/controllers/project.php
PHP | 215 lines | 174 code | 41 blank | 0 comment | 16 complexity | 0711f5af0061164ecf486d920359adb1 MD5 | raw file
- <?php
- function project_view()
- {
- Security_Authorize();
-
- $result = mysql_query("SELECT * FROM project WHERE id='" . params('id') . "'");
- $project = mysql_fetch_array($result);
-
- if ($project != null)
- {
- $result = mysql_query("SELECT * FROM issue WHERE projectid='$project[id]' ORDER BY isurgent DESC, number ASC");
- while($row = mysql_fetch_array($result))
- {
- $sql = mysql_query("SELECT COUNT(*) AS rowcount FROM comment WHERE issueid='$row[id]'");
- $return = mysql_fetch_array($sql);
- $count = $return[rowcount];
-
- $sql = mysql_query("SELECT id, username FROM user WHERE id='$row[createdby]'");
- $user = mysql_fetch_array($sql);
-
- if ($row[isclosed] == "0")
- $body .= "<div class='list-item issue open'>\n";
- else
- $body .= "<div class='list-item issue closed' style='display: none;'>\n";
-
- $body .= "<table cellpadding='0' cellspacing='0' style='width: 100%;'>\n";
- $body .= "<tr>\n";
- $body .= "<td valign='middle'>\n";
- $body .= "<h3>#$row[number] <a href='/issue/$row[id]'>" . FriendlyString($row[title], 62) . "</a></h3>";
- $body .= "</td>\n";
- $body .= "<td valign='middle' align='right'>\n";
- if ($row[isurgent] == "1")
- $body .= "<em class='urgent-indicator'>Urgent</em>";
- if ($row[isclosed] == "1")
- $body .= "<em class='closed-indicator'>Closed</em>";
- $body .= "</td>\n";
- $body .= "</tr>\n";
- $body .= "</table>\n";
- $body .= "<div id='issue$row[number]' class='wikiStyle truncate'>" . $row[body] . "</div>\n";
- $body .= "<br />\n";
- $body .= "<div class='options'>\n";
- if ($count == 1)
- $body .= "<a href='/issue/$row[id]'>$count comment</a>\n";
- else
- $body .= "<a href='/issue/$row[id]'>$count comments</a>\n";
- $body .= " Created " . FriendlyDate(1, strtotime($row[createddate])) . " by <a href='/user/$user[id]'>$user[username]</a>";
- $body .= "</div>\n";
-
- $body .= "</div>\n";
- }
-
- set("title", $project[name]);
- set("body", $body);
- set("project", $project);
- return html("project/view.php");
- }
- else
- {
- set("title", "Project Not Found");
- set("type", "project");
- return html("common/notfound.php");
- }
- }
-
- function project_list()
- {
- Security_Authorize();
-
- $result = mysql_query("SELECT * FROM project ORDER BY name ASC");
- while($row = mysql_fetch_array($result))
- {
- $sql = mysql_query("SELECT COUNT(*) AS rowcount FROM issue WHERE projectid='$row[id]' AND isclosed='0'");
- $return = mysql_fetch_array($sql);
- $open = $return['rowcount'];
-
- $sql = mysql_query("SELECT COUNT(*) AS rowcount FROM issue WHERE projectid='$row[id]' AND isclosed='1'");
- $return = mysql_fetch_array($sql);
- $closed = $return['rowcount'];
-
- $sql = mysql_query("SELECT COUNT(*) AS rowcount FROM issue WHERE projectid='$row[id]' AND isclosed='0' AND isurgent='1'");
- $return = mysql_fetch_array($sql);
- $urgent = $return['rowcount'];
-
- $body .= "<div class='list-item project'>\n";
- $body .= "<table cellpadding='0' cellspacing='0' style='width: 100%;'><tr>\n";
-
- $body .= "<td width='100%'>\n";
- $body .= "<h3><a href='/project/$row[id]'>" . FriendlyString($row['name'], 40) . "</a></h3><br />\n";
- $body .= "<p>" . FriendlyString($row['description'], 85) . "</p>\n";
- $body .= "</td>\n";
-
- $body .= "<td>\n";
- $body .= "<div class='counter'>\n";
- if ($urgent > 0)
- $body .= "<big class='urgent'>$open</big>\n";
- else
- $body .= "<big>$open</big>\n";
- $body .= "Open Issues\n";
- $body .= "</div>\n";
- $body .= "</td>\n";
-
- $body .= "<td>\n";
- $body .= "<div class='counter'>\n";
- $body .= "<big>$closed</big>\n";
- $body .= "Closed Issues\n";
- $body .= "</div>\n";
- $body .= "</td>\n";
-
- $body .= "</tr></table>\n";
- $body .= "</div>\n";
- }
-
- if (mysql_num_rows($result) == 0)
- {
- $body .= "<div class='list-item project'>\n";
- $body .= "<p>There are currently no projects to display.</p>\n";
- $body .= "</div>\n";
- }
-
- set("title", "Projects");
- set("body", $body);
- return html("project/list.php");
- }
-
- function project_add()
- {
- Security_Authorize();
-
- set("title", "New Project");
- return html("project/add.php");
- }
-
- function project_add_post()
- {
- Security_Authorize();
-
- $now = date("Y-m-d H:i:s");
- $sql = "INSERT INTO project (name, description, createdby, createddate) VALUES
- ('" . mysql_real_escape_string($_POST[name]) . "', '" . mysql_real_escape_string($_POST[description]) . "', '$_SESSION[CurrentUser_ID]', '" . $now . "')";
- if (!mysql_query($sql))
- {
- die('Error: ' . mysql_error());
- }
-
- $sql = mysql_query("SELECT * FROM project WHERE id='" . mysql_insert_id() . "'");
- $result = mysql_fetch_array($sql);
-
- LogActivity(1, $result[id], 1);
-
- header("Location: /&success=Your project was created successfully!");
- exit;
- }
-
- function project_edit()
- {
- Security_Authorize();
-
- $result = mysql_query("SELECT * FROM project WHERE id='" . params('id') . "'");
- $project = mysql_fetch_array($result);
-
- if ($project != null)
- {
- set("title", "Edit Project");
- set("project", $project);
- return html("project/edit.php");
- }
- else
- {
- set("title", "Project Not Found");
- set("type", "project");
- return html("common/notfound.php");
- }
- }
-
- function project_edit_post()
- {
- Security_Authorize();
-
- $now = date("Y-m-d H:i:s");
-
- $sql = "UPDATE project SET name='" . mysql_real_escape_string($_POST[name]) . "', description='" . mysql_real_escape_string($_POST[description]) . "' WHERE id='" . params('id') . "'";
- mysql_query($sql);
-
- LogActivity(1, params('id'), 2);
-
- header("Location: /project/" . params('id') . "&success=Your project was updated successfully!");
- exit;
- }
-
- function project_delete()
- {
- Security_Authorize();
-
- $sql = "DELETE FROM project WHERE id='" . params('id') . "'";
- mysql_query($sql);
-
- $sql = "SELECT * FROM issue WHERE projectid='" . params('id') . "'";
- $result = mysql_query($sql);
- while($row = mysql_fetch_array($result))
- {
- $sql = "DELETE FROM comment WHERE issueid='" . params('id') . "'";
- mysql_query($sql);
- }
-
- $sql = "DELETE FROM issue WHERE projectid='" . params('id') . "'";
- mysql_query($sql);
- PurgeActivity(1, params('id'));
-
- header("Location: /&success=Your project was deleted successfully!");
- exit;
- }
- ?>