<?php

/******************************************************************************

*

* Subrion - open source content management system

* Copyright (C) 2018 Intelliants, LLC <https://intelliants.com>

*

* This file is part of Subrion.

*

* Subrion is free software: you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation, either version 3 of the License, or

* (at your option) any later version.

*

* Subrion is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* You should have received a copy of the GNU General Public License

* along with Subrion. If not, see <http://www.gnu.org/licenses/>.

*

*

* @link https://subrion.org/

*

******************************************************************************/

if (iaView::REQUEST_JSON == $iaView->getRequestType()) {

if (empty($_POST) && 2 == count($iaCore->requestPath)) {

$iaItem = $iaCore->factory('item');

$iaPage = $iaCore->factory('page', iaCore::FRONT);

$iaUtil = $iaCore->factory('util');

$item = iaSanitize::paranoid($iaCore->requestPath[0]);

$itemId = iaSanitize::paranoid($iaCore->requestPath[1]);

$itemTable = $iaItem->getItemTable($item);

$itemData = $iaDb->row(iaDb::ALL_COLUMNS_SELECTION, iaDb::convertIds($itemId), $itemTable);

$blockData = [

'formUrl' => $iaPage->getUrlByName('claim_listing') . 'process.json',

'options' => [

'email' => $iaCore->get('cl_enable_email_approval') && isset($itemData['email']),

'ftp' => $iaCore->get('cl_enable_ftp_approval') && !empty($itemData['url'])

],

'id' => $itemId,

'item' => $item

];

if ($blockData['options']['email']) {

$blockData['email'] = $itemData['email'];

}

if ($blockData['options']['ftp']) {

// extra processing because of Subrion CMS URL fields saving specific

$url = explode('|', $itemData['url']);

$url = array_shift($url);

$url = rtrim($url, IA_URL_DELIMITER) . IA_URL_DELIMITER;

$blockData['url'] = $url;

$blockData['filename'] = iaUtil::generateToken(30) . '.html';

}

$iaView->loadSmarty(true);

$iaSmarty = &$iaView->iaSmarty;

$iaSmarty->assign('claimListing', $blockData);

echo $iaSmarty->fetch('module:claim_listing/form.tpl');

exit();

}

function httpCheckFile($url)

}

if (isset($_POST['action'])) {

$output = [];

switch ($_POST['action']) {

case 'url':

list($output['result'], $output['message']) = httpCheckFile($_POST['url'] . $_POST['filename']);

if ($output['result']) {

$iaDb->setTable('claim_pending_ftp_filenames');

$stmt = iaDb::convertIds($_POST['url'], 'url');

$iaDb->exists($stmt)

? $iaDb->update(['filename' => $_POST['filename']], $stmt)

: $iaDb->insert(['filename' => $_POST['filename'], 'url' => $_POST['url'], 'date' => date(iaDb::DATETIME_FORMAT)]);

$iaDb->resetTable();

}

}

$iaView->assign($output);

return;

}

$output = ['result' => false, 'message' => iaLanguage::get('unable_to_approve_listing')];

if (!iaUsers::hasIdentity()) {

$iaView->assign($output);

return;

}

$iaItem = $iaCore->factory('item');

$iaCore->factory('util');

$itemName = $_POST['item'];

$itemId = $_POST['id'];

if ($itemInstance = $iaCore->factoryItem($itemName)) {

$itemData = $itemInstance->getById($itemId);

$itemUrl = empty($itemData['link'])

? $itemInstance->url('view', $itemData)

: $itemData['link'];

$entry = [

'date' => date(iaDb::DATETIME_FORMAT),

'ip' => iaUtil::getIp(),

'member_id' => iaUsers::getIdentity()->id,

'item' => $itemName,

'item_id' => $itemId,

'item_title' => $itemData['title'] ? $itemData['title'] : $itemData['venue_title'],

'item_url' => $itemUrl,

'type' => $_POST['type'],

'status' => 'pending',

'notes' => null

];

$message = null;

switch ($_POST['type']) {

case 'manual':

$entry['name'] = empty($_POST['name']) ? null : $_POST['name'];

$entry['email'] = empty($_POST['email']) ? null : $_POST['email'];

$entry['phone'] = empty($_POST['phone']) ? null : $_POST['phone'];

$entry['job_title'] = empty($_POST['job_title']) ? null : $_POST['job_title'];

$message = iaLanguage::get('your_request_saved');

break;

case 'email':

if (!$iaCore->get('cl_enable_email_approval')) {

return;

}

if (!empty($itemData['email'])) {

$key = iaUtil::generateToken();

$iaDb->setTable('claim_pending_email_keys');

if ($rowId = $iaDb->one_bind(iaDb::ID_COLUMN_SELECTION, '`item` = :item AND `item_id` = :id',

['item' => $itemName, 'id' => $itemId])){

$iaDb->update(['date' => date(iaDb::DATETIME_FORMAT), 'key' => $key, 'member_id' => iaUsers::getIdentity()->id],

iaDb::convertIds($rowId));

} else {

$keyEntry = [

'date' => date(iaDb::DATETIME_FORMAT),

'item' => $itemName,

'item_id' => $itemId,

'key' => $key,

'member_id' => iaUsers::getIdentity()->id

];

$iaDb->insert($keyEntry);

}

$iaDb->resetTable();

$link = $itemUrl . '?ownership-key=' . $key;

$iaMailer = $iaCore->factory('mailer');

$iaMailer->loadTemplate('ownership_email_approval');

$iaMailer->addAddress($itemData['email']);

$iaMailer->setReplacements(['email' => $itemData['email'], 'url' => $link]);

$result = $iaMailer->send();

$message = $result

? iaLanguage::getf('confirmation_link_sent_with_email', ['email' => $itemData['email']])

: iaLanguage::get('unable_to_send_confirmation_link');

$entry['notes'] = $result

? 'Approval link (' . $link . ') has been sent to ' . $itemData['email']

: 'Email has not been sent to ' . $itemData['email'];

} else {

$entry['notes'] = 'Listing email was empty. No email sent.';

}

break;

case 'ftp':

if (!$iaCore->get('cl_enable_ftp_approval')) {

return;

}

if (!empty($itemData['url'])) {

$url = explode('|', $itemData['url']);

$url = array_shift($url);

$url = rtrim($url, IA_URL_DELIMITER) . IA_URL_DELIMITER;

$filenameRow = $iaDb->row(['id', 'filename'], iaDb::convertIds($url, 'url'), 'claim_pending_ftp_filenames');

if (empty($filenameRow)) {

return; // it seems someone is trying to hack us

}

$url = $url . $filenameRow['filename'];

list($result, $error) = httpCheckFile($url);

if ($result) {

$tableName = $iaItem->getItemTable($itemName);

$iaDb->update(['member_id' => iaUsers::getIdentity()->id], iaDb::convertIds($itemId), null, $tableName);

$iaDb->delete(iaDb::convertIds($filenameRow['id'], 'claim_pending_ftp_filenames'));

$message = iaLanguage::get('ownership_changed');

$entry['notes'] = 'Listing has been automatically assigned to the user ' . iaUsers::getIdentity()->fullname

. '. Successfully validated the URL ' . $url;

} else {

$entry['notes'] = 'URL ' . $url . ' has not been validated: ' . $error;

}

}

}

$output['result'] = (bool)$iaDb->insert($entry, null, 'claims');

$output['message'] = $output['result'] ? $message : iaLanguage::get('db_error');

}

$iaView->assign($output);

}

if (iaView::REQUEST_HTML == $iaView->getRequestType()) {

return iaView::errorPage(iaView::ERROR_NOT_FOUND);

}