ElkArte\Profile\ProfileOptions::action_groupMembership2()

Complexity

Conditions	60
Paths	> 20000

Size

Total Lines	251
Code Lines	103

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
	public function action_groupMembership2()
	{
		global $context, $modSettings, $scripturl, $language;

		// Let's be extra cautious...
		if (!$context['user']['is_owner'] || empty($modSettings['show_group_membership']))
		{
			isAllowedTo('manage_membergroups');
		}

		$group_id = $this->_req->getPost('gid', 'intval', $this->_req->getQuery('gid', 'intval', null));

		if (!isset($group_id) && !isset($this->_req->post->primary))
		{
			throw new Exception('no_access', false);
		}

		// GID may be from a link or a form
		checkSession(isset($this->_req->query->gid) ? 'get' : 'post');

		require_once(SUBSDIR . '/Membergroups.subs.php');

		$context['can_manage_membergroups'] = allowedTo('manage_membergroups');
		$context['can_manage_protected'] = allowedTo('admin_forum');

		// By default, the new primary is the old one.
		$newPrimary = (int) $this->_profile['id_group'];
		$addGroups = array_flip(explode(',', $this->_profile['additional_groups']));
		$canChangePrimary = (int) $this->_profile['id_group'] === 0;
		$changeType = isset($this->_req->post->primary) ? 'primary' : (isset($this->_req->post->req) ? 'request' : 'free');

		// One way or another, we have a target group in mind...
		$group_id = $group_id ?? (int) $this->_req->post->primary;
		$foundTarget = $changeType === 'primary' && $group_id === 0;

		// Sanity check!!
		if ($group_id === 1)
		{
			isAllowedTo('admin_forum');
		}

		// What ever we are doing, we need to determine if changing primary is possible!
		$groups_details = membergroupsById([$group_id, $this->_profile['id_group']], 0, true);

		// Protected groups require proper permissions!
		if ($group_id !== 1 && $groups_details[$group_id]['group_type'] === 1)
		{
			isAllowedTo('admin_forum');
		}

		foreach ($groups_details as $row)
		{
			// Is this the new group?
			if ($row['id_group'] === $group_id)
			{
				$foundTarget = true;
				$group_name = $row['group_name'];

				// Does the group type match what we're doing - are we trying to request a non-requestable group?
				if ($changeType === 'request' && $row['group_type'] !== 2)
				{
					throw new Exception('no_access', false);
				}

				// What about leaving a requestable group we are not a member of?
				if ($changeType === 'free' && $row['group_type'] === 2 && $this->_profile['id_group'] !== $row['id_group'] && !isset($addGroups[$row['id_group']]))
				{
					throw new Exception('no_access', false);
				}

				if ($changeType === 'free' && $row['group_type'] !== 3 && $row['group_type'] !== 2)
				{
					throw new Exception('no_access', false);
				}

				// We can't change the primary group if this is hidden!
				if ((int) $row['hidden'] === 2)
				{
					$canChangePrimary = false;
				}
			}

			// If this is their old primary, can we change it?
			if ($row['id_group'] === $this->_profile['id_group'] && ($row['group_type'] > 1 || $context['can_manage_membergroups']) && $canChangePrimary)
			{
				$canChangePrimary = true;
			}

			// If we are not doing a force primary move, don't do it automatically if current primary is not 0.
			if ($changeType !== 'primary' && $this->_profile['id_group'] !== 0)
			{
				$canChangePrimary = false;
			}

			// If this is the one we are acting on, can we even act?
			if ((!$context['can_manage_protected'] && $row['group_type'] === 1) || (!$context['can_manage_membergroups'] && $row['group_type'] === 0))
			{
				$canChangePrimary = false;
			}
		}

		// Didn't find the target?
		if (!$foundTarget)
		{
			throw new Exception('no_access', false);
		}

		// Final security check, don't allow users to promote themselves to admin.
		require_once(SUBSDIR . '/ProfileOptions.subs.php');
		if ($context['can_manage_membergroups'] && !allowedTo('admin_forum'))
		{
			$disallow = checkMembergroupChange($group_id);
			if ($disallow)
			{
				isAllowedTo('admin_forum');
			}
		}

		// If we're requesting, add the note then return.
		if ($changeType === 'request')
		{
			if (logMembergroupRequest($group_id, $this->_memID))
			{
				throw new Exception('profile_error_already_requested_group');
			}

			// Email all group moderators etc.
			require_once(SUBSDIR . '/Mail.subs.php');

			// Do we have any group moderators?
			require_once(SUBSDIR . '/Membergroups.subs.php');
			$moderators = array_keys(getGroupModerators($group_id));

			// Otherwise, this is the backup!
			if (empty($moderators))
			{
				require_once(SUBSDIR . '/Members.subs.php');
				$moderators = membersAllowedTo('manage_membergroups');
			}

			if (!empty($moderators))
			{
				require_once(SUBSDIR . '/Members.subs.php');
				$members = getBasicMemberData($moderators, ['preferences' => true, 'sort' => 'lngfile']);

				foreach ($members as $member)
				{
					if ((int) $member['notify_types'] !== 4)
					{
						continue;
					}

					// Check whether they are interested.
					if (!empty($member['mod_prefs']))
					{
						[, , $pref_binary] = explode('|', $member['mod_prefs']);
						if (!($pref_binary & 4))
						{
							continue;
						}
					}

					$replacements = [
						'RECPNAME' => $member['member_name'],
						'APPYNAME' => $this->_profile['member_name'],
						'GROUPNAME' => $group_name,
						'REASON' => $this->_req->post->reason,
						'MODLINK' => $scripturl . '?action=moderate;area=groups;sa=requests',
					];

					$emaildata = loadEmailTemplate('request_membership', $replacements, empty($member['lngfile']) || empty($modSettings['userLanguage']) ? $language : $member['lngfile']);
					sendmail($member['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 2);
				}
			}

			return $changeType;
		}

		// Otherwise, we are leaving/joining a group.
		if ($changeType === 'free')
		{
			// Are we leaving?
			if ($this->_profile['id_group'] === $group_id || isset($addGroups[$group_id]))
			{
				if ($this->_profile['id_group'] === $group_id)
				{
					$newPrimary = 0;
				}
				else
				{
					unset($addGroups[$group_id]);
				}
			}
			// ... if not, must be joining.
			elseif ($canChangePrimary)
			{
				// Can we change the primary, and do we want to?
				if ($this->_profile['id_group'] !== 0)
				{
					$addGroups[$this->_profile['id_group']] = -1;
				}

				$newPrimary = $group_id;
			}
			// Otherwise it's an additional group...
			else
			{
				$addGroups[$group_id] = -1;
			}
		}
		// Finally, we must be setting the primary.
		elseif ($canChangePrimary)
		{
			if ($this->_profile['id_group'] !== 0)
			{
				$addGroups[$this->_profile['id_group']] = -1;
			}

			if (isset($addGroups[$group_id]))
			{
				unset($addGroups[$group_id]);
			}

			$newPrimary = $group_id;
		}

		// Finally, we can make the changes!
		foreach (array_keys($addGroups) as $id)
		{
			if (empty($id))
			{
				unset($addGroups[$id]);
			}
		}

		$addGroups = implode(',', array_flip($addGroups));

		// Ensure that we don't cache permissions if the group is changing.
		if ($context['user']['is_owner'])
		{
			$_SESSION['mc']['time'] = 0;
		}
		else
		{
			updateSettings(['settings_updated' => time()]);
		}

		require_once(SUBSDIR . '/Members.subs.php');
		updateMemberData($this->_memID, ['id_group' => $newPrimary, 'additional_groups' => $addGroups]);

		return $changeType;
	}