app/Module/UserJournalModule.php

<?php
/**
 * webtrees: online genealogy
 * Copyright (C) 2018 webtrees development team
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <http://www.gnu.org/licenses/>.
 */
namespace Fisharebest\Webtrees\Module;

use Fisharebest\Webtrees\Auth;
use Fisharebest\Webtrees\Database;
use Fisharebest\Webtrees\I18N;
use Fisharebest\Webtrees\Tree;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;

/**
 * Class UserJournalModule
 */
class UserJournalModule extends AbstractModule implements ModuleBlockInterface {
	/**
	 * Create a new module.
	 *
	 * @param string $directory Where is this module installed
	 */
	public function __construct($directory) {
		parent::__construct($directory);

		// Create/update the database tables.
		Database::updateSchema('\Fisharebest\Webtrees\Module\FamilyTreeNews\Schema', 'NB_SCHEMA_VERSION', 3);
	}

	/**
	 * How should this module be labelled on tabs, menus, etc.?
	 *
	 * @return string
	 */
	public function getTitle() {
		return /* I18N: Name of a module */ I18N::translate('Journal');
	}

	/**
	 * A sentence describing what this module does.
	 *
	 * @return string
	 */
	public function getDescription() {
		return /* I18N: Description of the “Journal” module */ I18N::translate('A private area to record notes or keep a journal.');
	}

	/**
	 * Generate the HTML content of this block.
	 *
	 * @param Tree     $tree
	 * @param int      $block_id
	 * @param bool     $template
	 * @param string[] $cfg
	 *
	 * @return string
	 */
	public function getBlock(Tree $tree, int $block_id, bool $template = true, array $cfg = []): string {
		$articles = Database::prepare(
			"SELECT news_id, user_id, gedcom_id, UNIX_TIMESTAMP(updated) + :offset AS updated, subject, body FROM `##news` WHERE user_id = :user_id ORDER BY updated DESC"
		)->execute([
			'offset'  => WT_TIMESTAMP_OFFSET,
			'user_id' => Auth::id(),
		])->fetchAll();

		$content = view('modules/user_blog/list', [
			'articles' => $articles,
			'block_id' => $block_id,
			'limit'    => 5,
		]);

		if ($template) {
			return view('modules/block-template', [
				'block'      => str_replace('_', '-', $this->getName()),
				'id'         => $block_id,
				'config_url' => '',
				'title'      => $this->getTitle(),
				'content'    => $content,
			]);
		} else {
			return $content;
		}
	}

	/** {@inheritdoc} */
	public function loadAjax(): bool {
		return false;
	}

	/** {@inheritdoc} */
	public function isUserBlock(): bool {
		return true;
	}

	/** {@inheritdoc} */
	public function isGedcomBlock(): bool {
		return false;
	}

	/**
	 * An HTML form to edit block settings
	 *
	 * @param Tree $tree
	 * @param int  $block_id
	 *
	 * @return void
	 */
	public function configureBlock(Tree $tree, int $block_id) {
	}

	/**
	 * @param Request $request
	 *
	 * @return Response
	 */
	public function getEditJournalAction(Request $request): Response {
		if (!Auth::check()) {
			throw new AccessDeniedHttpException;
		}

		$news_id = $request->get('news_id');

		if ($news_id > 0) {
			$row = Database::prepare(
				"SELECT subject, body FROM `##news` WHERE news_id = :news_id AND user_id = :user_id"
			)->execute([
				'news_id' => $news_id,
				'user_id' => Auth::id(),
			])->fetchOneRow();
		} else {
			$row = (object) [
				'body'    => '',
				'subject' => '',
			];
		}

		$title = I18N::translate('Add/edit a journal/news entry');

		return $this->viewResponse('modules/user_blog/edit', [
			'body'    => $row->body,
			'news_id' => $news_id,
			'subject' => $row->subject,
			'title'   => $title,
		]);
	}

	/**
	 * @param Request $request
	 *
	 * @return RedirectResponse
	 */
	public function postEditJournalAction(Request $request): RedirectResponse {
		/** @var Tree $tree */
		$tree = $request->attributes->get('tree');

		if (!Auth::check()) {
			throw new AccessDeniedHttpException;
		}

		$news_id = $request->get('news_id');
		$subject = $request->get('subject');
		$body    = $request->get('body');

		if ($news_id > 0) {
			Database::prepare(
				"UPDATE `##news` SET subject = :subject, body = :body, updated = CURRENT_TIMESTAMP" .
				" WHERE news_id = :news_id AND user_id = :user_id"
			)->execute([
				'subject' => $subject,
				'body'    => $body,
				'news_id' => $news_id,
				'user_id' => Auth::id(),
			]);
		} else {
			Database::prepare(
				"INSERT INTO `##news` (user_id, subject, body, updated) VALUES (:user_id, :subject ,:body, CURRENT_TIMESTAMP)"
			)->execute([
				'body'    => $body,
				'subject' => $subject,
				'user_id' => Auth::id(),
			]);
		}

		$url = route('user-page', [
			'ged' => $tree->getName(),
		]);

		return new RedirectResponse($url);
	}

	/**
	 * @param Request $request
	 *
	 * @return RedirectResponse
	 */
	public function postDeleteJournalAction(Request $request): RedirectResponse {
		/** @var Tree $tree */
		$tree = $request->attributes->get('tree');

		$news_id = $request->get('news_id');

		if (!Auth::check()) {
			throw new AccessDeniedHttpException;
		}

		Database::prepare(
			"DELETE FROM `##news` WHERE news_id = :news_id AND user_id = :user_id"
		)->execute([
			'news_id' => $news_id,
			'user_id' => Auth::id(),
		]);

		$url = route('user-page', [
			'ged' => $tree->getName(),
		]);

		return new RedirectResponse($url);
	}
}