076server/app/Http/Controllers/UserController.php

<?php

namespace App\Http\Controllers;

use App\Models\ForUser;

use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\File;
use Illuminate\Support\Facades\Storage;
use Illuminate\Http\Request;
use Illuminate\Contracts\Routing\ResponseFactory;
use Illuminate\Support\Facades\Log;
use Tymon\JWTAuth\Facades\JWTAuth;
use Tymon\JWTAuth\Exceptions\JWTException;

use App\Http\Controllers\AuthController;

class UserController extends Controller {
    private $objAuth;

    public function __construct() {
        $this->objAuth = new AuthController();
    }

    // User
    public function getUsersOnline() { // /api/rpc/user/user/getusersonline
        $cols = $this->getGroupColours()->toArray();

        $get = DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->orderBy('display_name', 'asc')
            ->orderBy('username', 'asc')
            ->get(array(
                'id',
                'username',
                'gender',
                'perm_id',
                'avatar',
                'name_style',
                'display_name',
                'ostatus',
                'ontime'
            ));

        $res = array();

        foreach ($get as $i) {
            $showName = "";
            $showCol = "";
            $showStatus = "";
            $showAva = "";

            if ($i->display_name !== '') {
                $showName = $i->display_name;
            }
            else {
                $showName = $i->username;
            }

            if ($i->name_style !== '') {
                $showCol = $i->name_style;
            }
            else {
                foreach($cols as $cl) {
                    if ($cl->id === $i->perm_id) {
                        if ($i->gender === 1) $showCol = $cl->colour_m;
                        else if ($i->gender === 2) $showCol = $cl->colour_f;
                        else $showCol = $cl->colour_u;
                    }
                }
            }

            if ($i->ostatus == 1) {
                $showStatus = "green";
            }
            else if ($i->ostatus == 2) {
                $showStatus = "red";
            }
            else if ($i->ostatus == 3) {
                $showStatus = "yellow";
            }
            else {
                $showStatus = "dark";
            }

            if (empty($i->avatar)) {
                $showAva = "assets/avatars/haznoavaz.png";
            }
            else {
                $showAva = $i->avatar;
            }

            $res[] = array(
                'id' => $i->id,
                'display_name' => $showName,
                'name_style' => $showCol,
                'avatar' => $showAva,
                'status' => $showStatus,
                'ontime' => $i->ontime
            );
        }

        return $res;
    }

    public function updateUserStatus(Request $request) { // /api/rpc/user/user/updateuserstatus
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check != 0) {
            return DB::table('usr_profile')
                ->where('user_id', $check)
                ->update([
                    'ostatus' => $request->ostatus
                ]);
        }
    }

    public function updateUserOnline(Request $request) { // /api/rpc/user/user/updateuseronline
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check != 0) {
            return DB::table('usr_details')
                ->where('user_id', $check)
                ->update([
                    'ontime' => time()
                ]);
        }
    }

    public function getUsers(Request $request) { // /api/rpc/user/user/getusers
        $getting = array(
            'users.id',
            'usr_perm_module.name as group_name',
            'users.username',
            'usr_perm_id.perm_id',
            'usr_details.reg_date',
            'usr_profile.gender',
            'usr_profile.avatar',
            'usr_profile.name_style',
            'usr_profile.display_name',
            'usr_profile.country'
        );

        $valid = $this->objAuth->getPermissions($request->username, $request->password);

        if ($valid['usr_emailshow'] == 1) {
            array_push($getting, 'users.email');
        }

        if ($valid['usr_ipshow'] == 1) {
            array_push($getting, 'usr_profile.ip_address');
        }

        return DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->join('usr_perm_module', 'usr_perm_module.id', 'usr_perm_id.perm_id')
            ->get($getting);
    }

    public function getUser($id, Request $request) { // /api/rpc/user/user/getuser/id/uid
        $getting = array(
            'users.id',
            'users.username',
            'usr_perm_module.name as group_name',
            'usr_profile.display_name',
            'usr_profile.name_style',
            'usr_perm_id.perm_id',
            'usr_profile.member_title',
            'usr_details.total_posts',
            'usr_details.total_threads',
            'usr_details.reg_date',
            'usr_contacts.website_link',
            'usr_contacts.website_name',
            'usr_profile.gender',
            'usr_profile.location',
            'usr_profile.birthday',
            'usr_profile.bio',
            'usr_profile.avatar',
            'usr_profile.country',
            'usr_contacts.website_link',
            'usr_contacts.website_name',
            'usr_contacts.youtube_link',
            'usr_contacts.youtube_name',
            'usr_contacts.niconico',
            'usr_contacts.pixiv',
            'usr_contacts.discord',
            'usr_contacts.mastodon',
            'usr_contacts.twitter'
        );

        $check = $this->objAuth->checkLegit($request->username, $request->password);
        $valid = $this->objAuth->getPermissions($request->username, $request->password);
        $cols = $this->getGroupColours()->toArray();

        if ($valid['usr_editother'] == 1) {
            array_push($getting, 'users.password');
        }

        if ($valid['usr_emailshow'] == 1) {
            array_push($getting, 'users.email');
        }

        if ($valid['usr_ipshow'] == 1) {
            array_push($getting, 'usr_profile.ip_address');
        }

        if ($valid['usr_canwarn'] == 1) {
            array_push($getting, 'usr_details.strikes');
        }

        return DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_contacts', 'usr_contacts.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->join('usr_perm_module', 'usr_perm_module.id', 'usr_perm_id.perm_id')
            ->where('users.id', $id)
            ->get($getting);
    }

    public function getExist($username, $email) { // /api/rpc/user/user/getexist/username/email
        $isExist = DB::table('users')
            ->select('username', 'email')
            ->where('username', mb_strtolower($username))
            ->orWhere('email', mb_strtolower($email))
            ->get();

        return $isExist->count();
    }

    public function getPostStyle($id) { // /api/rpc/user/user/getpoststyle/id
        return DB::table('users')
            ->select('header', 'footer')
            ->where('id', $id)
            ->get();
    }

    public function getGroups() { // /api/rpc/user/user/getgroups
        return DB::table('usr_perm_module')
            ->select('id', 'name', 'colour_m', 'colour_f', 'colour_u')
            ->get();
    }

    public function getGroupName($id) { // /api/rpc/user/user/getgroupname/id
        return DB::table('usr_perm_module')
            ->join('usr_perm_id', 'usr_perm_id.perm_id', '=', 'usr_perm_module.id')
            ->where('user_id', $id)
            ->get(array(
                'name',
                // 'badge' (this is a pipeline feature, please don't uncomment for now!)
            ));
    }

    public function getGroupColours() { // /api/rpc/user/user/getgroupcolours
        return DB::table('usr_perm_module')
            ->select(
                     'id',
                     'colour_m',
                     'colour_f',
                     'colour_u'
                    )
            ->get();
    }

    // Owner
    public function getOwnerList() { // /api/rpc/user/owner/getownerlist
        $user_data = DB::table('users')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->orderBy('id', 'asc')
            ->get(array('id', 'username', 'display_name'));

        $result = array();

        foreach ($user_data as $u) {
            $name = '';

            if (!empty($u->display_name)) {
                $name = $u->display_name;
            }
            else {
                $name = $u->username;
            }

            array_push($result, [
                'value' => $u->id,
                'label' => $name,
            ]);
        }

        return $result;
    }

    public function countOwnersOfEntry($file_id) { // /api/rpc/user/owner/countownersofentry/id
        return DB::table('str_owners')
            ->where('file_id', $file_id)
            ->count();
    }

    public function getOwnersOfEntry($file_id) { // /api/rpc/user/owner/getownersofentry/id
        return DB::table('str_owners')
            ->join('str_file', 'str_owners.file_id', '=', 'str_file.id')
            ->join('users', 'str_owners.user_id', '=', 'users.id')
            ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id')
            ->where('file_id', $file_id)
            ->get(array(
                'users.id',
                'title',
                'version',
                'views',
                'downloads',
                'submit_date',
                'last_date',
                'username',
                'avatar',
                'perm_id',
                'gender',
                'display_name',
                'name_style',
            ));
    }

    public function countEntriesOfOwner($user_id) { // /api/rpc/user/owner/countentriesofowner/id
        return DB::table('str_owners')
            ->where('user_id', $user_id)
            ->count();
    }


    public function getEntriesOfOwner($user_id) { // /api/rpc/user/owner/getentriesofowner/id
        return DB::table('str_owners')
            ->join('str_file', 'str_owners.file_id', '=', 'str_file.id')
            ->join('users', 'str_owners.user_id', '=', 'users.id')
            ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id')
            ->where('user_id', $user_id)
            ->get(array(
                'users.id',
                'title',
                'version',
                'views',
                'downloads',
                'submit_date',
                'last_date',
                'username',
                'avatar',
                'perm_id',
                'gender',
                'display_name',
                'name_style',
            ));
    }

    public function getTotalPostCount($id) { // /api/rpc/user/user/gettotalpostcount/id
        return DB::table('usr_details')
            ->select('total_posts')
            ->where('user_id', $id)
            ->first()->total_posts;
    }

    public function getTotalTopicCount($id) { // /api/rpc/user/user/gettotaltopiccount/id
        return DB::table('usr_details')
            ->select('total_threads')
            ->where('user_id', $id)
            ->first()->total_threads;
    }

    public function addOwner(Request $request) { // /api/rpc/user/owner/addowner
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $add = DB::table('str_owners')
                ->insert([
                    'user_id' => $request->user_id,
                    'file_id' => $request->file_id
                ]);

            return \Response::json($add);
        }
    }

    public function updateTotalPostCount(Request $request) { // /api/rpc/user/user/updatetotalpostcount
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $getPC = $this->getTotalPostCount($check);
            $getPC++;

            return DB::table('usr_details')
                ->where('user_id', $check)
                ->update([
                    'total_posts' => $getPC
               ]);
        }
    }

    public function updateTotalTopicCount(Request $request) { // /api/rpc/user/user/updatetotaltopiccount
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $getPC = $this->getTotalPostCount($request->user_id);
            $getTC = $this->getTotalTopicCount($request->user_id);
            $getPC++;
            $getTC++;

            return DB::table('usr_details')
                ->where('user_id', $request->user_id)
                ->update([
                    'total_posts' => $getPC,
                    'total_threads' => $getTC
               ]);
        }
    }

    public function getCountries() { // /api/rpc/user/user/getcountries
        $flags = File::files('assets/flags');

        $res = array();

        foreach ($flags as $flag) {
            $protocol = isset($_SERVER["HTTPS"]) ? 'https' : 'http';

            $res[] = array(
                'value' => $flag->getBasename('.png'),
                'label' => '<img src="'.$protocol.'://'.$_SERVER['SERVER_NAME'].'/'.$flag->getPathname().'" /> '.$flag->getBasename('.png')
            );
        }

        return $res;
    }

    public function avatarUpload(Request $request) { // /api/rpc/user/user/avatarupload
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $valid = $this->objAuth->getPermissions($request->username, $request->password);

            if ($valid['usr_editprofile'] == 1) {
                if (isset($request->filename)) {
                    if (!is_dir("assets/avatars/".$check)) {
                        if (!mkdir("assets/avatars/".$check, 0755, true)) {
                            return "Could not make folder ".$check."<br />";
                        }
                    }

                    $img_dir = "assets/avatars/".$check."/";
                    $image = $img_dir . $request->filename;
                    $imageFileType = array(
                        'image/png',
                        'image/jpeg',
                        'image/gif'
                    );

                    if (!in_array($request->filetype, $imageFileType)) {
                       return "Only JPG, PNG, JPEG, and GIF are allowed.";
                    }

                    $fname = 'assets/avatars/'.$check.'/'.$request->filename;
                    $data = base64_decode(preg_replace('#^data:image/\w+;base64,#i', '', $request->thefile));
                    Storage::disk('public')->put($fname, $data);

                    return $request->filename;
                }
            }
            else {
                return 'Permission denied.';
            }
        }
    }

    public function editUser(Request $request) { // /api/rpc/user/user/edit
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $valid = $this->objAuth->getPermissions($request->username, $request->password);

            if ($valid['usr_editprofile'] == 1) {
                if (isset($request->newPassword)) {
                    DB::table('users')
                        ->where('id', $request->id)
                        ->update([
                            'password' => $request->newPassword
                       ]);
                }
                if (isset($request->email)) {
                    DB::table('users')
                        ->where('id', $request->id)
                        ->update([
                            'email' => $request->email
                        ]);
                }

                DB::table('usr_contacts')
                    ->where('user_id', $request->id)
                    ->update([
                        'website_link' => ($request->website_link != '' ? $request->website_link : ''),
                        'website_name' => ($request->website_name != '' ? $request->website_name : ''),
                        'youtube_link' => ($request->youtube_link != '' ? $request->youtube_link : ''),
                        'youtube_name' => ($request->youtube_name != '' ? $request->youtube_name : ''),
                        'niconico' => ($request->niconico != '' ? $request->niconico : ''),
                        'pixiv' => ($request->pixiv != '' ? $request->pixiv : ''),
                        'discord' => ($request->discord != '' ? $request->discord : ''),
                        'mastodon' => ($request->mastodon != '' ? $request->mastodon : ''),
                        'twitter' => ($request->twitter != '' ? $request->twitter : '')
                   ]);

                DB::table('usr_perm_id')
                    ->where('user_id', $request->id)
                    ->update([
                        'perm_id' => $request->group
                   ]);

                DB::table('usr_profile')
                    ->where('user_id', $request->id)
                    ->update([
                        'gender' => $request->gender,
                        'bio' => ($request->aboutSelf != '' ? $request->aboutSelf : ''),
                        'signature' => ($request->signature != '' ? $request->signature : ''),
                        'avatar' => ($request->avatar != '' ? $request->avatar : ''),
                        'name_style' => ($request->nameStyle != '' ? $request->nameStyle : ''),
                        'display_name' => ($request->displayName != '' ? $request->displayName : ''),
                        'member_title' => ($request->memberTitle != '' ? $request->memberTitle : ''),
                        'birthday' => ($request->birthDay != 0 ? $request->birthDay : 0),
                        'country' => $request->country
                   ]);

                return 'Success!';
            }
            else {
                return 'Permission denied.';
            }
        }
    }
}