object.php

<?php
 
 
define('XOBJ_DTYPE_STRING', 1);
define('XOBJ_DTYPE_TXTBOX', 1);
define('XOBJ_DTYPE_TEXT', 2);
define('XOBJ_DTYPE_TXTAREA', 2);
define('XOBJ_DTYPE_INT', 3);
define('XOBJ_DTYPE_URL', 4);
define('XOBJ_DTYPE_EMAIL', 5);
define('XOBJ_DTYPE_ARRAY', 6);
define('XOBJ_DTYPE_OTHER', 7);
define('XOBJ_DTYPE_SOURCE', 8);
define('XOBJ_DTYPE_STIME', 9);
define('XOBJ_DTYPE_MTIME', 10);
define('XOBJ_DTYPE_LTIME', 11);
define('XOBJ_DTYPE_FLOAT', 12);
define('XOBJ_DTYPE_BOOL', 13);

class AbstractXoopsObject
{
    public function setNew()
    {
    }
 
    public function unsetNew()
    {
    }

    public function isNew()
    {
    }
 
    public function initVar($key, $data_type, $default, $required, $size)
    {
    }

    public function assignVars($values)
    {
    }

    public function set($key, $value)
    {
    }
 
    public function get($key)
    {
    }

    public function getShow($key)
    {
    }
}
 

class XoopsObject extends AbstractXoopsObject
{

    public $vars = [];

    public $cleanVars = [];

    public $_isNew = false;

    public $_isDirty = false;

    public $_errors = [];

    public $_filters = [];

    public function __construct()
    {
    }

    public function setNew()
    {
        $this->_isNew = true;
    }
    public function unsetNew()
    {
        $this->_isNew = false;
    }
    public function isNew()
    {
        return $this->_isNew;
    }


    public function setDirty()
    {
        $this->_isDirty = true;
    }
    public function unsetDirty()
    {
        $this->_isDirty = false;
    }
    public function isDirty()
    {
        return $this->_isDirty;
    }

    public function initVar($key, $data_type, $value = null, $required = false, $maxlength = null, $options = '')
    {
        $this->vars[$key] = ['value' => $value, 'required' => $required, 'data_type' => $data_type, 'maxlength' => $maxlength, 'changed' => false, 'options' => $options];
    }

    public function assignVar($key, $value)
    {
        $vars = &$this->vars;
        if (isset($value) && isset($vars[$key])) {
            $vars[$key]['value'] =& $value;
        }
    }

    public function assignVars($var_arr)
    {
        $vars = &$this->vars;
        foreach ($var_arr as $key => $value) {
            if (isset($value) && isset($vars[$key])) {
                $vars[$key]['value'] = $value;
            }
        }
    }

    public function setVar($key, $value, $not_gpc = false)
    {
        if (!empty($key) && isset($value) && isset($this->vars[$key])) {
            $var =& $this->vars[$key];
            $var['value'] =& $value;
            $var['not_gpc'] = $not_gpc;
            $var['changed'] = true;
            $this->setDirty();
        }
    }

    public function setVars($var_arr, $not_gpc = false)
    {
        foreach ($var_arr as $key => $value) {
            $this->setVar($key, $value, $not_gpc);
        }
    }

    public function setFormVars($var_arr=null, $pref='xo_', $not_gpc=false)
    {
        $len = strlen($pref);
        foreach ($var_arr as $key => $value) {
            if ($pref == substr($key, 0, $len)) {
                $this->setVar(substr($key, $len), $value, $not_gpc);
            }
        }
    }
 

    public function &getVars()
    {
        return $this->vars;
    }

    public function &getVar($key, $format = 's')
    {
        $var =& $this->vars[$key];
        $ret = $var['value'];
        switch ($var['data_type']) {
 
        case XOBJ_DTYPE_TXTBOX:
            switch (strtolower($format)) {
            case 's':
            case 'show':
            case 'e':
            case 'edit':
                $ts =& MyTextSanitizer::sGetInstance();
                return $ts->htmlSpecialChars($ret);
            case 'p':
            case 'preview':
            case 'f':
            case 'formpreview':
                $ts =& MyTextSanitizer::sGetInstance();
                return $ts->htmlSpecialChars($ts->stripSlashesGPC($ret));
            default:
                return $ret;
            }
        case XOBJ_DTYPE_TXTAREA:
            switch (strtolower($format)) {
            case 's':
            case 'show':
                $ts =& MyTextSanitizer::sGetInstance();
                $vars =&$this->vars;
                $html = !empty($vars['dohtml']['value']) ? 1 : 0;
                $xcode = (!isset($vars['doxcode']['value']) || 1 == $vars['doxcode']['value']) ? 1 : 0;
                $smiley = (!isset($vars['dosmiley']['value']) || 1 == $vars['dosmiley']['value']) ? 1 : 0;
                $image = (!isset($vars['doimage']['value']) || 1 == $vars['doimage']['value']) ? 1 : 0;
                $br = (!isset($vars['dobr']['value']) || 1 == $vars['dobr']['value']) ? 1 : 0;
                return $ts->displayTarea($ret, $html, $smiley, $xcode, $image, $br);
            case 'e':
            case 'edit':
                $ret = htmlspecialchars($ret, ENT_QUOTES);
                return $ret;
            case 'p':
            case 'preview':
                $ts =& MyTextSanitizer::sGetInstance();
                $vars =&$this->vars;
                $html = !empty($vars['dohtml']['value']) ? 1 : 0;
                $xcode = (!isset($vars['doxcode']['value']) || 1 == $vars['doxcode']['value']) ? 1 : 0;
                $smiley = (!isset($vars['dosmiley']['value']) || 1 == $vars['dosmiley']['value']) ? 1 : 0;
                $image = (!isset($vars['doimage']['value']) || 1 == $vars['doimage']['value']) ? 1 : 0;
                $br = (!isset($vars['dobr']['value']) || 1 == $vars['dobr']['value']) ? 1 : 0;
                return $ts->previewTarea($ret, $html, $smiley, $xcode, $image, $br);
            case 'f':
            case 'formpreview':
                $ts =& MyTextSanitizer::sGetInstance();
                return htmlspecialchars($ts->stripSlashesGPC($ret), ENT_QUOTES);
            default:
                return $ret;
            }
        case XOBJ_DTYPE_ARRAY:
            $ret = unserialize($ret);
            return $ret;
        case XOBJ_DTYPE_SOURCE:
            switch (strtolower($format)) {
            case 'e':
            case 'edit':
                return htmlspecialchars($ret, ENT_QUOTES);
            case 'p':
            case 'preview':
                $ts =& MyTextSanitizer::sGetInstance();
                return $ts->stripSlashesGPC($ret);
            case 'f':
            case 'formpreview':
                $ts =& MyTextSanitizer::sGetInstance();
                $ret = htmlspecialchars($ts->stripSlashesGPC($ret), ENT_QUOTES);
                return $ret;
            default:
                return $ret;
            }
        default:
            if ('' != $var['options'] && '' != $ret) {
                switch (strtolower($format)) {
                case 's':
                case 'show':
                    $selected = explode('|', $ret);
                    $options = explode('|', $var['options']);
                    $i = 1;
                    $ret = [];
                    foreach ($options as $op) {
                        if (in_array($i, $selected)) {
                            $ret[] = $op;
                        }
                        $i++;
                    }
                    return implode(', ', $ret);
                case 'e':
                case 'edit':
                    return explode('|', $ret);
                default:
                    return $ret;
                }
            }
            break;
        }
        return $ret;
    }
 
    public function getShow($key)
    {
        return $this->getVar($key, 's');
    }

    public function set($key, $value)
    {
        $this->setVar($key, $value, true);
    }
 
    public function get($key)
    {
        // ! Fix PHP7 Undefined index, variable not initialized with Null coalesce operator @gigamaster
        // The coalesce, or ??, operator is added, which returns the result of its first operand if it exists and is not NULL,
        // or else its second operand. This means the $_GET['mykey'] ?? "" is completely safe and will not raise an E_NOTICE.
        //  https://wiki.php.net/rfc/isset_ternary
        return $this->vars[$key]['value'] ?? '';
    }

    public function getProperty($key)
    {
        return $this->vars[$key]['value'];
    }

    public function getProperties()
    {
        $ret= [];
        foreach (array_keys($this->vars) as $key) {
            $ret[$key]=$this->vars[$key]['value'];
        }
        return $ret;
    }

    public function cleanVars()
    {
        $ts =& MyTextSanitizer::sGetInstance();
        foreach ($this->vars as $k => $v) {
            $cleanv = $v['value'];
            if (!$v['changed']) {
            } else {
                $cleanv = is_string($cleanv) ? trim($cleanv) : $cleanv;
                switch ($v['data_type']) {
                case XOBJ_DTYPE_TXTBOX:
                    if ($v['required'] && '0' != $cleanv && '' == $cleanv) {
                        $this->setErrors("$k is required.");
                        break;
                    }
                    if (isset($v['maxlength']) && strlen($cleanv) > (int)$v['maxlength']) {
                        $this->setErrors("$k must be shorter than ".(int)$v['maxlength'] . ' characters.');
                        break;
                    }
                    if (!$v['not_gpc']) {
                        $cleanv = $ts->stripSlashesGPC($ts->censorString($cleanv));
                    } else {
                        $cleanv = $ts->censorString($cleanv);
                    }
                    break;
                case XOBJ_DTYPE_TXTAREA:
                    if ($v['required'] && '0' != $cleanv && '' == $cleanv) {
                        $this->setErrors("$k is required.");
                        break;
                    }
                    if (!$v['not_gpc']) {
                        $cleanv = $ts->stripSlashesGPC($ts->censorString($cleanv));
                    } else {
                        $cleanv = $ts->censorString($cleanv);
                    }
                    break;
                case XOBJ_DTYPE_SOURCE:
                    if (!$v['not_gpc']) {
                        $cleanv = $ts->stripSlashesGPC($cleanv);
                    } else {
                        $cleanv = $cleanv;
                    }
                    break;
 
                case XOBJ_DTYPE_INT:
                    $cleanv = (int)$cleanv;
                    break;
 
                case XOBJ_DTYPE_FLOAT:
                    $cleanv = (float)$cleanv;
                    break;
 
                case XOBJ_DTYPE_BOOL:
                    $cleanv = $cleanv ? 1 : 0;
                    break;
 
                case XOBJ_DTYPE_EMAIL:
                    if ($v['required'] && '' == $cleanv) {
                        $this->setErrors("$k is required.");
                        break;
                    }
                    if ('' != $cleanv && !preg_match("/^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+([\.][a-z0-9-]+)+$/i", $cleanv)) {
                        $this->setErrors('Invalid Email');
                        break;
                    }
                    if (!$v['not_gpc']) {
                        $cleanv = $ts->stripSlashesGPC($cleanv);
                    }
                    break;
                case XOBJ_DTYPE_URL:
                    if ($v['required'] && '' == $cleanv) {
                        $this->setErrors("$k is required.");
                        break;
                    }
                    if ('' != $cleanv && !preg_match("/^http[s]*:\/\//i", $cleanv)) {
                        $cleanv = 'https://' . $cleanv;
                    }
                    if (!$v['not_gpc']) {
                        $cleanv =& $ts->stripSlashesGPC($cleanv);
                    }
                    break;
                case XOBJ_DTYPE_ARRAY:
                    $cleanv = serialize($cleanv);
                    break;
                case XOBJ_DTYPE_STIME:
                case XOBJ_DTYPE_MTIME:
                case XOBJ_DTYPE_LTIME:
                    $cleanv = !is_string($cleanv) ? (int)$cleanv : strtotime($cleanv);
                    break;
                default:
                    break;
                }
            }
            $this->cleanVars[$k] =& $cleanv;
            unset($cleanv);
        }
        if (count($this->_errors) > 0) {
            return false;
        }
        $this->unsetDirty();
        return true;
    }

    public function registerFilter($filtername)
    {
        $this->_filters[] = $filtername;
    }

    public function _loadFilters()
    {
        //include_once XOOPS_ROOT_PATH.'/class/filters/filter.php';
        //foreach ($this->_filters as $f) {
        //    include_once XOOPS_ROOT_PATH.'/class/filters/'.strtolower($f).'php';
        //}
    }

    public function &xoopsClone()
    {
        $class = get_class($this);
        $clone =new $class();
        foreach ($this->vars as $k => $v) {
            $clone->assignVar($k, $v['value']);
        }
        // need this to notify the handler class that this is a newly created object
        $clone->setNew();
        return $clone;
    }

    public function setErrors($err_str)
    {
        $this->_errors[] = trim($err_str);
    }

    public function getErrors()
    {
        return $this->_errors;
    }

    public function getHtmlErrors()
    {
        $ret = '<h4>Errors</h4>';
        if (!empty($this->_errors)) {
            foreach ($this->_errors as $error) {
                $ret .= $error.'<br>';
            }
        } else {
            $ret .= 'None<br>';
        }
        return $ret;
    }
}

class XoopsObjectHandler
{

    public $db;
 
    //
    public function __construct(&$db)
    {
        $this->db =& $db;
    }

    public function &create()
    {
    }

    public function &get($int_id)
    {
    }

    public function insert(&$object)
    {
    }

    public function delete(&$object)
    {
    }
}