Changeset 691

Timestamp:

12/30/09 14:17:21 (2 years ago)

Author:

nate

Message:

• Added additional data check for api get requests.
• The files's class getRecord no longer loads in the entire binary file into memory when the function is called. The function also returns a field named 'apifileurl' that gives the to get a file via an api login.
• Added a file that serves a files record's file field using api login credentials posted to it.

Location:

trunk/phpbms/modules

Files:

• api/api_servefile.php (added)
• api/include/apiclass.php (modified) (2 diffs)
• base/files_addedit.php (modified) (1 diff)
• base/include/files.php (modified) (1 diff)

trunk/phpbms/modules/api/include/apiclass.php

@@ -598 +598 @@
                             $processor->timeFormat =  $this->options->timeFormat;
                         }//end if
-
-                        if(!$this->options->useUuid){
+                        
+                        $errorMessage = "";
+                        if($this->options->useUuid){
+                            if(!isset($request["data"]["uuid"]))
+                                $errorMessage = "The `uuid` field must be set.";
+                        }else{
+                            if(!isset($request["data"]["id"]))
+                                $errorMessage = "The `id` field must be set.";
+                        }//end if
+                        
+                        if($errorMessage)
+                            $this->sendError("Update failed from request number ".$i, $errorMessage);
+                        elseif(!$this->options->useUuid){
                             $therecord = $processor->getRecord((int) $request["data"]["id"], $this->options->useUuid);
                             $thereturn = $therecord["id"];
@@ -608 +619 @@
                             $thevalue = $request["data"]["uuid"];
                         }
-
 
                         if($thereturn == $thevalue)

trunk/phpbms/modules/base/files_addedit.php

@@ -66 +66 @@
 
         function getAttachments($db,$uuid){
-                $querystatement="
+                $querystatement = "
                         SELECT
                                 `tabledefs`.`displayname`,

trunk/phpbms/modules/base/include/files.php

@@ -53 +53 @@
                         return $file;
                 }
-
-
+                
+                
+                /**
+          * function getDefaults
+          *
+          * Retrieves default values for a single record
+          *
+          * Uses the field names to guess a default value.  If it cannot find
+          * one of the standard names it sets the default value based on the type
+          *
+          * @retrun array associative array with record defaults
+          */
+        function getDefaults(){
+                        
+                        $therecord = parent::getDefaults();
+                        
+                        $therecord["apifileurl"] = "";
+                        
+                        return $therecord;
+                        
+                }//end function --getDefaults
+
+
+                /**
+         * function getRecord
+         *
+         * Retrieves a single record from the database
+         *
+         * @param integer|string $id the record id or uuid
+         * @param bool $useUuid specifies whther the $id is a uuid (true) or not.  Default is false
+         *
+         * @return array the record as an associative array
+         */
+        function getRecord($id, $useUuid = false){
+                        
+                        if($useUuid){
+                        
+                                $id = mysql_real_escape_string($id);
+                                $whereclause = "`uuid` = '".$id."'";
+                        
+                        } else {
+                        
+                                $id = (int) $id;
+                                $whereclause = "`id` = ".$id;
+                        
+                        }//endif
+                        
+                        $querystatement = "
+                                SELECT
+                                        `id`,
+                                        `uuid`,
+                                        `name`,
+                                        `description`,
+                                        `type`,
+                                        `createdby`,
+                                        `creationdate`,
+                                        `modifiedby`,
+                                        `modifieddate`,
+                                        `roleid`,
+                                        '' AS `file`,
+                                        `custom1`,
+                                        `custom2`,
+                                        `custom3`,
+                                        `custom4`,
+                                        `custom5`,
+                                        `custom6`,
+                                        `custom7`,
+                                        `custom8`
+                                FROM
+                                        `files`
+                                WHERE
+                                        ".$whereclause;
+                                        
+                        $queryresult = $this->db->query($querystatement);
+                                        
+                        if($this->db->numRows($queryresult)){
+                $therecord = $this->db->fetchArray($queryresult);
+                                
+                                if(!empty($_SERVER["HTTPS"]))
+                                        $protocol = "https://";
+                                else
+                                        $protocol = "http://";
+                                        
+                                
+                                if( ($_SERVER["SERVER_PORT"] == "443" && !empty($_SERVER["HTTPS"])) || ($_SERVER["SERVER_PORT"] == "80" && empty($_SERVER["HTTPS"])) )
+                                        $port = "";
+                                else
+                                        $port = ":".$_SERVER["SEVER_PORT"];
+                                
+                                $therecord["apifileurl"] = $protocol.$_SERVER["SERVER_NAME"].$port.APP_PATH."modules/api/api_servefile.php?i=".(int)$therecord["id"];
+                        }else
+                $therecord = $this-> getDefaults();
+                        
+                        return $therecord;
+                        
+                }//end function --getRecord--
+                
+                
                 function verifyVariables($variables){