0 ) {
$row = db_fetch_array( $result );
$query = "UPDATE $t_filters_table
SET is_public='$c_is_public',
filter_string='$c_filter_string'
WHERE id='" . $row['id'] . "'";
db_query( $query );
return $row['id'];
} else {
$query = "INSERT INTO $t_filters_table
( user_id, project_id, is_public, name, filter_string )
VALUES
( '$t_user_id', '$c_project_id', '$c_is_public', '$c_name', '$c_filter_string' )";
db_query( $query );
# Recall the query, we want the filter ID
$query = "SELECT id
FROM $t_filters_table
WHERE user_id='$t_user_id'
AND project_id='$c_project_id'
AND name='$c_name'";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
$row = db_fetch_array( $result );
return $row['id'];
}
return -1;
}
}
# We cache filter requests to reduce the number of SQL queries
$g_cache_filter_db_filters = array();
# This function will return the filter string that is
# tied to the unique id parameter. If the user doesn't
# have permission to see this filter, the function will
# return null
function filter_db_get_filter( $p_filter_id, $p_user_id = null ) {
global $g_cache_filter_db_filters;
$t_filters_table = config_get( 'mantis_filters_table' );
$c_filter_id = db_prepare_int( $p_filter_id );
if ( isset( $g_cache_filter_db_filters[$p_filter_id] ) ) {
return $g_cache_filter_db_filters[$p_filter_id];
}
if ( null === $p_user_id ) {
$t_user_id = auth_get_current_user_id();
} else {
$t_user_id = $p_user_id;
}
$query = "SELECT *
FROM $t_filters_table
WHERE id='$c_filter_id'";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
$row = db_fetch_array( $result );
if ( $row['user_id'] != $t_user_id ) {
if ( $row['is_public'] != true ) {
return null;
}
}
# check that the user has access to non current filters
if ( ( ALL_PROJECTS <= $row['project_id'] ) && ( !is_blank( $row['name'] ) ) && ( !access_has_project_level( config_get( 'stored_query_use_threshold', $row['project_id'], $t_user_id ) ) ) ) {
return null;
}
$g_cache_filter_db_filters[$p_filter_id] = $row['filter_string'];
return $row['filter_string'];
}
return null;
}
function filter_db_get_project_current( $p_project_id, $p_user_id = null ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$c_project_id = db_prepare_int( $p_project_id );
$c_project_id = $c_project_id * -1;
if ( null === $p_user_id ) {
$c_user_id = auth_get_current_user_id();
} else {
$c_user_id = db_prepare_int( $p_user_id );
}
# we store current filters for each project with a special project index
$query = "SELECT *
FROM $t_filters_table
WHERE user_id='$c_user_id'
AND project_id='$c_project_id'
AND name=''";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
$row = db_fetch_array( $result );
return $row['id'];
}
return null;
}
function filter_db_get_name( $p_filter_id ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$c_filter_id = db_prepare_int( $p_filter_id );
$query = "SELECT *
FROM $t_filters_table
WHERE id='$c_filter_id'";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
$row = db_fetch_array( $result );
if ( $row['user_id'] != auth_get_current_user_id() ) {
if ( $row['is_public'] != true ) {
return null;
}
}
return $row['name'];
}
return null;
}
# Will return true if the user can delete this query
function filter_db_can_delete_filter( $p_filter_id ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$c_filter_id = db_prepare_int( $p_filter_id );
$t_user_id = auth_get_current_user_id();
# Administrators can delete any filter
if ( access_has_global_level( ADMINISTRATOR ) ) {
return true;
}
$query = "SELECT id
FROM $t_filters_table
WHERE id='$c_filter_id'
AND user_id='$t_user_id'
AND project_id!='-1'";
$result = db_query( $query );
if ( db_num_rows( $result ) > 0 ) {
return true;
}
return false;
}
function filter_db_delete_filter( $p_filter_id ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$c_filter_id = db_prepare_int( $p_filter_id );
$t_user_id = auth_get_current_user_id();
if ( !filter_db_can_delete_filter( $c_filter_id ) ) {
return false;
}
$query = "DELETE FROM $t_filters_table
WHERE id='$c_filter_id'";
$result = db_query( $query );
if ( db_affected_rows( $result ) > 0 ) {
return true;
}
return false;
}
function filter_db_delete_current_filters( ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$t_all_id = ALL_PROJECTS;
$query = "DELETE FROM $t_filters_table
WHERE project_id<='$t_all_id'
AND name=''";
$result = db_query( $query );
}
function filter_db_get_available_queries( $p_project_id = null, $p_user_id = null ) {
$t_filters_table = config_get( 'mantis_filters_table' );
$t_overall_query_arr = array();
if ( null === $p_project_id ) {
$t_project_id = helper_get_current_project();
} else {
$t_project_id = db_prepare_int( $p_project_id );
}
if ( null === $p_user_id ) {
$t_user_id = auth_get_current_user_id();
} else {
$t_user_id = db_prepare_int( $p_user_id );
}
# If the user doesn't have access rights to stored queries, just return
if ( !access_has_project_level( config_get( 'stored_query_use_threshold' ) ) ) {
return $t_overall_query_arr;
}
# Get the list of available queries. By sorting such that public queries are
# first, we can override any query that has the same name as a private query
# with that private one
$query = "SELECT * FROM $t_filters_table
WHERE (project_id='$t_project_id'
OR project_id='0')
AND name!=''
ORDER BY is_public DESC, name ASC";
$result = db_query( $query );
$query_count = db_num_rows( $result );
for ( $i = 0; $i < $query_count; $i++ ) {
$row = db_fetch_array( $result );
if ( ( $row['user_id'] == $t_user_id ) || db_prepare_bool( $row['is_public'] ) ) {
$t_overall_query_arr[$row['id']] = $row['name'];
}
}
$t_overall_query_arr = array_unique( $t_overall_query_arr );
asort( $t_overall_query_arr );
return $t_overall_query_arr;
}
# Make sure that our filters are entirely correct and complete (it is possible that they are not).
# We need to do this to cover cases where we don't have complete control over the filters given.
function filter_ensure_valid_filter( $p_filter_arr ) {
# extend current filter to add information passed via POST
if ( !isset( $p_filter_arr['_version'] ) ) {
$p_filter_arr['_version'] = config_get( 'cookie_version' );
}
$t_cookie_vers = (int) substr( $p_filter_arr['_version'], 1 );
if ( substr( config_get( 'cookie_version' ), 1 ) > $t_cookie_vers ) { # if the version is old, update it
$p_filter_arr['_version'] = config_get( 'cookie_version' );
}
if ( !isset( $p_filter_arr['_view_type'] ) ) {
$p_filter_arr['_view_type'] = gpc_get_string( 'view_type', 'simple' );
}
if ( !isset( $p_filter_arr['per_page'] ) ) {
$p_filter_arr['per_page'] = gpc_get_int( 'per_page', config_get( 'default_limit_view' ) );
}
if ( !isset( $p_filter_arr['highlight_changed'] ) ) {
$p_filter_arr['highlight_changed'] = config_get( 'default_show_changed' );
}
if ( !isset( $p_filter_arr['sticky_issues'] ) ) {
$p_filter_arr['sticky_issues'] = config_get( 'show_sticky_issues' );
}
if ( !isset( $p_filter_arr['sort'] ) ) {
$p_filter_arr['sort'] = "last_updated";
}
if ( !isset( $p_filter_arr['dir'] ) ) {
$p_filter_arr['dir'] = "DESC";
}
if ( !isset( $p_filter_arr['start_month'] ) ) {
$p_filter_arr['start_month'] = gpc_get_string( 'start_month', date( 'm' ) );
}
if ( !isset( $p_filter_arr['start_day'] ) ) {
$p_filter_arr['start_day'] = gpc_get_string( 'start_day', 1 );
}
if ( !isset( $p_filter_arr['start_year'] ) ) {
$p_filter_arr['start_year'] = gpc_get_string( 'start_year', date( 'Y' ) );
}
if ( !isset( $p_filter_arr['end_month'] ) ) {
$p_filter_arr['end_month'] = gpc_get_string( 'end_month', date( 'm' ) );
}
if ( !isset( $p_filter_arr['end_day'] ) ) {
$p_filter_arr['end_day'] = gpc_get_string( 'end_day', date( 'd' ) );
}
if ( !isset( $p_filter_arr['end_year'] ) ) {
$p_filter_arr['end_year'] = gpc_get_string( 'end_year', date( 'Y' ) );
}
if ( !isset( $p_filter_arr['search'] ) ) {
$p_filter_arr['search'] = '';
}
if ( !isset( $p_filter_arr['and_not_assigned'] ) ) {
$p_filter_arr['and_not_assigned'] = gpc_get_bool( 'and_not_assigned', false );
}
if ( !isset( $p_filter_arr['do_filter_by_date'] ) ) {
$p_filter_arr['do_filter_by_date'] = gpc_get_bool( 'do_filter_by_date', false );
}
if ( !isset( $p_filter_arr['view_state'] ) ) {
$p_filter_arr['view_state'] = gpc_get( 'view_state', '' );
} else if ( ( $p_filter_arr['view_state'] == 'any' ) || ( $p_filter_arr['view_state'] == 0 ) ) {
$p_filter_arr['view_state'] = META_FILTER_ANY;
}
if ( !isset( $p_filter_arr['relationship_type'] ) ) {
$p_filter_arr['relationship_type'] = gpc_get_int( 'relationship_type', -1 );
}
if ( !isset( $p_filter_arr['relationship_bug'] ) ) {
$p_filter_arr['relationship_bug'] = gpc_get_int( 'relationship_bug', 0 );
}
$t_custom_fields = custom_field_get_ids(); # @@@ (thraxisp) This should really be the linked ids, but we don't know the project
$f_custom_fields_data = array();
if ( is_array( $t_custom_fields ) && ( sizeof( $t_custom_fields ) > 0 ) ) {
foreach( $t_custom_fields as $t_cfid ) {
if ( is_array( gpc_get( 'custom_field_' . $t_cfid, null ) ) ) {
$f_custom_fields_data[$t_cfid] = gpc_get_string_array( 'custom_field_' . $t_cfid, META_FILTER_ANY );
} else {
$f_custom_fields_data[$t_cfid] = gpc_get_string( 'custom_field_' . $t_cfid, META_FILTER_ANY );
$f_custom_fields_data[$t_cfid] = array( $f_custom_fields_data[$t_cfid] );
}
}
}
#validate sorting
$t_fields = helper_call_custom_function( 'get_columns_to_view', array() );
$t_n_fields = count( $t_fields );
for ( $i=0; $i < $t_n_fields; $i++ ) {
if ( in_array( $t_fields[$i], array( 'selection', 'edit', 'bugnotes_count', 'attachment' ) ) ) {
unset( $t_fields[$i] );
}
}
$t_sort_fields = split( ',', $p_filter_arr['sort'] );
$t_dir_fields = split( ',', $p_filter_arr['dir'] );
for ( $i=0; $i<2; $i++ ) {
if ( isset( $t_sort_fields[$i] ) ) {
$t_drop = false;
$t_sort = $t_sort_fields[$i];
if ( strpos( $t_sort, 'custom_' ) === 0 ) {
if ( false === custom_field_get_id_from_name( substr( $t_sort, strlen( 'custom_' ) ) ) ) {
$t_drop = true;
}
} else {
if ( ! in_array( $t_sort, $t_fields ) ) {
$t_drop = true;
}
}
if ( ! in_array( $t_dir_fields[$i], array( "ASC", "DESC" ) ) ) {
$t_drop = true;
}
if ( $t_drop ) {
unset( $t_sort_fields[$i] );
unset( $t_dir_fields[$i] );
}
}
}
if ( count( $t_sort_fields ) > 0 ) {
$p_filter_arr['sort'] = implode( ',', $t_sort_fields );
$p_filter_arr['dir'] = implode( ',', $t_dir_fields );
} else {
$p_filter_arr['sort'] = "last_updated";
$p_filter_arr['dir'] = "DESC";
}
# validate or filter junk from other fields
$t_multi_select_list = array( 'show_category' => 'string',
'show_severity' => 'int',
'show_status' => 'int',
'reporter_id' => 'int',
'handler_id' => 'int',
'show_resolution' => 'int',
'show_priority' => 'int',
'show_build' => 'string',
'show_version' => 'string',
'hide_status' => 'int',
'fixed_in_version' => 'string',
'user_monitor' => 'int',
'show_profile' => 'int'
);
foreach( $t_multi_select_list as $t_multi_field_name => $t_multi_field_type ) {
if ( !isset( $p_filter_arr[$t_multi_field_name] ) ) {
if ( 'hide_status' == $t_multi_field_name ) {
$p_filter_arr[$t_multi_field_name] = array( config_get( 'hide_status_default' ) );
} else if ( 'custom_fields' == $t_multi_field_name ) {
$p_filter_arr[$t_multi_field_name] = array( $f_custom_fields_data );
} else {
$p_filter_arr[$t_multi_field_name] = array( META_FILTER_ANY );
}
} else {
if ( !is_array( $p_filter_arr[$t_multi_field_name] ) ) {
$p_filter_arr[$t_multi_field_name] = array( $p_filter_arr[$t_multi_field_name] );
}
$t_checked_array = array();
foreach ( $p_filter_arr[$t_multi_field_name] as $t_filter_value ) {
$t_filter_value = stripslashes( $t_filter_value );
if ( ( $t_filter_value === 'any' ) || ( $t_filter_value === '[any]' ) ) {
$t_filter_value = META_FILTER_ANY;
}
if ( ( $t_filter_value === 'none' ) || ( $t_filter_value === '[none]' ) ) {
$t_filter_value = META_FILTER_NONE;
}
if ( 'string' == $t_multi_field_type ) {
$t_checked_array[] = db_prepare_string( $t_filter_value );
} else if ( 'int' == $t_multi_field_type ) {
$t_checked_array[] = db_prepare_int( $t_filter_value );
} else if ( 'array' == $t_multi_field_type ) {
$t_checked_array[] = $t_filter_value;
}
}
$p_filter_arr[$t_multi_field_name] = $t_checked_array;
}
}
if ( is_array( $t_custom_fields ) && ( sizeof( $t_custom_fields ) > 0 ) ) {
foreach( $t_custom_fields as $t_cfid ) {
if ( !isset( $p_filter_arr['custom_fields'][$t_cfid] ) ) {
$p_filter_arr['custom_fields'][$t_cfid] = array( META_FILTER_ANY );
} else {
if ( !is_array( $p_filter_arr['custom_fields'][$t_cfid] ) ) {
$p_filter_arr['custom_fields'][$t_cfid] = array( $p_filter_arr['custom_fields'][$t_cfid] );
}
$t_checked_array = array();
foreach ( $p_filter_arr['custom_fields'][$t_cfid] as $t_filter_value ) {
$t_filter_value = stripslashes( $t_filter_value );
if ( ( $t_filter_value === 'any' ) || ( $t_filter_value === '[any]' ) ) {
$t_filter_value = META_FILTER_ANY;
}
$t_checked_array[] = db_prepare_string( $t_filter_value );
}
$p_filter_arr['custom_fields'][$t_cfid] = $t_checked_array;
}
}
}
# all of our filter values are now guaranteed to be there, and correct.
return $p_filter_arr;
}
/**
* The following functions each print out an individual filter field.
* They are derived from view_filters_page.php
*
* The functions follow a strict naming convention:
*
* print_filter_[filter_name]
*
* Where [filter_name] is the same as the "name" of the form element for
* that filter. This naming convention is depended upon by the controller
* at the end of the script.
*/
/**
* I expect that this code could be made simpler by refactoring into a
* class so as to avoid all those calls to global(which are pretty ugly)
*
* These functions could also be shared by view_filters_page.php
*
*/
function print_filter_reporter_id(){
global $t_select_modifier, $t_filter;
?>
| \n" ;
echo "' . "\n";
echo " |
\n| ";
print_date_selection_set("custom_field_" . $p_field_id . "_start" , config_get( 'short_date_format'), $t_start, $t_start_disable, false, $t_sel_start_year, $t_sel_end_year);
print " |
\n| ";
print_date_selection_set("custom_field_" . $p_field_id . "_end" , config_get( 'short_date_format'), $t_end, $t_end_disable, false, $t_sel_start_year, $t_sel_end_year);
print " |
\n
";
}
#===================================
# Caching
#===================================
#########################################
# SECURITY NOTE: cache globals are initialized here to prevent them
# being spoofed if register_globals is turned on
$g_cache_filter = array();
# --------------------
# Cache a filter row if necessary and return the cached copy
# If the second parameter is true (default), trigger an error
# if the filter can't be found. If the second parameter is
# false, return false if the filter can't be found.
function filter_cache_row( $p_filter_id, $p_trigger_errors=true) {
global $g_cache_filter;
$c_filter_id = db_prepare_int( $p_filter_id );
$t_filters_table = config_get( 'mantis_filters_table' );
if ( isset ( $g_cache_filter[$c_filter_id] ) ) {
return $g_cache_filter[$c_filter_id];
}
$query = "SELECT *
FROM $t_filters_table
WHERE id='$c_filter_id'";
$result = db_query( $query );
if ( 0 == db_num_rows( $result ) ) {
if ( $p_trigger_errors ) {
error_parameters( $p_filter_id );
trigger_error( ERROR_FILTER_NOT_FOUND, ERROR );
} else {
return false;
}
}
$row = db_fetch_array( $result );
$g_cache_filter[$c_filter_id] = $row;
return $row;
}
# --------------------
# Clear the filter cache (or just the given id if specified)
function filter_clear_cache( $p_filter_id = null ) {
global $g_cache_filter;
if ( null === $p_filter_id ) {
$g_cache_filter = array();
} else {
$c_filter_id = db_prepare_int( $p_filter_id );
unset( $g_cache_filter[$c_filter_id] );
}
return true;
}
# --------------------
# return a filter row
function filter_get_row( $p_filter_id ) {
return filter_cache_row( $p_filter_id );
}
# --------------------
function filter_get_field( $p_filter_id, $p_field_name ) {
$row = filter_get_row( $p_filter_id );
if ( isset( $row[$p_field_name] ) ) {
return $row[$p_field_name];
} else {
error_parameters( $p_field_name );
trigger_error( ERROR_DB_FIELD_NOT_FOUND, WARNING );
return '';
}
}
?>