tiki-admin_categories.php

<?php
/**
 * @package tikiwiki
 */
// (c) Copyright 2002-2016 by authors of the Tiki Wiki CMS Groupware Project
// 
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id$

require_once ('tiki-setup.php');
$categlib = TikiLib::lib('categ');

@ini_set('max_execution_time', 0);	// as pagination is broken and almost every object gets fully loaded on this page
@ini_set('memory_limit', -1);		// at least try and avoid WSoD on large sites (TODO better still - see r30064)

$access->check_feature('feature_categories');
// Check for parent category or set to 0 if not present
if (!empty($_REQUEST['parentId']) && !($info = $categlib->get_category($_REQUEST['parentId']))) {
	$smarty->assign('msg', 'Incorrect param'.' parentId');
	$smarty->display('error.tpl');
	die;
}	

if (!isset($_REQUEST['parentId'])) {
	$_REQUEST['parentId'] = 0;
}
$smarty->assign('parentId', $_REQUEST['parentId']);


$access->check_permission('tiki_p_admin_categories', '', 'category', $_REQUEST['parentId']);

if (!empty($_REQUEST['unassign'])) {
	$access->check_authenticity(tra('Are you sure you want to unassign the objects of this category: ') . $info['name']);
	$categlib->unassign_all_objects($_REQUEST['parentId']);
}
if (!empty($_REQUEST['move_to']) && !empty($_REQUEST['toId'])) {
	check_ticket('admin-categories');
	if (!$categlib->get_category($_REQUEST['toId'])) {
		$smarty->assign('msg', 'Incorrect param'.' toId');
		$smarty->display('error.tpl');
		die;
	}
	$access->check_permission('tiki_p_admin_categories', '', 'category', $_REQUEST['toId']);
	$categlib->move_all_objects($_REQUEST['parentId'], $_REQUEST['toId']);
}
if (!empty($_REQUEST['copy_from']) && !empty($_REQUEST['to'])) {
	check_ticket('admin-categories');
	if (!$categlib->get_category($_REQUEST['to'])) {
		$smarty->assign('msg', 'Incorrect param'.' fromId');
		$smarty->display('error.tpl');
		die;
	}
	$access->check_permission('tiki_p_admin_categories', '', 'category', $_REQUEST['to']);
	$categlib->assign_all_objects($_REQUEST['parentId'], $_REQUEST['to']);
}
if (isset($_REQUEST["addpage"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a page
	// add multiple pages at once
	foreach ($_REQUEST['pageName'] as $value) {
		$categlib->categorize_any('wiki page', $value, $_REQUEST["parentId"]);
		$category = $categlib->get_category($_REQUEST["parentId"]);
		$categorizedObject = $categlib->get_categorized_object('wiki page', $value);
		// Notify the users watching this category.
		$values = array(
			"categoryId" => $_REQUEST["parentId"],
			"categoryName" => $category['name'],
			"categoryPath" => $categlib->get_category_path_string_with_root($_REQUEST["parentId"]) ,
			"description" => $category['description'],
			"parentId" => $category['parentId'],
			"parentName" => $categlib->get_category_name($category['parentId']) ,
			"action" => "object entered category",
			"objectName" => $categorizedObject['name'],
			"objectType" => $categorizedObject['type'],
			"objectUrl" => $categorizedObject['href']
		);
		$categlib->notify($values);
	}
}
if (isset($_REQUEST["addpoll"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a poll
	$categlib->categorize_any('poll', $_REQUEST["pollId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('poll', $_REQUEST["pollId"]);
}
if (isset($_REQUEST["addfaq"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a faq
	$categlib->categorize_any('faq', $_REQUEST["faqId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('faq', $_REQUEST["faqId"]);
}
if (isset($_REQUEST["addtracker"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a tracker
	$categlib->categorize_any('tracker', $_REQUEST["trackerId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('tracker', $_REQUEST["trackerId"]);
}
if (isset($_REQUEST["addquiz"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a quiz
	$categlib->categorize_any('quiz', $_REQUEST["quizId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('quiz', $_REQUEST["quizId"]);
}
if (isset($_REQUEST["addforum"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a forum
	$categlib->categorize_any('forum', $_REQUEST["forumId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('forum', $_REQUEST["forumId"]);
}
if (isset($_REQUEST["addgallery"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize an image gallery
	$categlib->categorize_any('image gallery', $_REQUEST["galleryId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('image gallery', $_REQUEST["galleryId"]);
}
if (isset($_REQUEST["addfilegallery"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a file gallery
	$categlib->categorize_any('file gallery', $_REQUEST["file_galleryId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('file gallery', $_REQUEST["file_galleryId"]);
}
if (isset($_REQUEST["addarticle"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize an article
	$categlib->categorize_any('article', $_REQUEST["articleId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('article', $_REQUEST["articleId"]);
}
if (isset($_REQUEST["addblog"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a blog
	$categlib->categorize_any('blog', $_REQUEST["blogId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('blog', $_REQUEST["blogId"]);
}
if (isset($_REQUEST["adddirectory"]) && $_REQUEST["parentId"] != 0) {
	check_ticket('admin-categories');
	// Here we categorize a directory category
	$categlib->categorize_any('directory', $_REQUEST["directoryId"], $_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object('directory', $_REQUEST["directoryId"]);
}
if (isset($categorizedObject) && !isset($_REQUEST["addpage"])) {
	$category = $categlib->get_category($_REQUEST["parentId"]);
	// Notify the users watching this category.
	$values = array(
		"categoryId" => $_REQUEST["parentId"],
		"categoryName" => $category['name'],
		"categoryPath" => $categlib->get_category_path_string_with_root($_REQUEST["parentId"]) ,
		"description" => $category['description'],
		"parentId" => $category['parentId'],
		"parentName" => $categlib->get_category_name($category['parentId']) ,
		"action" => "object entered category",
		"objectName" => $categorizedObject['name'],
		"objectType" => $categorizedObject['type'],
		"objectUrl" => $categorizedObject['href']
	);
	$categlib->notify($values);
}
if (!empty($_REQUEST["categId"])) {
	$access->check_permission('tiki_p_admin_categories', '', 'category', $_REQUEST['categId']);
	$info = $categlib->get_category($_REQUEST["categId"]);
} else {
	$_REQUEST["categId"] = 0;
	$info["name"] = '';
	$info["description"] = '';
}
if (isset($_REQUEST["removeObject"])) {
	$access->check_authenticity();
	$category = $categlib->get_category($_REQUEST["parentId"]);
	$categorizedObject = $categlib->get_categorized_object_via_category_object_id($_REQUEST["removeObject"]);
	$categlib->remove_object_from_category($_REQUEST["removeObject"], $_REQUEST["parentId"]);
	// Notify the users watching this category.
	$values = array(
		"categoryId" => $_REQUEST["parentId"],
		"categoryName" => $category['name'],
		"categoryPath" => $categlib->get_category_path_string_with_root($_REQUEST["parentId"]) ,
		"description" => $category['description'],
		"parentId" => $category['parentId'],
		"parentName" => $categlib->get_category_name($category['parentId']) ,
		"action" => "object leaved category",
		"objectName" => $categorizedObject['name'],
		"objectType" => $categorizedObject['type'],
		"objectUrl" => $categorizedObject['href']
	);
	$categlib->notify($values);

	// update search index if required
	require_once 'lib/search/refresh-functions.php';
	refresh_index($categorizedObject['type'], $categorizedObject['itemId']);
}
if (isset($_REQUEST["removeCat"]) && ($info = $categlib->get_category($_REQUEST['removeCat']))) {
	$access->check_permission('tiki_p_admin_categories', '', 'category', $_REQUEST['removeCat']);
	$access->check_authenticity(tra('Click here to delete the category:') . ' ' . $info['name']);
	$categlib->remove_category($_REQUEST["removeCat"]);
}
if (isset($_REQUEST["save"]) && isset($_REQUEST["name"]) && strlen($_REQUEST["name"]) > 0) {
	check_ticket('admin-categories');
	// Save
	if ($_REQUEST["categId"]) {
		if ($_REQUEST['parentId'] == $_REQUEST['categId']) {
			$smarty->assign('msg', tra("Category can`t be parent of itself"));
			$smarty->display("error.tpl");
			die;
		}

		try {
			$categlib->update_category($_REQUEST["categId"], $_REQUEST["name"], $_REQUEST["description"], $_REQUEST["parentId"]);
			if ($tiki_p_admin_categories == 'y' && !empty($_REQUEST['parentPerms'])) {
				$userlib->remove_object_permission('', $_REQUEST['categId'], 'category', '');
				$userlib->copy_object_permissions($_REQUEST['parentId'], $_REQUEST['categId'], 'category');
			}
		} catch(Exception $e) {
			$errors['mes'] = $e->getMessage();
		}
	} else {
		try {
			$newcategId = $categlib->add_category($_REQUEST["parentId"], $_REQUEST["name"], $_REQUEST["description"]);
			if ($tiki_p_admin_categories != 'y' || !empty($_REQUEST['parentPerms'])) {
				$userlib->copy_object_permissions($_REQUEST['parentId'], $newcategId, 'category');
			}
		} catch(Exception $e) {
			$errors['mes'] = $e->getMessage();
		}
	}
	$info["name"] = '';
	$info["description"] = '';
	$_REQUEST["categId"] = 0;
}
if (isset($_REQUEST['import']) && isset($_FILES['csvlist']['tmp_name'])) {
	check_ticket('admin-categories');
	$fhandle = fopen($_FILES['csvlist']['tmp_name'], 'r');
	if (!$fhandle) {
		$smarty->assign('msg', tra("The file has incorrect syntax or is not a CSV file"));
		$smarty->display("error.tpl");
		die;
	}
	$fields = fgetcsv($fhandle, 1000);
	if (!$fields[0]) {
		$smarty->assign('msg', tra('The file has incorrect syntax or is not a CSV file'));
		$smarty->display('error.tpl');
		die;
	}
	if ($fields[0] != 'category' || $fields[1] != 'description' || $fields[2] != 'parent') {
		$smarty->assign('msg', tra('The file does not have the required header:') . ' category, description, parent');
		$smarty->display('error.tpl');
		die;
	}
	while (!feof($fhandle)) {
		$data = fgetcsv($fhandle, 1000);
		if (!empty($data)) {
			$temp_max = count($fields);
			if ($temp_max > 1 && strtolower($data[2]) != 'top' && !empty($data[2])) {
				$parentId = $categlib->get_category_id($data[2]);
				if (empty($parentId)) {
					$smarty->assign('msg', tra('Incorrect param') . ' ' . $data[2]);
					$smarty->display('error.tpl');
					die;
				}
				$access->check_permission('tiki_p_admin_categories', '', 'category', $parentId);
			} else {
				$access->check_permission('tiki_p_admin_categories');
				$parentId = 0;
			}
			if (!$categlib->exist_child_category($parentId, $data[0])) {
				$newcategId = $categlib->add_category($parentId, $data[0], $data[1]);
				if (empty($newcategId)) {
					$smarty->assign('msg', tra('Incorrect param') . ' ' . $data[0]);
					$smarty->display('error.tpl');
					die;
				}
				if ($tiki_p_admin_categories != 'y') {
					$userlib->copy_object_permissions($parentId, $newcategId, 'category');
				}
			}
		}
	}
}
$smarty->assign('categId', $_REQUEST["categId"]);
$smarty->assign('categoryName', $info["name"]);
$smarty->assign('description', $info["description"]);
// If the parent category is not zero get the category path
if ($_REQUEST["parentId"]) {
	$p_info = $categlib->get_category($_REQUEST["parentId"]);
	$father = $p_info["parentId"];
	$smarty->assign('categ_name', $p_info['name']);
	$smarty->assign('path', $p_info['tepath']);
} else {
	$father = 0;
}
$smarty->assign('father', $father);

// ---------------------------------------------------

$categories = $categlib->getCategories(NULL, false);
if (empty($categories) && $tiki_p_admin_categories != 'y') {
	$access->check_permission('tiki_p_admin_categories');
}
$smarty->assign('categories', $categories);

$treeNodes = array();
$smarty->loadPlugin('smarty_function_icon');
$smarty->loadPlugin('smarty_function_popup');
$smarty->loadPlugin('smarty_function_permission_link');
foreach ($categories as $category) {
	$perms = Perms::get(array('type' => 'category', 'object' => $category['categId']));
	if ($perms->admin_categories == 'y') {
		$data = '<a href="tiki-admin_categories.php?parentId=' . $category['parentId'] . '&amp;categId='
			. $category['categId'] . '">' . smarty_function_icon(array('name'=>'edit', '_menu_text' => 'y',
				'_menu_icon' => 'y', 'alt' =>  tra('Edit')), $smarty) . '</a>';
		$data .= '<a href="tiki-admin_categories.php?parentId=' . $category['parentId'] . '&amp;removeCat='
			. $category['categId'] . '">' . smarty_function_icon(array('name'=>'remove', '_menu_text' => 'y',
				'_menu_icon' => 'y', 'alt' =>  tra('Delete')), $smarty) . '</a>';

		if ($userlib->object_has_one_permission($category['categId'], 'category')) {
			$title = tra('Edit permissions for this category');
		} else {
			$title = tra('Assign permissions');
		}
		$data .= smarty_function_permission_link([
			'id'=> $category['categId'],
			'type' => 'category',
			'mode' => 'text',
		], $smarty);
		$escapeddata = htmlspecialchars(strtr($data, array("\\" => "\\\\", "'" => "\\'", "\"" => "\\\"", "\r" => "\\r",
			"\n" => "\\n", "</" => "<\/" )), ENT_QUOTES, 'UTF-8', true);
		$popupparams = ['trigger' => 'click', 'fullhtml' => 1, 'center' => true, 'text' =>  $escapeddata];
		$newdata =  '<a class="tips" title="' . tra('Actions') . '" href="#" '. smarty_function_popup( $popupparams, $smarty)
		. 'style="padding:0; margin:0; border:0">' . smarty_function_icon(['name'=> 'wrench'], $smarty) . '</a>';

		$catlink = '<a class="catname" href="tiki-admin_categories.php?parentId=' . $category["categId"] .
			'" style="margin-left:5px">' . htmlspecialchars($category['name']) .'</a> ';
		$treeNodes[] = array(
			'id' => $category['categId'],
			'parent' => $category['parentId'],
			'data' => $newdata . $catlink
		);
	}
}
include_once ('lib/tree/BrowseTreeMaker.php');
$treeMaker = new BrowseTreeMaker('categ');
$smarty->assign('tree', $treeMaker->make_tree(0, $treeNodes));

if (!isset($_REQUEST["sort_mode"])) {
	$sort_mode = 'name_asc';
} else {
	$sort_mode = $_REQUEST["sort_mode"];
}
$smarty->assign('sort_mode', $sort_mode);
if (!isset($_REQUEST["offset"])) {
	$offset = 0;
} else {
	$offset = $_REQUEST["offset"];
}
$smarty->assign('offset', $offset);
if (isset($_REQUEST["find"])) {
	$find = $_REQUEST["find"];
} else {
	$find = '';
}
$smarty->assign('find', $find);
if (isset($_REQUEST["find_objects"])) {
	$find_objects = $_REQUEST["find_objects"];
} else {
	$find_objects = '';
}

// ---------------------------------------------------
if ($prefs['feature_search'] !== 'y' || $prefs['unified_add_to_categ_search'] !== 'y') {	// no unified search

	@ini_set('max_execution_time', 0);	// as pagination is broken and almost every object gets fully loaded on this page
	@ini_set('memory_limit', -1);		// at least try and avoid WSoD on large sites (TODO better still - see r30064)

	/**
	 * @param $max
	 * @param $data_key
	 * @param null $data
	 */
	function admin_categ_assign( &$max, $data_key, $data = null )
	{
		$smarty = TikiLib::lib('smarty');

		if ( is_null($data) ) {
			$data = array( 'data' => array(), 'cant' => 0 );
		}

		$smarty->assign($data_key, $data['data']);
		$smarty->assign('cant_' . $data_key, $data['cant']);

		$max = max($max, $data['cant']);
	}

	$articles = $galleries = $file_galleries = $forums = $polls = $blogs = $pages = $faqs = $quizzes = $trackers = $directories = $objects = null;

	$maxRecords = $prefs['maxRecords'];

	$smarty->assign('find_objects', $find_objects);
	$smarty->assign('sort_mode', $sort_mode);
	$smarty->assign('find', $find);

	$objects = $categlib->list_category_objects($_REQUEST["parentId"], $offset, $maxRecords, $sort_mode, '', $find, false);

	if ( $prefs['feature_galleries'] == 'y' ) {
		$galleries = $tikilib->list_galleries($offset, -1, 'name_desc', 'admin', $find_objects);
	}

	if ( $prefs['feature_file_galleries'] == 'y' ) {
		$filegallib = TikiLib::lib('filegal');
		$file_galleries = $filegallib->list_file_galleries($offset, -1, 'name_desc', 'admin', $find_objects, $prefs['fgal_root_id']);
	}

	if ( $prefs['feature_forums'] == 'y' ) {
		$commentslib = TikiLib::lib('comments');
		$forums = $commentslib->list_forums($offset, -1, 'name_asc', $find_objects);
	}

	if ( $prefs['feature_polls'] == 'y' ) {
		$polllib = TikiLib::lib('poll');
		$polls = $polllib->list_polls($offset, $maxRecords, 'title_asc', $find_objects);
	}

	if ( $prefs['feature_blogs'] == 'y' ) {
		$bloglib = TikiLib::lib('blog');
		$blogs = $bloglib->list_blogs($offset, -1, 'title_asc', $find_objects);
	}

	if ( $prefs['feature_wiki'] == 'y' ) {
		$pages = $tikilib->list_pageNames($offset, -1, 'pageName_asc', $find_objects);
		//TODO for all other object types
		$pages_not_in_cat = array();
		foreach ($pages['data'] as $pg) {
			$found = false;
			foreach ($objects['data'] as $obj) {
				if ($obj['type'] == 'wiki page' && $obj['itemId'] == $pg['pageName']) {
					$found = true;
					break;
				}
			}
			if (!$found) {
				$pages_not_in_cat[] = $pg;
			}
		}
		$pages['cant'] = $pages['cant']- count($pages['data']) + count($pages_not_in_cat);
		$pages['data'] = $pages_not_in_cat;
	}

	if ( $prefs['feature_faqs'] == 'y' ) {
		$faqlib = TikiLib::lib('faq');
		$faqs = $faqlib->list_faqs($offset, -1, 'title_asc', $find_objects);
	}

	if ( $prefs['feature_quizzes'] == 'y' ) {
		$quizzes = TikiLib::lib('quiz')->list_quizzes($offset, -1, 'name_asc', $find_objects);
	}

	if ( $prefs['feature_trackers'] == 'y' ) {
		$trklib = TikiLib::lib('trk');
		$trackers = $trklib->list_trackers($offset, -1, 'name_asc', $find_objects);
	}

	if ( $prefs['feature_articles'] == 'y' ) {
		$artlib = TikiLib::lib('art');
		$articles = $artlib->list_articles($offset, -1, 'title_asc', $find_objects, '', '', $user, '', '', 'n');
	}

	if ( $prefs['feature_directory'] == 'y' ) {
		include_once ('lib/directory/dirlib.php');
		$directories = $dirlib->dir_list_all_categories($offset, $maxRecords, 'name_asc', $find_objects);
	}

	$maximum = 0;
	admin_categ_assign($maximum, 'objects', $objects);
	admin_categ_assign($maximum, 'galleries', $galleries);
	admin_categ_assign($maximum, 'file_galleries', $file_galleries);
	admin_categ_assign($maximum, 'forums', $forums);
	admin_categ_assign($maximum, 'polls', $polls);
	admin_categ_assign($maximum, 'blogs', $blogs);
	admin_categ_assign($maximum, 'pages', $pages);
	admin_categ_assign($maximum, 'faqs', $faqs);
	admin_categ_assign($maximum, 'quizzes', $quizzes);
	admin_categ_assign($maximum, 'trackers', $trackers);
	admin_categ_assign($maximum, 'articles', $articles);
	admin_categ_assign($maximum, 'directories', $directories);

	$smarty->assign('maxRecords', $maxRecords);
	$smarty->assign('offset', $offset);
	$smarty->assign('maximum', $maximum);

} else {	// unified search

	$objects = $categlib->list_category_objects($_REQUEST["parentId"], $offset, $prefs['maxRecords'], $sort_mode, '', $find, false);
	$smarty->assign('objects', $objects['data']);
	$smarty->assign('cant_objects', $objects['cant']);
	$objectlib = TikiLib::lib('object');
	$supportedTypes = array_intersect(  TikiLib::lib('unifiedsearch')->getSupportedTypes(), $objectlib::get_supported_types());
	$smarty->assign('types', $supportedTypes);
}

ask_ticket('admin-categories');
if (!empty($errors)) {
	Feedback::warning($errors);
}
// disallow robots to index page:
$smarty->assign('metatag_robots', 'NOINDEX, NOFOLLOW');
// Display the template
$smarty->assign('mid', 'tiki-admin_categories.tpl');
$smarty->display("tiki.tpl");