|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/akaindir/www/crm/include/Webservices/ |
Upload File : |
<?php
/*+***********************************************************************************
* The contents of this file are subject to the vtiger CRM Public License Version 1.0
* ("License"); You may not use this file except in compliance with the License
* The Original Code is: vtiger CRM Open Source
* The Initial Developer of the Original Code is vtiger.
* Portions created by vtiger are Copyright (C) vtiger.
* All Rights Reserved.
*************************************************************************************/
function setBuiltIn($json){
$json->useBuiltinEncoderDecoder = true;
}
class OperationManager{
private $format;
private $formatsData=array(
"json"=>array(
"includePath"=>"include/Zend/Json.php",
"class"=>"Zend_Json",
"encodeMethod"=>"encode",
"decodeMethod"=>"decode",
"postCreate"=>"setBuiltIn"
)
);
private $operationMeta = null;
private $formatObjects ;
private $inParamProcess ;
private $sessionManager;
private $pearDB;
private $operationName;
private $type;
private $handlerPath;
private $handlerMethod;
private $preLogin;
private $operationId;
private $operationParams;
function OperationManager($adb,$operationName,$format, $sessionManager){
$this->format = strtolower($format);
$this->sessionManager = $sessionManager;
$this->formatObjects = array();
foreach($this->formatsData as $frmt=>$frmtData){
require_once($frmtData["includePath"]);
$instance = new $frmtData["class"]();
$this->formatObjects[$frmt]["encode"] = array(&$instance,$frmtData["encodeMethod"]);
$this->formatObjects[$frmt]["decode"] = array(&$instance,$frmtData["decodeMethod"]);
if($frmtData["postCreate"]){
call_user_func($frmtData["postCreate"],$instance);
}
}
$this->pearDB = $adb;
$this->operationName = $operationName;
$this->inParamProcess = array();
$this->inParamProcess["encoded"] = &$this->formatObjects[$this->format]["decode"];
$this->fillOperationDetails($operationName);
}
function isPreLoginOperation(){
return $this->preLogin == 1;
}
private function fillOperationDetails($operationName){
$sql = "select * from vtiger_ws_operation where name=?";
$result = $this->pearDB->pquery($sql,array($operationName));
if($result){
$rowCount = $this->pearDB->num_rows($result);
if($rowCount > 0){
$row = $this->pearDB->query_result_rowdata($result,0);
$this->type = $row['type'];
$this->handlerMethod = $row['handler_method'];
$this->handlerPath = $row['handler_path'];
$this->preLogin = $row['prelogin'];
$this->operationName = $row['name'];
$this->operationId = $row['operationid'];
$this->fillOperationParameters();
return;
}
}
throw new WebServiceException(WebServiceErrorCode::$UNKNOWNOPERATION,"Unknown operation requested");
}
private function fillOperationParameters(){
$sql = "select * from vtiger_ws_operation_parameters where operationid=? order by sequence";
$result = $this->pearDB->pquery($sql,array($this->operationId));
$this->operationParams = array();
if($result){
$rowCount = $this->pearDB->num_rows($result);
if($rowCount > 0){
for ($i=0;$i<$rowCount;++$i){
$row = $this->pearDB->query_result_rowdata($result,$i);
array_push($this->operationParams,array($row['name']=>$row['type']));
}
}
}
}
public function getOperationInput(){
$type = strtolower($this->type);
switch($type){
case 'get': $input = &$_GET;
return $input;
case 'post': $input = &$_POST;
return $input;
default: $input = &$_REQUEST;
return $input;
}
}
function sanitizeOperation($input){
return $this->sanitizeInputForType($input);
}
function sanitizeInputForType($input){
$sanitizedInput = array();
foreach($this->operationParams as $ind=>$columnDetails){
foreach ($columnDetails as $columnName => $type) {
$sanitizedInput[$columnName] = $this->handleType($type,vtws_getParameter($input,$columnName));;
}
}
return $sanitizedInput;
}
function handleType($type,$value){
$result;
$value = stripslashes($value);
$type = strtolower($type);
if($this->inParamProcess[$type]){
$result = call_user_func($this->inParamProcess[$type],$value);
}else{
$result = $value;
}
return $result;
}
function runOperation($params,$user){
global $API_VERSION;
try{
$operation = strtolower($this->operationName);
if(!$this->preLogin){
$params[] = $user;
return call_user_func_array($this->handlerMethod,$params);
}else{
$userDetails = call_user_func_array($this->handlerMethod,$params);
if(is_array($userDetails)){
return $userDetails;
}else{
$this->sessionManager->set("authenticatedUserId", $userDetails->id);
global $adb;
$webserviceObject = VtigerWebserviceObject::fromName($adb,"Users");
$userId = vtws_getId($webserviceObject->getEntityId(),$userDetails->id);
$vtigerVersion = vtws_getVtigerVersion();
$resp = array("sessionName"=>$this->sessionManager->getSessionId(),"userId"=>$userId,"version"=>$API_VERSION,"vtigerVersion"=>$vtigerVersion);
return $resp;
}
}
} catch (DuplicateException $e) {
throw $e;
}catch(WebServiceException $e){
throw $e;
}catch(Exception $e){
throw new WebServiceException(WebServiceErrorCode::$INTERNALERROR,"Unknown Error while processing request");
}
}
function encode($param){
return call_user_func($this->formatObjects[$this->format]["encode"],$param);
}
function getOperationIncludes(){
$includes = array();
array_push($includes,$this->handlerPath);
return $includes;
}
}
?>