WebOrbiton
v2.0.0.0

Publisium

← Changes All versions
178 lines · 5.9 KB
  1. <?php
  3. declare(strict_types=1);
  5. require_once __DIR__ . '/../includes/icons.php';
  6. require_once __DIR__ . '/../includes/social-icons.php';
  8. if (!Auth::hasRoleAtLeast(Auth::ROLE_EDITOR_IN_CHIEF)) {
  9. return;
  10. }
  12. $db = Database::site();
  13. $action = $_POST['action'] ?? '';
  15. function nextNavSortOrder(PDO $db): int
  16. {
  17. $max = $db->query('SELECT COALESCE(MAX(sort_order), -1) AS m FROM nav_items')->fetch();
  18. return ((int) $max['m']) + 1;
  19. }
  21. function sanitizeNavIcon(string $iconKeyRaw, string $iconSvgRaw): array
  22. {
  23. $iconKeyRaw = trim($iconKeyRaw);
  25. if ($iconKeyRaw === '' || $iconKeyRaw === 'none') {
  26. return [null, null];
  27. }
  29. if ($iconKeyRaw === 'custom') {
  30. $svg = SocialIcons::sanitizeCustomSvg($iconSvgRaw);
  31. return $svg !== '' ? ['custom', $svg] : [null, null];
  32. }
  34. if (Icons::isNavIcon($iconKeyRaw)) {
  35. return [$iconKeyRaw, null];
  36. }
  38. return [null, null];
  39. }
  41. if ($action === 'add_nav_item') {
  42. $itemType = in_array($_POST['item_type'] ?? '', ['category', 'page', 'custom'], true) ? $_POST['item_type'] : 'category';
  43. $labelOverride = trim((string) ($_POST['label_override'] ?? ''));
  44. [$iconKey, $iconSvg] = sanitizeNavIcon((string) ($_POST['icon_key'] ?? ''), (string) ($_POST['icon_svg'] ?? ''));
  46. if ($itemType === 'category') {
  47. $refId = (int) ($_POST['category_ref_id'] ?? 0);
  48. if ($refId <= 0) {
  49. return;
  50. }
  51. $exists = $db->prepare('SELECT id FROM categories WHERE id = :id LIMIT 1');
  52. $exists->execute(['id' => $refId]);
  53. if (!$exists->fetch()) {
  54. return;
  55. }
  57. $statement = $db->prepare(
  58. 'INSERT INTO nav_items (item_type, ref_id, label, icon_key, icon_svg, sort_order) VALUES (:type, :ref_id, :label, :icon_key, :icon_svg, :sort_order)'
  59. );
  60. $statement->execute([
  61. 'type' => 'category',
  62. 'ref_id' => $refId,
  63. 'label' => $labelOverride !== '' ? $labelOverride : null,
  64. 'icon_key' => $iconKey,
  65. 'icon_svg' => $iconSvg,
  66. 'sort_order' => nextNavSortOrder($db),
  67. ]);
  68. }
  70. if ($itemType === 'page') {
  71. $refId = (int) ($_POST['page_ref_id'] ?? 0);
  72. if ($refId <= 0) {
  73. return;
  74. }
  75. $exists = $db->prepare('SELECT id FROM pages WHERE id = :id LIMIT 1');
  76. $exists->execute(['id' => $refId]);
  77. if (!$exists->fetch()) {
  78. return;
  79. }
  81. $statement = $db->prepare(
  82. 'INSERT INTO nav_items (item_type, ref_id, label, icon_key, icon_svg, sort_order) VALUES (:type, :ref_id, :label, :icon_key, :icon_svg, :sort_order)'
  83. );
  84. $statement->execute([
  85. 'type' => 'page',
  86. 'ref_id' => $refId,
  87. 'label' => $labelOverride !== '' ? $labelOverride : null,
  88. 'icon_key' => $iconKey,
  89. 'icon_svg' => $iconSvg,
  90. 'sort_order' => nextNavSortOrder($db),
  91. ]);
  92. }
  94. if ($itemType === 'custom') {
  95. $label = trim((string) ($_POST['custom_label'] ?? ''));
  96. $url = trim((string) ($_POST['custom_url'] ?? ''));
  97. $target = isset($_POST['custom_new_tab']) ? '_blank' : '_self';
  99. if ($label === '' || $url === '') {
  100. return;
  101. }
  103. $statement = $db->prepare(
  104. 'INSERT INTO nav_items (item_type, ref_id, label, url, target, icon_key, icon_svg, sort_order) VALUES (:type, NULL, :label, :url, :target, :icon_key, :icon_svg, :sort_order)'
  105. );
  106. $statement->execute([
  107. 'type' => 'custom',
  108. 'label' => $label,
  109. 'url' => $url,
  110. 'target' => $target,
  111. 'icon_key' => $iconKey,
  112. 'icon_svg' => $iconSvg,
  113. 'sort_order' => nextNavSortOrder($db),
  114. ]);
  115. }
  116. }
  118. if ($action === 'update_nav_item_icon') {
  119. $navItemId = (int) ($_POST['nav_item_id'] ?? 0);
  120. if ($navItemId <= 0) {
  121. return;
  122. }
  124. [$iconKey, $iconSvg] = sanitizeNavIcon((string) ($_POST['icon_key'] ?? ''), (string) ($_POST['icon_svg'] ?? ''));
  126. $statement = $db->prepare('UPDATE nav_items SET icon_key = :icon_key, icon_svg = :icon_svg WHERE id = :id');
  127. $statement->execute([
  128. 'icon_key' => $iconKey,
  129. 'icon_svg' => $iconSvg,
  130. 'id' => $navItemId,
  131. ]);
  132. }
  134. if ($action === 'move_nav_item') {
  135. $navItemId = (int) ($_POST['nav_item_id'] ?? 0);
  136. $direction = $_POST['direction'] ?? '';
  138. if ($navItemId <= 0 || !in_array($direction, ['up', 'down'], true)) {
  139. return;
  140. }
  142. $currentStatement = $db->prepare('SELECT id, sort_order FROM nav_items WHERE id = :id LIMIT 1');
  143. $currentStatement->execute(['id' => $navItemId]);
  144. $current = $currentStatement->fetch();
  146. if (!$current) {
  147. return;
  148. }
  150. if ($direction === 'up') {
  151. $neighborStatement = $db->prepare(
  152. 'SELECT id, sort_order FROM nav_items WHERE sort_order < :sort_order ORDER BY sort_order DESC LIMIT 1'
  153. );
  154. } else {
  155. $neighborStatement = $db->prepare(
  156. 'SELECT id, sort_order FROM nav_items WHERE sort_order > :sort_order ORDER BY sort_order ASC LIMIT 1'
  157. );
  158. }
  159. $neighborStatement->execute(['sort_order' => $current['sort_order']]);
  160. $neighbor = $neighborStatement->fetch();
  162. if (!$neighbor) {
  163. return;
  164. }
  166. $swap = $db->prepare('UPDATE nav_items SET sort_order = :sort_order WHERE id = :id');
  167. $swap->execute(['sort_order' => $neighbor['sort_order'], 'id' => $current['id']]);
  168. $swap->execute(['sort_order' => $current['sort_order'], 'id' => $neighbor['id']]);
  169. }
  171. if ($action === 'delete_nav_item') {
  172. $navItemId = (int) ($_POST['nav_item_id'] ?? 0);
  173. if ($navItemId > 0) {
  174. $statement = $db->prepare('DELETE FROM nav_items WHERE id = :id');
  175. $statement->execute(['id' => $navItemId]);
  176. }
  177. }
  178. ​