. */ declare(strict_types=1); namespace Fisharebest\Webtrees\Module; use Fisharebest\Webtrees\Auth; use Fisharebest\Webtrees\Carbon; use Fisharebest\Webtrees\I18N; use Fisharebest\Webtrees\Services\HtmlService; use Fisharebest\Webtrees\Tree; use Illuminate\Database\Capsule\Manager as DB; use Illuminate\Support\Str; use InvalidArgumentException; use Psr\Http\Message\ResponseInterface; use Psr\Http\Message\ServerRequestInterface; use stdClass; use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException; use function assert; /** * Class FamilyTreeNewsModule */ class FamilyTreeNewsModule extends AbstractModule implements ModuleBlockInterface { use ModuleBlockTrait; /** @var HtmlService */ private $html_service; /** * HtmlBlockModule bootstrap. * * @param HtmlService $html_service */ public function boot(HtmlService $html_service): void { $this->html_service = $html_service; } /** * A sentence describing what this module does. * * @return string */ public function description(): string { /* I18N: Description of the “News” module */ return I18N::translate('Family news and site announcements.'); } /** * Generate the HTML content of this block. * * @param Tree $tree * @param int $block_id * @param string $context * @param string[] $config * * @return string */ public function getBlock(Tree $tree, int $block_id, string $context, array $config = []): string { $articles = DB::table('news') ->where('gedcom_id', '=', $tree->id()) ->orderByDesc('updated') ->get() ->map(static function (stdClass $row): stdClass { $row->updated = Carbon::make($row->updated); return $row; }); $content = view('modules/gedcom_news/list', [ 'articles' => $articles, 'block_id' => $block_id, 'limit' => 5, ]); if ($context !== self::CONTEXT_EMBED) { return view('modules/block-template', [ 'block' => Str::kebab($this->name()), 'id' => $block_id, 'config_url' => '', 'title' => $this->title(), 'content' => $content, ]); } return $content; } /** * How should this module be identified in the control panel, etc.? * * @return string */ public function title(): string { /* I18N: Name of a module */ return I18N::translate('News'); } /** * Should this block load asynchronously using AJAX? * * Simple blocks are faster in-line, more complex ones can be loaded later. * * @return bool */ public function loadAjax(): bool { return false; } /** * Can this block be shown on the user’s home page? * * @return bool */ public function isUserBlock(): bool { return false; } /** * Can this block be shown on the tree’s home page? * * @return bool */ public function isTreeBlock(): bool { return true; } /** * @param ServerRequestInterface $request * * @return ResponseInterface */ public function getEditNewsAction(ServerRequestInterface $request): ResponseInterface { $tree = $request->getAttribute('tree'); assert($tree instanceof Tree, new InvalidArgumentException()); if (!Auth::isManager($tree)) { throw new AccessDeniedHttpException(); } $news_id = $request->getQueryParams()['news_id'] ?? ''; if ($news_id !== '') { $row = DB::table('news') ->where('news_id', '=', $news_id) ->where('gedcom_id', '=', $tree->id()) ->first(); } else { $row = (object) [ 'body' => '', 'subject' => '', ]; } $title = I18N::translate('Add/edit a journal/news entry'); return $this->viewResponse('modules/gedcom_news/edit', [ 'body' => $row->body, 'news_id' => $news_id, 'subject' => $row->subject, 'title' => $title, ]); } /** * @param ServerRequestInterface $request * * @return ResponseInterface */ public function postEditNewsAction(ServerRequestInterface $request): ResponseInterface { $tree = $request->getAttribute('tree'); assert($tree instanceof Tree, new InvalidArgumentException()); if (!Auth::isManager($tree)) { throw new AccessDeniedHttpException(); } $news_id = $request->getQueryParams()['news_id'] ?? ''; $subject = $request->getParsedBody()['subject']; $body = $request->getParsedBody()['body']; $subject = $this->html_service->sanitize($subject); $body = $this->html_service->sanitize($body); if ($news_id > 0) { DB::table('news') ->where('news_id', '=', $news_id) ->where('gedcom_id', '=', $tree->id()) ->update([ 'body' => $body, 'subject' => $subject, ]); } else { DB::table('news')->insert([ 'body' => $body, 'subject' => $subject, 'gedcom_id' => $tree->id(), ]); } $url = route('tree-page', ['tree' => $tree->name()]); return redirect($url); } /** * @param ServerRequestInterface $request * * @return ResponseInterface */ public function postDeleteNewsAction(ServerRequestInterface $request): ResponseInterface { $tree = $request->getAttribute('tree'); $news_id = $request->getQueryParams()['news_id']; if (!Auth::isManager($tree)) { throw new AccessDeniedHttpException(); } DB::table('news') ->where('news_id', '=', $news_id) ->where('gedcom_id', '=', $tree->id()) ->delete(); $url = route('tree-page', ['tree' => $tree->name()]); return redirect($url); } }