300 lines
8.8 KiB
PHP
300 lines
8.8 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @package Joomla.Site
|
|
* @subpackage com_weblinks
|
|
*
|
|
* @copyright Copyright (C) 2005 - 2017 Open Source Matters, Inc. All rights reserved.
|
|
* @license GNU General Public License version 2 or later; see LICENSE.txt
|
|
*/
|
|
|
|
namespace Joomla\Component\Weblinks\Site\Controller;
|
|
|
|
// phpcs:disable PSR1.Files.SideEffects
|
|
\defined('_JEXEC') or die;
|
|
// phpcs:enable PSR1.Files.SideEffects
|
|
use Joomla\CMS\Language\Text;
|
|
use Joomla\CMS\MVC\Controller\FormController;
|
|
use Joomla\CMS\Uri\Uri;
|
|
use Joomla\Utilities\ArrayHelper;
|
|
|
|
/**
|
|
* Weblinks class.
|
|
*
|
|
* @since 1.5
|
|
*/
|
|
class WeblinkController extends FormController
|
|
{
|
|
/**
|
|
* The URL view item variable.
|
|
*
|
|
* @var string
|
|
* @since 1.6
|
|
*/
|
|
protected $view_item = 'form';
|
|
/**
|
|
* The URL view list variable.
|
|
*
|
|
* @var string
|
|
* @since 1.6
|
|
*/
|
|
protected $view_list = 'categories';
|
|
/**
|
|
* The URL edit variable.
|
|
*
|
|
* @var string
|
|
* @since 3.2
|
|
*/
|
|
protected $urlVar = 'a.id';
|
|
/**
|
|
* Method to add a new record.
|
|
*
|
|
* @return boolean True if the article can be added, false if not.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
public function add()
|
|
{
|
|
if (!parent::add()) {
|
|
// Redirect to the return page.
|
|
$this->setRedirect($this->getReturnPage());
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Method override to check if you can add a new record.
|
|
*
|
|
* @param array $data An array of input data.
|
|
*
|
|
* @return boolean
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
protected function allowAdd($data = [])
|
|
{
|
|
$categoryId = ArrayHelper::getValue($data, 'catid', $this->input->getInt('id'), 'int');
|
|
if ($categoryId) {
|
|
// If the category has been passed in the URL check it.
|
|
return $this->app->getIdentity()->authorise('core.create', $this->option . '.category.' . $categoryId);
|
|
}
|
|
|
|
// In the absence of better information, revert to the component permissions.
|
|
return parent::allowAdd($data);
|
|
}
|
|
|
|
/**
|
|
* Method to check if you can add a new record.
|
|
*
|
|
* @param array $data An array of input data.
|
|
* @param string $key The name of the key for the primary key.
|
|
*
|
|
* @return boolean
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
protected function allowEdit($data = [], $key = 'id')
|
|
{
|
|
$recordId = (int) isset($data[$key]) ? $data[$key] : 0;
|
|
if (!$recordId) {
|
|
return false;
|
|
}
|
|
|
|
$record = $this->getModel()->getItem($recordId);
|
|
$categoryId = (int) $record->catid;
|
|
if ($categoryId) {
|
|
// The category has been set. Check the category permissions.
|
|
$user = $this->app->getIdentity();
|
|
// First, check edit permission
|
|
if ($user->authorise('core.edit', $this->option . '.category.' . $categoryId)) {
|
|
return true;
|
|
}
|
|
|
|
// Fallback on edit.own
|
|
if ($user->authorise('core.edit.own', $this->option . '.category.' . $categoryId) && $record->created_by == $user->id) {
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
// Since there is no asset tracking, revert to the component permissions.
|
|
return parent::allowEdit($data, $key);
|
|
}
|
|
|
|
/**
|
|
* Method to cancel an edit.
|
|
*
|
|
* @param string $key The name of the primary key of the URL variable.
|
|
*
|
|
* @return boolean True if access level checks pass, false otherwise.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
public function cancel($key = 'w_id')
|
|
{
|
|
$return = parent::cancel($key);
|
|
// Redirect to the return page.
|
|
$this->setRedirect($this->getReturnPage());
|
|
return $return;
|
|
}
|
|
|
|
/**
|
|
* Method to edit an existing record.
|
|
*
|
|
* @param string $key The name of the primary key of the URL variable.
|
|
* @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions).
|
|
*
|
|
* @return boolean True if access level check and checkout passes, false otherwise.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
public function edit($key = null, $urlVar = 'w_id')
|
|
{
|
|
return parent::edit($key, $urlVar);
|
|
}
|
|
|
|
/**
|
|
* Method to get a model object, loading it if required.
|
|
*
|
|
* @param string $name The model name. Optional.
|
|
* @param string $prefix The class prefix. Optional.
|
|
* @param array $config Configuration array for model. Optional.
|
|
*
|
|
* @return object The model.
|
|
*
|
|
* @since 1.5
|
|
*/
|
|
public function getModel($name = 'form', $prefix = 'Site', $config = ['ignore_request' => true])
|
|
{
|
|
return parent::getModel($name, $prefix, $config);
|
|
}
|
|
|
|
/**
|
|
* Gets the URL arguments to append to an item redirect.
|
|
*
|
|
* @param integer $recordId The primary key id for the item.
|
|
* @param string $urlVar The name of the URL variable for the id.
|
|
*
|
|
* @return string The arguments to append to the redirect URL.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
protected function getRedirectToItemAppend($recordId = null, $urlVar = null)
|
|
{
|
|
$append = parent::getRedirectToItemAppend($recordId, $urlVar);
|
|
$itemId = $this->input->getInt('Itemid');
|
|
$return = $this->getReturnPage();
|
|
if ($itemId) {
|
|
$append .= '&Itemid=' . $itemId;
|
|
}
|
|
|
|
if ($return) {
|
|
$append .= '&return=' . base64_encode($return);
|
|
}
|
|
|
|
return $append;
|
|
}
|
|
|
|
/**
|
|
* Get the return URL if a "return" variable has been passed in the request
|
|
*
|
|
* @return string The return URL.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
protected function getReturnPage()
|
|
{
|
|
$return = $this->input->get('return', null, 'base64');
|
|
if (empty($return) || !Uri::isInternal(base64_decode($return))) {
|
|
return Uri::base();
|
|
}
|
|
|
|
return base64_decode($return);
|
|
}
|
|
|
|
/**
|
|
* Method to save a record.
|
|
*
|
|
* @param string $key The name of the primary key of the URL variable.
|
|
* @param string $urlVar The name of the URL variable if different from the primary key (sometimes required to avoid router collisions).
|
|
*
|
|
* @return boolean True if successful, false otherwise.
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
public function save($key = null, $urlVar = 'w_id')
|
|
{
|
|
// Get the application
|
|
$app = $this->app;
|
|
// Get the data from POST
|
|
$data = $this->input->post->get('jform', [], 'array');
|
|
// Save the data in the session.
|
|
$app->setUserState('com_weblinks.edit.weblink.data', $data);
|
|
$result = parent::save($key, $urlVar);
|
|
// If ok, redirect to the return page.
|
|
if ($result) {
|
|
// Flush the data from the session
|
|
$app->setUserState('com_weblinks.edit.weblink.data', null);
|
|
$this->setRedirect($this->getReturnPage());
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Go to a weblink
|
|
*
|
|
* @return void
|
|
*
|
|
* @throws \Exception
|
|
*
|
|
* @since 1.6
|
|
*/
|
|
public function go()
|
|
{
|
|
// Get the ID from the request
|
|
$id = $this->input->getInt('id');
|
|
// Get the model, requiring published items
|
|
$modelLink = $this->getModel('Weblink');
|
|
$modelLink->setState('filter.published', 1);
|
|
// Get the item
|
|
$link = $modelLink->getItem($id);
|
|
// Make sure the item was found.
|
|
if (empty($link)) {
|
|
throw new \Exception(Text::_('COM_WEBLINKS_ERROR_WEBLINK_NOT_FOUND'), 404);
|
|
}
|
|
|
|
// Check whether item access level allows access.
|
|
$groups = $this->app->getIdentity()->getAuthorisedViewLevels();
|
|
if (!in_array($link->access, $groups)) {
|
|
throw new \Exception(Text::_('JERROR_ALERTNOAUTHOR'), 403);
|
|
}
|
|
|
|
// Check whether category access level allows access.
|
|
$modelCat = $this->getModel('Category', 'Site', ['ignore_request' => true]);
|
|
$modelCat->setState('filter.published', 1);
|
|
// Get the category
|
|
$category = $modelCat->getCategory($link->catid);
|
|
// Make sure the category was found.
|
|
if (empty($category)) {
|
|
throw new \Exception(Text::_('COM_WEBLINKS_ERROR_WEBLINK_NOT_FOUND'), 404);
|
|
}
|
|
|
|
// Check whether item access level allows access.
|
|
if (!in_array($category->access, $groups)) {
|
|
throw new \Exception(Text::_('JERROR_ALERTNOAUTHOR'), 403);
|
|
}
|
|
|
|
// Redirect to the URL
|
|
if ($link->url) {
|
|
$modelLink->hit($id);
|
|
$this->app->redirect($link->url, 301);
|
|
}
|
|
|
|
throw new \Exception(Text::_('COM_WEBLINKS_ERROR_WEBLINK_URL_INVALID'), 404);
|
|
}
|
|
}
|