initial commit
This commit is contained in:
affan98
commit
d2c38a1950
215 changed files with 15763 additions and 0 deletions
603
lib/Controller/PageController.php
Normal file
603
lib/Controller/PageController.php
Normal file
|
|
@ -0,0 +1,603 @@
|
|||
<?php
|
||||
/**
|
||||
* @copyright Copyright (c) 2017 Vinzenz Rosenkranz <vinzenz.rosenkranz@gmail.com>
|
||||
*
|
||||
* @author Vinzenz Rosenkranz <vinzenz.rosenkranz@gmail.com>
|
||||
* @author René Gieling <github@dartcafe.de>
|
||||
* @author Inigo Jiron <ijiron@terpmail.umd.edu>
|
||||
* @author Natalie Gilbert
|
||||
* @author Affan Hussain
|
||||
*
|
||||
* @license GNU AGPL version 3 or any later version
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as
|
||||
* published by the Free Software Foundation, either version 3 of the
|
||||
* License, or (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
*/
|
||||
|
||||
namespace OCA\Forms\Controller;
|
||||
|
||||
use OCA\Forms\Db\Comment;
|
||||
use OCA\Forms\Db\CommentMapper;
|
||||
use OCA\Forms\Db\Event;
|
||||
use OCA\Forms\Db\EventMapper;
|
||||
use OCA\Forms\Db\Notification;
|
||||
use OCA\Forms\Db\NotificationMapper;
|
||||
// use OCA\Forms\Db\Option;
|
||||
// use OCA\Forms\Db\OptionMapper;
|
||||
use OCA\Forms\Db\Vote;
|
||||
use OCA\Forms\Db\VoteMapper;
|
||||
|
||||
use OCA\Forms\Db\Answer;
|
||||
use OCA\Forms\Db\AnswerMapper;
|
||||
use OCA\Forms\Db\Question;
|
||||
use OCA\Forms\Db\QuestionMapper;
|
||||
|
||||
use OCP\AppFramework\Controller;
|
||||
use OCP\AppFramework\Db\DoesNotExistException;
|
||||
use OCP\AppFramework\Http\ContentSecurityPolicy;
|
||||
use OCP\AppFramework\Http\JSONResponse;
|
||||
use OCP\AppFramework\Http\RedirectResponse;
|
||||
use OCP\AppFramework\Http\TemplateResponse;
|
||||
use OCP\IAvatarManager;
|
||||
use OCP\IConfig;
|
||||
use OCP\IGroupManager;
|
||||
use OCP\IL10N;
|
||||
use OCP\ILogger;
|
||||
use OCP\IRequest;
|
||||
use OCP\IURLGenerator;
|
||||
use OCP\IUser;
|
||||
use OCP\IUserManager;
|
||||
use OCP\L10N\IFactory;
|
||||
use OCP\Mail\IMailer;
|
||||
use OCP\Security\ISecureRandom;
|
||||
use OCP\User; //To do: replace according to API
|
||||
use OCP\Util;
|
||||
|
||||
class PageController extends Controller {
|
||||
|
||||
private $userId;
|
||||
private $config;
|
||||
private $commentMapper;
|
||||
private $eventMapper;
|
||||
private $notificationMapper;
|
||||
// private $optionMapper;
|
||||
private $voteMapper;
|
||||
|
||||
private $questionMapper;
|
||||
private $answerMapper;
|
||||
|
||||
private $urlGenerator;
|
||||
private $userMgr;
|
||||
private $avatarManager;
|
||||
private $logger;
|
||||
private $trans;
|
||||
private $transFactory;
|
||||
private $groupManager;
|
||||
private $mailer;
|
||||
|
||||
/**
|
||||
* PageController constructor.
|
||||
* @param string $appName
|
||||
* @param IRequest $request
|
||||
* @param IConfig $config
|
||||
* @param IUserManager $userMgr
|
||||
* @param IGroupManager $groupManager
|
||||
* @param IAvatarManager $avatarManager
|
||||
* @param ILogger $logger
|
||||
* @param IL10N $trans
|
||||
* @param IFactory $transFactory
|
||||
* @param IURLGenerator $urlGenerator
|
||||
* @param string $userId
|
||||
* @param CommentMapper $commentMapper
|
||||
* @param OptionMapper $optionMapper
|
||||
* @param EventMapper $eventMapper
|
||||
*
|
||||
* @param QuestionMapper $questionMapper
|
||||
* @param AnswerMapper $answerMapper
|
||||
*
|
||||
* @param NotificationMapper $notificationMapper
|
||||
* @param VoteMapper $VoteMapper
|
||||
* @param IMailer $mailer
|
||||
*/
|
||||
public function __construct(
|
||||
$appName,
|
||||
IRequest $request,
|
||||
IConfig $config,
|
||||
IUserManager $userMgr,
|
||||
IGroupManager $groupManager,
|
||||
IAvatarManager $avatarManager,
|
||||
ILogger $logger,
|
||||
IL10N $trans,
|
||||
IFactory $transFactory,
|
||||
IURLGenerator $urlGenerator,
|
||||
$userId,
|
||||
CommentMapper $commentMapper,
|
||||
// OptionMapper $optionMapper,
|
||||
EventMapper $eventMapper,
|
||||
|
||||
QuestionMapper $questionMapper,
|
||||
AnswerMapper $answerMapper,
|
||||
|
||||
NotificationMapper $notificationMapper,
|
||||
VoteMapper $VoteMapper,
|
||||
IMailer $mailer
|
||||
) {
|
||||
parent::__construct($appName, $request);
|
||||
$this->request = $request;
|
||||
$this->config = $config;
|
||||
$this->userMgr = $userMgr;
|
||||
$this->groupManager = $groupManager;
|
||||
$this->avatarManager = $avatarManager;
|
||||
$this->logger = $logger;
|
||||
$this->trans = $trans;
|
||||
$this->transFactory = $transFactory;
|
||||
$this->urlGenerator = $urlGenerator;
|
||||
$this->userId = $userId;
|
||||
$this->commentMapper = $commentMapper;
|
||||
// $this->optionMapper = $optionMapper;
|
||||
$this->eventMapper = $eventMapper;
|
||||
|
||||
$this->questionMapper = $questionMapper;
|
||||
$this->answerMapper = $answerMapper;
|
||||
|
||||
$this->notificationMapper = $notificationMapper;
|
||||
$this->voteMapper = $VoteMapper;
|
||||
$this->mailer = $mailer;
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
*/
|
||||
public function index() {
|
||||
return new TemplateResponse('forms', 'forms.tmpl',
|
||||
['urlGenerator' => $this->urlGenerator]);
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
*/
|
||||
public function createForm() {
|
||||
return new TemplateResponse('forms', 'forms.tmpl',
|
||||
['urlGenerator' => $this->urlGenerator]);
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
*/
|
||||
public function cloneForm() {
|
||||
return new TemplateResponse('forms', 'forms.tmpl',
|
||||
['urlGenerator' => $this->urlGenerator]);
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param string $hash
|
||||
* @return TemplateResponse
|
||||
*/
|
||||
public function editForm($hash) {
|
||||
return new TemplateResponse('forms', 'forms.tmpl', [
|
||||
'urlGenerator' => $this->urlGenerator,
|
||||
'hash' => $hash
|
||||
]);
|
||||
}
|
||||
|
||||
/**
|
||||
* @param int $formId
|
||||
* @param string $from
|
||||
*/
|
||||
private function sendNotifications($formId, $from) {
|
||||
$form = $this->eventMapper->find($formId);
|
||||
$notifications = $this->notificationMapper->findAllByForm($formId);
|
||||
foreach ($notifications as $notification) {
|
||||
if ($from === $notification->getUserId()) {
|
||||
continue;
|
||||
}
|
||||
$recUser = $this->userMgr->get($notification->getUserId());
|
||||
if (!$recUser instanceof IUser) {
|
||||
continue;
|
||||
}
|
||||
$email = \OC::$server->getConfig()->getUserValue($notification->getUserId(), 'settings', 'email');
|
||||
if ($email === null || !filter_var($email, FILTER_VALIDATE_EMAIL)) {
|
||||
continue;
|
||||
}
|
||||
$url = $this->urlGenerator->getAbsoluteURL(
|
||||
$this->urlGenerator->linkToRoute('forms.page.goto_form',
|
||||
array('hash' => $form->getHash()))
|
||||
);
|
||||
|
||||
$sendUser = $this->userMgr->get($from);
|
||||
$sender = $from;
|
||||
if ($sendUser instanceof IUser) {
|
||||
$sender = $sendUser->getDisplayName();
|
||||
}
|
||||
|
||||
$lang = $this->config->getUserValue($notification->getUserId(), 'core', 'lang');
|
||||
$trans = $this->transFactory->get('forms', $lang);
|
||||
$emailTemplate = $this->mailer->createEMailTemplate('forms.Notification', [
|
||||
'user' => $sender,
|
||||
'title' => $form->getTitle(),
|
||||
'link' => $url,
|
||||
]);
|
||||
$emailTemplate->setSubject($trans->t('Forms App - New Activity'));
|
||||
$emailTemplate->addHeader();
|
||||
$emailTemplate->addHeading($trans->t('Forms App - New Activity'), false);
|
||||
|
||||
$emailTemplate->addBodyText(str_replace(
|
||||
['{user}', '{title}'],
|
||||
[$sender, $form->getTitle()],
|
||||
$trans->t('{user} participated in the form "{title}"')
|
||||
));
|
||||
|
||||
$emailTemplate->addBodyButton(
|
||||
htmlspecialchars($trans->t('Go to form')),
|
||||
$url,
|
||||
false
|
||||
);
|
||||
|
||||
$emailTemplate->addFooter();
|
||||
try {
|
||||
$message = $this->mailer->createMessage();
|
||||
$message->setTo([$email => $recUser->getDisplayName()]);
|
||||
$message->useTemplate($emailTemplate);
|
||||
$this->mailer->send($message);
|
||||
} catch (\Exception $e) {
|
||||
$this->logger->logException($e, ['app' => 'forms']);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @PublicPage
|
||||
* @param string $hash
|
||||
* @return TemplateResponse
|
||||
*/
|
||||
public function gotoForm($hash) {
|
||||
try {
|
||||
$form = $this->eventMapper->findByHash($hash);
|
||||
} catch (DoesNotExistException $e) {
|
||||
return new TemplateResponse('forms', 'no.acc.tmpl', []);
|
||||
}
|
||||
|
||||
if ($form->getExpire() === null) {
|
||||
$expired = false;
|
||||
} else {
|
||||
$expired = time() > strtotime($form->getExpire());
|
||||
}
|
||||
|
||||
if ($expired) {
|
||||
return new TemplateResponse('forms', 'expired.tmpl');
|
||||
}
|
||||
|
||||
$votes = $this->voteMapper->findByForm($form->getId());
|
||||
$participants = $this->voteMapper->findParticipantsByForm($form->getId());
|
||||
$questions = $this->questionMapper->findByForm($form->getId());
|
||||
|
||||
try {
|
||||
$notification = $this->notificationMapper->findByUserAndForm($form->getId(), $this->userId);
|
||||
} catch (DoesNotExistException $e) {
|
||||
$notification = null;
|
||||
}
|
||||
|
||||
if ($this->hasUserAccess($form)) {
|
||||
return new TemplateResponse('forms', 'vote.tmpl', [
|
||||
'form' => $form,
|
||||
'questions' => $this->getQuestions($form->getId()),
|
||||
'votes' => $votes,
|
||||
'participant' => $participants,
|
||||
'notification' => $notification,
|
||||
'userId' => $this->userId,
|
||||
'userMgr' => $this->userMgr,
|
||||
'urlGenerator' => $this->urlGenerator,
|
||||
'avatarManager' => $this->avatarManager
|
||||
]);
|
||||
} else {
|
||||
User::checkLoggedIn();
|
||||
return new TemplateResponse('forms', 'no.acc.tmpl', []);
|
||||
}
|
||||
}
|
||||
|
||||
public function getQuestions($formId) {
|
||||
$questionList = array();
|
||||
try{
|
||||
$questions = $this->questionMapper->findByForm($formId);
|
||||
foreach ($questions as $questionElement) {
|
||||
$temp = $questionElement->read();
|
||||
$temp['answers'] = $this->getAnswers($formId, $temp['id']);
|
||||
$questionList[] = $temp;
|
||||
}
|
||||
|
||||
} catch (DoesNotExistException $e) {
|
||||
//handle silently
|
||||
}finally{
|
||||
return $questionList;
|
||||
}
|
||||
}
|
||||
|
||||
public function getAnswers($formId, $questionId) {
|
||||
$answerList = array();
|
||||
try{
|
||||
$answers = $this->answerMapper->findByForm($formId, $questionId);
|
||||
foreach ($answers as $answerElement) {
|
||||
$answerList[] = $answerElement->read();
|
||||
}
|
||||
|
||||
} catch (DoesNotExistException $e) {
|
||||
//handle silently
|
||||
}finally{
|
||||
return $answerList;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param int $formId
|
||||
* @return TemplateResponse|RedirectResponse
|
||||
*/
|
||||
public function deleteForm($formId) {
|
||||
$formToDelete = $this->eventMapper->find($formId);
|
||||
if ($this->userId !== $formToDelete->getOwner() && !$this->groupManager->isAdmin($this->userId)) {
|
||||
return new TemplateResponse('forms', 'no.delete.tmpl');
|
||||
}
|
||||
$form = new Event();
|
||||
$form->setId($formId);
|
||||
$this->commentMapper->deleteByForm($formId);
|
||||
$this->voteMapper->deleteByForm($formId);
|
||||
// $this->optionMapper->deleteByForm($formId);
|
||||
$this->eventMapper->delete($form);
|
||||
$url = $this->urlGenerator->linkToRoute('forms.page.index');
|
||||
return new RedirectResponse($url);
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @PublicPage
|
||||
* @param int $formId
|
||||
* @param string $userId
|
||||
* @param string $answers
|
||||
* @param string $options question id
|
||||
* @param bool $receiveNotifications
|
||||
* @param bool $changed
|
||||
* @return RedirectResponse
|
||||
*/
|
||||
public function insertVote($id, $userId, $answers, $questions) {
|
||||
$form = $this->eventMapper->find($id);
|
||||
$count_answers = count($answers);
|
||||
$count = 1;
|
||||
for ($i = 0; $i < $count_answers; $i++) {
|
||||
if($questions[$i]['type'] == "checkbox"){
|
||||
foreach (($answers[$questions[$i]['text']]) as $value) {
|
||||
$vote = new Vote();
|
||||
$vote->setFormId($id);
|
||||
$vote->setUserId($userId);
|
||||
$vote->setVoteOptionText(htmlspecialchars($questions[$i]['text']));
|
||||
$vote->setVoteAnswer($value);
|
||||
$vote->setVoteOptionId($count);
|
||||
$this->voteMapper->insert($vote);
|
||||
}
|
||||
$count++;
|
||||
} else {
|
||||
$vote = new Vote();
|
||||
$vote->setFormId($id);
|
||||
$vote->setUserId($userId);
|
||||
$vote->setVoteOptionText(htmlspecialchars($questions[$i]['text']));
|
||||
$vote->setVoteAnswer($answers[$questions[$i]['text']]);
|
||||
$vote->setVoteOptionId($count++);
|
||||
$this->voteMapper->insert($vote);
|
||||
}
|
||||
}
|
||||
|
||||
$hash = $form->getHash();
|
||||
$url = $this->urlGenerator->linkToRoute('forms.page.goto_form', ['hash' => $hash]);
|
||||
return new RedirectResponse($url);
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @PublicPage
|
||||
* @param int $formId
|
||||
* @param string $userId
|
||||
* @param string $commentBox
|
||||
* @return JSONResponse
|
||||
*/
|
||||
public function insertComment($formId, $userId, $commentBox) {
|
||||
$comment = new Comment();
|
||||
$comment->setFormId($formId);
|
||||
$comment->setUserId($userId);
|
||||
$comment->setComment($commentBox);
|
||||
$comment->setDt(date('Y-m-d H:i:s'));
|
||||
$this->commentMapper->insert($comment);
|
||||
$this->sendNotifications($formId, $userId);
|
||||
$timeStamp = time();
|
||||
$displayName = $userId;
|
||||
$user = $this->userMgr->get($userId);
|
||||
if ($user !== null) {
|
||||
$displayName = $user->getDisplayName();
|
||||
}
|
||||
return new JSONResponse(array(
|
||||
'userId' => $userId,
|
||||
'displayName' => $displayName,
|
||||
'timeStamp' => $timeStamp * 100,
|
||||
'date' => date('Y-m-d H:i:s', $timeStamp),
|
||||
'relativeNow' => $this->trans->t('just now'),
|
||||
'comment' => $commentBox
|
||||
));
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param string $searchTerm
|
||||
* @param string $groups
|
||||
* @param string $users
|
||||
* @return array
|
||||
*/
|
||||
public function search($searchTerm, $groups, $users) {
|
||||
return array_merge($this->searchForGroups($searchTerm, $groups), $this->searchForUsers($searchTerm, $users));
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param string $searchTerm
|
||||
* @param string $groups
|
||||
* @return array
|
||||
*/
|
||||
public function searchForGroups($searchTerm, $groups) {
|
||||
$selectedGroups = json_decode($groups);
|
||||
$groups = $this->groupManager->search($searchTerm);
|
||||
$gids = array();
|
||||
$sgids = array();
|
||||
foreach ($selectedGroups as $sg) {
|
||||
$sgids[] = str_replace('group_', '', $sg);
|
||||
}
|
||||
foreach ($groups as $g) {
|
||||
$gids[] = $g->getGID();
|
||||
}
|
||||
$diffGids = array_diff($gids, $sgids);
|
||||
$gids = array();
|
||||
foreach ($diffGids as $g) {
|
||||
$gids[] = ['gid' => $g, 'isGroup' => true];
|
||||
}
|
||||
return $gids;
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param string $searchTerm
|
||||
* @param string $users
|
||||
* @return array
|
||||
*/
|
||||
public function searchForUsers($searchTerm, $users) {
|
||||
$selectedUsers = json_decode($users);
|
||||
Util::writeLog('forms', print_r($selectedUsers, true), Util::ERROR);
|
||||
$userNames = $this->userMgr->searchDisplayName($searchTerm);
|
||||
$users = array();
|
||||
$sUsers = array();
|
||||
foreach ($selectedUsers as $su) {
|
||||
$sUsers[] = str_replace('user_', '', $su);
|
||||
}
|
||||
foreach ($userNames as $u) {
|
||||
$allreadyAdded = false;
|
||||
foreach ($sUsers as &$su) {
|
||||
if ($su === $u->getUID()) {
|
||||
unset($su);
|
||||
$allreadyAdded = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if (!$allreadyAdded) {
|
||||
$users[] = array('uid' => $u->getUID(), 'displayName' => $u->getDisplayName(), 'isGroup' => false);
|
||||
} else {
|
||||
continue;
|
||||
}
|
||||
}
|
||||
return $users;
|
||||
}
|
||||
|
||||
/**
|
||||
* @NoAdminRequired
|
||||
* @NoCSRFRequired
|
||||
* @param string $username
|
||||
* @return string
|
||||
*/
|
||||
public function getDisplayName($username) {
|
||||
return $this->userMgr->get($username)->getDisplayName();
|
||||
}
|
||||
|
||||
/**
|
||||
* @return \OCP\IGroup[]
|
||||
*/
|
||||
private function getGroups() {
|
||||
if (class_exists('\OC_Group')) {
|
||||
// Nextcloud <= 11, ownCloud
|
||||
return \OC_Group::getUserGroups($this->userId);
|
||||
}
|
||||
// Nextcloud >= 12
|
||||
$groups = $this->groupManager->getUserGroups(\OC::$server->getUserSession()->getUser());
|
||||
return array_map(function($group) {
|
||||
return $group->getGID();
|
||||
}, $groups);
|
||||
}
|
||||
|
||||
/**
|
||||
* Check if user has access to this form
|
||||
*
|
||||
* @param Event $form
|
||||
* @return bool
|
||||
*/
|
||||
private function hasUserAccess($form) {
|
||||
$access = $form->getAccess();
|
||||
$owner = $form->getOwner();
|
||||
if ($access === 'public' || $access === 'hidden') {
|
||||
return true;
|
||||
}
|
||||
if ($this->userId === null) {
|
||||
return false;
|
||||
}
|
||||
if ($access === 'registered') {
|
||||
return true;
|
||||
}
|
||||
if ($owner === $this->userId) {
|
||||
return true;
|
||||
}
|
||||
Util::writeLog('forms', $this->userId, Util::ERROR);
|
||||
$userGroups = $this->getGroups();
|
||||
$arr = explode(';', $access);
|
||||
foreach ($arr as $item) {
|
||||
if (strpos($item, 'group_') === 0) {
|
||||
$grp = substr($item, 6);
|
||||
foreach ($userGroups as $userGroup) {
|
||||
if ($userGroup === $grp) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
} else {
|
||||
if (strpos($item, 'user_') === 0) {
|
||||
$usr = substr($item, 5);
|
||||
if ($usr === $this->userId) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
/**
|
||||
* Check if user is owner of this form
|
||||
*
|
||||
* @param Event $form
|
||||
* @return bool
|
||||
*/
|
||||
|
||||
private function userIsOwner($form) {
|
||||
$owner = $form->getOwner();
|
||||
|
||||
if ($owner === $this->userId) {
|
||||
return true;
|
||||
}
|
||||
Util::writeLog('forms', $this->userId, Util::ERROR);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue