del_item.php

Go to the documentation of this file.

<?php


require_once 'Smarty.class.php';
require_once 'sql.php';
require_once 'error.php';
require_once 'util.php';
require_once 'redirect.php';
require_once 'const.php';
require_once 'config.php';
require_once 'upload.php';


function del_item($smarty, $INPUT, $db) {
global $_SESSION, $validation_info;


$default = array(
);

$INPUT = array_merge($default, $INPUT);
$errors = check_input($INPUT, $validation_info); 

if ($debug_level > 10) {
         print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . join($errors, ", "),
                E_USER_ERROR); 
}


if (!empty($INPUT['file'])) {


        # just delete an attached file
        delete_file($INPUT['item'], $INPUT['id'], $INPUT['file']);


} else {

        if (!may_delete_item($INPUT['item'], $INPUT['id'], $db)) {
                do_template($smarty, 'no_delete.tpl' , $INPUT, FALSE);
                exit(0);
        }

        # delete the whole item
        do_delete_item($INPUT['item'], $INPUT['id'], $db);

}

}


function do_delete_item($item, $id, $db) {

        $sql_table = array (
                "article"    => "document",
                "book"       => "document",
                "file"        => "document",
                "url"        => "document",
                "collection" => "collection",
                "user"       => "user",
                "email"      => "email",
        );

        switch($item) {

        case "user":

                $p = array (
                        "tables"  => "collection",
                        "cond"    => "collection.user_id = $id",
                        "columns" => "id"
                );

                $ans = sql_query('select', $p, $db);

                foreach ($ans as $a) {
                        do_delete_item("collection",$a['id'], $db);
                }

                break;

        case "collection":

                $p = array (
                        "tables"  => "document, doc_type",
                        "cond"    => "document.collection_id = $id AND doc_type.id = document.doc_type_id",
                        "columns" => "document.id AS id, doc_type.name AS type"
                );

                $ans = sql_query('select', $p, $db);

                foreach ($ans as $a) {
                        do_delete_item($a['type'], $a['id'], $db);
                }

                break;

        case "email":
                break;

        default: // document

                $p = array (
                        "tables"  => "email",
                        "cond"    => "email.document_id = $id",
                        "columns" => "id"
                );

                $ans = sql_query('select', $p, $db);

                foreach ($ans as $a) {
                        do_delete_item("email",$a['id'], $db);
                }

                break;

        }


        $t = $sql_table[$item];

        $p = array (
                "table"  => $t,
                "cond"    => "id = $id",
        );

        sql_query('delete', $p, $db);

        # delete all attached documents

        $files = list_files($item, $id);

        foreach ($files as $f => $f_info) {
                delete_file($item, $id, $f);
        }

}


function may_delete_item($item, $id, $db) {

        $sql_table = array (
                "article"    => "document",
                "book"       => "document",
                "file"        => "document",
                "url"        => "document",
                "collection" => "collection",
                "user"       => "user",
                "email"      => "email",
        );

        $t = $sql_table[$item];

        $p = array (
                "tables"  => "state,$t",
                "cond"    => "state.id = $t.state_id AND $t.id = $id", 
                "columns" => "state.name AS state_name",
                "order" => "$t.id"
        );

        $ans = sql_query('select', $p, $db);
        
        if (empty($ans)) {
                user_error("No such item: $item, id=$id", E_USER_ERROR); 
        } 

        switch($item) {

        case "user":

                $ok = TRUE;

                $p = array (
                        "tables"  => "collection",
                        "cond"    => "collection.user_id = $id",
                        "columns" => "id"
                );

                $ans = sql_query('select', $p, $db);

                foreach ($ans as $a) {
                        $ok = $ok && may_delete_item("collection",$a['id'], $db);
                }

                break;

        case "collection":

                $ok = TRUE;

                $p = array (
                        "tables"  => "document, doc_type",
                        "cond"    => "document.collection_id = $id AND doc_type.id = document.doc_type_id",
                        "columns" => "document.id AS id, doc_type.name AS type"
                );

                $ans = sql_query('select', $p, $db);

                foreach ($ans as $a) {
                        $ok = $ok && may_delete_item($a['type'], $a['id'], $db);
                }

                break;

        case "email":
        case "file":
        case "url":
                $ok = TRUE;
                break;

        default:
                $ok =   ($ans[0]['state_name'] == "inactive") or
                        ($ans[0]['state_name'] == "new");
                break;
        }

        return $ok;
}


?>

---