block.php

<?php
 
if (!defined('XOOPS_ROOT_PATH')) {
    exit();
}
 
if (!defined('SHOW_SIDEBLOCK_LEFT')) {
    define('SHOW_SIDEBLOCK_LEFT',     1);
    define('SHOW_SIDEBLOCK_RIGHT',    2);
    define('SHOW_CENTERBLOCK_LEFT',   4);
    define('SHOW_CENTERBLOCK_RIGHT',  8);
    define('SHOW_CENTERBLOCK_CENTER', 16);
    define('SHOW_BLOCK_ALL',          31);
}

class XoopsBlock extends XoopsObject
{
    public $mBlockFlagMapping = [];

    public function __construct($id = null)
    {
        static $initVars, $initMap;
        if (isset($initVars)) {
            $this->vars = $initVars;
        } else {
            $this->initVar('bid', XOBJ_DTYPE_INT, null, false);
            $this->initVar('mid', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('func_num', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('options', XOBJ_DTYPE_TXTBOX, null, false, 255);
            $this->initVar('name', XOBJ_DTYPE_TXTBOX, null, true, 150);
            //$this->initVar('position', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('title', XOBJ_DTYPE_TXTBOX, null, false, 150);
            $this->initVar('content', XOBJ_DTYPE_TXTAREA, null, false);
            $this->initVar('side', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('weight', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('visible', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('block_type', XOBJ_DTYPE_OTHER, null, false);
            $this->initVar('c_type', XOBJ_DTYPE_OTHER, null, false);
            $this->initVar('isactive', XOBJ_DTYPE_INT, null, false);
            $this->initVar('dirname', XOBJ_DTYPE_TXTBOX, null, false, 50);
            $this->initVar('func_file', XOBJ_DTYPE_TXTBOX, null, false, 50);
            $this->initVar('show_func', XOBJ_DTYPE_TXTBOX, null, false, 50);
            $this->initVar('edit_func', XOBJ_DTYPE_TXTBOX, null, false, 50);
            $this->initVar('template', XOBJ_DTYPE_OTHER, null, false);
            $this->initVar('bcachetime', XOBJ_DTYPE_INT, 0, false);
            $this->initVar('last_modified', XOBJ_DTYPE_INT, time(), false);
            $initVars = $this->vars;
            $initMap = [
            0 => false,
                SHOW_SIDEBLOCK_LEFT => 0,
                SHOW_SIDEBLOCK_RIGHT => 1,
                SHOW_CENTERBLOCK_LEFT => 3,
                SHOW_CENTERBLOCK_RIGHT => 4,
                SHOW_CENTERBLOCK_CENTER => 5
            ];
        }
 
        // for backward compatibility
        if (isset($id)) {
            if (is_array($id)) {
                $this->assignVars($id);
            } else {
                $this->load($id);
            }
        }
        $this->mBlockFlagMapping = $initMap;
    }
    public function XoopsBlock($id = null)
    {
        return self::__construct($id);
    }

    public function &getContent($format = 'S', $c_type = 'T')
    {
        $ret = null;
 
        switch ($format) {
        case 'S':
 
            // check the type of content
            // H : custom HTML block
            // P : custom PHP block
            // S : use text sanitizater (smilies enabled)
            // T : use text sanitizater (smilies disabled)
            if ('H' == $c_type) {
                $ret = str_replace('{X_SITEURL}', XOOPS_URL.'/', $this->getVar('content', 'N'));
            } elseif ('P' == $c_type) {
                ob_start();
                echo eval($this->get('content'));
                $content = ob_get_contents();
                ob_end_clean();
                $ret = str_replace('{X_SITEURL}', XOOPS_URL.'/', $content);
            } elseif ('S' == $c_type) {
                $myts =& MyTextSanitizer::sGetInstance();
                $ret = str_replace('{X_SITEURL}', XOOPS_URL.'/', $myts->displayTarea($this->get('content'), 1, 1));
            } else {
                $myts =& MyTextSanitizer::sGetInstance();
                $ret = str_replace('{X_SITEURL}', XOOPS_URL.'/', $myts->displayTarea($this->get('content'), 1, 0));
            }
            break;
        case 'E':
            $ret = $this->getVar('content', 'E');
            break;
        default:
            $ret = $this->get('content');
            break;
        }
 
        return $ret;
    }
 
    public function &buildBlock()
    {
        $ret = false;
 
        $block = [];
        // M for module block, S for system block C for Custom
        if ('C' != $this->get('block_type')) {
            // get block display function
            $show_func = $this->getVar('show_func', 'N');
            if (!$show_func) {
                return $ret;
            }
            // must get lang files b4 execution of the function
            if (file_exists($path = XOOPS_ROOT_PATH.'/modules/'.($dirname = $this->getVar('dirname', 'N')).'/blocks/'.$this->getVar('func_file', 'N'))) {
                $root=&XCube_Root::getSingleton();
                $root->mLanguageManager->loadBlockMessageCatalog($dirname);
 
                require_once $path;
                if (function_exists($show_func)) {
                    // execute the function
                    $params = explode('|', $this->getVar('options', 'N'));
                    $block = $show_func($params);
                    if (!$block) {
                        return $ret;
                    }
                } else {
                    return $ret;
                }
            } else {
                return $ret;
            }
        } else {
            // it is a custom block, so just return the contents
            $block['content'] = $this->getContent('S', $this->getVar('c_type', 'N'));
            if (empty($block['content'])) {
                return $ret;
            }
        }
        return $block;
    }
 
    /*
    * Aligns the content of a block
    * If position is 0, content in DB is positioned
    * before the original content
    * If position is 1, content in DB is positioned
    * after the original content
    */
    public function &buildContent($position, $content='', $contentdb='')
    {
        $ret = null;
        if (0 == $position) {
            $ret = $contentdb.$content;
        } elseif (1 == $position) {
            $ret = $content.$contentdb;
        }
        return $ret;
    }
 
    public function &buildTitle($originaltitle, $newtitle='')
    {
        if ('' != $newtitle) {
            $ret = $newtitle;
        } else {
            $ret = $originaltitle;
        }
        return $ret;
    }
 
    public function isCustom()
    {
        if ('C' == $this->get('block_type')) {
            return true;
        }
        return false;
    }

    public function getOptions()
    {
        if ('C' != $this->get('block_type')) {
            $edit_func = $this->getVar('edit_func', 'N');
            if (!$edit_func) {
                return false;
            }
            if (file_exists($path = XOOPS_ROOT_PATH.'/modules/'.($dirname=$this->getVar('dirname', 'N')).'/blocks/'.$this->getVar('func_file', 'N'))) {
                $root =& XCube_Root::getSingleton();
                $root->mLanguageManager->loadBlockMessageCatalog($dirname);
 
                include_once $path;
                $options = explode('|', $this->getVar('options', 'N'));
                $edit_form = $edit_func($options);
                if (!$edit_form) {
                    return false;
                }
                return $edit_form;
            } else {
                return false;
            }
        } else {
            return false;
        }
    }
 
    // Some functions for for backward compatibility
    //  @deprecated
 
    public function load($id)
    {
        $handler = xoops_gethandler('block');
        if ($obj =& $handler->get($id)) {
            foreach ($obj->vars as $k => $v) {
                $this->assignVar($k, $v['value']);
            }
        }
    }
 
    public function store()
    {
        $handler = xoops_gethandler('block');
        if ($handler->insert($this)) {
            return $this->getVar('bid', 'N');
        } else {
            return false;
        }
    }
 
    public function delete()
    {
        $handler = xoops_gethandler('block');
        return $handler->delete($this);
    }
    public function &getAllBlocksByGroup($groupid, $asobject=true, $side=null, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getAllBlocksByGroup($groupid, $asobject, $side, $visible, $orderby, $isactive);
        return $ret;
    }
    public function &getAllBlocks($rettype='object', $side=null, $visible=null, $orderby='side,weight,bid', $isactive=1)
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getAllBlocks($rettype, $side, $visible, $orderby, $isactive);
        return $ret;
    }
    public static function &sGetByModule($moduleid, $asobject=true) {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getByModule($moduleid, $asobject);
        return $ret;
    }
    public function &getByModule($moduleid, $asobject=true)
    {
        return self::sGetByModule($moduleid, $asobject);
    }
    public function &getAllByGroupModule($groupid, $module_id=0, $toponlyblock=false, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getAllByGroupModule($groupid, $module_id, $toponlyblock, $visible, $orderby, $isactive);
        return $ret;
    }
    public function &getBlocks($groupid, $mid=false, $blockFlag=SHOW_BLOCK_ALL, $orderby='b.weight,b.bid')
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getBlocks($groupid, $mid, $blockFlag, $orderby);
        return $ret;
    }
    public function &getNonGroupedBlocks($module_id=0, $toponlyblock=false, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->getNonGroupedBlocks($module_id, $toponlyblock, $visible, $orderby, $isactive);
        return $ret;
    }
    public function countSimilarBlocks($moduleId, $funcNum, $showFunc = null)
    {
        $handler = xoops_gethandler('block');
        $ret =& $handler->countSimilarBlocks($moduleId, $funcNum, $showFunc);
        return $ret;
    }
}
 

class XoopsBlockHandler extends XoopsObjectHandler
{

    public function &create($isNew = true)
    {
        $block = new XoopsBlock();
        if ($isNew) {
            $block->setNew();
        }
        return $block;
    }

    public function &createByInfo($info)
    {
        $block =& $this->create();
 
        $options=$info['options'] ?? null;
        $edit_func=$info['edit_func'] ?? null;
 
        $block->setVar('options', $options);
        $block->setVar('name', $info['name']);
        $block->setVar('title', $info['name']);
        $block->setVar('block_type', 'M');
        $block->setVar('c_type', 1);
        $block->setVar('func_file', $info['file']);
        $block->setVar('show_func', $info['show_func']);
        $block->setVar('edit_func', $edit_func);
        $block->setVar('template', $info['template']);
        $block->setVar('last_modified', time());
 
        return $block;
    }

    public function &get($id)
    {
        $id = (int)$id;
        if ($id > 0) {
            $db = $this->db;
            $sql = 'SELECT * FROM '.$db->prefix('newblocks').' WHERE bid='.$id;
            if (!$result = $db->query($sql)) {
                $ret = false;    //< You may think this should be null. But this is the compatibility with X2.
                return $ret;
            }
            $numrows = $db->getRowsNum($result);
            if (1 == $numrows) {
                $block = new XoopsBlock();
                $block->assignVars($db->fetchArray($result));
                return $block;
            }
        }
 
        $ret = false;    //< You may think this should be null. But this is the compatibility with X2.
        return $ret;
    }

    public function insert(&$block, $autolink=false)
    {
        $mid = null;
        $func_num = null;
        $options = null;
        $name = null;
        $title = null;
        $content = null;
        $side = null;
        $weight = null;
        $visible = null;
        $block_type = null;
        $c_type = null;
        $dirname = null;
        $func_file = null;
        $show_func = null;
        $edit_func = null;
        $template = null;
        $bcachetime = null;
        $isactive = null;
        $bid = null;
        if ('xoopsblock' != strtolower(get_class($block))) {
            return false;
        }
        if (!$block->isDirty()) {
            return true;
        }
        if (!$block->cleanVars()) {
            return false;
        }
        foreach ($block->cleanVars as $k => $v) {
            ${$k} = $v;
        }
 
        $isNew = false;
 
        $db = $this->db;
        if ($block->isNew()) {
            $isNew = true;
            $bid = $db->genId('newblocks_bid_seq');
            $sql = sprintf('INSERT INTO %s (bid, mid, func_num, options, name, title, content, side, weight, visible, block_type, c_type, isactive, dirname, func_file, show_func, edit_func, template, bcachetime, last_modified) VALUES (%u, %u, %u, %s, %s, %s, %s, %u, %u, %u, %s, %s, %u, %s, %s, %s, %s, %s, %u, %u)', $db->prefix('newblocks'), $bid, $mid, $func_num, $db->quoteString($options), $db->quoteString($name), $db->quoteString($title), $db->quoteString($content), $side, $weight, $visible, $db->quoteString($block_type), $db->quoteString($c_type), 1, $db->quoteString($dirname), $db->quoteString($func_file), $db->quoteString($show_func), $db->quoteString($edit_func), $db->quoteString($template), $bcachetime, time());
        } else {
            $sql = sprintf('UPDATE %s SET func_num = %u, options = %s, name = %s, title = %s, content = %s, side = %u, weight = %u, visible = %u, c_type = %s, isactive = %u, func_file = %s, show_func = %s, edit_func = %s, template = %s, bcachetime = %u, last_modified = %u WHERE bid = %u', $db->prefix('newblocks'), $func_num, $db->quoteString($options), $db->quoteString($name), $db->quoteString($title), $db->quoteString($content), $side, $weight, $visible, $db->quoteString($c_type), $isactive, $db->quoteString($func_file), $db->quoteString($show_func), $db->quoteString($edit_func), $db->quoteString($template), $bcachetime, time(), $bid);
        }
        if (!$result = $db->query($sql)) {
            return false;
        }
        if (empty($bid)) {
            $bid = $db->getInsertId();
        }
        $block->assignVar('bid', $bid);
 
        //
        // $autolink is temp variable.
        //
        if ($isNew && $autolink) {
            $link_sql = 'INSERT INTO ' . $db->prefix('block_module_link') . ' (block_id, module_id) VALUES ('.$bid.', -1)';
            return $db->query($link_sql);
        }
 
        return true;
    }

    public function delete(&$block)
    {
        if ('xoopsblock' != strtolower(get_class($block))) {
            return false;
        }
        $id = $block->get('bid');
        $db = $this->db;
        $sql = sprintf('DELETE FROM %s WHERE bid = %u', $db->prefix('newblocks'), $id);
        if (!$result = $db->query($sql)) {
            return false;
        }
        $sql = sprintf('DELETE FROM %s WHERE block_id = %u', $db->prefix('block_module_link'), $id);
        $db->query($sql);
        return true;
    }

    public function &getObjects($criteria = null, $id_as_key = false)
    {
        $ret = [];
        $limit = $start = 0;
        $sql = 'SELECT DISTINCT(b.*) FROM '.$this->db->prefix('newblocks').' b LEFT JOIN '.$this->db->prefix('block_module_link').' l ON b.bid=l.block_id';
        if (isset($criteria) && $criteria instanceof \criteriaelement) {
            $sql .= ' '.$criteria->renderWhere();
            $limit = $criteria->getLimit();
            $start = $criteria->getStart();
        }
        $result = $this->db->query($sql, $limit, $start);
        if (!$result) {
            return $ret;
        }
        while ($myrow = $this->db->fetchArray($result)) {
            $block =& $this->create(false);
            $block->assignVars($myrow);
            if (!$id_as_key) {
                $ret[] =& $block;
            } else {
                $ret[$myrow['bid']] =& $block;
            }
            unset($block);
        }
        return $ret;
    }
 
    public function &getObjectsDirectly($criteria = null)
    {
        $ret = [];
        $limit = 0;
        $start = 0;
 
        $sql = 'SELECT * FROM ' . $this->db->prefix('newblocks');
        if ($criteria) {
            $sql .= ' ' . $criteria->renderWhere();
        }
 
        $result = $this->db->query($sql);
        if (!$result) {
            return $ret;
        }
 
        while ($row = $this->db->fetchArray($result)) {
            $block =& $this->create(false);
            $block->assignVars($row);
 
            $ret[] =& $block;
 
            unset($block);
        }
 
        return $ret;
    }
 

    public function &getList($criteria = null)
    {
        $blocks =& $this->getObjects($criteria, true);
        $ret = [];
        foreach (array_keys($blocks) as $i) {
            $name = ('C' != $blocks[$i]->get('block_type')) ? $blocks[$i]->getVar('name') : $blocks[$i]->getVar('title');
            $ret[$i] = $name;
        }
        return $ret;
    }

    public function &getAllBlocksByGroup($groupid, $asobject=true, $side=null, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $ret = [];
        if (!$asobject) {
            $sql = 'SELECT b.bid ';
        } else {
            $sql = 'SELECT b.* ';
        }
        $sql .= 'FROM '.$this->db->prefix('newblocks').' b LEFT JOIN '.$this->db->prefix('group_permission').' l ON l.gperm_itemid=b.bid WHERE gperm_name = \'block_read\' AND gperm_modid = 1';
        if (is_array($groupid)) {
            $sql .= ' AND (l.gperm_groupid='.(int)$groupid[0];
            $size = count($groupid);
            if ($size  > 1) {
                for ($i = 1; $i < $size; $i++) {
                    $sql .= ' OR l.gperm_groupid='.(int)$groupid[$i];
                }
            }
            $sql .= ')';
        } else {
            $sql .= ' AND l.gperm_groupid='.(int)$groupid;
        }
        $sql .= ' AND b.isactive='.(int)$isactive;
        if (isset($side)) {
            $side = (int)$side;
            // get both sides in sidebox? (some themes need this)
            if (XOOPS_SIDEBLOCK_BOTH == $side) {
                $side = '(b.side=0 OR b.side=1)';
            } elseif (XOOPS_CENTERBLOCK_ALL == $side) {
                $side = '(b.side=3 OR b.side=4 OR b.side=5)';
            } else {
                $side = 'b.side='.$side;
            }
            $sql .= ' AND '.$side;
        }
        if (isset($visible)) {
            $sql .= ' AND b.visible='.(int)$visible;
        }
        $sql .= ' ORDER BY '.addslashes($orderby);
        $result = $this->db->query($sql);
        $added = [];
        while ($myrow = $this->db->fetchArray($result)) {
            if (!in_array($myrow['bid'], $added)) {
                if (!$asobject) {
                    $ret[] = $myrow['bid'];
                } else {
                    $block =& $this->create(false);
                    $block->assignVars($myrow);
                    $ret[] =& $block;
                }
                array_push($added, $myrow['bid']);
            }
        }
        return $ret;
    }
    public function &getAllBlocks($rettype='object', $side=null, $visible=null, $orderby='side,weight,bid', $isactive=1)
    {
        $ret = [];
        $where_query = ' WHERE isactive='.(int)$isactive;
        if (isset($side)) {
            $side = (int)$side;
            // get both sides in sidebox? (some themes need this)
            if (2 == $side) {
                $side = '(side=0 OR side=1)';
            } elseif (6 == $side) {
                $side = '(side=3 OR side=4 OR side=5)';
            } else {
                $side = 'side='.$side;
            }
            $where_query .= ' AND '.$side;
        }
        if (isset($visible)) {
            $visible = (int)$visible;
            $where_query .= ' AND visible='.$visible;
        }
        $where_query .= ' ORDER BY '.addslashes($orderby);
        switch ($rettype) {
        case 'object':
            $sql = 'SELECT * FROM '.$this->db->prefix('newblocks').$where_query;
            $result = $this->db->query($sql);
            while ($myrow = $this->db->fetchArray($result)) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $ret[] =& $block;
            }
            break;
        case 'list':
            $sql = 'SELECT * FROM '.$this->db->prefix('newblocks').$where_query;
            $result = $this->db->query($sql);
            while ($myrow = $this->db->fetchArray($result)) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $name = ('C' != $block->get('block_type')) ? $block->getVar('name') : $block->getVar('title');
                $ret[$block->getVar('bid')] = $name;
                unset($block);
            }
            break;
        case 'id':
            $sql = 'SELECT bid FROM '.$this->db->prefix('newblocks').$where_query;
            $result = $this->db->query($sql);
            while ($myrow = $this->db->fetchArray($result)) {
                $ret[] = $myrow['bid'];
            }
            break;
        }
        //echo $sql;
        return $ret;
    }
 
    public function &getByModule($moduleid, $asobject=true)
    {
        $moduleid = (int)$moduleid;
        if (true == $asobject) {
            $sql = $sql = 'SELECT * FROM '.$this->db->prefix('newblocks').' WHERE mid='.$moduleid;
        } else {
            $sql = 'SELECT bid FROM '.$this->db->prefix('newblocks').' WHERE mid='.$moduleid;
        }
        $result = $this->db->query($sql);
        $ret = [];
        while ($myrow = $this->db->fetchArray($result)) {
            if ($asobject) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $ret[] =& $block;
            } else {
                $ret[] = $myrow['bid'];
            }
        }
        return $ret;
    }

    public function &getAllByGroupModule($groupid, $module_id=0, $toponlyblock=false, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $ret = [];
        $db = $this->db;
        $sql = 'SELECT DISTINCT gperm_itemid FROM '.$db->prefix('group_permission').' WHERE gperm_name = \'block_read\' AND gperm_modid = 1';
        if (is_array($groupid)) {
            $sql .= ' AND gperm_groupid IN ('.addslashes(implode(',', array_map('intval', $groupid))).')';
        } else {
            $groupid = (int)$groupid;
            if ($groupid > 0) {
                $sql .= ' AND gperm_groupid='.$groupid;
            }
        }
        $result = $db->query($sql);
        $blockids = [];
        while ($myrow = $db->fetchArray($result)) {
            $blockids[] = $myrow['gperm_itemid'];
        }
        if (!empty($blockids)) {
            $sql = 'SELECT b.* FROM '.$db->prefix('newblocks').' b, '.$db->prefix('block_module_link').' m WHERE m.block_id=b.bid';
            $sql .= ' AND b.isactive='.$isactive;
            if (isset($visible)) {
                $sql .= ' AND b.visible='.(int)$visible;
            }
            if (false !== $module_id) {
                $sql .= ' AND m.module_id IN (0,'.(int)$module_id;
                if ($toponlyblock) {
                    $sql .= ',-1';
                }
                $sql .= ')';
            } else {
                if ($toponlyblock) {
                    $sql .= ' AND m.module_id IN (0,-1)';
                } else {
                    $sql .= ' AND m.module_id=0';
                }
            }
            $sql .= ' AND b.bid IN ('.implode(',', $blockids).')';
            $sql .= ' ORDER BY '.$orderby;
            $result = $db->query($sql);
            while ($myrow = $db->fetchArray($result)) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $ret[$myrow['bid']] =& $block;
                unset($block);
            }
        }
        return $ret;
    }

    public function &getBlocks($groupid, $mid=false, $blockFlag=SHOW_BLOCK_ALL, $orderby='b.weight,b.bid')
    {
        $root =& XCube_Root::getSingleton();
        $db = $this->db =& $root->mController->getDB();
 
        $ret = [];
        $sql = 'SELECT DISTINCT gperm_itemid FROM '.$db->prefix('group_permission').' WHERE gperm_name = \'block_read\' AND gperm_modid = 1';
        if (is_array($groupid)) {
            $sql .= ' AND gperm_groupid IN ('.addslashes(implode(',', array_map('intval', $groupid))).')';
        } else {
            $groupid = (int)$groupid;
            if ($groupid > 0) {
                $sql .= ' AND gperm_groupid='.$groupid;
            }
        }
        $result = $db->query($sql);
        $blockids = [];
        while ([$itemid] = $db->fetchRow($result)) {
            $blockids[] = $itemid;
        }
        if (!empty($blockids)) {
            $sql = 'SELECT b.* FROM '.$db->prefix('newblocks').' b, '.$db->prefix('block_module_link').' m WHERE m.block_id=b.bid';
            $sql .= ' AND b.isactive=1 AND b.visible=1';
            if (false !== $mid && 0 !== $mid) {
                $sql .= ' AND m.module_id IN (0,'.(int)$mid.')';
            } else {
                $sql .= ' AND m.module_id=0';
            }
 
            //
            // SIDE
            //
            if (SHOW_BLOCK_ALL != $blockFlag) {
                $arr = [];
                if ($blockFlag & SHOW_SIDEBLOCK_LEFT) {
                    $arr[] = 'b.side=' . $this->mBlockFlagMapping[SHOW_SIDEBLOCK_LEFT];
                }
                if ($blockFlag & SHOW_SIDEBLOCK_RIGHT) {
                    $arr[] = 'b.side=' . $this->mBlockFlagMapping[SHOW_SIDEBLOCK_RIGHT];
                }
                if ($blockFlag & SHOW_CENTERBLOCK_LEFT) {
                    $arr[] = 'b.side=' . $this->mBlockFlagMapping[SHOW_CENTERBLOCK_LEFT];
                }
                if ($blockFlag & SHOW_CENTERBLOCK_CENTER) {
                    $arr[] = 'b.side=' . $this->mBlockFlagMapping[SHOW_CENTERBLOCK_CENTER];
                }
                if ($blockFlag & SHOW_CENTERBLOCK_RIGHT) {
                    $arr[] = 'b.side=' . $this->mBlockFlagMapping[SHOW_CENTERBLOCK_RIGHT];
                }
 
                $sql .= ' AND (' . implode(' OR ', $arr) . ')';
            }
 
            $sql .= ' AND b.bid IN ('.implode(',', $blockids).')' . ' ORDER BY '.addslashes($orderby);
            $result = $db->query($sql);
            while ($myrow = $db->fetchArray($result)) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $ret[$myrow['bid']] =& $block;
                unset($block);
            }
        }
        return $ret;
    }

    public function &getNonGroupedBlocks($module_id=0, $toponlyblock=false, $visible=null, $orderby='b.weight,b.bid', $isactive=1)
    {
        $ret = [];
        $bids = [];
        $db = $this->db;
        $sql = 'SELECT DISTINCT(bid) from '.$db->prefix('newblocks');
        if ($result = $db->query($sql)) {
            while ($myrow = $db->fetchArray($result)) {
                $bids[] = $myrow['bid'];
            }
        }
        $sql = 'SELECT DISTINCT(p.gperm_itemid) from '.$db->prefix('group_permission').' p, '.$db->prefix('groups').' g WHERE g.groupid=p.gperm_groupid AND p.gperm_name=\'block_read\'';
        $grouped = [];
        if ($result = $db->query($sql)) {
            while ($myrow = $db->fetchArray($result)) {
                $grouped[] = $myrow['gperm_itemid'];
            }
        }
        $non_grouped = array_diff($bids, $grouped);
        if (!empty($non_grouped)) {
            $sql = 'SELECT b.* FROM '.$db->prefix('newblocks').' b, '.$db->prefix('block_module_link').' m WHERE m.block_id=b.bid';
            $sql .= ' AND b.isactive='.(int)$isactive;
            if (isset($visible)) {
                $sql .= ' AND b.visible='.(int)$visible;
            }
            $module_id = (int)$module_id;
            if (!empty($module_id)) {
                $sql .= ' AND m.module_id IN (0,'.$module_id.($toponlyblock?',-1)':')');
            } else {
                if ($toponlyblock) {
                    $sql .= ' AND m.module_id IN (0,-1)';
                } else {
                    $sql .= ' AND m.module_id=0';
                }
            }
            $sql .= ' AND b.bid IN ('.implode(',', $non_grouped).')';
            $sql .= ' ORDER BY '.addslashes($orderby);
            $result = $db->query($sql);
            while ($myrow = $db->fetchArray($result)) {
                $block =& $this->create(false);
                $block->assignVars($myrow);
                $ret[$myrow['bid']] =& $block;
                unset($block);
            }
        }
        return $ret;
    }
 
    public function countSimilarBlocks($moduleId, $funcNum, $showFunc = null)
    {
        $funcNum = (int)$funcNum;
        $moduleId = (int)$moduleId;
        if ($funcNum < 1 || $moduleId < 1) {
            // invalid query
            return 0;
        }
        $db = $this->db;
        if (isset($showFunc)) {
            // showFunc is set for more strict comparison
            $sql = sprintf('SELECT COUNT(*) FROM %s WHERE mid = %d AND func_num = %d AND show_func = %s', $db->prefix('newblocks'), $moduleId, $funcNum, $db->quoteString(trim($showFunc)));
        } else {
            $sql = sprintf('SELECT COUNT(*) FROM %s WHERE mid = %d AND func_num = %d', $db->prefix('newblocks'), $moduleId, $funcNum);
        }
        if (!$result = $db->query($sql)) {
            return 0;
        }
        [$count] = $db->fetchRow($result);
        return $count;
    }

    public function syncIsActive($moduleId, $isActive, $force = false)
    {
        $db = $this->db;
        $db->prepare('UPDATE ' . $db->prefix('newblocks') . ' SET isactive=? WHERE mid=?');
        $db->bind_param('ii', $isActive, $moduleId);
 
        if ($force) {
            $db->executeF();
        } else {
            $db->execute();
        }
    }
}