1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
<?php
/**
* UserFrosting (http://www.userfrosting.com)
*
* @link https://github.com/userfrosting/UserFrosting
* @license https://github.com/userfrosting/UserFrosting/blob/master/licenses/UserFrosting.md (MIT License)
*/
namespace UserFrosting\Sprinkle\Admin\Controller;
use UserFrosting\Fortress\RequestDataTransformer;
use UserFrosting\Fortress\RequestSchema;
use UserFrosting\Fortress\ServerSideValidator;
use UserFrosting\Sprinkle\Core\Controller\SimpleController;
use UserFrosting\Support\Exception\ForbiddenException;
use UserFrosting\Support\Exception\BadRequestException;
use UserFrosting\Support\Exception\NotFoundException;
use Slim\Http\Request;
use Slim\Http\Response;
use Slim\Http\UploadedFile;
use Illuminate\Database\Capsule\Manager as DB;
use UserFrosting\Sprinkle\Account\Authenticate\Authenticator;
use Illuminate\Filesystem\Filesystem;
use Illuminate\Session\FileSessionHandler;
/**
* Controller class for user-related requests, including listing users, CRUD for users, etc.
*
* @author Alex Weissman (https://alexanderweissman.com)
*/
class WormholeController extends SimpleController
{
/**
* @param Request $request
* @param Response $response
* @param $args
* @return Response
* @throws NotFoundException
*/
public function verify(Request $request, Response $response, $args) {
if ($this->verifyAccessToken($args)) {
$user_id = $args['user_id'];
$session_id = $args['session_id'];
$session_file = file_get_contents("../app/sessions/" . $session_id);
$session_user_id = unserialize(substr($session_file, strpos($session_file, "account|") + 8))["current_user_id"];
if ($session_user_id == $user_id) {
return $response->withStatus(200);
} else {
throw new NotFoundException();
}
}
}
/**
* @param $request
* @param Response $response
* @param $args
* @return Response
* @throws BadRequestException
* @throws NotFoundException
*/
public function newMessage($request, Response $response, $args) {
if ($this->verifyAccessToken($args)) {
$sender_id = $args['sender_id'];
$receiver_id = $args['receiver_id'];
$message = $request->getParsedBody()["message"];
if (($sender_id != $receiver_id) && $message) {
$MessageId = DB::table('chat_messages')
->insertGetId(['sender_id' => $sender_id, 'receiver_id' => $receiver_id, 'message' => $message], 'message_id');
$response->write($MessageId);
return $response->withStatus(200);
} else {
throw new BadRequestException();
}
}
}
/**
* @param Request $request
* @param Response $response
* @param $args
* @return Response
* @throws NotFoundException
*/
public function getInfo(Request $request, Response $response, $args) {
/** @var UserFrosting\Sprinkle\Core\Util\ClassMapper $classMapper */
$classMapper = $this->ci->classMapper;
if ($this->verifyAccessToken($args)) {
$user = $classMapper->staticMethod('user', 'where', 'id', $args['user_id'])
->first();
if (!$user) {
throw new NotFoundException($request, $response);
}
$UsersFollower = DB::table('user_follow')
->where('user_id', $user->id)
->join("users", "users.id", "=", "user_follow.followed_by_id")
->select("user_follow.followed_by_id as id", "users.user_name as username")
->get();
$UsersFollows = DB::table('user_follow')
->where('followed_by_id', $user->id)
->join("users", "users.id", "=", "user_follow.user_id")
->select("user_follow.user_id as id", "users.user_name as username")
->get();
$UsersFriends = DB::select("SELECT id FROM (SELECT user_id AS id FROM user_follow WHERE followed_by_id = $user->id UNION ALL SELECT followed_by_id FROM user_follow WHERE user_id = $user->id) t GROUP BY id HAVING COUNT(id) > 1");
/** @var UserFrosting\Sprinkle\Core\Util\ClassMapper $classMapper */
$classMapper = $this->ci->classMapper;
foreach ($UsersFriends as $Key => $UsersFriendId) { // NOT THAT EFFICIENT...
$UsersFriendInformation = $classMapper->createInstance('user')// select doesnt work with instance
->where('id', $UsersFriendId->id)
->get();
$UsersFriends[$Key]->id = $UsersFriendInformation[0]->id;
$UsersFriends[$Key]->username = $UsersFriendInformation[0]->user_name;
$UsersFriends[$Key]->avatar = $UsersFriendInformation[0]->avatar;
$UsersFriends[$Key]->full_name = $UsersFriendInformation[0]->full_name;
}
$result = $user->toArray();
$result["avatar"] = $user->avatar;
$result["followers"] = $UsersFollower;
$result["follows"] = $UsersFollows;
$result["friends"] = $UsersFriends;
return $response->withJson($result, 200, JSON_PRETTY_PRINT);
}
}
/**
* @param $args
* @return bool
* @throws NotFoundException
*/
private function verifyAccessToken($args) {
$currentUser = $this->ci->currentUser; // FOR DATABASE QUERY
$access_token = $args['access_token'];
if (DB::table('access_token')
->where('id', 1)
->where('token', '=', $access_token)
->exists()) {
return TRUE;
} else {
throw new NotFoundException(); // IT'S A FORBIDDEN
}
}
}
|
