PageRenderTime 72ms CodeModel.GetById 20ms RepoModel.GetById 1ms app.codeStats 0ms

/controller/api.class.php

https://github.com/nigelbaor/TeamToy
PHP | 2847 lines | 1587 code | 611 blank | 649 comment | 449 complexity | 954cd926360ca611ed4d81755197b24d MD5 | raw file
Possible License(s): AGPL-1.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php

    2. 

  2. if( !defined('IN') ) die('bad request');

    3. 

  3. include_once( AROOT . 'controller'.DS.'app.class.php' );

    4. 

  4. 

    5. 

  5. 

    6. 

  6. define( 'LR_API_TOKEN_ERROR' , 10001 );

    7. 

  7. define( 'LR_API_USER_ERROR' , 10002 );

    8. 

  8. define( 'LR_API_DB_ERROR' , 10004 );

    9. 

  9. define( 'LR_API_NOT_IMPLEMENT_YET' , 10005 );

    10. 

  10. define( 'LR_API_ARGS_ERROR' , 10006 );

    11. 

  11. define( 'LR_API_DB_EMPTY_RESULT' , 10007 );

    12. 

  12. define( 'LR_API_USER_CLOSED' , 10008 );

    13. 

  13. define( 'LR_API_FORBIDDEN' , 10009 );

    14. 

  14. define( 'LR_API_UPGRADE_ERROR' , 10010 );

    15. 

  15. define( 'LR_API_UPGRADE_ABORT' , 10011 );

    16. 

  16. 

    17. 

  17. /**

    18. 

  18.  * TeamToy Open Api

    19. 

  19.  *

    20. 

  20.  * @author easychen

    21. 

  21.  * @version $Id$

    22. 

  22.  * @package server

    23. 

  23.  *

    24. 

  24.  */

    25. 

  25. 

    26. 

  26. /**

    27. 

  27.  * apiController class

    28. 

  28.  * TeamToy OpenAPI实现

    29. 

  29.  *

    30. 

  30.  * <code>

    31. 

  31.  * <?php

    32. 

  32.  * $api_url = 'http://api.teamtoy.net/index.php';

    33. 

  33.  * $info = json_decode(file_get_contents( $api_url . '?c=api&a=user_get_token&password=******&email=abc@qq.com' ) , 1);

    34. 

  34.  * $token = $info['data']['token'];

    35. 

  35.  *

    36. 

  36.  * $todos = json_decode(file_get_contents( $api_url . '?c=api&a=todo_list&token=' . $token ) , 1);

    37. 

  37.  * print_r( $todos ); 

    38. 

  38.  *

    39. 

  39.  *

    40. 

  40.  * ?>

    41. 

  41.  * </code>

    42. 

  42.  *

    43. 

  43.  * 

    44. 

  44.  * @author easychen

    45. 

  45.  * @package server

    46. 

  46.  * 

    47. 

  47.  */

    48. 

  48. class apiController extends appController

    49. 

  49. {

    50. 

  50.     

    51. 

  51.     function __construct()

    52. 

  52.     {

    53. 

  53.         parent :: __construct();

    54. 

  54. 		apply_filter( 'API_' . g('a') .'_INPUT_FILTER' );

    55. 

  55. 		

    56. 

  56. 

    57. 

  57. 		$not_check = array( 'user_sign_up' , 'user_get_token'  );

    58. 

  58. 		$not_check = apply_filter('API_LOGIN_ACTION_FILTER' , $not_check );

    59. 

  59. 

    60. 

  60. 		if( !in_array( g('a') , $not_check )) $this->check_token();

    61. 

  61.     }

    62. 

  62. 

    63. 

  63.     public function __call( $method , $args)

    64. 

  64.     {

    65. 

  65.     	// 进入这里表示不存在当前调用的api(no public method)

    66. 

  66.     	return do_action( 'API_' . $method , $args );

    67. 

  67.     }

    68. 

  68. 	

    69. 

  69.     

    70. 

  70.  	/**

    71. 

  71.      * 用户注册

    72. 

  72.      *

    73. 

  73.      * 只有以管理员的token才能注册用户，否则需要激活码

    74. 

  74.      *

    75. 

  75.      * @param string name

    76. 

  76.      * @param string email

    77. 

  77.      * @param string password

    78. 

  78.      * @return user array

    79. 

  79.      * @author EasyChen

    80. 

  80.      */

    81. 

  81. 	public function user_sign_up()

    82. 

  82.     {

    83. 

  83. 		if( !not_empty( v( 'name' ) )) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'NAME' ) );

    84. 

  84.         

    85. 

  85. 		

    86. 

  86. 		if( !is_email( v( 'email' ) ) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_EMAIL') );

    87. 

  87.         

    88. 

  88. 		

    89. 

  89. 		if( strlen( v( 'password' ) ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'PASSWORD' ) );// actions

    90. 

  90. 		

    91. 

  91. 		

    92. 

  92. 		// admin add user derictly

    93. 

  93. 		$jump = false;

    94. 

  94. 

    95. 

  95. 		$token = z( t( v( 'token' ) ) );

    96. 

  96.         

    97. 

  97.         if( strlen( $token ) > 2 )

    98. 

  98.         {

    99. 

  99.          	session_id( $token );

    100. 

  100.          	session_set_cookie_params( c('session_time') );

    101. 

  101.         	@session_start();

    102. 

  102.         	if($_SESSION['level'] == '9') $jump = true;

    103. 

  103.         }

    104. 

  104.         

    105. 

  105. 

    106. 

  106.         if( !$jump )

    107. 

  107.         {

    108. 

  108.         

    109. 

  109. 			if( !not_empty( v( 'code' ) )) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'CODE' ) );

    110. 

  110. 		

    111. 

  111.         	$code = z(t(v('code')));

    112. 

  112. 		

    113. 

  113. 			if( get_var( "SELECT COUNT(*) FROM `activecode` WHERE `code` = '" . s($code) . "' AND `timeline` > '" . date( "Y-m-d H:i:s " , strtotime("-1day")) . "'" ) < 1  )

    114. 

  114. 			return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ACTVECODE') );	

    115. 

  115.         } 

    116. 

  116. 		

    117. 

  117. 		

    118. 

  118. 		if( get_var("SELECT COUNT(*) FROM `user` WHERE `email` = '" . s( t(v('email')) ) . "'") > 0 )

    119. 

  119. 		return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_EMAIL_EXISTS') );

    120. 

  120. 		

    121. 

  121. 		$dsql = array();

    122. 

  122. 		

    123. 

  123. 		$dsql[] = "'" . s( v( 'name' ) ) . "'";

    124. 

  124. 		$dsql[] = "'" . s( pinyin(strtolower(v( 'name' ))) ) . "'";

    125. 

  125.         $dsql[] = "'" . s( v( 'email' ) ) . "'";

    126. 

  126.         $dsql[] = "'" . s( md5( v( 'password' ) ) ) . "'";

    127. 

  127.         $dsql[] = "'" . s( date( "Y-m-d H:i:s" ) ) . "'";

    128. 

  128.         

    129. 

  129. 		$sql = "INSERT INTO `user` ( `name` , `pinyin` , `email` , `password` , `timeline` ) VALUES ( " . join( ' , ' , $dsql ) . " )";

    130. 

  130. 		

    131. 

  131.         run_sql( $sql );

    132. 

  132.         

    133. 

  133.         if( db_errno() != 0 )

    134. 

  134.         {

    135. 

  135.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    136. 

  136.         }

    137. 

  137.         

    138. 

  138.         $lid = last_id();

    139. 

  139.         

    140. 

  140.         if( $lid < 1 )

    141. 

  141.         {

    142. 

  142.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    143. 

  143.         }

    144. 

  144.         

    145. 

  145.         if( !$data = get_user_info_by_id( $lid ) )

    146. 

  146. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    147. 

  147.         else

    148. 

  148. 		{

    149. 

  149. 			// one code for multi-people

    150. 

  150. 			/*

    151. 

  151. 			$sql = "DELETE FROM `activecode` WHERE `code` = '" .  s($code)  . "' LIMIT 1";

    152. 

  152. 			run_sql( $sql );

    153. 

  153. 			*/

    154. 

  154. 			

    155. 

  155. 			publish_feed( __( 'API_TEXT_JOINT_TEAMTOY' ,  $data['name'] ) , $data['uid'] , 3  );

    156. 

  156. 			return self::send_result( $data );

    157. 

  157. 		}

    158. 

  158. 			

    159. 

  159.         

    160. 

  160.     }

    161. 

  161. 

    162. 

  162.     /**

    163. 

  163.      * 更新当前用户分组

    164. 

  164.      *

    165. 

  165.      * @param string uid 

    166. 

  166.      * @param string groups , 多个group用|分割 

    167. 

  167.      * @param string token , 必填

    168. 

  168.      * @return user array

    169. 

  169.      * @author EasyChen

    170. 

  170.      */

    171. 

  171.     public function user_update_groups()

    172. 

  172.     {

    173. 

  173.     	// 管理员权限

    174. 

  174.     	if( $_SESSION['level'] != '9' )

    175. 

  175. 		return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_ONLY_ADMIN') );

    176. 

  176. 

    177. 

  177. 		$uid = intval(v('uid'));

    178. 

  178. 		if( $uid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID' ) );

    179. 

  179. 

    180. 

  180. 		$groups = strtoupper(z(t(v('groups'))));

    181. 

  181. 		

    182. 

  182. 		if( strlen( $groups ) > 0 ) 

    183. 

  183. 			$groups = '|' . trim( $groups , '|'  ) . '|';

    184. 

  184. 

    185. 

  185. 		$sql = "UPDATE `user` SET `groups` = '" . s( $groups ) . "' WHERE `id` = '" . intval($uid) . "' LIMIT 1";

    186. 

  186. 		run_sql( $sql );

    187. 

  187. 

    188. 

  188. 		if( db_errno() != 0 )

    189. 

  189. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    190. 

  190. 		else

    191. 

  191. 			return self::send_result( get_user_info_by_id($uid) );

    192. 

  192. 

    193. 

  193.     }

    194. 

  194. 	

    195. 

  195. 	/**

    196. 

  196.      * 终止当前token

    197. 

  197.      *

    198. 

  198.      *

    199. 

  199.      * @param string token , 必填

    200. 

  200.      * @return user array

    201. 

  201.      * @author EasyChen

    202. 

  202.      */

    203. 

  203. 	public function user_end_session()

    204. 

  204. 	{

    205. 

  205. 		$data = array();

    206. 

  206. 		$data['token'] = $_SESSION['token'];

    207. 

  207. 		$data['uid'] = $_SESSION['uid'];

    208. 

  208. 		

    209. 

  209. 		

    210. 

  210. 		foreach( $_SESSION as $key=>$value )

    211. 

  211. 		{

    212. 

  212. 			unset( $_SESSION[$key] );

    213. 

  213. 		}

    214. 

  214. 		

    215. 

  215. 		session_destroy();

    216. 

  216. 		

    217. 

  217. 		return self::send_result( $data );

    218. 

  218. 			

    219. 

  219. 	}

    220. 

  220. 	

    221. 

  221. 	/**

    222. 

  222.      * 检查是否存在新版本

    223. 

  223.      *

    224. 

  224.      *

    225. 

  225.      * @param string token , 必填

    226. 

  226.      * @return info array （ 'new' , 'version' , 'info' ）

    227. 

  227.      * @author EasyChen

    228. 

  228.      */

    229. 

  229. 	public function check_new_verison( $in = false )

    230. 

  230. 	{

    231. 

  231. 		$last = intval(kget('last_check'));

    232. 

  232. 		if( $last > 0 && ( (time()-$last) < 60*60 ) && $in  )

    233. 

  233. 		{

    234. 

  234. 			// checked in 1 hour

    235. 

  235. 			// do nothing 

    236. 

  236. 		}

    237. 

  237. 		else

    238. 

  238. 		{

    239. 

  239. 			// set timeout

    240. 

  240. 			$ctx=stream_context_create(array('http'=>array( 'timeout' => 3 )));

    241. 

  241. 			// send domain and uid to help teamtoy.net anti-cc attack

    242. 

  242. 			$url = c('teamtoy_url') . '/?a=last_version&domain=' . c('site_domain') . '&uid=' . $user[ 'id' ];

    243. 

  243. 			

    244. 

  244. 			if( c('dev_version') ) $url = $url . '&dev=1';

    245. 

  245. 

    246. 

  246. 			$new = false;

    247. 

  247. 			if($info = @file_get_contents($url , 0 , $ctx))

    248. 

  248. 			{

    249. 

  249. 				$info_array = json_decode($info,true);

    250. 

  250. 				if( $new_build = intval($info_array['version']) )

    251. 

  251. 				{

    252. 

  252. 					if( $new_build > local_version() )

    253. 

  253. 					{

    254. 

  254. 						$new = true;

    255. 

  255. 

    256. 

  256. 						$last_noticed_version = intval(kget('last_notice'));

    257. 

  257. 						if( $last_noticed_version > 0 )

    258. 

  258. 						{

    259. 

  259. 							if( $new_build > $last_noticed_version )

    260. 

  260. 								$send = 1;

    261. 

  261. 							else

    262. 

  262. 								$send = 0;

    263. 

  263. 						}

    264. 

  264. 						else

    265. 

  265. 							$send = 1;

    266. 

  266. 

    267. 

  267. 						if( $send == 1 )

    268. 

  268. 						{

    269. 

  269. 							// send notice to current user

    270. 

  270. 

    271. 

  271. 							$text = __( 'API_TEXT_NEW_VERSION' , $new_build );

    272. 

  272. 							

    273. 

  273. 							if( !$in )

    274. 

  274. 							{

    275. 

  275. 								send_notice( uid() , $text , 10 , array( 'info' => $info_array['desp'] ) );

    276. 

  276. 								kset('last_notice',$new_build);

    277. 

  277. 							}

    278. 

  278. 							

    279. 

  279. 

    280. 

  280. 

    281. 

  281. 

    282. 

  282. 						}

    283. 

  283. 						

    284. 

  284. 					}

    285. 

  285. 

    286. 

  286. 					kset('last_check',time());

    287. 

  287. 				}

    288. 

  288. 			}

    289. 

  289. 

    290. 

  290. 			if( !$in )

    291. 

  291. 			{

    292. 

  292. 				if( $new  )

    293. 

  293. 					return self::send_result( array('new'=>1 ,'info' => $info_array['desp'] , 'version' => $info_array['version'] )  );

    294. 

  294. 				else

    295. 

  295. 					return self::send_result( array('new'=>0 )  );

    296. 

  296. 			}

    297. 

  297. 		}

    298. 

  298. 

    299. 

  299. 	}

    300. 

  300.     

    301. 

  301.     /**

    302. 

  302.      * 通过email和密码获取token

    303. 

  303.      *

    304. 

  304.      * @param string email

    305. 

  305.      * @param string password

    306. 

  306.      * @return token array( 'token' , 'uid' , 'uname' , 'email' , 'level' )

    307. 

  307.      * @author EasyChen

    308. 

  308.      */

    309. 

  309.     public function user_get_token()

    310. 

  310.     {

    311. 

  311.         $email = z( t( v( 'email' ) ) );

    312. 

  312.         $password = z( t( v( 'password' ) ) );

    313. 

  313.         

    314. 

  314. 		if( $user = get_full_info_by_email_password( $email , $password ) )

    315. 

  315.         {

    316. 

  316.             if( $user['is_closed'] == '1' )

    317. 

  317. 				return self::send_error( LR_API_USER_CLOSED , __('API_MESSAGE_USER_CLOSED_BY_ADMIN') );

    318. 

  318. 		

    319. 

  319. 			session_set_cookie_params( c('session_time') );

    320. 

  320. 			@session_start();

    321. 

  321.             $token = session_id();

    322. 

  322.             $_SESSION[ 'token' ] = $token;

    323. 

  323.             $_SESSION[ 'uid' ] = $user[ 'id' ];

    324. 

  324.             $_SESSION[ 'uname' ] = $user['name'];

    325. 

  325.             $_SESSION[ 'email' ] = $user[ 'email' ];

    326. 

  326. 			$_SESSION[ 'level' ] = $user['level'];

    327. 

  327. 			if( strlen( $user['groups'] ) > 0 )

    328. 

  328. 			{

    329. 

  329. 				$user['groups'] = explode('|', trim( $user['groups'] , '|' )) ;

    330. 

  330. 				$_SESSION[ 'groups' ] = $user['groups'];

    331. 

  331. 			} 

    332. 

  332. 							

    333. 

  333. 			if( c('api_check_new_verison') )

    334. 

  334. 				$this->check_new_verison( true );

    335. 

  335. 			

    336. 

  336. 			return self::send_result( $_SESSION );

    337. 

  337.         }

    338. 

  338.         else

    339. 

  339.         {

    340. 

  340.             return self::send_error( LR_API_TOKEN_ERROR , __('API_MESSAGE_BAD_ACCOUNT') );

    341. 

  341.         }

    342. 

  342.     }

    343. 

  343. 

    344. 

  344.     /**

    345. 

  345.      * 重置密码

    346. 

  346.      *

    347. 

  347.      * 只有管理员token才能调用

    348. 

  348.      *

    349. 

  349.      * @param string token , 必填  

    350. 

  350.      * @param string uid

    351. 

  351.      * @return msg array( 'newpass'=>newpass )

    352. 

  352.      * @author EasyChen

    353. 

  353.      */

    354. 

  354.     function user_reset_password()

    355. 

  355.     {

    356. 

  356.     	if( $_SESSION['level'] != '9' )

    357. 

  357. 		return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_ONLY_ADMIN') );

    358. 

  358. 

    359. 

  359. 		$uid = intval(v('uid'));

    360. 

  360. 		if( $uid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID' ) );

    361. 

  361. 

    362. 

  362. 		if( $uid == uid() ) return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_CANNOT_RESET_OWN_PASSWORD') );

    363. 

  363. 

    364. 

  364. 		$rnd = rand( 1 , 10 );

    365. 

  365. 		$newpass = substr( md5($uid.time().rand( 1 , 9999 )) , $rnd , 15 );

    366. 

  366. 

    367. 

  367. 		$sql = "UPDATE `user` SET `password` = '". md5($newpass)."' WHERE `id` = '" . intval( $uid ) . "' LIMIT 1";

    368. 

  368. 		run_sql( $sql );

    369. 

  369. 

    370. 

  370. 		if( db_errno() != 0 )

    371. 

  371. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    372. 

  372. 		else

    373. 

  373. 			return self::send_result( array( 'newpass' => $newpass ) );	

    374. 

  374.     }

    375. 

  375. 

    376. 

  376.      /**

    377. 

  377.      * 在线升级

    378. 

  378.      *

    379. 

  379.      * 只有管理员token才能调用

    380. 

  380.      *

    381. 

  381.      * @param string token , 必填  

    382. 

  382.      * @param string password

    383. 

  383.      * @return msg array( 'msg'=>ok )

    384. 

  384.      * @author EasyChen

    385. 

  385.      */

    386. 

  386.     function upgrade()

    387. 

  387.     {

    388. 

  388.     	if( $_SESSION['level'] != '9' )

    389. 

  389. 		return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_ONLY_ADMIN') );

    390. 

  390. 

    391. 

  391.     	$url = c('teamtoy_url') . '/?a=last_version&domain=' . c('site_domain') . '&uid=' . uid();

    392. 

  392.     	if( c('dev_version') ) $url = $url . '&dev=1';

    393. 

  393. 

    394. 

  394.     	$info = json_decode( file_get_contents( $url ) , true);

    395. 

  395.     	if( !isset($info['url']) ) return  self::send_error( LR_API_UPGRADE_ERROR , __('API_MESSAGE_UPGARDE_INFO_DATA_ERROR') );

    396. 

  396.     	$url = t($info['url']);

    397. 

  397. 

    398. 

  398. 

    399. 

  399. 		$vid = intval($info['version']);

    400. 

  400. 		if( $vid < 1 ) return  self::send_error( LR_API_UPGRADE_ERROR , __('API_MESSAGE_UPGARDE_INFO_DATA_ERROR') );

    401. 

  401. 

    402. 

  402. 		if( $vid == local_version() )

    403. 

  403. 		{

    404. 

  404. 			return  self::send_error( LR_API_UPGRADE_ABORT , __('API_MESSAGE_UPGARDE_ALREADY_LATEST') );

    405. 

  405. 		}

    406. 

  406. 

    407. 

  407. 		$zip_tmp = SAE_TMP_PATH . DS . 'teamtoy2-' . intval($vid) . '.zip';

    408. 

  408. 

    409. 

  409. 		if( @copy( $url ,  $zip_tmp )  )

    410. 

  410. 		{

    411. 

  411. 			include_once( AROOT.'lib'.DS.'dUnzip2.inc.php' );

    412. 

  412. 			$zip = new dUnzip2( $zip_tmp );

    413. 

  413. 			$zip->debug = false;	

    414. 

  414. 		

    415. 

  415. 			$zip->unzipAll( AROOT  );

    416. 

  416. 			@chmod( AROOT , 0755 );

    417. 

  417. 			

    418. 

  418. 			if( isset( $info['post_script'] ) ) $pscript = t($info['post_script']);

    419. 

  419. 			else $pscript = false;

    420. 

  420. 

    421. 

  421. 			if( local_version() == $vid )

    422. 

  422. 			{

    423. 

  423. 				if( $pscript )

    424. 

  424. 					send_notice( uid() , __('API_TEXT_ALREADY_UPGARDE_TO' ,  array ( $vid , c('site_url') . $pscript) ), 0  );

    425. 

  425. 				

    426. 

  426. 				return self::send_result( array('msg'=>'ok','post_script'=>$pscript) );

    427. 

  427. 			}

    428. 

  428. 				

    429. 

  429. 			else

    430. 

  430. 				return  self::send_error( LR_API_UPGRADE_ERROR , __('API_MESSAGE_UPGARDE_FILE_UNZIP_ERROR') );

    431. 

  431. 

    432. 

  432. 			

    433. 

  433. 		}

    434. 

  434. 		else

    435. 

  435. 		{

    436. 

  436. 			return  self::send_error( LR_API_UPGRADE_ERROR , __('API_MESSAGE_UPGARDE_FILE_FETCH_ERROR') );

    437. 

  437. 		}

    438. 

  438.     }

    439. 

  439. 	

    440. 

  440. 	 /**

    441. 

  441.      * 读取用户个人资料

    442. 

  442.      *

    443. 

  443.      * 不包含密码

    444. 

  444.      *

    445. 

  445.      * @param string token , 必填  

    446. 

  446.      * @param int uid

    447. 

  447.      * @return user array

    448. 

  448.      * @author EasyChen

    449. 

  449.      */

    450. 

  450.     function user_profile()

    451. 

  451.     {

    452. 

  452.     	$uid = intval(v('uid'));

    453. 

  453. 		if( $uid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID' ) );

    454. 

  454. 

    455. 

  455. 		return self::send_result( get_user_info_by_id($uid) );

    456. 

  456. 

    457. 

  457.     }

    458. 

  458. 

    459. 

  459.      /**

    460. 

  460.      * 更新用户个人资料

    461. 

  461.      *

    462. 

  462.      * 不包含密码

    463. 

  463.      *

    464. 

  464.      * @param string token , 必填 

    465. 

  465.      * @param string mobile - 手机号 , 必填

    466. 

  466.      * @param string email - 电子邮件 , 必填

    467. 

  467.      * @param string tel - 分机号 , 选填

    468. 

  468.      * @param string eid - 工号, 选填

    469. 

  469.      * @param string weibo - 微博昵称, 选填

    470. 

  470.      * @param string desp - 备注, 选填

    471. 

  471.      * @return user array

    472. 

  472.      * @author EasyChen

    473. 

  473.      */

    474. 

  474. 	function user_update_profile()

    475. 

  475. 	{

    476. 

  476. 		$mobile = z(t(v('mobile')));

    477. 

  477. 		$tel = z(t(v('tel')));

    478. 

  478. 		$eid = z(t(v('eid')));

    479. 

  479. 		$weibo = z(t(v('weibo')));

    480. 

  480. 		$desp = z(t(v('desp')));

    481. 

  481. 		$email = z(t(v('email')));

    482. 

  482. 		

    483. 

  483. 		if( !not_empty($email) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'EMAIL' ) );

    484. 

  484. 		if( !not_empty($mobile) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'MOBILE' ) );

    485. 

  485. 			

    486. 

  486. 		

    487. 

  487. 		$sql = "UPDATE `user` SET "

    488. 

  488. 		." `mobile` = '" . s($mobile) . "' "

    489. 

  489. 		." , `tel` = '" . s($tel) . "' "

    490. 

  490. 		." , `eid` = '" . s($eid) . "' "

    491. 

  491. 		." , `weibo` = '" . s($weibo) . "' "

    492. 

  492. 		." , `email` = '" . s($email) . "' "

    493. 

  493. 		." , `desp` = '" . s($desp) . "' WHERE `id` = '" . uid() . "' LIMIT 1 ";

    494. 

  494. 		

    495. 

  495. 		run_sql( $sql );

    496. 

  496. 		

    497. 

  497. 		if( db_errno() != 0 )

    498. 

  498. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    499. 

  499. 		else

    500. 

  500. 			return self::send_result( get_user_info_by_id(uid()) );

    501. 

  501. 		

    502. 

  502. 	}

    503. 

  503. 	

    504. 

  504. 	/**

    505. 

  505.      * 读取用户扩展设置

    506. 

  506.      *

    507. 

  507.      * @ignore

    508. 

  508.      */

    509. 

  509. 	function user_settings()

    510. 

  510. 	{

    511. 

  511. 		if(!is_array( $settings = get_user_settings_by_id( $_SESSION['uid'] ) ))

    512. 

  512. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_FETCH_SETTINGS_DATA_ERROR') );

    513. 

  513. 		else

    514. 

  514. 			return self::send_result( $settings );	

    515. 

  515. 	}

    516. 

  516. 	

    517. 

  517. 	 /**

    518. 

  518.      * 更新用户密码

    519. 

  519.      *

    520. 

  520.      *

    521. 

  521.      * @param string token , 必填

    522. 

  522.      * @param string opassword - 原密码 , 必填

    523. 

  523.      * @param string password -新密码 , 必填

    524. 

  524.  	 * @return msg array( 'msg'=>ok )

    525. 

  525.      * @author EasyChen

    526. 

  526.      */

    527. 

  527. 	function user_update_password()

    528. 

  528. 	{

    529. 

  529. 		

    530. 

  530. 		if( !c('can_modify_password') ) return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_CANNOT_CHANGE_PASSWORD') );

    531. 

  531. 

    532. 

  532. 		$opassword = z(t(v('opassword')));

    533. 

  533. 		if( !not_empty($opassword) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'OPASSWORD' ) );

    534. 

  534. 		

    535. 

  535. 		$password = z(t(v('password')));

    536. 

  536. 		if( !not_empty($password) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'PASSWORD' )  );

    537. 

  537. 		

    538. 

  538. 		if( $opassword == $password ) return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_SAME_PASSWORD') );

    539. 

  539. 		

    540. 

  540. 		$passwordv1 = md5( $opassword );

    541. 

  541. 		$passwordv2 = ttpassv2( $opassword , uid() );

    542. 

  542. 

    543. 

  543. 

    544. 

  544. 		$sql = "SELECT COUNT(*) FROM `user` WHERE `id` = '" . intval( uid() ) . "' AND ( `password` = '" . s($passwordv1) . "' OR  `password` = '" . s($passwordv2) . "'  ) ";

    545. 

  545. 		

    546. 

  546. 		if( get_var( $sql ) < 1 )

    547. 

  547. 			return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_BAD_OPASSWORD') );

    548. 

  548. 			

    549. 

  549. 		$newpass = ttpassv2( $password , uid() );

    550. 

  550. 		$sql = "UPDATE	`user` SET `password` = '" . s($newpass) . "' WHERE `id` = '" . intval( uid() ) . "' AND ( `password` = '" . s($passwordv1) . "' OR  `password` = '" . s($passwordv2) . "'  ) LIMIT 1";

    551. 

  551. 		

    552. 

  552. 		run_sql( $sql );

    553. 

  553. 		

    554. 

  554. 		if( db_errno() != 0 )

    555. 

  555. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    556. 

  556. 		else

    557. 

  557. 			return self::send_result( array('msg'=>'ok') );

    558. 

  558. 		

    559. 

  559. 

    560. 

  560. 		

    561. 

  561. 	}

    562. 

  562. 	

    563. 

  563. 	/**

    564. 

  564.      * 更新用户扩展设置

    565. 

  565.      *

    566. 

  566.      * @ignore

    567. 

  567.      */

    568. 

  568. 	function user_update_settings()

    569. 

  569. 	{

    570. 

  570. 		$key = z(t(v('key')));

    571. 

  571. 		if( !not_empty($key) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'KEY' ) );

    572. 

  572. 		

    573. 

  573. 		if(!$value = unserialize(v('value')))

    574. 

  574. 		{

    575. 

  575. 			$value = z(t(v('value')));

    576. 

  576. 			if( !not_empty($value) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'VALUE' )  );

    577. 

  577. 		}

    578. 

  578. 		else

    579. 

  579. 		{

    580. 

  580. 			if( !is_array($value) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'VALUE' )  );

    581. 

  581. 		

    582. 

  582. 		}

    583. 

  583. 		

    584. 

  584. 		

    585. 

  585. 		

    586. 

  586. 		if(!is_array( $settings = get_user_settings_by_id( $_SESSION['uid'] ) ))

    587. 

  587. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_FETCH_SETTINGS_DATA_ERROR') );

    588. 

  588. 		else

    589. 

  589. 		{

    590. 

  590. 			$settings[$key] = $value;

    591. 

  591. 			update_user_settings_array( $settings );

    592. 

  592. 			

    593. 

  593. 			if( db_errno() != 0 )

    594. 

  594. 				return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    595. 

  595. 			else

    596. 

  596. 				return self::send_result( $settings );

    597. 

  597. 			

    598. 

  598. 		}	

    599. 

  599. 		

    600. 

  600. 	}

    601. 

  601. 	

    602. 

  602. 	/**

    603. 

  603.      * 更新用户等级

    604. 

  604.      *

    605. 

  605.      * 必须是管理员的token，level9为管理员，不能修改自己的等级

    606. 

  606.      *

    607. 

  607.      * @param string token , 必填

    608. 

  608.      * @param string uid  , 必填

    609. 

  609.      * @return user array

    610. 

  610.      * @author EasyChen

    611. 

  611.      */

    612. 

  612. 	function user_level()

    613. 

  613. 	{

    614. 

  614. 		$uid = intval(v('uid'));

    615. 

  615. 		if( $uid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID' ) );

    616. 

  616. 		

    617. 

  617. 		if( $uid == uid() ) return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_CANNOT_CHANGE_OWN_LEVEL') );

    618. 

  618. 		

    619. 

  619. 		if(!$user = get_user_info_by_id( $uid ))

    620. 

  620. 		return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_USER_NOT_EXISTS') );

    621. 

  621. 		

    622. 

  622. 		$level = intval(v('level'));

    623. 

  623. 		

    624. 

  624. 		

    625. 

  625. 		if( $_SESSION['level'] != '9' )

    626. 

  626. 		return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_ONLY_ADMIN') );

    627. 

  627. 		

    628. 

  628. 		if( $level == 0 ) $more = " , `is_closed` = 1 ";

    629. 

  629. 		else $more = "";	

    630. 

  630. 		

    631. 

  631. 		$sql = "UPDATE `user` SET `level` = '" . intval( $level ) . "' " . $more . " WHERE `id` = '" . intval($uid) . "' LIMIT 1";

    632. 

  632. 		

    633. 

  633. 		

    634. 

  634. 		

    635. 

  635. 		run_sql( $sql );

    636. 

  636. 		

    637. 

  637. 		if( db_errno() != 0 )

    638. 

  638.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    639. 

  639.         else

    640. 

  640. 		{

    641. 

  641. 			if( $level == 0 )

    642. 

  642. 			{

    643. 

  643. 				publish_feed( __('API_MESSAGE_ACCOUNT_CLOSED' , array( uname() ,  $user['name']  )  ) , uid() , 1 );

    644. 

  644. 				$user['level'] = 0;

    645. 

  645. 				return self::send_result( $user );

    646. 

  646. 			}

    647. 

  647. 			else

    648. 

  648. 			{

    649. 

  649. 				// uname().'修改了账号【'. $user['name'] .'】权限为'.$level

    650. 

  650. 

    651. 

  651. 				if( $level == 0 ) $level_text = __('ACCOUNT_CLOSED');

    652. 

  652. 				elseif( $level == 9 ) $level_text = __('ACCOUNT_SUPER_ADMIN');

    653. 

  653. 				else $level_text = $level;

    654. 

  654. 

    655. 

  655. 				publish_feed( __('API_MESSAGE_USER_LEVEL_UPDATED' ,  array( uname() , $user['name'] , $level_text )  ) , uid() , 1 );

    656. 

  656. 				return self::send_result( get_user_info_by_id($uid) );

    657. 

  657. 			

    658. 

  658. 			}

    659. 

  659. 			

    660. 

  660. 		

    661. 

  661. 		}

    662. 

  662. 	}

    663. 

  663. 	

    664. 

  664. 	/**

    665. 

  665.      * 关闭用户

    666. 

  666.      *

    667. 

  667.      * 必须是管理员的token

    668. 

  668.      *

    669. 

  669.      * @param string token , 必填

    670. 

  670.      * @param string uid  , 必填

    671. 

  671.      * @return user array

    672. 

  672.      * @author EasyChen

    673. 

  673.      */

    674. 

  674. 	function user_close()

    675. 

  675. 	{

    676. 

  676. 		$uid = intval(v('uid'));

    677. 

  677. 		if( $uid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID' ) );

    678. 

  678. 		

    679. 

  679. 		if(!$user = get_user_info_by_id( $uid ))

    680. 

  680. 		return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_USER_NOT_EXISTS') );

    681. 

  681. 		

    682. 

  682. 		if( $_SESSION['level'] != '9' )

    683. 

  683. 		return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_ONLY_ADMIN') );

    684. 

  684. 		

    685. 

  685. 		if( $user['is_closed'] == '1' )

    686. 

  686. 			return self::send_error( LR_API_USER_CLOSED , __('API_MESSAGE_USER_CLOSED_BY_ADMIN') );

    687. 

  687. 		

    688. 

  688. 		if( $_SESSION['level'] == '9' && $uid == uid() )

    689. 

  689. 		{

    690. 

  690. 			$admin_num = get_var( "SELECT COUNT(*) FROM `user` WHERE `is_closed` = 0 AND `level` = 9 " );

    691. 

  691. 			if( $admin_num < 2 ) return self::send_error( LR_API_FORBIDDEN ,  __('API_MESSAGE_CANNOT_CLOSE_ONLY_ADMIN') );

    692. 

  692. 

    693. 

  693. 		}

    694. 

  694. 		

    695. 

  695. 		close_user_by_id($uid);

    696. 

  696. 		

    697. 

  697. 		if( db_errno() != 0 )

    698. 

  698.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    699. 

  699.         else

    700. 

  700. 		{

    701. 

  701. 			publish_feed(  __('API_MESSAGE_ACCOUNT_CLOSED' , array( uname() , $user['name'] ) ) , uid() , 1 );

    702. 

  702. 			return self::send_result( $user );

    703. 

  703. 		

    704. 

  704. 		}

    705. 

  705. 		

    706. 

  706. 		

    707. 

  707. 			

    708. 

  708. 	}

    709. 

  709. 	

    710. 

  710. 	/**

    711. 

  711.      * 添加TODO

    712. 

  712.      *

    713. 

  713.      *

    714. 

  714.      * @param string token , 必填

    715. 

  715.      * @param string text - TODO内容 , 必填

    716. 

  716.      * @param string is_public - 是否公开 , 默认为1

    717. 

  717.      * @param string uid - 要给添加TODO的用户id , uid为0时添加给自己。私有TODO不能添加给其他人

    718. 

  718.      * @return todo array

    719. 

  719.      * @author EasyChen

    720. 

  720.      */

    721. 

  721. 	public function todo_add()

    722. 

  722. 	{

    723. 

  723. 		$content = z(t(v('text')));

    724. 

  724. 		if( !not_empty($content) ) return self::send_error(  LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'TEXT' ) );

    725. 

  725. 		

    726. 

  726. 		

    727. 

  727. 		$is_public = intval(v('is_public'));

    728. 

  728. 		if( $is_public != 0  ) $is_public = 1;

    729. 

  729. 		

    730. 

  730. 		$uid = intval(v('uid'));

    731. 

  731. 		$owner_uid=$uid>0?$uid:uid();

    732. 

  732. 

    733. 

  733. 		

    734. 

  734. 		// 检查是否已经存在

    735. 

  735. 		$sql = "SELECT * FROM `todo` WHERE `content` = '" . s( $content ) . "' AND `owner_uid` = '" . intval($owner_uid) . "' LIMIT 1";

    736. 

  736. 		

    737. 

  737. 		if( $todo = get_line($sql) )

    738. 

  738. 		{

    739. 

  739. 			if( get_var( "SELECT COUNT(*) FROM `todo_user` WHERE `tid` = '" . intval( $todo['id'] ) . "' AND `uid` = '" . intval( $owner_uid ) . "' AND `status` != 3 " ) > 0 )

    740. 

  740. 			return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_TODO_EXISTS') );

    741. 

  741. 			

    742. 

  742. 		}

    743. 

  743. 		

    744. 

  744. 		

    745. 

  745. 		

    746. 

  746. 		

    747. 

  747. 		if( !$tid = add_todo( $content , $is_public ))

    748. 

  748. 		{

    749. 

  749. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    750. 

  750. 		}

    751. 

  751. 

    752. 

  752. 		$tinfo = get_todo_info_by_id( $tid );

    753. 

  753. 		

    754. 

  754. 		if( $is_public == 1 )

    755. 

  755. 		{

    756. 

  756. 			if( $uid > 0 && $uid !=uid()  )

    757. 

  757. 			{

    758. 

  758. 				$this->todo_assign(  $tid , $uid , true );

    759. 

  759. 				$tinfo['other'] = 1;

    760. 

  760. 			}

    761. 

  761. 			else

    762. 

  762. 				publish_feed( __('API_TEXT_TODO_ADDED' , array( uname() , $content ) ) , uid() , 2  , $tid );

    763. 

  763. 

    764. 

  764. 			// .'添加了TODO【'.  .'】'

    765. 

  765. 		}

    766. 

  766. 			

    767. 

  767. 		

    768. 

  768. 		return self::send_result( $tinfo );

    769. 

  769. 		      

    770. 

  770. 	}

    771. 

  771. 	

    772. 

  772. 	/**

    773. 

  773.      * 删除TODO评论

    774. 

  774.      *

    775. 

  775.      *

    776. 

  776.      * @param string token , 必填

    777. 

  777.      * @param string hid - 评论id, 必填

    778. 

  778.      * @return comment array

    779. 

  779.      * @author EasyChen

    780. 

  780.      */

    781. 

  781. 	public function todo_remove_comment()

    782. 

  782. 	{

    783. 

  783. 		$hid = intval(v('hid'));

    784. 

  784. 		if( intval( $hid ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'HID') );

    785. 

  785. 		

    786. 

  786. 		$sql = "SELECT *,`id` as `hid` FROM `todo_history` WHERE `id` = '" . intval( $hid ) . "' LIMIT 1";

    787. 

  787. 		if( !$hitem = get_line( $sql ) )

    788. 

  788. 		{

    789. 

  789. 			if( db_errno() != 0 )

    790. 

  790. 					return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    791. 

  791. 				else

    792. 

  792. 					return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    793. 

  793. 		}

    794. 

  794. 		else

    795. 

  795. 		{

    796. 

  796. 			if( ($hitem['uid'] != $_SESSION['uid']) && $_SESSION['level'] < 9 )

    797. 

  797. 			{

    798. 

  798. 				return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_CANNOT_REMOVE_OTHERS_COMMENT') );

    799. 

  799. 			}

    800. 

  800. 			

    801. 

  801. 			if( $hitem['type'] != 2 )

    802. 

  802. 			{

    803. 

  803. 				return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_HTYPE') );

    804. 

  804. 			}

    805. 

  805. 			

    806. 

  806. 			$sql = "DELETE FROM `todo_history` WHERE `id` = '" . intval($hid) . "' LIMIT 1";

    807. 

  807. 			

    808. 

  808. 			run_sql( $sql );

    809. 

  809. 

    810. 

  810. 			if( db_errno() != 0 )

    811. 

  811. 				return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    812. 

  812. 			else

    813. 

  813. 			{

    814. 

  814. 				// 更新todo 评论计数

    815. 

  815. 				$tid = $hitem['tid'];

    816. 

  816. 				$count = get_var( "SELECT COUNT(*) FROM `todo_history` WHERE `tid` = '" . intval($tid) . "' AND `type` = 2 " , db()) ;

    817. 

  817. 				$sql = "UPDATE `todo` SET `comment_count` = '" . intval($count) . "' WHERE `id` = '" . intval($tid) . "' LIMIT 1";

    818. 

  818. 				run_sql( $sql );

    819. 

  819. 

    820. 

  820. 				$sql = "UPDATE `feed` SET `comment_count` = '" . intval( $count ) . "' WHERE `tid` = '" . intval( $tid ) . "' AND `comment_count` != '" . intval( $count )  . "' ";

    821. 

  821. 				run_sql( $sql );		

    822. 

  822. 

    823. 

  823. 				return self::send_result( $hitem );

    824. 

  824. 			}

    825. 

  825. 				

    826. 

  826. 		}

    827. 

  827. 		

    828. 

  828. 		

    829. 

  829. 		

    830. 

  830. 	}

    831. 

  831. 	

    832. 

  832. 	/**

    833. 

  833.      * 为TODO添加评论

    834. 

  834.      *

    835. 

  835.      *

    836. 

  836.      * @param string token , 必填

    837. 

  837.      * @param string tid - TODOid, 必填

    838. 

  838.      * @param string text - 评论内容, 必填

    839. 

  839.      * @return comment array

    840. 

  840.      * @author EasyChen

    841. 

  841.      */

    842. 

  842. 	public function todo_add_comment()

    843. 

  843. 	{

    844. 

  844. 		$content = z(t(v('text')));

    845. 

  845. 		if( !not_empty($content) ) return self::send_error(  LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'TEXT') );

    846. 

  846. 		

    847. 

  847. 		$tid = intval(v('tid'));

    848. 

  848. 		if( intval( $tid ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'TID') );

    849. 

  849. 		

    850. 

  850. 		$tinfo = get_line("SELECT * FROM `todo` WHERE `id` = '" . intval( $tid ) . "' LIMIT 1");

    851. 

  851. 		

    852. 

  852. 		

    853. 

  853. 		if( is_mobile_request() ) $device = 'mobile';

    854. 

  854. 		else $device = 'web';

    855. 

  855. 

    856. 

  856. 		$sql = "INSERT INTO `todo_history` ( `tid` , `uid` , `content` , `type` , `timeline` , `device` ) 

    857. 

  857. 		VALUES ( '" . intval($tid) . "' , '" . intval($_SESSION['uid']) . "' , '" . s( $content ) . "' , '2' , NOW() , '" . s($device) . "' ) ";

    858. 

  858. 		

    859. 

  859. 		run_sql( $sql );

    860. 

  860. 		

    861. 

  861. 		if( db_errno() != 0 )

    862. 

  862. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    863. 

  863. 		else

    864. 

  864. 		{

    865. 

  865. 			$lid = last_id();

    866. 

  866. 			

    867. 

  867. 			// 更新todo 评论计数

    868. 

  868. 			$count = get_var( "SELECT COUNT(*) FROM `todo_history` WHERE `tid` = '" . intval($tid) . "' AND `type` = 2 " , db()) ;

    869. 

  869. 			$sql = "UPDATE `todo` SET `comment_count` = '" . intval($count) . "' WHERE `id` = '" . intval($tid) . "' LIMIT 1";

    870. 

  870. 			run_sql( $sql );

    871. 

  871. 

    872. 

  872. 			$sql = "UPDATE `feed` SET `comment_count` = '" . intval( $count ) . "' WHERE `tid` = '" . intval( $tid ) . "' AND `comment_count` != '" . intval( $count )  . "' ";

    873. 

  873. 			run_sql( $sql );			

    874. 

  874. 

    875. 

  875. 

    876. 

  876. 			// 向订阅todo的同学发送通知

    877. 

  877. 			$sql = "SELECT `uid` FROM `todo_user` WHERE `tid`= '" . intval($tid) . "' AND `is_follow` = 1 ";

    878. 

  878. 			

    879. 

  879. 			$follow_uids = array();

    880. 

  880. 			if( $uitems = get_data( $sql ) )

    881. 

  881. 			foreach( $uitems as $uitem )

    882. 

  882. 			{

    883. 

  883. 				if( $uitem['uid'] != uid() )

    884. 

  884. 				{

    885. 

  885. 					if( !in_array( $uitem['uid'] , $follow_uids ) )

    886. 

  886. 					{

    887. 

  887. 						//  .'评论了你关注的TODO【'. $tinfo['content'] .'】: '.$content

    888. 

  888. 						send_notice( $uitem['uid'] , __('API_TEXT_COMMENT_TODO_FOLLOWED' , array( uname() , $tinfo['content'] , $content ) ) , 1 , array('tid'=>intval($tid) , 'count' => $count )  );

    889. 

  889. 

    890. 

  890. 						$follow_uids[] = $uitem['uid'];

    891. 

  891. 					} 

    892. 

  892. 

    893. 

  893. 				}

    894. 

  894. 					

    895. 

  895. 			}

    896. 

  896. 			

    897. 

  897. 			

    898. 

  898. 			

    899. 

  899. 			// 向todo作者发通知

    900. 

  900. 			if( $tinfo['owner_uid'] != uid() )

    901. 

  901. 			{

    902. 

  902. 				if( !in_array( $tinfo['owner_uid'] , $follow_uids ) )

    903. 

  903. 					send_notice( $tinfo['owner_uid'] , __('API_TEXT_COMMENT_TODO_OWNED' , array( uname() , $tinfo['content'] , $content ) ) , 1 ,  array('tid'=>intval($tid) , 'count' => $count )  );

    904. 

  904. 			}

    905. 

  905. 			

    906. 

  906. 			// 向被@的同学，发送通知

    907. 

  907. 			if( $ats = find_at($content) )

    908. 

  908. 			{

    909. 

  909. 				$sql = "SELECT `id` FROM `user` WHERE ";

    910. 

  910. 				

    911. 

  911. 				foreach( $ats as $at )

    912. 

  912. 				{

    913. 

  913. 					$at =z(t($at));

    914. 

  914. 					if( $gname = get_group_names() )

    915. 

  915. 					{

    916. 

  916. 						if( in_array(strtoupper($at),$gname)  )

    917. 

  917. 						{

    918. 

  918. 							if( $ndata = get_group_unames($at) )

    919. 

  919. 							foreach( $ndata as $nname )

    920. 

  920. 								$names[] = $nname;

    921. 

  921. 

    922. 

  922. 						}else $names[] = $at;			

    923. 

  923. 					}

    924. 

  924. 					else

    925. 

  925. 					{

    926. 

  926. 						$names[] = $at;

    927. 

  927. 					}

    928. 

  928. 				}

    929. 

  929. 

    930. 

  930. 				foreach( $names as $at )

    931. 

  931. 				{

    932. 

  932. 					$at =z(t($at));

    933. 

  933. 					

    934. 

  934. 					if( mb_strlen($at, 'UTF-8') < 2 ) continue;

    935. 

  935. 

    936. 

  936. 					$wsql[] = " `name` = '" . s(t($at)) . "' ";

    937. 

  937. 					if( c('at_short_name') )

    938. 

  938. 						if( mb_strlen($at, 'UTF-8') == 2 )

    939. 

  939. 							$wsql[] = " `name` LIKE '_" . s($at) . "' ";

    940. 

  940. 				}

    941. 

  941. 				

    942. 

  942. 				if( isset( $wsql ) && is_array( $wsql ) )

    943. 

  943. 				{

    944. 

  944. 					$sql = $sql . join( ' OR ' , $wsql );

    945. 

  945. 					if( $udata = get_data( $sql ) )

    946. 

  946. 						foreach( $udata as $uitem )

    947. 

  947. 							if( !in_array( $uitem['id'] , $follow_uids ) )

    948. 

  948. 								$myuids[] = $uitem['id'];

    949. 

  949. 

    950. 

  950. 					if( isset( $myuids ) && is_array($myuids) )

    951. 

  951. 					{

    952. 

  952. 						$myuids = array_unique($myuids);

    953. 

  953. 						foreach( $myuids as $muid )

    954. 

  954. 						{

    955. 

  955. 							if( $muid != uid() && $muid != $tinfo['owner_uid'] )

    956. 

  956. 							send_notice( $muid , __('API_TEXT_AT_IN_TODO_COMMENT' ,  array( uname() , $tinfo['content'] , $tinfo['content'] ) ) , 1 , array('tid'=>intval($tid) , 'count' => $count  ));

    957. 

  957. 						}

    958. 

  958. 					}

    959. 

  959. 						

    960. 

  960. 					

    961. 

  961. 				}

    962. 

  962. 			}

    963. 

  963. 			

    964. 

  964. 			

    965. 

  965. 			if( $comment = get_line( "SELECT * FROM `todo_history` WHERE `id` = '" . intval($lid) . "' LIMIT 1" , db() ) )

    966. 

  966. 			{

    967. 

  967. 				$comment['user'] = get_user_info_by_id( $_SESSION['uid'] );

    968. 

  968. 				

    969. 

  969. 				

    970. 

  970. 				

    971. 

  971. 				if($tinfo['is_public'] == 1)

    972. 

  972. 					publish_feed( __('API_TEXT_COMMENT_TODO' , array( uname() , $tinfo['content'] , $tinfo['content'] )  ) , uid() , 2  , $tid );

    973. 

  973. 				

    974. 

  974. 				return self::send_result( $comment );

    975. 

  975. 			}

    976. 

  976. 			else

    977. 

  977. 			{

    978. 

  978. 				if( db_errno() != 0 )

    979. 

  979. 					return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    980. 

  980. 				else

    981. 

  981. 					return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    982. 

  982. 			}

    983. 

  983. 			

    984. 

  984. 			

    985. 

  985. 		}

    986. 

  986. 		

    987. 

  987. 	

    988. 

  988. 	}

    989. 

  989. 

    990. 

  990. 	/**

    991. 

  991.      * 读取TODO详细信息

    992. 

  992.      *

    993. 

  993.      * 其他人的私有TODO会无法读取

    994. 

  994.      *

    995. 

  995.      * @param string token , 必填

    996. 

  996.      * @param string tid - TODOid, 必填

    997. 

  997.      * @return todo array

    998. 

  998.      * @author EasyChen

    999. 

  999.      */

    1000. 

  1000. 	public function todo_detail()

    1001. 

  1001. 	{

    1002. 

  1002. 		$tid = intval(v('tid'));

    1003. 

  1003. 		if( intval( $tid ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'TID') );

    1004. 

  1004. 		

    1005. 

  1005. 		if( $tinfo = get_todo_info_by_id( $tid ) )

    1006. 

  1006. 		{

    1007. 

  1007. 			return self::send_result( $tinfo );

    1008. 

  1008. 		}

    1009. 

  1009. 		else

    1010. 

  1010. 		{

    1011. 

  1011. 			if( db_errno() != 0 )

    1012. 

  1012. 				return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1013. 

  1013. 			else

    1014. 

  1014. 				return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    1015. 

  1015. 		}

    1016. 

  1016. 	}

    1017. 

  1017. 	

    1018. 

  1018. 	/**

    1019. 

  1019.      * 指派TODO给其他人

    1020. 

  1020.      *

    1021. 

  1021.      * 不可以分配给自己

    1022. 

  1022.      *

    1023. 

  1023.      * @param string token , 必填

    1024. 

  1024.      * @param string tid - TODOid, 必填

    1025. 

  1025.      * @param string uid - 要指派的用户id, 必填

    1026. 

  1026.      * @return todo array

    1027. 

  1027.      * @author EasyChen

    1028. 

  1028.      */

    1029. 

  1029. 	public function todo_assign( $tid = false , $uid = false , $in = false )

    1030. 

  1030. 	{

    1031. 

  1031. 		if( !$tid ) $tid = intval(v('tid'));

    1032. 

  1032. 		if( intval( $tid ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'TID') );

    1033. 

  1033. 		

    1034. 

  1034. 		if( !$uid ) $uid = intval(v('uid'));

    1035. 

  1035. 		if( intval( $uid ) < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS' , 'UID') );

    1036. 

  1036. 		

    1037. 

  1037. 		

    1038. 

  1038. 		if( $uid == $_SESSION['uid'] ) return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_TODO_ASSIGN_TO_SELF') );

    1039. 

  1039. 		

    1040. 

  1040. 		if( !$tinfo = get_line( "SELECT * FROM `todo_user` WHERE `tid` = '" . intval($tid) . "' AND `uid` = '" . uid() . "' LIMIT 1" ) )

    1041. 

  1041. 		{

    1042. 

  1042. 			if( db_errno() != 0 )

    1043. 

  1043. 				return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1044. 

  1044. 			else

    1045. 

  1045. 				return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    1046. 

  1046. 		}

    1047. 

  1047. 		else

    1048. 

  1048. 		{

    1049. 

  1049. 			if( $tinfo['uid'] != uid() ) return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_CANNOT_ASSIGN_OTHERS_TODO') );

    1050. 

  1050. 			

    1051. 

  1051. 			// 更新todo表

    1052. 

  1052. 			$sql = "UPDATE `todo` SET `owner_uid` = '" . intval( $uid ) . "' WHERE `id` = '" . intval($tid) . "' LIMIT 1";

    1053. 

  1053. 			run_sql( $sql );

    1054. 

  1054. 			if( db_errno() != 0 )

    1055. 

  1055. 				if( $in )

    1056. 

  1056. 					return false;

    1057. 

  1057. 				else

    1058. 

  1058. 					return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1059. 

  1059. 

    1060. 

  1060. 			

    1061. 

  1061. 			// 将新的uid加入 todo_user 表

    1062. 

  1062. 			$sql = "REPLACE INTO `todo_user` ( `uid` , `tid` , `status` , `last_action_at`  ) VALUES ( '" . intval( $uid ) . "' , '" . intval( $tid ) . "' , 1 , NOW() )  ";

    1063. 

  1063. 			

    1064. 

  1064. 			run_sql( $sql );

    1065. 

  1065. 			if( db_errno() != 0 )

    1066. 

  1066. 				if( $in )

    1067. 

  1067. 					return false;

    1068. 

  1068. 				else

    1069. 

  1069. 					return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1070. 

  1070. 			

    1071. 

  1071. 			// 将现有uid 变为follow状态

    1072. 

  1072. 			$sql = "UPDATE `todo_user` SET `is_follow` = 1 WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1";

    1073. 

  1073. 			run_sql( $sql );

    1074. 

  1074. 			

    1075. 

  1075. 			

    1076. 

  1076. 			

    1077. 

  1077. 			if( db_errno() != 0 )

    1078. 

  1078. 				if( $in )

    1079. 

  1079. 					return false;

    1080. 

  1080. 				else

    1081. 

  1081. 					return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1082. 

  1082. 				

    1083. 

  1083. 			// 获取被转让人的信息

    1084. 

  1084. 			$uinfo = get_user_info_by_id($uid);	

    1085. 

  1085. 			

    1086. 

  1086. 			$todo_text = get_todo_text_by_id( $tid );

    1087. 

  1087. 			$todo_count = get_var( "SELECT `comment_count` FROM `todo` WHERE `id` = '" . intval( $tid ) . "'" );

    1088. 

  1088. 			// 向todo新主人发送通知

    1089. 

  1089. 			send_notice( intval( $uid ) , __('API_TEXT_ASSIGN_TODO_TO_U',array( uname() ,  $todo_text )) , 1 ,  array('tid'=>intval($tid) , 'count'=> $todo_count )  );

    1090. 

  1090. 			

    1091. 

  1091. 			

    1092. 

  1092. 			// 向todo关注者发送通知

    1093. 

  1093. 			$sql = "SELECT `uid` FROM `todo_user` WHERE `tid`= '" . intval($tid) . "' AND `is_follow` = 1 ";

    1094. 

  1094. 			

    1095. 

  1095. 			if( $uitems = get_data( $sql ) )

    1096. 

  1096. 			foreach( $uitems as $uitem )

    1097. 

  1097. 			{

    1098. 

  1098. 				// 避免向当前转让人发送通知

    1099. 

  1099. 				if( $uitem['uid'] != uid() )

    1100. 

  1100. 					send_notice( $uitem['uid'] , __('API_TEXT_ASSIGN_TODO_FOLLOWED' , array( uname() , $todo_text , $uinfo['name'] ) ) , 1 , array('tid'=>intval($tid) , 'count'=> $todo_count )  );

    1101. 

  1101. 			}

    1102. 

  1102. 			

    1103. 

  1103. 			add_history( $tid , __('API_TEXT_ASSIGN_TODO')  );

    1104. 

  1104. 			

    1105. 

  1105. 			publish_feed(  __('API_TEXT_ASSIGN_TODO_DETAIL' , array( uname() , $todo_text , $uinfo['name'] ) ) , uid() , 2  , $tid );

    1106. 

  1106. 			

    1107. 

  1107. 			

    1108. 

  1108. 			if( $in )

    1109. 

  1109. 					return get_todo_info_by_id( $tid ) ;

    1110. 

  1110. 				else

    1111. 

  1111. 					return self::send_result( get_todo_info_by_id( $tid ) );

    1112. 

  1112. 		}

    1113. 

  1113. 		

    1114. 

  1114. 		

    1115. 

  1115. 		

    1116. 

  1116. 	}

    1117. 

  1117. 	

    1118. 

  1118. 	/**

    1119. 

  1119.      * 获取TODO列表

    1120. 

  1120.      *

    1121. 

  1121.      *

    1122. 

  1122.      * @param string token , 必填

    1123. 

  1123.      * @param string since_id - 最小TODO id

    1124. 

  1124.      * @param string max_id - 最大TODO id

    1125. 

  1125.      * @param string count - 每页TODO条数

    1126. 

  1126.      * @param string ord - 排序 ， asc 或者 desc

    1127. 

  1127.      * @param string by - 排序字段 

    1128. 

  1128.      * @param string group - 按分组输出，默认为false 

    1129. 

  1129.      * @return todo list array

    1130. 

  1130.      * @author EasyChen

    1131. 

  1131.      */

    1132. 

  1132. 	public function todo_list()

    1133. 

  1133. 	{

    1134. 

  1134. 		$uid = intval(v('uid'));

    1135. 

  1135. 		if( $uid < 1 ) $uid = $_SESSION['uid'];

    1136. 

  1136. 		

    1137. 

  1137. 		$since_id = intval( v( 'since_id' ) );

    1138. 

  1138.         $max_id = intval( v( 'max_id' ) );

    1139. 

  1139.         $count = intval( v( 'count' ) );

    1140. 

  1140.         $order = strtolower( z( t( v( 'ord' ) ) ) );

    1141. 

  1141.         $by = strtolower( z( t( v( 'by' ) ) ) );

    1142. 

  1142.         

    1143. 

  1143.         if( $order != 'desc' )

    1144. 

  1144.             $ord = ' ASC ';

    1145. 

  1145.         else

    1146. 

  1146.             $ord = ' DESC ';

    1147. 

  1147.         

    1148. 

  1148.         if( strlen( $by ) > 0 )

    1149. 

  1149.         {

    1150. 

  1150.             $osql = ' ORDER BY `' . s( $by ) . '` ' . $ord . ' ';

    1151. 

  1151.         }

    1152. 

  1152.         else

    1153. 

  1153.             $osql = '';

    1154. 

  1154.         

    1155. 

  1155.         if( $count < 1 ) $count = 10;

    1156. 

  1156.         if( $count > 100 ) $count = 100;

    1157. 

  1157.         

    1158. 

  1158.         if( $since_id > 0 )

    1159. 

  1159.             $wsql = " AND `tid` > '" . intval( $since_id ) . "' ";

    1160. 

  1160.         elseif( $max_id > 0 )

    1161. 

  1161.             $wsql = " AND `tid` < '" . intval( $max_id ) . "' ";

    1162. 

  1162.        	else

    1163. 

  1163.        		$wsql = '';

    1164. 

  1164. 

    1165. 

  1165.        	if( $uid != uid() ) $wsql .= ' AND `is_public` = 1 ';

    1166. 

  1166. 

    1167. 

  1167. 	   $sql = "SELECT * FROM `todo_user` WHERE `uid` = '" . intval($uid) . "' ";

    1168. 

  1168. 	   

    1169. 

  1169. 	   $sql = $sql . $wsql . $osql . " LIMIT " . $count ;

    1170. 

  1170. 	   

    1171. 

  1171. 		

    1172. 

  1172. 		if( !$data = get_data( $sql ) ) return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    1173. 

  1173. 		

    1174. 

  1174. 		if( db_errno() != 0 )

    1175. 

  1175. 			return self::send_error(  LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR')   );

    1176. 

  1176. 		

    1177. 

  1177. 		

    1178. 

  1178. 		$tids = array();

    1179. 

  1179. 		

    1180. 

  1180. 		foreach( $data as $item )

    1181. 

  1181. 		{

    1182. 

  1182. 			$tids[] = $item['tid'];

    1183. 

  1183. 			$todos[$item['tid']] = $item;

    1184. 

  1184. 		}

    1185. 

  1185. 		

    1186. 

  1186. 		if( count( $tids ) > 0 )

    1187. 

  1187. 		{

    1188. 

  1188. 			$sql = "SELECT * FROM `todo` WHERE `id` IN ( " . join( ' , ' ,  $tids ) . ") ORDER BY FIELD( `id` , " . join( ' , ' , $tids ) . "  )";

    1189. 

  1189. 			$todo = get_data( $sql );

    1190. 

  1190. 			foreach( $todo as $t )

    1191. 

  1191. 			{

    1192. 

  1192. 				$todos[$t['id']]['uid'] = $t['owner_uid'];

    1193. 

  1193. 				$todos[$t['id']]['content'] = $t['content'];

    1194. 

  1194. 				$todos[$t['id']]['timeline'] = $t['timeline'];

    1195. 

  1195. 			}

    1196. 

  1196. 			

    1197. 

  1197. 			// todo : sort it 

    1198. 

  1198. 			

    1199. 

  1199. 			if( intval(v('group')) != 1 )

    1200. 

  1200. 				return self::send_result(array_values($todos));

    1201. 

  1201. 			else

    1202. 

  1202. 			{

    1203. 

  1203. 				$ret = Array();

    1204. 

  1204. 				

    1205. 

  1205. 				foreach( $todos as $tt )

    1206. 

  1206. 				{

    1207. 

  1207. 					if( $tt['is_follow'] ==1 )

    1208. 

  1208. 						$ret['follow'][] = $tt;

    1209. 

  1209. 					elseif( $tt['status'] == 3 ) 

    1210. 

  1210. 						$ret['done'][] = $tt;

    1211. 

  1211. 					elseif( $tt['is_star'] == 1 )

    1212. 

  1212. 						$ret['star'][] = $tt;

    1213. 

  1213. 					else

    1214. 

  1214. 						$ret['normal'][] = $tt;

    1215. 

  1215. 				}

    1216. 

  1216. 				

    1217. 

  1217. 				return self::send_result($ret);

    1218. 

  1218. 			}	

    1219. 

  1219. 			

    1220. 

  1220. 		}

    1221. 

  1221. 		else

    1222. 

  1222. 		{

    1223. 

  1223. 			if( db_errno() != 0 )

    1224. 

  1224. 				return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1225. 

  1225. 			else

    1226. 

  1226. 				return self::send_error( LR_API_DB_EMPTY_RESULT , __( 'API_MESSAGE_EMPTY_RESULT_DATA' ) );

    1227. 

  1227. 		} 	

    1228. 

  1228. 		

    1229. 

  1229. 		/*

    1230. 

  1230. 		if( $data = get_user_todo_list_by_uid() )

    1231. 

  1231. 		{

    1232. 

  1232. 			return self::send_result( $data );

    1233. 

  1233. 		}

    1234. 

  1234. 		else

    1235. 

  1235. 		{

    1236. 

  1236. 			return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . db_error() );

    1237. 

  1237. 		}*/

    1238. 

  1238. 			

    1239. 

  1239. 	}

    1240. 

  1240. 

    1241. 

  1241. 	/**

    1242. 

  1242.      * TODO进行中

    1243. 

  1243.      *

    1244. 

  1244.      *

    1245. 

  1245.      * @param string token , 必填

    1246. 

  1246.      * @param string tid - TODO id , 必填

    1247. 

  1247.      * @return todo array

    1248. 

  1248.      * @author EasyChen

    1249. 

  1249.      */

    1250. 

  1250. 

    1251. 

  1251. 	public function todo_start()

    1252. 

  1252. 	{

    1253. 

  1253. 		return $this->todo_set_value( 'status' , 2 );

    1254. 

  1254. 	}

    1255. 

  1255. 	

    1256. 

  1256. 	/**

    1257. 

  1257.      * TODO暂停

    1258. 

  1258.      *

    1259. 

  1259.      *

    1260. 

  1260.      * @param string token , 必填

    1261. 

  1261.      * @param string tid - TODO id , 必填

    1262. 

  1262.      * @return todo array

    1263. 

  1263.      * @author EasyChen

    1264. 

  1264.      */

    1265. 

  1265. 	public function todo_pause()

    1266. 

  1266. 	{

    1267. 

  1267. 		return $this->todo_set_value( 'status' , 1 );

    1268. 

  1268. 	}

    1269. 

  1269. 	

    1270. 

  1270. 	/**

    1271. 

  1271.      * TODO加星

    1272. 

  1272.      *

    1273. 

  1273.      *

    1274. 

  1274.      * @param string token , 必填

    1275. 

  1275.      * @param string tid - TODO id , 必填

    1276. 

  1276.      * @return todo array

    1277. 

  1277.      * @author EasyChen

    1278. 

  1278.      */

    1279. 

  1279. 

    1280. 

  1280. 	public function todo_star()

    1281. 

  1281. 	{

    1282. 

  1282. 		return $this->todo_set_value( 'is_star' , 1 );

    1283. 

  1283. 	}

    1284. 

  1284. 	

    1285. 

  1285. 	/**

    1286. 

  1286.      * TODO去星

    1287. 

  1287.      *

    1288. 

  1288.      *

    1289. 

  1289.      * @param string token , 必填

    1290. 

  1290.      * @param string tid - TODO id , 必填

    1291. 

  1291.      * @return todo array

    1292. 

  1292.      * @author EasyChen

    1293. 

  1293.      */

    1294. 

  1294. 	public function todo_unstar()

    1295. 

  1295. 	{

    1296. 

  1296. 		return $this->todo_set_value( 'is_star' , 0 );

    1297. 

  1297. 	}

    1298. 

  1298. 	

    1299. 

  1299. 	/**

    1300. 

  1300.      * TODO设为公开

    1301. 

  1301.      *

    1302. 

  1302.      *

    1303. 

  1303.      * @param string token , 必填

    1304. 

  1304.      * @param string tid - TODO id , 必填

    1305. 

  1305.      * @return todo array

    1306. 

  1306.      * @author EasyChen

    1307. 

  1307.      */

    1308. 

  1308. 	public function todo_public()

    1309. 

  1309. 	{

    1310. 

  1310. 		return $this->todo_set_value( 'is_public' , 1 );

    1311. 

  1311. 	}

    1312. 

  1312. 	

    1313. 

  1313. 	/**

    1314. 

  1314.      * TODO设为私密

    1315. 

  1315.      *

    1316. 

  1316.      *

    1317. 

  1317.      * @param string token , 必填

    1318. 

  1318.      * @param string tid - TODO id , 必填

    1319. 

  1319.      * @return todo array

    1320. 

  1320.      * @author EasyChen

    1321. 

  1321.      */

    1322. 

  1322. 	public function todo_private()

    1323. 

  1323. 	{

    1324. 

  1324. 		return $this->todo_set_value( 'is_public' , 0 );

    1325. 

  1325. 	}

    1326. 

  1326. 	

    1327. 

  1327. 	/**

    1328. 

  1328.      * TODO设为已完成

    1329. 

  1329.      *

    1330. 

  1330.      *

    1331. 

  1331.      * @param string token , 必填

    1332. 

  1332.      * @param string tid - TODO id , 必填

    1333. 

  1333.      * @return todo array

    1334. 

  1334.      * @author EasyChen

    1335. 

  1335.      */

    1336. 

  1336. 	public function todo_done()

    1337. 

  1337. 	{

    1338. 

  1338. 		return $this->todo_set_value( 'status' , 3 );

    1339. 

  1339. 	}

    1340. 

  1340. 	

    1341. 

  1341. 	/**

    1342. 

  1342.      * 重开TODO

    1343. 

  1343.      *

    1344. 

  1344.      *

    1345. 

  1345.      * @param string token , 必填

    1346. 

  1346.      * @param string tid - TODO id , 必填

    1347. 

  1347.      * @return todo array

    1348. 

  1348.      * @author EasyChen

    1349. 

  1349.      */

    1350. 

  1350. 	public function todo_reopen()

    1351. 

  1351. 	{

    1352. 

  1352. 		return $this->todo_set_value( 'status' , 1 );

    1353. 

  1353. 	}

    1354. 

  1354. 	

    1355. 

  1355. 	/**

    1356. 

  1356. 	* @ignore

    1357. 

  1357. 	*/

    1358. 

  1358. 	private function todo_set_value( $field , $value )

    1359. 

  1359. 	{

    1360. 

  1360. 		$tid = intval(v('tid'));

    1361. 

  1361. 		

    1362. 

  1362. 		if( $tid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TID') );

    1363. 

  1363. 		

    1364. 

  1364. 		$sql = "SELECT * FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1365. 

  1365.         

    1366. 

  1366. 		if( !$data = get_line( $sql ))

    1367. 

  1367. 			return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_CANNOT_UPDATE_OTHERS_TODO') );

    1368. 

  1368. 			

    1369. 

  1369. 		// delete uid and limit 1

    1370. 

  1370. 		// to make all record updated at sametime

    1371. 

  1371. 		// for all the followers 

    1372. 

  1372. 		$sql = "UPDATE `todo_user` SET `" . s( $field ) . "` = '" . intval( $value ) . "' , `last_action_at` = NOW() WHERE `tid` = '" . intval( $tid ) . "' ";

    1373. 

  1373. 		

    1374. 

  1374. 		run_sql( $sql );

    1375. 

  1375. 		

    1376. 

  1376. 		if( mysql_errno() != 0 )

    1377. 

  1377.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1378. 

  1378.         else

    1379. 

  1379. 		{

    1380. 

  1380. 			$todoinfo = get_todo_info_by_id( $tid , true );

    1381. 

  1381. 			kset('dinfo', $todoinfo['details']['is_public'] );

    1382. 

  1382. 

    1383. 

  1383. 

    1384. 

  1384. 			if( $field == 'status' && $value == 3 )

    1385. 

  1385. 			{

    1386. 

  1386. 				

    1387. 

  1387. 				

    1388. 

  1388. 				if( $todoinfo['details']['is_public'] == 1 )

    1389. 

  1389. 				{

    1390. 

  1390. 					// .'完成了TODO【'.  .'】'

    1391. 

  1391. 					publish_feed( __('API_TEXT_FINISH_TODO' , array( uname() , $todoinfo['content'] ) ) , uid() , 2  , $tid );

    1392. 

  1392. 

    1393. 

  1393. 					// send notice 

    1394. 

  1394. 					// 向订阅todo的同学发送通知

    1395. 

  1395. 					$sql = "SELECT `uid` FROM `todo_user` WHERE `tid`= '" . intval($tid) . "' AND `is_follow` = 1 ";

    1396. 

  1396. 					

    1397. 

  1397. 					if( $uitems = get_data( $sql ) )

    1398. 

  1398. 					foreach( $uitems as $uitem )

    1399. 

  1399. 					{

    1400. 

  1400. 						if( $uitem['uid'] != uid() )

    1401. 

  1401. 							send_notice( $uitem['uid'] ,  __('API_TEXT_FINISH_TODO_FOLLOWED' , array( uname() , $todoinfo['content'] ) ) , 1 , array('tid'=>intval($tid) , 'count' => $todoinfo['comment_count'] )  );

    1402. 

  1402. 					}

    1403. 

  1403. 				}

    1404. 

  1404. 				

    1405. 

  1405. 				

    1406. 

  1406. 				

    1407. 

  1407. 			}

    1408. 

  1408. 			

    1409. 

  1409. 			

    1410. 

  1410. 			return self::send_result( $todoinfo ); 

    1411. 

  1411. 

    1412. 

  1412. 		}

    1413. 

  1413. 		

    1414. 

  1414. 			

    1415. 

  1415. 	}

    1416. 

  1416. 	

    1417. 

  1417. 	/**

    1418. 

  1418.      * TODO取消关注

    1419. 

  1419.      *

    1420. 

  1420.      *

    1421. 

  1421.      * @param string token , 必填

    1422. 

  1422.      * @param string tid - TODO id , 必填

    1423. 

  1423.      * @return todo array

    1424. 

  1424.      * @author EasyChen

    1425. 

  1425.      */

    1426. 

  1426. 	public function todo_unfollow()

    1427. 

  1427. 	{

    1428. 

  1428. 		$tid = intval(v('tid'));

    1429. 

  1429. 		if( $tid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TID') );

    1430. 

  1430. 		

    1431. 

  1431. 		$sql = "SELECT * FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1432. 

  1432. 		

    1433. 

  1433. 		if( !$data = get_line( $sql ))

    1434. 

  1434. 		{

    1435. 

  1435. 			return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_EMPTY_RESULT_DATA') );

    1436. 

  1436. 		}

    1437. 

  1437. 		else

    1438. 

  1438. 		{

    1439. 

  1439. 			$sql = "DELETE FROM `todo_user` WHERE `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' AND `is_follow` = 1 LIMIT 1";

    1440. 

  1440. 			run_sql( $sql );

    1441. 

  1441. 			

    1442. 

  1442. 			if( db_errno() != 0 )

    1443. 

  1443.             	return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1444. 

  1444.         	else

    1445. 

  1445.         	{	

    1446. 

  1446.         		return self::send_result(get_todo_info_by_id( $tid , true )); 

    1447. 

  1447.         	}

    1448. 

  1448. 			

    1449. 

  1449. 			

    1450. 

  1450. 		}

    1451. 

  1451. 

    1452. 

  1452. 	}

    1453. 

  1453. 	

    1454. 

  1454. 	/**

    1455. 

  1455.      * TODO添加关注

    1456. 

  1456.      *

    1457. 

  1457.      *

    1458. 

  1458.      * @param string token , 必填

    1459. 

  1459.      * @param string tid - TODO id , 必填

    1460. 

  1460.      * @return todo array

    1461. 

  1461.      * @author EasyChen

    1462. 

  1462.      */

    1463. 

  1463. 	public function todo_follow()

    1464. 

  1464. 	{

    1465. 

  1465. 		$tid = intval(v('tid'));

    1466. 

  1466. 		

    1467. 

  1467. 		if( $tid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TID') );

    1468. 

  1468. 		

    1469. 

  1469. 		$sql = "SELECT * FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1470. 

  1470. 		

    1471. 

  1471. 		if( !$data = get_line( $sql ))

    1472. 

  1472. 		{

    1473. 

  1473. 			// 没数据正常的

    1474. 

  1474. 			$sql = "INSERT IGNORE INTO `todo_user` ( `uid` , `tid` , `status`  , `is_follow` , `last_action_at`  ) VALUES ( '" . intval( $_SESSION['uid'] ) . "' , '" . intval( $tid ) . "' , 1 , 1 ,  NOW() )  ";

    1475. 

  1475. 			

    1476. 

  1476. 			run_sql( $sql );

    1477. 

  1477. 			

    1478. 

  1478. 			if( db_errno() != 0 )

    1479. 

  1479.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1480. 

  1480.         else

    1481. 

  1481. 			return self::send_result(get_todo_info_by_id( $tid , true )); 

    1482. 

  1482. 			

    1483. 

  1483. 

    1484. 

  1484. 		}

    1485. 

  1485. 		else

    1486. 

  1486. 		{

    1487. 

  1487. 			return self::send_error( LR_API_ARGS_ERROR , __('API_MESSAGE_TODO_ALREADY_FOLLOWED') );

    1488. 

  1488. 		}

    1489. 

  1489. 				

    1490. 

  1490. 			

    1491. 

  1491. 		

    1492. 

  1492. 		

    1493. 

  1493. 	}

    1494. 

  1494. 

    1495. 

  1495. 	

    1496. 

  1496. 	

    1497. 

  1497. 	/**

    1498. 

  1498.      * TODO更新文字内容

    1499. 

  1499.      *

    1500. 

  1500.      *

    1501. 

  1501.      * @param string token , 必填

    1502. 

  1502.      * @param string tid - TODO id , 必填

    1503. 

  1503.      * @param string text - TODO内容 , 必填

    1504. 

  1504.      * @return todo array

    1505. 

  1505.      * @author EasyChen

    1506. 

  1506.      */

    1507. 

  1507. 	public function todo_update()

    1508. 

  1508. 	{

    1509. 

  1509. 		$tid = intval(v('tid'));

    1510. 

  1510. 		

    1511. 

  1511. 		if( $tid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TID') );

    1512. 

  1512.         

    1513. 

  1513. 		// check user

    1514. 

  1514. 		//$sql = "SELECT * FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1515. 

  1515.         $sql = "SELECT * FROM `todo` WHERE `id` = '" . intval($tid) . "' AND `owner_uid` = '" . intval(uid()) . "' LIMIT 1";

    1516. 

  1516. 		

    1517. 

  1517. 		if( !$data = get_line( $sql ))

    1518. 

  1518. 			return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_CANNOT_UPDATE_OTHERS_TODO')  );

    1519. 

  1519. 		

    1520. 

  1520. 		$content = z(t(v('text')));

    1521. 

  1521. 		if( !not_empty($content) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TEXT') );

    1522. 

  1522. 		

    1523. 

  1523. 		$sql = "UPDATE `todo` SET `content` = '" . s($content) . "' WHERE `id` = '" . intval($tid) . "' LIMIT 1";

    1524. 

  1524. 		run_sql( $sql );

    1525. 

  1525. 		

    1526. 

  1526. 		if( mysql_errno() != 0 )

    1527. 

  1527.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1528. 

  1528.         else

    1529. 

  1529. 		{

    1530. 

  1530. 			run_sql( "UPDATE `todo_user` SET `last_action_at` = NOW() WHERE `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1");

    1531. 

  1531. 			

    1532. 

  1532. 			return self::send_result(get_todo_info_by_id( $tid , true )); 

    1533. 

  1533. 		}

    1534. 

  1534. 		

    1535. 

  1535. 	}

    1536. 

  1536. 	

    1537. 

  1537. 	/**

    1538. 

  1538.      * 清除已经完成的单个TODO

    1539. 

  1539.      *

    1540. 

  1540.      *

    1541. 

  1541.      * @param string token , 必填

    1542. 

  1542.      * @param string tid - TODO id , 必填

    1543. 

  1543.      * @return todo array

    1544. 

  1544.      * @author EasyChen

    1545. 

  1545.      */

    1546. 

  1546. 	public function todo_remove_done()

    1547. 

  1547. 	{

    1548. 

  1548. 		// @TODO  clean all the info in other tables

    1549. 

  1549. 		$sql = "DELETE FROM `todo_user` WHERE `uid` = '" . intval($_SESSION['uid']) . "' AND `status` = 3 " ;

    1550. 

  1550.         run_sql( $sql );

    1551. 

  1551. 		

    1552. 

  1552. 		if( mysql_errno() != 0 )

    1553. 

  1553.         {

    1554. 

  1554.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1555. 

  1555.         }

    1556. 

  1556.         else

    1557. 

  1557.             return self::send_result( array('msg'=>'ok')  );

    1558. 

  1558. 	}

    1559. 

  1559. 

    1560. 

  1560. 	/**

    1561. 

  1561.      * 清除所有已经完成的TODO标记为

    1562. 

  1562.      *

    1563. 

  1563.      *

    1564. 

  1564.      * @param string token , 必填

    1565. 

  1565.      * @param string tid - TODO id , 必填

    1566. 

  1566.      * @return todo array

    1567. 

  1567.      * @author EasyChen

    1568. 

  1568.      */

    1569. 

  1569. 	public function todo_all_done()

    1570. 

  1570. 	{

    1571. 

  1571. 		// @TODO  clean all the info in other tables

    1572. 

  1572. 		$sql = "UPDATE `todo_user` SET `status` = 3 WHERE `uid` = '" . intval($_SESSION['uid']) . "' AND ( `status` = 1 OR `status` = 2 )  " ;

    1573. 

  1573.         run_sql( $sql );

    1574. 

  1574. 		

    1575. 

  1575. 		if( mysql_errno() != 0 )

    1576. 

  1576.         {

    1577. 

  1577.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1578. 

  1578.         }

    1579. 

  1579.         else

    1580. 

  1580.             return self::send_result( array('msg'=>'ok')  );

    1581. 

  1581. 	}

    1582. 

  1582. 	

    1583. 

  1583. 	/**

    1584. 

  1584.      * 删除TODO

    1585. 

  1585.      *

    1586. 

  1586.      *

    1587. 

  1587.      * @param string token , 必填

    1588. 

  1588.      * @param string tid - TODO id , 必填

    1589. 

  1589.      * @return todo array

    1590. 

  1590.      * @author EasyChen

    1591. 

  1591.      */

    1592. 

  1592. 	public function todo_remove()

    1593. 

  1593. 	{

    1594. 

  1594. 		$tid = intval(v('tid'));

    1595. 

  1595. 		

    1596. 

  1596. 		if( $tid < 1 ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TID') );

    1597. 

  1597.         

    1598. 

  1598.         

    1599. 

  1599.         $old = get_todo_info_by_id( $tid );

    1600. 

  1600.         

    1601. 

  1601.         $sql = "DELETE FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1602. 

  1602.         run_sql( $sql );

    1603. 

  1603.         

    1604. 

  1604.         if( mysql_errno() != 0 )

    1605. 

  1605.         {

    1606. 

  1606.             return self::send_error( LR_API_DB_ERROR , __('API_MESSAGE_DATABASE_ERROR') . mysql_error() );

    1607. 

  1607.         }

    1608. 

  1608.         else

    1609. 

  1609.             return self::send_result( $old  );

    1610. 

  1610. 	}

    1611. 

  1611. 	

    1612. 

  1612. 	

    1613. 

  1613. 	/**

    1614. 

  1614.      * 离线同步TODO

    1615. 

  1615.      *

    1616. 

  1616.      * 客户端用

    1617. 

  1617.      * @ignore

    1618. 

  1618.      */

    1619. 

  1619. 	public function todo_sync()

    1620. 

  1620. 	{

    1621. 

  1621. 		// 首先判断text是否存在

    1622. 

  1622. 		// 然后根据tid 判断是更新还是添加操作

    1623. 

  1623. 		// 

    1624. 

  1624. 		$content = z(t(v('text')));

    1625. 

  1625. 		if( !not_empty( $content ) ) return self::send_error( LR_API_ARGS_ERROR , __('INPUT_CHECK_BAD_ARGS','TEXT') );

    1626. 

  1626. 		

    1627. 

  1627. 		$tid = intval(v('tid'));

    1628. 

  1628. 		if( $tid < 0 )

    1629. 

  1629. 		{

    1630. 

  1630. 			if( intval(v('is_delete')) == 1 )

    1631. 

  1631. 			{

    1632. 

  1632. 				// 在本地添加后又在本地删除了

    1633. 

  1633. 				return self::send_result( array( 'msg' => __('API_MESSAGE_TODO_ALREADY_DELETE_LOCALLY') ) );

    1634. 

  1634. 			}

    1635. 

  1635. 			// add

    1636. 

  1636. 			return $this->todo_add();

    1637. 

  1637. 		}

    1638. 

  1638. 		else

    1639. 

  1639. 		{

    1640. 

  1640. 			// 鉴权

    1641. 

  1641. 			$sql = "SELECT * FROM `todo_user` WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1" ;

    1642. 

  1642.         

    1643. 

  1643. 			if( !$data = get_line( $sql ))

    1644. 

  1644. 			return self::send_error( LR_API_FORBIDDEN , __('API_MESSAGE_CANNOT_UPDATE_OTHERS_TODO') );

    1645. 

  1645. 			

    1646. 

  1646. 			// 判断最后更新时间

    1647. 

  1647. 			// 

    1648. 

  1648. 			// 服务器的最后操作时间 $data['last_action_at']

    1649. 

  1649. 			

    1650. 

  1650. 			// 本地todo的最后操作时间

    1651. 

  1651. 			// 

    1652. 

  1652. 			$client_last_action_at = z(t(v('last_action_at')));

    1653. 

  1653. 			

    1654. 

  1654. 			if( not_empty( $data['last_action_at'] ) && not_empty( $client_last_action_at ) )

    1655. 

  1655. 			{

    1656. 

  1656. 				if( not_empty(v('client_now')) )

    1657. 

  1657. 				{

    1658. 

  1658. 					$offset = time() - strtotime( v('client_now') ) ;

    1659. 

  1659. 				}else $offset = 0;

    1660. 

  1660. 				

    1661. 

  1661. 				// 客户端时间校正

    1662. 

  1662. 				// 你不能穿越时空

    1663. 

  1663. 				if( strtotime( v('last_action_at') ) > strtotime( v('client_now') )   ) 

    1664. 

  1664. 					$offset = 0;

    1665. 

  1665. 				

    1666. 

  1666. 				

    1667. 

  1667. 				

    1668. 

  1668. 				if( strtotime( $client_last_action_at ) - strtotime( $data['last_action_at']) + $offset  <= 0 )

    1669. 

  1669. 					return self::send_result( array( 'msg' => __('API_MESSAGE_TODO_ALREADY_HAD_OTHER_ACTION') ) );

    1670. 

  1670. 			}

    1671. 

  1671. 			

    1672. 

  1672. 			// update

    1673. 

  1673. 			if( intval(v('is_delete')) == 1 )

    1674. 

  1674. 			{

    1675. 

  1675. 				// remove

    1676. 

  1676. 				$_REQUEST['tid'] = $tid;

    1677. 

  1677. 				return $this->todo_remove();

    1678. 

  1678. 				

    1679. 

  1679. 			}

    1680. 

  1680. 			else

    1681. 

  1681. 			{

    1682. 

  1682. 				// update

    1683. 

  1683. 				// 先更新todo表

    1684. 

  1684. 				$sql = "UPDATE `todo` SET `content` = '" . s($content) . "' WHERE `id` = '" . intval($tid) . "' LIMIT 1";

    1685. 

  1685. 				run_sql( $sql );

    1686. 

  1686. 				

    1687. 

  1687. 				$sql = "UPDATE `todo_user` SET 

    1688. 

  1688. 				`is_star` = '" . intval( v('is_star') ) . "', 

    1689. 

  1689. 				`is_public` = '" . intval( v('is_public') ) . "', 

    1690. 

  1690. 				`status` = '" . intval( v('status') ) . "',

    1691. 

  1691. 				`last_action_at` = NOW() WHERE  `tid` = '" . intval($tid) . "' AND `uid` = '" . intval($_SESSION['uid']) . "' LIMIT 1";

    1692. 

  1692. 

    1693. 

  1693. 				run_sql( $sql );

    1694. 

  1694. 				

    1695. 

  1695. 				return self::se…
    1696.

Large files files are truncated, but you can click here to view the full file