Changeset 485 for trunk/phpbms/modules/base/include/files.php

Timestamp:

04/07/09 11:44:18 (3 years ago)

Author:

nate

Message:

• Merged Nathan branch back into trunk.

Files:

• trunk/phpbms/modules/base/include/files.php (modified) (3 diffs)

trunk/phpbms/modules/base/include/files.php

@@ -40 +40 @@
 if(class_exists("phpbmsTable")){
         class files extends phpbmsTable{
-        
+
+                var $availableRoleIDs = array();
+
                 function getPicture($name){
                         if (function_exists('file_get_contents')) {
@@ -48 +50 @@
                                 $file = addslashes(fread(fopen($_FILES[$name]['tmp_name'], 'r'), filesize($_FILES[$name]['tmp_name'])));
                         }
-                        
+
                         return $file;
                 }
-                
-                function formatVariables($variables){
-        
-                        if($_FILES['upload']["name"]){
-                                
-                                $variables["name"] = $_FILES['upload']["name"];                 
-                                $variables["type"] = $_FILES['upload']['type'];                 
-                                $variables["file"] = $this->getPicture("upload");
-                                
-                        } else {
-                                unset($this->fields["type"]);
-                                unset($this->fields["file"]);
+
+                //populates the list of possible role ids
+                //into $this->availableRoleIDs (an array)
+                function populateRoleArray(){
+
+                        $this->availableRoleIDs = array();
+
+                        $querystatement = "
+                                SELECT
+                                        `id`
+                                FROM
+                                        `roles`;
+                                ";
+
+                        $queryresult = $this->db->query($querystatement);
+
+                        //next two should also be allowed, but aren't stored in the database
+                        $this->availableRoleIDs[] = 0;//for everyone
+                        $this->availableRoleIDs[] = -100;//for administrators
+
+                        while($therecord = $this->db->fetchArray($queryresult))
+                                $this->availableRoleIDs[] = $therecord["id"];
+
+                }//end method --populateRoleArray--
+
+
+                function verifyVariables($variables){
+
+                        //if it is set, we'll have to check, if not, it defaults to 0 which is an acceptable
+                        //value.
+                        if(isset($variables["roleid"])){
+
+                                //either its numeric or == 0
+                                if(is_numeric($variables["roleid"]) || !$variables["roleid"]){
+
+                                        //check to see if the RoleIDs are populated
+                                        if(!count($this->availableRoleIDs))
+                                                $this->populateRoleArray();//populate if not
+
+                                        //check to see if the int typecast of the roleid (to allow for values
+                                        //equivalent to 0) is an acceptable role id.
+                                        if(!in_array(((int)$variables["roleid"]), $this->availableRoleIDs))
+                                                $this->verifyErrors[] = "The `roleid` field does not give an existing/acceptable role id number.";
+                                }else
+                                        $this->verifyErrors[] = "The `roleid` field must be numeric or equivalent to 0.";
                         }//end if
-                        
-                        return $variables;                      
-                
+
+                        return parent::verifyVariables($variables);
+
+                }//end method
+
+
+                function prepareVariables($variables){
+
+                        if(isset($_FILES['upload']))
+                                if($_FILES['upload']["name"]){
+
+                                        $variables["name"] = $_FILES['upload']["name"];
+                                        $variables["type"] = $_FILES['upload']['type'];
+                                        $variables["file"] = $this->getPicture("upload");
+
+                                } else {
+                                        unset($this->fields["type"]);
+                                        unset($this->fields["file"]);
+                                }//end if
+
+                        return $variables;
+
                 }//end function
-        
-        
+
+
                 function updateRecord($variables, $modifiedby = NULL){
-        
-                        $variables = $this->formatVariables($variables);
-        
+
                         $thereturn = parent::updateRecord($variables, $modifiedby);
-                        
+
                         //restore the fields
                         $this->getTableInfo();
-                        
+
                         return $thereturn;
                 }//end method
-                
-                
+
+
                 function insertRecord($variables, $createdby = NULL){
-                
-                        $variables = $this->formatVariables($variables);
-        
+
                         $newid = parent::insertRecord($variables, $createdby);
-                        
+
                         //restore the fields
                         $this->getTableInfo();
-                        
+
                         return $newid;
-                        
+
                 }//end method
-                        
+
         }//end class
 }//end if
@@ -101 +151 @@
 if(class_exists("searchFunctions")){
         class filesSearchFunctions extends searchFunctions{
-        
+
                 function delete_record(){
-                
+
                         $whereclause = $this->buildWhereClause();
                         $attachmentwhereclause = $this->buildWhereClause("attachments.fileid");
-                
+
                         $querystatement = "DELETE FROM attachments WHERE ".$attachmentwhereclause." AND attachments.fileid!=1;";
                         $queryresult = $this->db->query($querystatement);
-                
+
                         $querystatement = "DELETE FROM files WHERE ".$whereclause." AND files.id!=1;";
                         $queryresult = $this->db->query($querystatement);
-                        
+
                         $message = $this->buildStatusMessage();
                         $message.=" deleted";
                         return $message;
                 }
-        
+
         }//end class
 }//end if