AdminCustomTextManagement.php

<?php
/*
 SPDX-FileCopyrightText: © 2025 Harshit Gandhi <gandhiharshit716@gmail.com>
 SPDX-FileCopyrightText: © Fossology contributors
 
 SPDX-License-Identifier: GPL-2.0-only
*/
 
namespace Fossology\UI\Page;
 
use Fossology\Lib\Auth\Auth;
use Fossology\Lib\Dao\UserDao;
use Fossology\Lib\Db\DbManager;
use Fossology\Lib\Plugin\DefaultPlugin;
use Fossology\Lib\Util\StringOperation;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\RedirectResponse;
 
class AdminCustomTextManagement extends DefaultPlugin
{
  const NAME = "admin_custom_text_management";
 
  function __construct()
  {
    parent::__construct(self::NAME, array(
        self::TITLE => "Add Custom Text",
        self::MENU_LIST => "Admin::Text Management::Add",
        self::REQUIRES_LOGIN => true,
        self::PERMISSION => Auth::PERM_ADMIN
    ));
  }
 
  protected function handle(Request $request)
  {
    $userId = Auth::getUserId();
    $groupId = Auth::getGroupId();
    $userDao = $this->getObject('dao.user');
 
    // Check if user is admin
    if (!Auth::isAdmin()) {
      return $this->flushContent(_('Access denied. Admin privileges required.'));
    }
 
    $action = $request->get('action');
 
    // Handle AJAX requests
    if ($action == 'check_duplicate' && $request->getMethod() == 'POST') {
      return $this->checkDuplicateAjax($request);
    }
 
    // Handle form submissions
    if ($request->get('updateit') || $request->get('addit')) {
      $resultstr = $this->savePhrase($request, $userId, $groupId);
      if (strpos($resultstr, 'ERROR') !== false) {
        $vars = $this->getEditFormVars($request->get('cp_pk', 0));
        $vars['message'] = $resultstr;
        return $this->render('admin_custom_text_edit.html.twig', $this->mergeWithDefault($vars));
      } else {
        // Redirect to list view after successful save
        $redirectUrl = Traceback_uri() . '?mod=admin_custom_text_list';
        return new RedirectResponse($redirectUrl);
      }
    }
 
    // Handle edit form display
    if ($request->get('edit') !== null) {
      $cp_pk = intval($request->get('edit'));
      $vars = $this->getEditFormVars($cp_pk);
      return $this->render('admin_custom_text_edit.html.twig', $this->mergeWithDefault($vars));
    }
 
    // Default to add form (edit with cp_pk=0)
    $vars = $this->getEditFormVars(0);
    return $this->render('admin_custom_text_edit.html.twig', $this->mergeWithDefault($vars));
  }
 
  private function getEditFormVars($cp_pk)
  {
    $vars = array();
 
    if ($cp_pk > 0) {
      // Edit existing phrase
      $phraseData = $this->getPhraseData($cp_pk);
      if ($phraseData) {
        $vars = array_merge($vars, $phraseData);
        $vars['isEdit'] = true;
        // Get associated licenses for this phrase
        $vars['selectedLicenses'] = $this->getAssociatedLicenses($cp_pk);
      }
    } else {
      // Add new phrase
      $vars['isEdit'] = false;
      $vars['cp_pk'] = 0;
      $vars['selectedLicenses'] = array();
    }
 
    $vars['formAction'] = Traceback_uri() . '?mod=' . self::NAME;
    $vars['updateParam'] = $vars['isEdit'] ? 'updateit' : 'addit';
    $vars['textParam'] = 'text';
    $vars['acknowledgementParam'] = 'acknowledgement';
    $vars['commentsParam'] = 'comments';
    $vars['userFkParam'] = 'user_fk';
    $vars['groupFkParam'] = 'group_fk';
    $vars['licensesParam'] = 'licenses';
    $vars['isActiveParam'] = 'is_active';
 
    // Get license options for dropdown
    $vars['licenseOptions'] = $this->getLicenseOptions();
 
    // Get users for bulk data filter dropdown
    $userDao = $this->getObject('dao.user');
    $vars['bulkDataUsers'] = $userDao->getUsersByGroup();
 
    return $vars;
  }
 
  private function checkDuplicateAjax(Request $request)
  {
    $textMd5 = trim($request->get('text_md5'));
    $currentCpPk = intval($request->get('cp_pk'));
 
    if (empty($textMd5)) {
      return new JsonResponse(array('duplicate' => false));
    }
 
    $isDuplicate = $this->checkDuplicateTextMd5($textMd5, $currentCpPk > 0 ? $currentCpPk : null);
 
    return new JsonResponse(array('duplicate' => $isDuplicate));
  }
 
  private function checkDuplicateTextMd5($textMd5, $excludeCpPk = null)
  {
    $dbManager = $this->getObject('db.manager');
 
    $sql = "SELECT cp_pk FROM custom_phrase WHERE text_md5 = $1";
    $params = array($textMd5);
 
    if ($excludeCpPk) {
      $sql .= " AND cp_pk != $2";
      $params[] = $excludeCpPk;
    }
 
    $result = $dbManager->getSingleRow($sql, $params, __METHOD__);
 
    return $result !== false;
  }
 
  private function getPhraseData($cp_pk)
  {
    $dbManager = $this->getObject('db.manager');
 
    $sql = "SELECT * FROM custom_phrase WHERE cp_pk = $1";
    $row = $dbManager->getSingleRow($sql, array($cp_pk), __METHOD__);
 
    if ($row) {
      $row['is_active'] = $dbManager->booleanFromDb($row['is_active']);
    }
 
    return $row;
  }
 
 
  private function getAssociatedLicenses($cp_pk)
  {
    $dbManager = $this->getObject('db.manager');
 
    $sql = "SELECT lr.rf_pk, lr.rf_shortname, cplm.removing
            FROM custom_phrase_license_map cplm
            JOIN license_ref lr ON cplm.rf_fk = lr.rf_pk
            WHERE cplm.cp_fk = $1
            ORDER BY lr.rf_shortname";
 
    $result = $dbManager->getRows($sql, array($cp_pk));
 
    $licenses = array();
    foreach ($result as $row) {
      $licenses[] = array(
        'rf_pk' => $row['rf_pk'],
        'rf_shortname' => $row['rf_shortname'],
        'removing' => $dbManager->booleanFromDb($row['removing'])
      );
    }
 
    return $licenses;
  }
 
  private function savePhrase(Request $request, $userId, $groupId)
  {
    $cp_pk = intval($request->get('cp_pk'));
    $text = StringOperation::replaceUnicodeControlChar(trim($request->get('text')));
    $acknowledgement = StringOperation::replaceUnicodeControlChar(trim($request->get('acknowledgement')));
    $comments = StringOperation::replaceUnicodeControlChar(trim($request->get('comments')));
    $user_fk = intval($request->get('user_fk'));
    $group_fk = intval($request->get('group_fk'));
    $licenseData = $request->get('license_data'); // JSON data with license add/remove operations
    $is_active = $request->get('is_active') == 'on' ? 'true' : 'false';
 
    if (empty($text)) {
      return _("ERROR: The text field cannot be empty.");
    }
 
    // Parse license data from JSON (new bulk-style form)
    $licenseMappings = array();
    if (!empty($licenseData)) {
      $decodedData = json_decode($licenseData, true);
      if (is_array($decodedData)) {
        foreach ($decodedData as $item) {
          if (!empty($item['licenseId'])) {
            $licenseMappings[] = array(
              'rf_pk' => intval($item['licenseId']),
              'removing' => ($item['action'] === 'Remove')
            );
          }
        }
      }
    }
 
    // Validate that at least one license is associated
    if (empty($licenseMappings)) {
      return _("ERROR: At least one license must be associated with the custom text.");
    }
 
    // Generate MD5 hash of the text
    $textMd5 = md5($text);
 
    // Check for duplicate text (exclude current record when updating)
    if ($this->checkDuplicateTextMd5($textMd5, $cp_pk > 0 ? $cp_pk : null)) {
      return _("ERROR: A custom text with the same content already exists in the database. Please modify the text or use the existing entry.");
    }
 
    // Set defaults for user and group if not provided
    if (empty($user_fk)) {
      $user_fk = $userId;
    }
    if (empty($group_fk)) {
      $group_fk = $groupId;
    }
 
    try {
      $dbManager = $this->getObject('db.manager');
 
      // Start transaction
      $dbManager->begin();
 
      if ($cp_pk > 0) {
        // Update existing phrase
        $sql = "UPDATE custom_phrase SET 
                text = $2, text_md5 = $3, acknowledgement = $4, comments = $5, 
                user_fk = $6, group_fk = $7, is_active = $8
                WHERE cp_pk = $1";
        $params = array($cp_pk, $text, $textMd5, $acknowledgement, $comments,
                       $user_fk, $group_fk, $is_active);
        $dbManager->prepare($stmt = __METHOD__ . ".update", $sql);
        $dbManager->freeResult($dbManager->execute($stmt, $params));
 
        // Delete existing license associations
        $deleteSql = "DELETE FROM custom_phrase_license_map WHERE cp_fk = $1";
        $dbManager->prepare($deleteStmt = __METHOD__ . ".delete_licenses", $deleteSql);
        $dbManager->freeResult($dbManager->execute($deleteStmt, array($cp_pk)));
 
      } else {
        // Insert new phrase
        $sql = "INSERT INTO custom_phrase 
                (text, text_md5, acknowledgement, comments, user_fk, group_fk, is_active, created_date)
                VALUES ($1, $2, $3, $4, $5, $6, $7, CURRENT_TIMESTAMP) RETURNING cp_pk";
        $params = array($text, $textMd5, $acknowledgement, $comments,
                       $user_fk, $group_fk, $is_active);
        $dbManager->prepare($stmt = __METHOD__ . ".insert", $sql);
        $result = $dbManager->execute($stmt, $params);
        $row = $dbManager->fetchArray($result);
        $cp_pk = $row['cp_pk'];
        $dbManager->freeResult($result);
      }
 
      // Insert license associations
      if (!empty($licenseMappings)) {
        $insertLicenseSql = "INSERT INTO custom_phrase_license_map (cp_fk, rf_fk, removing) VALUES ($1, $2, $3)";
        $dbManager->prepare($insertLicenseStmt = __METHOD__ . ".insert_license", $insertLicenseSql);
 
        foreach ($licenseMappings as $mapping) {
          if (!empty($mapping['rf_pk'])) {
            $removingValue = $mapping['removing'] ? 'true' : 'false';
            $dbManager->freeResult($dbManager->execute($insertLicenseStmt, array($cp_pk, $mapping['rf_pk'], $removingValue)));
          }
        }
      }
 
      // Commit transaction
      $dbManager->commit();
 
      return $cp_pk > 0 ? _("Custom text updated successfully.") :
                         _("Custom text added successfully.");
 
    } catch (\Exception $e) {
      $dbManager->rollback();
      return _("ERROR: Failed to save custom text: ") . $e->getMessage();
    }
  }
 
  private function getLicenseOptions()
  {
    $dbManager = $this->getObject('db.manager');
 
    $sql = "SELECT rf_pk, rf_shortname FROM license_ref WHERE rf_active = true ORDER BY rf_shortname";
    $result = $dbManager->getRows($sql);
 
    $options = array();
    foreach ($result as $row) {
      $options[$row['rf_pk']] = $row['rf_shortname'];
    }
 
    return $options;
  }
}
 
register_plugin(new AdminCustomTextManagement());