Chamilo\CoreBundle\Controller\Api\ExportGlossaryToDocumentsAction::__invoke()

Complexity

Conditions	11
Paths	80

Size

Total Lines	84
Code Lines	42

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function __invoke(
        Request $request,
        CGlossaryRepository $repo,
        EntityManagerInterface $em,
        KernelInterface $kernel,
        TranslatorInterface $translator
    ): string {
        $data = json_decode((string) $request->getContent(), true) ?: [];

        $parentResourceNodeId = (int) ($data['parentResourceNodeId'] ?? 0);

        // The frontend may send resourceLinkList as a JSON string or as an array.
        $resourceLinkListRaw = $data['resourceLinkList'] ?? [];
        if (is_string($resourceLinkListRaw)) {
            $resourceLinkListRaw = json_decode($resourceLinkListRaw, true) ?: [];
        }

        $resourceLinkList = $this->normalizeResourceLinks($resourceLinkListRaw);

        // Resolve context from resource links.
        $cid = (int) ($resourceLinkList[0]['cid'] ?? 0);
        $sid = (int) ($resourceLinkList[0]['sid'] ?? 0);

        $course = null;
        $session = null;

        if ($cid > 0) {
            $course = $em->getRepository(Course::class)->find($cid);
        }
        if ($sid > 0) {
            $session = $em->getRepository(Session::class)->find($sid);
        }

        // Important: export only glossary items for the current course/session context.
        if ($course) {
            $qb = $repo->getResourcesByCourse($course, $session, null, null, true, true);

            // The alias used by getResourcesByCourse() is "resource" (as seen in GetGlossaryCollectionController).
            $qb->orderBy('resource.title', 'ASC');

            /** @var CGlossary[] $glossaryItems */
            $glossaryItems = $qb->getQuery()->getResult();
        } else {
            // Fallback to keep behavior resilient if cid is missing.
            /** @var CGlossary[] $glossaryItems */
            $glossaryItems = $repo->findAll();
        }

        $exportPath = $kernel->getCacheDir();
        $pdfFilePath = $this->generatePdfFile($glossaryItems, $exportPath, $translator);

        if (!empty($pdfFilePath) && file_exists($pdfFilePath)) {
            $fileName = basename($pdfFilePath);

            // Important: mark as "test" because this file is generated on the server (not uploaded by HTTP).
            $uploadFile = new UploadedFile(
                $pdfFilePath,
                $fileName,
                'application/pdf',
                null,
                true
            );

            $document = new CDocument();
            $document->setTitle($fileName);
            $document->setUploadFile($uploadFile);
            $document->setFiletype('file');

            if ($parentResourceNodeId > 0) {
                $document->setParentResourceNode($parentResourceNodeId);
            }

            if (!empty($resourceLinkList)) {
                $document->setResourceLinkArray($resourceLinkList);
            }

            // Save the CDocument entity to the database
            $em->persist($document);
            $em->flush();

            @unlink($pdfFilePath);

It seems like you do not handle an error condition for unlink(). This can introduce security issues, and is generally not recommended.

        }

        return $pdfFilePath;
    }