info_extra_name' => substr($col,1), 'info_extra_value' => $data, )).')'; } $cfcolfilter++; } } } //echo "<p>filtermethod='$filtermethod'</p>"; if ((int)$query['cat_id']) { $categories = new Api\Categories('','infolog'); $cats = $categories->return_all_children((int)$query['cat_id']); $filtermethod .= ' AND info_cat'.(count($cats)>1? ' IN ('.implode(',',$cats).') ' : '='.(int)$query['cat_id']); } $join = $distinct = ''; if ($query['query']) $query['search'] = $query['query']; // allow both names if ($query['search']) // we search in _from, _subject, _des and _extra_value for $query { $columns = array('info_from','info_location','info_subject'); // at the moment MaxDB 7.5 cant cast nor search text columns, it's suppost to change in 7.6 if ($this->db->capabilities['like_on_text']) $columns[] = 'info_des'; $wildcard = '%'; $op = null; $so_sql = new Api\Storage('infolog', $this->info_table, $this->extra_table, '', 'info_extra_name', 'info_extra_value', 'info_id', $this->db); $so_sql->table_name = 'main'; $search = $so_sql->search2criteria($query['search'], $wildcard, $op, null, $columns); $sql_query = 'AND ('.(is_numeric($query['search']) ? 'main.info_id='.(int)$query['search'].' OR ' : ''). implode($op, $search) .')'; } $join .= " LEFT JOIN $this->users_table ON main.info_id=$this->users_table.info_id"; if (strpos($query['filter'], '+deleted') === false) { $join .= " AND $this->users_table.info_res_deleted IS NULL"; } // do not return deleted attendees $join .= " LEFT JOIN $this->users_table attendees ON main.info_id=attendees.info_id AND attendees.info_res_deleted IS NULL"; $group_by = ' GROUP BY main.info_id '; // check if $query['append'] already contains a GROUP BY clause if (stripos($query['append'], 'group by') !== false) { $query['append'] .= ',main.info_id '; } else { $query['append'] = $group_by; } $pid = 'AND ' . $this->db->expression($this->info_table,array('info_id_parent' => ($action == 'sp' ?$query['action_id'] : 0))); if ($GLOBALS['egw_info']['user']['preferences']['infolog']['listNoSubs'] != '1' && $action != 'sp' || (string)$query['col_filter']['info_id_parent'] !== '' || isset($query['subs']) && $query['subs'] || $action != 'sp' && !empty($query['search'])) { $pid = ''; } $ids = array( ); if ($action == '' || $action == 'sp' || count($links)) { $sql_query = "FROM $this->info_table main $join WHERE ($filtermethod $pid $sql_query) $link_extra"; #error_log("infolog.so.search:\n" . print_r($sql_query, true)); if ($this->db->Type == 'mysql' && $this->db->ServerInfo['version'] >= 4.0) { $mysql_calc_rows = 'SQL_CALC_FOUND_ROWS '; unset($query['total']); } else { $query['total'] = $this->db->query($sql="SELECT $distinct main.info_id ".$sql_query.$group_by,__LINE__,__FILE__)->NumRows(); } $info_customfield = ''; if ($sortbycf != '') { $sort_col = "(SELECT DISTINCT info_extra_value FROM $this->extra_table sub2 WHERE sub2.info_id=main.info_id AND info_extra_name=".$this->db->quote($sortbycf).")"; if (!isset($custom_fields)) $custom_fields = Api\Storage\Customfields::get('infolog'); switch($custom_fields[$sortbycf]['type']) { case 'int': $sort_col = $this->db->to_int($sort_col); break; case 'float': $sort_col = $this->db->to_double($sort_col); break; } $info_customfield = ", $sort_col AS cfsortcrit "; } //echo "SELECT $distinct main.* $info_customfield $sql_query $ordermethod"."<br>"; do { if (isset($query['start']) && isset($query['total']) && $query['start'] > $query['total']) { $query['start'] = 0; } $cols = isset($query['cols']) ? $query['cols'] : 'main.*'; if (is_array($cols)) $cols = implode(',',$cols); $cols .= ','.$this->db->group_concat('attendees.account_id').' AS info_responsible'; $cols .= ','.$this->db->group_concat('attendees.info_res_attendee').' AS info_cc'; $rs = $this->db->query($sql='SELECT '.$mysql_calc_rows.' '.$distinct.' '.$cols.' '.$info_customfield.' '.$sql_query. $query['append'].$ordermethod,__LINE__,__FILE__, (int) $query['start'],isset($query['start']) ? (int) $query['num_rows'] : -1,false,Api\Db::FETCH_ASSOC); //echo "<p>db::query('$sql',,,".(int)$query['start'].','.(isset($query['start']) ? (int) $query['num_rows'] : -1).")</p>\n"; if ($mysql_calc_rows) { $query['total'] = $this->db->Link_ID->GetOne('SELECT FOUND_ROWS()'); } } // check if start is behind total --> loop to set start=0 while (isset($query['start']) && $query['start'] > $query['total']); if (isset($query['cols'])) { return $rs; } foreach($rs as $info) { $info['info_responsible'] = $info['info_responsible'] ? array_unique(explode(',',$info['info_responsible'])) : array(); foreach($info['info_responsible'] as $k => $v) { if (!is_numeric($v)) unset($info['info_responsible'][$k]); } $info['info_responsible'] = array_values($info['info_responsible']); $ids[$info['info_id']] = $info; } static $index_load_cfs = null; if (is_null($index_load_cfs) && $query['col_filter']['info_type']) { $config_data = Api\Config::read('infolog'); $index_load_cfs = $config_data['index_load_cfs']; if (!is_array($index_load_cfs)) $index_load_cfs = explode(',', $index_load_cfs); } // if no specific custom field is selected, show/query all custom fields if ($ids && ($query['custom_fields'] || $query['csv_export'] || $index_load_cfs && $query['col_filter']['info_type'] && in_array($query['col_filter']['info_type'],$index_load_cfs))) { $where = array('info_id' => array_keys($ids)); if (!($query['csv_export'] || strchr(is_array($query['selectcols']) ? implode(',',$query['selectcols']):$query['selectcols'],'#') === false || $index_load_cfs && $query['col_filter']['info_type'] && in_array($query['col_filter']['info_type'],$index_load_cfs))) { $where['info_extra_name'] = array(); foreach(is_array($query['selectcols']) ? $query['selectcols'] : explode(',',$query['selectcols']) as $col) { if ($col[0] == '#') $where['info_extra_name'][] = substr($col,1); } } foreach($this->db->select($this->extra_table,'*',$where,__LINE__,__FILE__) as $row) { $ids[$row['info_id']]['#'.$row['info_extra_name']] = $row['info_extra_value']; } } } else { $query['start'] = $query['total'] = 0; } return $ids; } /** * Query infolog for users with open entries, either own or responsible, with start or end within 4 days * * This functions tries to minimize the users really checked with the complete filters, as creating a * user enviroment and running the specific check costs ... * * @return array with acount_id's groups get resolved to there memebers */ function users_with_open_entries() { $users = array(); foreach($this->db->select($this->info_table,'DISTINCT info_owner',array( str_replace(' AND ','',$this->statusFilter('open')), '(ABS(info_startdate-'.time().')<'.(4*24*60*60).' OR '. // start_day within 4 days 'ABS(info_enddate-'.time().')<'.(4*24*60*60).')', // end_day within 4 days ),__LINE__,__FILE__) as $row) { $users[] = $row['info_owner']; } foreach($this->db->select($this->info_table, "DISTINCT $this->users_table.account_id AS account_id", $this->statusFilter('open',false), __LINE__, __FILE__, false, '', 'infolog', 0, "JOIN $this->users_table ON $this->info_table.info_id=$this->users_table.info_id AND info_res_deleted IS NULL") as $row) { $responsible = $row['account_id']; if ($GLOBALS['egw']->accounts->get_type($responsible) == 'g') { $responsible = $GLOBALS['egw']->accounts->members($responsible,true); } if ($responsible) { foreach((array)$responsible as $user) { if ($user && !in_array($user,$users)) $users[] = $user; } } } return $users; } }