redray
2008-10-25 0ef490b4ce268b51e7b63127fedff7c8a0c39ecc
interface/lib/classes/remoting.inc.php
@@ -5,17 +5,38 @@
   //* remote session timeout in seconds
   private $session_timeout = 600;
   
   private $server;
   /*
   These variables shall stay global.
   Please do not make them private variables.
   private $app;
    private $conf;
    */
    public function __construct()
    {
        global $server;
        $this->server = $server;
      /*
        $this->app = $app;
        $this->conf = $conf;
      */
    }
   //* remote login function
   public function login($username, $password) {
      global $app,$conf,$server;
   public function login($username, $password)
    {
      global $app, $conf, $server;
      
      if(empty($username)) {
         $server->fault('login_username_empty','The login username is empty');
         $this->server->fault('login_username_empty', 'The login username is empty');
         return false;
      }
      
      if(empty($password)) {
         $server->fault('login_password_empty','The login password is empty');
         $this->server->fault('login_password_empty', 'The login password is empty');
         return false;
      }
      
@@ -31,23 +52,25 @@
         $remote_userid = $remote_user['remote_userid'];
         $remote_functions = $remote_user['remote_functions'];
         $tstamp = time() + $this->session_timeout;
         $sql = "INSERT INTO remote_session (remote_session,remote_userid,remote_functions,tstamp) VALUES ('$remote_session',$remote_userid,'$remote_functions',$tstamp)";
         $sql = 'INSERT INTO remote_session (remote_session,remote_userid,remote_functions,tstamp'
                   .') VALUES ('
                   ." '$remote_session',$remote_userid,'$remote_functions',$tstamp)";
         $app->db->query($sql);
         return $remote_session;
      } else {
         $server->fault('login_failed','The login failed. Username or password wrong.');
         $this->server->fault('login_failed', 'The login failed. Username or password wrong.');
         return false;
      }
      
   }
   
   //* remote logout function
   public function logout($session_id) {
      global $app,$conf,$server;
   public function logout($session_id)
    {
      global $app;
      
      if(empty($session_id)) {
         $server->fault('session_id_empty','The SessionID is empty.');
         $this->server->fault('session_id_empty', 'The SessionID is empty.');
         return false;
      }
      
@@ -55,62 +78,189 @@
      
      $sql = "DELETE FROM remote_session WHERE remote_session = '$session_id'";
      $app->db->query($sql);
      if($app->db->affectedRows() == 1) {
         return true;
      } else {
         return false;
      }
        return ($app->db->affectedRows() == 1);
   }
   
   public function mail_domain_add($session_id, $params) {
      global $app,$conf,$server;
   //* Get mail domain details
   public function mail_domain_get($session_id, $domain_id)
    {
      if(!$this->checkPerm($session_id, 'mail_domain_get')) {
         $this->server->fault('permission_denied', 'You do not have the permissions to access this function.');
         return false;
      }
      $app->uses('remoting_lib');
      $app->remoting_lib->loadFormDef('../mail/form/mail_domain.tform.php');
      return $app->remoting_lib->getDataRecord($domain_id);
   }
   //* Add a mail domain
   public function mail_domain_add($session_id, $client_id, $params)
    {
      if(!$this->checkPerm($session_id, 'mail_domain_add')) {
         $this->server->fault('permission_denied', 'You do not have the permissions to access this function.');
         return false;
      }
      $domain_id = $this->insertQuery('../mail/form/mail_domain.tform.php',$client_id,$params);
      return $domain_id;
   }
   //* Update a mail domain
   public function mail_domain_update($session_id, $client_id, $domain_id, $params)
    {
      if(!$this->checkPerm($session_id, 'mail_domain_update')) {
         $this->server->fault('permission_denied', 'You do not have the permissions to access this function.');
         return false;
      }
      $affected_rows = $this->updateQuery('../mail/form/mail_domain.tform.php',$client_id,$domain_id,$params);
      return $affected_rows;
   }
   //* Delete a mail domain
   public function mail_domain_delete($session_id, $domain_id)
    {
      if(!$this->checkPerm($session_id, 'mail_domain_delete')) {
         $this->server->fault('permission_denied', 'You do not have the permissions to access this function.');
         return false;
      }
      $affected_rows = $this->updateQuery('../mail/form/mail_domain.tform.php',$domain_id);
      return $affected_rows;
   }
   //** private functions -----------------------------------------------------------------------------------
   private function insertQuery($formdef_file, $client_id, $params)
    {
      global $app;
      
      if(!$this->checkPerm($session_id,'mail_domain_add')) {
         $server->fault('permission_denied','You do not have the permissions to access this function.');
      $app->uses('remoting_lib');
      //* Load the form definition
      $app->remoting_lib->loadFormDef($formdef_file);
      //* load the user profile of the client
      $app->remoting_lib->loadUserProfile($client_id);
      //* Get the SQL query
      $sql = $app->remoting_lib->getSQL($params,'INSERT',0);
      if($app->remoting_lib->errorMessage != '') {
         $this->server->fault('data_processing_error', $app->remoting_lib->errorMessage);
         return false;
      }
      
      //* Form definition file, that is used for this table in the interafce
      $formdef = '../mail/form/mail_domain.tform.php';
      $app->db->query($sql);
      
      //* check the variables against the form definition and build the sql query automatically.
      // I will use a modified version of the tform class for this.
      if($app->db->errorMessage != '') {
         $this->server->fault('database_error', $app->db->errorMessage . ' '.$sql);
         return false;
      }
      $insert_id = $app->db->insertID();
      //* Save changes to Datalog
      if($app->remoting_lib->formDef["db_history"] == 'yes') {
         $new_rec = $app->remoting_lib->getDataRecord($insert_id);
         $app->tform->datalogSave('INSERT',$primary_id,array(),$new_rec);
      }
      
      
      
      
      return $insert_id;
   }
   
   
   private function updateQuery($formdef_file, $client_id, $primary_id, $params)
    {
      global $app;
      $app->uses('remoting_lib');
      //* Load the form definition
      $app->remoting_lib->loadFormDef($formdef_file);
      //* load the user profile of the client
      $app->remoting_lib->loadUserProfile($client_id);
      //* Get the SQL query
      $sql = $app->remoting_lib->getSQL($params,'UPDATE',$primary_id);
      if($app->remoting_lib->errorMessage != '') {
         $this->server->fault('data_processing_error', $app->remoting_lib->errorMessage);
         return false;
      }
      $old_rec = $app->remoting_lib->getDataRecord($primary_id);
      $app->db->query($sql);
      if($app->db->errorMessage != '') {
         $this->server->fault('database_error', $app->db->errorMessage . ' '.$sql);
         return false;
      }
      $affected_rows = $app->db->affectedRows();
      //* Save changes to Datalog
      if($app->remoting_lib->formDef["db_history"] == 'yes') {
         $new_rec = $app->remoting_lib->getDataRecord($primary_id);
         $app->tform->datalogSave('UPDATE',$primary_id,$old_rec,$new_rec);
      }
      return $affected_rows;
   }
   
   //* private functions -----------------------------------------------------------------------------------
   private function updateQuery($formdef,$params) {
   private function deleteQuery($formdef_file, $primary_id)
    {
      global $app;
      $app->uses('remoting_lib');
      //* Load the form definition
      $app->remoting_lib->loadFormDef($formdef_file);
      //* Get the SQL query
      $sql = $app->remoting_lib->getDeleteSQL($primary_id);
      $app->db->query($sql);
      if($app->db->errorMessage != '') {
         $this->server->fault('database_error', $app->db->errorMessage . ' '.$sql);
         return false;
      }
      $affected_rows = $app->db->affectedRows();
      //* Save changes to Datalog
      if($app->remoting_lib->formDef["db_history"] == 'yes') {
         $rec = $app->remoting_lib->getDataRecord($primary_id);
         $app->tform->datalogSave('DELETE',$primary_id,$rec,array());
      }
      return $affected_rows;
   }
   
   
   private function checkPerm($session_id,$function_name) {
   private function checkPerm($session_id, $function_name)
    {
      $session = $this->getSession($session_id);
      if($session) {
         $remote_functions = explode(',',$session['remote_functions']);
         if(in_array($function_name,$remote_functions)) {
            return true;
         } else {
            return false;
         }
      } else {
         return false;
      }
        if(!$session){
            return false;
        }
      return in_array($function_name, explode(',', $session['remote_functions']) );
   }
   
   
   private function getSession($session_id) {
      global $app,$conf,$server;
   private function getSession($session_id)
    {
      global $app;
      
      if(empty($session_id)) {
         $server->fault('session_id_empty','The SessionID is empty.');
         $this->server->fault('session_id_empty','The SessionID is empty.');
         return false;
      }
      
@@ -122,13 +272,10 @@
      if($session['remote_userid'] > 0) {
         return $session;
      } else {
         $server->fault('session_does_not_exist','The Session is expired or does not exist.');
         $this->server->fault('session_does_not_exist','The Session is expired or does not exist.');
         return false;
      }
   }
}
?>