File Source for AlphaController.inc

<?php
require_once $config->get('sysRoot').'alpha/util/AlphaErrorHandlers.inc';
require_once $config->get('sysRoot').'alpha/controller/front/FrontController.inc';
require_once $config->get('sysRoot').'alpha/model/types/Date.inc';
require_once $config->get('sysRoot').'alpha/model/types/Timestamp.inc';
require_once $config->get('sysRoot').'alpha/model/types/Double.inc';
require_once $config->get('sysRoot').'alpha/model/types/Integer.inc';
require_once $config->get('sysRoot').'alpha/model/types/String.inc';
require_once $config->get('sysRoot').'alpha/model/types/Text.inc';
require_once $config->get('sysRoot').'alpha/model/types/Enum.inc';
require_once $config->get('sysRoot').'alpha/model/types/Boolean.inc';
require_once $config->get('sysRoot').'alpha/model/PersonObject.inc';
require_once $config->get('sysRoot').'alpha/exceptions/FailedUnitCommitException.inc';
require_once $config->get('sysRoot').'alpha/exceptions/SecurityException.inc';
require_once $config->get('sysRoot').'alpha/exceptions/FileNotFoundException.inc';
require_once $config->get('sysRoot').'alpha/util/helpers/AlphaValidator.inc';
/**
*
* The master controller class for the Alpha Framework.
*
* @package alpha::controller
* @since 1.0
* @author John Collins <dev@alphaframework.org>
* @version $Id: AlphaController.inc 1453 2011-12-04 15:12:54Z johnc $
* @license http://www.opensource.org/licenses/bsd-license.php The BSD License
* @copyright Copyright (c) 2011, John Collins (founder of Alpha Framework).
* All rights reserved.
*
* <pre>
* Redistribution and use in source and binary forms, with or
* without modification, are permitted provided that the
* following conditions are met:
*
* * Redistributions of source code must retain the above
* copyright notice, this list of conditions and the
* following disclaimer.
* * Redistributions in binary form must reproduce the above
* copyright notice, this list of conditions and the
* following disclaimer in the documentation and/or other
* materials provided with the distribution.
* * Neither the name of the Alpha Framework nor the names
* of its contributors may be used to endorse or promote
* products derived from this software without specific
* prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
* CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
* OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
* </pre>
*
*/
abstract class AlphaController {
/**
* The name of the controller
*
* @var string
* @since 1.0
*/
protected $name;
/**
* Used to set access privileages for the controller to the name of the rights group
* allowed to access it. 'Public' by default.
*
* @var string
* @since 1.0
*/
protected $visibility = 'Public';
/**
* Optionally, a BO may be set for the default validation form handling code to load in the displayPageHead()
* method. The definition of this BO class will need to be included in the child controller.
*
* @var AlphaDAO
* @since 1.0
*/
protected $BO = null;
/**
* Used to determine if the controller is part of a unit of work sequence
* (either empty or the name of the unit).
*
* @var string
* @since 1.0
*/
protected $unitOfWork;
/**
* Stores the start time of a unit of work transaction.
*
* @var Timestamp
* @since 1.0
*/
protected $unitStartTime;
/**
* Stores the end time of a unit of work transaction.
*
* @var Timestamp.
* @since 1.0
*/
protected $unitEndTime;
/**
* Stores the maximum allowed time duration (in seconds) of the unit of work.
*
* @var Integer
* @since 1.0
*/
protected $unitMAXDuration;
/**
* The name of the first controller that is used in this unit of work.
*
* @var string
* @since 1.0
*/
protected $firstJob;
/**
* The name of the next controller that is used in this unit of work.
*
* @var string
* @since 1.0
*/
protected $nextJob;
/**
* The name of the previous controller that is used in this unit of work.
*
* @var string
* @since 1.0
*/
protected $previousJob;
/**
* The name of the last controller that is used in this unit of work.
*
* @var string
* @since 1.0
*/
protected $lastJob;
/**
* An array for storing dirty objects in a session (i.e. persistent business
* objects that have not been updated in the database yet).
*
* @var array
* @since 1.0
*/
protected $dirtyObjects = array();
/**
* An array for storing new objects in a session (transient business objects that
* have no OID yet).
*
* @var array
* @since 1.0
*/
protected $newObjects = array();
/**
* The title to be displayed on the controller page
*
* @var string
* @since 1.0
*/
protected $title;
/**
* Meta keywords for the controller page, generally populated from tags
*
* @var string
* @since 1.0
*/
protected $keywords;
/**
* Meta description for the controller page.
*
* @var string
* @since 1.0
*/
protected $description;
/**
* Used to set status update messages to display to the user (messages stored between requests
* in _SESSION). Useful for when you want to display a message to a user after POSTing a request,
* or when moving from one page to the next.
*
* @var string
* @since 1.0
*/
protected $statusMessage;
/**
* Trace logger
*
* @var Logger
* @since 1.0
*/
private static $logger = null;
/**
* Constructor for the AlphaController that starts a new session if required, and handles
* the population of new/dirty objects from the session when available. Accepts the name
* of the rights group that has access to this controller, 'Public' by default.
*
* @param string $visibility The name of the rights group that can access this controller.
* @since 1.0
*/
public function __construct($visibility='Public') {
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>__construct(visibility=['.$visibility.'])');
global $config;
// kick off new session, or reuse existing one
if(!isset($_SESSION))
session_start();
// set the access rights to the group name indicated
$this->visibility = $visibility;
// check the current user's rights on access to the page controller
if(!$this->checkRights()) {
$this->accessError();
// no more execution should take place
exit;
}
// if configured to do so, force redirect to the front controller
if($config->get('sysForceFC') && basename($_SERVER['PHP_SELF']) != 'index.php') {
// set the correct HTTP header for the response
header('HTTP/1.1 301 Moved Permanently');
if(empty($_SERVER['QUERY_STRING'])) {
header('Location: '.$config->get('sysURL').'?act='.get_class($this));
self::$logger->debug('<<__construct');
exit;
}else{
header('Location: '.$config->get('sysURL').'?act='.get_class($this).'&'.$_SERVER['QUERY_STRING']);
self::$logger->debug('<<__construct');
exit;
}
// we're done here
self::$logger->debug('<<__construct');
return;
}
$this->unitStartTime = new Timestamp(date("Y-m-d H:i:s"));
$this->unitEndTime = new Timestamp();
$this->unitMAXDuration = new Integer();
// uses controller class name as the job name
if($this->name == '')
$this->setName(get_class($this));
if(isset($_SESSION['unitOfWork']) && is_array($_SESSION['unitOfWork']))
$this->setUnitOfWork($_SESSION['unitOfWork']);
if(isset($_SESSION['dirtyObjects']) && is_array($_SESSION['dirtyObjects']))
$this->dirtyObjects = $_SESSION['dirtyObjects'];
if(isset($_SESSION['newObjects']) && is_array($_SESSION['newObjects']))
$this->newObjects = $_SESSION['newObjects'];
if(isset($_SESSION['statusMessage']))
$this->setStatusMessage($_SESSION['statusMessage']);
self::$logger->debug('<<__construct');
}
/**
* Get the BO for this controller (if any).
*
* @return mixed
* @since 1.0
*/
public function getBO() {
self::$logger->debug('>>getBO()');
self::$logger->debug('<<getBO ['.var_export($this->BO, true).']');
return $this->BO;
}
/**
* Setter for the BO for this controller.
*
* @param AlphaDAO $BO
* @since 1.0
*/
public function setBO($BO) {
self::$logger->debug('>>setBO(BO=['.var_export($BO, true).'])');
$this->BO = $BO;
// if the BO has tags, use these as the meta keywords for this controller
if($this->BO->isTagged()) {
$tags = $this->BO->getPropObject('tags')->getRelatedObjects();
$keywords = '';
if(count($tags) > 0) {
foreach($tags as $tag)
$keywords .= ','.$tag->get('content');
}
$this->setKeywords(substr($keywords, 1));
}
self::$logger->debug('<<setBO');
}
/**
* Get the name of the unit of work job.
*
* @return string
* @since 1.0
*/
public function getName() {
self::$logger->debug('>>getName()');
self::$logger->debug('<<getName ['.$this->name.']');
return $this->name;
}
/**
* Setter for the unit of work job name.
*
* @param string $name
* @since 1.0
*/
public function setName($name) {
self::$logger->debug('>>setName(name=['.$name.'])');
$this->name = $name;
self::$logger->debug('<<setName');
}
/**
* Get the name of the rights group that has access to this controller.
*
* @return string
* @since 1.0
*/
public function getVisibility() {
self::$logger->debug('>>getVisibility()');
self::$logger->debug('<<getVisibility ['.$this->visibility.']');
return $this->visibility;
}
/**
* Setter for the name of the rights group that has access to this controller.
*
* @param string $visibility
* @since 1.0
*/
public function setVisibility($visibility) {
self::$logger->debug('>>setVisibility(visibility=['.$visibility.'])');
$this->visibility = $visibility;
self::$logger->debug('<<setVisibility');
}
/**
* Gets the name of the first job in this unit of work.
*
* @return string
* @since 1.0
*/
public function getFirstJob() {
self::$logger->debug('>>getFirstJob()');
self::$logger->debug('<<getFirstJob ['.$this->firstJob.']');
return $this->firstJob;
}
/**
* Gets the name of the next job in this unit of work
*
* @return string
* @since 1.0
*/
public function getNextJob() {
self::$logger->debug('>>getNextJob()');
self::$logger->debug('<<getNextJob ['.$this->nextJob.']');
return $this->nextJob;
}
/**
* Gets the name of the previous job in this unit of work
*
* @return string
* @since 1.0
*/
public function getPreviousJob() {
self::$logger->debug('>>getPreviousJob()');
self::$logger->debug('<<getPreviousJob ['.$this->previousJob.']');
return $this->previousJob;
}
/**
* Gets the name of the last job in this unit of work.
*
* @return string
* @since 1.0
*/
public function getLastJob() {
self::$logger->debug('>>getLastJob()');
self::$logger->debug('<<getLastJob ['.$this->lastJob.']');
return $this->lastJob;
}
/**
* Sets the name of the controller job sequence to the values in the supplied
* array (and stores the array in the session).
*
* @param array $jobs The names of the controllers in this unit of work sequence.
* @throws IllegalArguementException
* @since 1.0
*/
public function setUnitOfWork($jobs) {
self::$logger->debug('>>setUnitOfWork(jobs=['.var_export($jobs, true).'])');
if(method_exists($this, 'before_setUnitOfWork_callback'))
$this->before_setUnitOfWork_callback();
if(!is_array($jobs)) {
throw new IllegalArguementException('Bad $jobs array ['.var_export($jobs, true).'] passed to setUnitOfWork method!');
self::$logger->debug('<<setUnitOfWork');
return;
}
// validate that each controller name in the array actually exists
foreach($jobs as $job) {
if(!AlphaController::checkControllerDefExists($job))
throw new IllegalArguementException('The controller name ['.$job.'] provided in the jobs array is not defined anywhere!');
}
// clear out any previous unit of work from the session
$_SESSION['unitOfWork'] = null;
$this->dirtyObjects = array();
$this->newObjects = array();
$numOfJobs = count($jobs);
for($i=0; $i<$numOfJobs; $i++) {
// the first job in the sequence
if($i==0) {
$this->firstJob = $jobs[$i];
self::$logger->debug('First job ['.$this->firstJob.']');
}
// found the current job
if($this->name == $jobs[$i]) {
if(isset($jobs[$i-1])) {
// set the previous job if it exists
$this->previousJob = $jobs[$i-1];
self::$logger->debug('Previous job ['.$this->previousJob.']');
}
if(isset($jobs[$i+1])) {
// set the next job if it exists
$this->nextJob = $jobs[$i+1];
self::$logger->debug('Next job ['.$this->nextJob.']');
}
}
// the last job in the sequence
if($i==($numOfJobs-1)) {
$this->lastJob = $jobs[$i];
}
}
$_SESSION['unitOfWork'] = $jobs;
if(method_exists($this, 'after_setUnitOfWork_callback'))
$this->after_setUnitOfWork_callback();
self::$logger->debug('<<setUnitOfWork');
}
/**
* Getter for the unit start time.
*
* @return Timestamp
* @since 1.0
*/
public function getStartTime() {
self::$logger->debug('>>getStartTime()');
self::$logger->debug('<<getStartTime ['.$this->unitStartTime.']');
return $this->unitStartTime;
}
/**
* Setter for the unit start time (value will be stored in the session as key unitStartTime).
*
* @param integer $year
* @param integer $month
* @param integer $day
* @param integer $hour
* @param integer $minute
* @param integer $second
* @since 1.0
*/
public function setUnitStartTime($year, $month, $day, $hour, $minute, $second) {
self::$logger->debug('>>setUnitStartTime(year=['.$year.'], month=['.$month.'], day=['.$day.'], hour=['.$hour.'], minute=['.$minute.'],
second=['.$second.'])');
$this->unitStartTime->setTimestampValue($year, $month, $day, $hour, $minute, $second);
$_SESSION['unitStartTime'] = $this->unitStartTime->getValue();
self::$logger->debug('<<setUnitStartTime');
}
/**
* Getter for the unit end time.
*
* @return Timestamp
* @since 1.0
*/
public function getEndTime() {
self::$logger->debug('>>getEndTime()');
self::$logger->debug('<<getEndTime ['.$this->unitEndTime.']');
return $this->unitEndTime;
}
/**
* Setter for the unit end time (value will be stored in the session as key unitEndTime).
*
* @param integer $year
* @param integer $month
* @param integer $day
* @param integer $hour
* @param integer $minute
* @param integer $second
* @since 1.0
*/
public function setUnitEndTime($year, $month, $day, $hour, $minute, $second) {
self::$logger->debug('>>setUnitEndTime(year=['.$year.'], month=['.$month.'], day=['.$day.'], hour=['.$hour.'], minute=['.$minute.'],
second=['.$second.'])');
$this->unitEndTime->setTimestampValue($year, $month, $day, $hour, $minute, $second);
$_SESSION['unitEndTime'] = $this->unitEndTime->getValue();
self::$logger->debug('<<setUnitEndTime');
}
/**
* Getter for the unit of work MAX duration.
*
* @return Integer
* @since 1.0
*/
public function getMAXDuration() {
self::$logger->debug('>>getMAXDuration()');
self::$logger->debug('<<getMAXDuration ['.$this->unitMAXDuration.']');
return $this->unitMAXDuration;
}
/**
* Setter for the unit MAX duration.
*
* @param integer $duration The desired duration in seconds.
* @since 1.0
*/
public function setUnitMAXDuration($duration) {
self::$logger->debug('>>setUnitMAXDuration(duration=['.$duration.'])');
$this->unitMAXDuration->setValue($duration);
self::$logger->debug('<<setUnitMAXDuration');
}
/**
* Calculates and returns the unit of work current duration in seconds.
*
* @return integer
* @since 1.0
*/
public function getUnitDuration() {
self::$logger->debug('>>getUnitDuration()');
$intStartTime = mktime(
$this->unitStartTime->getHour(),
$this->unitStartTime->getMinute(),
$this->unitStartTime->getSecond(),
$this->unitStartTime->getMonth(),
$this->unitStartTime->getDay(),
$this->unitStartTime->getYear()
);
$intEndTime = mktime(
$this->unitEndTime->getHour(),
$this->unitEndTime->getMinute(),
$this->unitEndTime->getSecond(),
$this->unitEndTime->getMonth(),
$this->unitEndTime->getDay(),
$this->unitEndTime->getYear()
);
self::$logger->debug('<<getUnitDuration ['.$intEndTime-$intStartTime.']');
return $intEndTime-$intStartTime;
}
/**
* Adds the supplied business object to the dirtyObjects array in the session.
*
* @param AlphaDAO $object
* @since 1.0
*/
public function markDirty($object) {
self::$logger->debug('>>markDirty(object=['.var_export($object, true).'])');
if(method_exists($this, 'before_markDirty_callback'))
$this->before_markDirty_callback();
$this->dirtyObjects[count($this->dirtyObjects)] = $object;
$_SESSION['dirtyObjects'] = $this->dirtyObjects;
if(method_exists($this, 'after_markDirty_callback'))
$this->after_markDirty_callback();
self::$logger->debug('<<markDirty');
}
/**
* Getter for the dirty objects array.
*
* @return array
* @since 1.0
*/
public function getDirtyObjects() {
self::$logger->debug('>>getDirtyObjects()');
self::$logger->debug('<<getDirtyObjects ['.var_export($this->dirtyObjects, true).']');
return $this->dirtyObjects;
}
/**
* Adds a newly created business object to the newObjects array in the session.
*
* @param AlphaDAO $object
* @since 1.0
*/
public function markNew($object) {
self::$logger->debug('>>markNew(object=['.var_export($object, true).'])');
if(method_exists($this, 'before_markNew_callback'))
$this->before_markNew_callback();
$this->newObjects[count($this->newObjects)] = $object;
$_SESSION['newObjects'] = $this->newObjects;
if(method_exists($this, 'after_markNew_callback'))
$this->after_markNew_callback();
self::$logger->debug('<<markNew');
}
/**
* Getter for the new objects array.
*
* @return array
* @since 1.0
*/
public function getNewObjects() {
self::$logger->debug('>>getNewObjects()');
self::$logger->debug('<<getNewObjects ['.var_export($this->newObjects, true).']');
return $this->newObjects;
}
/**
* Commits (saves) all of the new and modified (dirty) objects in the unit of work to the database.
*
* @throws FailedUnitCommitException
* @since 1.0
*/
public function commit() {
self::$logger->debug('>>commit()');
if(method_exists($this, 'before_commit_callback'))
$this->before_commit_callback();
AlphaDAO::begin();
$newObjects = $this->getNewObjects();
$count = count($newObjects);
for ($i = 0; $i < $count; $i++) {
try {
$newObjects[$i]->save();
}catch (FailedSaveException $e) {
throw new FailedUnitCommitException($e->getMessage());
self::$logger->error('Failed to save new object of type ['.get_class($newObjects[$i]).'], aborting...');
$this->abort();
return;
}catch (LockingException $e) {
throw new FailedUnitCommitException($e->getMessage());
self::$logger->error('Failed to save new object of type ['.get_class($newObjects[$i]).'], aborting...');
$this->abort();
return;
}
}
$dirtyObjects = $this->getDirtyObjects();
$count = count($dirtyObjects);
for ($i = 0; $i < $count; $i++) {
try {
$dirtyObjects[$i]->save();
}catch (FailedSaveException $e) {
throw new FailedUnitCommitException($e->getMessage());
self::$logger->error('Failed to save OID ['.$dirtyObjects[$i]->getID().'] of type ['.get_class($dirtyObjects[$i]).'], aborting...');
$this->abort();
return;
}catch (LockingException $e) {
throw new FailedUnitCommitException($e->getMessage());
self::$logger->error('Failed to save OID ['.$dirtyObjects[$i]->getID().'] of type ['.get_class($dirtyObjects[$i]).'], aborting...');
$this->abort();
return;
}
}
try{
AlphaDAO::commit();
$this->clearUnitOfWorkAttributes();
if(method_exists($this, 'after_commit_callback'))
$this->after_commit_callback();
self::$logger->debug('<<commit');
}catch(FailedSaveException $e) {
throw new FailedUnitCommitException('Failed to commit the transaction, error is ['.$e->getMessage().']');
self::$logger->debug('<<commit');
}
}
/**
* Method to clearup a cancelled unit of work.
*
* @throws AlphaException
* @since 1.0
*/
public function abort() {
self::$logger->debug('>>abort()');
if(method_exists($this, 'before_abort_callback'))
$this->before_abort_callback();
try{
AlphaDAO::rollback();
$this->clearUnitOfWorkAttributes();
if(method_exists($this, 'after_abort_callback'))
$this->after_abort_callback();
self::$logger->debug('<<abort');
}catch(AlphaException $e) {
throw new AlphaException('Failed to rollback the transaction, error is ['.$e->getMessage().']');
self::$logger->debug('<<abort');
}
}
/**
* Clears the session and object attributes related to unit of work sessions
*/
private function clearUnitOfWorkAttributes() {
$_SESSION['unitOfWork'] = null;
$this->unitOfWork = null;
$_SESSION['dirtyObjects'] = null;
$this->dirtyObjects = array();
$_SESSION['newObjects'] = null;
$this->newObjects = array();
}
/**
* Getter for the page title.
*
* @return string
* @since 1.0
*/
public function getTitle() {
self::$logger->debug('>>getTitle()');
self::$logger->debug('<<getTitle ['.$this->title.']');
return $this->title;
}
/**
* Setter for the page title.
*
* @param string $title
* @since 1.0
*/
public function setTitle($title) {
self::$logger->debug('>>setTitle(title=['.$title.'])');
self::$logger->debug('<<setTitle');
$this->title = $title;
}
/**
* Getter for the page description.
*
* @return string
* @since 1.0
*/
public function getDescription() {
self::$logger->debug('>>getDescription()');
self::$logger->debug('<<getDescription ['.$this->description.']');
return $this->description;
}
/**
* Setter for the page description.
*
* @param string $description
* @since 1.0
*/
public function setDescription($description) {
self::$logger->debug('>>setDescription(description=['.$description.'])');
self::$logger->debug('<<setDescription');
$this->description = $description;
}
/**
* Getter for the page keywords.
*
* @return string
* @since 1.0
*/
public function getKeywords() {
self::$logger->debug('>>getKeywords()');
self::$logger->debug('<<getKeywords ['.$this->keywords.']');
return $this->keywords;
}
/**
* Setter for the page keywords, should pass a comma-seperated list as a string.
*
* @param string $keywords
* @since 1.0
*/
public function setKeywords($keywords) {
self::$logger->debug('>>setKeywords(keywords=['.$keywords.'])');
self::$logger->debug('<<setKeywords');
$this->keywords = $keywords;
}
/**
* Method to display an access error for trespassing users. HTTP response header code will be 403.
*
* @since 1.0
*/
public function accessError() {
self::$logger->debug('>>accessError()');
if(method_exists($this, 'before_accessError_callback'))
$this->before_accessError_callback();
global $config;
if(isset($_SESSION['currentUser']))
self::$logger->warn('The user ['.$_SESSION['currentUser']->get('email').'] attempted to access the resource ['.$_SERVER['REQUEST_URI'].'] but was denied due to insufficient rights');
else
self::$logger->warn('An unknown user attempted to access the resource ['.$_SERVER['REQUEST_URI'].'] but was denied due to insufficient rights');
header('HTTP/1.1 403 Forbidden');
$front = new FrontController();
echo AlphaView::renderErrorPage(403, 'You do not have the correct access rights to view this page. If you have not logged in yet, try going back to the home page and logging in from there.');
if(method_exists($this, 'after_accessError_callback'))
$this->after_accessError_callback();
self::$logger->debug('<<accessError');
}
/**
* Checks the user rights of the currently logged-in person against the page
* visibility set for this controller. Will return false if the user has
* not got the correct rights.
*
* @return boolean
* @since 1.0
*/
public function checkRights() {
self::$logger->debug('>>checkRights()');
if(method_exists($this, 'before_checkRights_callback'))
$this->before_checkRights_callback();
// firstly if the page is Public then there is no issue
if ($this->getVisibility() == 'Public') {
if(method_exists($this, 'after_checkRights_callback'))
$this->after_checkRights_callback();
self::$logger->debug('<<checkRights [true]');
return true;
}else{
// the person is logged in?
if (isset($_SESSION['currentUser'])) {
// checking for admins (can access everything)
if ($_SESSION['currentUser']->inGroup('Admin')) {
if(method_exists($this, 'after_checkRights_callback'))
$this->after_checkRights_callback();
self::$logger->debug('<<checkRights [true]');
return true;
} elseif ($_SESSION['currentUser']->inGroup($this->getVisibility())) {
if(method_exists($this, 'after_checkRights_callback'))
$this->after_checkRights_callback();
self::$logger->debug('<<checkRights [true]');
return true;
// the person is editing their own profile which is allowed
} elseif (get_class($this->BO) == 'PersonObject' && $_SESSION['currentUser']->getDisplayName() == $this->BO->getDisplayName()) {
if(method_exists($this, 'after_checkRights_callback'))
$this->after_checkRights_callback();
self::$logger->debug('<<checkRights [true]');
return true;
}else{
self::$logger->debug('<<checkRights [false]');
return false;
}
}else{ // the person is NOT logged in
self::$logger->debug('<<checkRights [false]');
return false;
}
}
}
/**
* Method to check the validity of the two hidden form security
* fields which aim to ensure that a post to the controller is being sent from
* the same server that is hosting it.
*
* @return boolean
* @since 1.0
*/
public static function checkSecurityFields() {
if(self::$logger == null)
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>checkSecurityFields()');
// the server hostname + today's date
$var1 = md5($_SERVER['HTTP_HOST'].date("Ymd"));
// the server's IP plus $var1
$var2 = md5($_SERVER['REMOTE_ADDR'].$var1);
if(empty($_REQUEST['var1']) || empty($_REQUEST['var2'])) {
self::$logger->warn('The required var1/var2 params where not provided on the HTTP request');
self::$logger->debug('<<checkSecurityFields [false]');
return false;
}
if ($var1 == $_REQUEST['var1'] && $var2 == $_REQUEST['var2']) {
self::$logger->debug('<<checkSecurityFields [true]');
return true;
}else{
/*
* Here we are implementing a "grace period" of one hour if the time is < 1:00AM, we will accept
* a match for yesterday's date in the security fields
*
*/
// the server hostname + today's date less 1 hour (i.e. yesterday where time is < 1:00AM)
$var1 = md5($_SERVER['HTTP_HOST'].date("Ymd", (time()-3600)));
// the server's IP plus $var1
$var2 = md5($_SERVER['REMOTE_ADDR'].$var1);
if ($var1 == $_REQUEST['var1'] && $var2 == $_REQUEST['var2']) {
self::$logger->debug('<<checkSecurityFields [true]');
return true;
}else{
self::$logger->warn('The var1/var2 params provided are invalid, values: var1=['.$_REQUEST['var1'].'] var2=['.$_REQUEST['var2'].']');
self::$logger->debug('<<checkSecurityFields [false]');
return false;
}
}
}
/**
* Generates the two security fields to prevent remote form processing.
*
* @return array An array containing the two fields
* @since 1.0
*/
public static function generateSecurityFields() {
if(self::$logger == null)
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>generateSecurityFields()');
// the server hostname + today's date
$var1 = md5($_SERVER['HTTP_HOST'].date("Ymd"));
// the server's IP plus $var1
$var2 = md5($_SERVER['REMOTE_ADDR'].$var1);
self::$logger->debug('<<generateSecurityFields [array('.$var1.', '.$var2.')]');
return array($var1, $var2);
}
/**
* Returns the name of a custom controller if one is found, otherwise returns null.
*
* @param string $BOName The classname of the business object
* @param string $mode The mode of the controller (create, view, edit)
* @return string
* @since 1.0
*/
public static function getCustomControllerName($BOName, $mode) {
if(self::$logger == null)
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>getCustomControllerName(BOName=['.$BOName.'], mode=['.$mode.'])');
global $config;
// strip the Object part from the class name
$BOName = substr($BOName, 0, strpos($BOName, 'Object'));
// uppercase the first letter of each word, e.g. create cart becomes Create Cart
$controllerName = ucwords($mode.' '.$BOName);
// remove spaces
$controllerName = str_replace(' ', '', $controllerName);
self::$logger->debug('Custom controller name is ['.$controllerName.']');
if (file_exists($config->get('sysRoot').'controller/'.$controllerName.'.php')) {
self::$logger->debug('<<getCustomControllerName');
return $controllerName;
}elseif (file_exists($config->get('sysRoot').'alpha/controller/'.$controllerName.'.php')) {
self::$logger->debug('<<getCustomControllerName');
return $controllerName;
}else{
self::$logger->debug('<<getCustomControllerName');
return null;
}
}
/**
* Does a HTTP redirect to a custom controller if one is found.
*
* @param string $BOName The classname of the business object
* @param string $mode The mode of the controller (create, view, edit)
* @throws FileNotFoundException
* @since 1.0
*/
protected function loadCustomController($BOName, $mode) {
self::$logger->debug('>>loadCustomController(BOName=['.$BOName.'], mode=['.$mode.'])');
global $config;
// strip the Object part from the class name
$BOName = substr($BOName, 0, strpos($BOName, 'Object'));
// uppercase the first letter of each word, e.g. create cart becomes Create Cart
$controllerName = ucwords($mode.' '.$BOName);
// remove spaces
$controllerName = str_replace(' ', '', $controllerName);
self::$logger->debug('Custom controller name is ['.$controllerName.']');
// just making sure that we are not already using the custom controller
if(get_class($this) != $controllerName) {
if (file_exists($config->get('sysRoot').'controller/'.$controllerName.'.php')) {
self::$logger->debug('Custom controller found, redirecting...');
// handle secure URLs
if(isset($_GET['tk'])) {
$params = FrontController::decodeQueryParams($_GET['tk']);
$params = preg_replace('/act=.*\&/', 'act='.$controllerName.'&', $params);
self::$logger->debug('Params are ['.$params.']');
$url = FrontController::generateSecureURL($params);
self::$logger->debug('Redirecting to ['.$url.']');
header('Location: '.$url);
self::$logger->debug('<<loadCustomController');
exit;
}else{
$url = $config->get('sysURL').'controller/'.$controllerName.'.php?'.$_SERVER['QUERY_STRING'];
self::$logger->debug('Redirecting to ['.$url.']');
header('Location: '.$url);
self::$logger->debug('<<loadCustomController');
exit;
}
}elseif (file_exists($config->get('sysRoot').'alpha/controller/'.$controllerName.'.php')) {
self::$logger->debug('Custom controller found, redirecting...');
// handle secure URLs
if(self::checkIfAccessingFromSecureURL()) {
if(isset($_GET['tk'])) {
$params = FrontController::decodeQueryParams($_GET['tk']);
}else{
$start = strpos($_SERVER['REQUEST_URI'], '/tk/')+3;
$end = strlen($_SERVER['REQUEST_URI']);
$tk = substr($_SERVER['REQUEST_URI'], $start+1, $end-($start+1));
$params = FrontController::decodeQueryParams($tk);
}
$params = preg_replace('/act=.*\&/', 'act='.$controllerName.'&', $params);
self::$logger->debug('Params are ['.$params.']');
$url = FrontController::generateSecureURL($params);
self::$logger->debug('Redirecting to ['.$url.']');
header('Location: '.$url);
self::$logger->debug('<<loadCustomController');
exit;
}else{
$url = $config->get('sysURL').'alpha/controller/'.$controllerName.'.php?'.$_SERVER['QUERY_STRING'];
self::$logger->debug('Redirecting to ['.$url.']');
header('Location: '.$url);
self::$logger->debug('<<loadCustomController');
exit;
}
}else{
// throw an exception if we have gotten this far and no custom controller was found
throw new FileNotFoundException('The controller ['.$controllerName.'] could not be loaded as it does not exist');
}
}
self::$logger->debug('<<loadCustomController');
}
/**
* Set the status message in the _SESSION to the value provided.
*
* @param string $message
* @since 1.0
*/
public function setStatusMessage($message) {
$this->statusMessage = $message;
$_SESSION['statusMessage'] = $message;
}
/**
* Gets the current status message for this controller. Note that by getting the current
* status message, you clear out the value stored in _SESSION so this method can only be used
* to get the status message once for display purposes.
*
* @return string
* @since 1.0
*/
public function getStatusMessage() {
$_SESSION['statusMessage'] = null;
return $this->statusMessage;
}
/**
* Checks that the definition for the controller classname provided exists. Will also return true
* if you pass "/" for the root of the web application.
*
* @param string $controllerName
* @return boolean
* @since 1.0
*/
public static function checkControllerDefExists($controllerName) {
if(self::$logger == null)
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>checkControllerDefExists(controllerName=['.$controllerName.'])');
global $config;
$exists = false;
if($controllerName == '/')
$exists = true;
if(file_exists($config->get('sysRoot').'controller/'.$controllerName.'.php'))
$exists = true;
if(file_exists($config->get('sysRoot').'alpha/controller/'.$controllerName.'.php'))
$exists = true;
self::$logger->debug('<<checkControllerDefExists ['.$exists.']');
return $exists;
}
/**
* Loads the definition for the controller classname provided.
*
* @param string $controllerName
* @throws IllegalArguementException
* @since 1.0
*/
public static function loadControllerDef($controllerName) {
if(self::$logger == null)
self::$logger = new Logger('AlphaController');
self::$logger->debug('>>loadControllerDef(controllerName=['.$controllerName.'])');
global $config;
if(file_exists($config->get('sysRoot').'controller/'.$controllerName.'.php'))
require_once $config->get('sysRoot').'controller/'.$controllerName.'.php';
elseif(file_exists($config->get('sysRoot').'alpha/controller/'.$controllerName.'.php'))
require_once $config->get('sysRoot').'alpha/controller/'.$controllerName.'.php';
else
throw new IllegalArguementException('The class ['.$controllerName.'] is not defined anywhere!');
self::$logger->debug('<<loadControllerDef');
}
/**
* Static function for determining if the current request URL is a secure one (has a tk string or not)
*
* @return boolean True if the current URL contains a tk value, false otherwise
* @since 1.0
*/
public static function checkIfAccessingFromSecureURL() {
if (isset($_GET['tk']) || strpos($_SERVER['REQUEST_URI'], '/tk/') !== false)
return true;
else
return false;
}
}
?>

	alpha--controller

[ class tree: alpha--controller ] [ index: alpha--controller ] [ all elements ]

Source for file AlphaController.inc