Your IP : 216.73.217.80
<?php
/**
* @version 2.2.3
* @package com_vitabook
* @copyright Copyright (C) 2012. All rights reserved.
* @license GNU General Public License version 2 or later; see LICENSE.txt
* @author JoomVita - http://www.joomvita.com
*/
// No direct access.
defined('_JEXEC') or die;
// Import modelform library
jimport('joomla.application.component.modeladmin');
// Import dispatcher
jimport('joomla.event.dispatcher');
/**
* Vitabook model.
*/
class VitabookModelMessage extends JModelAdmin
{
protected $_canDo;
/**
* Constructor.
* @param array $config An optional associative array of configuration settings.
* @see JController
* @since 11.1
*/
public function __construct($config = array())
{
parent::__construct($config);
// Get user permissions
$this->_canDo = VitabookHelper::getActions();
}
/**
* Method to get a single record.
* @param integer $pk The id of the primary key.
* @return mixed Object on success, false on failure.
* @since 11.1
*/
public function getItem($pk = null)
{
// Initialise variables.
$pk = (!empty($pk)) ? $pk : (int) $this->getState($this->getName() . '.id');
$table = $this->getTable();
if ($pk > 0)
{
// Attempt to load the row.
$return = $table->load($pk);
// Check for a table object error.
if ($return === false && $table->getError())
{
$this->setError($table->getError());
return false;
}
}
// Convert to the JObject before adding other data.
$properties = $table->getProperties(1);
$item = JArrayHelper::toObject($properties, 'JObject');
if (property_exists($item, 'params'))
{
$registry = new JRegistry;
$registry->loadString($item->params);
$item->params = $registry->toArray();
}
// get actions
$item->actions = VitabookHelper::messageActions($this->_canDo,$item);
// get avatar
$item->avatar = VitabookHelperAvatar::messageAvatar($item);
// format date
$item->date = VitabookHelper::formatDate($item);
// check ip block
$item->ipblock = VitabookHelper::checkIpBlock($item->ip);
return $item;
}
/**
* Method override to check if you can edit an existing record.
* @param array $data An array of input data.
* @param string $key The name of the key for the primary key.
* @return boolean
* @since 1.7
*/
protected function allowEdit($data = array(), $key = 'id')
{
// Check specific edit permission then general edit permission.
return JFactory::getUser()->authorise('core.edit', 'com_vitabook.message.'.((int) isset($data[$key]) ? $data[$key] : 0))
or parent::allowEdit($data, $key);
}
/**
* Method to test whether a record can be deleted.
* @param object $record A record object.
* @return boolean True if allowed to delete the record. Defaults to the permission for the component.
* @since 11.1
*/
protected function canDelete($record)
{
$messageId = JFactory::getApplication()->input->get('messageId', null, 'int');
// override joomla authorization for admin email links
if(VitabookHelperMail::checkMailHash($messageId,'delete'))
return true;
// proxy to JModelAdmin for normal requests
return parent::canDelete($record);
}
/**
* Method to test whether the state of a record can be changed.
* @param object $record A record object.
* @return boolean True if allowed to change the state of the record. Defaults to the permission for the component.
* @since 11.1
*/
protected function canEditState($record)
{
// override joomla authorization for admin email links
$messageId = JFactory::getApplication()->input->get('messageId', null, 'int');
if(VitabookHelperMail::checkMailHash($messageId,'publish'))
return true;
// proxy to JModelAdmin for normal requests
return parent::canEditState($record);
}
/**
* Returns a reference to the a Table object, always creating it.
* @param type The table type to instantiate
* @param string A prefix for the table class name. Optional.
* @param array Configuration array for model. Optional.
* @return JTable A database object
* @since 1.6
*/
public function getTable($type = 'Message', $prefix = 'VitabookTable', $config = array())
{
return JTable::getInstance($type, $prefix, $config);
}
/**
* Method to get the record form.
* @param array $data An optional array of data for the form to interogate.
* @param boolean $loadData True if the form is to load its own data (default case), false if not.
* @return JForm A JForm object on success, false on failure
* @since 1.6
*/
public function getForm($data = array(), $loadData = true)
{
// Get the form.
$form = $this->loadForm('com_vitabook.message', 'message', array('control' => 'jform', 'load_data' => $loadData));
if (empty($form))
{
return false;
}
// Skip site-field if necessary
if(JFactory::getApplication()->getParams()->get('vbForm_site', 1) == 0)
{
$form->removeField('site');
}
// Skip location-field if necessary
if(JFactory::getApplication()->getParams()->get('vbForm_location', 0) == 0)
{
$form->removeField('location');
}
$user = JFactory::getUser();
$userId = $user->get('id');
// Skip captcha for logged-in users (necessary to prevent validation trouble)
if(!empty($userId))
{
$form->removeField('captcha');
}
// If configured skip captcha for guest also
if(JFactory::getApplication()->getParams()->get('guest_captcha') == 0)
{
$form->removeField('captcha');
}
return $form;
}
/**
* Method to get the data that should be injected in the form.
* @return mixed The data for the form.
* @since 1.6
*/
protected function loadFormData()
{
$data = (object) array();
$user = JFactory::getUser();
//-- Autofill some form fields of new messages for registered users
if(!$user->get('guest'))
{
$data->name = $user->name;
$data->email = $user->email;
}
return $data;
}
/**
* Prepare and sanitise the table prior to saving.
* @since 1.6
*/
protected function prepareTable($table)
{
jimport('joomla.filter.output');
if (empty($table->id))
{
$table->setLocation($table->parent_id, 'last-child');
}
}
/**
* Method to validate the form data. Override JModelForm to preserve youtube and vimeo iframes/div-objects
*
* @param object $form The form to validate against.
* @param array $data The data to validate.
* @param string $group The name of the field group to validate.
* @return mixed Array of filtered data if valid, false otherwise.
* @see JFormRule
* @see JFilterInput
* @since 11.1
*/
public function validate($form, $data, $group = null)
{
// fill in form fields a user can't be trusted with
// for new messages
if(empty($data['id']))
{
$data['date'] = JFactory::getDate('utc')->toSql();
$data['ip']= $_SERVER['REMOTE_ADDR'];
// for logged in users
$user = JFactory::getUser();
if(!$user->get('guest'))
{
$data['jid'] = JFactory::getUser()->get('id');
$data['published'] = 1;
$data['activated'] = 1;
}
// for guests
else
{
if(JFactory::getApplication()->getParams()->get('guest_post_state')){
$data['published'] = 1;
}
if(JFactory::getApplication()->getParams()->get('guest_email_activation') == 0){
$data['activated'] = 1;
}
}
}
// for edited messages
else{
// nothing to do
}
// protect embedded youtube/vimeo iframes from joomla safehtml filtering
// detect iframes
if(JFactory::getUser()->authorise('vitabook.insert.video', 'com_vitabook'))
{
if(strpos($data['message'],'<iframe src="http://www.youtube.com/embed/') !== false || strpos($data['message'],'<iframe src="http://player.vimeo.com/video/') !== false)
{
// initialize variables
$youtube = false;
$vimeo = false;
// store youtube/vimeo video ids
preg_match_all('#(?<=youtube.com\/embed\/)[a-zA-Z0-9_-]+(?=\?wmode)#', $data['message'], $youtube);
preg_match_all('#(?<=player.vimeo.com\/video\/)[\d]+(?=" width)#', $data['message'], $vimeo);
// replace iframes in message with temporary markers
if(!empty($youtube))
{
foreach ($youtube[0] as $key => $videoId):
$pattern = '/<iframe src="http:\/\/www.youtube.com\/embed\/'.$videoId.'\?wmode=opaque" width="350(px)?" height="300(px)?"><\/iframe>/';
$data['message'] = preg_replace($pattern, '##youtube_'.$key, $data['message']);
endforeach;
}
if(!empty($vimeo))
{
foreach ($vimeo[0] as $key => $videoId):
$pattern = '/<iframe src="http:\/\/player.vimeo.com\/video\/'.$videoId.'" width="350(px)?" height="300(px)?"><\/iframe>/';
$data['message'] = preg_replace($pattern, '##vimeo_'.$key, $data['message']);
endforeach;
}
}
}
//TODO: This ugly hack has to go, someday ;-)
// (1/2) ugly hack to make possible that site is edited to be empty. Override for JTable store method ($updateNulls=true) would be preferable, but imposes an unnecessary db-scheme change
if(JFactory::getApplication()->getParams()->get('vbForm_site') && $data['site'] == '')
{
$data['site'] = "http://clear.clr";
}
// Get the data cleaned and validated by proxying the task to JModelForm
$data = parent::validate($form, $data, $group);
// (2/2) ugly hack to make possible that site is edited to be empty. Override for JTable store method ($updateNulls=true) would be preferable, but imposes an unnecessary db-scheme change
if(JFactory::getApplication()->getParams()->get('vbForm_site') && $data['site'] == 'http://clear.clr')
{
$data['site'] = "";
}
// if necessary, restore iframes at the temporary markers
if(!empty($youtube))
{
foreach ($youtube[0] as $key => $videoId):
$pattern = '/(##youtube_'.$key.')/';
$data['message'] = preg_replace($pattern, '<iframe src="http://www.youtube.com/embed/'.$videoId.'?wmode=opaque" width="350px" height="300px"></iframe>', $data['message']);
endforeach;
}
if(!empty($vimeo))
{
foreach ($vimeo[0] as $key => $videoId):
$pattern = '/(##vimeo_'.$key.')/';
$data['message'] = preg_replace($pattern, '<iframe src="http://player.vimeo.com/video/'.$videoId.'" width="350px" height="300px"></iframe>', $data['message']);
endforeach;
}
return $data;
}
/**
* Method to activate a message
*/
public function activate($messageId)
{
$db = $this->getDbo();
$query = $db->getQuery(true);
$query->update('#__vitabook_messages');
$query->set('activated = 1');
$query->where('id = '.$messageId);
$db->setQuery($query);
if(!$db->query()){
return $db->getErrorMsg();
}
return true;
}
}