shimmie2/ext/admin/main.php

<?php declare(strict_types=1);

/**
 * Sent when the admin page is ready to be added to
 */
class AdminBuildingEvent extends Event
{
    /** @var Page */
    public $page;

    public function __construct(Page $page)
    {
        parent::__construct();
        $this->page = $page;
    }
}

class AdminActionEvent extends Event
{
    /** @var string */
    public $action;
    /** @var bool */
    public $redirect = true;

    public function __construct(string $action)
    {
        parent::__construct();
        $this->action = $action;
    }
}

class AdminPage extends Extension
{
    /** @var AdminPageTheme */
    protected $theme;

    public function onPageRequest(PageRequestEvent $event)
    {
        global $page, $user;

        if ($event->page_matches("admin")) {
            if (!$user->can(Permissions::MANAGE_ADMINTOOLS)) {
                $this->theme->display_permission_denied();
            } else {
                if ($event->count_args() == 0) {
                    send_event(new AdminBuildingEvent($page));
                } else {
                    $action = $event->get_arg(0);
                    $aae = new AdminActionEvent($action);

                    if ($user->check_auth_token()) {
                        log_info("admin", "Util: $action");
                        set_time_limit(0);
                        send_event($aae);
                    }

                    if ($aae->redirect) {
                        $page->set_mode(PageMode::REDIRECT);
                        $page->set_redirect(make_link("admin"));
                    }
                }
            }
        }
    }

    public function onCommand(CommandEvent $event)
    {
        if ($event->cmd == "help") {
            print "\tget-page <query string>\n";
            print "\t\teg 'get-page post/list'\n\n";
            print "\tpost-page <query string> <urlencoded params>\n";
            print "\t\teg 'post-page ip_ban/delete id=1'\n\n";
            print "\tget-token\n";
            print "\t\tget a CSRF auth token\n\n";
            print "\tregen-thumb <id / hash>\n";
            print "\t\tregenerate a thumbnail\n\n";
        }
        if ($event->cmd == "get-page") {
            global $page;
            if (isset($event->args[1])) {
                parse_str($event->args[1], $_GET);
            }
            send_event(new PageRequestEvent($event->args[0]));
            $page->display();
        }
        if ($event->cmd == "post-page") {
            global $page;
            $_SERVER['REQUEST_METHOD'] = "POST";
            if (isset($event->args[1])) {
                parse_str($event->args[1], $_POST);
            }
            send_event(new PageRequestEvent($event->args[0]));
            $page->display();
        }
        if ($event->cmd == "get-token") {
            global $user;
            print($user->get_auth_token());
        }
        if ($event->cmd == "regen-thumb") {
            $uid = $event->args[0];
            $image = Image::by_id_or_hash($uid);
            if ($image) {
                send_event(new ThumbnailGenerationEvent($image->hash, $image->ext, true));
            } else {
                print("No post with ID '$uid'\n");
            }
        }
    }

    public function onAdminBuilding(AdminBuildingEvent $event)
    {
        $this->theme->display_page();
        $this->theme->display_form();
    }

    public function onPageSubNavBuilding(PageSubNavBuildingEvent $event)
    {
        global $user;
        if ($event->parent==="system") {
            if ($user->can(Permissions::MANAGE_ADMINTOOLS)) {
                $event->add_nav_link("admin", new Link('admin'), "Board Admin");
            }
        }
    }

    public function onUserBlockBuilding(UserBlockBuildingEvent $event)
    {
        global $user;
        if ($user->can(Permissions::MANAGE_ADMINTOOLS)) {
            $event->add_link("Board Admin", make_link("admin"));
        }
    }

    public function onAdminAction(AdminActionEvent $event)
    {
        $action = $event->action;
        if (method_exists($this, $action)) {
            $event->redirect = $this->$action();
        }
    }

    private function set_tag_case()
    {
        global $database;
        $database->execute($database->scoreql_to_sql(
            "UPDATE tags SET tag=:tag1 WHERE LOWER(tag) = LOWER(:tag2)"
        ), ["tag1" => $_POST['tag'], "tag2" => $_POST['tag']]);
        log_info("admin", "Fixed the case of ".html_escape($_POST['tag']), "Fixed case");
        return true;
    }

    private function lowercase_all_tags()
    {
        global $database;
        $database->execute("UPDATE tags SET tag=lower(tag)");
        log_warning("admin", "Set all tags to lowercase", "Set all tags to lowercase");
        return true;
    }

    private function recount_tag_use()
    {
        global $database;
        $database->Execute("
			UPDATE tags
			SET count = COALESCE(
				(SELECT COUNT(image_id) FROM image_tags WHERE tag_id=tags.id GROUP BY tag_id),
				0
			)
		");
        $database->Execute("DELETE FROM tags WHERE count=0");
        log_warning("admin", "Re-counted tags", "Re-counted tags");
        return true;
    }


    private function database_dump()
    {
        global $page;

        $matches = [];
        preg_match("#^(?P<proto>\w+)\:(?:user=(?P<user>\w+)(?:;|$)|password=(?P<password>\w*)(?:;|$)|host=(?P<host>[\w\.\-]+)(?:;|$)|dbname=(?P<dbname>[\w_]+)(?:;|$))+#", DATABASE_DSN, $matches);
        $software = $matches['proto'];
        $username = $matches['user'];
        $password = $matches['password'];
        $hostname = $matches['host'];
        $database = $matches['dbname'];

        switch ($software) {
            case DatabaseDriver::MYSQL:
                $cmd = "mysqldump -h$hostname -u$username -p$password $database";
                break;
            case DatabaseDriver::PGSQL:
                putenv("PGPASSWORD=$password");
                $cmd = "pg_dump -h $hostname -U $username $database";
                break;
            case DatabaseDriver::SQLITE:
                $cmd = "sqlite3 $database .dump";
                break;
            default:
                $cmd = false;
        }

        //FIXME: .SQL dump is empty if cmd doesn't exist

        if ($cmd) {
            $page->set_mode(PageMode::DATA);
            $page->set_type("application/x-unknown");
            $page->set_filename('shimmie-'.date('Ymd').'.sql');
            $page->set_data(shell_exec($cmd));
        }

        return false;
    }

    private function download_all_images()
    {
        global $database, $page;

        $images = $database->get_all("SELECT hash, ext FROM images");
        $filename = data_path('imgdump-'.date('Ymd').'.zip');

        $zip = new ZipArchive;
        if ($zip->open($filename, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE) === true) {
            foreach ($images as $img) {
                $img_loc = warehouse_path(Image::IMAGE_DIR, $img["hash"], false);
                $zip->addFile($img_loc, $img["hash"].".".$img["ext"]);
            }
            $zip->close();
        }

        $page->set_mode(PageMode::REDIRECT);
        $page->set_redirect(make_link($filename)); //TODO: Delete file after downloaded?

        return false;  // we do want a redirect, but a manual one
    }

    private function reset_image_ids()
    {
        global $database;

        //TODO: Make work with PostgreSQL + SQLite
        //TODO: Update score_log (Having an optional ID column for score_log would be nice..)
        preg_match("#^(?P<proto>\w+)\:(?:user=(?P<user>\w+)(?:;|$)|password=(?P<password>\w*)(?:;|$)|host=(?P<host>[\w\.\-]+)(?:;|$)|dbname=(?P<dbname>[\w_]+)(?:;|$))+#", DATABASE_DSN, $matches);

        if ($matches['proto'] == DatabaseDriver::MYSQL) {
            $tables = $database->get_col("SELECT TABLE_NAME
			                              FROM information_schema.KEY_COLUMN_USAGE
			                              WHERE TABLE_SCHEMA = :db
			                              AND REFERENCED_COLUMN_NAME = 'id'
			                              AND REFERENCED_TABLE_NAME = 'images'", ["db" => $matches['dbname']]);

            $i = 1;
            $ids = $database->get_col("SELECT id FROM images ORDER BY images.id ASC");
            foreach ($ids as $id) {
                $sql = "SET FOREIGN_KEY_CHECKS=0;
				        UPDATE images SET id={$i} WHERE image_id={$id};";

                foreach ($tables as $table) {
                    $sql .= "UPDATE {$table} SET image_id={$i} WHERE image_id={$id};";
                }

                $sql .= " SET FOREIGN_KEY_CHECKS=1;";
                $database->execute($sql);

                $i++;
            }
            $database->execute("ALTER TABLE images AUTO_INCREMENT=".(count($ids) + 1));
        } elseif ($matches['proto'] == DatabaseDriver::PGSQL) {
            throw new SCoreException("TODO: Make this work with PostgreSQL");
        } elseif ($matches['proto'] == DatabaseDriver::SQLITE) {
            throw new SCoreException("TODO: Make this work with SQLite");
        }
        return true;
    }
}