You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

168 lines
4.7 KiB

  1. <?php
  2. namespace App\Http\Controllers;
  3. use Laravel\Lumen\Routing\Controller as BaseController;
  4. use Illuminate\Http\Request;
  5. use DB;
  6. class Controller extends BaseController
  7. {
  8. private static function displayURL() {
  9. return preg_replace('/(^https?:\/\/|\/$)/', '', session('me'));
  10. }
  11. public function index(Request $request) {
  12. if(session('user_id')) {
  13. $databases = DB::select('SELECT d.*
  14. FROM `databases` d
  15. JOIN database_users u ON d.id = u.database_id
  16. WHERE u.user_id = ?
  17. ORDER BY name', [session('user_id')]);
  18. return view('dashboard', [
  19. 'displayURL' => self::displayURL(),
  20. 'databases' => $databases
  21. ]);
  22. } else {
  23. return view('index');
  24. }
  25. }
  26. public function createDatabase(Request $request) {
  27. if(!session('user_id'))
  28. return redirect('/');
  29. if($request->input('name') == '') {
  30. $request->session()->flash('create-error', 'Enter a name.');
  31. return redirect('/');
  32. }
  33. // Only alphanumeric chars are allowed
  34. if(preg_replace('/[^a-zA-Z0-9]/', '', $request->input('name')) != $request->input('name')) {
  35. $request->session()->flash('create-error', 'Only alphanumeric characters are allowed.');
  36. $request->session()->flash('database-name', preg_replace('/[^a-zA-Z0-9]/','',$request->input('name')));
  37. return redirect('/');
  38. }
  39. // Check for conflicts
  40. $db = DB::select('SELECT * FROM `databases` WHERE name = ?', [$request->input('name')]);
  41. if(count($db) == 0) {
  42. // Create the database records
  43. $id = DB::table('databases')->insertGetId([
  44. 'name' => $request->input('name'),
  45. 'read_token' => str_random(40),
  46. 'write_token' => str_random(40),
  47. 'created_by' => session('user_id'),
  48. 'created_at' => date('Y-m-d H:i:s')
  49. ]);
  50. DB::table('database_users')->insert([
  51. 'database_id' => $id,
  52. 'user_id' => session('user_id'),
  53. 'created_at' => date('Y-m-d H:i:s')
  54. ]);
  55. return redirect('/');
  56. } else {
  57. $request->session()->flash('create-error', 'That database name is already in use.');
  58. $request->session()->flash('database-name', $request->input('name'));
  59. return redirect('/');
  60. }
  61. }
  62. public function map(Request $request, $name) {
  63. if(!session('user_id'))
  64. return redirect('/');
  65. // Verify this user has access to the database
  66. $db = DB::table('databases')
  67. ->where('created_by','=',session('user_id'))
  68. ->where('name','=',$name)
  69. ->first();
  70. if(!$db)
  71. return redirect('/');
  72. return view('map', [
  73. 'displayURL' => self::displayURL(),
  74. 'database' => $db,
  75. ]);
  76. }
  77. public function settings(Request $request, $name) {
  78. if(!session('user_id'))
  79. return redirect('/');
  80. // Only the person that created the database can modify it
  81. $db = DB::table('databases')
  82. ->where('created_by','=',session('user_id'))
  83. ->where('name','=',$name)
  84. ->first();
  85. if(!$db)
  86. return redirect('/');
  87. $users = DB::select('SELECT u.*
  88. FROM users u
  89. JOIN database_users d ON u.id = d.user_id
  90. WHERE d.database_id = ?
  91. ORDER BY u.url', [$db->id]);
  92. return view('settings', [
  93. 'displayURL' => self::displayURL(),
  94. 'database' => $db,
  95. 'users' => $users
  96. ]);
  97. }
  98. public function updateSettings(Request $request, $name) {
  99. if(!session('user_id'))
  100. return redirect('/');
  101. // Only the person that created the database can modify it
  102. $db = DB::table('databases')
  103. ->where('created_by','=',session('user_id'))
  104. ->where('name','=',$name)
  105. ->first();
  106. if(!$db)
  107. return redirect('/');
  108. if($request->input('remove_user')) {
  109. $user = DB::table('users')->where('url','=',$request->input('remove_user'))->first();
  110. if($user) {
  111. DB::table('database_users')->where('database_id','=',$db->id)->where('user_id','=',$user->id)->delete();
  112. }
  113. return json_encode([
  114. 'result' => 'ok'
  115. ]);
  116. } else if($request->input('add_user')) {
  117. // Find user if it exists already
  118. $user = DB::table('users')->where('url','=',$request->input('add_user'))->first();
  119. if($user) {
  120. $user_id = $user->id;
  121. } else {
  122. $user_id = DB::table('users')->insertGetId([
  123. 'url' => $request->input('add_user'),
  124. 'created_at' => date('Y-m-d H:i:s')
  125. ]);
  126. }
  127. // Add access to the database
  128. $exists = DB::table('database_users')->where('database_id','=',$db->id)->where('user_id','=',$user_id)->first();
  129. if(!$exists) {
  130. DB::table('database_users')->insert([
  131. 'database_id' => $db->id,
  132. 'user_id' => $user_id,
  133. 'created_at' => date('Y-m-d H:i:s')
  134. ]);
  135. }
  136. return redirect('/settings/'.$db->name);
  137. }
  138. }
  139. }