Nickbur / Sunrise-CMS

administration/model/blog/review.php

<?php

/* 	Divine CMS - Open source CMS for widespread use.
    Copyright (c) 2019 Mykola Burakov (burakov.work@gmail.com)

    See SOURCE.txt for other and additional information.

    This file is part of Divine CMS.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>. */

class ModelBlogReview extends \Divine\Engine\Core\Model

PSR1 recommends that each class must be in a namespace of at least one level to avoid collisions.

{
    public function addReview($data)

Expected 2 blank lines before function; 0 found

    {
        $this->db->query("
            INSERT INTO review_article 
            SET author = '" . $this->db->escape($data['author']) . "', 
                article_id = '" . (int)$data['article_id'] . "', 
                text = '" . $this->db->escape(strip_tags($data['text'])) . "', 
                rating = '" . (int)$data['rating'] . "', 
                status = '" . (int)$data['status'] . "', 
                date_added = '" . $this->db->escape($data['date_added']) . "'
        ");

        $review_article_id = $this->db->getLastId();

        $this->cache->delete('article');

        return $review_article_id;
    }
    
    public function editReview($review_article_id, $data)
    {
        $this->db->query("
            UPDATE review_article 
            SET author = '" . $this->db->escape($data['author']) . "', 
                article_id = '" . (int)$data['article_id'] . "', 
                text = '" . $this->db->escape(strip_tags($data['text'])) . "', 
                rating = '" . (int)$data['rating'] . "', 
                status = '" . (int)$data['status'] . "', 
                date_added = '" . $this->db->escape($data['date_added']) . "', 
                date_modified = NOW() 
            WHERE review_article_id = '" . (int)$review_article_id . "'
        ");

        $this->cache->delete('article');
    }
    
    public function deleteReview($review_article_id)
    {
        $this->db->query("
            DELETE 
			FROM review_article 
            WHERE review_article_id = '" . (int)$review_article_id . "'
        ");

        $this->cache->delete('article');
    }

    public function getReview($review_article_id)
    {
        $query = $this->db->query("
            SELECT DISTINCT *, 
                (
                    SELECT pd.name 
                    FROM article_description pd 
                    WHERE pd.article_id = r.article_id 
                        AND pd.language_id = '" . (int)$this->config->get('config_language_id') . "') AS article 
            FROM review_article r 
            WHERE r.review_article_id = '" . (int)$review_article_id . "'
        ");

        return $query->row;
    }

    public function getReviews($data = array())
    {
        $sql = "
            SELECT r.review_article_id, 
                pd.name, 
                r.author, 
                r.rating, 
                r.status, 
                r.date_added 
            FROM review_article r 
            LEFT JOIN article_description pd ON (r.article_id = pd.article_id) 
            WHERE pd.language_id = '" . (int)$this->config->get('config_language_id') . "'
        ";

        if (!empty($data['filter_article'])) {
            $sql .= " AND pd.name LIKE '" . $this->db->escape($data['filter_article']) . "%'";
        }

        if (!empty($data['filter_author'])) {
            $sql .= " AND r.author LIKE '" . $this->db->escape($data['filter_author']) . "%'";
        }

        if (isset($data['filter_status']) && !is_null($data['filter_status'])) {
            $sql .= " AND r.status = '" . (int)$data['filter_status'] . "'";
        }

        if (!empty($data['filter_date_added'])) {
            $sql .= " AND DATE(r.date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
        }

        $sort_data = array(
            'pd.name',
            'r.author',
            'r.rating',
            'r.status',
            'r.date_added'
        );

        if (isset($data['sort']) && in_array($data['sort'], $sort_data)) {
            $sql .= " ORDER BY " . $data['sort'];

The string literal ORDER BY does not require double quotes, as per coding-style, please use single quotes.

        } else {
            $sql .= " ORDER BY r.date_added";

The string literal ORDER BY r.date_added does not require double quotes, as per coding-style, please use single quotes.

        }

        if (isset($data['order']) && ($data['order'] == 'DESC')) {
            $sql .= " DESC";

The string literal DESC does not require double quotes, as per coding-style, please use single quotes.

        } else {
            $sql .= " ASC";

The string literal ASC does not require double quotes, as per coding-style, please use single quotes.

        }

        if (isset($data['start']) || isset($data['limit'])) {
            if ($data['start'] < 0) {
                $data['start'] = 0;
            }

            if ($data['limit'] < 1) {
                $data['limit'] = 20;
            }

            $sql .= " LIMIT " . (int)$data['start'] . "," . (int)$data['limit'];

The string literal LIMIT does not require double quotes, as per coding-style, please use single quotes.

The string literal , does not require double quotes, as per coding-style, please use single quotes.

        }

        $query = $this->db->query($sql);

        return $query->rows;
    }

    public function getTotalReviews($data = array())
    {
        $sql = "
            SELECT COUNT(*) AS total 
            FROM review_article r 
            LEFT JOIN article_description pd ON (r.article_id = pd.article_id) 
            WHERE pd.language_id = '" . (int)$this->config->get('config_language_id') . "'
        ";

        if (!empty($data['filter_article'])) {
            $sql .= " AND pd.name LIKE '" . $this->db->escape($data['filter_article']) . "%'";
        }

        if (!empty($data['filter_author'])) {
            $sql .= " AND r.author LIKE '" . $this->db->escape($data['filter_author']) . "%'";
        }

        if (isset($data['filter_status']) && !is_null($data['filter_status'])) {
            $sql .= " AND r.status = '" . (int)$data['filter_status'] . "'";
        }

        if (!empty($data['filter_date_added'])) {
            $sql .= " AND DATE(r.date_added) = DATE('" . $this->db->escape($data['filter_date_added']) . "')";
        }

        $query = $this->db->query($sql);

        return $query->row['total'];
    }

    public function getTotalReviewsAwaitingApproval()
    {
        $query = $this->db->query("SELECT COUNT(*) AS total FROM review_article WHERE status = '0'");

        return $query->row['total'];
    }
}