076server/app/Http/Controllers/UserController.php

<?php

namespace App\Http\Controllers;

use App\Models\ForUser;

use Illuminate\Support\Facades\DB;
use Illuminate\Http\Request;
use Illuminate\Contracts\Routing\ResponseFactory;
use Illuminate\Support\Facades\Log;
use Tymon\JWTAuth\Facades\JWTAuth;
use Tymon\JWTAuth\Exceptions\JWTException;

use App\Http\Controllers\AuthController;

class UserController extends Controller {
    private $objAuth;

    public function __construct() {
        $this->objAuth = new AuthController();
    }

    // User
    public function getUsersOnline() { // /api/rpc/user/user/getusersonline
        return DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->orderBy('display_name', 'asc')
            ->orderBy('username', 'asc')
            ->get(array(
                'id',
                'username',
                'perm_id',
                'email',
                'reg_date',
                'gender',
                'ip_address',
                'avatar',
                'name_style',
                'display_name',
                'country',
                'ostatus',
                'ontime'
            ));
    }

    public function updateUserStatus(Request $request) { // /api/rpc/user/user/updateuserstatus
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check != 0) {
            return DB::table('usr_profile')
                ->where('user_id', $check)
                ->update([
                    'ostatus' => $request->ostatus
                ]);
        }
    }

    public function updateUserOnline(Request $request) { // /api/rpc/user/user/updateuseronline
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check != 0) {
            return DB::table('usr_details')
                ->where('user_id', $check)
                ->update([
                    'ontime' => time()
                ]);
        }
    }

    public function getUsers(Request $request) { // /api/rpc/user/user/getusers
        $getting = array(
            'users.id',
            'username',
            'perm_id',
            'reg_date',
            'gender',
            'avatar',
            'name_style',
            'display_name',
            'country'
        );

        $valid = $this->objAuth->getPermissions($request->username, $request->password);

        if ($valid['usr_emailshow'] == 1) {
            array_push($getting, 'email');
        }

        if ($valid['usr_ipshow'] == 1) {
            array_push($getting, 'ip_address');
        }

        return DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->get($getting);
    }

    public function getUser($id, Request $request) { // /api/rpc/user/user/getuser/id/uid
        $getting = array(
            'users.id',
            'users.username',
            'usr_perm_id.perm_id',
            'usr_profile.member_title',
            'usr_details.reg_date',
            'usr_contacts.website_link',
            'usr_contacts.website_name',
            'usr_profile.gender',
            'usr_profile.location',
            'usr_profile.birthday',
            'usr_profile.bio',
            'usr_profile.avatar',
            'usr_profile.name_style',
            'usr_profile.display_name',
            'usr_profile.country',
            'usr_contacts.website_link',
            'usr_contacts.website_name',
            'usr_contacts.youtube_link',
            'usr_contacts.youtube_name',
            'usr_contacts.niconico',
            'usr_contacts.pixiv',
            'usr_contacts.discord',
            'usr_contacts.mastodon',
            'usr_contacts.twitter'
        );

        $valid = $this->objAuth->getPermissions($request->username, $request->password);

        if ($valid['usr_emailshow'] == 1) {
            array_push($getting, 'users.email');
        }

        if ($valid['usr_ipshow'] == 1) {
            array_push($getting, 'usr_profile.ip_address');
        }

        if ($valid['usr_canwarn'] == 1) {
            array_push($getting, 'usr_details.strikes');
        }

        return DB::table('users')
            ->join('usr_details', 'usr_details.user_id', '=', 'users.id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->join('usr_contacts', 'usr_contacts.user_id', '=', 'users.id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id')
            ->where('id', $id)
            ->get($getting);
    }

    public function getExist($username, $email) { // /api/rpc/user/user/getexist/username/email
        $isExist = DB::table('users')
            ->select('username', 'email')
            ->where('username', mb_strtolower($username))
            ->orWhere('email', mb_strtolower($email))
            ->get();

        return $isExist->count();
    }

    public function getPostStyle($id) { // /api/rpc/user/user/getpoststyle/id
        return DB::table('users')
            ->select('header', 'footer')
            ->where('id', $id)
            ->get();
    }

    public function getGroups() { // /api/rpc/user/user/getgroups
        return DB::table('usr_perm_module')
            ->select('id', 'name', 'colour_m', 'colour_f', 'colour_u')
            ->get();
    }

    public function getGroupName($id) { // /api/rpc/user/user/getgroupname/id
        return DB::table('usr_perm_module')
            ->join('usr_perm_id', 'usr_perm_id.perm_id', '=', 'usr_perm_module.id')
            ->where('user_id', $id)
            ->get(array(
                'name',
                // 'badge' (this is a pipeline feature, please don't uncomment for now!)
            ));
    }

    public function getGroupColours() { // /api/rpc/user/user/getgroupcolours
        return DB::table('usr_perm_module')
            ->select(
                     'id',
                     'colour_m',
                     'colour_f',
                     'colour_u'
                    )
            ->get();
    }

    // Owner
    public function getOwnerList() { // /api/rpc/user/owner/getownerlist
        $user_data = DB::table('users')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id')
            ->orderBy('id', 'asc')
            ->get(array('id', 'username', 'display_name'));

        $result = array();

        foreach ($user_data as $u) {
            $name = '';

            if (!empty($u->display_name)) {
                $name = $u->display_name;
            }
            else {
                $name = $u->username;
            }

            array_push($result, [
                'value' => $u->id,
                'label' => $name,
            ]);
        }

        return $result;
    }

    public function countOwnersOfEntry($file_id) { // /api/rpc/user/owner/countownersofentry/id
        return DB::table('str_owners')
            ->where('file_id', $file_id)
            ->count();
    }

    public function getOwnersOfEntry($file_id) { // /api/rpc/user/owner/getownersofentry/id
        return DB::table('str_owners')
            ->join('str_file', 'str_owners.file_id', '=', 'str_file.id')
            ->join('users', 'str_owners.user_id', '=', 'users.id')
            ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id')
            ->where('file_id', $file_id)
            ->get(array(
                'users.id',
                'title',
                'version',
                'views',
                'downloads',
                'submit_date',
                'last_date',
                'username',
                'avatar',
                'perm_id',
                'gender',
                'display_name',
                'name_style',
            ));
    }

    public function countEntriesOfOwner($user_id) { // /api/rpc/user/owner/countentriesofowner/id
        return DB::table('str_owners')
            ->where('user_id', $user_id)
            ->count();
    }


    public function getEntriesOfOwner($user_id) { // /api/rpc/user/owner/getentriesofowner/id
        return DB::table('str_owners')
            ->join('str_file', 'str_owners.file_id', '=', 'str_file.id')
            ->join('users', 'str_owners.user_id', '=', 'users.id')
            ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id')
            ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id')
            ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id')
            ->where('user_id', $user_id)
            ->get(array(
                'users.id',
                'title',
                'version',
                'views',
                'downloads',
                'submit_date',
                'last_date',
                'username',
                'avatar',
                'perm_id',
                'gender',
                'display_name',
                'name_style',
            ));
    }

    public function getTotalPostCount($id) { // /api/rpc/user/user/gettotalpostcount/id
        return DB::table('usr_details')
            ->select('total_posts')
            ->where('user_id', $id)
            ->first()->total_posts;
    }

    public function getTotalTopicCount($id) { // /api/rpc/user/user/gettotaltopiccount/id
        return DB::table('usr_details')
            ->select('total_threads')
            ->where('user_id', $id)
            ->first()->total_threads;
    }

    public function addOwner(Request $request) { // /api/rpc/user/owner/addowner
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $add = DB::table('str_owners')
                ->insert([
                    'user_id' => $request->user_id,
                    'file_id' => $request->file_id
                ]);

            return \Response::json($add);
        }
    }

    public function updateTotalPostCount(Request $request) { // /api/rpc/user/user/updatetotalpostcount
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $getPC = $this->getTotalPostCount($request->user_id);
            $getPC++;

            return DB::table('usr_details')
                ->where('user_id', $request->user_id)
                ->update([
                    'total_posts' => $getPC
               ]);
        }
    }

    public function updateTotalTopicCount(Request $request) { // /api/rpc/user/user/updatetotaltopiccount
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $getPC = $this->getTotalPostCount($request->user_id);
            $getTC = $this->getTotalTopicCount($request->user_id);
            $getPC++;
            $getTC++;

            return DB::table('usr_details')
                ->where('user_id', $request->user_id)
                ->update([
                    'total_posts' => $getPC,
                    'total_threads' => $getTC
               ]);
        }
    }

    public function editUser(Request $request) { // /api/rpc/user/user/edit
        $check = $this->objAuth->checkLegit($request->username, $request->password);

        if ($check == 0) {
            return 'Err!';
        }
        else {
            $valid = $this->objAuth->getPermissions($request->username, $request->password);

            if ($valid['usr_editprofile'] == 1) {
                DB::table('users')
                    ->where('id', $request->id)
                    ->update([
                        'email' => $request->email,
                        'password' => $request->password
                   ]);

                DB::table('usr_contacts')
                    ->where('user_id', $request->id)
                    ->update([
                        'website_link' => ($request->website_link != '' ? $request->website_link : ''),
                        'website_name' => ($request->website_name != '' ? $request->website_name : ''),
                        'youtube_link' => ($request->youtube_link != '' ? $request->youtube_link : ''),
                        'youtube_name' => ($request->youtube_name != '' ? $request->youtube_name : ''),
                        'niconico' => ($request->niconico != '' ? $request->niconico : ''),
                        'pixiv' => ($request->pixiv != '' ? $request->pixiv : ''),
                        'discord' => ($request->discord != '' ? $request->discord : ''),
                        'mastodon' => ($request->mastodon != '' ? $request->mastodon : ''),
                        'twitter' => ($request->twitter != '' ? $request->twitter : '')
                   ]);

                DB::table('usr_perm_id')
                    ->where('user_id', $request->id)
                    ->update([
                        'perm_id' => $request->group
                   ]);

                DB::table('usr_profile')
                    ->where('user_id', $request->id)
                    ->update([
                        'gender' => $request->gender,
                        'bio' => ($request->aboutSelf != '' ? $request->aboutSelf : ''),
                        'signature' => ($request->signature != '' ? $request->signature : ''),
                        'avatar' => ($request->avatar != '' ? $request->avatar : ''),
                        'name_style' => ($request->nameStyle != '' ? $request->nameStyle : ''),
                        'display_name' => ($request->displayName != '' ? $request->displayName : ''),
                        'member_title' => ($request->memberTitle != '' ? $request->memberTitle : ''),
                        'birthday' => ($request->birthDay != 0 ? $request->birthDay : 0),
                        'country' => $request->country
                   ]);

                return 'Success!';
            }
            else {
                return 'Permission denied.';
            }
        }
    }
}