You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

188 lines
5.5 KiB

  1. <?php
  2. namespace App\Http\Controllers;
  3. use Laravel\Lumen\Routing\Controller as BaseController;
  4. use Illuminate\Http\Request;
  5. use DB;
  6. class Controller extends BaseController
  7. {
  8. private static function displayURL() {
  9. return preg_replace('/(^https?:\/\/|\/$)/', '', session('me'));
  10. }
  11. public function index(Request $request) {
  12. if(session('user_id')) {
  13. $databases = DB::select('SELECT d.*
  14. FROM `databases` d
  15. JOIN database_users u ON d.id = u.database_id
  16. WHERE u.user_id = ?
  17. ORDER BY name', [session('user_id')]);
  18. return view('dashboard', [
  19. 'displayURL' => self::displayURL(),
  20. 'databases' => $databases
  21. ]);
  22. } else {
  23. return view('index');
  24. }
  25. }
  26. public function createDatabase(Request $request) {
  27. if(!session('user_id'))
  28. return redirect('/');
  29. if($request->input('name') == '') {
  30. $request->session()->flash('create-error', 'Enter a name.');
  31. return redirect('/');
  32. }
  33. // Only alphanumeric chars are allowed
  34. if(preg_replace('/[^a-zA-Z0-9]/', '', $request->input('name')) != $request->input('name')) {
  35. $request->session()->flash('create-error', 'Only alphanumeric characters are allowed.');
  36. $request->session()->flash('database-name', preg_replace('/[^a-zA-Z0-9]/','',$request->input('name')));
  37. return redirect('/');
  38. }
  39. // Check for conflicts
  40. $db = DB::select('SELECT * FROM `databases` WHERE name = ?', [$request->input('name')]);
  41. if(count($db) == 0) {
  42. // Create the database records
  43. $id = DB::table('databases')->insertGetId([
  44. 'name' => $request->input('name'),
  45. 'read_token' => str_random(40),
  46. 'write_token' => str_random(40),
  47. 'created_by' => session('user_id'),
  48. 'created_at' => date('Y-m-d H:i:s')
  49. ]);
  50. DB::table('database_users')->insert([
  51. 'database_id' => $id,
  52. 'user_id' => session('user_id'),
  53. 'created_at' => date('Y-m-d H:i:s')
  54. ]);
  55. return redirect('/');
  56. } else {
  57. $request->session()->flash('create-error', 'That database name is already in use.');
  58. $request->session()->flash('database-name', $request->input('name'));
  59. return redirect('/');
  60. }
  61. }
  62. public function map(Request $request, $name) {
  63. if(!session('user_id'))
  64. return redirect('/');
  65. // Verify this user has access to the database
  66. $db = DB::table('databases')
  67. ->join('database_users', function($join){
  68. $join->on('databases.id','=','database_users.database_id');
  69. })
  70. ->where('user_id','=',session('user_id'))
  71. ->where('name','=',$name)
  72. ->first();
  73. if(!$db)
  74. return redirect('/');
  75. return view('map', [
  76. 'displayURL' => self::displayURL(),
  77. 'database' => $db,
  78. 'menu' => [
  79. '/settings/'.$name => 'Settings'
  80. ],
  81. 'range_from' => $request->input('from') ?: '',
  82. 'range_to' => $request->input('to') ?: '',
  83. 'range_tz' => $request->input('tz') ?: 'America/Los_Angeles'
  84. ]);
  85. }
  86. public function settings(Request $request, $name) {
  87. if(!session('user_id'))
  88. return redirect('/');
  89. // Only the person that created the database can modify it
  90. $db = DB::table('databases')
  91. ->where('created_by','=',session('user_id'))
  92. ->where('name','=',$name)
  93. ->first();
  94. if(!$db)
  95. return redirect('/');
  96. $users = DB::select('SELECT u.*
  97. FROM users u
  98. JOIN database_users d ON u.id = d.user_id
  99. WHERE d.database_id = ?
  100. ORDER BY u.url', [$db->id]);
  101. return view('settings', [
  102. 'displayURL' => self::displayURL(),
  103. 'database' => $db,
  104. 'users' => $users,
  105. 'menu' => [
  106. '/map/'.$name => 'Map'
  107. ]
  108. ]);
  109. }
  110. public function updateSettings(Request $request, $name) {
  111. if(!session('user_id'))
  112. return redirect('/');
  113. // Only the person that created the database can modify it
  114. $db = DB::table('databases')
  115. ->where('created_by','=',session('user_id'))
  116. ->where('name','=',$name)
  117. ->first();
  118. if(!$db)
  119. return redirect('/');
  120. if($request->input('remove_user')) {
  121. $user = DB::table('users')->where('url','=',$request->input('remove_user'))->first();
  122. if($user) {
  123. DB::table('database_users')->where('database_id','=',$db->id)->where('user_id','=',$user->id)->delete();
  124. }
  125. return response(json_encode([
  126. 'result' => 'ok'
  127. ]))->header('Content-Type', 'application/json');
  128. } else if($request->input('add_user')) {
  129. // Find user if it exists already
  130. $user = DB::table('users')->where('url','=',$request->input('add_user'))->first();
  131. if($user) {
  132. $user_id = $user->id;
  133. } else {
  134. $user_id = DB::table('users')->insertGetId([
  135. 'url' => $request->input('add_user'),
  136. 'created_at' => date('Y-m-d H:i:s')
  137. ]);
  138. }
  139. // Add access to the database
  140. $exists = DB::table('database_users')->where('database_id','=',$db->id)->where('user_id','=',$user_id)->first();
  141. if(!$exists) {
  142. DB::table('database_users')->insert([
  143. 'database_id' => $db->id,
  144. 'user_id' => $user_id,
  145. 'created_at' => date('Y-m-d H:i:s')
  146. ]);
  147. }
  148. return redirect('/settings/'.$db->name);
  149. } else if($request->input('micropub_endpoint')) {
  150. DB::table('databases')->where('id', $db->id)
  151. ->update([
  152. 'micropub_endpoint' => $request->input('micropub_endpoint'),
  153. 'micropub_token' => $request->input('micropub_token'),
  154. ]);
  155. return redirect('/settings/'.$db->name);
  156. }
  157. }
  158. }