484 lines
17 KiB
PHP
484 lines
17 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Name: Association Profile
|
|
* Description: Structured diagnostic identity fields for HOA association channels.
|
|
* Version: 0.2.0
|
|
* MinVersion: 11.0
|
|
* MaxVersion: 12.0
|
|
*/
|
|
|
|
function assoc_profile_module() {}
|
|
|
|
require_once 'addon/assoc_profile/assoc_profile_manage.php';
|
|
|
|
function assoc_profile_load() {
|
|
register_hook('load_pdl', 'addon/assoc_profile/assoc_profile.php', 'assoc_profile_load_pdl');
|
|
register_hook('profile_advanced','addon/assoc_profile/assoc_profile.php', 'assoc_profile_view_hook');
|
|
register_hook('profile_edit', 'addon/assoc_profile/assoc_profile.php', 'assoc_profile_edit_hook');
|
|
}
|
|
|
|
function assoc_profile_unload() {
|
|
unregister_hook('load_pdl', 'addon/assoc_profile/assoc_profile.php', 'assoc_profile_load_pdl');
|
|
unregister_hook('profile_advanced','addon/assoc_profile/assoc_profile.php', 'assoc_profile_view_hook');
|
|
unregister_hook('profile_edit', 'addon/assoc_profile/assoc_profile.php', 'assoc_profile_edit_hook');
|
|
}
|
|
|
|
function assoc_profile_load_pdl(&$b) {
|
|
if (!is_array($b) || empty($b['module']) || $b['module'] !== 'assoc_profile') {
|
|
return;
|
|
}
|
|
$layout = @file_get_contents('addon/assoc_profile/mod_assoc_profile.pdl');
|
|
if ($layout !== false) {
|
|
$b['layout'] = $layout;
|
|
}
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// HELPERS
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_h($v) {
|
|
return htmlspecialchars((string)$v, ENT_QUOTES, 'UTF-8');
|
|
}
|
|
|
|
function assoc_slug_from_address($addr) {
|
|
return explode('@', $addr)[0] ?? '';
|
|
}
|
|
|
|
function assoc_is_operator() {
|
|
if (!local_channel()) return false;
|
|
$channel = App::get_channel();
|
|
return local_channel() === intval($channel['channel_id']);
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// FILE I/O
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_load_config() {
|
|
$raw = @file_get_contents('addon/assoc_profile/config.json');
|
|
if (!$raw) return [];
|
|
$d = json_decode($raw, true);
|
|
return json_last_error() === JSON_ERROR_NONE ? $d : [];
|
|
}
|
|
|
|
function assoc_registry_path() {
|
|
$c = assoc_load_config();
|
|
return $c['registry_file'] ?? 'addon/assoc_profile/assoc_registry.json';
|
|
}
|
|
|
|
function assoc_fields_path() {
|
|
$c = assoc_load_config();
|
|
return $c['fields_file'] ?? 'addon/assoc_profile/assoc_fields.json';
|
|
}
|
|
|
|
function assoc_load_registry() {
|
|
$raw = @file_get_contents(assoc_registry_path());
|
|
if (!$raw) { logger('assoc_profile: registry not found'); return []; }
|
|
$d = json_decode($raw, true);
|
|
if (json_last_error() !== JSON_ERROR_NONE) { logger('assoc_profile: registry malformed'); return []; }
|
|
foreach (['_note','_version','_slug_format','_select_values'] as $k) unset($d[$k]);
|
|
return $d;
|
|
}
|
|
|
|
function assoc_write_registry($data) {
|
|
$json = json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
|
|
if (!$json) { logger('assoc_profile: encode failed'); return false; }
|
|
if (file_put_contents(assoc_registry_path(), $json, LOCK_EX) === false) {
|
|
logger('assoc_profile: write failed'); return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function assoc_load_fields() {
|
|
$raw = @file_get_contents(assoc_fields_path());
|
|
if (!$raw) { logger('assoc_profile: fields file not found'); return ['groups'=>[],'fields'=>[]]; }
|
|
$d = json_decode($raw, true);
|
|
if (json_last_error() !== JSON_ERROR_NONE) { logger('assoc_profile: fields file malformed'); return ['groups'=>[],'fields'=>[]]; }
|
|
return $d;
|
|
}
|
|
|
|
function assoc_write_fields($data) {
|
|
$json = json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
|
|
if (!$json) return false;
|
|
return file_put_contents(assoc_fields_path(), $json, LOCK_EX) !== false;
|
|
}
|
|
|
|
function assoc_get($slug) {
|
|
$r = assoc_load_registry();
|
|
return $r[$slug] ?? null;
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// FIELD HELPERS
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_field_map() {
|
|
$def = assoc_load_fields();
|
|
$map = [];
|
|
foreach ($def['fields'] ?? [] as $f) {
|
|
$map[$f['nickname']] = $f;
|
|
}
|
|
return $map;
|
|
}
|
|
|
|
function assoc_blank_entry() {
|
|
$map = assoc_field_map();
|
|
$entry = [];
|
|
foreach ($map as $nick => $f) {
|
|
$entry[$nick] = $f['default'] ?? '';
|
|
}
|
|
return $entry;
|
|
}
|
|
|
|
function assoc_backfill_all($new_field_def) {
|
|
$registry = assoc_load_registry();
|
|
$nick = $new_field_def['nickname'];
|
|
$default = $new_field_def['default'] ?? '';
|
|
foreach ($registry as $slug => &$entry) {
|
|
if (!isset($entry[$nick])) {
|
|
$entry[$nick] = $default;
|
|
}
|
|
}
|
|
unset($entry);
|
|
return $registry;
|
|
}
|
|
|
|
function assoc_remove_field_from_all($nickname) {
|
|
$registry = assoc_load_registry();
|
|
foreach ($registry as $slug => &$entry) {
|
|
unset($entry[$nickname]);
|
|
}
|
|
unset($entry);
|
|
return $registry;
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// CONTENT ROUTER
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_profile_content() {
|
|
if (function_exists('head_add_css')) {
|
|
head_add_css('/addon/assoc_profile/view/css/assoc_profile.css');
|
|
}
|
|
if (function_exists('head_add_js')) {
|
|
head_add_js('/addon/assoc_profile/view/js/assoc_profile.js');
|
|
}
|
|
|
|
$action = argv(1) ?? '';
|
|
|
|
if ($action !== 'manage') {
|
|
return '';
|
|
}
|
|
|
|
if (!assoc_is_operator()) {
|
|
return '<div class="civicinfra-notice civicinfra-warning">Operator access required.</div>';
|
|
}
|
|
|
|
$sub = argv(2) ?? '';
|
|
$slug = argv(3) ?? '';
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
return assoc_handle_post();
|
|
}
|
|
|
|
if (!$sub) return assoc_render_manage_index();
|
|
|
|
if ($sub === 'assoc') {
|
|
if (!$slug) return assoc_render_add_association_form();
|
|
return assoc_render_edit_association_form($slug);
|
|
}
|
|
|
|
if ($sub === 'fields') return assoc_render_fields_form();
|
|
|
|
if ($sub === 'import') return assoc_render_import_form();
|
|
|
|
return '<div class="civicinfra-notice civicinfra-warning">Unknown management action.</div>';
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// POST HANDLER
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_handle_post() {
|
|
if (!assoc_verify_csrf()) {
|
|
return '<div class="civicinfra-notice civicinfra-warning">Invalid form token.</div>';
|
|
}
|
|
|
|
$action = $_POST['assoc_action'] ?? '';
|
|
|
|
switch ($action) {
|
|
case 'save_association': return assoc_save_association();
|
|
case 'add_association': return assoc_add_association();
|
|
case 'delete_association':return assoc_delete_association();
|
|
case 'save_fields': return assoc_save_fields();
|
|
case 'add_field': return assoc_add_field();
|
|
case 'remove_field': return assoc_remove_field();
|
|
case 'export_selected': return assoc_handle_export($_POST['export_slugs'] ?? '');
|
|
case 'import_upload': return assoc_handle_import_upload();
|
|
case 'import_confirm': return assoc_handle_import_confirm();
|
|
default:
|
|
return '<div class="civicinfra-notice civicinfra-warning">Unknown action.</div>';
|
|
}
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// SAVE ASSOCIATION
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_save_association() {
|
|
$slug = substr(strip_tags($_POST['assoc_slug'] ?? ''), 0, 128);
|
|
if (!$slug) return '<div class="alert alert-danger">Missing slug.</div>';
|
|
|
|
$registry = assoc_load_registry();
|
|
if (!isset($registry[$slug])) {
|
|
return '<div class="alert alert-danger">Association not found.</div>';
|
|
}
|
|
|
|
$field_map = assoc_field_map();
|
|
foreach ($field_map as $nick => $fdef) {
|
|
if (($fdef['type'] ?? '') === 'readonly') continue;
|
|
if (!isset($_POST[$nick])) continue;
|
|
$val = substr(strip_tags((string)$_POST[$nick]), 0, 1024);
|
|
if (isset($fdef['options']) && !in_array($val, $fdef['options'], true)) continue;
|
|
$registry[$slug][$nick] = $val;
|
|
}
|
|
$registry[$slug]['assoc_updated'] = date('Y-m-d');
|
|
|
|
if (assoc_write_registry($registry)) {
|
|
goaway(z_root() . '/assoc_profile/manage/assoc/' . $slug);
|
|
}
|
|
return '<div class="alert alert-danger">Save failed. Check server logs.</div>';
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// ADD ASSOCIATION
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_add_association() {
|
|
$slug = strtolower(trim($_POST['new_slug'] ?? ''));
|
|
$slug = preg_replace('/[^a-z0-9\-]/', '', $slug);
|
|
if (!$slug) return '<div class="alert alert-danger">Invalid slug.</div>';
|
|
|
|
$registry = assoc_load_registry();
|
|
if (isset($registry[$slug])) {
|
|
return '<div class="alert alert-warning">Slug already exists: ' . assoc_h($slug) . '</div>';
|
|
}
|
|
|
|
$entry = assoc_blank_entry();
|
|
$entry['assoc_registered'] = date('Y-m-d');
|
|
$entry['assoc_updated'] = date('Y-m-d');
|
|
$registry[$slug] = $entry;
|
|
|
|
if (assoc_write_registry($registry)) {
|
|
goaway(z_root() . '/assoc_profile/manage/assoc/' . $slug);
|
|
}
|
|
return '<div class="civicinfra-notice civicinfra-warning">Failed to create association.</div>';
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// DELETE ASSOCIATION
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_delete_association() {
|
|
$slug = substr(strip_tags($_POST['assoc_slug'] ?? ''), 0, 128);
|
|
if (!$slug) return '<div class="civicinfra-notice civicinfra-warning">Missing slug.</div>';
|
|
|
|
$registry = assoc_load_registry();
|
|
if (!isset($registry[$slug])) {
|
|
return '<div class="civicinfra-notice civicinfra-warning">Association not found.</div>';
|
|
}
|
|
|
|
$name = $registry[$slug]['assoc_legal_name'] ?? $slug;
|
|
unset($registry[$slug]);
|
|
|
|
if (assoc_write_registry($registry)) {
|
|
goaway(z_root() . '/assoc_profile/manage');
|
|
}
|
|
return '<div class="civicinfra-notice civicinfra-warning">Delete failed. Check server logs.</div>';
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// FIELD MANAGEMENT
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_save_fields() {
|
|
// Save label and group changes to existing fields
|
|
$def = assoc_load_fields();
|
|
$fields = &$def['fields'];
|
|
|
|
foreach ($fields as &$f) {
|
|
$nick = $f['nickname'];
|
|
if (isset($_POST['label_' . $nick])) {
|
|
$f['label'] = substr(strip_tags($_POST['label_' . $nick]), 0, 128);
|
|
}
|
|
if (isset($_POST['group_' . $nick])) {
|
|
$f['group'] = substr(strip_tags($_POST['group_' . $nick]), 0, 64);
|
|
}
|
|
if (isset($_POST['help_' . $nick])) {
|
|
$f['help'] = substr(strip_tags($_POST['help_' . $nick]), 0, 256);
|
|
}
|
|
}
|
|
unset($f);
|
|
|
|
// Save group order
|
|
if (!empty($_POST['groups'])) {
|
|
$groups = array_map(function($g) { return substr(strip_tags($g), 0, 64); },
|
|
explode("\n", $_POST['groups']));
|
|
$def['groups'] = array_values(array_filter(array_map('trim', $groups)));
|
|
}
|
|
|
|
if (assoc_write_fields($def)) {
|
|
goaway(z_root() . '/assoc_profile/manage/fields');
|
|
}
|
|
return '<div class="alert alert-danger">Save failed.</div>';
|
|
}
|
|
|
|
function assoc_add_field() {
|
|
$nick = strtolower(preg_replace('/[^a-z0-9_]/', '', $_POST['new_nickname'] ?? ''));
|
|
$label = substr(strip_tags($_POST['new_label'] ?? ''), 0, 128);
|
|
$type = in_array($_POST['new_type'] ?? '', ['text','select','readonly']) ? $_POST['new_type'] : 'text';
|
|
$group = substr(strip_tags($_POST['new_group'] ?? ''), 0, 64);
|
|
$default = substr(strip_tags($_POST['new_default'] ?? ''), 0, 128);
|
|
$help = substr(strip_tags($_POST['new_help'] ?? ''), 0, 256);
|
|
|
|
if (!$nick || !$label) {
|
|
return '<div class="alert alert-danger">Nickname and label are required.</div>';
|
|
}
|
|
|
|
$def = assoc_load_fields();
|
|
foreach ($def['fields'] as $f) {
|
|
if ($f['nickname'] === $nick) {
|
|
return '<div class="alert alert-warning">Field already exists: ' . assoc_h($nick) . '</div>';
|
|
}
|
|
}
|
|
|
|
$new_field = [
|
|
'nickname' => $nick,
|
|
'label' => $label,
|
|
'type' => $type,
|
|
'group' => $group,
|
|
'default' => $default,
|
|
'required' => false,
|
|
'help' => $help,
|
|
];
|
|
|
|
if ($type === 'select' && !empty($_POST['new_options'])) {
|
|
$opts = array_map('trim', explode("\n", $_POST['new_options']));
|
|
$new_field['options'] = array_values(array_filter($opts));
|
|
}
|
|
|
|
$def['fields'][] = $new_field;
|
|
assoc_write_fields($def);
|
|
|
|
// Backfill all existing associations
|
|
$registry = assoc_backfill_all($new_field);
|
|
assoc_write_registry($registry);
|
|
|
|
goaway(z_root() . '/assoc_profile/manage/fields');
|
|
}
|
|
|
|
function assoc_remove_field() {
|
|
$nick = preg_replace('/[^a-z0-9_]/', '', $_POST['remove_nickname'] ?? '');
|
|
if (!$nick) return '<div class="alert alert-danger">Missing nickname.</div>';
|
|
|
|
$def = assoc_load_fields();
|
|
$def['fields'] = array_values(array_filter($def['fields'], function($f) use ($nick) {
|
|
return $f['nickname'] !== $nick;
|
|
}));
|
|
assoc_write_fields($def);
|
|
|
|
$registry = assoc_remove_field_from_all($nick);
|
|
assoc_write_registry($registry);
|
|
|
|
goaway(z_root() . '/assoc_profile/manage/fields');
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// PROFILE VIEW HOOK
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_profile_view_hook(&$o) {
|
|
$uid = intval(App::$profile['profile_uid'] ?? 0);
|
|
if (!$uid) return;
|
|
$r = q("SELECT channel_address FROM channel WHERE channel_id = %d LIMIT 1", intval($uid));
|
|
if (!$r) return;
|
|
$slug = assoc_slug_from_address($r[0]['channel_address']);
|
|
$entry = assoc_get($slug);
|
|
if (!$entry) return;
|
|
if (function_exists('head_add_css')) head_add_css('/addon/assoc_profile/view/css/assoc_profile.css');
|
|
$o .= assoc_render_view($entry);
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// PROFILE EDIT HOOK
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_profile_edit_hook(&$b) {
|
|
if (!assoc_is_operator()) return;
|
|
$channel = App::get_channel();
|
|
$slug = assoc_slug_from_address($channel['channel_address'] ?? '');
|
|
$entry = assoc_get($slug);
|
|
if (!$entry) return;
|
|
if (function_exists('head_add_css')) head_add_css('/addon/assoc_profile/view/css/assoc_profile.css');
|
|
$b['html'] .= '<div class="assoc-profile-edit-link mt-2">
|
|
<a href="' . z_root() . '/assoc_profile/manage/assoc/' . assoc_h($slug) . '" class="btn btn-sm btn-outline-secondary">
|
|
Edit Association Diagnostic Profile
|
|
</a></div>';
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// RENDER — PROFILE VIEW
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_render_view($entry) {
|
|
$def = assoc_load_fields();
|
|
$groups = $def['groups'] ?? [];
|
|
$fields = $def['fields'] ?? [];
|
|
|
|
$by_group = [];
|
|
foreach ($fields as $f) {
|
|
$by_group[$f['group']][] = $f;
|
|
}
|
|
|
|
$out = '<div class="assoc-profile-view">';
|
|
$out .= '<h4 class="assoc-profile-heading">Association Diagnostic Profile</h4>';
|
|
|
|
foreach ($groups as $group) {
|
|
$group_fields = $by_group[$group] ?? [];
|
|
if (empty($group_fields)) continue;
|
|
$out .= '<div class="assoc-profile-group">';
|
|
$out .= '<h5 class="assoc-group-label">' . assoc_h($group) . '</h5>';
|
|
foreach ($group_fields as $f) {
|
|
$nick = $f['nickname'];
|
|
$val = $entry[$nick] ?? '';
|
|
if ($val === '') $val = '—';
|
|
if ($val === 'UNK') $val = 'Unknown — not yet verified';
|
|
$out .= '<div class="assoc-profile-field">';
|
|
$out .= '<span class="assoc-field-label">' . assoc_h($f['label'] ?? $nick) . ':</span> ';
|
|
$out .= '<span class="assoc-field-value">' . assoc_h($val) . '</span>';
|
|
$out .= '</div>';
|
|
}
|
|
$out .= '</div>';
|
|
}
|
|
$out .= '</div>';
|
|
return $out;
|
|
}
|
|
|
|
// ----------------------------------------------------------------------------
|
|
// CSRF
|
|
// ----------------------------------------------------------------------------
|
|
|
|
function assoc_csrf_token() {
|
|
if (empty($_SESSION['assoc_profile_csrf'])) {
|
|
$_SESSION['assoc_profile_csrf'] = bin2hex(random_bytes(16));
|
|
}
|
|
return '<input type="hidden" name="assoc_profile_csrf" value="' . assoc_h($_SESSION['assoc_profile_csrf']) . '">';
|
|
}
|
|
|
|
function assoc_verify_csrf() {
|
|
return isset($_POST['assoc_profile_csrf'], $_SESSION['assoc_profile_csrf'])
|
|
&& hash_equals($_SESSION['assoc_profile_csrf'], $_POST['assoc_profile_csrf']);
|
|
}
|