class.ilUserAutoComplete.php

Go to the documentation of this file.

<?php

class ilUserAutoComplete
{
    public const MAX_ENTRIES = 1000;
    public const SEARCH_TYPE_LIKE = 1;
    public const SEARCH_TYPE_EQUALS = 2;
    public const PRIVACY_MODE_RESPECT_USER_SETTING = 1;
    public const PRIVACY_MODE_IGNORE_USER_SETTING = 2;

    private ?ilLogger $logger = null;
    private bool $searchable_check = false;
    private bool $user_access_check = true;
    private array $possible_fields = []; // Missing array type.
    private string $result_field;
    private int $search_type;
    private int $privacy_mode;
    private ?ilObjUser $user = null;
    private int $limit = 0;
    private bool $user_limitations = true;
    private bool $respect_min_search_character_count = true;
    private bool $more_link_available = false;
    protected ?Closure $user_filter = null;

    public function __construct()
    {
        global $DIC;

        $this->result_field = 'login';

        $this->setSearchType(self::SEARCH_TYPE_LIKE);
        $this->setPrivacyMode(self::PRIVACY_MODE_IGNORE_USER_SETTING);

        $this->logger = $DIC->logger()->user();
    }

    public function respectMinimumSearchCharacterCount(bool $a_status): void
    {
        $this->respect_min_search_character_count = $a_status;
    }

    public function getRespectMinimumSearchCharacterCount(): bool
    {
        return $this->respect_min_search_character_count;
    }

    public function addUserAccessFilterCallable(Closure $user_filter): void
    {
        $this->user_filter = $user_filter;
    }

    public function setLimit(int $a_limit): void
    {
        $this->limit = $a_limit;
    }

    public function getLimit(): int
    {
        return $this->limit;
    }

    public function setSearchType(int $search_type): void
    {
        $this->search_type = $search_type;
    }

    public function getSearchType(): int
    {
        return $this->search_type;
    }

    public function setPrivacyMode(int $privacy_mode): void
    {
        $this->privacy_mode = $privacy_mode;
    }

    public function getPrivacyMode(): int
    {
        return $this->privacy_mode;
    }

    public function setUser(ilObjUser $user): void
    {
        $this->user = $user;
    }

    public function getUser(): ?ilObjUser
    {
        return $this->user;
    }

    public function enableFieldSearchableCheck(bool $a_status): void
    {
        $this->searchable_check = $a_status;
    }

    public function isFieldSearchableCheckEnabled(): bool
    {
        return $this->searchable_check;
    }

    public function enableUserAccessCheck(bool $a_status): void
    {
        $this->user_access_check = $a_status;
    }

    public function isUserAccessCheckEnabled(): bool
    {
        return $this->user_access_check;
    }

    public function setSearchFields(array $a_fields): void // Missing array type.
    {
        $this->possible_fields = $a_fields;
    }

    public function getSearchFields(): array // Missing array type.
    {
        return $this->possible_fields;
    }

    protected function getFields(): array // Missing array type.
    {
        if (!$this->isFieldSearchableCheckEnabled()) {
            return $this->getSearchFields();
        }
        $available_fields = [];
        foreach ($this->getSearchFields() as $field) {
            if (ilUserSearchOptions::_isEnabled($field)) {
                $available_fields[] = $field;
            }
        }
        return $available_fields;
    }

    public function setResultField(string $a_field): void
    {
        $this->result_field = $a_field;
    }

    public function getList(string $a_str): string
    {
        global $DIC;
        $ilDB = $DIC->database();

        $parsed_query = $this->parseQueryString($a_str);

        if (ilStr::strLen($parsed_query['query']) < ilQueryParser::MIN_WORD_LENGTH) {
            $result_json['items'] = [];
            $result_json['hasMoreResults'] = false;
            $this->logger->debug('Autocomplete search rejected: minimum characters count.');
            return json_encode($result_json);
        }


        $select_part = $this->getSelectPart();
        $where_part = $this->getWherePart($parsed_query);
        $order_by_part = $this->getOrderByPart();
        $query = implode(" ", [
            'SELECT ' . $select_part,
            'FROM ' . $this->getFromPart(),
            $where_part ? 'WHERE ' . $where_part : '',
            $order_by_part ? 'ORDER BY ' . $order_by_part : ''
        ]);

        $this->logger->debug('Query: ' . $query);

        $res = $ilDB->query($query);

        // add email only if it is "searchable"
        $add_email = true;
        if ($this->isFieldSearchableCheckEnabled() && !ilUserSearchOptions::_isEnabled("email")) {
            $add_email = false;
        }

        $add_second_email = true;
        if ($this->isFieldSearchableCheckEnabled() && !ilUserSearchOptions::_isEnabled("second_email")) {
            $add_second_email = false;
        }

        $max = $this->getLimit() ?: ilSearchSettings::getInstance()->getAutoCompleteLength();
        $cnt = 0;
        $more_results = false;
        $result = [];
        $recs = [];
        $usrIds = [];
        while (($rec = $ilDB->fetchAssoc($res)) && $cnt < ($max + 1)) {
            if ($cnt >= $max && $this->isMoreLinkAvailable()) {
                $more_results = true;
                break;
            }
            $recs[$rec['usr_id']] = $rec;
            $usrIds[] = $rec['usr_id'];
            $cnt++;
        }
        $callable_name = null;
        if (is_callable($this->user_filter, true, $callable_name)) {
            $usrIds = call_user_func($this->user_filter, $usrIds);
        }
        foreach ($usrIds as $usr_id) {
            $rec = $recs[$usr_id];

            if (self::PRIVACY_MODE_RESPECT_USER_SETTING != $this->getPrivacyMode() || in_array($rec['profile_value'], ['y','g'])) {
                $label = $rec['lastname'] . ', ' . $rec['firstname'] . ' [' . $rec['login'] . ']';
            } else {
                $label = '[' . $rec['login'] . ']';
            }

            if ($add_email && $rec['email'] && (self::PRIVACY_MODE_RESPECT_USER_SETTING != $this->getPrivacyMode() || 'y' == $rec['email_value'])) {
                $label .= ', ' . $rec['email'];
            }

            if ($add_second_email && $rec['second_email'] && (self::PRIVACY_MODE_RESPECT_USER_SETTING != $this->getPrivacyMode() || 'y' == $rec['second_email_value'])) {
                $label .= ', ' . $rec['second_email'];
            }

            $result[$cnt]['value'] = (string) $rec[$this->result_field];
            $result[$cnt]['label'] = $label;
            $result[$cnt]['id'] = $rec['usr_id'];
            $cnt++;
        }

        $result_json['items'] = $result;
        $result_json['hasMoreResults'] = $more_results;

        $this->logger->dump($result_json, ilLogLevel::DEBUG);

        return json_encode($result_json, JSON_THROW_ON_ERROR);
    }

    protected function getSelectPart(): string
    {
        $fields = [
            'ud.usr_id',
            'ud.login',
            'ud.firstname',
            'ud.lastname',
            'ud.email',
            'ud.second_email'
        ];

        if (self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode()) {
            $fields[] = 'profpref.value profile_value';
            $fields[] = 'pubemail.value email_value';
            $fields[] = 'pubsecondemail.value second_email_value';
        }

        return implode(', ', $fields);
    }

    protected function getFromPart(): string
    {
        global $DIC;

        $ilDB = $DIC->database();

        $joins = [];

        if (self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode()) {
            $joins[] = 'LEFT JOIN usr_pref profpref
                                ON profpref.usr_id = ud.usr_id
                                AND profpref.keyword = ' . $ilDB->quote('public_profile', 'text');

            $joins[] = 'LEFT JOIN usr_pref pubemail
                                ON pubemail.usr_id = ud.usr_id
                                AND pubemail.keyword = ' . $ilDB->quote('public_email', 'text');

            $joins[] = 'LEFT JOIN usr_pref pubsecondemail
                                ON pubsecondemail.usr_id = ud.usr_id
                                AND pubsecondemail.keyword = ' . $ilDB->quote('public_second_email', 'text');
        }

        if ($joins) {
            return 'usr_data ud ' . implode(' ', $joins);
        } else {
            return 'usr_data ud';
        }
    }

    protected function getWherePart(array $search_query): string // Missing array type.
    {
        global $DIC;

        $ilDB = $DIC->database();
        $ilSetting = $DIC->settings();

        $outer_conditions = [];

        // In 'anonymous' context with respected user privacy, only users with globally published profiles should be found.
        if (self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode() &&
            $this->getUser() instanceof ilObjUser &&
            $this->getUser()->isAnonymous()
        ) {
            if (!$ilSetting->get('enable_global_profiles', '0')) {
                // If 'Enable User Content Publishing' is not set in the administration, no user should be found for 'anonymous' context.
                return '1 = 2';
            } else {
                // Otherwise respect the profile activation setting of every user (as a global (outer) condition in the where clause).
                $outer_conditions[] = 'profpref.value = ' . $ilDB->quote('g', 'text');
            }
        }

        $outer_conditions[] = 'ud.usr_id != ' . $ilDB->quote(ANONYMOUS_USER_ID, 'integer');

        $field_conditions = [];
        foreach ($this->getFields() as $field) {
            $field_condition = $this->getQueryConditionByFieldAndValue($field, $search_query);

            if ('email' == $field && self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode()) {
                // If privacy should be respected, the profile setting of every user concerning the email address has to be
                // respected (in every user context, no matter if the user is 'logged in' or 'anonymous').
                $email_query = [];
                $email_query[] = $field_condition;
                $email_query[] = 'pubemail.value = ' . $ilDB->quote('y', 'text');
                $field_conditions[] = '(' . implode(' AND ', $email_query) . ')';
            } elseif ('second_email' == $field && self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode()) {
                // If privacy should be respected, the profile setting of every user concerning the email address has to be
                // respected (in every user context, no matter if the user is 'logged in' or 'anonymous').
                $email_query = [];
                $email_query[] = $field_condition;
                $email_query[] = 'pubsecondemail.value = ' . $ilDB->quote('y', 'text');
                $field_conditions[] = '(' . implode(' AND ', $email_query) . ')';
            } else {
                $field_conditions[] = $field_condition;
            }
        }

        // If the current user context ist 'logged in' and privacy should be respected, all fields >>>except the login<<<
        // should only be searchable if the users' profile is published (y oder g)
        // In 'anonymous' context we do not need this additional conditions,
        // because we checked the privacy setting in the condition above: profile = 'g'
        if (self::PRIVACY_MODE_RESPECT_USER_SETTING == $this->getPrivacyMode() &&
            $this->getUser() instanceof ilObjUser && !$this->getUser()->isAnonymous() &&
            $field_conditions
        ) {
            $fields = '(' . implode(' OR ', $field_conditions) . ')';

            $field_conditions = [
                '(' . implode(' AND ', [
                $fields,
                $ilDB->in('profpref.value', ['y', 'g'], false, 'text')
                ]) . ')'
            ];
        }

        // The login field must be searchable regardless (for 'logged in' users) of any privacy settings.
        // We handled the general condition for 'anonymous' context above: profile = 'g'
        $field_conditions[] = $this->getQueryConditionByFieldAndValue('login', $search_query);

        if (ilUserAccountSettings::getInstance()->isUserAccessRestricted()) {
            $outer_conditions[] = $ilDB->in('time_limit_owner', ilUserFilter::getInstance()->getFolderIds(), false, 'integer');
        }

        if ($field_conditions) {
            $outer_conditions[] = '(' . implode(' OR ', $field_conditions) . ')';
        }

        $settings = ilSearchSettings::getInstance();

        if (!$settings->isInactiveUserVisible() && $this->getUserLimitations()) {
            $outer_conditions[] = "ud.active = " . $ilDB->quote(1, 'integer');
        }

        if (!$settings->isLimitedUserVisible() && $this->getUserLimitations()) {
            $unlimited = "ud.time_limit_unlimited = " . $ilDB->quote(1, 'integer');
            $from = "ud.time_limit_from < " . $ilDB->quote(time(), 'integer');
            $until = "ud.time_limit_until > " . $ilDB->quote(time(), 'integer');

            $outer_conditions[] = '(' . $unlimited . ' OR (' . $from . ' AND ' . $until . '))';
        }

        return implode(' AND ', $outer_conditions);
    }

    protected function getOrderByPart(): string
    {
        return 'login ASC';
    }

    protected function getQueryConditionByFieldAndValue(string $field, array $query): string // Missing array type.
    {
        global $DIC;

        $ilDB = $DIC->database();

        $query_strings = [$query['query']];

        if (array_key_exists($field, $query)) {
            $query_strings = [$query[$field]];
        } elseif (array_key_exists('parts', $query)) {
            $query_strings = $query['parts'];
        }

        $query_condition = '( ';
        $num = 0;
        foreach ($query_strings as $query_string) {
            if ($num++ > 0) {
                $query_condition .= ' OR ';
            }
            if (self::SEARCH_TYPE_LIKE == $this->getSearchType()) {
                $query_condition .= $ilDB->like($field, 'text', $query_string . '%');
            } else {
                $query_condition .= $ilDB->like($field, 'text', $query_string);
            }
        }
        $query_condition .= ')';
        return $query_condition;
    }

    public function setUserLimitations(bool $a_limitations): void
    {
        $this->user_limitations = $a_limitations;
    }

    public function getUserLimitations(): bool
    {
        return $this->user_limitations;
    }

    public function isMoreLinkAvailable(): bool
    {
        return $this->more_link_available;
    }

    public function setMoreLinkAvailable(bool $more_link_available): void
    {
        $this->more_link_available = $more_link_available;
    }

    public function parseQueryString(string $a_query): array // Missing array type.
    {
        $query = [];

        if (strpos($a_query, '\\') === false) {
            $a_query = str_replace(['%', '_'], ['\%', '\_'], $a_query);
        }

        $query['query'] = trim($a_query);

        // "," means fixed search for lastname, firstname
        if (strpos($a_query, ',')) {
            $comma_separated = explode(',', $a_query);

            if (count($comma_separated) == 2) {
                if (trim($comma_separated[0])) {
                    $query['lastname'] = trim($comma_separated[0]);
                }
                if (trim($comma_separated[1])) {
                    $query['firstname'] = trim($comma_separated[1]);
                }
            }
        } else {
            $whitespace_separated = explode(' ', $a_query);
            foreach ($whitespace_separated as $part) {
                if (trim($part)) {
                    $query['parts'][] = trim($part);
                }
            }
        }

        $this->logger->dump($query, ilLogLevel::DEBUG);

        return $query;
    }
}