ElkArte\AdminController\ManageMembergroups::action_edit()

Complexity

Conditions

66

Size

Total Lines	304
Code Lines	151

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	4422

Importance

Changes

0

<?php
	public function action_edit(): void
	{
		global $context, $txt, $modSettings;

		$current_group_id = $this->_req->getQuery('group', 'intval', 0);
		$current_group = [];

		if (!empty($modSettings['deny_boards_access']))
		{
			Txt::load('ManagePermissions');
		}

		require_once(SUBSDIR . '/Membergroups.subs.php');

		// Make sure this group is editable.
		if (!empty($current_group_id))
		{
			$current_group = membergroupById($current_group_id);
		}

		// Now, do we have a valid id?
		if (!allowedTo('admin_forum') && !empty($current_group_id) && $current_group['group_type'] == 1)
		{
			throw new Exception('membergroup_does_not_exist', false);
		}

		// Delete this membergroup button was pressed.
		if (isset($this->_req->post->delete))
		{
			checkSession();
			validateToken('admin-mmg');

			if (empty($current_group_id))
			{
				throw new Exception('membergroup_does_not_exist', false);
			}

			// Let's delete the group
			deleteMembergroups($current_group['id_group']);

			redirectexit('action=admin;area=membergroups;');
		}
		// A form was submitted with the new membergroup settings.
		elseif ($this->_req->hasPost('save'))
		{
			// Validate the session.
			checkSession();
			validateToken('admin-mmg');

			if (empty($current_group_id))
			{
				throw new Exception('membergroup_does_not_exist', false);
			}

			// Empty values will be replaced by validator values where they exist
			$empty_post = ['max_messages' => null, 'min_posts' => null, 'group_type' => null, 'group_desc' => '',
				'group_name' => '', 'group_hidden' => null, 'group_inherit' => null, 'icon_count' => null,
				'icon_image' => '', 'online_color' => '', 'boardaccess' => null];

			$validator = new DataValidator();

			// Clean up the inputs! :D
			$validator->sanitation_rules([
				'max_messages' => 'intval',
				'min_posts' => 'intval|abs',
				'group_type' => 'intval',
				'group_desc' => 'trim|Util::htmlspecialchars',
				'group_name' => 'trim|Util::htmlspecialchars',
				'group_hidden' => 'intval',
				'group_inherit' => 'intval',
				'icon_count' => 'intval',
				'icon_image' => 'trim|Util::htmlspecialchars',
				'online_color' => 'trim|valid_color',
			]);
			$validator->input_processing([
				'boardaccess' => 'array',
			]);
			$validator->validation_rules([
				'boardaccess' => 'contains[allow,ignore,deny]',
			]);
			$validator->validate($this->_req->post);

			// Insert the clean data
			$our_post = array_replace((array) $this->_req->post, $empty_post, $validator->validation_data());

			// Can they really inherit from this group?
			$inherit_type = [];
			if ($our_post['group_inherit'] != -2 && !allowedTo('admin_forum'))
			{
				$inherit_type = membergroupById($our_post['group_inherit']);
			}

			$min_posts = $our_post['group_type'] == -1 && $our_post['min_posts'] >= 0 && $current_group['id_group'] > 3 ? $our_post['min_posts'] : ($current_group['id_group'] == 4 ? 0 : -1);
			$group_inherit = $current_group['id_group'] > 1 && $current_group['id_group'] != 3 && (empty($inherit_type['group_type']) || $inherit_type['group_type'] != 1) ? $our_post['group_inherit'] : -2;

			//@todo Don't set online_color for the Moderators group?

			// Do the update of the membergroup settings.
			$properties = [
				'max_messages' => $our_post['max_messages'],
				'min_posts' => $min_posts,
				'group_type' => $our_post['group_type'] < 0 || $our_post['group_type'] > 3 || ($our_post['group_type'] == 1 && !allowedTo('admin_forum')) ? 0 : $our_post['group_type'],
				'hidden' => !$our_post['group_hidden'] || $min_posts != -1 || $current_group['id_group'] == 3 ? 0 : $our_post['group_hidden'],
				'id_parent' => $group_inherit,
				'current_group' => $current_group['id_group'],
				'group_name' => $our_post['group_name'],
				'online_color' => $our_post['online_color'],
				'icons' => $our_post['icon_count'] <= 0 ? '' : min($our_post['icon_count'], 10) . '#' . $our_post['icon_image'],
				// /me wonders why admin is *so* special
				'description' => $current_group['id_group'] == 1 || $our_post['group_type'] != -1 ? $our_post['group_desc'] : '',
			];
			updateMembergroupProperties($properties);

			call_integration_hook('integrate_save_membergroup', [$current_group['id_group']]);

			// Time to update the boards this membergroup has access to.
			if ($current_group['id_group'] == 2 || $current_group['id_group'] > 3)
			{
				$changed_boards = [];
				$changed_boards['allow'] = [];
				$changed_boards['deny'] = [];
				$changed_boards['ignore'] = [];

				if ($our_post['boardaccess'])
				{
					foreach ($our_post['boardaccess'] as $group_id => $action)
					{
						$changed_boards[$action][] = (int) $group_id;
					}
				}

				foreach (['allow', 'deny'] as $board_action)
				{
					// Find all board this group is in, but shouldn't be in.
					detachGroupFromBoards($current_group['id_group'], $changed_boards, $board_action);

					// Add the membergroup to all boards that hadn't been set yet.
					if (!isset($changed_boards[$board_action]))
					{
						continue;
					}

					if (empty($changed_boards[$board_action]))
					{
						continue;
					}

					assignGroupToBoards($current_group['id_group'], $changed_boards, $board_action);
				}
			}

			// Remove everyone from this group!
			if ($min_posts != -1)
			{
				detachDeletedGroupFromMembers($current_group['id_group']);
			}
			elseif ($current_group['id_group'] != 3)
			{
				// Making it a hidden group? If so, remove everyone with it as a primary group (Actually, just make them additional).
				if ($our_post['group_hidden'] == 2)
				{
					setGroupToHidden($current_group['id_group']);
				}

				// Either way, let's check our "show group membership" setting is correct.
				validateShowGroupMembership();
			}

			// Do we need to set inherited permissions?
			if ($group_inherit !== -2 && $group_inherit !== $this->_req->post->old_inherit)
			{
				$permissionsObject = new Permissions();
				$permissionsObject->updateChild($group_inherit);
			}

			// Lastly, moderators!
			$moderator_string = $this->_req->getPost('group_moderators', 'trim', '');
			detachGroupModerators($current_group['id_group']);

			if ((!empty($moderator_string) || !empty($this->_req->post->moderator_list)) && $min_posts == -1 && $current_group['id_group'] != 3)
			{
				// Get all the usernames from the string
				if (!empty($moderator_string))
				{
					$moderator_string = strtr(preg_replace('~&amp;#(\d{4,5}|[2-9]\d{2,4}|1[2-9]\d);~', '&#$1;', htmlspecialchars($moderator_string, ENT_QUOTES, 'UTF-8')), ['&quot;' => '"']);
					preg_match_all('~"([^"]+)"~', $moderator_string, $matches);
					$moderators = array_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $moderator_string)));
					$moderators = array_filter(array_map('trim', $moderators));

					// Find all the id_member's for the member_name's in the list.
					if (!empty($moderators))
					{
						$group_moderators = getIDMemberFromGroupModerators($moderators);
					}
				}
				else
				{
					$moderators = [];
					foreach ($this->_req->post->moderator_list as $moderator)
					{
						$moderators[] = (int) $moderator;
					}

					$group_moderators = [];
					if (!empty($moderators))
					{
						require_once(SUBSDIR . '/Members.subs.php');
						$members = getBasicMemberData($moderators);
						foreach ($members as $member)
						{
							$group_moderators[] = $member['id_member'];
						}
					}
				}

				// Found some?
				if (!empty($group_moderators))
				{
					assignGroupModerators($current_group['id_group'], $group_moderators);
				}
			}

			// There might have been some post-group changes.
			require_once(SUBSDIR . '/Membergroups.subs.php');
			updatePostGroupStats();

			// We've definitely changed some group stuff.
			updateSettings([
				'settings_updated' => time(),
			]);

			// Log the edit.
			logAction('edited_group', ['group' => $our_post['group_name']], 'admin');

			redirectexit('action=admin;area=membergroups');
		}

		// Fetch the current group information.
		$row = membergroupById($current_group['id_group'], true);

		if (empty($row) || (!allowedTo('admin_forum') && $row['group_type'] === 1))
		{
			throw new Exception('membergroup_does_not_exist', false);
		}

		$row['icons'] = explode('#', $row['icons']);

		$context['group'] = [
			'id' => $row['id_group'],
			'name' => $row['group_name'],
			'description' => htmlspecialchars($row['description'], ENT_COMPAT, 'UTF-8'),
			'editable_name' => $row['group_name'],
			'color' => $row['online_color'],
			'min_posts' => $row['min_posts'],
			'max_messages' => $row['max_messages'],
			'icon_count' => (int) $row['icons'][0],
			'icon_image' => $row['icons'][1] ?? '',
			'is_post_group' => $row['min_posts'] !== -1,
			'type' => $row['min_posts'] !== -1 ? 0 : $row['group_type'],
			'hidden' => $row['min_posts'] === -1 ? $row['hidden'] : 0,
			'inherited_from' => $row['id_parent'],
			'allow_post_group' => $row['id_group'] === 2 || $row['id_group'] > 4,
			'allow_delete' => $row['id_group'] === 2 || $row['id_group'] > 4,
			'allow_protected' => allowedTo('admin_forum'),
		];

		// Get any moderators for this group
		$context['group']['moderators'] = getGroupModerators($row['id_group']);
		$context['group']['moderator_list'] = empty($context['group']['moderators']) ? '' : '&quot;' . implode('&quot;, &quot;', $context['group']['moderators']) . '&quot;';

		if (!empty($context['group']['moderators']))
		{
			[$context['group']['last_moderator_id']] = array_slice(array_keys($context['group']['moderators']), -1);
		}

		// Get a list of boards this membergroup is allowed to see.
		$context['boards'] = [];
		if ($row['id_group'] === 2 || $row['id_group'] > 3)
		{
			require_once(SUBSDIR . '/Boards.subs.php');
			$context += getBoardList(['override_permissions' => true, 'access' => $row['id_group'], 'not_redirection' => true]);

			// Include a list of boards per category for easy toggling.
			foreach ($context['categories'] as $category)
			{
				$context['categories'][$category['id']]['child_ids'] = array_keys($category['boards']);
			}
		}

		// Finally, get all the groups that could be inherited off.
		$context['inheritable_groups'] = getInheritableGroups($row['id_group']);

		call_integration_hook('integrate_view_membergroup');

		$context['sub_template'] = 'edit_group';
		$context['page_title'] = $txt['membergroups_edit_group'];

		// Use the autosuggest script when needed
		if ($context['group']['id'] != 3 && $context['group']['id'] != 4)
		{
			loadJavascriptFile('suggest.js', ['defer' => true]);
		}

		createToken('admin-mmg');
	}