1 files changed, 382 insertions, 0 deletions
diff --git a/web/php/square.php b/web/php/square.php
new file mode 100644
index 0000000..fb87741
--- /dev/null
+++ b/web/php/square.php
@@ -0,0 +1,382 @@
+<?php
+//ini_set("display_errors", "On");
+
+require_once('square.inc.php');
+require_once('event.inc.php');
+
+$sqlc = db_connect();
+
+$action = $_POST['action'];
+$data = $_POST['data'];
+
+if(strlen($action)==0)
+    die('Eno_action');
+if($action == 'add_sq')
+{
+    //Add new square. level USER_LEVEL_SUPERADMIN or above required.
+    //data: sqname, publicity, [start_time, end_time], sqmodname
+
+    $sq = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+    if(!sec_check_level($sqlc, USER_LEVEL_SUPERADMIN))
+	die('Epermission_denied');
+
+    if($sq->publicity != SQUARE_PUBLIC && $sq->publicity != SQUARE_AUTH && $sq->publicity != SQUARE_PRIVATE)
+	die('Ewrong_publicity');
+
+    if(!($sq->start_time))
+	$sq->start_time = date('Y-m-d H:i:s');
+    if(!($sq->end_time))
+	$sq->start_time = null;
+    if(strlen($sq->sqname)==0)
+	die('Esqname_too_short');
+    if(strlen($sq->sqname)>SQUARE_NAME_LEN_MAX)
+	die('Esqname_too_long');
+    if(strlen($sq->sqmodname)==0)
+	die('Esqmodname_empty');
+    
+    $res = square::add($sqlc, $sq);
+    if(!$res)
+	die('Eadd_sq_failed');
+
+    $res2 = square::add_user($sqlc, $_COOKIE['uid'], $res->sqid, SQUARE_USER_ADMIN);
+    if(!$res2)
+	die('Eadd_admin_failed');
+
+    if(event::exec_func('../sqmod/'.$sq->sqmodname.'/'.$sq->sqmodname.'.inc.php','event_create',[$res->sqid]) === false)
+	die('Eevent_error');
+
+    echo('S');
+}
+if($action == 'delete_sq')
+{
+    //Delete exist square. level USER_LEVEL_SUPERADMIN or above required.
+    //data : sqid
+
+    $sq = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+    if(!sec_check_level($sqlc, USER_LEVEL_SUPERADMIN))
+	die('Epermission_denied');
+
+    $sqid = intval($sq->sqid);
+    $sq = square::get($sqlc, $sqid);
+    if(!$sq)
+	die('Ewrong_sqid');
+
+    $res = square::del($sqlc, $sqid);
+    if(!$res)
+	die('Edelete_failed');
+
+    if(event::exec_func('../sqmod/'.$sq->sqmodname.'/'.$sq->sqmodname.'.inc.php','event_destroy',[$sq->sqid]) === false)
+	die('Eevent_error');
+
+    echo('S');
+}
+if($action == 'edit_sq')
+{
+    //edit exist square. level USER_LEVEL_SUPERADMIN / SQUARE_USER_ADMIN or above required.
+    //data: sqid, sqname, publicity, [start_time, end_time], sqmodname
+
+    $sq = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $sqid = intval($sq->sqid);
+    if(!square::get($sqlc, $sqid))
+	die('Eno_such_sq');
+
+    if(!sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) && !(square::get_user_relationship($sqlc, $_COOKIE['uid'], $sqid)>=SQUARE_USER_ADMIN))
+	die('Epermission_denied');
+
+    if($sq->publicity != SQUARE_PUBLIC && $sq->publicity != SQUARE_AUTH && $sq->publicity != SQUARE_PRIVATE)
+	die('Ewrong_publicity');
+
+    if(!($sq->start_time) && $sq->end_time)
+	$sq->start_time = date('Y-m-d H:i:s');
+    if(strlen($sq->sqname)==0)
+	die('Esqname_too_short');
+    if(strlen($sq->sqname)>SQUARE_NAME_LEN_MAX)
+	die('Esqname_too_long');
+    if(strlen($sq->sqmodname)==0)
+	die('Esqmodname_empty');
+
+    $res = square::edit($sqlc, $sqid, $sq);
+    if(!$res)
+	die('Eedit_failed');
+
+    echo('S');
+}
+if($action == 'get_sq')
+{   
+    //get exist square data
+    //data: sqid
+    $sq = json_decode($data);
+
+    $sqid = intval($sq->sqid);
+
+    $ret = square::get($sqlc, $sqid);
+    if(!$ret)
+	die('Eno_such_sq');
+
+    echo(json_encode($ret));
+}
+if($action == 'add_user')
+{
+    //add user to exist square
+    //data: uid, sqid
+    $dt = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($dt->uid);
+    $sqid = intval($dt->sqid);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $sq = square::get($sqlc, $sqid);
+    if(!$sq)
+	die('Eno_such_sq');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) || (square::get_user_relationship($sqlc, $_COOKIE['uid'], $sqid)>=SQUARE_USER_ADMIN);
+
+    if($uid != intval($_COOKIE['uid']) && !$adm)
+	die('Epermission_denied');
+
+    $rela = SQUARE_USER_ACTIVE;
+    if(!$adm)
+    {
+	if($sq->publicity == SQUARE_AUTH)
+	    $rela = SQUARE_USER_PENDING;
+	if($sq->publicity == SQUARE_PRIVATE)
+	    die('Eprivate_square');
+    }
+
+    if(square::get_user_relationship($sqlc, $uid, $sqid))
+	die('Ealready_entered');
+
+    $ret = square::add_user($sqlc, $uid, $sqid, $rela);
+    if(!$ret)
+	die('Eadd_user_failed');
+
+    echo('S');
+}
+if($action == 'delete_user')
+{
+    //delete user from user-square relation
+    //data : uid, sqid 
+    $dt = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($dt->uid);
+    $sqid = intval($dt->sqid);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $sq = square::get($sqlc, $sqid);
+    if(!$sq)
+	die('Eno_such_sq');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) || (square::get_user_relationship($sqlc, $_COOKIE['uid'], $sqid)>=SQUARE_USER_ADMIN);
+
+    if($uid != intval($_COOKIE['uid']) && !$adm)
+	die('Epermission_denied');
+
+    if(!square::get_user_relationship($sqlc, $uid, $sqid))
+	die('Enot_entered');
+
+    $ret = square::del_user($sqlc, $uid, $sqid);
+    if(!$ret)
+	die('Edelete_user_failed');
+
+    echo('S');
+}
+if($action == 'edit_user_relationship')
+{
+    //edit user relationship.
+    //data: uid, sqid, relationship
+    $dt = json_decode($data);
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($dt->uid);
+    $sqid = intval($dt->sqid);
+    $rel = intval($dt->relationship);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $sq = square::get($sqlc, $sqid);
+    if(!$sq)
+	die('Eno_such_sq');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) || (square::get_user_relationship($sqlc, $_COOKIE['uid'], $sqid)>=SQUARE_USER_ADMIN);
+
+    if(!$adm)
+	die('Epermission_denied');
+
+    if(!square::get_user_relationship($sqlc, $uid, $sqid))
+	die('Enot_entered');
+
+    if($rel!=SQUARE_USER_PENDING && $rel!=SQUARE_USER_ACTIVE && $rel!=SQUARE_USER_ADMIN)
+die('Ewrong_relationship');
+
+    $ret = square::set_user_relationship($sqlc, $uid, $sqid, $rel);
+    if(!$ret)
+	die('Eedit_user_relationship_failed');
+
+    echo('S');
+}
+if($action == 'get_available_sq')
+{
+    //get all available square data: sqid, start_time, end_time, publicity, sqname for given uid.
+    //only USER_LEVEL_SUPERADMIN can see SQUARE_PRIVATE squares.
+    //data: (no)
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($_COOKIE['uid']);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN);
+
+    $pub = 2;
+    if($adm)
+	$pub = 1;
+
+    $list = square::get_available_sq($sqlc, $uid, $pub);
+    
+    $ret = new stdClass;
+    $ret->list = $list;
+    $ret->timestamp = date('Y-m-d H:i:s');
+
+    echo(json_encode($ret));    
+}
+if($action == 'get_entered_sq')
+{
+
+    //get all entered square data: sqid, start_time, end_time, publicity, sqname, relationship for given uid.
+    //data: (no)
+
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($_COOKIE['uid']);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $list = square::get_entered_sq($sqlc, $uid);
+    
+    $ret = new stdClass;
+    $ret->list = $list;
+    $ret->timestamp = date('Y-m-d H:i:s');
+
+    echo(json_encode($ret));   
+}
+if($action == 'get_sq_pro_list')
+{
+    if(!sec_is_login())
+	die('Enot_login');
+    if(!sec_check_level($sqlc, USER_LEVEL_SUPERADMIN))
+	die('Epermission_denied');
+
+    $dt = json_decode($data);
+    if(!square::get($sqlc, $dt->sqid))
+	die('Ewrong_sqid');
+
+    $ret = square::get_pro_list($sqlc, $dt->sqid);
+    echo(json_encode($ret));
+}
+if($action == 'add_pro_into_sq')
+{
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($_COOKIE['uid']);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $dt = json_decode($data);
+    if(!problem::is_available($sqlc, $dt->proid))
+	die('Ewrong_proid');
+
+    $sq = square::get($sqlc, $dt->sqid);
+    if(!$sq)
+	die('Ewrong_sqid');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) || square::get_user_relationship($sqlc, $uid, $dt->sqid) >= SQUARE_USER_ADMIN;
+
+    if(!$adm)
+	die('Enot_square_admin');
+
+    if(square::is_pro_in_sq($sqlc, $dt->proid, $dt->sqid))
+	die('Ealready_in_square');
+
+    $ret = square::add_pro($sqlc, $dt->proid, $dt->sqid);
+    if(!$ret)
+	die('Eadd_problem_into_square_failed');
+
+    if(event::exec_func('../sqmod/'.$sq->sqmodname.'/'.$sq->sqmodname.'.inc.php','event_add_pro',[$sq->sqid, $dt->proid]) === false)
+	die('Eevent_error');
+
+    echo('S');
+}
+if($action == 'delete_pro_from_sq')
+{
+    if(!sec_is_login())
+	die('Eno_login');
+
+    $uid = intval($_COOKIE['uid']);
+
+    $usr = user::get_from_uid($sqlc, $uid);
+    if(!$usr)
+	die('Eno_such_user');
+
+    $dt = json_decode($data);
+
+    $sq = square::get($sqlc, $dt->sqid);
+    if(!$sq)
+	die('Ewrong_sqid');
+
+    $adm = sec_check_level($sqlc, USER_LEVEL_SUPERADMIN) || square::get_user_relationship($sqlc, $uid, $dt->sqid) >= SQUARE_USER_ADMIN;
+
+    if(!$adm)
+	die('Enot_square_admin');
+
+    if(!square::is_pro_in_sq($sqlc, $dt->proid, $dt->sqid))
+	die('Enot_in_square');
+
+    $ret = square::del_pro($sqlc, $dt->proid, $dt->sqid);
+    if(!$ret)
+	die('Edelete_problem_from_square_failed');
+
+    if(event::exec_func('../sqmod/'.$sq->sqmodname.'/'.$sq->sqmodname.'.inc.php','event_del_pro',[$sq->sqid, $dt->proid]) === false)
+	die('Eevent_error');
+
+    echo('S');
+}
+
+db_close($sqlc);
+
+?>