adamjakab /
SuiteCRM
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | 1 | if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point'); |
|
| 3 | /********************************************************************************* |
||
| 4 | * SugarCRM Community Edition is a customer relationship management program developed by |
||
| 5 | * SugarCRM, Inc. Copyright (C) 2004-2013 SugarCRM Inc. |
||
| 6 | |||
| 7 | * SuiteCRM is an extension to SugarCRM Community Edition developed by Salesagility Ltd. |
||
| 8 | * Copyright (C) 2011 - 2014 Salesagility Ltd. |
||
| 9 | * |
||
| 10 | * This program is free software; you can redistribute it and/or modify it under |
||
| 11 | * the terms of the GNU Affero General Public License version 3 as published by the |
||
| 12 | * Free Software Foundation with the addition of the following permission added |
||
| 13 | * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK |
||
| 14 | * IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY |
||
| 15 | * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS. |
||
| 16 | * |
||
| 17 | * This program is distributed in the hope that it will be useful, but WITHOUT |
||
| 18 | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS |
||
| 19 | * FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more |
||
| 20 | * details. |
||
| 21 | * |
||
| 22 | * You should have received a copy of the GNU Affero General Public License along with |
||
| 23 | * this program; if not, see http://www.gnu.org/licenses or write to the Free |
||
| 24 | * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA |
||
| 25 | * 02110-1301 USA. |
||
| 26 | * |
||
| 27 | * You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road, |
||
| 28 | * SW2-130, Cupertino, CA 95014, USA. or at email address [email protected]. |
||
| 29 | * |
||
| 30 | * The interactive user interfaces in modified source and object code versions |
||
| 31 | * of this program must display Appropriate Legal Notices, as required under |
||
| 32 | * Section 5 of the GNU Affero General Public License version 3. |
||
| 33 | * |
||
| 34 | * In accordance with Section 7(b) of the GNU Affero General Public License version 3, |
||
| 35 | * these Appropriate Legal Notices must retain the display of the "Powered by |
||
| 36 | * SugarCRM" logo and "Supercharged by SuiteCRM" logo. If the display of the logos is not |
||
| 37 | * reasonably feasible for technical reasons, the Appropriate Legal Notices must |
||
| 38 | * display the words "Powered by SugarCRM" and "Supercharged by SuiteCRM". |
||
| 39 | ********************************************************************************/ |
||
| 40 | |||
| 41 | |||
| 42 | 1 | require_once("data/Relationships/One2MRelationship.php"); |
|
| 43 | |||
| 44 | /** |
||
| 45 | * Represents a one to many relationship that is table based. |
||
| 46 | * @api |
||
| 47 | */ |
||
| 48 | class One2MBeanRelationship extends One2MRelationship |
||
| 49 | { |
||
| 50 | //Type is read in sugarbean to determine query construction |
||
| 51 | var $type = "one-to-many"; |
||
| 52 | |||
| 53 | 109 | public function __construct($def) |
|
| 54 | { |
||
| 55 | 109 | parent::__construct($def); |
|
| 56 | 109 | } |
|
| 57 | |||
| 58 | /** |
||
| 59 | * @param $lhs SugarBean left side bean to add to the relationship. |
||
| 60 | * @param $rhs SugarBean right side bean to add to the relationship. |
||
| 61 | * @param $additionalFields key=>value pairs of fields to save on the relationship |
||
| 62 | * @return boolean true if successful |
||
| 63 | */ |
||
| 64 | public function add($lhs, $rhs, $additionalFields = array()) |
||
| 65 | { |
||
| 66 | // test to see if the relationship exist if the relationship between the two beans |
||
| 67 | // exist then we just fail out with false as we don't want to re-trigger this |
||
| 68 | // the save and such as it causes problems with the related() in sugarlogic |
||
| 69 | if($this->relationship_exists($lhs, $rhs) && !empty($GLOBALS['resavingRelatedBeans'])) return false; |
||
| 70 | |||
| 71 | $lhsLinkName = $this->lhsLink; |
||
| 72 | $rhsLinkName = $this->rhsLink; |
||
| 73 | |||
| 74 | //Since this is bean based, we know updating the RHS's field will overwrite any old value, |
||
| 75 | //But we need to use delete to make sure custom logic is called correctly |
||
| 76 | if ($rhs->load_relationship($rhsLinkName)) |
||
| 77 | { |
||
| 78 | $oldLink = $rhs->$rhsLinkName; |
||
| 79 | $prevRelated = $oldLink->getBeans(null); |
||
| 80 | foreach($prevRelated as $oldLHS) |
||
| 81 | { |
||
| 82 | if ($oldLHS->id != $lhs->id) |
||
| 83 | $this->remove($oldLHS, $rhs, false); |
||
| 84 | } |
||
| 85 | } |
||
| 86 | |||
| 87 | //Make sure we load the current relationship state to the LHS link |
||
| 88 | if ((isset($lhs->$lhsLinkName) && is_a($lhs->$lhsLinkName, "Link2")) || $lhs->load_relationship($lhsLinkName)) { |
||
| 89 | $lhs->$lhsLinkName->load(); |
||
| 90 | } |
||
| 91 | |||
| 92 | if (empty($_SESSION['disable_workflow']) || $_SESSION['disable_workflow'] != "Yes") |
||
| 93 | { |
||
| 94 | $this->callBeforeAdd($lhs, $rhs); |
||
| 95 | $this->callBeforeAdd($rhs, $lhs); |
||
| 96 | } |
||
| 97 | |||
| 98 | $this->updateFields($lhs, $rhs, $additionalFields); |
||
| 99 | |||
| 100 | if (empty($_SESSION['disable_workflow']) || $_SESSION['disable_workflow'] != "Yes") |
||
| 101 | { |
||
| 102 | //Need to call save to update the bean as the relationship is saved on the main table |
||
| 103 | //We don't want to create a save loop though, so make sure we aren't already in the middle of saving this bean |
||
| 104 | SugarRelationship::addToResaveList($rhs); |
||
| 105 | |||
| 106 | $this->updateLinks($lhs, $lhsLinkName, $rhs, $rhsLinkName); |
||
| 107 | |||
| 108 | $this->callAfterAdd($lhs, $rhs); |
||
| 109 | $this->callAfterAdd($rhs, $lhs); |
||
| 110 | } |
||
| 111 | |||
| 112 | //One2MBean relationships require that the RHS bean be saved or else the relationship will not be saved. |
||
| 113 | //If we aren't already in a relationship save, intitiate a save now. |
||
| 114 | if (empty($GLOBALS['resavingRelatedBeans'])) |
||
| 115 | SugarRelationship::resaveRelatedBeans(); |
||
| 116 | |||
| 117 | return true; |
||
| 118 | } |
||
| 119 | |||
| 120 | protected function updateLinks($lhs, $lhsLinkName, $rhs, $rhsLinkName) |
||
| 121 | { |
||
| 122 | if (isset($lhs->$lhsLinkName)) |
||
| 123 | $lhs->$lhsLinkName->addBean($rhs); |
||
| 124 | //RHS only has one bean ever, so we don't need to preload the relationship |
||
| 125 | if (isset($rhs->$rhsLinkName)) |
||
| 126 | $rhs->$rhsLinkName->beans = array($lhs->id => $lhs); |
||
| 127 | } |
||
| 128 | |||
| 129 | protected function updateFields($lhs, $rhs, $additionalFields) |
||
| 130 | { |
||
| 131 | //Now update the RHS bean's ID field |
||
| 132 | $rhsID = $this->def['rhs_key']; |
||
| 133 | $rhs->$rhsID = $lhs->id; |
||
| 134 | foreach($additionalFields as $field => $val) |
||
| 135 | { |
||
| 136 | $rhs->$field = $val; |
||
| 137 | } |
||
| 138 | //Update role fields |
||
| 139 | if(!empty($this->def["relationship_role_column"]) && !empty($this->def["relationship_role_column_value"])) |
||
| 140 | { |
||
| 141 | $roleField = $this->def["relationship_role_column"]; |
||
| 142 | $rhs->$roleField = $this->def["relationship_role_column_value"]; |
||
| 143 | } |
||
| 144 | } |
||
| 145 | |||
| 146 | 7 | public function remove($lhs, $rhs, $save = true) |
|
| 147 | { |
||
| 148 | 7 | $rhsID = $this->def['rhs_key']; |
|
| 149 | |||
| 150 | //If this relationship has already been removed, we can just return |
||
| 151 | 7 | if ($rhs->$rhsID != $lhs->id) |
|
| 152 | return false; |
||
| 153 | |||
| 154 | 7 | $rhs->$rhsID = ''; |
|
| 155 | |||
| 156 | 7 | if (empty($_SESSION['disable_workflow']) || $_SESSION['disable_workflow'] != "Yes") |
|
| 157 | { |
||
| 158 | 7 | $this->callBeforeDelete($lhs, $rhs); |
|
| 159 | 7 | $this->callBeforeDelete($rhs, $lhs); |
|
| 160 | } |
||
| 161 | |||
| 162 | 7 | if ($save && !$rhs->deleted) |
|
| 163 | { |
||
| 164 | 4 | $rhs->in_relationship_update = TRUE; |
|
| 165 | 4 | $rhs->save(); |
|
| 166 | } |
||
| 167 | |||
| 168 | 7 | if (empty($_SESSION['disable_workflow']) || $_SESSION['disable_workflow'] != "Yes") |
|
| 169 | { |
||
| 170 | 7 | $this->callAfterDelete($lhs, $rhs); |
|
| 171 | 7 | $this->callAfterDelete($rhs, $lhs); |
|
| 172 | } |
||
| 173 | |||
| 174 | 7 | return true; |
|
| 175 | } |
||
| 176 | |||
| 177 | /** |
||
| 178 | * @param $link Link2 loads the relationship for this link. |
||
| 179 | * @return void |
||
| 180 | */ |
||
| 181 | 89 | public function load($link, $params = array()) |
|
| 182 | { |
||
| 183 | 89 | $relatedModule = $link->getSide() == REL_LHS ? $this->def['rhs_module'] : $this->def['lhs_module']; |
|
| 184 | 89 | $rows = array(); |
|
| 185 | //The related bean ID is stored on the RHS table. |
||
| 186 | //If the link is RHS, just grab it from the focus. |
||
| 187 | 89 | if ($link->getSide() == REL_RHS) |
|
| 188 | { |
||
| 189 | 83 | $rhsID = $this->def['rhs_key']; |
|
| 190 | 83 | $id = $link->getFocus()->$rhsID; |
|
| 191 | 83 | if (!empty($id)) |
|
| 192 | { |
||
| 193 | 83 | $rows[$id] = array('id' => $id); |
|
| 194 | } |
||
| 195 | } |
||
| 196 | else //If the link is LHS, we need to query to get the full list and load all the beans. |
||
| 197 | { |
||
| 198 | 31 | $db = DBManagerFactory::getInstance(); |
|
| 199 | 31 | $query = $this->getQuery($link, $params); |
|
| 200 | 31 | if (empty($query)) |
|
| 201 | { |
||
| 202 | $GLOBALS['log']->fatal("query for {$this->name} was empty when loading from {$this->lhsLink}\n"); |
||
|
0 ignored issues
–
show
|
|||
| 203 | return array("rows" => array()); |
||
| 204 | } |
||
| 205 | 31 | $result = $db->query($query); |
|
| 206 | 31 | while ($row = $db->fetchByAssoc($result, FALSE)) |
|
| 207 | { |
||
| 208 | 10 | $id = $row['id']; |
|
| 209 | 10 | $rows[$id] = $row; |
|
| 210 | } |
||
| 211 | } |
||
| 212 | |||
| 213 | 89 | return array("rows" => $rows); |
|
| 214 | } |
||
| 215 | |||
| 216 | 34 | public function getQuery($link, $params = array()) |
|
| 217 | { |
||
| 218 | //There was an old signature with $return_as_array as the second parameter. We should respect this if $params is true |
||
| 219 | 34 | if ($params === true) { |
|
| 220 | 3 | $params = array("return_as_array" => true); |
|
| 221 | } |
||
| 222 | |||
| 223 | 34 | if ($link->getSide() == REL_RHS) { |
|
| 224 | return false; |
||
| 225 | } else { |
||
| 226 | 34 | $lhsKey = $this->def['lhs_key']; |
|
| 227 | 34 | $rhsTable = $this->def['rhs_table']; |
|
| 228 | 34 | $rhsTableKey = "{$rhsTable}.{$this->def['rhs_key']}"; |
|
| 229 | 34 | $relatedSeed = BeanFactory::getBean($this->getRHSModule()); |
|
| 230 | 34 | $deleted = !empty($params['deleted']) ? 1 : 0; |
|
| 231 | 34 | $where = "WHERE $rhsTableKey = '{$link->getFocus()->$lhsKey}' AND {$rhsTable}.deleted=$deleted"; |
|
| 232 | 34 | $order_by = ''; |
|
| 233 | |||
| 234 | //Check for role column |
||
| 235 | 34 | if (!empty($this->def["relationship_role_column"]) && !empty($this->def["relationship_role_column_value"])) { |
|
| 236 | 11 | $roleField = $this->def["relationship_role_column"]; |
|
| 237 | 11 | $roleValue = $this->def["relationship_role_column_value"]; |
|
| 238 | 11 | $where .= " AND $rhsTable.$roleField = '$roleValue'"; |
|
| 239 | } |
||
| 240 | |||
| 241 | //Add any optional where clause |
||
| 242 | 34 | if (!empty($params['where'])) { |
|
| 243 | $add_where = is_string($params['where']) ? $params['where'] : "$rhsTable." . $this->getOptionalWhereClause($params['where']); |
||
| 244 | if (!empty($add_where)) |
||
| 245 | $where .= " AND $add_where"; |
||
| 246 | } |
||
| 247 | |||
| 248 | //Add any optional order clauses |
||
| 249 | 34 | if (!empty($params['order_by'])) { |
|
| 250 | $order_by = $relatedSeed->process_order_by($params['order_by']); |
||
| 251 | } |
||
| 252 | |||
| 253 | 34 | $from = $this->def['rhs_table']; |
|
| 254 | |||
| 255 | 34 | if (empty($params['return_as_array'])) { |
|
| 256 | //Limit is not compatible with return_as_array |
||
| 257 | 31 | $query = "SELECT id FROM $from $where"; |
|
| 258 | 31 | if (!empty($order_by)) $query .= ' ORDER BY '.$order_by; |
|
| 259 | 31 | if (!empty($params['limit']) && $params['limit'] > 0) { |
|
| 260 | $offset = isset($params['offset']) ? $params['offset'] : 0; |
||
| 261 | $query = DBManagerFactory::getInstance()->limitQuery($query, $offset, $params['limit'], false, "", false); |
||
| 262 | } |
||
| 263 | 31 | return $query; |
|
| 264 | } else { |
||
| 265 | return array( |
||
| 266 | 3 | 'select' => "SELECT {$this->def['rhs_table']}.id", |
|
| 267 | 3 | 'from' => "FROM {$this->def['rhs_table']}", |
|
| 268 | 3 | 'where' => $where, |
|
| 269 | 3 | 'order_by' => $order_by |
|
| 270 | ); |
||
| 271 | } |
||
| 272 | } |
||
| 273 | } |
||
| 274 | |||
| 275 | 35 | public function getJoin($link, $params = array(), $return_array = false) |
|
| 276 | { |
||
| 277 | 35 | $linkIsLHS = $link->getSide() == REL_LHS; |
|
| 278 | 35 | $startingTable = (empty($params['left_join_table_alias']) ? $this->def['lhs_table'] : $params['left_join_table_alias']); |
|
| 279 | 35 | if (!$linkIsLHS) |
|
| 280 | 34 | $startingTable = (empty($params['right_join_table_alias']) ? $this->def['rhs_table'] : $params['right_join_table_alias']); |
|
| 281 | 35 | $startingKey = $linkIsLHS ? $this->def['lhs_key'] : $this->def['rhs_key']; |
|
| 282 | 35 | $targetTable = $linkIsLHS ? $this->def['rhs_table'] : $this->def['lhs_table']; |
|
| 283 | 35 | $targetTableWithAlias = $targetTable; |
|
| 284 | 35 | $targetKey = $linkIsLHS ? $this->def['rhs_key'] : $this->def['lhs_key']; |
|
| 285 | 35 | $join_type= isset($params['join_type']) ? $params['join_type'] : ' INNER JOIN '; |
|
| 286 | 35 | $join = ''; |
|
| 287 | |||
| 288 | //Set up any table aliases required |
||
| 289 | 35 | if ( ! empty($params['join_table_alias'])) |
|
| 290 | { |
||
| 291 | 35 | $targetTableWithAlias = $targetTable. " ".$params['join_table_alias']; |
|
| 292 | 35 | $targetTable = $params['join_table_alias']; |
|
| 293 | } |
||
| 294 | |||
| 295 | //First join the relationship table |
||
| 296 | 35 | $join .= "$join_type $targetTableWithAlias ON $startingTable.$startingKey=$targetTable.$targetKey AND $targetTable.deleted=0\n" |
|
| 297 | //Next add any role filters |
||
| 298 | 35 | . $this->getRoleWhere(($linkIsLHS) ? $targetTable : $startingTable) . "\n"; |
|
| 299 | |||
| 300 | 35 | if($return_array){ |
|
| 301 | return array( |
||
| 302 | 35 | 'join' => $join, |
|
| 303 | 35 | 'type' => $this->type, |
|
| 304 | 35 | 'rel_key' => $targetKey, |
|
| 305 | 35 | 'join_tables' => array($targetTable), |
|
| 306 | 35 | 'where' => "", |
|
| 307 | 35 | 'select' => "$targetTable.id", |
|
| 308 | ); |
||
| 309 | } |
||
| 310 | return $join; |
||
| 311 | } |
||
| 312 | |||
| 313 | public function getSubpanelQuery($link, $params = array(), $return_array = false) |
||
| 314 | { |
||
| 315 | |||
| 316 | $linkIsLHS = $link->getSide() == REL_RHS; |
||
| 317 | $startingTable = (empty($params['left_join_table_alias']) ? $this->def['lhs_table'] : $params['left_join_table_alias']); |
||
| 318 | if (!$linkIsLHS) |
||
| 319 | $startingTable = (empty($params['right_join_table_alias']) ? $this->def['rhs_table'] : $params['right_join_table_alias']); |
||
| 320 | $startingKey = $linkIsLHS ? $this->def['lhs_key'] : $this->def['rhs_key']; |
||
| 321 | $targetTable = $linkIsLHS ? $this->def['rhs_table'] : $this->def['lhs_table']; |
||
| 322 | $targetKey = $linkIsLHS ? $this->def['rhs_key'] : $this->def['lhs_key']; |
||
| 323 | $join_type= isset($params['join_type']) ? $params['join_type'] : ' INNER JOIN '; |
||
| 324 | $query = ''; |
||
| 325 | |||
| 326 | $alias = empty($params['join_table_alias']) ? "{$link->name}_rel": $params['join_table_alias']; |
||
| 327 | $alias = $GLOBALS['db']->getValidDBName($alias, false, 'alias'); |
||
| 328 | |||
| 329 | $tableInRoleFilter = ""; |
||
| 330 | if ( |
||
| 331 | ( |
||
| 332 | $startingTable == "meetings" |
||
| 333 | || $startingTable == "notes" |
||
| 334 | || $startingTable == "tasks" |
||
| 335 | || $startingTable == "calls" |
||
| 336 | || $startingTable == "emails" |
||
| 337 | ) |
||
| 338 | && |
||
| 339 | ( |
||
| 340 | $targetTable == "meetings" |
||
| 341 | || $targetTable == "notes" |
||
| 342 | || $targetTable == "tasks" |
||
| 343 | || $targetTable == "calls" |
||
| 344 | ) |
||
| 345 | && substr($alias, 0, 12 + strlen($targetTable)) == $targetTable . "_activities_" |
||
| 346 | ) |
||
| 347 | { |
||
| 348 | $tableInRoleFilter = $linkIsLHS ? $alias : $startingTable; |
||
| 349 | } |
||
| 350 | |||
| 351 | //Set up any table aliases required |
||
| 352 | $targetTableWithAlias = "$targetTable $alias"; |
||
| 353 | $targetTable = $alias; |
||
| 354 | |||
| 355 | $query .= "$join_type $targetTableWithAlias ON $startingTable.$startingKey=$targetTable.$targetKey AND $targetTable.deleted=0\n" |
||
| 356 | //Next add any role filters |
||
| 357 | . $this->getRoleWhere($tableInRoleFilter) . "\n"; |
||
| 358 | |||
| 359 | if (!empty($params['return_as_array'])) { |
||
| 360 | $return_array = true; |
||
| 361 | } |
||
| 362 | |||
| 363 | if($return_array){ |
||
| 364 | return array( |
||
| 365 | 'join' => $query, |
||
| 366 | 'type' => $this->type, |
||
| 367 | 'rel_key' => $targetKey, |
||
| 368 | 'join_tables' => array($targetTable), |
||
| 369 | 'where' => "WHERE $startingTable.$startingKey='{$link->focus->id}'", |
||
| 370 | 'select' => " ", |
||
| 371 | ); |
||
| 372 | } |
||
| 373 | return $query; |
||
| 374 | |||
| 375 | } |
||
| 376 | |||
| 377 | /** |
||
| 378 | * Check to see if the relationship already exist. |
||
| 379 | * |
||
| 380 | * If it does return true otherwise return false |
||
| 381 | * |
||
| 382 | * @param SugarBean $lhs Left hand side of the relationship |
||
| 383 | * @param SugarBean $rhs Right hand side of the relationship |
||
| 384 | * @return boolean |
||
| 385 | */ |
||
| 386 | public function relationship_exists($lhs, $rhs) |
||
| 387 | { |
||
| 388 | // we need the key that is stored on the rhs to compare tok |
||
| 389 | $lhsIDName = $this->def['rhs_key']; |
||
| 390 | |||
| 391 | return (isset($rhs->fetched_row[$lhsIDName]) && $rhs->$lhsIDName == $rhs->fetched_row[$lhsIDName] && $rhs->$lhsIDName == $lhs->id); |
||
| 392 | } |
||
| 393 | |||
| 394 | 3 | public function getRelationshipTable() |
|
| 395 | { |
||
| 396 | 3 | if (isset($this->def['table'])) |
|
| 397 | return $this->def['table']; |
||
| 398 | else |
||
| 399 | 3 | return $this->def['rhs_table']; |
|
| 400 | } |
||
| 401 | } |
||
| 402 |
Since your code implements the magic getter
_get, this function will be called for any read access on an undefined variable. You can add the@propertyannotation to your class or interface to document the existence of this variable.If the property has read access only, you can use the @property-read annotation instead.
Of course, you may also just have mistyped another name, in which case you should fix the error.
See also the PhpDoc documentation for @property.