_res/_libs/tdoposts.class.php

   1 <?php
   2 /**
   3  * class representing the posts table
   4  */
   5 class tdoPosts extends tdoAbstract{
   6         protected       $fields = array (
   7                                 'post_id',
   8                                 'post_time',
   9                                 'post_title',
  10                                 'post_author',
  11                                 'post_body',
  12                                 'post_active',
  13                                 'post_private'
  14                 );
  15
  16         public function __construct(&$db) {
  17                 $this->name     = 'posts';
  18
  19                 parent::__construct ($db);
  20 //              $this->setIndex($this->fields['post_id']);
  21 //              $this->buildTable($tableDefinition);
  22         }
  23
  24 //      public function __set ($key, $value) {
  25 //              if (stristr($key, 'body'))
  26 //                      $this->clean($value);
  27 //
  28 //              return parent::__set($key, $value);
  29 //      }
  30
  31         public function getBody (){
  32                 $this->set_post_body(stripslashes($this->post_body->getValue()));
  33                 return $this->post_body;
  34         }
  35
  36         public function clean (&$var) {
  37                 // here we might need to strip certain tags to avoid javascript injection
  38                 // then again... since we strip with smarty the posts the <script> something </script> will become
  39                 // <script type="text/javascript"> //<![CDATA[ something; //]]> </script> ... so it's commented out :D = Brilliant!! <- sarcasm
  40                 $var = stripslashes ($var);
  41                 if (extension_loaded('tidy')){
  42                         $config = array (
  43                                 'output-xhtml'  => true,
  44                                 'enclose-text'  => false,
  45                                 'show-body-only'=> true,
  46                                 'fix-uri'               => false,
  47                                 'fix-backslash' => false,
  48                                 'merge-divs'    => true,
  49                                 'merge-spans'   => true,
  50                                 'break-before-br'=> true,
  51                                 'wrap'                  => false,
  52                         );
  53
  54                         $var    = tidy_repair_string ($var, $config, "utf8");
  55                 }
  56         }
  57
  58         function isPrivate () {
  59                 if ($this->post_flags & P_PRIVATE == P_PRIVATE)
  60                         return true;
  61                 else
  62                         return false;
  63         }
  64
  65         public function getPostsCategories (){
  66                 $this->buildInherentWheres();
  67                 $cat = new tdoCategories($this->db);
  68                 $cp = new tdoCategoriesPosts($this->db);
  69
  70                 $cat->set_FieldModifier('GROUP_CONCAT(DISTINCT(%s))', $cat->category_name); // mySql
  71
  72                 $cp->joinWith('INNER', $cp->category_id, $cat, $cat->category_id);
  73
  74                 $this->joinWith ('INNER', $this->post_id, $cp, $cp->post_id);
  75
  76                 $this->addGroup($this->post_id);
  77
  78                 return $this->getArray();
  79         }
  80
  81         /**
  82          * cleaning the fields' contents before updating
  83          * TODO: this can be equaly achieved, with less hassle, by modifying the $this->escape() method :D
  84          *
  85          * @param int $id
  86          */
  87         public function update ($id = null) {
  88                 $this->clean ($this->post_title,false);
  89                 $this->clean ($this->post_body);
  90
  91                 return parent::update ($id);
  92         }
  93
  94         /**
  95          * cleaning the fields' contents before inserting into the db
  96          */
  97         public function insert () {
  98                 $this->clean ($this->post_title,false);
  99                 $this->clean ($this->post_body);
 100
 101                 return parent::insert ();
 102         }
 103
 104         private function buildPosts ($userId = null) {
 105                 $this->post_active = 'Y';
 106
 107                 $this->addGroup ($this->post_id);
 108                 $this->addOrder ($this->post_time,false);
 109
 110                 $cat    = new tdoCategories ($this->db);
 111                 $cp             = new tdoCategoriesPosts ($this->db);
 112
 113                 $user   = new tdoUsers ($this->db);
 114                 // I don't know if group concat is ANSI SQL compliant
 115                 $cat->set_FieldModifier('GROUP_CONCAT(DISTINCT(%s) SEPARATOR \', \')', $cat->category_name);
 116
 117                 $w1 = new tdoAbstractClause ($this->post_private, '=', 'N');
 118                 $w2 = new tdoAbstractClause ($cat->category_private, '=', 'N');
 119
 120                 $w3 = new tdoAbstractClause ($w1, 'AND', $w2);
 121
 122                 if (!empty ($userId)) {
 123                         $w4 = new tdoAbstractClause ($this->post_author, '=', $userId);
 124                         $this->addWhere ($w3, 'OR', $w4);
 125                 } else {
 126                         $this->addWhere ($w2,'AND',$w1);
 127                 }
 128
 129                 $cp->joinWith ('INNER', $cp->category_id, $cat, $cat->category_id);
 130
 131                 $this->joinWith ('INNER', $this->post_id, $cp, $cp->post_id);
 132                 $this->joinWith ('INNER', $this->post_author, $user, $user->user_id);
 133
 134                 $this->addGroup ($this->post_id);
 135         }
 136
 137         public function getAllPosts ($userId = null) {
 138                 $this->buildPosts ($userId);
 139
 140                 return $this->getArray ();
 141         }
 142
 143         public function getPost ($postId, $userId = null) {
 144                 $this->buildPosts ($userId);
 145
 146                 // these is the only modification from getAllPosts
 147                 if (!empty($postId)) {
 148                         $this->post_id = $postId;
 149                 }
 150
 151                 return /*/end/**/ ($this->getArray(1));
 152         }
 153
 154         public function test () {
 155                 $this->buidPost ();
 156
 157                 $this->db->query ( $this->buildSql (1));
 158
 159                 return $this->db->getObjects ();
 160         }
 161
 162         /**
 163          * Hard coded FULLTEXT search on post_title and post_body
 164          * Probably it won't be very hard to abstract it:
 165          *  1/ We already have FULLTEXT as flag on tdoAbstractField, I'll need only
 166          *   the MATCH () AGAINST () stuff, plus IN BOOLEAN MODE or WITH QUERY EXPANSION
 167          *  2/ I have to look in what to do for different type of tables
 168          *
 169          * @param string $searchText
 170          */
 171         public function searchPosts ($searchText, $userId = null) {
 172
 173                 $this->buildPosts ($userId);
 174                 $s = new tdoAbstractClause (' MATCH (post_title, post_body) AGAINST (' . $this->escape($searchText) . ')');
 175 //              var_dump($s);die;
 176                 $this->addWhere ($s);
 177 //              $sql = 'SELECT ' . $this->outputFieldList() . ' FROM ' . $this->name . ' AS ' . $this->alias . ' WHERE '.
 178 //                              'MATCH (post_title, post_body) AGAINST (' . $this->escape($searchText) . ') AND post_active = "Y"';
 179
 180 //              $this->db->query ($sql);
 181
 182                 return $this->getArray ();
 183         }
 184
 185 }