pkgfuncs.inc.php 32.8 KB
Newer Older
1
<?php
2
include_once("config.inc.php");
eric's avatar
eric committed
3

4
5
6
# Make sure this visitor can delete the requested package comment
# They can delete if they were the comment submitter, or if they are a TU/Dev
#
7
function canDeleteComment($comment_id=0, $atype="", $uid=0, $dbh=NULL) {
8
9
10
11
	if ($atype == "Trusted User" || $atype == "Developer") {
		# A TU/Dev can delete any comment
		return TRUE;
	}
12
13
14
	if(!$dbh) {
		$dbh = db_connect();
	}
15
16
17
18
	$q = "SELECT COUNT(ID) AS CNT ";
	$q.= "FROM PackageComments ";
	$q.= "WHERE ID = " . intval($comment_id);
	$q.= " AND UsersID = " . $uid;
canyonknight's avatar
canyonknight committed
19
	$result = $dbh->query($q);
20
	if ($result != NULL) {
canyonknight's avatar
canyonknight committed
21
		$row = $result->fetch(PDO::FETCH_ASSOC);
22
23
24
25
26
27
		if ($row['CNT'] > 0) {
			return TRUE;
		}
	}
	return FALSE;
}
eric's avatar
eric committed
28

29
30
31
32
33
34
35
36
37
38
39
40
41
42
# Make sure this visitor can delete the requested package comment
# They can delete if they were the comment submitter, or if they are a TU/Dev
#
function canDeleteCommentArray($comment, $atype="", $uid=0) {
	if ($atype == "Trusted User" || $atype == "Developer") {
		# A TU/Dev can delete any comment
		return TRUE;
	} else if ($comment['UsersID'] == $uid) {
		# User's own comment
		return TRUE;
	}
	return FALSE;
}

43
44
45
46
47
48
49
50
51
52
53
54
# Check if the current user can submit blacklisted packages.
#
function canSubmitBlacklisted($atype = "") {
	if ($atype == "Trusted User" || $atype == "Developer") {
		# Only TUs/Devs can submit blacklisted packages.
		return TRUE;
	}
	else {
		return FALSE;
	}
}

eric's avatar
eric committed
55
56
# grab the current list of PackageCategories
#
57
function pkgCategories($dbh=NULL) {
eric's avatar
eric committed
58
	$cats = array();
59
60
61
	if(!$dbh) {
		$dbh = db_connect();
	}
62
	$q = "SELECT * FROM PackageCategories WHERE ID != 1 ";
eric's avatar
eric committed
63
	$q.= "ORDER BY Category ASC";
canyonknight's avatar
canyonknight committed
64
	$result = $dbh->query($q);
eric's avatar
eric committed
65
	if ($result) {
canyonknight's avatar
canyonknight committed
66
		while ($row = $result->fetch(PDO::FETCH_NUM)) {
eric's avatar
eric committed
67
68
69
70
71
72
			$cats[$row[0]] = $row[1];
		}
	}
	return $cats;
}

73
74
# check to see if the package name exists
#
75
function pkgid_from_name($name="", $dbh=NULL) {
76
	if (!$name) {return NULL;}
77
78
79
	if(!$dbh) {
		$dbh = db_connect();
	}
80
	$q = "SELECT ID FROM Packages ";
canyonknight's avatar
canyonknight committed
81
82
83
84
85
86
	$q.= "WHERE Name = " . $dbh->quote($name);
	$result = $dbh->query($q);
	if (!$result) {
		return;
	}
	$row = $result->fetch(PDO::FETCH_NUM);
87
88
89
	return $row[0];
}

90
91
# grab package dependencies
#
92
function package_dependencies($pkgid, $dbh=NULL) {
93
	$deps = array();
94
95
	$pkgid = intval($pkgid);
	if ($pkgid > 0) {
96
97
98
		if(!$dbh) {
			$dbh = db_connect();
		}
Dan McGee's avatar
Dan McGee committed
99
100
101
102
		$q = "SELECT pd.DepName, pd.DepCondition, p.ID FROM PackageDepends pd ";
		$q.= "LEFT JOIN Packages p ON pd.DepName = p.Name ";
		$q.= "WHERE pd.PackageID = ". $pkgid . " ";
		$q.= "ORDER BY pd.DepName";
canyonknight's avatar
canyonknight committed
103
104
105
106
107
		$result = $dbh->query($q);
		if (!$result) {
			return array();
		}
		while ($row = $result->fetch(PDO::FETCH_NUM)) {
108
109
110
111
112
113
			$deps[] = $row;
		}
	}
	return $deps;
}

114
function package_required($name="", $dbh=NULL) {
115
	$deps = array();
Dan McGee's avatar
Dan McGee committed
116
	if ($name != "") {
117
118
119
		if(!$dbh) {
			$dbh = db_connect();
		}
Dan McGee's avatar
Dan McGee committed
120
121
		$q = "SELECT p.Name, PackageID FROM PackageDepends pd ";
		$q.= "JOIN Packages p ON pd.PackageID = p.ID ";
canyonknight's avatar
canyonknight committed
122
		$q.= "WHERE DepName = " . $dbh->quote($name) . " ";
Dan McGee's avatar
Dan McGee committed
123
		$q.= "ORDER BY p.Name";
canyonknight's avatar
canyonknight committed
124
		$result = $dbh->query($q);
125
		if (!$result) {return array();}
canyonknight's avatar
canyonknight committed
126
		while ($row = $result->fetch(PDO::FETCH_NUM)) {
127
128
129
130
131
132
			$deps[] = $row;
		}
	}
	return $deps;
}

133
# Return the number of comments for a specified package
134
function package_comments_count($pkgid, $dbh=NULL) {
canyonknight's avatar
canyonknight committed
135
136
137
138
	if (!$dbh) {
		$dbh = db_connect();
	}

139
140
	$pkgid = intval($pkgid);
	if ($pkgid > 0) {
141
142
143
		if(!$dbh) {
			$dbh = db_connect();
		}
144
		$q = "SELECT COUNT(*) FROM PackageComments ";
145
		$q.= "WHERE PackageID = " . $pkgid;
146
		$q.= " AND DelUsersID IS NULL";
147
	}
canyonknight's avatar
canyonknight committed
148
	$result = $dbh->query($q);
149
150
151
152
153

	if (!$result) {
		return;
	}

canyonknight's avatar
canyonknight committed
154
155
	$row = $result->fetch(PDO::FETCH_NUM);
	return $row[0];
156
157
158
}

# Return an array of package comments
159
function package_comments($pkgid, $dbh=NULL) {
eric's avatar
eric committed
160
	$comments = array();
161
162
	$pkgid = intval($pkgid);
	if ($pkgid > 0) {
163
164
165
		if(!$dbh) {
			$dbh = db_connect();
		}
166
		$q = "SELECT PackageComments.ID, UserName, UsersID, Comments, CommentTS ";
eric's avatar
eric committed
167
168
		$q.= "FROM PackageComments, Users ";
		$q.= "WHERE PackageComments.UsersID = Users.ID";
169
		$q.= " AND PackageID = " . $pkgid;
170
		$q.= " AND DelUsersID IS NULL"; # only display non-deleted comments
171
		$q.= " ORDER BY CommentTS DESC";
172
173
174
175
176

		if (!isset($_GET['comments'])) {
			$q.= " LIMIT 10";
		}

canyonknight's avatar
canyonknight committed
177
		$result = $dbh->query($q);
Loui Chang's avatar
Loui Chang committed
178
179
180
181
182

		if (!$result) {
			return;
		}

canyonknight's avatar
canyonknight committed
183
		while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
eric's avatar
eric committed
184
185
186
187
188
189
			$comments[] = $row;
		}
	}
	return $comments;
}

190
191
192
# Add a comment to a package page and send out appropriate notifications
# TODO: Move notification logic to separate function where it belongs
function add_package_comment($pkgid, $uid, $comment, $dbh=NULL) {
193
194
	global $AUR_LOCATION;

195
196
197
198
	if(!$dbh) {
		$dbh = db_connect();
	}

canyonknight's avatar
canyonknight committed
199
200
201
202
203
	$q = "INSERT INTO PackageComments ";
	$q.= "(PackageID, UsersID, Comments, CommentTS) VALUES (";
	$q.= intval($pkgid) . ", " . $uid . ", ";
	$q.= $dbh->quote($comment) . ", UNIX_TIMESTAMP())";
	$dbh->exec($q);
204
205

	# Send email notifications
canyonknight's avatar
canyonknight committed
206
207
208
209
210
211
	$q = "SELECT CommentNotify.*, Users.Email ";
	$q.= "FROM CommentNotify, Users ";
	$q.= "WHERE Users.ID = CommentNotify.UserID ";
	$q.= "AND CommentNotify.UserID != " . $uid . " ";
	$q.= "AND CommentNotify.PkgID = " . intval($pkgid);
	$result = $dbh->query($q);
212
213
	$bcc = array();

canyonknight's avatar
canyonknight committed
214
215
	if ($result) {
		while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
216
217
218
			array_push($bcc, $row['Email']);
		}

canyonknight's avatar
canyonknight committed
219
220
221
222
223
		$q = "SELECT Packages.* ";
		$q.= "FROM Packages ";
		$q.= "WHERE Packages.ID = " . intval($pkgid);
		$result = $dbh->query($q);
		$row = $result->fetch(PDO::FETCH_ASSOC);
224
225
226
227
228

		# TODO: native language emails for users, based on their prefs
		# Simply making these strings translatable won't work, users would be
		# getting emails in the language that the user who posted the comment was in
		$body =
229
		'from ' . $AUR_LOCATION . '/' . get_pkg_uri($row['Name']) . "\n"
230
231
232
233
234
235
236
237
238
239
		. username_from_sid($_COOKIE['AURSID'], $dbh) . " wrote:\n\n"
		. $comment
		. "\n\n---\nIf you no longer wish to receive notifications about this package, please go the the above package page and click the UnNotify button.";
		$body = wordwrap($body, 70);
		$bcc = implode(', ', $bcc);
		$headers = "Bcc: $bcc\nReply-to: nobody@archlinux.org\nFrom: aur-notify@archlinux.org\nX-Mailer: AUR\n";
		@mail('undisclosed-recipients: ;', "AUR Comment for " . $row['Name'], $body, $headers);
	}
}

240
241
# grab package sources
#
242
function package_sources($pkgid, $dbh=NULL) {
243
	$sources = array();
244
245
	$pkgid = intval($pkgid);
	if ($pkgid > 0) {
246
247
248
		if(!$dbh) {
			$dbh = db_connect();
		}
249
		$q = "SELECT Source FROM PackageSources ";
250
		$q.= "WHERE PackageID = " . $pkgid;
251
		$q.= " ORDER BY Source";
canyonknight's avatar
canyonknight committed
252
253
254
255
256
		$result = $dbh->query($q);
		if (!$result) {
			return array();
		}
		while ($row = $result->fetch(PDO::FETCH_NUM)) {
257
258
259
260
261
262
			$sources[] = $row[0];
		}
	}
	return $sources;
}

263
264
265

# grab array of Package.IDs that I've voted for: $pkgs[1234] = 1, ...
#
266
function pkgvotes_from_sid($sid="", $dbh=NULL) {
267
268
	$pkgs = array();
	if (!$sid) {return $pkgs;}
269
270
271
	if(!$dbh) {
		$dbh = db_connect();
	}
272
273
274
275
	$q = "SELECT PackageID ";
	$q.= "FROM PackageVotes, Users, Sessions ";
	$q.= "WHERE Users.ID = Sessions.UsersID ";
	$q.= "AND Users.ID = PackageVotes.UsersID ";
canyonknight's avatar
canyonknight committed
276
277
	$q.= "AND Sessions.SessionID = " . $dbh->quote($sid);
	$result = $dbh->query($q);
278
	if ($result) {
canyonknight's avatar
canyonknight committed
279
		while ($row = $result->fetch(PDO::FETCH_NUM)) {
280
281
282
283
284
285
			$pkgs[$row[0]] = 1;
		}
	}
	return $pkgs;
}

286
287
# get name of package based on pkgid
#
288
289
290
291
function pkgname_from_id($pkgids, $dbh=NULL) {
	if (is_array($pkgids)) {
		$pkgids = sanitize_ids($pkgids);
		$names = array();
292
293
294
		if(!$dbh) {
			$dbh = db_connect();
		}
canyonknight's avatar
canyonknight committed
295
296
297
298
299
		$q = "SELECT Name FROM Packages WHERE ID IN (";
		$q.= implode(",", $pkgids) . ")";
		$result = $dbh->query($q);
		if ($result) {
			while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
300
301
302
303
304
305
306
307
308
309
				$names[] = $row['Name'];
			}
		}
		return $names;
	}
	elseif ($pkgids > 0) {
		if(!$dbh) {
			$dbh = db_connect();
		}
		$q = "SELECT Name FROM Packages WHERE ID = " . $pkgids;
canyonknight's avatar
canyonknight committed
310
311
312
		$result = $dbh->query($q);
		if ($result) {
			$name = $result->fetch(PDO::FETCH_NUM);
313
		}
canyonknight's avatar
canyonknight committed
314
		return $name[0];
315
316
317
	}
	else {
		return NULL;
318
319
320
	}
}

321
322
# Check if a package name is blacklisted.
#
323
324
325
326
function pkgname_is_blacklisted($name, $dbh=NULL) {
	if(!$dbh) {
		$dbh = db_connect();
	}
canyonknight's avatar
canyonknight committed
327
328
329
	$q = "SELECT COUNT(*) FROM PackageBlacklist ";
	$q.= "WHERE Name = " . $dbh->quote($name);
	$result = $dbh->query($q);
330
331

	if (!$result) return false;
canyonknight's avatar
canyonknight committed
332
	return ($result->fetch(PDO::FETCH_NUM) > 0);
333
334
}

eric's avatar
eric committed
335
336
# display package details
#
337
function package_details($id=0, $SID="", $dbh=NULL) {
Dan McGee's avatar
Dan McGee committed
338
	global $AUR_LOCATION;
339
	global $USE_VIRTUAL_URLS;
Dan McGee's avatar
Dan McGee committed
340

341
342
343
344
	if(!$dbh) {
		$dbh = db_connect();
	}

345
346
347
	$q = "SELECT Packages.*,Category ";
	$q.= "FROM Packages,PackageCategories ";
	$q.= "WHERE Packages.CategoryID = PackageCategories.ID ";
Loui Chang's avatar
Loui Chang committed
348
	$q.= "AND Packages.ID = " . intval($id);
canyonknight's avatar
canyonknight committed
349
	$result = $dbh->query($q);
eric's avatar
eric committed
350

canyonknight's avatar
canyonknight committed
351
	if (!$result) {
Dario Giovannetti's avatar
Dario Giovannetti committed
352
		print "<p>" . __("Error retrieving package details.") . "</p>\n";
353
354
	}
	else {
canyonknight's avatar
canyonknight committed
355
		$row = $result->fetch(PDO::FETCH_ASSOC);
eric's avatar
eric committed
356
		if (empty($row)) {
Dario Giovannetti's avatar
Dario Giovannetti committed
357
			print "<p>" . __("Package details could not be found.") . "</p>\n";
eric's avatar
eric committed
358

359
360
361
		}
		else {
			include('pkg_details.php');
eric's avatar
eric committed
362

simo's avatar
simo committed
363
364
			# Actions Bar
			if ($SID) {
Loui Chang's avatar
Loui Chang committed
365
				include('actions_form.php');
Lukas Fleischer's avatar
Lukas Fleischer committed
366
				if (isset($_REQUEST['comment']) && check_token()) {
367
368
369
					$uid = uid_from_sid($SID, $dbh);
					add_package_comment($id, $uid, $_REQUEST['comment'], $dbh);
				}
370
				include('pkg_comment_form.php');
simo's avatar
simo committed
371
			}
372

373
			# Print Comments
374
			$comments = package_comments($id, $dbh);
eric's avatar
eric committed
375
			if (!empty($comments)) {
376
				include('pkg_comments.php');
eric's avatar
eric committed
377
			}
eric's avatar
eric committed
378
379
380
381
382
383
		}
	}
	return;
}


Simo Leone's avatar
Simo Leone committed
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
/* pkg_search_page(SID)
 * outputs the body of search/search results page
 *
 * parameters:
 *  SID - current Session ID
 * preconditions:
 *  package search page has been accessed
 *  request variables have not been sanitized
 *
 *  request vars:
 *    O  - starting result number
 *    PP - number of search hits per page
 *    C  - package category ID number
 *    K  - package search string
 *    SO - search hit sort order:
 *          values: a - ascending
 *                  d - descending
 *    SB - sort search hits by:
402
 *          values: c - package category
Simo Leone's avatar
Simo Leone committed
403
404
405
406
 *                  n - package name
 *                  v - number of votes
 *                  m - maintainer username
 *    SeB- property that search string (K) represents
Andrea Scarpino's avatar
Andrea Scarpino committed
407
408
 *          values: n  - package name
 *                  nd - package name & description
409
 *                  x  - package name (exact match)
Simo Leone's avatar
Simo Leone committed
410
411
412
413
414
415
416
417
418
419
420
421
422
423
 *                  m  - package maintainer's username
 *                  s  - package submitter's username
 *    do_Orphans    - boolean. whether to search packages
 *                     without a maintainer
 *
 *
 *    These two are actually handled in packages.php.
 *
 *    IDs- integer array of ticked packages' IDs
 *    action - action to be taken on ticked packages
 *             values: do_Flag   - Flag out-of-date
 *                     do_UnFlag - Remove out-of-date flag
 *                     do_Adopt  - Adopt
 *                     do_Disown - Disown
424
 *                     do_Delete - Delete (requires confirm_Delete to be set)
425
426
 *                     do_Notify - Enable notification
 *                     do_UnNotify - Disable notification
Simo Leone's avatar
Simo Leone committed
427
 */
428
429
430
431
function pkg_search_page($SID="", $dbh=NULL) {
	if(!$dbh) {
		$dbh = db_connect();
	}
Loui Chang's avatar
Loui Chang committed
432
433
434
435
436

	// get commonly used variables...
	// TODO: REDUCE DB HITS.
	// grab info for user if they're logged in
	if ($SID)
437
		$myuid = uid_from_sid($SID, $dbh);
Loui Chang's avatar
Loui Chang committed
438
	// get a list of package categories
439
	$cats = pkgCategories($dbh); //meow
Loui Chang's avatar
Loui Chang committed
440
441
442
443
444
445
446
447
448
449
450
451
452
453

	// sanitize paging variables
	//
	if (isset($_GET['O'])) {
		$_GET['O'] = intval($_GET['O']);
		if ($_GET['O'] < 0)
			$_GET['O'] = 0;
	}
	else {
		$_GET['O'] = 0;
	}

	if (isset($_GET["PP"])) {
		$_GET["PP"] = intval($_GET["PP"]);
454
455
456
457
		if ($_GET["PP"] < 50)
			$_GET["PP"] = 50;
		else if ($_GET["PP"] > 250)
			$_GET["PP"] = 250;
Loui Chang's avatar
Loui Chang committed
458
459
	}
	else {
460
		$_GET["PP"] = 50;
Loui Chang's avatar
Loui Chang committed
461
462
463
464
465
466
467
468
	}

	// FIXME: pull out DB-related code. all of it.
	//        this one's worth a choco-chip cookie,
	//        one of those nice big soft ones

	// build the package search query
	//
469
	$q_select = "SELECT ";
Loui Chang's avatar
Loui Chang committed
470
	if ($SID) {
471
		$q_select .= "CommentNotify.UserID AS Notify,
472
			   PackageVotes.UsersID AS Voted, ";
Loui Chang's avatar
Loui Chang committed
473
	}
474
	$q_select .= "Users.Username AS Maintainer,
Loui Chang's avatar
Loui Chang committed
475
476
	PackageCategories.Category,
	Packages.Name, Packages.Version, Packages.Description, Packages.NumVotes,
477
	Packages.ID, Packages.OutOfDateTS ";
Loui Chang's avatar
Loui Chang committed
478

479
	$q_from = "FROM Packages
480
481
482
	LEFT JOIN Users ON (Packages.MaintainerUID = Users.ID)
	LEFT JOIN PackageCategories
	ON (Packages.CategoryID = PackageCategories.ID) ";
Loui Chang's avatar
Loui Chang committed
483
	if ($SID) {
484
485
		# this portion is not needed for the total row count query
		$q_from_extra = "LEFT JOIN PackageVotes
Loui Chang's avatar
Loui Chang committed
486
487
488
		ON (Packages.ID = PackageVotes.PackageID AND PackageVotes.UsersID = $myuid)
		LEFT JOIN CommentNotify
		ON (Packages.ID = CommentNotify.PkgID AND CommentNotify.UserID = $myuid) ";
489
490
	} else {
		$q_from_extra = "";
Loui Chang's avatar
Loui Chang committed
491
492
	}

Dan McGee's avatar
Dan McGee committed
493
	$q_where = "WHERE 1 = 1 ";
494
495
	// TODO: possibly do string matching on category
	//       to make request variable values more sensible
496
	if (isset($_GET["C"]) && intval($_GET["C"])) {
497
		$q_where .= "AND Packages.CategoryID = ".intval($_GET["C"])." ";
Loui Chang's avatar
Loui Chang committed
498
499
	}

500
	if (isset($_GET['K'])) {
Loui Chang's avatar
Loui Chang committed
501
		# Search by maintainer
502
		if (isset($_GET["SeB"]) && $_GET["SeB"] == "m") {
canyonknight's avatar
canyonknight committed
503
			$q_where .= "AND Users.Username = " . $dbh->quote($_GET['K']) . " ";
Loui Chang's avatar
Loui Chang committed
504
		}
Andrea Scarpino's avatar
Andrea Scarpino committed
505
		# Search by submitter
506
		elseif (isset($_GET["SeB"]) && $_GET["SeB"] == "s") {
507
			$q_where .= "AND SubmitterUID = ".uid_from_username($_GET['K'], $dbh)." ";
Loui Chang's avatar
Loui Chang committed
508
		}
509
		# Search by name
510
		elseif (isset($_GET["SeB"]) && $_GET["SeB"] == "n") {
canyonknight's avatar
canyonknight committed
511
512
			$K = "%" . addcslashes($_GET['K'], '%_') . "%";
			$q_where .= "AND (Name LIKE " . $dbh->quote($K) . ") ";
Andrea Scarpino's avatar
Andrea Scarpino committed
513
		}
514
515
		# Search by name (exact match)
		elseif (isset($_GET["SeB"]) && $_GET["SeB"] == "x") {
canyonknight's avatar
canyonknight committed
516
			$q_where .= "AND (Name = " . $dbh->quote($_GET['K']) . ") ";
517
		}
Andrea Scarpino's avatar
Andrea Scarpino committed
518
		# Search by name and description (Default)
Loui Chang's avatar
Loui Chang committed
519
		else {
canyonknight's avatar
canyonknight committed
520
521
522
			$K = "%" . addcslashes($_GET['K'], '%_') . "%";
			$q_where .= "AND (Name LIKE " . $dbh->quote($K) . " OR ";
			$q_where .= "Description LIKE " . $dbh->quote($K) . ") ";
Loui Chang's avatar
Loui Chang committed
523
524
525
		}
	}

526
	if (isset($_GET["do_Orphans"])) {
527
		$q_where .= "AND MaintainerUID IS NULL ";
Loui Chang's avatar
Loui Chang committed
528
	}
529

530
	if (isset($_GET['outdated'])) {
531
		if ($_GET['outdated'] == 'on') {
532
			$q_where .= "AND OutOfDateTS IS NOT NULL ";
533
534
		}
		elseif ($_GET['outdated'] == 'off') {
535
			$q_where .= "AND OutOfDateTS IS NULL ";
536
		}
537
538
	}

539
	$order = (isset($_GET["SO"]) && $_GET["SO"] == 'd') ? 'DESC' : 'ASC';
Loui Chang's avatar
Loui Chang committed
540

541
	$q_sort = "ORDER BY Name ".$order." ";
542
543
	$sort_by = isset($_GET["SB"]) ? $_GET["SB"] : '';
	switch ($sort_by) {
Loui Chang's avatar
Loui Chang committed
544
	case 'c':
545
		$q_sort = "ORDER BY CategoryID ".$order.", Name ASC ";
Loui Chang's avatar
Loui Chang committed
546
547
		break;
	case 'v':
548
		$q_sort = "ORDER BY NumVotes ".$order.", Name ASC ";
Loui Chang's avatar
Loui Chang committed
549
		break;
550
551
	case 'w':
		if ($SID) {
552
			$q_sort = "ORDER BY Voted ".$order.", Name ASC ";
553
554
555
556
		}
		break;
	case 'o':
		if ($SID) {
557
			$q_sort = "ORDER BY Notify ".$order.", Name ASC ";
558
559
		}
		break;
Loui Chang's avatar
Loui Chang committed
560
	case 'm':
561
		$q_sort = "ORDER BY Maintainer ".$order.", Name ASC ";
Loui Chang's avatar
Loui Chang committed
562
563
		break;
	case 'a':
564
		$q_sort = "ORDER BY ModifiedTS ".$order.", Name ASC ";
Loui Chang's avatar
Loui Chang committed
565
566
567
568
569
		break;
	default:
		break;
	}

570
	$q_limit = "LIMIT ".$_GET["PP"]." OFFSET ".$_GET["O"];
571

572
573
	$q = $q_select . $q_from . $q_from_extra . $q_where . $q_sort . $q_limit;
	$q_total = "SELECT COUNT(*) " . $q_from . $q_where;
Loui Chang's avatar
Loui Chang committed
574

canyonknight's avatar
canyonknight committed
575
576
	$result = $dbh->query($q);
	$result_t = $dbh->query($q_total);
577
	if ($result_t) {
canyonknight's avatar
canyonknight committed
578
579
		$row = $result_t->fetch(PDO::FETCH_NUM);
		$total = $row[0];
580
581
582
583
	}
	else {
		$total = 0;
	}
Simo Leone's avatar
Simo Leone committed
584

585
	if ($result && $total > 0) {
586
587
		if (isset($_GET["SO"]) && $_GET["SO"] == "d"){
			$SO_next = "a";
Loui Chang's avatar
Loui Chang committed
588
589
		}
		else {
590
			$SO_next = "d";
Loui Chang's avatar
Loui Chang committed
591
		}
592
	}
Simo Leone's avatar
Simo Leone committed
593

594
	// figure out the results to use
Loui Chang's avatar
Loui Chang committed
595
	$first = $_GET['O'] + 1;
Simo Leone's avatar
Simo Leone committed
596

597
598
599
600
601
	# calculation of pagination links
	$per_page = ($_GET['PP'] > 0) ? $_GET['PP'] : 50;
	$current = ceil($first / $per_page);
	$pages = ceil($total / $per_page);
	$templ_pages = array();
602

603
	if ($current > 1) {
604
605
		$templ_pages['&laquo; ' . __('First')] = 0;
		$templ_pages['&lsaquo; ' . __('Previous')] = ($current - 2) * $per_page;
606
	}
607

608
609
	if ($current - 5 > 1)
		$templ_pages["..."] = false;
610

611
612
613
	for ($i = max($current - 5, 1); $i <= min($pages, $current + 5); $i++) {
		$templ_pages[$i] = ($i - 1) * $per_page;
	}
614

615
616
	if ($current + 5 < $pages)
		$templ_pages["... "] = false;
617

618
	if ($current < $pages) {
619
620
		$templ_pages[__('Next') . ' &rsaquo;'] = $current * $per_page;
		$templ_pages[__('Last') . ' &raquo;'] = ($pages - 1) * $per_page;
621
	}
Simo Leone's avatar
Simo Leone committed
622

623
	include('pkg_search_form.php');
624

canyonknight's avatar
canyonknight committed
625
626
627
628
	if ($result) {
		while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
			$searchresults[] = $row;
		}
629
630
	}

631
632
	include('pkg_search_results.php');

Loui Chang's avatar
Loui Chang committed
633
	return;
eric's avatar
eric committed
634
635
}

Dan McGee's avatar
Dan McGee committed
636
637
638
639
640
function current_action($action) {
	return (isset($_POST['action']) && $_POST['action'] == $action) ||
		isset($_POST[$action]);
}

641
642
643
644
645
646
647
648
649
650
651
652
653
654
/**
 * Ensure an array of IDs is in fact all valid integers.
 */
function sanitize_ids($ids) {
	$new_ids = array();
	foreach ($ids as $id) {
		$id = intval($id);
		if ($id > 0) {
			$new_ids[] = $id;
		}
	}
	return $new_ids;
}

655
656
657
658
/**
 * Flag and un-flag packages out-of-date
 *
 * @param string $atype Account type, output of account_from_sid
659
 * @param array $ids Array of package IDs to flag/unflag
660
 * @param boolean $action true flags out-of-date, false un-flags. Flags by
661
662
663
664
 * default
 *
 * @return string Translated success or error messages
 */
665
function pkg_flag ($atype, $ids, $action=true, $dbh=NULL) {
Dan McGee's avatar
Dan McGee committed
666
667
	global $AUR_LOCATION;

668
669
670
671
672
673
674
675
	if (!$atype) {
		if ($action) {
			return __("You must be logged in before you can flag packages.");
		} else {
			return __("You must be logged in before you can unflag packages.");
		}
	}

676
	$ids = sanitize_ids($ids);
677
678
679
680
681
682
683
684
	if (empty($ids)) {
		if ($action) {
			return __("You did not select any packages to flag.");
		} else {
			return __("You did not select any packages to unflag.");
		}
	}

685
686
687
	if(!$dbh) {
		$dbh = db_connect();
	}
688

689
690
691
692
693
694
695
	$q = "UPDATE Packages SET";
	if ($action) {
		$q.= " OutOfDateTS = UNIX_TIMESTAMP()";
	}
	else {
		$q.= " OutOfDateTS = NULL";
	}
696
	$q.= " WHERE ID IN (" . implode(",", $ids) . ")";
697

698
699
700
701
	if (!$action && ($atype != "Trusted User" && $atype != "Developer")) {
		$q.= "AND MaintainerUID = " . uid_from_sid($_COOKIE["AURSID"], $dbh);
	}

canyonknight's avatar
canyonknight committed
702
	$dbh->exec($q);
703
704
705

	if ($action) {
		# Notify of flagging by email
706
707
708
		$f_name = username_from_sid($_COOKIE['AURSID'], $dbh);
		$f_email = email_from_sid($_COOKIE['AURSID'], $dbh);
		$f_uid = uid_from_sid($_COOKIE['AURSID'], $dbh);
709
710
		$q = "SELECT Packages.Name, Users.Email, Packages.ID ";
		$q.= "FROM Packages, Users ";
711
		$q.= "WHERE Packages.ID IN (" . implode(",", $ids) .") ";
712
713
		$q.= "AND Users.ID = Packages.MaintainerUID ";
		$q.= "AND Users.ID != " . $f_uid;
canyonknight's avatar
canyonknight committed
714
715
716
		$result = $dbh->query($q);
		if ($result) {
			while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
717
				# construct email
718
				$body = "Your package " . $row['Name'] . " has been flagged out of date by " . $f_name . " [1]. You may view your package at:\n" . $AUR_LOCATION . "/" . get_pkg_uri($row['Name']) . "\n\n[1] - " . $AUR_LOCATION . "/" . get_user_uri($f_name);
719
				$body = wordwrap($body, 70);
720
721
				$headers = "Reply-to: nobody@archlinux.org\nFrom:aur-notify@archlinux.org\nX-Mailer: PHP\nX-MimeOLE: Produced By AUR\n";
				@mail($row['Email'], "AUR Out-of-date Notification for ".$row['Name'], $body, $headers);
722
723
724
725
726
727
728
729
730
731
			}
		}
	}

	if ($action) {
		return __("The selected packages have been flagged out-of-date.");
	} else {
		return __("The selected packages have been unflagged.");
	}
}
732

733
734
735
736
/**
 * Delete packages
 *
 * @param string $atype Account type, output of account_from_sid
737
 * @param array $ids Array of package IDs to delete
738
 * @param int $mergepkgid Package to merge the deleted ones into
739
740
741
 *
 * @return string Translated error or success message
 */
742
function pkg_delete ($atype, $ids, $mergepkgid, $dbh=NULL) {
743
	if (!$atype) {
744
		return __("You must be logged in before you can delete packages.");
745
746
747
	}

	# If they're a TU or dev, can delete
748
749
	if ($atype != "Trusted User" && $atype != "Developer") {
		return __("You do have permission to delete packages.");
750
751
	}

752
	$ids = sanitize_ids($ids);
753
754
	if (empty($ids)) {
		return __("You did not select any packages to delete.");
755
756
	}

757
758
759
	if(!$dbh) {
		$dbh = db_connect();
	}
760

761
762
763
764
765
766
	if ($mergepkgid) {
		$mergepkgname = pkgname_from_id($mergepkgid, $dbh);
	}

	# Send email notifications
	foreach ($ids as $pkgid) {
canyonknight's avatar
canyonknight committed
767
768
769
770
771
772
		$q = "SELECT CommentNotify.*, Users.Email ";
		$q.= "FROM CommentNotify, Users ";
		$q.= "WHERE Users.ID = CommentNotify.UserID ";
		$q.= "AND CommentNotify.UserID != " . uid_from_sid($_COOKIE['AURSID']) . " ";
		$q.= "AND CommentNotify.PkgID = " . $pkgid;
		$result = $dbh->query($q);
773
774
		$bcc = array();

canyonknight's avatar
canyonknight committed
775
		while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
776
777
778
779
780
781
782
783
784
785
786
			array_push($bcc, $row['Email']);
		}
		if (!empty($bcc)) {
			$pkgname = pkgname_from_id($pkgid);

			# TODO: native language emails for users, based on their prefs
			# Simply making these strings translatable won't work, users would be
			# getting emails in the language that the user who posted the comment was in
			$body = "";
			if ($mergepkgid) {
				$body .= username_from_sid($_COOKIE['AURSID']) . " merged \"".$pkgname."\" into \"$mergepkgname\".\n\n";
787
				$body .= "You will no longer receive notifications about this package, please go to https://aur.archlinux.org/" . get_pkg_uri($mergepkgname) . " and click the Notify button if you wish to recieve them again.";
788
789
790
791
792
793
794
			} else {
				$body .= username_from_sid($_COOKIE['AURSID']) . " deleted \"".$pkgname."\".\n\n";
				$body .= "You will no longer receive notifications about this package.";
			}
			$body = wordwrap($body, 70);
			$bcc = implode(', ', $bcc);
			$headers = "Bcc: $bcc\nReply-to: nobody@archlinux.org\nFrom: aur-notify@archlinux.org\nX-Mailer: AUR\n";
795
			@mail('undisclosed-recipients: ;', "AUR Package deleted: " . $pkgname, $body, $headers);
796
797
798
		}
	}

799
800
801
802
803
	if ($mergepkgid) {
		/* Merge comments */
		$q = "UPDATE PackageComments ";
		$q.= "SET PackageID = " . intval($mergepkgid) . " ";
		$q.= "WHERE PackageID IN (" . implode(",", $ids) . ")";
canyonknight's avatar
canyonknight committed
804
		$dbh->exec($q);
805
806
807
808
809
810
811
812
813
814
815

		/* Merge votes */
		foreach ($ids as $pkgid) {
			$q = "UPDATE PackageVotes ";
			$q.= "SET PackageID = " . intval($mergepkgid) . " ";
			$q.= "WHERE PackageID = " . $pkgid . " ";
			$q.= "AND UsersID NOT IN (";
			$q.= "SELECT * FROM (SELECT UsersID ";
			$q.= "FROM PackageVotes ";
			$q.= "WHERE PackageID = " . intval($mergepkgid);
			$q.= ") temp)";
canyonknight's avatar
canyonknight committed
816
			$dbh->exec($q);
817
818
819
820
821
822
		}

		$q = "UPDATE Packages ";
		$q.= "SET NumVotes = (SELECT COUNT(*) FROM PackageVotes ";
		$q.= "WHERE PackageID = " . intval($mergepkgid) . ") ";
		$q.= "WHERE ID = " . intval($mergepkgid);
canyonknight's avatar
canyonknight committed
823
		$dbh->exec($q);
824
825
	}

826
	$q = "DELETE FROM Packages WHERE ID IN (" . implode(",", $ids) . ")";
canyonknight's avatar
canyonknight committed
827
	$result = $dbh->exec($q);
828
829
830

	return __("The selected packages have been deleted.");
}
831

832
833
834
835
/**
 * Adopt or disown packages
 *
 * @param string $atype Account type, output of account_from_sid
836
 * @param array $ids Array of package IDs to adopt/disown
837
838
839
840
 * @param boolean $action Adopts if true, disowns if false. Adopts by default
 *
 * @return string Translated error or success message
 */
841
function pkg_adopt ($atype, $ids, $action=true, $dbh=NULL) {
842
843
844
845
846
847
848
849
	if (!$atype) {
		if ($action) {
			return __("You must be logged in before you can adopt packages.");
		} else {
			return __("You must be logged in before you can disown packages.");
		}
	}

850
	$ids = sanitize_ids($ids);
851
852
853
854
855
856
857
858
	if (empty($ids)) {
		if ($action) {
			return __("You did not select any packages to adopt.");
		} else {
			return __("You did not select any packages to disown.");
		}
	}

859
860
861
	if(!$dbh) {
		$dbh = db_connect();
	}
862
863
864
865
866

	$field = "MaintainerUID";
	$q = "UPDATE Packages ";

	if ($action) {
867
		$user = uid_from_sid($_COOKIE["AURSID"], $dbh);
868
	} else {
869
		$user = 'NULL';
870
871
872
	}

	$q.= "SET $field = $user ";
873
	$q.= "WHERE ID IN (" . implode(",", $ids) . ") ";
874
875
876

	if ($action && $atype == "User") {
		# Regular users may only adopt orphan packages from unsupported
877
		$q.= "AND $field IS NULL ";
878
	} else if ($atype == "User") {
879
		$q.= "AND $field = " . uid_from_sid($_COOKIE["AURSID"], $dbh);
880
881
	}

canyonknight's avatar
canyonknight committed
882
	$dbh->exec($q);
883
884

	if ($action) {
885
		pkg_notify(account_from_sid($_COOKIE["AURSID"], $dbh), $ids, $dbh);
886
887
888
889
890
		return __("The selected packages have been adopted.");
	} else {
		return __("The selected packages have been disowned.");
	}
}
891

892
893
894
895
/**
 * Vote and un-vote for packages
 *
 * @param string $atype Account type, output of account_from_sid
896
 * @param array $ids Array of package IDs to vote/un-vote
897
898
899
900
 * @param boolean $action Votes if true, un-votes if false. Votes by default
 *
 * @return string Translated error or success message
 */
901
function pkg_vote ($atype, $ids, $action=true, $dbh=NULL) {
902
903
904
905
906
907
908
909
	if (!$atype) {
		if ($action) {
			return __("You must be logged in before you can vote for packages.");
		} else {
			return __("You must be logged in before you can un-vote for packages.");
		}
	}

910
	$ids = sanitize_ids($ids);
911
912
913
914
915
916
917
918
	if (empty($ids)) {
		if ($action) {
			return __("You did not select any packages to vote for.");
		} else {
			return __("Your votes have been removed from the selected packages.");
		}
	}

919
920
921
922
923
	if(!$dbh) {
		$dbh = db_connect();
	}
	$my_votes = pkgvotes_from_sid($_COOKIE["AURSID"], $dbh);
	$uid = uid_from_sid($_COOKIE["AURSID"], $dbh);
924
925

	$first = 1;
926
	foreach ($ids as $pid) {
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
		if ($action) {
			$check = !isset($my_votes[$pid]);
		} else {
			$check = isset($my_votes[$pid]);
		}

		if ($check) {
			if ($first) {
				$first = 0;
				$vote_ids = $pid;
				if ($action) {
					$vote_clauses = "($uid, $pid)";
				}
			} else {
				$vote_ids .= ", $pid";
				if ($action) {
					$vote_clauses .= ", ($uid, $pid)";
				}
			}
		}
	}

	# only vote for packages the user hasn't already voted for
	#
	$op = $action ? "+" : "-";
	$q = "UPDATE Packages SET NumVotes = NumVotes $op 1 ";
	$q.= "WHERE ID IN ($vote_ids)";

canyonknight's avatar
canyonknight committed
955
	$dbh->exec($q);
956
957
958
959
960
961
962
963
964

	if ($action) {
		$q = "INSERT INTO PackageVotes (UsersID, PackageID) VALUES ";
		$q.= $vote_clauses;
	} else {
		$q = "DELETE FROM PackageVotes WHERE UsersID = $uid ";
		$q.= "AND PackageID IN ($vote_ids)";
	}

canyonknight's avatar
canyonknight committed
965
	$dbh->exec($q);
966
967
968
969

	if ($action) {
		$q = "UPDATE Users SET LastVoted = UNIX_TIMESTAMP() ";
		$q.= "WHERE ID = $uid";
canyonknight's avatar
canyonknight committed
970
		$dbh->exec($q);
971
972
973
974
975
976
977
978
	}

	if ($action) {
		return __("Your votes have been cast for the selected packages.");
	} else {
		return __("Your votes have been removed from the selected packages.");
	}
}
979

canyonknight's avatar
canyonknight committed
980
981
982
983
984
985
986
987
# Get all usernames and ids for a specifc package id
function getvotes($pkgid, $dbh=NULL) {
	if(!$dbh) {
		$dbh = db_connect();
	}

	$q = "SELECT UsersID,Username FROM PackageVotes ";
	$q.= "LEFT JOIN Users on (UsersID = ID) ";
canyonknight's avatar
canyonknight committed
988
	$q.= "WHERE PackageID = ". $dbh->quote($pkgid) . " ";
canyonknight's avatar
canyonknight committed
989
	$q.= "ORDER BY Username";
canyonknight's avatar
canyonknight committed
990
	$result = $dbh->query($q);
canyonknight's avatar
canyonknight committed
991
992
993
994
995

	if (!$result) {
		return;
	}

canyonknight's avatar
canyonknight committed
996
	while ($row = $result->fetch(PDO::FETCH_ASSOC)) {
canyonknight's avatar
canyonknight committed
997
998
999
1000
		$votes[] = $row;
	}

	return $votes;
For faster browsing, not all history is shown. View entire blame