/s3db3.5.10/item.php

<?php

	#instance.php displays all statements in a certain instance and links to create more

	#Helena F Deus (helenadeus@gmail.com)

	ini_set('display_errors',0);

	if($_REQUEST['su3d'])

	ini_set('display_errors',1);

	



if($_SERVER['HTTP_X_FORWARDED_HOST']!='')

			$def = $_SERVER['HTTP_X_FORWARDED_HOST'];

	else 

			$def = $_SERVER['HTTP_HOST'];

	

	if(file_exists('config.inc.php'))

	{

		include('config.inc.php');

	}

	else

	{

		Header('Location: http://'.$def.'/s3db/');

		exit;

	}

	





#just to know where we are...

$thisScript = end(explode('/', $_SERVER['SCRIPT_FILENAME'])).'?'.$_SERVER['argv'][0];



$key = $_GET['key'];



#echo '<pre>';print_r($_GET);

#Get the key, send it to check validity



include_once('core.header.php');



if($key)

	$user_id = get_entry('access_keys', 'account_id', 'key_id', $key, $db);

	else

	$user_id = $_SESSION['user']['account_id'];



#Universal variables



$instance_id = ($_REQUEST['item_id']!='')?$_REQUEST['item_id']:$_REQUEST['instance_id'];



if($instance_id)

$instance_info = URIinfo('I'.$instance_id, $user_id, $key, $db);





$class_id = ($_REQUEST['class_id']!='')?$_REQUEST['class_id']:(($_REQUEST['collection_id']!='')?$_REQUEST['collection_id']:$instance_info['class_id']);



if($instance_id=='')

{

echo "Please provide an item_id";

exit;

}

elseif(!$instance_info)

{

echo "Item_id ".$instance_id." does not exist";

exit;

}

elseif(!$instance_info['view'])

{echo ('User does not have permission in this instance');

exit;

}

else

	{

	

	include('action.header.php'); #add the instance header and the insertall

	

	echo '<table width="100%">';

	echo '<tr><td class="nav_menu">';

	if($instance_info['add_data'])

	echo '<br /><br />[ <a href="#" onClick="window.location=\''.$action['instanceform'].'\'"> Add Statements </a>]';

	

	}

	#include the header for the instance

	include('resource/instance.header.php');



	

	#if there are any rules, print a grid with the rules header and the button to add a statement

	#if (ereg('(1|2|3)', $projectAcl)) {#users that do not have access on the project and do not provide a project_id cannot see rules. Otherwise, there is no way of knowing which rules they were given access to

		

	

	$s3ql=compact('user_id','db');

	$s3ql['from'] = 'rules';

	$s3ql['where']['subject_id'] = $instance_info['class_id'];

	#$s3ql['where']['object'] = "!='UID'";



	$rules = S3QLaction($s3ql);

	#echo 'ola<pre>';print_r($rules);exit;

	$I = compact('instance_info', 'db', 'user_id', 'rules','project_id');

	#}

	

	if(is_array($rules))

	echo render_statements($I);	#print the statements together with the rules.

			

	





  

       

	

	

	 function render_statements($I)

	{$action = $GLOBALS['action']; #all the possible links were separated ina script that gets always included

		extract($I);

		$_SESSION['current_color']='0';

        $_SESSION['previous_verb']='';



		#display all the rules in this class where the user has permission

		

		$s3ql=compact('user_id','db');

		$s3ql['select']='*';

		$s3ql['from']='statements';

		$s3ql['where']['instance_id']=$instance_info['instance_id'];

		$statements = S3QLaction($s3ql);



		#echo '<pre>';print_r($statements);exit;

		#divide them by rules

		if(is_array($statements)){

		foreach ($statements as $stat_info) {

			$stats_per_rule[$stat_info['rule_id']][$stat_info['statement_id']] = $stat_info;

		}

		if(is_array($rules))

			{$rule_ids = array_map('grab_rule_id', $rules);

			$tRules = array_combine($rule_ids, $rules);

			}

		

			

		#echo '<pre>';print_r($stats_per_rule);exit;

		if(is_array($stats_per_rule) && is_array($tRules))

		{

			$stats ='';

			$index = 1;

			foreach($stats_per_rule as $rule_id=>$exist_stats)

			{

				if($tRules[$rule_id]['object']!='UID' && $tRules[$rule_id]['verb']!='has UID'){

				$subject = $tRules[$rule_id]['subject'];

				$verb = $tRules[$rule_id]['verb'];

				$object = $tRules[$rule_id]['object'];

				$rule_id = $tRules[$rule_id]['rule_id'];

				#$rule_notes = preg_replace('/\(.*\)/', '', $rules[$i]['notes']);

				$rule_notes = $tRules[$rule_id]['notes'];

				

				$stats .= sprintf("\n%s\n", '<table width="100%" border="0"><tr bgcolor="lightyellow"><td colspan="2">');	

				

				$stats .= sprintf("%s\n", ($index++).'. '.printVerbinColor($verb).' | <font size=4><b>'.$object.'</b></font> (R'.$rule_id.') </td></tr><tr><td>&nbsp;&nbsp;<font size-=2>'.$rule_notes.'</font></td><td align="right">');

				

				if($tRules[$rule_id]['add_data'])

				$stats .= sprintf("%s\n",'<input type="button" value="Add"  onClick="window.open(\''.$action['insertstatement'].'&rule_id='.$rule_id.'\', \'_blank\', \'width=600, height=500, location=no, titlebar=no, scrollbars=yes, resizable=yes\')">');



					

				$stats .= sprintf("%s\n", '	</td></tr>');

				

				$stat ='';

				$stat .= sprintf("%s\n", '	<tr><td colspan="2" style="color: navy; font-size: normal">');

				if(is_array($exist_stats))

				$stat .= render_substatements_without_grid($exist_stats, $db);

					//$stat .= render_substatements($exist_stats, 'value', 'DESC'); 

				$stat .= sprintf("%s\n", '	</td></tr>');

				

				

				$stats .= $stat;

				$stats .= sprintf("%s\n", '     <tr><td colspan="2"><br>');

                $stats .= sprintf("%s\n", '     </td></tr>');

				$stats .= sprintf("%s\n", '</table>');	

				

			}

			}

		}

		}

		

		return $stats;	

			

	}

	

	

		



	function render_substatements_without_grid($exist_stats, $db)

        {$action=$GLOBALS['action'];

		

                $substats = '<table width="100%" border="0">';

                if(is_array($exist_stats))

				{

				#echo '<pre>';print_r($exist_stats);exit;

				

				foreach($exist_stats as $i => $value)

                {

                     

                        #if(object_is_resource())

						if($exist_stats[$i]['file_name']=='') {

							if($exist_stats[$i]['object_id']!='')

							{#if the value is not a file, put a button

							$substats .= '<tr><td colspan="6"><input type="button" size="10" value="'.$exist_stats[$i]['object_notes'].'" onClick="window.open(\''.$action['item'].'&item_id='.$exist_stats[$i]['value'].'\', \'_blank\', \'width=700, height=600, location=no, titlebar=no, scrollbars=yes, resizable=yes\')">&nbsp;&nbsp;<font size=1 color=navy>  (Id '.str_pad($exist_stats[$i]['value'], 6, '0', STR_PAD_LEFT).')</font></td></tr>';

							}

							

							else

							{

							$substats .= "<tr><td colspan=6><font color=dodgerblue size=3><b>".html_entity_decode($exist_stats[$i]['value'])."</b></font></td></tr>";

									

							}

						}

						else {

							$substats .= "<tr><td colspan=6><font color=dodgerblue size=3><b>File: <a href=".$action['download']."&statement_id=".$exist_stats[$i]['statement_id'].">".$exist_stats[$i]['file_name'].(($exist_stats[$i]['file_size']!='')?'('.ceil($exist_stats[$i]['file_size']/1024).' kb)':'')."<a/></b></font></td></tr>";

						}

						

						$substats .= "<tr><td width=50%>&nbsp;</td><td width=15%><font color=gray size=1>".substr($exist_stats[$i]['created_on'], 0, 19)."</font></td><td width=15%>";

							

						

						if($exist_stats[$i]['change'])

						{

						$action_link =  printStatementActionLink($exist_stats[$i]['statement_id']);

						$substats .= "<font color=gray size=1>".find_user_loginID(array('account_id'=>$exist_stats[$i]['created_by'], 'db'=>$db))."</font></td><td width=10%><font color=gray size=1>".$exist_stats[$i]['notes']."</font></td><td width=10% align=right>".$action_link."</td></tr>";

						}



												

					}

                $substats .= '</table>';

                //echo $substats;

                return $substats;

				}

		}



	 





?>