357 lines
12 KiB
PHP
357 lines
12 KiB
PHP
<?php
|
|
|
|
namespace objects;
|
|
|
|
use classes\db;
|
|
use classes\object_property;
|
|
use classes\response;
|
|
use customers\economic_customer_mo;
|
|
use customers\economicCustomers;
|
|
use traits\db_object_t;
|
|
|
|
class users_o extends db
|
|
{
|
|
use db_object_t;
|
|
public object_property $customer_number;
|
|
public object_property $password;
|
|
public object_property $group_id;
|
|
public economic_customer_mo $economic_customer;
|
|
public object_property $created_at;
|
|
public object_property $updated_at;
|
|
public array $permissions;
|
|
|
|
public function structure(): void
|
|
{
|
|
$this->setTable('users');
|
|
}
|
|
|
|
public function getObjectProperties(): void
|
|
{
|
|
$this->customer_number = new object_property($this->table, $this->id, 'customer_number', 'string', true);
|
|
$this->password = new object_property($this->table, $this->id, 'password', 'string', true);
|
|
$this->group_id = new object_property($this->table, $this->id, 'group_id', 'int', true);
|
|
$this->created_at = new object_property($this->table, $this->id, 'created_at', 'string', false);
|
|
$this->updated_at = new object_property($this->table, $this->id, 'updated_at', 'string', false);
|
|
}
|
|
|
|
public function getUserByCustomerNumber(int $customer_number): users_o
|
|
{
|
|
global $db;
|
|
// Get the record from the database
|
|
$sql = "SELECT * FROM $this->table WHERE customer_number = '$customer_number'";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
$this->id = $result->fetch_assoc()['id'];
|
|
$this->getObjectProperties();
|
|
} else {
|
|
// Import the customer
|
|
$this->importCustomerFromExternalSource($customer_number);
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
public function getUserById(int $id): users_o
|
|
{
|
|
global $db;
|
|
// Get the record from the database
|
|
$sql = "SELECT * FROM $this->table WHERE id = $id";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
$this->id = $id;
|
|
$this->getObjectProperties();
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
public function add(string $customer_number, mixed $password): void
|
|
{
|
|
global $db;
|
|
// Avoid SQL injection
|
|
$customer_number = $db->escape_string($customer_number);
|
|
// Hash the password
|
|
$password = password_hash($password, PASSWORD_DEFAULT);
|
|
$password = $db->escape_string($password);
|
|
// Create a new record in the database
|
|
$sql = "INSERT INTO $this->table (customer_number, password) VALUES ('$customer_number', '$password')";
|
|
$db->query($sql);
|
|
|
|
// Get the id of the new record
|
|
$this->id = $db->insert_id();
|
|
|
|
// Set the values of the object properties
|
|
$this->getObjectProperties();
|
|
}
|
|
|
|
public function hasPermission(string $permission): bool
|
|
{
|
|
global $db;
|
|
// Get the user's group id
|
|
$group_id = $this->group_id->value();
|
|
// If the users is an admin, they have all permissions
|
|
if ((int)$group_id === 1) {
|
|
return true;
|
|
}
|
|
// Get the record from the database
|
|
$sql = "SELECT * FROM groups_permissions WHERE group_id = $group_id AND permission = '$permission'";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
public function edit(int $id, string $customer_number, string|null $role, string|null $password): void
|
|
{
|
|
global $db;
|
|
$this->id = $id;
|
|
// Avoid SQL injection
|
|
$customer_number = $db->escape_string($customer_number);
|
|
if ($password !== null) {
|
|
// Hash the password
|
|
$password = password_hash($password, PASSWORD_DEFAULT);
|
|
$password = $db->escape_string($password);
|
|
}
|
|
if ($role !== null) {
|
|
$role = $db->escape_string($role);
|
|
}
|
|
// Update the record in the database
|
|
$sql = "UPDATE $this->table SET customer_number = '$customer_number'";
|
|
if ($password !== null) {
|
|
$sql .= ", password = '$password'";
|
|
}
|
|
if ($role !== null) {
|
|
$sql .= ", group_id = '$role'";
|
|
}
|
|
$sql .= " WHERE id = $this->id";
|
|
$db->query($sql);
|
|
|
|
// Set the values of the object properties
|
|
$this->getObjectProperties();
|
|
}
|
|
|
|
public function getCustomerByIdOrCustomerNumber(int $idOrCustomerNumber): users_o
|
|
{
|
|
global $db;
|
|
// Get the record from the database
|
|
$sql = "SELECT * FROM $this->table WHERE id = $idOrCustomerNumber OR customer_number = '$idOrCustomerNumber'";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
$this->id = $result->fetch_assoc()['id'];
|
|
$this->getObjectProperties();
|
|
} else {
|
|
// Import the customer
|
|
$this->importCustomerFromExternalSource($idOrCustomerNumber);
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
public function automaticGetTargetUserFromRequest(): users_o
|
|
{
|
|
// Get the data from the request
|
|
if ($_SERVER['REQUEST_METHOD'] === 'GET' || $_SERVER['REQUEST_METHOD'] === 'DELETE') {
|
|
$data = $_GET;
|
|
} else {
|
|
$data = json_decode(file_get_contents('php://input'), true);
|
|
}
|
|
// Check if the user id is set in the request
|
|
if (isset($data['user_id'])) {
|
|
return $this->getUserById((int)$data['user_id']);
|
|
} elseif (isset($data['customer_number'])) {
|
|
return $this->getUserByCustomerNumber($data['customer_number']);
|
|
} else {
|
|
return $this;
|
|
}
|
|
}
|
|
|
|
public function asArray(): array
|
|
{
|
|
$array = [
|
|
'id' => (int)$this->id,
|
|
'customer_number' => (int)$this->customer_number->value(),
|
|
'group_id' => (int)$this->group_id->value(),
|
|
'created_at' => $this->created_at->value(),
|
|
'updated_at' => $this->updated_at->value(),
|
|
];
|
|
// If the economic customer data is set, add it to the array
|
|
if (isset($this->economic_customer)) {
|
|
$array['economic_customer'] = $this->economic_customer->asArray();
|
|
}
|
|
// If the permissions are set, add them to the array
|
|
if (isset($this->permissions)) {
|
|
$array['permissions'] = $this->permissions;
|
|
}
|
|
return $array;
|
|
}
|
|
|
|
public function getNotes():array
|
|
{
|
|
global $db;
|
|
// Create the customer notes object
|
|
$customer_notes = new customer_notes_o();
|
|
// Get the customer notes
|
|
return $customer_notes->getCustomerNotesAsArray($this->id);
|
|
}
|
|
|
|
public function addNote($customer_id, $note, $cashier_id): void
|
|
{
|
|
global $db;
|
|
// Create the customer notes object
|
|
$customer_notes = new customer_notes_o();
|
|
// Add the note
|
|
$customer_notes->add($customer_id, $note, $cashier_id);
|
|
}
|
|
|
|
public function deleteNote(int $note_id): void
|
|
{
|
|
global $db;
|
|
// Create the customer notes object
|
|
$customer_notes = new customer_notes_o();
|
|
// Delete the note
|
|
$customer_notes->delete($note_id);
|
|
}
|
|
|
|
public function getOrImportCustomerByCustomerNumber(int $customer_number): object|bool
|
|
{
|
|
global $db;
|
|
// Check if the customer exists
|
|
$sql = "SELECT * FROM $this->table WHERE customer_number = $customer_number";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
$this->id = $result->fetch_assoc()['id'];
|
|
$this->getObjectProperties();
|
|
} else {
|
|
// Import the customer
|
|
return $this->importCustomerFromExternalSource($customer_number);
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
private function importCustomerFromExternalSource(int $customer_number): object|bool
|
|
{
|
|
global $db;
|
|
// Get the customer data from the external source
|
|
$economic = new economicCustomers();
|
|
$customer_data = $economic->getCustomerId($customer_number);
|
|
// DEBUG: Return the customer data
|
|
// Check if the customer exists
|
|
if (isset($customer_data[0])) {
|
|
// Avoid SQL injection
|
|
$customer_number = $db->escape_string($customer_data[0]->customerNumber);
|
|
// Create a new record in the database
|
|
$sql = "INSERT INTO $this->table (customer_number) VALUES ('$customer_number')";
|
|
$db->query($sql);
|
|
// Get the id of the new record
|
|
$this->id = $db->insert_id();
|
|
// Set the values of the object properties
|
|
$this->getObjectProperties();
|
|
}
|
|
// Else return false
|
|
return false;
|
|
}
|
|
|
|
public function getCustomerEcocomicData(int $customer_number = null): users_o
|
|
{
|
|
// Get the customer data from the external source
|
|
$economic = new economicCustomers();
|
|
// Check if the customer number is set
|
|
if (!isset($this->customer_number) && $customer_number === null) {
|
|
return $this;
|
|
}
|
|
$customer_number = $customer_number ?? $this->customer_number->value();
|
|
$this->economic_customer = (new economic_customer_mo())->getCustomerByCustomerNumber($customer_number);
|
|
return $this;
|
|
}
|
|
|
|
public function getUserAttributes(int $user_id = null): array
|
|
{
|
|
global $db;
|
|
if ($user_id === null) {
|
|
$user_id = $this->id;
|
|
}
|
|
$sql = "SELECT * FROM maintenancemode_dbtest.customer_attributes WHERE user_id = $user_id";
|
|
$result = $db->query($sql);
|
|
return $db->fetch_all($result);
|
|
}
|
|
|
|
public function doesUserHaveAttribute(string $attribute, int $user_id = null): bool
|
|
{
|
|
global $db;
|
|
if ($user_id === null) {
|
|
$user_id = $this->id;
|
|
}
|
|
$attribute = $db->escape_string($attribute);
|
|
$sql = "SELECT * FROM maintenancemode_dbtest.customer_attributes WHERE user_id = $user_id AND attribute = '$attribute'";
|
|
$result = $db->query($sql);
|
|
if ($result->num_rows > 0) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
public function addAttribute(string $attribute, int $user_id = null): void
|
|
{
|
|
global $db;
|
|
if ($user_id === null) {
|
|
$user_id = $this->id;
|
|
}
|
|
$attribute = $db->escape_string($attribute);
|
|
// Make sure the attribute does not already exist
|
|
if ($this->doesUserHaveAttribute((string)$attribute, (int)$user_id)) {
|
|
return;
|
|
}
|
|
$sql = "INSERT INTO maintenancemode_dbtest.customer_attributes (user_id, attribute) VALUES ($user_id, '$attribute')";
|
|
$db->query($sql);
|
|
}
|
|
|
|
public function deleteAttribute(string $attribute, int $user_id = null): void
|
|
{
|
|
global $db;
|
|
if ($user_id === null) {
|
|
$user_id = $this->id;
|
|
}
|
|
$attribute = $db->escape_string($attribute);
|
|
// Make sure the attribute exists
|
|
if (!$this->doesUserHaveAttribute((string)$attribute, (int)$user_id)) {
|
|
return;
|
|
}
|
|
$sql = "DELETE FROM maintenancemode_dbtest.customer_attributes WHERE user_id = $user_id AND attribute = '$attribute'";
|
|
$db->query($sql);
|
|
}
|
|
|
|
public function requiresReference(): bool
|
|
{
|
|
return $this->doesUserHaveAttribute('requiresReferenceNumber');
|
|
}
|
|
|
|
public function includeIncludes(array $includes = []): users_o
|
|
{
|
|
global /** @var response $response */
|
|
$response;
|
|
$includeEverything = $response->getRequestParameter('include_all') === 'true' || in_array('all', $includes);
|
|
/**
|
|
* economicCustomer
|
|
*/
|
|
if ($includeEverything || $response->getRequestParameter('includeEconomicCustomer') === 'true' || in_array('economicCustomer', $includes)) {
|
|
$this->getCustomerEcocomicData();
|
|
}
|
|
/**
|
|
* permissions
|
|
*/
|
|
if ($includeEverything || $response->getRequestParameter('includePermissions') === 'true' || in_array('permissions', $includes)) {
|
|
$this->getPermissions();
|
|
}
|
|
return $this;
|
|
}
|
|
|
|
private function getPermissions(): void
|
|
{
|
|
global $db;
|
|
$sql = "SELECT permission FROM groups_permissions WHERE group_id = " . $this->group_id->value();
|
|
$result = $db->query($sql);
|
|
$perms = [];
|
|
while ($row = $result->fetch_assoc()) {
|
|
$perms[] = $row['permission'];
|
|
}
|
|
$this->permissions = $perms;
|
|
}
|
|
} |