File Source for lodelparser.php

<?php
/**
* Fichier LodelParser
* PHP versions 4 et 5
*
* LODEL - Logiciel d'Edition ELectronique.
*
* Copyright (c) 2001-2002, Ghislain Picard, Marin Dacos
* Copyright (c) 2003, Ghislain Picard, Marin Dacos, Luc Santeramo, Nicolas Nutten, Anne Gentil-Beccot
* Copyright (c) 2004, Ghislain Picard, Marin Dacos, Luc Santeramo, Anne Gentil-Beccot, Bruno Cénou
* Copyright (c) 2005, Ghislain Picard, Marin Dacos, Luc Santeramo, Gautier Poupeau, Jean Lamy, Bruno Cénou
* Copyright (c) 2006, Marin Dacos, Luc Santeramo, Bruno Cénou, Jean Lamy, Mikaël Cixous, Sophie Malafosse
* Copyright (c) 2007, Marin Dacos, Bruno Cénou, Sophie Malafosse, Pierre-Alain Mignot
*
* Home page: http://www.lodel.org
*
* E-Mail: lodel@lodel.org
*
* All Rights Reserved
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*
* @author Ghislain Picard
* @author Jean Lamy
* @author Sophie Malafosse
* @copyright 2005, Ghislain Picard, Marin Dacos, Luc Santeramo, Gautier Poupeau, Jean Lamy, Bruno Cénou
* @copyright 2006, Marin Dacos, Luc Santeramo, Bruno Cénou, Jean Lamy, Mikaël Cixous, Sophie Malafosse
* @copyright 2007, Marin Dacos, Bruno Cénou, Sophie Malafosse, Pierre-Alain Mignot
* @licence http://www.gnu.org/copyleft/gpl.html
* @version CVS:$Id:
* @package lodel
*/
// traitement particulier des attributs d'une loop
// l'essentiel des optimisations et aide a l'uitilisateur doivent
// en general etre ajouter ici
//
require_once "func.php";
require_once "balises.php";
require_once "parser.php";
/**
* Classe LodelParser
*
* Classe utilitaire pour parser le Lodelscript - Fille de la classe Parser
*
* @package lodel
* @author Ghislain Picard
* @author Jean Lamy
* @copyright 2005, Ghislain Picard, Marin Dacos, Luc Santeramo, Gautier Poupeau, Jean Lamy, Bruno Cénou
* @copyright 2006, Marin Dacos, Luc Santeramo, Bruno Cénou, Jean Lamy, Mikaël Cixous, Sophie Malafosse
* @copyright 2007, Marin Dacos, Bruno Cénou, Sophie Malafosse, Pierre-Alain Mignot
* @licence http://www.gnu.org/copyleft/gpl.html
* @since Classe ajoutée depuis la version 0.8
* @see parser.php
*/
class LodelParser extends Parser
{
var $filterfunc_loaded = FALSE;
/**
* Tableau associatif concernant le status des textes
*
* @var array
*/
var $textstatus = array ('-1' => ' traduire', '1' => ' revoir', '2' => 'traduit');
/**
* Tableau associatif concernant le status associé à la couleur
*
* @var array
*/
var $colorstatus = array ('-1' => 'red', '1' => 'orange', 2 => 'green');
/**
* Liste des langues de la traduction
*
* @var array
*/
var $translationlanglist = "'fr','en','es','de'";
/**
* Constructeur.
*/
function LodelParser()
{ // constructor
$this->Parser();
$this->commands[] = 'TEXT'; // catch the text
$this->variablechar = '@'; // catch the @
if (DBDRIVER == 'mysql') {
$this->codepieces['sqlquery'] = "mysql_query(lq(%s))";
} else { // call the ADODB driver
die("DBDRIVER not supported currently for the parser");
$this->codepieces['sqlerror'] = "or die($GLOBALS[db]->errormsg())";
$this->codepieces['sqlquery'] = "$GLOBALS[db]->execute(%s)";
$this->codepieces['sqlfetch'] = '';
}
}
function parse_loop_extra(& $tables, & $tablesinselect, & $extrainselect, & $selectparts)
{
global $site, $home, $db;
static $tablefields; // charge qu'une seule fois
if (!$tablefields) {
require ('tablefields.php');
}
// split the SQL parts into quoted/non-quoted par
foreach ($selectparts as $k => $v) {
$selectparts[$k] = $this->sqlsplit($v);
}
$where = & $selectparts['where'];
// convertion des codes specifiques dans le where
// ce bout de code depend du parenthesage et du trim fait dans parse_loop.
# $where=preg_replace (array(
# "/$trash$/i",
# "/$ok$/i",
# "/$rightgroup$/i"
# ),
# array(
# "status<=0",
# "status>0",
# '".($GLOBALS[lodeluser][admin] ? "1" : "(usergroup IN ($GLOBALS[lodeluser][groups]))")."'
# ),$where);
//
if ($tablefields[lq("#_TP_classes")]) {
$dao = &getDAO("classes");
$classes = $dao->findMany("status > 0");
foreach ($classes as $class) {
// manage the linked tables...
// do we have the table class in $tables ?
$ind = array_search($class->class, $tables);
if ($ind === FALSE || $ind === NULL) {
continue;
}
$alias = "alias_".$class->classtype."_".$class->class;
$aliastype = "aliastype_".$class->classtype. "_". $class->class;
$aliasbyclasstype[$class->classtype] = $alias;
$classbyclasstype[$class->classtype] = $class->class;
switch ($class->classtype) {
case "entities" :
$typetable = "types";
protect($selectparts, $alias, "id|idtype|identifier|usergroup|iduser|rank|status|idparent|creationdate|modificationdate|g_title");
$longid = "identity";
break;
case "entries" :
$typetable = "entrytypes";
protect($selectparts, $alias, "id|idtype|g_name|sortkey|rank|status|idparent");
$longid = "identry";
break;
case "persons" :
$typetable = "persontypes";
protect($selectparts, $alias, "id|idtype|g_familyname|g_firstname|status");
$longid = "idperson";
break;
default :
die("ERROR: internal error in lodelparser");
}
array_push($tables, $class->classtype. " AS ". $alias, typestable($class->classtype). " AS ". $aliastype);
// put entites just after the class table
array_splice($tablesinselect, $ind +1, 0, $alias);
$where[count($where) - 1] .= " AND ". $class->class. ".". $longid."=". $alias. ".id AND ".$alias.".idtype=". $aliastype.".id AND ". $aliastype. ".class=";
$where[] = "'". $class->class. "'"; // quoted part
$where[] = "";
$extrainselect .= ", ".$aliastype. ".type , ". $aliastype. ".class";
if (preg_match_sql("/\bparent\b/", $where) &&
($class->classtype == "entities" || $class->classtype == "entries")) {
array_push($tables, $class->classtype. " AS ". $alias. "_parent");
$fullid = $class->classtype == "entries" ? "g_name" : "identifier";
preg_replace_sql("/\bparent\b/", $alias. "_parent.".$fullid, $where);
$where[count($where) - 1] .= " AND ". $alias. "_parent.id=". $alias. ".idparent";
}
}
}
if (in_array("entities", $tables)) {
if (preg_match_sql("/\bclass\b/", $where) || preg_match_sql("/\btype\b/", $where)) {
array_push($tables, "types");
protect($selectparts, "entities", "id|status|rank");
$jointypesentitiesadded = 1;
$where[count($where) - 1] .= " AND entities.idtype=types.id";
}
if (preg_match_sql("/\bparent\b/", $where)) {
array_push($tables, "entities as entities_parent");
protect($selectparts, "entities", "id|idtype|identifier|usergroup|iduser|rank|status|idparent|creationdate|modificationdate|g_title");
preg_replace_sql("/\bparent\b/", "entities_parent.identifier", $where);
$where[count($where) - 1] .= " AND entities_parent.id=entities.idparent";
}
if (in_array("types", $tables)) { // compatibilite avec avant... et puis c est pratique quand meme.
$extrainselect .= ", types.type , types.class";
}
} // fin de entities
// verifie le status
if (!preg_match_sql("/\bstatus\b/i", $where)) { // test que l'element n'est pas a la poubelle
$teststatus = array ();
foreach ($tables as $table) {
list ($table, $alias) = preg_split("/\s+AS\s+/i", $table);
if (!$alias){
$alias = $table;
}
$realtable = $this->prefixTableName($table);
if (!$tablefields[$realtable] || !in_array("status", $tablefields[$realtable])) {
continue;
}
if ($table == "session") {
continue;
}
if ($table == "entities") {
$lowstatus = '"-64".($GLOBALS[lodeluser][admin] ? "" : "*('.$alias.'.usergroup IN (".$GLOBALS[lodeluser][groups]."))")';
} else {
$lowstatus = "-64";
}
$where[count($where) - 1] .= " AND (".$alias.".status>\".(\$GLOBALS[lodeluser][visitor] ? $lowstatus : \"0\").\")";
}
}
# echo "where 2:",htmlentities($where),"<br>";
if ($site) {
///////// CODE SPECIFIQUE -- gere les tables croisees
//
// les regexp ci-dessous sont insuffisantes, il faudrait tester que ce n'est pas dans une zone quotee de la clause where !!!!
//
// persons and entries
foreach (array ("persons" => "persontypes", "entries" => "entrytypes") as $table => $typetable) {
if (in_array($table, $tables) && preg_match_sql("/\b(type|g_type)\b/", $where)) {
protect($selectparts, $table, "id|status|rank");
array_push($tables, $typetable);
$where[count($where) - 1] .= " AND ".$table.".idtype=".$typetable.".id";
}
if (in_array($table, $tables) || $aliasbyclasstype[$table]) {
if ($aliasbyclasstype[$table]) {
$class = $classbyclasstype[$table];
$table = $aliasbyclasstype[$table];
} else {
$class = "";
}
// fait ca en premier
if (preg_match_sql("/\b(iddocument|identity)\b/", $where)) {
// on a besoin de la table croisee entities_persons
$alias = "relation_entities_".$table; // use alias for security
array_push($tables, "relations as ".$alias); ###,"entities_persons");
#print_R($where);
preg_replace_sql("/\b(iddocument|identity)\b/", $alias.".id1", $where);
#print_R($where);
$where[count($where) - 1] .= " AND $alias.id2=$table.id";
if ($class && $typetable == "persontypes") { // related table for persons only
$relatedtable = "entities_".$class;
if (!in_array($relatedtable, $tables)) {
array_push($tables, $relatedtable);
$where[count($where) - 1] .= " AND ".$relatedtable.".idrelation=".$alias.".idrelation";
$extrainselect .= ", ".$relatedtable.".* ";
}
}
}
}
}
if ($aliasbyclasstype['entities'] || in_array("entities", $tables)) {
foreach (array ("persons" => "idperson", "entries" => "identry") as $table => $regexp) {
if (!preg_match_sql("/\b($regexp)\b/", $where)) {
continue;
}
// on a besoin de la table croise relation
$alias = "relation2_".$table; // use alias for security
array_push($tables, "relations as ".$alias);
preg_replace_sql("/\b($regexp)\b/", $alias.".id2", $where);
$where[count($where) - 1] .= " AND ".$alias.".id1=". ($aliasbyclasstype['entities'] ? $aliasbyclasstype['entities'] : "entities").".id";
if ($table == "persons" && $classbyclasstype['persons']) { // related table for persons only
$relatedtable = "entities_".$classbyclasstype['persons'];
if (!in_array($relatedtable, $tables)) {
array_push($tables, $relatedtable);
$where[count($where) - 1] .= " AND ".$relatedtable.".idrelation=".$alias.".idrelation";
$extrainselect .= ", ".$relatedtable.".* ";
}
}
}
}
if (in_array("usergroups", $tables) && preg_match_sql("/\biduser\b/", $where)) {
// on a besoin de la table croise users_groupes
array_push($tables, "users_usergroups");
$where[count($where) - 1] .= " AND idgroup=usergroups.id";
}
if (in_array("users", $tables) && in_array("session", $tables)) {
$where[count($where) - 1] .= " AND iduser=users.id";
}
} // site
// join the SQL parts
foreach ($selectparts as $k => $v) {
if (is_array($v)) {
$selectparts[$k] = join("", $v);
}
}
$selectparts['where'] = lq($selectparts['where']);
if (preg_match("/\b(count|min|max|avg|bit_and|bit_or|bit_xor|group_concat|std|stddev|stddev_pop|stddev_samp|sum|var_pop|var_samp|variance)\s*\(/i", $selectparts['select']))
$extrainselect = ""; // group by function
$extrainselect = lq($extrainselect);
$tables = array_map(array (& $this, "prefixTableName"), $tables);
$tablesinselect = array_map(array (& $this, "prefixTableName"), $tablesinselect);
}
//
// Traitement special des variables
//
function parse_variable_extra($prefix, $varname)
{
// VARIABLES SPECIALES
if ($prefix == "#") {
if ($varname == "GROUPRIGHT") {
return '($GLOBALS[lodeluser][admin] || in_array($context[usergroup],explode(\',\',$GLOBALS[lodeluser][groups])))';
}
if (preg_match("/^OPTION[_.]/", $varname)) { // options
return "getoption('".strtolower(substr($varname, 7))."')";
}
}
if ($prefix == "@") {
$dotpos = strpos($varname, ".");
if ($dotpos) {
$name = substr($varname, $dotpos +1);
$group = substr($varname, 0, $dotpos);
} else {
$name = $varname;
$group = "site";
}
return $this->maketext($name, $group, "@");
}
return FALSE;
}
//
// fonction qui gere les decodage du contenu des differentes parties
// d'une loop (DO*)
// fonction speciale pour lodel
//
function decode_loop_content_extra($balise, & $content, & $options, $tables)
{
global $home;
$havepublications = in_array("publications", $tables);
$havedocuments = in_array("documents", $tables);
//
// est-ce qu'on veut le prev et next publication ?
//
// desactive le 10/03/04
// if ($havepublications && preg_match("/\[\(?#(PREV|NEXT)PUBLICATION\b/",$content[$balise])) {
// $content["PRE_".$balise]='include_once("$GLOBALS[home]/func.php"); export_prevnextpublication($context);';
// }
// les filtrages automatiques
if ($havedocuments || $havepublications) {
$options['sqlfetchassoc'] = 'filtered_mysql_fetch_assoc($context,%s)';
if (!$this->filterfunc_loaded){
$this->filterfunc_loaded = TRUE;
$this->fct_txt .= 'if (!(@include_once("CACHE/filterfunc.php"))) require_once("filterfunc.php");';
}
}
}
function parse_TEXT()
{
$attr = $this->_decode_attributs($this->arr[$this->ind + 1]);
if (!$attr['NAME']) {
$this->errmsg("ERROR: The TEXT tag has no NAME attribute");
}
$name = addslashes(stripslashes(trim($attr['NAME'])));
$group = addslashes(stripslashes(trim($attr['GROUP'])));
if (!$group) {
$group = "site";
}
$this->_clearposition();
$this->arr[$this->ind] = $this->maketext($name, $group, "text");
}
function maketext($name, $group, $tag)
{
global $db;
$name = strtolower($name);
$group = strtolower($group);
if ($GLOBALS['righteditor']) { // cherche si le texte existe
require_once TOINCLUDE."connect.php";
if ($group != "site") {
usemaindb();
$prefix = lq("#_MTP_");
} else {
$prefix = lq("#_TP_");
}
$textexists = $db->getOne("SELECT 1 FROM ".$prefix."texts WHERE name='$name'

	lodel

[ class tree: lodel ] [ index: lodel ] [ all elements ]

Source for file lodelparser.php