* @package common * @version $Id$ * @link http://www.zentao.net */ class commonModel extends model { public static $requestErrors = array(); /** * Set config of user. * * @access public * @return void */ public function setUserConfig() { $this->sendHeader(); $this->setCompany(); $this->setUser(); $this->setApproval(); $this->loadConfigFromDB(); $this->loadCustomFromDB(); if(!$this->checkIP()) return print($this->lang->ipLimited); } /** * Set the status of execution, project, and program to doing. * * @param int $objectID * @access public * @return void */ public function syncPPEStatus(int $objectID) { global $app; $rawModule = $app->rawModule; if($rawModule == 'task' or $rawModule == 'effort') { $taskID = $objectID; $execution = $this->syncExecutionStatus($taskID); $project = $this->syncProjectStatus($execution); $this->syncProgramStatus($project); } if($rawModule == 'execution') { $executionID = $objectID; $execution = $this->dao->select('id, project, grade, parent, status, deleted')->from(TABLE_EXECUTION)->where('id')->eq($executionID)->fetch(); $this->syncExecutionByChild($execution); $project = $this->syncProjectStatus($execution); $this->syncProgramStatus($project); } if($rawModule == 'project') { $projectID = $objectID; $project = $this->dao->select('id, parent, path')->from(TABLE_PROJECT)->where('id')->eq($projectID)->fetch(); $this->syncProgramStatus($project); } if($rawModule == 'program' and $this->config->systemMode == 'ALM') { $programID = $objectID; $program = $this->dao->select('id, parent, path')->from(TABLE_PROGRAM)->where('id')->eq($programID)->fetch(); $this->syncProgramStatus($program); } } /** * Set the status of the program to which theproject is linked as Ongoing. * * @param object $project * @access public * @return void */ public function syncProgramStatus(object $project) { if($project->parent == 0) return; $parentPath = str_replace(",{$project->id},", '', $project->path); $parentPath = explode(',', trim($parentPath, ',')); $waitList = $this->dao->select('id')->from(TABLE_PROGRAM) ->where('id')->in($parentPath) ->andWhere('status')->eq('wait') ->orderBy('id_desc') ->fetchPairs(); $this->dao->update(TABLE_PROGRAM)->set('status')->eq('doing')->set('realBegan')->eq(helper::now())->where('id')->in($waitList)->exec(); $this->loadModel('action'); foreach($waitList as $programID) { $this->action->create('program', $programID, 'syncprogram'); } } /** * Set the status of the project to which the execution is linked as Ongoing. * * @param object $execution * @access public * @return object $project */ public function syncProjectStatus(object $execution): object { $projectID = $execution->project; $project = $this->dao->select('*')->from(TABLE_PROJECT)->where('id')->eq($projectID)->fetch(); $today = helper::today(); if($project->status == 'wait') { $this->dao->update(TABLE_PROJECT) ->set('status')->eq('doing') ->beginIf(helper::isZeroDate($project->realBegan))->set('realBegan')->eq($today)->fi() ->where('id')->eq($projectID) ->exec(); $this->loadModel('project')->recordFirstEnd($projectID); $actionType = $project->multiple ? 'syncproject' : 'syncmultipleproject'; $this->loadModel('action')->create('project', $projectID, $actionType); } return $project; } /** * Set the status of the execution to which the sub execution is linked as Ongoing. * * @param object $execution * @access public * @return object|false $parentExecution */ public function syncExecutionByChild(object $execution): object|false { if($execution->grade == 1) return false; $today = helper::today(); $parentExecution = $this->dao->select('*')->from(TABLE_EXECUTION)->where('id')->eq($execution->parent)->fetch(); if($execution->deleted == '0' and $execution->status == 'doing' and in_array($parentExecution->status, array('wait', 'closed'))) { $this->dao->update(TABLE_EXECUTION) ->set('status')->eq('doing') ->beginIf(helper::isZeroDate($parentExecution->realBegan))->set('realBegan')->eq($today)->fi() ->where('id')->eq($execution->parent) ->exec(); $this->loadModel('action')->create('execution', $execution->parent, 'syncexecutionbychild'); } $project = $this->loadModel('project')->getByID($execution->project); if($project->model == 'waterfall' or $project->model == 'waterfallplus') $this->loadModel('programplan')->computeProgress($execution->id); return $parentExecution; } /** * Set the status of the execution to which the task is linked as Ongoing. * * @param int $taskID * @access public * @return object $execution */ public function syncExecutionStatus(int $taskID): object { $execution = $this->dao->select('t1.*')->from(TABLE_EXECUTION)->alias('t1') ->leftJoin(TABLE_TASK)->alias('t2')->on('t1.id=t2.execution') ->where('t2.id')->eq($taskID) ->fetch(); $today = helper::today(); if($execution->status == 'wait') { $this->dao->update(TABLE_EXECUTION)->set('status')->eq('doing')->set('realBegan')->eq($today)->where('id')->eq($execution->id)->exec(); $this->loadModel('project')->recordFirstEnd($execution->id); $this->loadModel('action')->create('execution', $execution->id, 'syncexecution'); if($execution->parent) { $execution = $this->dao->select('*')->from(TABLE_EXECUTION)->where('id')->eq($execution->id)->fetch(); // Get updated execution. $this->syncExecutionByChild($execution); } } return $execution; } /** * Set the header info. * * @access public * @return void */ public function sendHeader() { helper::header('Content-Type', "text/html; Language={$this->config->charset}"); helper::header('Cache-Control', 'private'); /* Send HTTP header. */ if($this->config->framework->sendXCTO) helper::header('X-Content-Type-Options', 'nosniff'); if($this->config->framework->sendXXP) helper::header('X-XSS-Protection', '1; mode=block'); if($this->config->framework->sendHSTS) helper::header('Strict-Transport-Security', 'max-age=3600; includeSubDomains'); if($this->config->framework->sendRP) helper::header('Referrer-Policy', 'no-referrer-when-downgrade'); if($this->config->framework->sendXPCDP) helper::header('X-Permitted-Cross-Domain-Policies', 'master-only'); if($this->config->framework->sendXDO) helper::header('X-Download-Options', 'noopen'); /* Set Content-Security-Policy header. */ if($this->config->CSPs) { foreach($this->config->CSPs as $CSP) helper::header('Content-Security-Policy', "$CSP;"); } if($this->loadModel('setting')->getItem('owner=system&module=sso&key=turnon')) { if(isset($_SERVER["HTTPS"]) and $_SERVER["HTTPS"] == 'on') { $session = $this->config->sessionVar . '=' . session_id(); helper::header('Set-Cookie', "$session; SameSite=None; Secure=true", false); } } else { if(!empty($this->config->xFrameOptions)) helper::header('X-Frame-Options', $this->config->xFrameOptions); } } /** * Set the company. * * First, search company by the http host. If not found, search by the default domain. Last, use the first as the default. * After get the company, save it to session. * @access public * @return void */ public function setCompany() { if($this->session->company) { $this->app->company = $this->session->company; } else { $httpHost = $this->server->http_host; $company = $this->loadModel('company')->getFirst(); if(!$company) $this->app->triggerError(sprintf($this->lang->error->companyNotFound, $httpHost), __FILE__, __LINE__, true); $this->session->set('company', $company); $this->app->company = $company; } } /** * Set the user info. * * @access public * @return void */ public function setUser() { if($this->session->user) { if(!$this->app->upgrading) $this->session->user->view = $this->loadModel('user')->grantUserView(); $this->app->user = $this->session->user; } elseif($this->app->company->guest || (PHP_SAPI == 'cli' && (!isset($_SERVER['RR_MODE']) || $_SERVER['RR_MODE'] == 'jobs'))) { $user = new stdClass(); $user->id = 0; $user->account = 'guest'; $user->realname = 'guest'; $user->dept = 0; $user->avatar = ''; $user->role = 'guest'; $user->admin = false; $user->rights = $this->loadModel('user')->authorize('guest'); $user->groups = array('group'); $user->visions = $this->config->vision; if(!$this->app->upgrading) $user->view = $this->user->grantUserView($user->account, $user->rights['acls']); $this->session->set('user', $user); $this->app->user = $this->session->user; } } /** * Set approval config. * * @access public * @return void */ public function setApproval() { $this->config->openedApproval = (in_array($this->config->edition, array('max', 'ipd'))) && ($this->config->vision == 'rnd'); } /** * 获取表单的配置项。 * Obtain the config for the form. * * @param string $module * @param string $method * @static * @access public * @return array */ public static function formConfig(string $module, string $method): array { global $config, $app; if($config->edition == 'open') return array(); $required = $app->dbQuery("SELECT * FROM " . TABLE_WORKFLOWRULE . " WHERE `type` = 'system' and `rule` = 'notempty'")->fetch(); $fields = $app->control->loadModel('flow')->getExtendFields($module, $method); $formConfig = array(); $type = 'string'; foreach($fields as $fieldObject) { if(strpos($fieldObject->type, 'int') !== false) $type = 'int'; if(strpos($fieldObject->type, 'date') !== false) $type = 'date'; if(in_array($fieldObject->type, array('float', 'decimal'))) $type = 'float'; $formConfig[$fieldObject->field] = array('type' => $type, 'default' => $fieldObject->default, 'control' => $fieldObject->control, 'rules' => $fieldObject->rules); $formConfig[$fieldObject->field]['required'] = strpos(",{$fieldObject->rules},", ",{$required->id},") !== false; if(in_array($fieldObject->control, array('multi-select', 'checkbox'))) $formConfig[$fieldObject->field]['filter'] = 'join'; } return $formConfig; } /** * Load configs from database and save it to config->system and config->personal. * * @access public * @return void */ public function loadConfigFromDB() { /* Get configs of system and current user. */ $account = isset($this->app->user->account) ? $this->app->user->account : ''; if($this->config->db->name) $config = $this->loadModel('setting')->getSysAndPersonalConfig($account); $this->config->system = isset($config['system']) ? $config['system'] : array(); $this->config->personal = isset($config[$account]) ? $config[$account] : array(); /* Override the items defined in config/config.php and config/my.php. */ if(isset($this->config->system->common)) $this->app->mergeConfig($this->config->system->common, 'common'); if(isset($this->config->personal->common)) $this->app->mergeConfig($this->config->personal->common, 'common'); $this->config->disabledFeatures = $this->config->disabledFeatures . ',' . $this->config->closedFeatures; } /** * Load custom lang from db. * * @access public * @return void */ public function loadCustomFromDB() { $this->loadModel('custom'); if($this->app->upgrading) return; if(!$this->config->db->name) return; $records = $this->custom->getAllLang(); if(!$records) return; $this->lang->db = new stdclass(); $this->lang->db->custom = $records; } /** * Judge a method of one module is open or not. * * @param string $module * @param string $method * @access public * @return bool */ public function isOpenMethod($module, $method): bool { if(in_array("$module.$method", $this->config->openMethods)) return true; if($module == 'block' and $method == 'main' and isset($_GET['hash'])) return true; if($this->loadModel('user')->isLogon() or ($this->app->company->guest and $this->app->user->account == 'guest')) { if(stripos($method, 'ajax') !== false) return true; if($module == 'block') return true; if($module == 'index' and $method == 'app') return true; if($module == 'my' and $method == 'guidechangetheme') return true; if($module == 'product' and $method == 'showerrornone') return true; if($module == 'misc' and in_array($method, array('downloadclient', 'changelog'))) return true; if($module == 'tutorial' and in_array($method, array('start', 'index', 'quit', 'wizard'))) return true; } return false; } /** * Deny access. * * @param string $module * @param string $method * @param bool $reload * @access public * @return mixed */ public function deny(string $module, string $method, bool $reload = true) { if($reload) { /* Get authorize again. */ $user = $this->app->user; $user->rights = $this->loadModel('user')->authorize($user->account); $user->groups = $this->user->getGroups($user->account); $user->admin = strpos($this->app->company->admins, ",{$user->account},") !== false; $this->session->set('user', $user); $this->app->user = $this->session->user; if(commonModel::hasPriv($module, $method)) return true; } $vars = "module=$module&method=$method"; if(isset($this->server->http_referer)) { $referer = helper::safe64Encode($this->server->http_referer); $vars .= "&referer=$referer"; } $denyLink = helper::createLink('user', 'deny', $vars); echo json_encode(array('load' => $denyLink)); helper::end(); } /** * Print the run info. * * @param mixed $startTime the start time. * @access public * @return array the run info array. */ public function printRunInfo($startTime) { $info['timeUsed'] = round(getTime() - $startTime, 4) * 1000; $info['memory'] = round(memory_get_peak_usage() / 1024, 1); $info['querys'] = count(dao::$querys); vprintf($this->lang->runInfo, $info); return $info; } /** * Create menu item link * * @param object $menuItem * * @static * @access public * @return string */ public static function createMenuLink($menuItem) { $link = $menuItem->link; if(is_array($menuItem->link)) { $vars = isset($menuItem->link['vars']) ? $menuItem->link['vars'] : ''; if(isset($menuItem->tutorial) and $menuItem->tutorial) { if(!empty($vars)) $vars = helper::safe64Encode($vars); $link = helper::createLink('tutorial', 'wizard', "module={$menuItem->link['module']}&method={$menuItem->link['method']}¶ms=$vars"); } else { $link = helper::createLink($menuItem->link['module'], $menuItem->link['method'], $vars); } } return $link; } /** * Create sub menu by settings in lang files. * * @param object $items * @param mixed $replace * @static * @access public * @return array */ public static function createDropMenu($items, $replace) { $dropMenu = array(); foreach($items as $dropMenuKey => $dropMenuLink) { if(is_array($dropMenuLink) and isset($dropMenuLink['link'])) $dropMenuLink = $dropMenuLink['link']; if(is_array($replace)) { $dropMenuLink = vsprintf($dropMenuLink, $replace); } else { $dropMenuLink = sprintf($dropMenuLink, $replace); } list($dropMenuName, $dropMenuModule, $dropMenuMethod, $dropMenuParams) = explode('|', $dropMenuLink); $link = array(); $link['module'] = $dropMenuModule; $link['method'] = $dropMenuMethod; $link['vars'] = $dropMenuParams; $dropMenuItem = isset($items->$dropMenuKey) ? $items->$dropMenuKey : array(); $menu = new stdclass(); $menu->name = $dropMenuKey; $menu->link = $link; $menu->text = $dropMenuName; $menu->subModule = isset($dropMenuItem['subModule']) ? $dropMenuItem['subModule'] : ''; $menu->alias = isset($dropMenuItem['alias']) ? $dropMenuItem['alias'] : ''; $menu->hidden = false; $dropMenu[$dropMenuKey] = $menu; } return $dropMenu; } /** * Print admin dropMenu. * * @param string $dropMenu * @static * @access public * @return void */ public static function printAdminDropMenu($dropMenu) { global $app, $lang; $currentModule = $app->getModuleName(); $currentMethod = $app->getMethodName(); if(isset($lang->admin->dropMenuOrder->$dropMenu)) { ksort($lang->admin->dropMenuOrder->$dropMenu); foreach($lang->admin->dropMenuOrder->$dropMenu as $type) { if(isset($lang->admin->dropMenu->$dropMenu->$type)) { $subModule = ''; $alias = ''; $link = $lang->admin->dropMenu->$dropMenu->$type; if(is_array($lang->admin->dropMenu->$dropMenu->$type)) { $dropMenuType = $lang->admin->dropMenu->$dropMenu->$type; if(isset($dropMenuType['subModule'])) $subModule = $dropMenuType['subModule']; if(isset($dropMenuType['alias'])) $alias = $dropMenuType['alias']; if(isset($dropMenuType['link'])) $link = $dropMenuType['link']; } list($text, $moduleName, $methodName)= explode('|', $link); if(!common::hasPriv($moduleName, $methodName)) continue; $active = ($currentModule == $moduleName and $currentMethod == $methodName) ? 'btn-active-text' : ''; if($subModule and strpos(",{$subModule}," , ",{$currentModule},") !== false) $active = 'btn-active-text'; if($alias and $currentModule == $moduleName and strpos(",$alias,", ",$currentMethod,") !== false) $active = 'btn-active-text'; echo html::a(helper::createLink($moduleName, $methodName), "$text", '', "class='btn btn-link {$active}' id='{$type}Tab'"); } } } } /** * Print the main nav. * * @param string $moduleName * * @static * @access public * @return void */ public static function printMainNav($moduleName) { $items = common::getMainNavList($moduleName); foreach($items as $item) { if($item == 'divider') { echo "
  • "; } else { $active = $item->active ? ' class="active"' : ''; echo "" . html::a($item->url, $item->title) . ''; } } } /** * Print upper left corner home button. * * @param string $tab * @static * @access public * @return void */ public static function printHomeButton($tab) { global $lang, $app; if(!$tab) return; if($tab == 'admin' and $app->control and method_exists($app->control, 'loadModel')) $app->control->loadModel('admin')->setMenu(); $icon = zget($lang->navIcons, $tab, ''); if(!in_array($tab, array('program', 'product', 'project'))) { $nav = $lang->mainNav->$tab; list(, $currentModule, $currentMethod,) = explode('|', $nav); if($tab == 'execution') $currentMethod = 'all'; } else { $currentModule = $tab; if($tab == 'program' or $tab == 'project') $currentMethod = 'browse'; if($tab == 'product') $currentMethod = 'all'; } $btnTitle = isset($lang->db->custom['common']['mainNav'][$tab]) ? $lang->db->custom['common']['mainNav'][$tab] : $lang->$tab->common; $commonKey = $tab . 'Common'; if(isset($lang->$commonKey) and $tab != 'execution') $btnTitle = $lang->$commonKey; $link = helper::createLink($currentModule, $currentMethod); $className = $tab == 'devops' ? 'btn num' : 'btn'; $html = $link ? html::a($link, "$icon $btnTitle", '', "class='$className' style='padding-top: 2px'") : "$icon $btnTitle"; echo "
    " . $html . '
    '; } /** * Format the date to YYYY-mm-dd, format the datetime to YYYY-mm-dd HH:ii:ss. * * @param int $date * @param string $type date|datetime|'' * @access public * @return string */ public function formatDate($date, $type = '') { $datePattern = '\w{4}(\/|-)\w{1,2}(\/|-)\w{1,2}'; $datetimePattern = $datePattern . ' \w{1,2}\:\w{1,2}\:\w{1,2}'; if(empty($type)) { if(!preg_match("/$datePattern/", $date) and !preg_match("/$datetimePattern/", $date)) return $date; if(preg_match("/$datePattern/", $date) === 1) $type = 'date'; if(preg_match("/$datetimePattern/", $date) === 1) $type = 'datetime'; } if(helper::isZeroDate($date)) { if($type == 'date') return '0000-00-00'; if($type == 'datetime') return '0000-00-00 00:00:00'; } if($type == 'date') $format = 'Y-m-d'; if($type == 'datetime') $format = 'Y-m-d H:i:s'; return date($format, strtotime($date)); } /** * Get main nav items list * * @param string $moduleName * * @static * @access public * @return array */ public static function getMainNavList($moduleName) { global $lang; global $app; global $config; $app->loadLang('my'); $menuOrder = $lang->mainNav->menuOrder; ksort($menuOrder); $items = array(); $lastItem = end($menuOrder); $printDivider = false; foreach($menuOrder as $key => $group) { if($group != 'my' && !empty($app->user->rights['acls']['views']) && !isset($app->user->rights['acls']['views'][$group])) continue; $nav = $lang->mainNav->$group; list($title, $currentModule, $currentMethod, $vars) = explode('|', $nav); /* When last divider is not used in mainNav, use it next menu. */ $printDivider = ($printDivider or ($lastItem != $key) and strpos($lang->dividerMenu, ",{$group},") !== false) ? true : false; if($printDivider and !empty($items)) { $items[] = 'divider'; $printDivider = false; } /** * Judge the module display or not. * */ $display = false; /* 1. The default rule. */ if(common::hasPriv($currentModule, $currentMethod)) $display = true; /* 2. If the module is assetLib, need judge more methods. */ if($currentModule == 'assetlib' && !$display) { $methodList = array('caselib', 'issuelib', 'risklib', 'opportunitylib', 'practicelib', 'componentlib'); foreach($methodList as $method) { if(common::hasPriv($currentModule, $method)) { $display = true; $currentMethod = $method; break; } } } /* Check whether other preference item under the module have permissions. If yes, point to other methods. */ $moduleLinkList = $currentModule . 'LinkList'; if(!$display and isset($lang->my->$moduleLinkList) and $config->vision != 'or') { foreach($lang->my->$moduleLinkList as $key => $linkList) { $moduleMethodList = explode('-', $key); $method = $moduleMethodList[1]; if(common::hasPriv($currentModule, $method)) { $display = true; $currentMethod = $method; break; } } } /* Check whether other methods under the module have permissions. If yes, point to other methods. */ if($display == false and isset($lang->$currentModule->menu) and !in_array($currentModule, array('program', 'product', 'project', 'execution', 'demandpool'))) { foreach($lang->$currentModule->menu as $menu) { if(!isset($menu['link'])) continue; $linkPart = explode('|', $menu['link']); if(!isset($linkPart[2])) continue; $method = $linkPart[2]; /* Skip some pages that do not require permissions.*/ if($currentModule == 'report' and $method == 'annualData') continue; if($currentModule == 'my' and $currentMethod == 'team') continue; if(common::hasPriv($currentModule, $method)) { $display = true; $currentMethod = $method; if(!isset($menu['target'])) break; // Try to jump to the method without opening a new window. } } } /* Check whether the menu of this group have permissions. If yes, point to them. */ if($display == false and isset($lang->$group->menu)) { foreach($lang->$group->menu as $menu) { if(!isset($menu['link'])) continue; $linkPart = explode('|', $menu['link']); if(count($linkPart) < 3) continue; list(, $module, $method) = $linkPart; if(common::hasPriv($module, $method)) { $display = true; $currentModule = $module; $currentMethod = $method; if(!isset($menu['target'])) break; // Try to jump to the method without opening a new window. } } } if(!$display) continue; /* Assign vars. */ $item = new stdClass(); $item->group = $group; $item->code = $group; $item->active = zget($lang->navGroup, $moduleName, '') == $group or $moduleName != 'program' and $moduleName == $group; $item->title = $title; $item->moduleName = $currentModule; $item->methodName = $currentMethod; $item->vars = $vars; $isTutorialMode = commonModel::isTutorialMode(); if($isTutorialMode and $currentModule == 'project') { if(!empty($vars)) $vars = helper::safe64Encode($vars); $item->url = helper::createLink('tutorial', 'wizard', "module={$currentModule}&method={$currentMethod}¶ms=$vars", '', 0, 0, 1); } else { $item->url = helper::createLink($currentModule, $currentMethod, $vars, '', false, 0, 1); } $items[] = $item; } /* Fix bug 14574. */ if(end($items) == 'divider') array_pop($items); return $items; } /** * Print the main menu. * * @param bool $printHtml * @static * @access public * @return string */ public static function printMainMenu(bool $printHtml = true): string { global $app, $lang, $config; /* Set main menu by app tab and module. */ static::replaceMenuLang(); static::setMainMenu(); static::checkMenuVarsReplaced(); $activeMenu = ''; $tab = $app->tab; $isTutorialMode = commonModel::isTutorialMode(); $currentModule = $app->rawModule; $currentMethod = $app->rawMethod; if($isTutorialMode && defined('WIZARD_MODULE')) $currentModule = WIZARD_MODULE; if($isTutorialMode && defined('WIZARD_METHOD')) $currentMethod = WIZARD_METHOD; /* Print all main menus. */ $menu = customModel::getMainMenu(); $menuHtml = "\n"; if($printHtml) echo $menuHtml; return $activeMenu; } /** * Print the search box. * * @static * @access public * @return void */ public static function printSearchBox() { global $lang; global $config; $searchObject = 'bug'; echo "
    "; echo html::hidden('searchType', $searchObject); echo "
    '; } /** * Print the module menu. * * @param string $activeMenu * @static * @access public * @return void */ public static function printModuleMenu($activeMenu) { global $app, $lang; $moduleName = $app->rawModule; $tab = $app->tab; if(!isset($lang->$tab->menu)) { echo ""; return; } /* get current module and method. */ $isTutorialMode = commonModel::isTutorialMode(); $currentModule = $app->getModuleName(); $currentMethod = $app->getMethodName(); $isMobile = $app->viewType === 'mhtml'; /* When use workflow then set rawModule to moduleName. */ if($moduleName == 'flow') $activeMenu = $app->rawModule; $menu = customModel::getModuleMenu($activeMenu); /* If this is not workflow then use rawModule and rawMethod to judge highlight. */ if($app->isFlow) { $currentModule = $app->rawModule; $currentMethod = $app->rawMethod; } if($isTutorialMode and isset($_SESSION['wizardModule'])) $currentModule = $_SESSION['wizardModule']; if($isTutorialMode and isset($_SESSION['wizardMethod'])) $currentMethod = $_SESSION['wizardMethod']; /* The beginning of the menu. */ echo $isMobile ? '' : "\n"; } /** * Print the bread menu. * * @param string $moduleName * @param string $position * @static * @access public * @return void */ public static function printBreadMenu($moduleName, $position) { global $lang; $mainMenu = $moduleName; echo "'; return; } if(is_array($position)) { foreach(array_values($position) as $link) echo "
  • " . $link . '
    • '; } echo ''; } /** * Print the link for notify file. * * @static * @access public * @return void */ public static function printNotifyLink() { if(strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'windows') !== false) { global $lang; echo html::a(helper::createLink('misc', 'downNotify'), "", '', "title='$lang->downNotify' class='text-primary'") . '   '; } } /** * Print the link for zentao client. * * @static * @access public * @return void */ public static function printClientLink() { global $config, $lang; if(isset($config->xxserver->installed) and $config->xuanxuan->turnon) { echo "
  • "; echo "" . " " . $lang->clientName . "
    • '; } } /** * Print the link contains orderBy field. * * This method will auto set the orderby param according the params. Fox example, if the order by is desc, * will be changed to asc. * * @param string $fieldName the field name to sort by * @param string $orderBy the order by string * @param string $vars the vars to be passed * @param string $label the label of the link * @param string $module the module name * @param string $method the method name * * @access public * @return void */ public static function printOrderLink($fieldName, $orderBy, $vars, $label, $module = '', $method = '') { global $app; if(empty($module)) $module = isset($app->rawModule) ? $app->rawModule : $app->getModuleName(); if(empty($method)) $method = isset($app->rawMethod) ? $app->rawMethod : $app->getMethodName(); $isMobile = $app->viewType === 'mhtml'; $order = explode('_', $orderBy); $order[0] = trim($order[0], '`'); if($order[0] == $fieldName) { if(isset($order[1]) and $order[1] == 'asc') { $orderBy = "{$order[0]}_desc"; $className = $isMobile ? 'SortUp' : 'sort-up'; } else { $orderBy = "{$order[0]}_asc"; $className = $isMobile ? 'SortDown' : 'sort-down'; } } else { $orderBy = trim($fieldName, '`') . '_' . 'asc'; $className = 'header'; } $params = sprintf($vars, $orderBy); if($app->getModuleName() == 'my' and $app->rawMethod == 'work') $params = "mode={$app->getMethodName()}&" . $params; $link = helper::createLink($module, $method, $params); echo $isMobile ? html::a($link, $label, '', "class='$className' data-app={$app->tab}") : html::a($link, $label, '', "class='$className' data-app={$app->tab}"); } /** * Print link to a module's method. * * Before printing, check the privilege first. If no privilege, return false. Else, print the link, return true. * * @param string $module the module name * @param string $method the method * @param string $vars vars to be passed * @param string $label the label of the link * @param string $target the target of the link * @param string $misc others * @param bool $newline * @param bool $onlyBody * @param $object * * @static * @access public * @return bool */ public static function printLink($module, $method, $vars = '', $label = '', $target = '', $misc = '', $newline = true, $onlyBody = false, $object = null) { /* Add data-app attribute. */ global $app, $config; $currentModule = strtolower($module); $currentMethod = strtolower($method); if(strpos($misc, 'data-app') === false) $misc .= ' data-app="' . $app->tab . '"'; if(!commonModel::hasPriv($module, $method, $object, $vars) and !in_array("$currentModule.$currentMethod", $config->openMethods)) return false; echo html::a(helper::createLink($module, $method, $vars, '', $onlyBody), $label, $target, $misc, $newline); return true; } /** * Print icon of split line. * * @static * @access public * @return void */ public static function printDivider() { echo "    "; } /** * Print icon of comment. * * @param string $commentFormLink * @param object $object * * @static * @access public * @return mixed */ public static function printCommentIcon($commentFormLink, $object = null) { global $lang; if(!commonModel::hasPriv('action', 'comment', $object)) return false; echo html::commonButton(' ' . $lang->action->create, '', 'btn btn-link pull-right btn-comment'); echo <<

    {$lang->action->create}

    EOF; } /** * Build icon button. * * @param string $module * @param string $method * @param string $vars * @param object $object * @param string $type button|list * @param string $icon * @param string $target * @param string $extraClass * @param bool $onlyBody * @param string $misc * @param bool $extraEnabled * @static * @access public * @return void */ public static function buildIconButton($module, $method, $vars = '', $object = '', $type = 'button', $icon = '', $target = '', $extraClass = '', $onlyBody = false, $misc = '', $title = '', $programID = 0, $extraEnabled = '') { if(isInModal() and strpos($extraClass, 'showinonlybody') === false) return false; /* Remove iframe for operation button in modal. Prevent pop up in modal. */ if(isInModal() and strpos($extraClass, 'showinonlybody') !== false) $extraClass = str_replace('iframe', '', $extraClass); global $app, $lang, $config; /* Add data-app attribute. */ if(strpos($misc, 'data-app') === false) $misc .= ' data-app="' . $app->tab . '"'; /* Judge the $method of $module clickable or not, default is clickable. */ $clickable = true; if(is_bool($extraEnabled)) { $clickable = $extraEnabled; } elseif(is_object($object)) { if($app->getModuleName() != $module) $app->control->loadModel($module); $modelClass = class_exists("ext{$module}Model") ? "ext{$module}Model" : $module . "Model"; if(class_exists($modelClass) and method_exists($modelClass, 'isClickable')) { //$clickable = call_user_func_array(array($modelClass, 'isClickable'), array('object' => $object, 'method' => $method)); // fix bug on php 8.0 link: https://www.php.net/manual/zh/function.call-user-func-array.php#125953 $clickable = call_user_func_array(array($modelClass, 'isClickable'), array($object, $method)); } } /* Set module and method, then create link to it. */ if(strtolower($module) == 'story' and strtolower($method) == 'createcase') ($module = 'testcase') and ($method = 'create'); if(strtolower($module) == 'bug' and strtolower($method) == 'tostory') ($module = 'story') and ($method = 'create'); if(strtolower($module) == 'bug' and strtolower($method) == 'createcase') ($module = 'testcase') and ($method = 'create'); if(!commonModel::hasPriv($module, $method, $object, $vars)) return false; $link = helper::createLink($module, $method, $vars, '', $onlyBody, $programID); /* Set the icon title, try search the $method defination in $module's lang or $common's lang. */ if(empty($title)) { $title = $method; if($method == 'create' and $icon == 'copy') $method = 'copy'; if(isset($lang->$method) and is_string($lang->$method)) $title = $lang->$method; if((isset($lang->$module->$method) or $app->loadLang($module)) and isset($lang->$module->$method)) { $title = $method == 'report' ? $lang->$module->$method->common : $lang->$module->$method; } if($icon == 'toStory') $title = $lang->bug->toStory; if($icon == 'createBug') $title = $lang->testtask->createBug; } /* set the class. */ if(!$icon) { $icon = isset($lang->icons[$method]) ? $lang->icons[$method] : $method; } if(strpos(',edit,copy,report,export,delete,', ",$method,") !== false) $module = 'common'; $class = "icon-$module-$method"; if(!$clickable) $class .= ' disabled'; if($icon) $class .= ' icon-' . $icon; /* Create the icon link. */ if($clickable) { if($app->getViewType() == 'mhtml') { return "$title"; } if($type == 'button') { if($method == 'edit' or $method == 'copy' or $method == 'delete' or ($method == 'review' and $module == 'charter')) { return html::a($link, "", $target, "class='btn btn-link $extraClass' title=\"$title\" $misc", false); } else { return html::a($link, " " . "{$title}", $target, "class='btn btn-link $extraClass' $misc", true); } } else { return html::a($link, "", $target, "class='btn $extraClass' title=\"$title\" $misc", false) . "\n"; } } else { if($type == 'list') { return "\n"; } } } /** * Build more executions button. * * @param int $executionID * @param bool $printHtml * @static * @access public * @return bool */ public static function buildMoreButton(int $executionID, bool $printHtml = true): string { global $lang, $app; if(commonModel::isTutorialMode()) return ''; $object = $app->dbQuery('SELECT project,`type` FROM ' . TABLE_EXECUTION . " WHERE `id` = '$executionID'")->fetch(); if(empty($object)) return ''; $executionPairs = array(); $userCondition = !$app->user->admin ? " AND `id` " . helper::dbIN($app->user->view->sprints) : ''; $orderBy = $object->type == 'stage' ? 'ORDER BY `id` ASC' : 'ORDER BY `id` DESC'; $executionList = $app->dbQuery("SELECT id,name,parent,project FROM " . TABLE_EXECUTION . " WHERE `project` = '{$object->project}' AND `deleted` = '0' $userCondition $orderBy")->fetchAll(); $executions = array(); foreach($executionList as $execution) $executions[$execution->id] = $execution; $executionList = $app->control->loadModel('execution')->resetExecutionSorts($executions); foreach($executionList as $execution) { if(isset($executionPairs[$execution->parent])) unset($executionPairs[$execution->parent]); if($execution->id == $executionID) continue; $executionPairs[$execution->id] = $execution->name; } if(empty($executionPairs)) return ''; $html = "
  • {$lang->more}"; $html .= "
      "; $showCount = 0; foreach($executionPairs as $executionID => $executionName) { $html .= "
    • " . html::a(helper::createLink('execution', 'task', "executionID=$executionID"), $executionName, '', "title='{$executionName}' class='text-ellipsis' style='padding: 2px 10px'") . '
      • '; $showCount ++; if($showCount == 10) break; } if(count($executionPairs) > 10) $html .= '
    • ' . html::a(helper::createLink('project', 'execution', "status=all&projectID={$object->project}"), $lang->preview . $lang->more, '', "data-app='project' style='padding: 2px 10px'") . '
      • '; $html .= "
    • \n"; if($printHtml) echo $html; return $html; } /** * Build devops app button. * * @param bool $printHtml * @static * @access public * @return bool */ public static function buildAppButton(bool $printHtml = true): string { global $app, $config, $lang; if(commonModel::isTutorialMode()) return ''; $condition = ''; if(!$app->user->admin) { $types = ''; foreach($config->pipelineTypeList as $pipelineType) { if(commonModel::hasPriv($pipelineType, 'browse')) $types .= "'$pipelineType',"; } if(empty($types)) return ''; $condition .= ' AND `type` in (' . trim($types, ',') . ')'; } $pipelineList = $app->dbQuery("SELECT `type`,name,url FROM " . TABLE_PIPELINE . " WHERE `deleted` = '0' $condition order by type")->fetchAll(); if(empty($pipelineList)) return ''; $appCommon = isset($lang->db->custom['devopsMenu']['menu']['app']) ? $lang->db->custom['devopsMenu']['menu']['app'] : $lang->app->common; $html = "
  • {$appCommon}"; $html .= "
      "; foreach($pipelineList as $pipeline) { $html .= "
    • " . html::a($pipeline->url, "[{$pipeline->type}] {$pipeline->name}", '', "title='{$pipeline->name}' class='text-ellipsis' style='padding: 2px 10px' target='_blank'") . '
      • '; } $html .= "
    • \n"; if($printHtml) echo $html; return $html; } /** * Print link icon. * * @param string $module * @param string $method * @param string $vars * @param object $object * @param string $type button|list * @param string $icon * @param string $target * @param string $extraClass * @param bool $onlyBody * @param string $misc * @param string $extraEnabled * @static * @access public * @return void */ public static function printIcon($module, $method, $vars = '', $object = '', $type = 'button', $icon = '', $target = '', $extraClass = '', $onlyBody = false, $misc = '', $title = '', $programID = 0, $extraEnabled = '') { echo common::buildIconButton($module, $method, $vars, $object, $type, $icon, $target, $extraClass, $onlyBody, $misc, $title, $programID, $extraEnabled); } /** * Print backLink and preLink and nextLink. * * @param string $backLink * @param object $preAndNext * @param string $linkTemplate * * @static * @access public * @return void */ public static function printRPN($backLink, $preAndNext = '', $linkTemplate = '') { global $lang, $app; if(isInModal()) return false; $title = $lang->goback . $lang->backShortcutKey; echo html::a($backLink, '', '', "id='back' class='btn' title={$title}"); if(isset($preAndNext->pre) and $preAndNext->pre) { $id = (isset($_SESSION['testcaseOnlyCondition']) and !$_SESSION['testcaseOnlyCondition'] and $app->getModuleName() == 'testcase' and isset($preAndNext->pre->case)) ? 'case' : 'id'; $title = isset($preAndNext->pre->title) ? $preAndNext->pre->title : $preAndNext->pre->name; $title = '#' . $preAndNext->pre->$id . ' ' . $title . ' ' . $lang->preShortcutKey; $link = $linkTemplate ? sprintf($linkTemplate, $preAndNext->pre->$id) : inLink('view', "ID={$preAndNext->pre->$id}"); echo html::a($link, '', '', "id='pre' class='btn' title='{$title}'"); } if(isset($preAndNext->next) and $preAndNext->next) { $id = (isset($_SESSION['testcaseOnlyCondition']) and !$_SESSION['testcaseOnlyCondition'] and $app->getModuleName() == 'testcase' and isset($preAndNext->next->case)) ? 'case' : 'id'; $title = isset($preAndNext->next->title) ? $preAndNext->next->title : $preAndNext->next->name; $title = '#' . $preAndNext->next->$id . ' ' . $title . ' ' . $lang->nextShortcutKey; $link = $linkTemplate ? sprintf($linkTemplate, $preAndNext->next->$id) : inLink('view', "ID={$preAndNext->next->$id}"); echo html::a($link, '', '', "id='next' class='btn' title='$title'"); } } /** * Print back link * * @param string $backLink * @param string $class * @param string $misc * @static * @access public * @return void */ public static function printBack($backLink, $class = '', $misc = '') { global $lang, $app; if(isInModal()) return false; if(empty($class)) $class = 'btn'; $title = $lang->goback . $lang->backShortcutKey; echo html::a($backLink, ' ' . $lang->goback, '', "id='back' class='{$class}' title={$title} $misc"); } /** * Print pre and next link * * @param object $preAndNext * @param string $linkTemplate * @static * @access public * @return void */ public static function printPreAndNext($preAndNext = '', $linkTemplate = '') { global $lang, $app; if(isInModal()) return false; $moduleName = ($app->getModuleName() == 'story' and $app->tab == 'project') ? 'projectstory' : $app->getModuleName(); echo "'; } /** * Create changes of one object. * * @param mixed $old the old object * @param mixed $new the new object * @param string $moduleName * @static * @access public * @return array */ public static function createChanges($old, $new, $moduleName = '') { global $app, $config; /** * 当主状态改变并且未设置子状态的值时把子状态的值设置为默认值并记录日志。 * Change sub status when status is changed and sub status is not set, and record the changes. */ if($config->edition != 'open') { $oldID = zget($old, 'id', ''); $oldStatus = zget($old, 'status', ''); $newStatus = zget($new, 'status', ''); $newSubStatus = zget($new, 'subStatus', ''); if(empty($moduleName)) $moduleName = $app->getModuleName(); if($oldID and $oldStatus and $newStatus and !$newSubStatus and $oldStatus != $newStatus) { $field = $app->dbQuery('SELECT options FROM ' . TABLE_WORKFLOWFIELD . " WHERE `module` = '$moduleName' AND `field` = 'subStatus'")->fetch(); if(!empty($field->options)) $field->options = json_decode($field->options, true); if(!empty($field->options[$newStatus]['default'])) { $flow = $app->dbQuery('SELECT `table` FROM ' . TABLE_WORKFLOW . " WHERE `module`='$moduleName'")->fetch(); $default = $field->options[$newStatus]['default']; $app->dbh->exec("UPDATE `$flow->table` SET `subStatus` = '$default' WHERE `id` = '$oldID'"); $new->subStatus = $default; } } $dateFields = array(); $sql = "SELECT `field` FROM " . TABLE_WORKFLOWFIELD . " WHERE `module` = '{$moduleName}' and `control` in ('date', 'datetime')"; $stmt = $app->dbQuery($sql); while($row = $stmt->fetch()) $dateFields[$row->field] = $row->field; } $changes = array(); foreach($new as $key => $value) { if(is_object($value) || is_array($value) || is_null($value)) continue; if(strtolower($key) == 'lastediteddate') continue; if(strtolower($key) == 'lasteditedby') continue; if(strtolower($key) == 'assigneddate') continue; if(strtolower($key) == 'editedby') continue; if(strtolower($key) == 'editeddate') continue; if(strtolower($key) == 'editingdate') continue; if(strtolower($key) == 'uid') continue; if(strtolower($key) == 'finisheddate' and $value == '') continue; if(strtolower($key) == 'canceleddate' and $value == '') continue; if(strtolower($key) == 'hangupeddate' and $value == '') continue; if(strtolower($key) == 'lastcheckeddate' and $value == '') continue; if(strtolower($key) == 'activateddate' and $value == '') continue; if(strtolower($key) == 'closeddate' and $value == '') continue; if(strtolower($key) == 'actualcloseddate' and $value == '') continue; if(isset($old->$key)) { if($config->edition != 'open' && isset($dateFields[$key])) $old->$key = formatTime($old->$key); if($value != stripslashes((string)$old->$key)) { $diff = ''; if(substr_count($value, "\n") > 1 or substr_count($old->$key, "\n") > 1 or strpos('name,title,desc,spec,steps,content,digest,verify,report,definition,analysis,summary,prevention,resolution,outline,schedule,minutes', strtolower($key)) !== false) { $diff = commonModel::diff($old->$key, $value); } $changes[] = array('field' => $key, 'old' => $old->$key, 'new' => $value, 'diff' => $diff); } } } return $changes; } /** * Diff two string. (see phpt) * * @param string $text1 * @param string $text2 * @static * @access public * @return string */ public static function diff($text1, $text2) { $text1 = str_replace(' ', '', trim($text1)); $text2 = str_replace(' ', '', trim($text2)); $w = explode("\n", $text1); $o = explode("\n", $text2); $w1 = array_diff_assoc($w,$o); $o1 = array_diff_assoc($o,$w); $w2 = array(); $o2 = array(); foreach($w1 as $idx => $val) $w2[sprintf("%03d<",$idx)] = sprintf("%03d- ", $idx+1) . "" . trim($val) . ""; foreach($o1 as $idx => $val) $o2[sprintf("%03d>",$idx)] = sprintf("%03d+ ", $idx+1) . "" . trim($val) . ""; $diff = array_merge($w2, $o2); ksort($diff); return implode("\n", $diff); } /** * Judge Suhosin Setting whether the actual size of post data is large than the setting size. * * @param int $countInputVars * @static * @access public * @return bool */ public static function judgeSuhosinSetting($countInputVars) { if(extension_loaded('suhosin')) { $maxPostVars = ini_get('suhosin.post.max_vars'); $maxRequestVars = ini_get('suhosin.request.max_vars'); if($countInputVars > $maxPostVars or $countInputVars > $maxRequestVars) return true; } else { $maxInputVars = ini_get('max_input_vars'); if($maxInputVars and $countInputVars > (int)$maxInputVars) return true; } return false; } /** * Get the previous and next object. * * @param string $type story|task|bug|case * @param int $objectID * @access public * @return object */ public function getPreAndNextObject(string $type, int $objectID): object { $queryCondition = $type . 'QueryCondition'; $typeOnlyCondition = $type . 'OnlyCondition'; $queryCondition = $this->session->$queryCondition; $preAndNextObject = new stdClass(); $preAndNextObject->pre = ''; $preAndNextObject->next = ''; if(empty($queryCondition)) return $preAndNextObject; $sql = $this->commonTao->getPreAndNextSQL($type); $objectList = $this->commonTao->queryListForPreAndNext($type, $sql); $preAndNextObject = $this->commonTao->searchPreAndNextFromList($objectID, $objectList); $preAndNextObject = $this->commonTao->fetchPreAndNextObject($type, $objectID, $preAndNextObject); return $preAndNextObject; } /** * Save one executed query. * * @param string $sql * @param string $objectType story|task|bug|testcase * @param bool $onlyCondition * @access public * @return void */ public function saveQueryCondition($sql, $objectType, $onlyCondition = true) { /* Set the query condition session. */ if($onlyCondition) { $queryCondition = explode(' WHERE ', $sql); $queryCondition = isset($queryCondition[1]) ? $queryCondition[1] : ''; if($queryCondition) { $queryCondition = explode(' ORDER BY ', $queryCondition); $queryCondition = str_replace('t1.', '', $queryCondition[0]); } } else { $queryCondition = explode(' ORDER BY ', $sql); $queryCondition = $queryCondition[0]; } $queryCondition = trim($queryCondition); if(empty($queryCondition)) $queryCondition = "1=1"; $this->session->set($objectType . 'QueryCondition', $queryCondition, $this->app->tab); $this->session->set($objectType . 'OnlyCondition', $onlyCondition, $this->app->tab); /* Set the query condition session. */ $orderBy = explode(' ORDER BY ', $sql); $orderBy = isset($orderBy[1]) ? $orderBy[1] : ''; if($orderBy) { $orderBy = explode(' LIMIT ', $orderBy); $orderBy = $orderBy[0]; if($onlyCondition) $orderBy = str_replace('t1.', '', $orderBy); } $this->session->set($objectType . 'OrderBy', $orderBy, $this->app->tab); $this->session->set($objectType . 'BrowseList', array(), $this->app->tab); } /** * Remove duplicate for story, task, bug, case, doc. * * @param string $type e.g. story task bug case doc. * @param array|object $data * @param string $condition * @access public * @return array */ public function removeDuplicate(string $type, object|array $data, string $condition = ''): array { $table = zget($this->config->objectTables, $type, ''); if(empty($table)) return array('stop' => false, 'data' => $data); $titleField = $type == 'task' ? 'name' : 'title'; $date = date(DT_DATETIME1, time() - $this->config->duplicateTime); $dateField = $type == 'doc' ? 'addedDate' : 'openedDate'; $titles = zget($data, $titleField, array()); $storyType = zget($data, 'type', ''); if(empty($titles)) return false; $duplicate = $this->dao->select("id,$titleField")->from($table) ->where('deleted')->eq(0) ->andWhere($titleField)->in($titles) ->andWhere($dateField)->ge($date)->fi() ->beginIF($condition)->andWhere($condition)->fi() ->beginIF($type == 'story')->andWhere('type')->eq($storyType) ->fetchPairs(); if($duplicate and is_string($titles)) return array('stop' => true, 'duplicate' => key($duplicate)); if($duplicate and is_array($titles)) { foreach($titles as $i => $title) { if(in_array($title, $duplicate)) unset($titles[$i]); } if(is_object($data)) $data->$titleField = $titles; if(is_array($data)) $data[$titleField] = $titles; } return array('stop' => false, 'data' => $data); } /** * Append order by. * * @param string $orderBy * @param string $append * @access public * @return string */ public static function appendOrder($orderBy, $append = 'id') { if(empty($orderBy)) return $append; list($firstOrder) = explode(',', $orderBy); $sort = strpos($firstOrder, '_') === false ? '_asc' : strstr($firstOrder, '_'); return strpos($orderBy, $append) === false ? $orderBy . ',' . $append . $sort : $orderBy; } /** * Check field exists * * @param string $table * @param string $field * @access public * @return bool */ public function checkField($table, $field) { $fields = $this->dao->descTable($table); $hasField = false; foreach($fields as $fieldObj) { if($field == $fieldObj->field) { $hasField = true; break; } } return $hasField; } /** * Check safe file. * * @access public * @return string|false */ public function checkSafeFile() { if($this->app->isContainer()) return false; if($this->app->getModuleName() == 'upgrade' and $this->session->upgrading) return false; $statusFile = $this->app->getAppRoot() . 'www' . DIRECTORY_SEPARATOR . 'data' . DIRECTORY_SEPARATOR . 'ok.txt'; return (!is_file($statusFile) or (time() - filemtime($statusFile)) > $this->config->safeFileTimeout) ? $statusFile : false; } /** * Check upgrade's status file is ok or not. * * @access public * @return bool */ public function checkUpgradeStatus() { $statusFile = $this->checkSafeFile(); if($statusFile) { $this->app->loadLang('upgrade'); $cmd = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN' ? $this->lang->upgrade->createFileWinCMD : $this->lang->upgrade->createFileLinuxCMD; $cmd = sprintf($cmd, $statusFile); echo ""; echo "
    "; printf($this->lang->upgrade->setStatusFile, $cmd, $statusFile); echo '
    '; return false; } return true; } /** * Check the user has permission to access this method, if not, locate to the login page or deny page. * * @access public * @return void */ public function checkPriv() { try { $module = $this->app->getModuleName(); $method = $this->app->getMethodName(); if($this->app->isFlow) { $module = $this->app->rawModule; $method = $this->app->rawMethod; } $beforeValidMethods = array( 'user' => array('deny', 'logout'), 'my' => array('changepassword'), 'message' => array('ajaxgetmessage'), ); if(!empty($this->app->user->modifyPassword) and (!isset($beforeValidMethods[$module]) or !in_array($method, $beforeValidMethods[$module]))) return helper::header('location', helper::createLink('my', 'changePassword')); if(!$this->loadModel('user')->isLogon() and $this->server->php_auth_user) $this->user->identifyByPhpAuth(); if(!$this->loadModel('user')->isLogon() and $this->cookie->za) $this->user->identifyByCookie(); if($this->isOpenMethod($module, $method)) return true; if(isset($this->app->user)) { if($this->app->tab == 'project') { $this->resetProjectPriv(); if(commonModel::hasPriv($module, $method)) return true; } $this->app->user = $this->session->user; if(!commonModel::hasPriv($module, $method)) { if($module == 'story' and !empty($this->app->params['storyType']) and strpos(",story,requirement,", ",{$this->app->params['storyType']},") !== false) $module = $this->app->params['storyType']; $this->deny($module, $method); } } else { $uri = $this->app->getURI(true); if($module == 'message' and $method == 'ajaxgetmessage') { $uri = helper::createLink('my'); } elseif(helper::isAjaxRequest()) { helper::end(json_encode(array('result' => false, 'message' => $this->lang->error->loginTimeout))); // Fix bug #14478. } $referer = helper::safe64Encode($uri); helper::end(js::locate(helper::createLink('user', 'login', "referer=$referer"))); } } catch(EndResponseException $endResponseException) { echo $endResponseException->getContent(); helper::end(); } } /** * 检查当前页面是否在 iframe 中打开，如果不是 iframe 并且不允许独立打开，则跳转到首页以 iframe 方式打开。 * Check current page whether is in iframe. If it is not iframe and not allowed to open independently, then redirect to index to open it in iframe. * * @access public * @return void */ public function checkIframe() { /* * 忽略如下情况：非 HTML 请求、Ajax 请求、特殊 GET 参数 _single。 * Ignore the following situations: non-HTML request, Ajax request, special GET parameter _single. */ if($this->app->getViewType() != 'html' || helper::isAjaxRequest() || isset($_GET['_single'])) return true; /** * 忽略无请求头 HTTP_SEC_FETCH_DEST 或者 HTTP_SEC_FETCH_DEST 为 iframe 的请求，较新的浏览器在启用 https 的情况下才会正确发送该请求头。 * Ignore the request without HTTP_SEC_FETCH_DEST or HTTP_SEC_FETCH_DEST is iframe, the latest browser will send this request header correctly when enable https. */ if(!isset($_SERVER['HTTP_SEC_FETCH_DEST']) || $_SERVER['HTTP_SEC_FETCH_DEST'] == 'iframe') return true; /** * 当有 HTTP_REFERER 请求头时，忽略 safari 浏览器，因为 safari 浏览器不会正确发送 HTTP_SEC_FETCH_DEST 请求头。 * Ignore safari browser when there is HTTP_REFERER request header, because safari browser will not send HTTP_SEC_FETCH_DEST request header correctly. */ if(isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER'])) { $userAgent = strtolower($_SERVER['HTTP_USER_AGENT']); if(strpos($userAgent, 'chrome') === false && strpos($userAgent, 'safari') !== false) return true; } /** * 忽略所有方法名以 ajax 开头的请求。 * Ignore all requests which it's method name starts with 'ajax'. */ $method = $this->app->getMethodName(); if(strpos($method, 'ajax') === 0) return true; /** * 以下页面可以允许在非 iframe 中打开，所以要忽略这些页面。 * The following pages can be allowed to open in non-iframe, so ignore these pages. */ $module = $this->app->getModuleName(); $whitelist = '|index|tutorial|install|upgrade|sso|cron|misc|user-login|user-deny|user-logout|user-reset|user-forgetpassword|user-resetpassword|my-changepassword|my-preference|file-read|file-download|file-uploadimages|report-annualdata|misc-captcha|execution-printkanban|traincourse-playvideo|screen-view|zanode-create|screen-ajaxgetchart|'; if(strpos($whitelist, "|{$module}|") !== false || strpos($whitelist, "|{$module}-{$method}|") !== false) return true; /** * 如果以上条件都不满足，则视为当前页面必须在 iframe 中打开，使用 302 跳转实现。 * If none of the above conditions are missed, then the current page must be opened in iframe, using 302 jump to achieve. */ $url = helper::safe64Encode($_SERVER['REQUEST_URI']); $redirectUrl = helper::createLink('index', 'index'); $redirectUrl .= strpos($redirectUrl, '?') === false ? "?open=$url" : "&open=$url"; helper::header('location', $redirectUrl); return false; } /** * Check the user has permission of one method of one module. * * @param string $module * @param string $method * @param object $object * @param string $vars * @static * @access public * @return bool */ public static function hasPriv($module, $method, $object = null, $vars = '') { global $app, $lang; $module = strtolower($module); $method = strtolower($method); parse_str($vars, $params); if(empty($app->user)) return false; if(empty($params['storyType']) and $module == 'story' and !empty($app->params['storyType']) and strpos(",story,requirement,", ",{$app->params['storyType']},") !== false) $module = $app->params['storyType']; if($module == 'story' and !empty($params['storyType']) and strpos(",story,requirement,", ",{$params['storyType']},") !== false) $module = $params['storyType']; if($module == 'product' and $method == 'browse' and !empty($app->params['storyType']) and $app->params['storyType'] == 'requirement') $method = 'requirement'; if($module == 'product' and $method == 'browse' and !empty($params['storyType']) and $params['storyType'] == 'requirement') $method = 'requirement'; if($module == 'story' and $method == 'linkrequirements') $module = 'requirement'; /* If the user is doing a tutorial, have all tutorial privileges. */ if(commonModel::isTutorialMode()) { $app->loadLang('tutorial'); $app->loadConfig('tutorial'); foreach($app->config->tutorial->tasksConfig as $task) { if($task['nav']['module'] == $module and $task['nav']['method'] = $method) return true; } } /* Check the parent object is closed. */ if(!empty($method) and strpos('close|batchclose', $method) === false and !commonModel::canBeChanged($module, $object)) return false; /* Check the method is openMethod. */ if(in_array("$module.$method", $app->config->openMethods)) return true; /* Check is the super admin or not. */ if(!empty($app->user->admin) or strpos($app->company->admins, ",{$app->user->account},") !== false) return true; /* If is the program/project/product/execution admin, have all program privileges. */ if($app->config->vision != 'lite') { $inProject = (isset($lang->navGroup->$module) and $lang->navGroup->$module == 'project'); if($inProject and $app->session->project and (strpos(",{$app->user->rights['projects']},", ",{$app->session->project},") !== false or strpos(",{$app->user->rights['projects']},", ',all,') !== false)) return true; $inProduct = (isset($lang->navGroup->$module) and $lang->navGroup->$module == 'product'); if($inProduct and $app->session->product and (strpos(",{$app->user->rights['products']},", ",{$app->session->product},") !== false or strpos(",{$app->user->rights['products']},", ',all,') !== false)) return true; $inProgram = (isset($lang->navGroup->$module) and $lang->navGroup->$module == 'program'); if($inProgram and $app->session->program and (strpos(",{$app->user->rights['programs']},", ",{$app->session->program},") !== false or strpos(",{$app->user->rights['programs']},", ',all,') !== false)) return true; $inExecution = (isset($lang->navGroup->$module) and $lang->navGroup->$module == 'execution'); if($inExecution and $app->session->execution and (strpos(",{$app->user->rights['executions']},", ",{$app->session->execution},") !== false or strpos(",{$app->user->rights['executions']},", ',all,') !== false)) return true; } /* If not super admin, check the rights. */ $rights = $app->user->rights['rights']; $acls = $app->user->rights['acls']; /* White list of import method. */ $canImport = isset($rights[$module]['import']) && commonModel::hasDBPriv($object, $module, 'import'); if(in_array($module, $app->config->importWhiteList) && $method == 'showimport' && $canImport) { return true; } if(isset($rights[$module][$method])) { if(!commonModel::hasDBPriv($object, $module, $method)) return false; if(empty($acls['views'])) return true; $menu = isset($lang->navGroup->$module) ? $lang->navGroup->$module : $module; if($module == 'my' and $method == 'team') $menu = 'system'; // Fix bug #18642. $menu = strtolower($menu); if($menu != 'qa' and !isset($lang->$menu->menu)) return true; if(($menu == 'my' and $method != 'team')or $menu == 'index' or $module == 'tree') return true; if($module == 'company' and $method == 'dynamic') return true; if($module == 'action' and $method == 'editcomment') return true; if($module == 'action' and $method == 'comment') return true; if($module == 'report' and $method == 'export') return true; if(!isset($acls['views'][$menu])) return false; return true; } return false; } /** * Reset project priv. * * @param int $projectID * @access public * @return void */ public function resetProjectPriv($projectID = 0) { /* Get user program priv. */ if(empty($projectID) and $this->session->project) $projectID = $this->session->project; if(empty($projectID)) return; $program = $this->dao->findByID($projectID)->from(TABLE_PROJECT)->fetch(); if(empty($program)) return; $programRights = $this->dao->select('t3.module, t3.method')->from(TABLE_GROUP)->alias('t1') ->leftJoin(TABLE_USERGROUP)->alias('t2')->on('t1.id = t2.`group`') ->leftJoin(TABLE_GROUPPRIV)->alias('t3')->on('t2.`group`=t3.`group`') ->where('t1.project')->eq($program->id) ->andWhere('t2.account')->eq($this->app->user->account) ->fetchAll(); /* Group priv by module the same as rights. */ $programRightGroup = array(); foreach($programRights as $programRight) $programRightGroup[strtolower($programRight->module)][strtolower($programRight->method)] = 1; /* Reset priv by program privway. */ $this->app->user = clone $_SESSION['user']; $rights = $this->app->user->rights['rights']; if($this->app->user->account == $program->openedBy or $this->app->user->account == $program->PM) $program->auth = 'extend'; if($program->auth == 'extend') $this->app->user->rights['rights'] = array_merge_recursive($programRightGroup, $rights); if($program->auth == 'reset') { /* If priv way is reset, unset common program priv, and cover by program priv. */ $projectPrivs = $this->loadModel('project')->getPrivsByModel($program->multiple ? $program->model : 'noSprint'); foreach($projectPrivs as $module => $methods) { foreach($methods as $method => $label) { $module = strtolower($module); $method = strtolower($method); if(isset($rights[$module][$method])) unset($rights[$module][$method]); } } $recomputedRights = array_merge($rights, $programRightGroup); /* Set base priv for project. */ $projectRights = zget($this->app->user->rights['rights'], 'project', array()); if(isset($projectRights['browse']) and !isset($recomputedRights['project']['browse'])) $recomputedRights['project']['browse'] = 1; if(isset($projectRights['kanban']) and !isset($recomputedRights['project']['kanban'])) $recomputedRights['project']['kanban'] = 1; if(isset($projectRights['index']) and !isset($recomputedRights['project']['index'])) $recomputedRights['project']['index'] = 1; $this->app->user->rights['rights'] = $recomputedRights; } } /** * Check db priv. * * @param object $object * @param string $module * @param string $method * @static * @access public * @return void */ public static function hasDBPriv($object, $module = '', $method = '') { global $app; if(!empty($app->user->admin)) return true; if($module == 'todo' && ($method == 'create' || $method == 'batchcreate')) return true; if($module == 'effort' && ($method == 'batchcreate' || $method == 'createforobject')) return true; /* Limited execution. */ $limitedExecution = false; $executionID = 0; if(!empty($module)) { if(in_array($module, array('task', 'story')) && !empty($object->execution)) $executionID = $object->execution; if($module == 'execution' && !empty($object->id)) $executionID = $object->id; } if($executionID) { $limitedExecutions = !empty($_SESSION['limitedExecutions']) ? $_SESSION['limitedExecutions'] : ''; if(strpos(",{$limitedExecutions},", ",$executionID,") !== false) $limitedExecution = true; } if(empty($app->user->rights['rights']['my']['limited']) && !$limitedExecution) return true; if(!empty($method) && strpos($method, 'batch') === 0) return false; if(!empty($method) && strpos($method, 'link') === 0) return false; if(!empty($method) && strpos($method, 'create') === 0) return false; if(!empty($method) && strpos($method, 'import') === 0) return false; if(empty($object)) return true; if(!empty($object->openedBy) && $object->openedBy == $app->user->account) return true; if(!empty($object->addedBy) && $object->addedBy == $app->user->account) return true; if(!empty($object->account) && $object->account == $app->user->account) return true; if(!empty($object->assignedTo) && $object->assignedTo == $app->user->account) return true; if(!empty($object->finishedBy) && $object->finishedBy == $app->user->account) return true; if(!empty($object->canceledBy) && $object->canceledBy == $app->user->account) return true; if(!empty($object->closedBy) && $object->closedBy == $app->user->account) return true; if(!empty($object->lastEditedBy) && $object->lastEditedBy == $app->user->account) return true; return false; } /** * Check whether IP in white list. * * @param string $ipWhiteList * @access public * @return bool */ public function checkIP($ipWhiteList = '') { $ip = helper::getRemoteIp(); if(!$ipWhiteList) $ipWhiteList = $this->config->ipWhiteList; /* If the ip white list is '*'. */ if($ipWhiteList == '*') return true; /* The ip is same as ip in white list. */ if($ip == $ipWhiteList) return true; /* If the ip in white list is like 192.168.1.1,192.168.1.10. */ if(strpos($ipWhiteList, ',') !== false) { $ipArr = explode(',', $ipWhiteList); foreach($ipArr as $ipRule) { if($this->checkIP($ipRule)) return true; } return false; } /* If the ip in white list is like 192.168.1.1-192.168.1.10. */ if(strpos($ipWhiteList, '-') !== false) { list($min, $max) = explode('-', $ipWhiteList); $min = ip2long(trim($min)); $max = ip2long(trim($max)); $ip = ip2long(trim($ip)); return $ip >= $min and $ip <= $max; } /* If the ip in white list is like 192.168.1.*. */ if(strpos($ipWhiteList, '*') !== false) { $regCount = substr_count($ipWhiteList, '.'); if($regCount == 3) { $min = str_replace('*', '0', $ipWhiteList); $max = str_replace('*', '255', $ipWhiteList); } elseif($regCount == 2) { $min = str_replace('*', '0.0', $ipWhiteList); $max = str_replace('*', '255.255', $ipWhiteList); } elseif($regCount == 1) { $min = str_replace('*', '0.0.0', $ipWhiteList); $max = str_replace('*', '255.255.255', $ipWhiteList); } $min = ip2long(trim($min)); $max = ip2long(trim($max)); $ip = ip2long(trim($ip)); return ($ip >= $min and $ip <= $max); } /* If the ip in white list is in IP/CIDR format eg 127.0.0.1/24. Thanks to zcat. */ if(strpos($ipWhiteList, '/') === false) $ipWhiteList .= '/32'; list($ipWhiteList, $netmask) = explode('/', $ipWhiteList, 2); $ip = ip2long($ip); $ipWhiteList = ip2long($ipWhiteList); $wildcard = pow(2, (32 - $netmask)) - 1; $netmask = ~ $wildcard; return (($ip & $netmask) == ($ipWhiteList & $netmask)); } /** * Get the full url of the system. * * @access public * @return string */ public static function getSysURL() { if(defined('RUN_MODE') && RUN_MODE == 'test') return ''; $httpType = (isset($_SERVER["HTTPS"]) and $_SERVER["HTTPS"] == 'on') ? 'https' : 'http'; if(isset($_SERVER['HTTP_X_FORWARDED_PROTO']) and strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) == 'https') $httpType = 'https'; if(isset($_SERVER['REQUEST_SCHEME']) and strtolower($_SERVER['REQUEST_SCHEME']) == 'https') $httpType = 'https'; $httpHost = $_SERVER['HTTP_HOST']; return "$httpType://$httpHost"; } /** * Check whether view type is tutorial * @access public * @return bool */ public static function isTutorialMode() { return (isset($_SESSION['tutorialMode']) and $_SESSION['tutorialMode']); } /** * Convert items to Pinyin. * * @param array $items * @static * @access public * @return array */ public static function convert2Pinyin($items) { global $app; static $allConverted = array(); static $pinyin; if(empty($pinyin)) $pinyin = $app->loadClass('pinyin'); $sign = ' aNdAnD '; $notConvertedItems = array_diff($items, array_keys($allConverted)); if($notConvertedItems) { $convertedPinYin = $pinyin->romanize(implode($sign, $notConvertedItems)); $itemsPinYin = explode(trim($sign), $convertedPinYin); foreach($notConvertedItems as $item) { $itemPinYin = array_shift($itemsPinYin); $wordsPinYin = explode("\t", trim($itemPinYin)); $abbr = ''; foreach($wordsPinYin as $wordPinyin) { if($wordPinyin) { $letter = $wordPinyin[0]; if(preg_match('/\w/', $letter)) $abbr .= $letter; } } $allConverted[$item] = mb_strtolower(implode('', $wordsPinYin) . ' ' . $abbr); } } $convertedItems = array(); foreach($items as $item) $convertedItems[$item] = zget($allConverted, $item, null); return $convertedItems; } /** * Check an entry of new API. * * @access public * @return void */ private function checkNewEntry() { $entry = $this->loadModel('entry')->getByKey(session_id()); if(!$entry or !$entry->account or !$this->checkIP($entry->ip)) return false; $user = $this->dao->findByAccount($entry->account)->from(TABLE_USER)->andWhere('deleted')->eq(0)->fetch(); if(!$user) return false; $user->last = time(); $user->rights = $this->loadModel('user')->authorize($user->account); $user->groups = $this->user->getGroups($user->account); $user->view = $this->user->grantUserView($user->account, $user->rights['acls']); $user->admin = strpos($this->app->company->admins, ",{$user->account},") !== false; $this->session->set('user', $user); $this->app->user = $user; } /** * Check an entry. * * @access public * @return void */ public function checkEntry() { /* if the API is new version, goto checkNewEntry. */ if($this->app->version) return $this->checkNewEntry(); /* Old version. */ if(!isset($_GET[$this->config->moduleVar]) or !isset($_GET[$this->config->methodVar])) $this->response('EMPTY_ENTRY'); if($this->isOpenMethod($_GET[$this->config->moduleVar], $_GET[$this->config->methodVar])) return true; if(!$this->get->code) $this->response('PARAM_CODE_MISSING'); if(!$this->get->token) $this->response('PARAM_TOKEN_MISSING'); $entry = $this->loadModel('entry')->getByCode($this->get->code); if(!$entry) $this->response('EMPTY_ENTRY'); if(!$entry->key) $this->response('EMPTY_KEY'); if(!$this->checkIP($entry->ip)) $this->response('IP_DENIED'); if(!$this->checkEntryToken($entry)) $this->response('INVALID_TOKEN'); if($entry->freePasswd == 0 and empty($entry->account)) $this->response('ACCOUNT_UNBOUND'); $isFreepasswd = ($_GET['m'] == 'user' and strtolower($_GET['f']) == 'apilogin' and $_GET['account'] and $entry->freePasswd); if($isFreepasswd) $entry->account = $_GET['account']; $user = $this->dao->findByAccount($entry->account)->from(TABLE_USER)->andWhere('deleted')->eq(0)->fetch(); if(!$user) $this->response('INVALID_ACCOUNT'); $this->loadModel('user'); $user->last = time(); $user->rights = $this->user->authorize($user->account); $user->groups = $this->user->getGroups($user->account); $user->view = $this->user->grantUserView($user->account, $user->rights['acls']); $user->admin = strpos($this->app->company->admins, ",{$user->account},") !== false; $this->session->set('user', $user); $this->app->user = $user; $this->dao->update(TABLE_USER)->set('last')->eq($user->last)->set('visits=visits+1')->where('account')->eq($user->account)->exec(); $this->loadModel('action')->create('user', $user->id, 'login'); $this->loadModel('score')->create('user', 'login'); if($isFreepasswd) helper::end(js::locate($this->config->webRoot)); $this->session->set('ENTRY_CODE', $this->get->code); $this->session->set('VALID_ENTRY', md5(md5($this->get->code) . helper::getRemoteIp())); $this->loadModel('entry')->saveLog($entry->id, $this->server->request_uri); /* Add for task #5384. */ if($_SERVER['REQUEST_METHOD'] == 'POST' and empty($_POST)) { $post = file_get_contents("php://input"); if(!empty($post)) $post = json_decode($post, true); if(!empty($post)) $_POST = $post; } unset($_GET['code']); unset($_GET['token']); } /** * Check token of an entry. * * @param object $entry * @access public * @return bool */ public function checkEntryToken($entry) { parse_str($this->server->query_String, $queryString); unset($queryString['token']); /* Change for task #5384. */ if(isset($queryString['time'])) { $timestamp = $queryString['time']; if(strlen($timestamp) > 10) $timestamp = substr($timestamp, 0, 10); if(strlen($timestamp) != 10 or $timestamp[0] >= '4') $this->response('ERROR_TIMESTAMP'); $result = $this->get->token == md5($entry->code . $entry->key . $queryString['time']); if($result) { if($timestamp <= $entry->calledTime) $this->response('CALLED_TIME'); $this->loadModel('entry')->updateCalledTime($entry->code, $timestamp); unset($_GET['time']); return $result; } } $queryString = http_build_query($queryString); return $this->get->token == md5(md5($queryString) . $entry->key); } /** * Check Not CN Lang. * * @static * @access public * @return bool */ public static function checkNotCN() { global $app; return strpos('|zh-cn|zh-tw|', '|' . $app->getClientLang() . '|') === false; } /** * Check the object can be changed. * * @param string $module * @param object $object * @static * @access public * @return bool */ public static function canBeChanged($module, $object = null) { if(defined('RUN_MODE') && RUN_MODE == 'api') return true; global $app, $config; static $productsStatus = array(); static $executionsStatus = array(); /* Check the product is closed. */ if(!empty($object->product) and is_numeric($object->product) and empty($config->CRProduct)) { if(!isset($productsStatus[$object->product])) { $product = $app->control->loadModel('product')->getByID($object->product); $productsStatus[$object->product] = $product ? $product->status : ''; } if($productsStatus[$object->product] == 'closed') return false; } elseif(!empty($object->product) and is_string($object->product) and empty($config->CRProduct)) { $products = array(0) + explode(',', $object->product); $products = $app->control->loadModel('product')->getByIdList($products); $productStatus = array(); foreach($products as $product) $productStatus[$product->status] = 1; if(!empty($productStatus['closed']) and count($productStatus) == 1) return false; } /* Check the execution is closed. */ $productModuleList = array('story', 'bug', 'testtask'); if(!in_array($module, $productModuleList) and !empty($object->execution) and is_numeric($object->execution) and empty($config->CRExecution)) { if(!isset($executionsStatus[$object->execution])) { $execution = $app->control->loadModel('execution')->getByID($object->execution); $executionsStatus[$object->execution] = $execution ? $execution->status : ''; } if($executionsStatus[$object->execution] == 'closed') return false; } return true; } /** * Check object can modify. * * @param string $type product|Execution * @param object $object * @static * @access public * @return bool */ public static function canModify($type, $object) { global $config; if(empty($object)) return true; /* Judge that if the closed object(product|execution) is readonly from config table. The default is can modify. */ if($type == 'product' and empty($config->CRProduct) and $object->status == 'closed') return false; if($type == 'execution' and empty($config->CRExecution) and $object->status == 'closed') return false; return true; } /** * Response. * * @param string $reasonPhrase * @access public * @return void */ public function response($reasonPhrase) { $response = new stdclass(); if(isset($this->config->entry->errcode)) { $response->errcode = $this->config->entry->errcode[$reasonPhrase]; $response->errmsg = urlencode($this->lang->entry->errmsg[$reasonPhrase]); helper::end(urldecode(json_encode($response))); } else { $response->error = $reasonPhrase; helper::end(urldecode(json_encode($response))); } } /** * Http. * * @param string $url * @param string|array $data * @param array $options This is option and value pair, like CURLOPT_HEADER => true. Use curl_setopt function to set options. * @param array $headers Set request headers. * @param string $dataType * @param string $method POST|PATCH|PUT * @param int $timeout * @param bool $httpCode Return a array contains response, http code, body, header. such as [response, http_code, 'body' => body, 'header' => header]. * @param bool $log Save to log or not * @static * @access public * @return string|array */ public static function http(string $url, string|array|null $data = null, array $options = array(), array $headers = array(), string $dataType = 'data', string $method = 'POST', int $timeout = 30, bool $httpCode = false, bool $log = true): string|array { global $lang, $app; if(!extension_loaded('curl')) { if($dataType == 'json') return print($lang->error->noCurlExt); return json_encode(array('result' => 'fail', 'message' => $lang->error->noCurlExt)); } commonModel::$requestErrors = array(); $requestType = 'GET'; if(!is_array($headers)) $headers = (array)$headers; $headers[] = 'API-RemoteIP: ' . helper::getRemoteIp(); /* Real IP of real user. */ $headers[] = 'API-LocalIP: ' . zget($_SERVER, 'SERVER_ADDR', ''); /* Server IP of self. */ if($dataType == 'json') { $headers[] = 'Content-Type: application/json;charset=utf-8'; if(!empty($data)) $data = json_encode($data); } $curl = curl_init(); curl_setopt($curl, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_0); curl_setopt($curl, CURLOPT_USERAGENT, 'ZenTao PMS ' . $app->config->version); curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, $timeout); curl_setopt($curl, CURLOPT_TIMEOUT, $timeout); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_ENCODING,''); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); curl_setopt($curl, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4); curl_setopt($curl, CURLOPT_HEADER, $httpCode); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 2); curl_setopt($curl, CURLINFO_HEADER_OUT, true); curl_setopt($curl, CURLOPT_HTTPHEADER, $headers); curl_setopt($curl, CURLOPT_URL, $url); if(!empty($data)) { if(is_object($data)) $data = (array) $data; if($method == 'POST') curl_setopt($curl, CURLOPT_POST, true); if(in_array($method, array('PATCH', 'PUT'))) curl_setopt($curl, CURLOPT_CUSTOMREQUEST, $method); $requestType = $method; curl_setopt($curl, CURLOPT_POSTFIELDS, $data); } if($options) curl_setopt_array($curl, $options); $response = curl_exec($curl); $errno = curl_errno($curl); $errors = empty($errno) ? 0 : curl_error($curl); $info = curl_getinfo($curl); if($httpCode) { $httpCode = $info['http_code'] ?? curl_getinfo($curl, CURLINFO_HTTP_CODE); $headerSize = $info['header_size'] ?? curl_getinfo($curl, CURLINFO_HEADER_SIZE); $headerString = substr($response, 0, $headerSize); $body = substr($response, $headerSize); /* Parse header. */ $header = explode("\n", $headerString); $newHeader = array(); foreach($header as $item) { $field = explode(':', $item); if(count($field) < 2) continue; $headerKey = array_shift($field); $newHeader[$headerKey] = implode('', $field); } } curl_close($curl); if($log or $app->config->debug) { $runMode = PHP_SAPI == 'cli' ? '_cli' : ''; $logFile = $app->getLogRoot() . 'saas' . $runMode . '.' . date('Ymd') . '.log.php'; if(!file_exists($logFile)) file_put_contents($logFile, ''); $saasLog = date('Ymd H:i:s') . ': ' . $app->getURI() . "\n"; $saasLog .= "{$requestType} url: {$url}\n"; if(!empty($data)) $saasLog .= 'data: ' . print_r($data, true) . "\n"; $saasLog .= 'results:' . print_r($response, true) . "\n"; if(!empty($errors)) { $saasLog .= "errno: {$errno}\n"; $saasLog .= "errors: {$errors}\n"; $saasLog .= 'info: ' . print_r($info, true) . "\n"; } file_put_contents($logFile, $saasLog, FILE_APPEND); } if($errors) commonModel::$requestErrors[] = $errors; return $httpCode ? array($response, $httpCode, 'body' => $body, 'header' => $newHeader, 'errno' => $errno, 'info' => $info, 'response' => $response) : $response; } /** * Set main menu. * * @static * @access public * @return string */ public static function setMainMenu() { global $app, $lang; $tab = $app->tab; $isTutorialMode = common::isTutorialMode(); $currentModule = $isTutorialMode ? $app->moduleName : $app->rawModule; $currentMethod = $isTutorialMode ? $app->methodName : $app->rawMethod; $currentMethod = strtolower($currentMethod); /* If homeMenu is not exists or unset, display menu. */ if(!isset($lang->$tab->homeMenu)) { $lang->menu = isset($lang->$tab->menu) ? $lang->$tab->menu : array(); $lang->menuOrder = isset($lang->$tab->menuOrder) ? $lang->$tab->menuOrder : array(); return; } if($currentModule == $tab and $currentMethod == 'create') { $lang->menu = $lang->$tab->homeMenu; return; } /* If the method is in homeMenu, display homeMenu. */ foreach($lang->$tab->homeMenu as $menu) { $link = is_array($menu) ? $menu['link'] : $menu; $params = explode('|', $link); $method = strtolower($params[2]); if($method == $currentMethod) { $lang->menu = $lang->$tab->homeMenu; return; } $alias = isset($menu['alias']) ? explode(',', strtolower($menu['alias'])) : array(); $exclude = isset($menu['exclude']) ? explode(',', strtolower($menu['exclude'])) : array(); if(in_array($currentMethod, $alias) && !in_array("{$currentModule}-{$currentMethod}", $exclude)) { $lang->menu = $lang->$tab->homeMenu; return; } if(isset($menu['subModule']) and strpos(",{$menu['subModule']},", ",$currentModule,") !== false) { $lang->menu = $lang->$tab->homeMenu; return; } } /* Default, display menu. */ $lang->menu = isset($lang->$tab->menu) ? $lang->$tab->menu : array(); $lang->menuOrder = isset($lang->$tab->menuOrder) ? $lang->$tab->menuOrder : array(); } /** * Get relations for two object. * * @param string $aType * @param int $aID * @param string $bType * @param int $bID * * @access public * @return array */ public function getRelations($aType = '', $aID = 0, $bType = '', $bID = 0) { return $this->dao->select('*')->from(TABLE_RELATION) ->where('AType')->eq($aType) ->andWhere('AID')->eq($aID) ->andwhere('BType')->eq($bType) ->beginIF($bID)->andwhere('BID')->eq($bID)->fi() ->fetchAll(); } /** * Replace the %s of one key of a menu by objectID or $params. * * All the menus are defined in the common's language file. But there're many dynamic params, so in the defination, * we used %s as placeholder. These %s should be setted in one module. * * @param string $moduleName * @param int $objectID * @param array $params * * @access public * @return void */ public static function setMenuVars($moduleName, $objectID, $params = array()) { global $app, $lang; $menuKey = 'menu'; if($app->viewType == 'mhtml') $menuKey = 'webMenu'; foreach($lang->$moduleName->$menuKey as $label => $menu) { $lang->$moduleName->$menuKey->$label = static::setMenuVarsEx($menu, $objectID, $params); if(isset($menu['subMenu'])) { foreach($menu['subMenu'] as $key1 => $subMenu) { $lang->$moduleName->$menuKey->{$label}['subMenu']->$key1 = static::setMenuVarsEx($subMenu, $objectID, $params); } } if(!isset($menu['dropMenu'])) continue; foreach($menu['dropMenu'] as $key2 => $dropMenu) { $lang->$moduleName->$menuKey->{$label}['dropMenu']->$key2 = static::setMenuVarsEx($dropMenu, $objectID, $params); if(!isset($dropMenu['subMenu'])) continue; foreach($dropMenu['subMenu'] as $key3 => $subMenu) { $lang->$moduleName->$menuKey->{$label}['dropMenu']->$key3 = static::setMenuVarsEx($subMenu, $objectID, $params); } } } /* If objectID is set, cannot use homeMenu. */ unset($lang->$moduleName->homeMenu); } /** * Check menuVars replaced. * * @static * @access public * @return void */ public static function checkMenuVarsReplaced() { global $app, $lang; $tab = $app->tab; $varsReplaced = true; foreach($lang->menu as $menu) { if(isset($menu['link']) and strpos($menu['link'], '%s') !== false) $varsReplaced = false; if(!isset($menu['link']) and is_string($menu) and strpos($menu, '%s') !== false) $varsReplaced = false; if(!$varsReplaced) break; } if(!$varsReplaced and strpos("|program|product|project|execution|qa|", "|{$tab}|") !== false) { $isTutorialMode = common::isTutorialMode(); $currentModule = $isTutorialMode ? $app->moduleName : $app->rawModule; if(isset($lang->$currentModule->menu)) { $lang->menu = isset($lang->$currentModule->menu) ? $lang->$currentModule->menu : array(); $lang->menuOrder = isset($lang->$currentModule->menuOrder) ? $lang->$currentModule->menuOrder : array(); $app->tab = zget($lang->navGroup, $currentModule); } else { static::setMenuVars($tab, (int)$app->session->$tab); } } } /** * Replace the %s of one key of a menu by objectID or $params. * * @param object|string $menu * @param int $objectID * @param array $params */ public static function setMenuVarsEx($menu, $objectID, $params = array()) { if(is_array($menu)) { if(!isset($menu['link'])) return $menu; $link = sprintf($menu['link'], $objectID); $menu['link'] = vsprintf($link, $params); } else { $menu = sprintf($menu, $objectID); $menu = vsprintf($menu, $params); } return $menu; } /** * Process markdown. * * @param string $markdown * @static * @access public * @return string */ public static function processMarkdown($markdown) { if(empty($markdown)) return false; global $app; $app->loadClass('parsedown'); $parsedown = new parsedown; $parsedown->voidElementSuffix = '>'; // HTML5 return $parsedown->text($markdown); } /** * Sort featureBar. * * @param string $module * @param string $method * @static * @access public * @return bool */ public static function sortFeatureMenu($module = '', $method = '') { global $lang, $config, $app; $module = $module ? $module : $app->rawModule; $method = $method ? $method : $app->rawMethod; /* It will be sorted according to the workflow in the future */ if(!empty($config->featureBarSort[$module][$method])) { $featureBar = array(); if(empty($lang->$module->featureBar[$method])) return false; foreach($lang->$module->featureBar[$method] as $key => $label) { foreach($config->featureBarSort[$module][$method] as $currentKey => $afterKey) { if($key == $currentKey) continue; $featureBar[$method][$key] = $label; if($key == $afterKey && !empty($lang->$module->featureBar[$method][$currentKey])) { $featureBar[$method][$currentKey] = $lang->$module->featureBar[$method][$currentKey]; } } } $lang->$module->featureBar = $featureBar; } return true; } /** * Replace menu lang. * * @static * @access public * @return void */ public static function replaceMenuLang() { global $lang; if(empty($lang->db->custom)) return; foreach($lang->db->custom as $moduleName => $sectionMenus) { if(strpos($moduleName, 'Menu') === false) continue; $isSecondMenu = strpos($moduleName, 'SubMenu') === false; $moduleName = str_replace($isSecondMenu ? 'Menu' : 'SubMenu', '', $moduleName); foreach($sectionMenus as $section => $menus) { foreach($menus as $key => $value) { static::replaceSubMenuLang($isSecondMenu, $moduleName, $section, $key, $value); } } } } /** * Replace submenu lang. * * @param bool $isSecondMenu * @param string $moduleName * @param string $section * @param string $key * @param string $value * @static * @access public * @return void */ public static function replaceSubMenuLang($isSecondMenu, $moduleName, $section, $key, $value) { global $lang; /* Get second menu. */ if($isSecondMenu) { $isDropMenu = strpos($section, 'DropMenu') !== false; if(!$isDropMenu) { if(!isset($lang->{$moduleName}->{$section})) return; if(is_object($lang->{$moduleName}->{$section}) and isset($lang->{$moduleName}->{$section}->{$key})) $settingMenu = &$lang->{$moduleName}->{$section}->{$key}; if(is_array($lang->{$moduleName}->{$section}) and isset($lang->{$moduleName}->{$section}[$key])) $settingMenu = &$lang->{$moduleName}->{$section}[$key]; } else { /* Get drop menu in second menu. */ $dropMenuKey = str_replace('DropMenu', '', $section); if(!isset($lang->{$moduleName}->menu->{$dropMenuKey}['dropMenu']->{$key})) return; $settingMenu = &$lang->{$moduleName}->menu->{$dropMenuKey}['dropMenu']->{$key}; } } /* Get third menu. */ elseif(isset($lang->{$moduleName}->menu->{$section}['subMenu'])) { $subMenu = $lang->{$moduleName}->menu->{$section}['subMenu']; if(is_object($subMenu) and isset($subMenu->{$key})) $settingMenu = &$lang->{$moduleName}->menu->{$section}['subMenu']->{$key}; if(is_array($subMenu) and isset($subMenu[$key])) $settingMenu = &$lang->{$moduleName}->menu->{$section}['subMenu'][$key]; } /* Set custom menu lang. */ if(!empty($settingMenu)) { if(is_string($settingMenu)) $settingMenu = $value . substr($settingMenu, strpos($settingMenu, '|')); if(is_array($settingMenu) and isset($settingMenu['link'])) $settingMenu['link'] = $value . substr($settingMenu['link'], strpos($settingMenu['link'], '|')); unset($settingMenu); } } /** * Check valid row. * * @param string $objectType * @param array $postData * @param int $index * @access public * @return bool */ public function checkValidRow($objectType, $postData = array(), $index = 0) { if(empty($postData)) return false; foreach($postData as $key => $value) { if(!is_array($value) or strpos($this->config->$objectType->excludeCheckFields, ",$key,") !== false) continue; if(isset($value[$index]) and !empty($value[$index]) and $value[$index] != 'ditto') return true; } return false; } /** * Get method of API. * * @param string $url * @param array|object $data * @param array $headers example: array("key1:value1", "key2:value2") * @access public * @return object */ public static function apiGet($url, $data = array(), $headers = array()) { $url .= (strpos($url, '?') !== false ? '&' : '?') . http_build_query($data, '', '&', PHP_QUERY_RFC3986); $result = json_decode(commonModel::http($url, $data, array(CURLOPT_CUSTOMREQUEST => 'GET'), $headers, 'json')); if($result && $result->code == 200) return $result; return static::apiError($result); } /** * Post method of API. * * @param string $url * @param array|object $data * @param array $headers example: array("key1:value1", "key2:value2") * @access public * @return object */ public static function apiPost($url, $data, $headers = array()) { $result = json_decode(commonModel::http($url, $data, array(CURLOPT_CUSTOMREQUEST => 'POST'), $headers, 'json')); if($result && $result->code == 200) return $result; return static::apiError($result); } /** * Put method of API. * * @param string $url * @param array|object $data * @param array $headers example: array("key1:value1", "key2:value2") * @access public * @return object */ public static function apiPut($url, $data, $headers = array()) { $result = json_decode(commonModel::http($url, $data, array(CURLOPT_CUSTOMREQUEST => 'PUT'), $headers, 'json')); if($result && $result->code == 200) return $result; return static::apiError($result); } /** * Delete method of API. * * @param string $url * @param array|object $data * @param array $headers example: array("key1:value1", "key2:value2") * @access public * @return object */ public static function apiDelete($url, $data, $headers = array()) { $result = json_decode(commonModel::http($url, $data, array(CURLOPT_CUSTOMREQUEST => 'DELETE'), $headers, 'json')); if($result && $result->code == 200) return $result; return static::apiError($result); } /** * Return error object of api server. * * @param object|null $result * @access protected * @return object */ protected static function apiError($result) { global $lang; if($result && $result->code) return $result; $error = new stdclass; $error->code = 600; $error->message = $lang->error->httpServerError; return $error; } /** * Print progress bar. * * @param int $percent percent 0-100 * @param string $color color theme: gray, red, orange, green * @param string $tip * @param string $showValue possible values: '', 'percent', 'tip' * @static * @access public * @return void */ public static function printProgressBar($percent, $color = '', $tip = '', $showValue = '') { if(empty($color) && $percent == 0) $color = 'gray'; if(empty($color) && $percent > 0 && $percent < 60) $color = 'green'; if(empty($color) && $percent >= 0 && $percent < 80) $color = 'orange'; if(empty($color) && $percent >= 80) $color = 'red'; $title = $tip ? $tip : $percent . '%'; $valueHtml = ''; if($showValue == 'tip') $valueHtml = "
    {$title}
    "; if($showValue == 'percent') $valueHtml = "
    {$percent}%
    "; echo <<
    {$valueHtml}
    EOT; } /** * Print progress pie. * * @param float $percent * @param string $color HEX value of color * @param string $tip * @param string $tipPosition available values: left, right, top, bottom * @static * @access public * @return void */ public static function printProgressPie($percent, $color = '', $tip = '', $tipPosition = 'bottom') { if(empty($color)) $color = static::getColorByLevel($percent); $title = $tip ? $tip : $percent . '%'; echo <<
    {$percent}%
    EOT; } /** * Get color by level for percent that is in level range. * * @param float $percent * @static * @access public * @return string HEX value of color */ public static function getColorByLevel($percent) { if($percent == 0) $color = '#999999'; // gray if($percent > 0 and $percent < 60) $color = '#009e0f'; // green if($percent >= 60 and $percent < 80) $color = '#ff9900'; // orange if($percent >= 80) $color = '#cf2a27'; // red return $color; } /** * Get all the fields of data type from MySQL. * * @param string|array $type * @param string $table * @param bool $returnJson * @access public * @return array */ public function getFieldsByType($type, $table = '', $returnJson = false) { $database = $this->config->db->name; if(!empty($table)) $table = $this->config->db->prefix . $table; $tableColumnList = $this->dao->select('TABLE_NAME as tableName,COLUMN_NAME as columnName') ->from('information_schema.COLUMNS') ->where('TABLE_SCHEMA')->eq($database) ->beginIF(is_string($type))->andWhere('COLUMN_TYPE')->eq($type)->fi() ->beginIF(is_array($type))->andWhere('COLUMN_TYPE')->in($type)->fi() ->beginIF(!empty($table))->andWhere('TABLE_NAME')->eq($table)->fi() ->fetchAll(); $fieldList = array(); if(!empty($table)) { $fieldList = array_column($tableColumnList, 'columnName'); } else { foreach($tableColumnList as $tableColumn) { $table = $tableColumn->tableName; $column = $tableColumn->columnName; if(!isset($fieldList[$table])) $fieldList[$table] = array(); $fieldList[$table][] = $column; } } return $returnJson ? json_encode($fieldList) : $fieldList; } /** * Get DAO to access SQLite or MySQL. * * @param object $params * @access public * @return object */ public function getDAO($params = null) { if(!$this->config->db->enableSqlite) return $this->dao; $dao = clone $this->dao; $dao->reset(); $dao->dbh = $this->app->connectSqlite($params); $dao->driver = 'sqlite'; return $dao; } /** * 构建详情操作链接配置。 * Build action item. * * @param string $module * @param string $method * @param string $params * @param object $object * @param array $attrs * @static * @access public * @return void */ public static function buildActionItem(string $module, string $method, string $params, object|null $object = null, array $attrs = array()): array { if(!commonModel::hasPriv($module, $method, $object)) return array(); global $app; $clickable = true; if(is_object($object)) { if($app->getModuleName() != $module) $app->control->loadModel($module); $modelClass = class_exists("ext{$module}Model") ? "ext{$module}Model" : $module . "Model"; if(class_exists($modelClass) and method_exists($modelClass, 'isClickable')) $clickable = call_user_func_array(array($modelClass, 'isClickable'), array($object, $method)); } if(!$clickable) return array(); $item['url'] = helper::createLink($module, $method, $params); foreach($attrs as $attr => $value) $item[$attr] = $value; return $item; } /** * 按照模块生成详情页的操作按钮。 * Build operate actions menu. * * @param object $data * @access public * @return array */ public function buildOperateMenu(object $data): array { global $app, $config; /* build operate menu. */ $moduleName = $app->moduleName; $methodName = $app->methodName; $actionsMenu = array(); $this->loadModel($moduleName); foreach($config->{$moduleName}->actions->{$methodName} as $menu => $actionList) { $actions = array(); foreach($actionList as $action) { $actionData = $config->{$moduleName}->actionList[$action]; if(!empty($actionData['url']) && is_array($actionData['url'])) { $module = $actionData['url']['module']; $method = $actionData['url']['method']; $params = $actionData['url']['params']; if(!common::hasPriv($module, $method)) continue; $actionData['url'] = helper::createLink($module, $method, $params); } else if(!empty($actionData['data-url']) && is_array($actionData['data-url'])) { $module = $actionData['data-url']['module']; $method = $actionData['data-url']['method']; $params = $actionData['data-url']['params']; if(!common::hasPriv($module, $method)) continue; $actionData['data-url'] = helper::createLink($module, $method, $params); } else { if(!common::hasPriv($moduleName, $action)) continue; } if(method_exists($this->{$moduleName}, 'isClickable') && false === $this->{$moduleName}->isClickable($data, $action)) continue; if($menu == 'suffixActions' && !empty($actionData['text']) && empty($actionData['showText'])) $actionData['text'] = ''; $actions[] = $actionData; } $actionsMenu[$menu] = $actions; } return $actionsMenu; } /** * 计算应用运行时间。 * Print duration of a instance. * * @param int $seconds * @param string $format y-m-d-h-i-s, case insensitive * @static * @access public * @return string */ public static function printDuration(int $seconds, string $format = 'y-m-d-h-i-s'): string { global $lang; $duration = ''; $format = strtolower($format); if(strpos($format, 'y') !== false) { $years = intval($seconds / (3600 * 24 * 365)); $leftSeconds = intval($seconds % (3600 * 24 * 365)); if($years) $duration .= $years . $lang->year; } if(strpos($format, 'm') !== false) { $months = intval($leftSeconds / (3600 * 24 * 30)); $leftSeconds = intval($leftSeconds % (3600 * 24 * 30)); if($months) $duration .= $months . $lang->month; } if(strpos($format, 'd') !== false) { $days = intval($leftSeconds / (3600 * 24)); $leftSeconds = intval($leftSeconds % (3600 * 24)); if($days) $duration .= $days . trim($lang->day); } if(strpos($format, 'h') !== false) { $hours = intval($leftSeconds / 3600); $leftSeconds = intval($leftSeconds % 3600); if($hours) $duration .= $hours . $lang->hour; } if(strpos($format, 'i') !== false) { $minutes = intval($leftSeconds / 60); $leftSeconds = intval($leftSeconds % 60); if($minutes) $duration .= $minutes . $lang->minute; } if(strpos($format, 's') !== false) { $seconds = intval($leftSeconds % 3600); if($seconds) $duration .= $seconds . $lang->second; } return $duration; } } class common extends commonModel { }