redl-gamepanel/panel/application/controllers/admin/tickets/view.php

<?php
/*
Copyright (c) 2020 HOSTINPL (HOSTING-RUS) https://vk.com/hosting_rus
Developed by Samir Shelenko and Alexander Zemlyanoy  (https://vk.com/id00v / https://vk.com/mrsasha082)
*/
class viewController extends Controller {
	public function index($ticketid = null) {
		$this->document->setActiveSection('admin/tickets');
		$this->document->setActiveItem('view');
        $this->data['url'] = $this->config->url;

		if(!$this->user->isLogged()) {
			$this->session->data['error'] = "Вы не авторизированы!";
			$this->response->redirect($this->config->url . 'account/login');
		}
		if($this->user->getAccessLevel() < 2) {
			$this->session->data['error'] = "У вас нет доступа к данному разделу!";
			$this->response->redirect($this->config->url);
		}
		
		$this->load->model('tickets');
		$this->load->model('users');
		
		$error = $this->validate($ticketid);
		if($error) {
			$this->session->data['error'] = $error;
			$this->response->redirect($this->config->url . 'admin/tickets/index');
		}
		
		$ticket = $this->ticketsModel->getTicketById($ticketid, array('users'));
		$this->data['ticket'] = $ticket;
		$this->data['user_img'] = $this->user->getUser_img();
		
		$this->getChild(array('common/admheader', 'common/footer'));
		return $this->load->view('admin/tickets/view', $this->data);
	}
	
	public function ajax($ticketid = null) {
		if(!$this->user->isLogged()) {  
	  		$this->data['status'] = "error";
			$this->data['error'] = "Вы не авторизированы!";
			return json_encode($this->data);
		}
		if($this->user->getAccessLevel() < 2) {
	  		$this->data['status'] = "error";
			$this->data['error'] = "У вас нет доступа к данному разделу!";
			return json_encode($this->data);
		}
		
		$this->load->model('tickets');
		$this->load->model('ticketsMessages');
		
		if($this->request->server['REQUEST_METHOD'] == 'POST') {
			$errorPOST = $this->validatePOST($ticketid);
			if(!$errorPOST) {
				$userid = $this->user->getId();
				$text = @$this->request->post['text'];
				$ticket = $this->ticketsModel->getTicketById($ticketid, array('users'));
				if($ticket['ticket_status'] != 0) {
					$messageData = array(
						'ticket_id'			=> $ticketid,
						'user_id'			=> $userid,
						'ticket_message'	=> $text
					);
					$this->ticketsModel->updateTicket($ticketid, array('ticket_status' => 2));
					$this->ticketsMessagesModel->createTicketMessage($messageData);
						
					$this->data['status'] = "success";
					$this->data['success'] = "Вы успешно отправили сообщение!";
				} else {
					$this->data['status'] = "error";
					$this->data['error'] = "Данный запрос закрыт, оставить новое сообщение невозможно!";					
				}
			} else {
				$this->data['status'] = "error";
				$this->data['error'] = $errorPOST;
			}
		}
		return json_encode($this->data);
	}

	public function action($ticketid = null, $action = null) {
		if(!$this->user->isLogged()) {
			$this->data['status'] = "error";
			$this->data['error'] = "Вы не авторизированы!";
			return json_encode($this->data);
		}
		if($this->user->getAccessLevel() < 0) {
	  		$this->data['status'] = "error";
			$this->data['error'] = "У вас нет доступа к данному разделу!";
			return json_encode($this->data);
		}
		$this->load->model('tickets');
		$this->load->model('ticketsMessages');
		switch($action) {
			case 'closed': {
				$this->ticketsModel->updateTicket($ticketid, array('ticket_status' => 0));
					
					$this->data['status'] = "success";
					$this->data['success'] = "Вы успешно закрыли запрос!";
				break;
			}
			default: {
				$this->data['status'] = "error";
				$this->data['error'] = "Вы выбрали несуществующее действие!";
				break;
			}
		}
		return json_encode($this->data);
	}
	
	public function uploadFile($ticketid = null) {
		if(!$this->user->isLogged()) {  
	  		$this->data['status'] = "error";
			$this->data['error'] = "Вы не авторизированы!";
			return json_encode($this->data);
		}
		if($this->user->getAccessLevel() < 2) {
	  		$this->data['status'] = "error";
			$this->data['error'] = "У вас нет доступа к данному разделу!";
			return json_encode($this->data);
		}

		$this->load->model('tickets');
		$this->load->model('ticketsMessages');
		$this->load->model('users');
		
		if($this->request->server['REQUEST_METHOD'] == 'POST') {
			$uploaddir = "tmp/tickets_img/";
			$apend=date('YmdHis').rand(100,1000).'.jpg'; 
			$uploadfile = "$uploaddir$apend";
			
			if(move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile)) { 		
				if($_FILES['userfile']['type'] == 'image/gif' || $_FILES['userfile']['type'] == 'image/jpeg' || $_FILES['userfile']['type'] == 'image/png') { 
					if($_FILES['userfile']['size'] != 0 and $_FILES['userfile']['size'] <= 5120000) {
						$size = getimagesize($uploadfile); 
						if ($size[0] < 2560 && $size[1] < 1440) {
							if(round(($_FILES['userfile']['size'] / 1024), 2) > 1500.00) {
								$message = 'Изображение: ' . $apend . '<br>Размер: ' . round(($_FILES['userfile']['size'] / 1024), 2) . 'КБ<br><a href="/' . $uploadfile . ' target="_blank">Открыть</a>';
							} else {
								$message = '<a href="/' . $uploadfile . '" target="_blank"><img height="150" src="/' . $uploadfile . '"></a>';
							}
							$userid = $this->user->getId();
							$messageData = array(
								'ticket_id'			=> $ticketid,
								'user_id'			=> $userid,
								'ticket_message'	=> $message
							);
							$this->ticketsModel->updateTicket($ticketid, array('ticket_status' => 1));
							$this->ticketsMessagesModel->createTicketMessage($messageData);
							$this->data['status'] = 'success';
							$this->data['success'] = 'Изображение загружено!';			 
						} else {
							$this->data['error'] = 'Загружаемое изображение превышает допустимые нормы!';
							$this->data['status'] = "error";
							unlink($uploadfile); 
						} 
					} else { 
						$this->data['error'] = 'Размер изображения не должено превышать 5120Кб';
						$this->data['status'] = "error";
					} 
				} else {     
					$this->data['status'] = "error";
					$this->data['error'] = "Можно загружать только изображения в форматах jpg, jpeg и png";
				}
			} else {
				$this->data['error'] = 'Изображение не загружено!';
				$this->data['status'] = "error";
			} 
		}
		return json_encode($this->data);
	}
	
	public function getMessagess() {
		if(!$this->user->isLogged()) {
			$this->session->data['error'] = "Вы не авторизированы!";
			$this->response->redirect($this->config->url . 'account/login');
		}
		if($this->user->getAccessLevel() < 2) {
			$this->session->data['error'] = "У вас нет доступа к данному разделу!";
			$this->response->redirect($this->config->url);
		}
		
		if($this->request->server['REQUEST_METHOD'] == 'POST') {
			$this->load->model('tickets');
			$this->load->model('ticketsMessages');
			
			$id = $this->request->post['tid'];
			
			$url = $this->config->url;
			$messages = $this->ticketsMessagesModel->getTicketsMessages(array('ticket_id' => $id), array('users'));

			foreach($messages as $item) {
				$item['ticket_message'] = preg_replace("#(https?|ftp)://\S+[^\s.,>)\];'\"!?]#",'<a href="\\0" target="_blank">\\0</a>', $item['ticket_message']);
				if($item['user_access_level'] == '1') {
					echo '<div class="d-flex flex-column mb-5 align-items-start">
							<div class="d-flex align-items-center">
								<div class="symbol symbol-circle symbol-40 mr-3">
									<img alt="Pic" src="'.$url.''.$item['user_img'].'" />
								</div>
							<div>
							<a href="/admin/users/edit/index/'.$item['user_id'] .'" class="text-dark-75 text-hover-primary font-weight-bold font-size-h6">'. $item['user_firstname'] .' '. $item['user_lastname'] .'</a>
								<span class="text-muted font-size-sm">'. date(t("d.m.Y в H:i"), strtotime($item['ticket_message_date_add'])) .'</span>
							</div>
						  </div>
						   <div class="mt-2 rounded p-5 bg-light-success text-dark-50 font-weight-bold font-size-lg text-left max-w-400px">'. nl2br($item['ticket_message']) .'
						  </div></div>';
				}
					
				if($item['user_access_level'] >= '2') {
					echo '<div class="d-flex flex-column mb-5 align-items-end">
							<div class="d-flex align-items-center">
								<div class="symbol symbol-circle symbol-40 mr-3">
									<img alt="Pic" src="'.$url.''.$item['user_img'].'" />
								</div>
							<div>
							<a href="/admin/users/edit/index/'.$item['user_id'] .'" class="text-dark-75 text-hover-primary font-weight-bold font-size-h6">'. $item['user_firstname'] .' '. $item['user_lastname'] .'</a>
								<span class="text-muted font-size-sm">'. date(t("d.m.Y в H:i"), strtotime($item['ticket_message_date_add'])) .'</span>
							</div>
						</div>
						 <div class="mt-2 rounded p-5 bg-light-primary text-dark-50 font-weight-bold font-size-lg text-left max-w-400px">'. nl2br($item['ticket_message']) .'<br>
						</div></div>';
				}
			} 
		}
	}

	
	private function validate($ticketid) {
		$result = null;
		
		if(!$this->ticketsModel->getTotalTickets(array('ticket_id' => (int)$ticketid))) {
			$result = "Запрашиваемый тикет не существует!";
		}
		return $result;
	}
	
	private function validatePOST($ticketid) {
		$result = null;
		$userid = $this->user->getId();
		$text = @$this->request->post['text'];
		$closeticket = @$this->request->post['closeticket'];
		
		if(!$closeticket) {
			if (5 <= $this->ticketsModel->spam($userid)) {
				$result = 'Пожалуйста, подождите 10 секунд.';
			}	
			else if(mb_strlen($text) < 1 || mb_strlen($text) > 350) {
				$result = "Текст сообщения должен содержать от 1 до 350 символов.";
			}
		}
		return $result;
	}
}