|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/akaindir/www/crm/modules/CustomerPortal/apis/ |
Upload File : |
<?php
/* +**********************************************************************************
* The contents of this file are subject to the vtiger CRM Public License Version 1.1
* ("License"); You may not use this file except in compliance with the License
* The Original Code is: vtiger CRM Open Source
* The Initial Developer of the Original Code is vtiger.
* Portions created by vtiger are Copyright (C) vtiger.
* All Rights Reserved.
* ***********************************************************************************/
class CustomerPortal_FetchRelatedRecords extends CustomerPortal_API_Abstract {
function process(CustomerPortal_API_Request $request) {
global $adb;
$response = new CustomerPortal_API_Response();
$current_user = $this->getActiveUser();
if ($current_user) {
$recordId = $request->get('recordId');
$parentId = $request->get('parentId');
$parentModule = $request->get('module');
$module = $request->get('relatedModule');
$moduleLabel = $request->get('relatedModuleLabel');
$page = $request->get('page');
$pageLimit = $request->get('pageLimit');
$mode = CustomerPortal_Settings_Utils::getDefaultMode($moduleLabel);
if (empty($pageLimit))
$pageLimit = CustomerPortal_Config::$DEFAULT_PAGE_LIMIT;
if (empty($page)) {
$page = 0;
}
if ($module != 'ModComments' && !CustomerPortal_Utils::isModuleActive($module)) {
throw new Exception("Module not Accessible", 1412);
exit;
}
if (!empty($parentId)) {
if (!$this->isRecordAccessible($parentId)) {
throw new Exception("Parent record not accessible", 1412);
exit;
}
$baseModule = VtigerWebserviceObject::fromId($adb, $recordId)->getEntityName();
$relatedRecordIds = $this->relatedRecordIds($baseModule, CustomerPortal_Utils::getRelatedModuleLabel($baseModule), $parentId);
if (!in_array($recordId, $relatedRecordIds)) {
throw new Exception("Record not Accessible", 1412);
exit;
}
} else if ($parentModule !== 'Faq') {
if (!$this->isRecordAccessible($recordId) && $prentModule !== 'Faq') {
throw new Exception("Record not accessible", 1412);
exit;
}
} else {
//If module is Faq by pass this check as we Faq's are not related to Contacts module.
if (!$this->isFaqPublished($recordId)) {
throw new Exception("This Faq is not published", 1412);
exit;
}
}
if ($module == 'ModComments' && !empty($recordId)) {
global $adb;
$relatedModule = VtigerWebserviceObject::fromId($adb, $recordId)->getEntityName();
if (!CustomerPortal_Utils::isModuleActive($relatedModule)) {
throw new Exception("Comments not accessible for this record", 1412);
exit;
}
$result = vtws_query(sprintf("SELECT * FROM ModComments WHERE related_to = '%s' AND is_private='%s' ORDER BY %s DESC LIMIT %s,%s;", $recordId, 0, 'modifiedtime', ($page * $pageLimit), $pageLimit), $current_user);
$fileIds = array();
$$relatedEmailIds = array();
if (is_array($result)) {
foreach ($result as $index => $value) {
$fileId = $value['filename'];
$attachmentIds = explode(',', $fileId);
//Fetching all attachments and its properties and appending to each comment.
if (!empty($attachmentIds)) {
$attachmentsResult = $adb->pquery('SELECT attachmentsid,name FROM vtiger_attachments WHERE attachmentsid IN ('.generateQuestionMarks($attachmentIds).')', $attachmentIds);
$result[$index]['attachments'] = array();
$noOfAttachments = $adb->num_rows($attachmentsResult);
$attachments = array();
for ($i = 0; $i < $noOfAttachments; $i++) {
$attachments[$i]['filename'] = decode_html($adb->query_result($attachmentsResult, $i, 'name'));
$attachments[$i]['attachmentid'] = $adb->query_result($attachmentsResult, $i, 'attachmentsid');
}
}
$result[$index]['attachments'] = $attachments;
$relatedEmailId = $value['related_email_id'];
if (!empty($relatedEmailId)) {
$relatedEmailIds[$value['id']] = $relatedEmailId;
}
if ($value['commentcontent']) {
$result[$index]['commentcontent'] = trim(decode_html(strip_tags($value['commentcontent'])));
}
}
}
if (!empty($relatedEmailIds)) {
foreach ($relatedEmailIds as $id => $emailId) {
$attachmentsResult = $adb->pquery('SELECT * FROM vtiger_attachments
INNER JOIN vtiger_seattachmentsrel ON vtiger_attachments.attachmentsid = vtiger_seattachmentsrel.attachmentsid
WHERE vtiger_seattachmentsrel.crmid = ?', array($emailId));
if ($row = $adb->fetch_row($attachmentsResult)) {
foreach ($result as $index => $value) {
if ($id == $value['id'])
$result[$index]['attachmentName'] = decode_html($row['name']);
}
}
}
}
} else {
$activeFields = CustomerPortal_Utils::getActiveFields($module);
$fields = implode(',', $activeFields);
$limitCaluse = sprintf('ORDER BY modifiedtime DESC LIMIT %s,%s', ($page * $pageLimit), $pageLimit);
if ($mode == 'all' && in_array($module, array('Products', 'Services'))) {
$sql = sprintf("SELECT %s FROM %s", $fields, $module);
$sql = $sql.' '.$limitCaluse;
$result = vtws_query($sql, $current_user);
} else {
$result = vtws_query_related(sprintf("SELECT %s FROM %s", $fields, $module), $recordId, $moduleLabel, $current_user, $limitCaluse);
}
}
foreach ($result as $key => $recordValues) {
$result[$key] = CustomerPortal_Utils::resolveRecordValues($recordValues);
}
$response->setResult($result);
return $response;
}
}
}