HEX
Server: Apache
System: Linux p3plzcpnl506847.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: slfopp7cb1df (5698090)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: /home/slfopp7cb1df/public_html/conradinvestmentgroup.com/pm/app/Controllers/Timeline.php
<?php

namespace App\Controllers;

class Timeline extends Security_Controller {

    public function __construct() {
        parent::__construct();
        $this->access_only_team_members();
        $this->init_permission_checker("timeline_permission");
    }

    private function check_access_on_timeline_for_this_user() {
        $accessable = true;

        if ($this->login_user->user_type == "staff" && !$this->login_user->is_admin && get_array_value($this->login_user->permissions, "timeline_permission") == "no") {
            $accessable = false;
        }

        return $accessable;
    }

    private function check_timeline_user_permission() {
        if (!$this->check_access_on_timeline_for_this_user()) {
            app_redirect("forbidden");
        }
    }

    private function can_access_this_post($post_id = 0) {
        $post_info = $this->Posts_model->get_one($post_id);

        if ($this->login_user->user_type == "staff" && !$this->login_user->is_admin && get_array_value($this->login_user->permissions, "timeline_permission") == "specific" && $post_info->created_by && !in_array($post_info->created_by, $this->allowed_members)) {
            app_redirect("forbidden");
        }
    }

    /* load timeline view */

    function index() {
        $this->check_module_availability("module_timeline");
        $this->check_timeline_user_permission();

        $view_data['team_members'] = "";
        $this->init_permission_checker("message_permission");
        if (get_array_value($this->login_user->permissions, "message_permission") !== "no") {
            $view_data['team_members'] = $this->Messages_model->get_users_for_messaging($this->get_user_options_for_query("staff"))->getResult();
        }

        return $this->template->rander("timeline/index", $view_data);
    }

    /* save a post */

    function save() {
        $this->check_timeline_user_permission();
        $this->validate_submitted_data(array(
            "id" => "numeric",
            "description" => "required"
        ));

        $id = $this->request->getPost('id');

        $post_id = $this->request->getPost('post_id');
        $this->can_access_this_post($post_id);

        $target_path = get_setting("timeline_file_path");

        $files_data = move_files_from_temp_dir_to_permanent_dir($target_path, "timeline_post");

        $data = array(
            "created_by" => $this->login_user->id,
            "created_at" => get_current_utc_time(),
            "post_id" => $post_id,
            "description" => $this->request->getPost('description'),
            "share_with" => ""
        );

        $data = clean_data($data);
        $data["files"] = $files_data; //don't clean serilized data

        $save_id = $this->Posts_model->ci_save($data, $id);
        if ($save_id) {
            $data = "";
            if ($this->request->getPost("reload_list")) {
                $options = array("id" => $save_id);
                $view_data['posts'] = $this->Posts_model->get_details($options)->result;
                $view_data['result_remaining'] = 0;
                $view_data['is_first_load'] = false;
                $view_data['single_post'] = '';
                $data = $this->template->view("timeline/post_list", $view_data);
            }
            echo json_encode(array("success" => true, "data" => $data, 'message' => app_lang('comment_submited')));

            if ($post_id == 0) {
                log_notification("created_a_new_post", array("post_id" => $save_id));
            } else {
                log_notification("timeline_post_commented", array("post_id" => $save_id));
            }
        } else {
            echo json_encode(array("success" => false, 'message' => app_lang('error_occurred')));
        }
    }

    function delete($id = 0) {

        if (!$id) {
            exit();
        }

        validate_numeric_value($id);

        $post_info = $this->Posts_model->get_one($id);

        //only admin and creator can delete the post
        if (!($this->login_user->is_admin || $post_info->created_by == $this->login_user->id)) {
            app_redirect("forbidden");
        }


        //delete the post and files
        if ($this->Posts_model->delete($id) && $post_info->files) {

            //delete the files
            $timeline_file_path = get_setting("timeline_file_path");
            $files = unserialize($post_info->files);

            delete_app_files($timeline_file_path, $files);
        }
    }

    /* load all replies of a post */

    function view_post_replies($post_id) {
        validate_numeric_value($post_id);
        $this->can_access_this_post($post_id);
        $view_data['reply_list'] = $this->Posts_model->get_details(array("post_id" => $post_id))->result;
        return $this->template->view("timeline/reply_list", $view_data);
    }

    /* show post reply form */

    function post_reply_form($post_id) {
        validate_numeric_value($post_id);
        $this->can_access_this_post($post_id);
        $view_data['post_id'] = $post_id;
        return $this->template->view("timeline/reply_form", $view_data);
    }


    function download_files($id) {
        validate_numeric_value($id);
        $this->can_access_this_post($id);
        $files = $this->Posts_model->get_one($id)->files;
        return $this->download_app_files(get_setting("timeline_file_path"), $files);
    }

    /* load more posts */

    function load_more_posts($offset = 0) {
        validate_numeric_value($offset);
        return timeline_widget(array("limit" => 20, "offset" => $offset));
    }

    /* post page for notification */

    function post($post_id) {
        validate_numeric_value($post_id);
        
        //check if it's a post's comment
        $original_post_info = $this->Posts_model->get_one($post_id);
        if ($original_post_info->post_id) {
            $post_id = $original_post_info->post_id;
        }
        
        $this->can_access_this_post($post_id);

        $post = $this->Posts_model->get_details(array("id" => $post_id));
        $view_data["posts"] = $post->result;
        $view_data['is_first_load'] = true;
        $view_data['result_remaining'] = 0;
        $view_data['single_post'] = 'single_post';
        return $this->template->rander("timeline/post_list", $view_data);
    }

}

/* End of file timeline.php */
    /* Location: ./app/controllers/timeline.php */