* * This source file is subject to the GPL-3.0 license that is bundled * with this source code in the file LICENSE. */ namespace controllers\publics; /** * Page des scheduleds. */ class Scheduled extends \descartes\Controller { private $internal_scheduled; private $internal_phone; private $internal_phone_group; private $internal_contact; private $internal_group; private $internal_conditional_group; private $internal_media; /** * Cette fonction est appelée avant toute les autres : * Elle vérifie que l'utilisateur est bien connecté. * * @return void; */ public function __construct() { $bdd = \descartes\Model::_connect(DATABASE_HOST, DATABASE_NAME, DATABASE_USER, DATABASE_PASSWORD); $this->internal_scheduled = new \controllers\internals\Scheduled($bdd); $this->internal_phone = new \controllers\internals\Phone($bdd); $this->internal_phone_group = new \controllers\internals\PhoneGroup($bdd); $this->internal_contact = new \controllers\internals\Contact($bdd); $this->internal_group = new \controllers\internals\Group($bdd); $this->internal_conditional_group = new \controllers\internals\ConditionalGroup($bdd); $this->internal_media = new \controllers\internals\Media($bdd); \controllers\internals\Tool::verifyconnect(); } /** * Cette fonction retourne tous les scheduleds, sous forme d'un tableau permettant l'administration de ces scheduleds. */ public function list() { $this->render('scheduled/list'); } /** * Return scheduleds as json. */ public function list_json() { $entities = $this->internal_scheduled->list_for_user($_SESSION['user']['id']); foreach ($entities as &$entity) { if ($entity['mms']) { $entity['medias'] = $this->internal_media->gets_for_scheduled($entity['id']); } } header('Content-Type: application/json'); echo json_encode(['data' => $entities]); } /** * Cette fonction va supprimer une liste de scheduleds. * * @param array int $_GET['ids'] : Les id des scheduledes à supprimer * @param mixed $csrf * * @return boolean; */ public function delete($csrf) { if (!$this->verify_csrf($csrf)) { \FlashMessage\FlashMessage::push('danger', 'Jeton CSRF invalid !'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } $ids = $_GET['ids'] ?? []; foreach ($ids as $id) { $scheduled = $this->internal_scheduled->get($id); if (!$scheduled || $scheduled['id_user'] !== $_SESSION['user']['id']) { continue; } $this->internal_scheduled->delete_for_user($_SESSION['user']['id'], $id); } return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } /** * Cette fonction retourne la page d'ajout d'un scheduled. * * @param array? int $contacts_ids : Ids of contacts to prefilled * @param array? int $groups_ids : Ids of groups to prefilled * @param array? int $conditional_groups_ids : Ids of conditional groups to prefilled * @param $prefilled : If we have prefilled some fields (possible values : 'contacts', 'groups', 'conditional_groups', false) */ public function add() { $now = new \DateTime(); $less_one_minute = new \DateInterval('PT1M'); $now->sub($less_one_minute); $id_user = $_SESSION['user']['id']; $contacts = $this->internal_contact->gets_for_user($id_user); $phones = $this->internal_phone->gets_for_user($id_user); $phone_groups = $this->internal_phone_group->gets_for_user($id_user); $contact_ids = (isset($_GET['contact_ids']) && \is_array($_GET['contact_ids'])) ? $_GET['contact_ids'] : []; $group_ids = (isset($_GET['group_ids']) && \is_array($_GET['group_ids'])) ? $_GET['group_ids'] : []; $conditional_group_ids = (isset($_GET['conditional_group_ids']) && \is_array($_GET['conditional_group_ids'])) ? $_GET['conditional_group_ids'] : []; $prefilled_contacts = []; $prefilled_groups = []; $prefilled_conditional_groups = []; if ($contact_ids) { foreach ($this->internal_contact->gets_in_for_user($id_user, $contact_ids) as $contact) { $prefilled_contacts[] = $contact['id']; } } elseif ($group_ids) { foreach ($this->internal_group->gets_in_for_user($id_user, $group_ids) as $group) { $prefilled_groups[] = $group['id']; } } elseif ($conditional_group_ids) { foreach ($this->internal_conditional_group->gets_in_for_user($id_user, $conditional_group_ids) as $conditional_group) { $prefilled_conditional_groups[] = $conditional_group['id']; } } $this->render('scheduled/add', [ 'now' => $now->format('Y-m-d H:i'), 'contacts' => $contacts, 'phones' => $phones, 'phone_groups' => $phone_groups, 'prefilled_contacts' => $prefilled_contacts, 'prefilled_groups' => $prefilled_groups, 'prefilled_conditional_groups' => $prefilled_conditional_groups, ]); } /** * Cette fonction retourne la page d'édition des scheduleds. * * @param int... $ids : Les id des scheduledes à supprimer */ public function edit() { $ids = $_GET['ids'] ?? []; if (!$ids) { \FlashMessage\FlashMessage::push('danger', 'Vous devez choisir des messages à mettre à jour !'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } $id_user = $_SESSION['user']['id']; $all_contacts = $this->internal_contact->gets_for_user($_SESSION['user']['id']); $phones = $this->internal_phone->gets_for_user($_SESSION['user']['id']); $phone_groups = $this->internal_phone_group->gets_for_user($id_user); $scheduleds = $this->internal_scheduled->gets_in_for_user($_SESSION['user']['id'], $ids); //Pour chaque message on ajoute les numéros, les contacts & les groups foreach ($scheduleds as $key => $scheduled) { if (!$scheduled || $scheduled['id_user'] !== $_SESSION['user']['id']) { continue; } $scheduleds[$key]['numbers'] = []; $scheduleds[$key]['contacts'] = []; $scheduleds[$key]['groups'] = []; $scheduleds[$key]['conditional_groups'] = []; $numbers = $this->internal_scheduled->get_numbers($scheduled['id']); foreach ($numbers as $number) { $number['data'] = json_decode($number['data'] ?? '[]'); $scheduleds[$key]['numbers'][] = $number; } $contacts = $this->internal_scheduled->get_contacts($scheduled['id']); foreach ($contacts as $contact) { $scheduleds[$key]['contacts'][] = (int) $contact['id']; } $groups = $this->internal_scheduled->get_groups($scheduled['id']); foreach ($groups as $group) { $scheduleds[$key]['groups'][] = (int) $group['id']; } $medias = $this->internal_media->gets_for_scheduled($scheduled['id']); $scheduleds[$key]['medias'] = $medias; $conditional_groups = $this->internal_scheduled->get_conditional_groups($scheduled['id']); foreach ($conditional_groups as $conditional_group) { $scheduleds[$key]['conditional_groups'][] = (int) $conditional_group['id']; } } $this->render('scheduled/edit', [ 'scheduleds' => $scheduleds, 'phones' => $phones, 'phone_groups' => $phone_groups, 'contacts' => $all_contacts, ]); } /** * Create a new scheduled message * (you must provide at least one entry in any of numbers, contacts, groups or conditional_groups). * * @param $csrf : Le jeton CSRF * @param string $_POST['at'] : Date to send message for * @param string $_POST['text'] : Text of the message * @param ?bool $_POST['flash'] : Is the message a flash message (by default false) * @param ?int $_POST['id_phone'] : Id of the phone or phone group to send message from. id will be preceed by phone_ of phonegroup_ depending on type of ressource to use, if null use random phone * @param ?array $_POST['numbers'] : Numbers to send the message to * @param ?array $_POST['contacts'] : Numbers to send the message to * @param ?array $_POST['groups'] : Numbers to send the message to * @param ?array $_POST['conditional_groups'] : Numbers to send the message to * @param ?array $_FILES['medias'] : The media to link to a scheduled */ public function create($csrf) { if (!$this->verify_csrf($csrf)) { \FlashMessage\FlashMessage::push('danger', 'Jeton CSRF invalid !'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } $id_user = $_SESSION['user']['id']; $at = $_POST['at'] ?? false; $text = $_POST['text'] ?? false; $flash = (bool) ($_POST['flash'] ?? false); $tag = ($_POST['tag'] ?? null) ?: null; $id_phone = empty($_POST['id_phone']) ? null : $_POST['id_phone']; $numbers = $_POST['numbers'] ?? []; $numbers = is_array($numbers) ? $numbers : [$numbers]; $contacts = $_POST['contacts'] ?? []; $groups = $_POST['groups'] ?? []; $conditional_groups = $_POST['conditional_groups'] ?? []; $files = $_FILES['medias'] ?? false; $csv_file = $_FILES['csv'] ?? false; //Iterate over files to re-create individual $_FILES array $files_arrays = []; if ($files && is_array($files['name'])) { foreach ($files as $property_name => $files_values) { foreach ($files_values as $file_key => $property_value) { if (!isset($files_arrays[$file_key])) { $files_arrays[$file_key] = []; } $files_arrays[$file_key][$property_name] = $property_value; } } } //Remove empty files input foreach ($files_arrays as $key => $file) { if (UPLOAD_ERR_NO_FILE === $file['error']) { unset($files_arrays[$key]); } } //Remove empty csv file input if ($csv_file && UPLOAD_ERR_NO_FILE === $csv_file['error']) { $csv_file = false; } if (empty($text)) { \FlashMessage\FlashMessage::push('danger', 'Vous ne pouvez pas créer un Sms sans message.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (empty($at)) { \FlashMessage\FlashMessage::push('danger', 'Vous ne pouvez pas créer un Sms sans date.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!is_string($at)) { \FlashMessage\FlashMessage::push('danger', 'La date doit être valide.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!is_string($text)) { \FlashMessage\FlashMessage::push('danger', 'Votre message doit être un texte.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (mb_strlen($text) > \models\Scheduled::SMS_LENGTH_LIMIT) { \FlashMessage\FlashMessage::push('danger', 'Votre message doit faire moins de ' . \models\Scheduled::SMS_LENGTH_LIMIT . ' caractères.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!\controllers\internals\Tool::validate_date($at, 'Y-m-d H:i:s') && !\controllers\internals\Tool::validate_date($at, 'Y-m-d H:i')) { \FlashMessage\FlashMessage::push('danger', 'Vous devez fournir une date valide.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if ($csv_file) { $uploaded_file = \controllers\internals\Tool::read_uploaded_file($csv_file); if (!$uploaded_file['success']) { \FlashMessage\FlashMessage::push('danger', 'Impossible de traiter ce fichier CSV : ' . $uploaded_file['content']); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } try { $csv_numbers = $this->internal_scheduled->parse_csv_numbers_file($uploaded_file['content']); if (!$csv_numbers) { \FlashMessage\FlashMessage::push('danger', 'Aucun destinataire valide dans le fichier CSV, assurez-vous de fournir un fichier CSV valide.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } $numbers = array_merge($csv_numbers, $numbers); } catch (\Exception $e) { \FlashMessage\FlashMessage::push('danger', 'Impossible de traiter ce fichier CSV : ' . $e->getMessage()); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } } foreach ($numbers as $key => $number) { // If number is not an array turn it into an array $number = is_array($number) ? $number : ['number' => $number, 'data' => []]; $number['data'] = $number['data'] ?? []; $number['number'] = \controllers\internals\Tool::parse_phone($number['number'] ?? ''); if (!$number['number']) { unset($numbers[$key]); continue; } $clean_data = []; foreach ($number['data'] as $data_key => $value) { if ('' === $value) { continue; } $data_key = mb_ereg_replace('[\W]', '', $data_key); $clean_data[$data_key] = (string) $value; } $clean_data = json_encode($clean_data); $number['data'] = $clean_data; $numbers[$key] = $number; } if (!$numbers && !$contacts && !$groups && !$conditional_groups) { \FlashMessage\FlashMessage::push('danger', 'Vous devez renseigner au moins un destinataire pour le Sms.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } //If mms is enable and we have medias uploaded $media_ids = []; if ($_SESSION['user']['settings']['mms'] && $files_arrays) { foreach ($files_arrays as $file) { try { $new_media_id = $this->internal_media->create_from_uploaded_file_for_user($_SESSION['user']['id'], $file); } catch (\Exception $e) { \FlashMessage\FlashMessage::push('danger', 'Impossible d\'upload et d\'enregistrer le fichier ' . $file['name'] . ':' . $e->getMessage()); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } $media_ids[] = $new_media_id; } } $mms = (bool) count($media_ids); // Check if we must send message to a phone or a phone_group based on if id_phone start with 'phone_' or 'phonegroup_' $original_id_phone = $id_phone; $id_phone = str_starts_with($original_id_phone, 'phone_') ? mb_substr($original_id_phone, mb_strlen('phone_')) : null; $id_phone_group = str_starts_with($original_id_phone, 'phonegroup_') ? mb_substr($original_id_phone, mb_strlen('phonegroup_')) : null; $scheduled_id = $this->internal_scheduled->create($id_user, $at, $text, $id_phone, $id_phone_group, $flash, $mms, $tag, $numbers, $contacts, $groups, $conditional_groups, $media_ids); if (!$scheduled_id) { \FlashMessage\FlashMessage::push('danger', 'Impossible de créer le Sms.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } \FlashMessage\FlashMessage::push('success', 'Le Sms a bien été créé pour le ' . $at . '.'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } /** * Cette fonction met à jour un scheduled. * * @param $csrf : Le jeton CSRF * @param array $_POST['scheduleds'] : Un tableau des scheduledes avec leur nouvelle valeurs + les numbers, contacts et groups liées * * @return boolean; */ public function update($csrf) { if (!$this->verify_csrf($csrf)) { \FlashMessage\FlashMessage::push('danger', 'Jeton CSRF invalid !'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } $scheduleds = $_POST['scheduleds'] ?? []; $nb_update = 0; foreach ($scheduleds as $id_scheduled => $scheduled) { $id_user = $_SESSION['user']['id']; $at = $scheduled['at'] ?? false; $text = $scheduled['text'] ?? false; $id_phone = empty($scheduled['id_phone']) ? null : $scheduled['id_phone']; $flash = (bool) ($scheduled['flash'] ?? false); $tag = ($scheduled['tag'] ?? null) ?: null; $numbers = $scheduled['numbers'] ?? []; $contacts = $scheduled['contacts'] ?? []; $groups = $scheduled['groups'] ?? []; $conditional_groups = $scheduled['conditional_groups'] ?? []; $files = $_FILES['scheduleds_' . $id_scheduled . '_medias'] ?? false; $csv_file = $_FILES['scheduleds_' . $id_scheduled . '_csv'] ?? false; $media_ids = $scheduled['media_ids'] ?? []; //Check scheduled exists and belong to user $scheduled = $this->internal_scheduled->get($id_scheduled); if (!$scheduled || $scheduled['id_user'] !== $id_user) { continue; } //Iterate over files to re-create individual $_FILES array $files_arrays = []; if ($files && is_array($files['name'])) { foreach ($files as $property_name => $files_values) { foreach ($files_values as $file_key => $property_value) { if (!isset($files_arrays[$file_key])) { $files_arrays[$file_key] = []; } $files_arrays[$file_key][$property_name] = $property_value; } } } //Remove empty files input foreach ($files_arrays as $key => $file) { if (UPLOAD_ERR_NO_FILE === $file['error']) { unset($files_arrays[$key]); } } //Remove empty csv file input if ($csv_file && UPLOAD_ERR_NO_FILE === $csv_file['error']) { $csv_file = false; } if (empty($text)) { continue; } if (empty($at)) { \FlashMessage\FlashMessage::push('danger', 'Vous ne pouvez pas créer un Sms sans date.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!is_string($at)) { \FlashMessage\FlashMessage::push('danger', 'La date doit être valide.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!is_string($text)) { \FlashMessage\FlashMessage::push('danger', 'Votre message doit être un texte.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (mb_strlen($text) > \models\Scheduled::SMS_LENGTH_LIMIT) { \FlashMessage\FlashMessage::push('danger', 'Votre message doit faire moins de ' . \models\Scheduled::SMS_LENGTH_LIMIT . ' caractères.'); return $this->redirect(\descartes\Router::url('Scheduled', 'add')); } if (!\controllers\internals\Tool::validate_date($at, 'Y-m-d H:i:s') && !\controllers\internals\Tool::validate_date($at, 'Y-m-d H:i')) { continue; } if ($csv_file) { $uploaded_file = \controllers\internals\Tool::read_uploaded_file($csv_file); if (!$uploaded_file['success']) { continue; } try { $csv_numbers = $this->internal_scheduled->parse_csv_numbers_file($uploaded_file['content']); if (!$csv_numbers) { continue; } $numbers = array_merge($csv_numbers, $numbers); } catch (\Exception $e) { continue; } } $numbers = is_array($numbers) ? $numbers : [$numbers]; foreach ($numbers as $key => $number) { // If number is not an array turn it into an array $number = is_array($number) ? $number : ['number' => $number, 'data' => []]; $number['data'] = $number['data'] ?? []; $number['number'] = \controllers\internals\Tool::parse_phone($number['number'] ?? ''); if (!$number['number']) { unset($numbers[$key]); continue; } $clean_data = []; foreach ($number['data'] as $data_key => $value) { if ('' === $value) { continue; } $data_key = mb_ereg_replace('[\W]', '', $data_key); $clean_data[$data_key] = (string) $value; } $clean_data = json_encode($clean_data); $number['data'] = $clean_data; $numbers[$key] = $number; } if (!$numbers && !$contacts && !$groups && !$conditional_groups) { continue; } //If mms is enable and we have medias uploaded if ($_SESSION['user']['settings']['mms'] && $files_arrays) { foreach ($files_arrays as $file) { try { $new_media_id = $this->internal_media->create_from_uploaded_file_for_user($_SESSION['user']['id'], $file); } catch (\Exception $e) { continue 2; } $media_ids[] = $new_media_id; } } //Ensure media_ids point to medias belongings to the current user foreach ($media_ids as $key => $media_id) { $media = $this->internal_media->get($media_id); if (!$media || $media['id_user'] !== $_SESSION['user']['id']) { unset($media_ids[$key]); } } $mms = (bool) count($media_ids); $original_id_phone = $id_phone; $id_phone = str_starts_with($original_id_phone, 'phone_') ? mb_substr($original_id_phone, mb_strlen('phone_')) : null; $id_phone_group = str_starts_with($original_id_phone, 'phonegroup_') ? mb_substr($original_id_phone, mb_strlen('phonegroup_')) : null; $this->internal_scheduled->update_for_user($id_user, $id_scheduled, $at, $text, $id_phone, $id_phone_group, $flash, $mms, $tag, $numbers, $contacts, $groups, $conditional_groups, $media_ids); ++$nb_update; } if ($nb_update !== \count($scheduleds)) { \FlashMessage\FlashMessage::push('danger', 'Certains SMS n\'ont pas été mis à jour.'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } \FlashMessage\FlashMessage::push('success', 'Tous les SMS ont été mis à jour.'); return $this->redirect(\descartes\Router::url('Scheduled', 'list')); } }