PHP cmsUser::isPermittedLimitHigher方法代码示例

 public function run()
 {
     if (!$this->request->isAjax()) {
         cmsCore::error404();
     }
     if (!$this->cms_user->is_logged) {
         return $this->cms_template->renderJSON(array('error' => true));
     }
     if (cmsUser::isPermittedLimitHigher('comments', 'karma', $this->cms_user->karma)) {
         return $this->cms_template->renderJSON(array('error' => true));
     }
     $target_controller = $this->request->get('tc', '');
     $target_subject = $this->request->get('ts', '');
     $target_id = $this->request->get('ti', 0);
     $is_track = $this->request->get('is_track', 0);
     if (!$target_controller || !$target_subject || !$target_id) {
         return $this->cms_template->renderJSON(array('error' => true));
     }
     $is_valid = $this->validate_sysname($target_controller) === true && $this->validate_sysname($target_subject) === true && is_numeric($target_id) && is_numeric($is_track);
     if (!$is_valid) {
         return $this->cms_template->renderJSON(array('error' => true));
     }
     $success = $this->model->filterEqual('target_controller', $target_controller)->filterEqual('target_subject', $target_subject)->filterEqual('target_id', $target_id)->toggleTracking($is_track, $this->cms_user->id, $target_controller, $target_subject, $target_id);
     return $this->cms_template->renderJSON(array('error' => !$success));
 }

 public function run()
 {
     if (!$this->request->isAjax()) {
         cmsCore::error404();
     }
     $action = $this->request->get('action');
     $user = cmsUser::getInstance();
     $is_guests_allowed = !empty($this->options['is_guests']);
     $is_guest = $is_guests_allowed && !$user->is_logged;
     $is_user_allowed = $user->is_logged && cmsUser::isAllowed('comments', 'add') || $is_guests_allowed;
     $is_karma_allowed = $user->is_logged && !cmsUser::isPermittedLimitHigher('comments', 'karma', $user->karma) || $is_guests_allowed;
     $is_add_allowed = $is_user_allowed && $is_karma_allowed;
     if ($action == 'add' && !$is_add_allowed) {
         cmsCore::error404();
     }
     if ($action == 'update' && !cmsUser::isAllowed('comments', 'edit')) {
         cmsCore::error404();
     }
     $template = cmsTemplate::getInstance();
     $csrf_token = $this->request->get('csrf_token');
     $target_controller = $this->request->get('tc');
     $target_subject = $this->request->get('ts');
     $target_id = $this->request->get('ti');
     $target_user_id = $this->request->get('tud');
     $parent_id = $this->request->get('parent_id');
     $comment_id = $this->request->get('id');
     $content = $this->request->get('content');
     if ($is_guest) {
         $author_name = $this->request->get('author_name');
         $author_email = $this->request->get('author_email');
         if (!$author_name) {
             $template->renderJSON(array('error' => true, 'message' => LANG_COMMENT_ERROR_NAME, 'html' => false));
         }
         if ($author_email && !preg_match("/^([a-zA-Z0-9\\._-]+)@([a-zA-Z0-9\\._-]+)\\.([a-zA-Z]{2,4})\$/i", $author_email)) {
             $template->renderJSON(array('error' => true, 'message' => LANG_COMMENT_ERROR_EMAIL, 'html' => false));
         }
         if (!empty($this->options['restricted_ips'])) {
             if (string_in_mask_list($user->ip, $this->options['restricted_ips'])) {
                 $template->renderJSON(array('error' => true, 'message' => LANG_COMMENT_ERROR_IP, 'html' => false));
             }
         }
         if (!empty($this->options['guest_ip_delay'])) {
             $last_comment_time = $this->model->getGuestLastCommentTime($user->ip);
             $now_time = time();
             $minutes_passed = ($now_time - $last_comment_time) / 60;
             if ($minutes_passed < $this->options['guest_ip_delay']) {
                 $spellcount = html_spellcount($this->options['guest_ip_delay'], LANG_MINUTE1, LANG_MINUTE2, LANG_MINUTE10);
                 $template->renderJSON(array('error' => true, 'message' => sprintf(LANG_COMMENT_ERROR_TIME, $spellcount), 'html' => false));
             }
         }
     }
     // Проверяем валидность
     $is_valid = $this->validate_sysname($target_controller) === true && $this->validate_sysname($target_subject) === true && is_numeric($target_id) && is_numeric($parent_id) && (!$comment_id || is_numeric($comment_id)) && cmsForm::validateCSRFToken($csrf_token, false) && in_array($action, array('add', 'preview', 'update'));
     if (!$is_valid) {
         $result = array('error' => true, 'message' => LANG_COMMENT_ERROR);
         $template->renderJSON($result);
     }
     // Типографируем текст
     $content_html = cmsEventsManager::hook('html_filter', $content);
     if (!$content_html) {
         $result = array('error' => false, 'message' => false, 'html' => false);
         $template->renderJSON($result);
     }
     //
     // Превью комментария
     //
     if ($action == 'preview') {
         $result = array('error' => false, 'html' => $content_html);
         $template->renderJSON($result);
     }
     //
     // Редактирование комментария
     //
     if ($action == 'update') {
         $comment = $this->model->getComment($comment_id);
         if (!cmsUser::isAllowed('comments', 'edit', 'all')) {
             if (cmsUser::isAllowed('comments', 'edit', 'own') && $comment['user']['id'] != $user->id) {
                 $result = array('error' => true, 'message' => LANG_COMMENT_ERROR);
                 $template->renderJSON($result);
             }
         }
         $this->model->updateCommentContent($comment_id, $content, $content_html);
         $comment_html = $content_html;
     }
     //
     // Добавление комментария
     //
     if ($action == 'add') {
         // Собираем данные комментария
         $comment = array('user_id' => $user->id, 'parent_id' => $parent_id, 'target_controller' => $target_controller, 'target_subject' => $target_subject, 'target_id' => $target_id, 'content' => $content, 'content_html' => $content_html, 'author_url' => $user->ip);
         if ($is_guest) {
             $comment['author_name'] = $author_name;
             $comment['author_email'] = $author_email;
         }
         // Получаем модель целевого контроллера
         $target_model = cmsCore::getModel($target_controller);
         // Получаем URL и заголовок комментируемой страницы
         $target_info = $target_model->getTargetItemInfo($target_subject, $target_id);
         if ($target_info) {
             $comment['target_url'] = $target_info['url'];
//.........这里部分代码省略.........

"
    ></div>

    <?php 
if ($user->is_logged && cmsUser::isAllowed('comments', 'add') || !$user->is_logged && $is_guests_allowed) {
    ?>
        <div id="comments_add_link">
            <a href="#reply" class="ajaxlink" onclick="return icms.comments.add()"><?php 
    echo LANG_COMMENT_ADD;
    ?>
</a>
        </div>

        <div id="comments_add_form">
			<?php 
    $is_karma_allowed = $user->is_logged && !cmsUser::isPermittedLimitHigher('comments', 'karma', $user->karma);
    ?>
            <?php 
    if ($is_karma_allowed || $is_guests_allowed) {
        ?>
                <div class="preview_box"></div>
                <form action="<?php 
        echo $this->href_to('submit');
        ?>
" method="post">
                    <?php 
        echo html_csrf_token($csrf_token_seed);
        ?>
                    <?php 
        echo html_input('hidden', 'action', 'add');
        ?>

 public function run()
 {
     $user = cmsUser::getInstance();
     // Получаем название типа контента
     $ctype_name = $this->request->get('ctype_name');
     // проверяем наличие доступа
     if (!cmsUser::isAllowed($ctype_name, 'add')) {
         cmsCore::error404();
     }
     // Получаем тип контента
     $ctype = $this->model->getContentTypeByName($ctype_name);
     if (!$ctype) {
         cmsCore::error404();
     }
     // проверяем что не превышен лимит на число записей
     $user_items_count = $this->model->getUserContentItemsCount($ctype_name, $user->id, false);
     if (cmsUser::isPermittedLimitReached($ctype_name, 'limit', $user_items_count)) {
         cmsUser::addSessionMessage(sprintf(LANG_CONTENT_COUNT_LIMIT, $ctype['labels']['many']), 'error');
         $this->redirectBack();
     }
     // Проверяем ограничение по карме
     if (cmsUser::isPermittedLimitHigher($ctype_name, 'karma', $user->karma)) {
         cmsUser::addSessionMessage(sprintf(LANG_CONTENT_KARMA_LIMIT, cmsUser::getPermissionValue($ctype_name, 'karma')), 'error');
         $this->redirectBack();
     }
     $item = array();
     if ($ctype['is_cats']) {
         $category_id = $this->request->get('to_id');
     }
     // Определяем наличие полей-свойств
     $props = $this->model->getContentProps($ctype['name']);
     $ctype['props'] = $props;
     // Если этот контент можно создавать в группах (сообществах) то получаем список групп
     $groups_list = array();
     if ($ctype['is_in_groups'] || $ctype['is_in_groups_only']) {
         $groups_model = cmsCore::getModel('groups');
         $groups = $groups_model->getUserGroups($user->id);
         if (!$groups && $ctype['is_in_groups_only']) {
             cmsUser::addSessionMessage(sprintf(LANG_CONTENT_IS_IN_GROUPS_ONLY, $ctype['labels']['many']), 'error');
             $this->redirectBack();
         }
         $groups_list = $ctype['is_in_groups_only'] ? array() : array('0' => '');
         $groups_list = $groups_list + array_collection_to_list($groups, 'id', 'title');
     }
     // Если включены личные папки - получаем их список
     $folders_list = array();
     if ($ctype['is_folders']) {
         $folders_list = $this->model->getContentFolders($ctype['id'], $user->id);
         $folders_list = array_collection_to_list($folders_list, 'id', 'title');
     }
     // Получаем поля для данного типа контента
     $this->model->orderBy('ordering');
     $fields = $this->model->getContentFields($ctype['name']);
     $form = $this->getItemForm($ctype, $fields, 'add', array('groups_list' => $groups_list, 'folders_list' => $folders_list));
     // Заполняем поля значениями по-умолчанию, взятыми из профиля пользователя
     // (для тех полей, в которых это включено)
     foreach ($fields as $field) {
         if (!empty($field['options']['profile_value'])) {
             $item[$field['name']] = $user->{$field['options']['profile_value']};
         }
     }
     $is_moderator = $user->is_admin || $this->model->userIsContentTypeModerator($ctype_name, $user->id);
     $is_premoderation = $ctype['is_premod_add'];
     cmsEventsManager::hook("content_add", $ctype);
     list($form, $item) = cmsEventsManager::hook("content_{$ctype['name']}_form", array($form, $item));
     // Форма отправлена?
     $is_submitted = $this->request->has('submit');
     if (!$is_submitted && !empty($category_id)) {
         $item['category_id'] = $category_id;
     }
     if ($this->request->has('group_id') && $groups_list && !$is_submitted) {
         $item['parent_id'] = $this->request->get('group_id');
     }
     $item['ctype_name'] = $ctype['name'];
     $item['ctype_id'] = $ctype['id'];
     if ($is_submitted) {
         if ($ctype['props']) {
             $props_cat_id = $this->request->get('category_id');
             if ($props_cat_id) {
                 $item_props = $this->model->getContentProps($ctype['name'], $props_cat_id);
                 $item_props_fields = $this->getPropsFields($item_props);
                 foreach ($item_props_fields as $field) {
                     $form->addField('props', $field);
                 }
             }
         }
         // Парсим форму и получаем поля записи
         $item = array_merge($item, $form->parse($this->request, $is_submitted));
         // Проверям правильность заполнения
         $errors = $form->validate($this, $item);
         if (!$errors) {
             list($item, $errors) = cmsEventsManager::hook('content_validate', array($item, $errors));
         }
         if (!$errors) {
             unset($item['ctype_name']);
             unset($item['ctype_id']);
             $item['is_approved'] = !$ctype['is_premod_add'] || $is_moderator;
             $item['parent_type'] = null;
             $item['parent_title'] = null;
             $item['parent_url'] = null;
//.........这里部分代码省略.........