80 lines
2.8 KiB
PHP
80 lines
2.8 KiB
PHP
<?php
|
|
session_start();
|
|
require('../incl/const.php');
|
|
require('../class/database.php');
|
|
require('../class/map.php');
|
|
require('../class/permalink.php');
|
|
|
|
$result = ['success' => false, 'message' => 'Error while processing your request!'];
|
|
|
|
if(isset($_SESSION['user']) && $_SESSION['user']->accesslevel == 'Admin') {
|
|
|
|
$database = new Database(DB_HOST, DB_NAME, DB_USER, DB_PASS, DB_PORT, DB_SCMA);
|
|
$obj = new permalink_Class($database->getConn(), $_SESSION['user']->id);
|
|
$id = isset($_POST['id']) ? intval($_POST['id']) : 0;
|
|
|
|
if($_SERVER['REQUEST_METHOD'] == 'GET'){ // if called from map directly
|
|
// make a 1 visit permalink, expiring in 1 hour
|
|
if(!empty($_GET['permalink'])){
|
|
$row = $obj->getMap($_GET['permalink']);
|
|
$_POST['map_id'] = $row['map_id'];
|
|
$_POST['query'] = str_replace('permalink='.$_GET['permalink'].'&', '', $_SERVER['QUERY_STRING']);
|
|
}else{
|
|
$_POST['map_id'] = $_GET['id'];
|
|
$_POST['query'] = $_GET['loc'];
|
|
}
|
|
$_POST['description'] = 'Permalink for map '.$_POST['map_id'];
|
|
$_POST['visits_limit'] = 1;
|
|
$_POST['expires'] = "1 hour";
|
|
$_POST['save'] = true;
|
|
}
|
|
|
|
if(($id > 0) && !$obj->isOwnedByUs($id)){
|
|
$result = ['success' => false, 'message' => 'Action not allowed!'];
|
|
|
|
}else if(isset($_POST['save'])) {
|
|
$newId = 0;
|
|
|
|
if(isset($_POST['id'])) { // update
|
|
if($obj->update($_POST)){
|
|
$result = ['success' => true, 'message' => 'Permalink Successfully Updated!'];
|
|
}else{
|
|
$result = ['success' => false, 'message' => 'Permalink Not Updated!'];
|
|
}
|
|
|
|
} else { // insert
|
|
|
|
$map_obj = new map_Class($database->getConn(), $_SESSION['user']->id);
|
|
$res = $map_obj->getById($_POST['map_id']);
|
|
$map_row = pg_fetch_assoc($res);
|
|
|
|
$hash_data = $_SERVER['HTTP_USER_AGENT'].date('m/d/Y h:i:s a', time());
|
|
$hash_data .= $_POST['map_id'].$_POST['description'].$_POST['expires'].$_POST['visits_limit'];
|
|
$_POST['hash'] = hash('md5', $hash_data);
|
|
|
|
list($newId,$created,$expires) = $obj->create($_POST);
|
|
if($newId > 0){
|
|
|
|
$perma_url = 'apps/'. $_POST['map_id'].'/index.php?permalink='.$_POST['hash'];
|
|
|
|
$result = ['success' => true, 'message' => 'Data Successfully Saved!',
|
|
'id' => $newId, 'hash' => $_POST['hash'], 'url'=> $perma_url,'created'=>$created, 'expires'=>$expires ];
|
|
|
|
}else{
|
|
$result = ['success' => false, 'message' => 'Data Not Saved!'];
|
|
}
|
|
}
|
|
|
|
|
|
} else if(isset($_POST['delete'])) {
|
|
if($obj->delete(intval($_POST['id']))){
|
|
$result = ['success' => true, 'message' => 'Data Successfully Deleted!'];
|
|
}else{
|
|
$result = ['success' => false, 'message' => 'Error: Data Not Deleted!'];
|
|
}
|
|
}
|
|
}
|
|
|
|
echo json_encode($result);
|
|
?>
|