inc/poche/Database.class.php

   1 <?php
   2 /**
   3  * poche, a read it later open source system
   4  *
   5  * @category   poche
   6  * @author     Nicolas Lœuillet <support@inthepoche.com>
   7  * @copyright  2013
   8  * @license    http://www.wtfpl.net/ see COPYING file
   9  */
  10
  11 class Database {
  12     var $handle;
  13
  14     function __construct()
  15     {
  16         switch (STORAGE) {
  17             case 'sqlite':
  18                 $db_path = 'sqlite:' . STORAGE_SQLITE;
  19                 $this->handle = new PDO($db_path);
  20                 break;
  21             case 'mysql':
  22                 $db_path = 'mysql:host=' . STORAGE_SERVER . ';dbname=' . STORAGE_DB;
  23                 $this->handle = new PDO($db_path, STORAGE_USER, STORAGE_PASSWORD);
  24                 break;
  25             case 'postgres':
  26                 $db_path = 'pgsql:host=' . STORAGE_SERVER . ';dbname=' . STORAGE_DB;
  27                 $this->handle = new PDO($db_path, STORAGE_USER, STORAGE_PASSWORD);
  28                 break;
  29         }
  30
  31         $this->handle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
  32         Tools::logm('storage type ' . STORAGE);
  33     }
  34
  35     private function getHandle() {
  36         return $this->handle;
  37     }
  38
  39     public function isInstalled() {
  40         $sql = "SELECT username FROM users";
  41         $query = $this->executeQuery($sql, array());
  42         $hasAdmin = count($query->fetchAll());
  43
  44         if ($hasAdmin == 0)
  45             return FALSE;
  46
  47         return TRUE;
  48     }
  49
  50     public function install($login, $password) {
  51         $sql = 'INSERT INTO users ( username, password, name, email) VALUES (?, ?, ?, ?)';
  52         $params = array($login, $password, $login, ' ');
  53         $query = $this->executeQuery($sql, $params);
  54
  55         $sequence = '';
  56         if (STORAGE == 'postgres') {
  57             $sequence = 'users_id_seq';
  58         }
  59
  60         $id_user = intval($this->getLastId($sequence));
  61
  62         $sql = 'INSERT INTO users_config ( user_id, name, value ) VALUES (?, ?, ?)';
  63         $params = array($id_user, 'pager', PAGINATION);
  64         $query = $this->executeQuery($sql, $params);
  65
  66         $sql = 'INSERT INTO users_config ( user_id, name, value ) VALUES (?, ?, ?)';
  67         $params = array($id_user, 'language', LANG);
  68         $query = $this->executeQuery($sql, $params);
  69
  70         $sql = 'INSERT INTO users_config ( user_id, name, value ) VALUES (?, ?, ?)';
  71         $params = array($id_user, 'theme', DEFAULT_THEME);
  72         $query = $this->executeQuery($sql, $params);
  73
  74         return TRUE;
  75     }
  76
  77     public function getConfigUser($id) {
  78         $sql = "SELECT * FROM users_config WHERE user_id = ?";
  79         $query = $this->executeQuery($sql, array($id));
  80         $result = $query->fetchAll();
  81         $user_config = array();
  82
  83         foreach ($result as $key => $value) {
  84             $user_config[$value['name']] = $value['value'];
  85         }
  86
  87         return $user_config;
  88     }
  89
  90     public function userExists($username) {
  91         $sql = "SELECT * FROM users WHERE username=?";
  92         $query = $this->executeQuery($sql, array($username));
  93         $login = $query->fetchAll();
  94         if (isset($login[0])) {
  95             return true;
  96         } else {
  97             return false;
  98         }
  99     }
 100
 101     public function login($username, $password) {
 102         $sql = "SELECT * FROM users WHERE username=? AND password=?";
 103         $query = $this->executeQuery($sql, array($username, $password));
 104         $login = $query->fetchAll();
 105
 106         $user = array();
 107         if (isset($login[0])) {
 108             $user['id'] = $login[0]['id'];
 109             $user['username'] = $login[0]['username'];
 110             $user['password'] = $login[0]['password'];
 111             $user['name'] = $login[0]['name'];
 112             $user['email'] = $login[0]['email'];
 113             $user['config'] = $this->getConfigUser($login[0]['id']);
 114         }
 115
 116         return $user;
 117     }
 118
 119     public function updatePassword($userId, $password)
 120     {
 121         $sql_update = "UPDATE users SET password=? WHERE id=?";
 122         $params_update = array($password, $userId);
 123         $query = $this->executeQuery($sql_update, $params_update);
 124     }
 125
 126     public function updateUserConfig($userId, $key, $value) {
 127         $config = $this->getConfigUser($userId);
 128
 129         if (!isset ($user_config[$key])) {
 130             $sql = "INSERT INTO users_config (`value`, `user_id`, `name`) VALUES (?, ?, ?)";
 131         }
 132         else {
 133             $sql = "UPDATE users_config SET `value`=? WHERE `user_id`=? AND `name`=?";
 134         }
 135
 136         $params = array($value, $userId, $key);
 137         $query = $this->executeQuery($sql, $params);
 138     }
 139
 140     private function executeQuery($sql, $params) {
 141         try
 142         {
 143             $query = $this->getHandle()->prepare($sql);
 144             $query->execute($params);
 145             return $query;
 146         }
 147         catch (Exception $e)
 148         {
 149             Tools::logm('execute query error : '.$e->getMessage());
 150             return FALSE;
 151         }
 152     }
 153
 154     public function retrieveAll($user_id) {
 155         $sql        = "SELECT * FROM entries WHERE user_id=? ORDER BY id";
 156         $query      = $this->executeQuery($sql, array($user_id));
 157         $entries    = $query->fetchAll();
 158
 159         return $entries;
 160     }
 161
 162     public function retrieveOneById($id, $user_id) {
 163         $entry  = NULL;
 164         $sql    = "SELECT * FROM entries WHERE id=? AND user_id=?";
 165         $params = array(intval($id), $user_id);
 166         $query  = $this->executeQuery($sql, $params);
 167         $entry  = $query->fetchAll();
 168
 169         return isset($entry[0]) ? $entry[0] : null;
 170     }
 171
 172     public function getEntriesByView($view, $user_id, $limit = '') {
 173         switch ($_SESSION['sort'])
 174         {
 175             case 'ia':
 176                 $order = 'ORDER BY id';
 177                 break;
 178             case 'id':
 179                 $order = 'ORDER BY id DESC';
 180                 break;
 181             case 'ta':
 182                 $order = 'ORDER BY lower(title)';
 183                 break;
 184             case 'td':
 185                 $order = 'ORDER BY lower(title) DESC';
 186                 break;
 187             default:
 188                 $order = 'ORDER BY id';
 189                 break;
 190         }
 191
 192         switch ($view)
 193         {
 194             case 'archive':
 195                 $sql    = "SELECT * FROM entries WHERE user_id=? AND is_read=? " . $order;
 196                 $params = array($user_id, 1);
 197                 break;
 198             case 'fav' :
 199                 $sql    = "SELECT * FROM entries WHERE user_id=? AND is_fav=? " . $order;
 200                 $params = array($user_id, 1);
 201                 break;
 202             default:
 203                 $sql    = "SELECT * FROM entries WHERE user_id=? AND is_read=? " . $order;
 204                 $params = array($user_id, 0);
 205                 break;
 206         }
 207
 208         $sql .= ' ' . $limit;
 209
 210         $query = $this->executeQuery($sql, $params);
 211         $entries = $query->fetchAll();
 212
 213         return $entries;
 214     }
 215
 216     public function updateContent($id, $content, $user_id) {
 217         $sql_action = 'UPDATE entries SET content = ? WHERE id=? AND user_id=?';
 218         $params_action = array($content, $id, $user_id);
 219         $query = $this->executeQuery($sql_action, $params_action);
 220         return $query;
 221     }
 222
 223     public function add($url, $title, $content, $user_id) {
 224         $sql_action = 'INSERT INTO entries ( url, title, content, user_id ) VALUES (?, ?, ?, ?)';
 225         $params_action = array($url, $title, $content, $user_id);
 226         $query = $this->executeQuery($sql_action, $params_action);
 227         return $query;
 228     }
 229
 230     public function deleteById($id, $user_id) {
 231         $sql_action     = "DELETE FROM entries WHERE id=? AND user_id=?";
 232         $params_action  = array($id, $user_id);
 233         $query          = $this->executeQuery($sql_action, $params_action);
 234         return $query;
 235     }
 236
 237     public function favoriteById($id, $user_id) {
 238         $sql_action     = "UPDATE entries SET is_fav=NOT is_fav WHERE id=? AND user_id=?";
 239         $params_action  = array($id, $user_id);
 240         $query          = $this->executeQuery($sql_action, $params_action);
 241     }
 242
 243     public function archiveById($id, $user_id) {
 244         $sql_action     = "UPDATE entries SET is_read=NOT is_read WHERE id=? AND user_id=?";
 245         $params_action  = array($id, $user_id);
 246         $query          = $this->executeQuery($sql_action, $params_action);
 247     }
 248
 249     public function getLastId($column = '') {
 250         return $this->getHandle()->lastInsertId($column);
 251     }
 252
 253     public function retrieveTagsByEntry($entry_id) {
 254         $sql        =
 255             "SELECT * FROM tags
 256             LEFT JOIN tags_entries ON tags_entries.tag_id=tags.id
 257             WHERE tags_entries.entry_id = ?";
 258         $query      = $this->executeQuery($sql, array($entry_id));
 259         $tags    = $query->fetchAll();
 260
 261         return $tags;
 262     }
 263 }