class.ilUserAutoComplete.php

Go to the documentation of this file.

<?php
/* Copyright (c) 1998-2013 ILIAS open source, Extended GPL, see docs/LICENSE */

class ilUserAutoComplete
{
        const SEARCH_TYPE_LIKE = 1;

        const SEARCH_TYPE_EQUALS = 2;

        const PRIVACY_MODE_RESPECT_USER_SETTING = 1;

        const PRIVACY_MODE_IGNORE_USER_SETTING = 2;

        private $searchable_check = false;

        private $user_access_check = true;

        private $possible_fields = array();

        private $result_field;

        private $search_type;

        private $privacy_mode;

        private $user;

        public function __construct()
        {
                $this->result_field = 'login';

                $this->setSearchType(self::SEARCH_TYPE_LIKE);
                $this->setPrivacyMode(self::PRIVACY_MODE_IGNORE_USER_SETTING);
        }

        public function setSearchType($search_type)
        {
                $this->search_type = $search_type;
        }

        public function getSearchType()
        {
                return $this->search_type;
        }

        public function setPrivacyMode($privacy_mode)
        {
                $this->privacy_mode = $privacy_mode;
        }

        public function getPrivacyMode()
        {
                return $this->privacy_mode;
        }

        public function setUser($user)
        {
                $this->user = $user;
        }

        public function getUser()
        {
                return $this->user;
        }

        public function enableFieldSearchableCheck($a_status)
        {
                $this->searchable_check = $a_status;
        }

        public function isFieldSearchableCheckEnabled()
        {
                return $this->searchable_check;
        }

        public function enableUserAccessCheck($a_status)
        {
                $this->user_access_check = $a_status;
        }

        public function isUserAccessCheckEnabled()
        {
                return $this->user_access_check;
        }

        public function setSearchFields($a_fields)
        {
                $this->possible_fields = $a_fields;
        }

        public function getSearchFields()
        {
                return $this->possible_fields;
        }

        protected function getFields()
        {
                if(!$this->isFieldSearchableCheckEnabled())
                {
                        return $this->getSearchFields();
                }
                $available_fields = array();
                foreach($this->getSearchFields() as $field)
                {
                        include_once 'Services/Search/classes/class.ilUserSearchOptions.php';
                        if(ilUserSearchOptions::_isEnabled($field))
                        {
                                $available_fields[] = $field;
                        }
                }
                return $available_fields;
        }

        public function setResultField($a_field)
        {
                $this->result_field = $a_field;
        }

        public function getList($a_str)
        {
                global $ilDB, $ilLog;

                $select_part   = $this->getSelectPart();
                $where_part    = $this->getWherePart($a_str);
                $order_by_part = $this->getOrderByPart();
                $query         = implode(" ", array(
                        'SELECT ' . $select_part,
                        'FROM ' . $this->getFromPart(),
                        $where_part ? 'WHERE ' . $where_part : '',
                        $order_by_part ? 'ORDER BY ' . $order_by_part : ''
                ));

                $ilLog->write(__METHOD__ . ': Query: ' . $query);

                $res = $ilDB->query($query);

                // add email only if it is "searchable"
                $add_email = true;
                include_once 'Services/Search/classes/class.ilUserSearchOptions.php';
                if($this->isFieldSearchableCheckEnabled() && !ilUserSearchOptions::_isEnabled("email"))
                {
                        $add_email = false;
                }

                include_once './Services/Search/classes/class.ilSearchSettings.php';
                $max = ilSearchSettings::getInstance()->getAutoCompleteLength();
                $cnt    = 0;
                $result = array();
                while(($rec = $ilDB->fetchAssoc($res)) && $cnt < $max)
                {
                        // @todo: Open discussion: We should remove all non public fields from result
                        $label = $rec['lastname'] . ', ' . $rec['firstname'] . ' [' . $rec['login'] . ']';

                        if($add_email && $rec['email'] && (self::PRIVACY_MODE_RESPECT_USER_SETTING != $this->getPrivacyMode() || 'y' == $rec['email_value']))
                        {
                                $label .= ', ' . $rec['email'];
                        }

                        $result[$cnt]        = new stdClass();
                        $result[$cnt]->value = (string)$rec[$this->result_field];
                        $result[$cnt]->label = $label;
                        $cnt++;
                }

                include_once 'Services/JSON/classes/class.ilJsonUtil.php';
                return ilJsonUtil::encode($result);
        }

        protected function getSelectPart()
        {
                $fields = array(
                        'login',
                        'firstname',
                        'lastname',
                        'email'
                );

                if(self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode())
                {
                        $fields[] = 'profpref.value profile_value';
                        $fields[] = 'pubemail.value email_value';
                }

                return implode(', ', $fields);
        }

        protected function getFromPart()
        {
                global $ilDB;

                $joins = array();

                if(self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode())
                {
                        $joins[] = 'LEFT JOIN usr_pref profpref
                                ON profpref.usr_id = usr_data.usr_id
                                AND profpref.keyword = ' . $ilDB->quote('public_profile', 'text');

                        $joins[] = 'LEFT JOIN usr_pref pubemail
                                ON pubemail.usr_id = usr_data.usr_id
                                AND pubemail.keyword = ' . $ilDB->quote('public_email', 'text');
                }

                if($joins)
                {
                        return 'usr_data ' . implode(' ', $joins);
                }
                else
                {
                        return 'usr_data ';
                }
        }

        protected function getWherePart($search_query)
        {
                global $ilDB, $ilSetting;

                $outer_conditions = array();

                // In 'anonymous' context with respected user privacy, only users with globally published profiles should be found.
                if(self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode() &&
                        $this->getUser() instanceof ilObjUser &&
                        $this->getUser()->isAnonymous()
                )
                {
                        if(!$ilSetting->get('enable_global_profiles', 0))
                        {
                                // If 'Enable User Content Publishing' is not set in the administration, no user should be found for 'anonymous' context.
                                return '1 = 2';
                        }
                        else
                        {
                                // Otherwise respect the profile activation setting of every user (as a global (outer) condition in the where clause).
                                $outer_conditions[] = 'profpref.value = ' . $ilDB->quote('g', 'text');
                        }
                }

                $outer_conditions[] =  'usr_data.usr_id != ' . $ilDB->quote(ANONYMOUS_USER_ID, 'integer');

                $field_conditions = array();
                foreach($this->getFields() as $field)
                {
                        $field_condition = $this->getQueryConditionByFieldAndValue($field, $search_query);

                        if('email' == $field && self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode())
                        {
                                // If privacy should be respected, the profile setting of every user concerning the email address has to be
                                // respected (in every user context, no matter if the user is 'logged in' or 'anonymous'). 
                                $email_query        = array();
                                $email_query[]      = $field_condition;
                                $email_query[]      = 'pubemail.value = ' . $ilDB->quote('y', 'text');
                                $field_conditions[] = '(' . implode(' AND ', $email_query) . ')';
                        }
                        else
                        {
                                $field_conditions[] = $field_condition;
                        }
                }

                // If the current user context ist 'logged in' and privacy should be respected, all fields >>>except the login<<<
                // should only be searchable if the users' profile is published (y oder g)
                // In 'anonymous' context we do not need this additional conditions,
                // because we checked the privacy setting in the condition above: profile = 'g' 
                if(self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode() &&
                        $this->getUser() instanceof ilObjUser && !$this->getUser()->isAnonymous() &&
                        $field_conditions
                )
                {
                        $fields = implode(' OR ', $field_conditions);

                        $field_conditions[] = '(' . implode(' AND ', array(
                                $fields,
                                $ilDB->in('profpref.value', array('y', 'g'), false, 'text')
                        )) . ')';
                }

                // The login field must be searchable regardless (for 'logged in' users) of any privacy settings.
                // We handled the general condition for 'anonymous' context above: profile = 'g' 
                $field_conditions[] = $this->getQueryConditionByFieldAndValue('login', $search_query);

                include_once 'Services/User/classes/class.ilUserAccountSettings.php';
                if(ilUserAccountSettings::getInstance()->isUserAccessRestricted())
                {
                        include_once './Services/User/classes/class.ilUserFilter.php';
                        $outer_conditions[] = $ilDB->in('time_limit_owner', ilUserFilter::getInstance()->getFolderIds(), false, 'integer');
                }

                if($field_conditions)
                {
                        $outer_conditions[] = '(' . implode(' OR ', $field_conditions) . ')';
                }

                return implode(' AND ', $outer_conditions);
        }

        protected function getOrderByPart()
        {
                return 'login ASC';
        }

        protected function getQueryConditionByFieldAndValue($field, $a_str)
        {
                global $ilDB;
                
                // #14768
                if(!stristr($a_str, '\\'))
                {
                        $a_str = str_replace('%', '\%', $a_str);
                        $a_str = str_replace('_', '\_', $a_str);
                }

                if(self::SEARCH_TYPE_LIKE == $this->getSearchType())
                {
                        return $ilDB->like($field, 'text', $a_str . '%');
                }
                else
                {
                        return $ilDB->like($field, 'text', $a_str);
                }
        }
}