Spamworldpro Mini Shell
Spamworldpro


Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips
System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : fdshops ( 1003)
PHP Version : 8.2.21
Disable Function : NONE
Directory :  /home/fdshops/public_html/Modules/Essentials/Http/Controllers/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/fdshops/public_html/Modules/Essentials/Http/Controllers/DocumentController.php
<?php

namespace Modules\Essentials\Http\Controllers;

use App\User;
use App\Utils\ModuleUtil;
use Illuminate\Http\File;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
use Illuminate\Routing\Controller;
use Illuminate\Support\Facades\Storage;
use Modules\Essentials\Entities\Document;
use Modules\Essentials\Entities\DocumentShare;
use Yajra\DataTables\Facades\DataTables;

class DocumentController extends Controller
{
    protected $moduleUtil;

    /**
     * Constructor
     *
     * @param  ModuleUtil  $moduleUtil
     * @return void
     */
    public function __construct(ModuleUtil $moduleUtil)
    {
        $this->moduleUtil = $moduleUtil;
    }

    /**
     * Display a listing of the resource.
     *
     * @return Response
     */
    public function index(Request $request)
    {
        $business_id = $request->session()->get('user.business_id');
        if (! (auth()->user()->can('superadmin') || $this->moduleUtil->hasThePermissionInSubscription($business_id, 'essentials_module'))) {
            abort(403, 'Unauthorized action.');
        }

        $type = $request->get('type');

        if (request()->ajax()) {
            $user_id = $request->session()->get('user.id');
            $role_id = User::find($user_id)->roles()->first()->id;
            $type = request()->get('type');

            $documents = Document::leftJoin('essentials_document_shares', 'essentials_documents.id', '=', 'essentials_document_shares.document_id')
                ->join('users', 'essentials_documents.user_id', '=', 'users.id')
                ->where('essentials_documents.business_id', $business_id)
                ->where('user_id', $user_id)
                ->having('type', '=', $type)
                ->orWhere(function ($query) use ($role_id) {
                    $query->where('essentials_document_shares.value', '=', $role_id)
                        ->where('essentials_document_shares.value_type', '=', 'role');
                })
                ->orwhere(function ($query) use ($user_id) {
                    $query->where('essentials_document_shares.value', '=', $user_id)
                        ->where('essentials_document_shares.value_type', '=', 'user');
                })
                ->select('users.first_name', 'users.last_name', 'essentials_documents.type', 'essentials_documents.user_id', 'essentials_documents.name', 'essentials_documents.description', 'essentials_documents.created_at', 'essentials_documents.id')
                ->groupBy('essentials_documents.id');

            return DataTables::of($documents)
                ->addColumn(
                    'action',
                    '@php
                    $session_userid = request()->session()->get("user.id");
                    @endphp

                    @if($session_userid == $user_id)
                    <button data-href ="{{action(\'\Modules\Essentials\Http\Controllers\DocumentController@destroy\',[$id])}}" class="tw-dw-btn tw-dw-btn-xs tw-dw-btn-outline  tw-dw-btn-error delete_doc">
                     <i class="fa fa-trash"></i>
                     @lang( "essentials::lang.delete")
                    </button>

                    <button data-href ="{{action(\'\Modules\Essentials\Http\Controllers\DocumentShareController@edit\',[$id])}}" class="tw-dw-btn tw-dw-btn-xs tw-dw-btn-outline  tw-dw-btn-accent share_doc">
                         <i class="fa fa-share"></i>
                         @lang( "essentials::lang.share")
                    </button>
                    @endif
                    @if($type == "document")
                        <a href ="{{action(\'\Modules\Essentials\Http\Controllers\DocumentController@download\',[$id])}}" class="tw-dw-btn tw-dw-btn-xs tw-dw-btn-outline  tw-dw-btn-info download">
                             <i class="fa fa-download"></i>
                             @lang( "essentials::lang.download")
                        </a>
                    @elseif($type == "memos")
                            <button data-href ="{{action(\'\Modules\Essentials\Http\Controllers\DocumentController@show\',[$id])}}" class="tw-dw-btn tw-dw-btn-xs tw-dw-btn-outline  tw-dw-btn-primary view_memos">
                                <i class="fa fa-eye"></i>
                                @lang("essentials::lang.view")
                            </button>
                    @endif'
                    )
                ->editColumn(
                    'name',
                    '@php
                        $session_userid = request()->session()->get("user.id");
                        $file = explode("_", $name, 2);
                    @endphp
                    @if($type == "document")
                        {{$file["1"]}} <small class="text-muted"><a href="/uploads/documents/{{$name}}" target="_blank" ><i class="fa fa-external-link"></i></a></small>
                        @if(file_exists(public_path("uploads/documents/" . $name)))
                        <p class="help-block mb-0">
                            <small>
                            <i class="fa fa-file"></i> 
                            {{ humanFilesize(filesize(public_path("uploads/documents/" . $name))) }}
                            </small>
                        </p>
                        @endif
                        @if($session_userid != $user_id)
                         <p class="help-block mb-0">
                           <small>
                            <i class="fa fa-user"></i>
                            @lang( "essentials::lang.shared_by")
                            {{$first_name}} {{$last_name}}
                           </small>
                         </p>
                        @endif
                    @elseif($type == "memos")
                        @if($session_userid != $user_id)
                            {{$name}}
                            <p class="help-block">
                               <small>
                                <i class="fa fa-user"></i>
                                @lang( "essentials::lang.shared_by")
                                {{$first_name}} {{$last_name}}
                               </small>
                            </p>
                        @else
                            {{$name}}
                        @endif
                    @endif'
                    )
                ->editColumn(
                    'created_at',
                    '@if(!empty($created_at))
                        {{@format_date($created_at)}}
                    @endif'
                    )
                ->removeColumn('id')
                ->rawColumns(['name', 'created_at', 'action'])
                ->make(true);
        }

        if (! empty($type)) {
            return view('essentials::memos.index');
        } elseif (empty($type)) {
            return view('essentials::document.index');
        }
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  Request  $request
     * @return Response
     */
    public function store(Request $request)
    {
        $business_id = $request->session()->get('user.business_id');
        if (! (auth()->user()->can('superadmin') || $this->moduleUtil->hasThePermissionInSubscription($business_id, 'essentials_module'))) {
            abort(403, 'Unauthorized action.');
        }

        try {
            $user_id = $request->session()->get('user.id');
            $document = $request->only(['name', 'description']);

            if (is_string($document['name'])) {
                $type = 'memos';
            } else {
                $type = 'document';
            }

            if ($type == 'document') {
                $name = $this->moduleUtil->uploadFile($request, 'name', 'documents');
                $type = 'document';
            } elseif ($type == 'memos') {
                $type = 'memos';
                $name = $document['name'];
            }

            $doc = [
                'business_id' => $business_id,
                'user_id' => $user_id,
                'type' => $type,
                'name' => $name,
                'description' => $document['description'],
            ];

            Document::create($doc);

            $output = [
                'success' => true,
                'msg' => __('lang_v1.success'),
            ];

            if ($type == 'document') {
                return redirect()
                ->action([\Modules\Essentials\Http\Controllers\DocumentController::class, 'index'])
                ->with('status', $output);
            } else {
                return redirect()
                ->action([\Modules\Essentials\Http\Controllers\DocumentController::class, 'index'], ['type' => 'memos'])
                ->with('status', $output);
            }
        } catch (\Exception $e) {
            \Log::emergency('File:'.$e->getFile().'Line:'.$e->getLine().'Message:'.$e->getMessage());

            $output = [
                'success' => false,
                'msg' => __('messages.something_went_wrong'),
            ];

            return back()->with('status', $output);
        }
    }

    /**
     * Show the specified resource.
     *
     * @return Response
     */
    public function show($id)
    {
        $business_id = request()->session()->get('user.business_id');
        if (! (auth()->user()->can('superadmin') || $this->moduleUtil->hasThePermissionInSubscription($business_id, 'essentials_module'))) {
            abort(403, 'Unauthorized action.');
        }

        if (request()->ajax()) {
            $memo = Document::where('business_id', $business_id)
                            ->find($id);

            return view('essentials::document.show')
                    ->with(compact('memo'));
        }
    }

    /**
     * Show the form for editing the specified resource.
     *
     * @return Response
     */
    public function edit()
    {
        return view('essentials::edit');
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  Request  $request
     * @return Response
     */
    public function update(Request $request)
    {
    }

    /**
     * Remove the specified resource from storage.
     *
     * @return Response
     */
    public function destroy(Request $request, $id)
    {
        $business_id = $request->session()->get('user.business_id');
        if (! (auth()->user()->can('superadmin') || $this->moduleUtil->hasThePermissionInSubscription($business_id, 'essentials_module'))) {
            abort(403, 'Unauthorized action.');
        }

        if (request()->ajax()) {
            try {
                $user_id = $request->session()->get('user.id');

                $document = Document::where('business_id', $business_id)
                                    ->find($id);

                $document_user_id = $document->user_id;

                if ($user_id == $document_user_id) {
                    if ($document['type'] == 'document') {
                        $file_name = $document->name;
                        $path = 'documents/'.$file_name;
                        //delete file from a disk
                        Storage::delete($path);
                    }

                    //delete document/memos from database
                    $document->delete();
                }

                $output = [
                    'success' => true,
                    'msg' => __('lang_v1.success'),
                ];

                return $output;
            } catch (\Exception $e) {
                \Log::emergency('File:'.$e->getFile().'Line:'.$e->getLine().'Message:'.$e->getMessage());

                $output = [
                    'success' => false,
                    'msg' => __('messages.something_went_wrong'),
                ];

                return back()->with('status', $output);
            }
        }
    }

    /**
     * Download a document
     *
     * @return Response
     */
    public function download(Request $request, $id)
    {
        $business_id = $request->session()->get('user.business_id');
        if (! (auth()->user()->can('superadmin') || $this->moduleUtil->hasThePermissionInSubscription($business_id, 'essentials_module'))) {
            abort(403, 'Unauthorized action.');
        }

        try {
            $user_id = $request->session()->get('user.id');
            $role_id = User::find($user_id)->roles()->first()->id;

            $document = Document::where('business_id', $business_id)
                                ->find($id);
            $creator = $document->user_id;

            $document_shares = DocumentShare::where('document_id', $id)
                ->where(function ($query) use ($user_id) {
                    $query->where('essentials_document_shares.value', '=', $user_id)
                    ->where('essentials_document_shares.value_type', '=', 'user');
                })
                ->orWhere(function ($query) use ($role_id) {
                    $query->where('essentials_document_shares.value', '=', $role_id)
                    ->where('essentials_document_shares.value_type', '=', 'role');
                })
                ->first();

            $name = $document->name;
            $file = explode('_', $name, 2);
            $file_name = $file['1'];

            $path = 'documents/'.$name;

            if ($user_id == $creator || $role_id == $document_shares['value'] || $user_id == $document_shares['value']) {
                return Storage::download($path, $file_name);
            }
        } catch (\Exception $e) {
            \Log::emergency('File:'.$e->getFile().'Line:'.$e->getLine().'Message:'.$e->getMessage());

            $output = [
                'success' => false,
                'msg' => __('messages.something_went_wrong'),
            ];

            return back()->with('status', $output);
        }
    }
}

Spamworldpro Mini