Files
Phraseanet/lib/Alchemy/Phrasea/Model/Repositories/StoryWZRepository.php
jygaulier e7027c7220 PHRAS-3800_xss (#4219)
* add encode option to record::get_title ; render preview.record_title in twig

* html-escape facet values
2023-03-15 11:05:34 +01:00

175 lines
4.9 KiB
PHP

<?php
/*
* This file is part of Phraseanet
*
* (c) 2005-2014 Alchemy
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
namespace Alchemy\Phrasea\Model\Repositories;
use Alchemy\Phrasea\Application;
use Alchemy\Phrasea\Model\Entities\StoryWZ;
use Alchemy\Phrasea\Model\Entities\User;
use Doctrine\ORM\EntityRepository;
use record_adapter;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
/**
* StoryWZRepository
*
* This class was generated by the Doctrine ORM. Add your own custom
* repository methods below.
*/
class StoryWZRepository extends EntityRepository
{
public function findByUser(Application $app, User $user, $sort)
{
$dql = 'SELECT s FROM Phraseanet:StoryWZ s WHERE s.user = :user ';
if ($sort == 'date') {
$dql .= ' ORDER BY s.created DESC';
}
$query = $this->_em->createQuery($dql);
$query->setParameters(['user' => $user]);
$stories = $query->getResult();
foreach ($stories as $key => $story) {
try {
$story->getRecord($app)->get_title();
} catch (NotFoundHttpException $e) {
$this->getEntityManager()->remove($story);
unset($stories[$key]);
}
}
$this->getEntityManager()->flush();
if ($sort == 'name') {
$sortedStories = [];
foreach ($stories as $story) {
$sortedStories[] = $story->getRecord($app)->get_title();
}
uasort($sortedStories, function ($a, $b) {
if ($a == $b) {
return 0;
}
return ($a < $b) ? -1 : 1;
});
foreach ($sortedStories as $idStory => $titleStory) {
$sortedStories[$idStory] = $stories[$idStory];
}
}
return $stories;
}
public function findByUserAndId(Application $app, User $user, $id)
{
$story = $this->find($id);
if ($story) {
try {
$story->getRecord($app)->get_title(['encode'=> record_adapter::ENCODE_NONE]);
} catch (NotFoundHttpException $e) {
$this->getEntityManager()->remove($story);
throw new NotFoundHttpException('Story not found');
}
if ($story->getUser()->getId() !== $user->getId()) {
throw new AccessDeniedHttpException('You have not access to ths story');
}
} else {
throw new NotFoundHttpException('Story not found');
}
return $story;
}
public function findUserStory(Application $app, User $user, record_adapter $Story)
{
$story = $this->findOneBy([
'user' => $user->getId(),
'sbas_id' => $Story->getDataboxId(),
'record_id' => $Story->getRecordId(),
]);
if ($story) {
try {
$story->getRecord($app);
} catch (NotFoundHttpException $e) {
$this->getEntityManager()->remove($story);
$this->getEntityManager()->flush();
$story = null;
}
}
return $story;
}
/**
* @param Application $app
* @param record_adapter $Story
* @return StoryWZ[]
*/
public function findByRecord(Application $app, record_adapter $Story)
{
$dql = 'SELECT s FROM Phraseanet:StoryWZ s
WHERE s.sbas_id = :sbas_id
AND s.record_id = :record_id';
$query = $this->_em->createQuery($dql);
$query->setParameters([
'sbas_id' => $Story->getDataboxId(),
'record_id' => $Story->getRecordId(),
]);
/** @var StoryWZ[] $stories */
$stories = $query->getResult();
foreach ($stories as $key => $story) {
try {
$story->getRecord($app);
} catch (NotFoundHttpException $e) {
$this->getEntityManager()->remove($story);
$this->getEntityManager()->flush();
unset($stories[$key]);
}
}
return $stories;
}
public function findByDatabox(Application $app, \databox $databox)
{
$dql = 'SELECT s FROM Phraseanet:StoryWZ s WHERE s.sbas_id = :sbas_id';
$query = $this->_em->createQuery($dql);
$query->setParameters(['sbas_id' => $databox->get_sbas_id(),]);
$stories = $query->getResult();
foreach ($stories as $key => $story) {
try {
$story->getRecord($app);
} catch (NotFoundHttpException $e) {
$this->getEntityManager()->remove($story);
$this->getEntityManager()->flush();
unset($stories[$key]);
}
}
return $stories;
}
}