HEX
Server: Apache
System: Linux p3plzcpnl506847.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: slfopp7cb1df (5698090)
PHP: 8.1.34
Disabled: NONE
Upload Files
File: /home/slfopp7cb1df/public_html/pm/app/Controllers/Labels.php
<?php

namespace App\Controllers;

class Labels extends Security_Controller {

    function __construct() {
        parent::__construct();
    }

    function index() {
        app_redirect("forbidden");
    }

    private function can_access_labels_of_this_context($context = "", $label_id = 0) {
        if ($context == "project" && $this->can_edit_projects()) {
            return true;
        } else if ($context == "ticket") {
            $this->init_permission_checker("ticket");
            return $this->access_only_allowed_members();
        } else if ($context == "invoice") {
            $this->init_permission_checker("invoice");
            return $this->access_only_allowed_members();
        } else if ($context == "event" || $context == "note" || $context == "to_do") {
            if ($label_id) {
                //can access only own labels if there has any associated user id with this label
                $label_info = $this->Labels_model->get_one($label_id);
                if ($label_info->user_id && $label_info->user_id !== $this->login_user->id) {
                    return false;
                }
            }

            return true;
        } else if ($context == "task") {
            if ($this->can_manage_all_projects() || get_array_value($this->login_user->permissions, "can_edit_tasks") == "1") {
                return true;
            }
        }
    }

    function modal_form() {
        $type = $this->request->getPost("type");
        if (!$this->can_access_labels_of_this_context($type)) {
            app_redirect("forbidden");
        }

        if ($type) {
            $model_info = new \stdClass();
            $model_info->color = "";

            $view_data["type"] = $type;
            $view_data["model_info"] = $model_info;

            $view_data["existing_labels"] = $this->_make_existing_labels_data($type);

            return $this->template->view("labels/modal_form", $view_data);
        }
    }

    private function _make_existing_labels_data($type) {
        $labels_dom = "";
        $labels_where = array(
            "context" => $type
        );

        if ($type == "event" || $type == "note" || $type == "to_do") {
            $labels_where["user_id"] = $this->login_user->id;
        }

        $labels = $this->Labels_model->get_details($labels_where)->getResult();

        foreach ($labels as $label) {
            $labels_dom .= $this->_get_labels_row_data($label);
        }

        return $labels_dom;
    }

    private function _get_labels_row_data($data) {
        return "<span data-act='label-edit-delete' data-id='" . $data->id . "' data-color='" . $data->color . "' class='badge large mr5 clickable' style='background-color: " . $data->color . "'>" . $data->title . "</span>";
    }

    function save() {
        $this->validate_submitted_data(array(
            "id" => "numeric",
            "title" => "required",
            "type" => "required"
        ));

        $id = $this->request->getPost("id");
        $context = $this->request->getPost("type");

        if (!$this->can_access_labels_of_this_context($context, $id)) {
            app_redirect("forbidden");
        }

        $label_data = array(
            "context" => $context,
            "title" => $this->request->getPost("title"),
            "color" => $this->request->getPost("color")
        );

        //save user_id for only events and personal notes
        if ($context == "event" || $context == "to_do" || $context == "note") {
            $label_data["user_id"] = $this->login_user->id;
        }

        $save_id = $this->Labels_model->ci_save($label_data, $id);

        if ($save_id) {
            $label_info = $this->Labels_model->get_one($save_id);
            echo json_encode(array("success" => true, 'data' => $this->_get_labels_row_data($label_info), 'id' => $id, 'message' => app_lang('record_saved')));
        } else {
            echo json_encode(array("success" => false, 'message' => app_lang('error_occurred')));
        }
    }

    function delete() {
        $id = $this->request->getPost("id");
        $type = $this->request->getPost("type");

        if (!$this->can_access_labels_of_this_context($type, $id)) {
            app_redirect("forbidden");
        }

        if (!$id || !$type) {
            show_404();
        }

        $final_type = ($type == "to_do") ? $type : ($type . "s");
        $existing_labels = $this->Labels_model->is_label_exists($id, $final_type);

        if ($existing_labels) {
            echo json_encode(array("label_exists" => true, 'message' => app_lang("label_existing_error_message")));
        } else {
            if ($this->Labels_model->delete($id)) {
                echo json_encode(array("success" => true, 'id' => $id, 'message' => app_lang('record_saved')));
            } else {
                echo json_encode(array("success" => false, 'message' => app_lang('error_occurred')));
            }
        }
    }

}

/* End of file Labels.php */
/* Location: ./app/controllers/Labels.php */