stwalkerster / waca

includes/Pages/PageDomainManagement.php

<?php
/******************************************************************************
 * Wikipedia Account Creation Assistance tool                                 *
 *                                                                            *
 * All code in this file is released into the public domain by the ACC        *
 * Development Team. Please see team.json for a list of contributors.         *
 ******************************************************************************/

namespace Waca\Pages;

use Waca\DataObjects\Domain;
use Waca\DataObjects\EmailTemplate;
use Waca\DataObjects\User;
use Waca\Exceptions\AccessDeniedException;
use Waca\Helpers\Logger;
use Waca\SessionAlert;
use Waca\Tasks\InternalPageBase;
use Waca\WebRequest;

class PageDomainManagement extends InternalPageBase
{
    protected function main()
    {
        $this->setHtmlTitle('Domain Management');

        $database = $this->getDatabase();
        $currentUser = User::getCurrent($database);

        /** @var Domain[] $domains */
        $domains = Domain::getAll($database);

        $templates = [];
        foreach ($domains as $domain) {
            if ($domain->getDefaultClose() !== null) {
                $templates[$domain->getDefaultClose()] = EmailTemplate::getById($domain->getDefaultClose(), $database);
            }
        }

        $canEdit = $this->barrierTest('edit', $currentUser);
        $canEditAll = $this->barrierTest('editAll', $currentUser);
        $canCreate = $this->barrierTest('create', $currentUser);
        $this->assign('canEdit', $canEdit);
        $this->assign('canEditAll', $canEditAll);
        $this->assign('canCreate', $canCreate);

        $this->assign('domains', $domains);
        $this->assign('closeTemplates', $templates);
        $this->assign('currentDomain', Domain::getCurrent($database));
        $this->setTemplate('domain-management/main.tpl');
    }

    protected function create()
    {
        $this->setHtmlTitle('Domain Management');
        $database = $this->getDatabase();
        $currentUser = User::getCurrent($database);

        // quickly check the user is allowed to edit all fields. If not, then they shouldn't be allowed to create
        // new domains either. With any luck, a competent developer would never grant create without editAll to a role
        // anyway, so this will never be hit.
        if (!$this->barrierTest('editAll', $currentUser)) {
            throw new AccessDeniedException($this->getSecurityManager(), $this->getDomainAccessManager());
        }

        if (WebRequest::wasPosted()) {
            $this->validateCSRFToken();

            $domain = new Domain();
            $domain->setDatabase($database);

            $domain->setShortName(WebRequest::postString('shortName'));

It seems like Waca\WebRequest::postString('shortName') can also be of type null; however, parameter $shortName of Waca\DataObjects\Domain::setShortName() does only seem to accept string, maybe add an additional type check?

            $domain->setLongName(WebRequest::postString('longName'));

It seems like Waca\WebRequest::postString('longName') can also be of type null; however, parameter $longName of Waca\DataObjects\Domain::setLongName() does only seem to accept string, maybe add an additional type check?

            $domain->setWikiArticlePath(WebRequest::postString('articlePath'));

It seems like Waca\WebRequest::postString('articlePath') can also be of type null; however, parameter $wikiArticlePath of Waca\DataObjects\Domain::setWikiArticlePath() does only seem to accept string, maybe add an additional type check?

            $domain->setWikiApiPath(WebRequest::postString('apiPath'));

It seems like Waca\WebRequest::postString('apiPath') can also be of type null; however, parameter $wikiApiPath of Waca\DataObjects\Domain::setWikiApiPath() does only seem to accept string, maybe add an additional type check?

            $domain->setEnabled(WebRequest::postBoolean('enabled'));
            $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage'));

It seems like Waca\WebRequest::postString('defaultLanguage') can also be of type null; however, parameter $defaultLanguage of Waca\DataObjects\Domain::setDefaultLanguage() does only seem to accept string, maybe add an additional type check?

            $domain->setDefaultClose(null);
            $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo'));

It seems like Waca\WebRequest::postString('emailReplyTo') can also be of type null; however, parameter $emailReplyAddress of Waca\DataObjects\Domain::setEmailReplyAddress() does only seem to accept string, maybe add an additional type check?

            $domain->setNotificationTarget(WebRequest::postString('notificationTarget'));
            $domain->setLocalDocumentation(WebRequest::postString('localDocumentation'));

It seems like Waca\WebRequest::postString('localDocumentation') can also be of type null; however, parameter $localDocumentation of Waca\DataObjects\Domain::setLocalDocumentation() does only seem to accept string, maybe add an additional type check?

            $domain->save();

            Logger::domainCreated($database, $domain);
            $this->redirect('domainManagement');
        }
        else {
            $this->assignCSRFToken();

            $this->assign('shortName', '');
            $this->assign('longName', '');
            $this->assign('articlePath', '');
            $this->assign('apiPath', '');
            $this->assign('enabled', false);
            $this->assign('defaultLanguage', 'en');
            $this->assign('emailReplyTo', '');
            $this->assign('notificationTarget', '');
            $this->assign('localDocumentation', '');

            $this->assign('createMode', true);
            $this->assign('canEditAll', true);

            $this->setTemplate('domain-management/edit.tpl');
        }
    }

    protected function edit()
    {
        $this->setHtmlTitle('Domain Management');
        $database = $this->getDatabase();
        $currentUser = User::getCurrent($database);

        $canEditAll = $this->barrierTest('editAll', $currentUser);

        /** @var Domain $domain */
        $domain = Domain::getById(WebRequest::getInt('domain'), $database);

        if (WebRequest::wasPosted()) {
            $this->validateCSRFToken();

            $domain->setLongName(WebRequest::postString('longName'));

It seems like Waca\WebRequest::postString('longName') can also be of type null; however, parameter $longName of Waca\DataObjects\Domain::setLongName() does only seem to accept string, maybe add an additional type check?

            $domain->setDefaultLanguage(WebRequest::postString('defaultLanguage'));

It seems like Waca\WebRequest::postString('defaultLanguage') can also be of type null; however, parameter $defaultLanguage of Waca\DataObjects\Domain::setDefaultLanguage() does only seem to accept string, maybe add an additional type check?

            $domain->setLocalDocumentation(WebRequest::postString('localDocumentation'));

It seems like Waca\WebRequest::postString('localDocumentation') can also be of type null; however, parameter $localDocumentation of Waca\DataObjects\Domain::setLocalDocumentation() does only seem to accept string, maybe add an additional type check?

            /** @var EmailTemplate $template */
            $template = EmailTemplate::getById(WebRequest::postInt('defaultClose'), $database);
            if ($template->getActive()
                && $template->getPreloadOnly() === false
                && $template->getDefaultAction() === EmailTemplate::ACTION_CREATED) {
                $domain->setDefaultClose(WebRequest::postInt('defaultClose'));
            }
            else {
                SessionAlert::warning("Chosen email template is not valid for use as the default creation template");
            }

            if ($canEditAll) {
                $domain->setWikiArticlePath(WebRequest::postString('articlePath'));

It seems like Waca\WebRequest::postString('articlePath') can also be of type null; however, parameter $wikiArticlePath of Waca\DataObjects\Domain::setWikiArticlePath() does only seem to accept string, maybe add an additional type check?

                $domain->setWikiApiPath(WebRequest::postString('apiPath'));

It seems like Waca\WebRequest::postString('apiPath') can also be of type null; however, parameter $wikiApiPath of Waca\DataObjects\Domain::setWikiApiPath() does only seem to accept string, maybe add an additional type check?

                $domain->setEnabled(WebRequest::postBoolean('enabled'));
                $domain->setEmailReplyAddress(WebRequest::postString('emailReplyTo'));

It seems like Waca\WebRequest::postString('emailReplyTo') can also be of type null; however, parameter $emailReplyAddress of Waca\DataObjects\Domain::setEmailReplyAddress() does only seem to accept string, maybe add an additional type check?

                $domain->setNotificationTarget(WebRequest::postString('notificationTarget'));
            }

            $domain->save();

            Logger::domainEdited($database, $domain);
            $this->redirect('domainManagement');
        }
        else {
            $this->assignCSRFToken();

            $templates = EmailTemplate::getActiveNonpreloadTemplates(EmailTemplate::ACTION_CREATED, $database);
            $this->assign('closeTemplates', $templates);

            $this->assign('shortName', $domain->getShortName());
            $this->assign('longName', $domain->getLongName());
            $this->assign('articlePath', $domain->getWikiArticlePath());
            $this->assign('apiPath', $domain->getWikiApiPath());
            $this->assign('enabled', $domain->isEnabled());
            $this->assign('defaultClose', $domain->getDefaultClose());
            $this->assign('defaultLanguage', $domain->getDefaultLanguage());
            $this->assign('emailReplyTo', $domain->getEmailReplyAddress());
            $this->assign('notificationTarget', $domain->getNotificationTarget());
            $this->assign('localDocumentation', $domain->getLocalDocumentation());


            $this->assign('createMode', false);
            $this->assign('canEditAll', $canEditAll);

            $this->setTemplate('domain-management/edit.tpl');
        }
    }
}