functions/abook_database.php

   1 <?php
   2
   3 /**
   4  * abook_database.php
   5  *
   6  * Supported database schema
   7  * <pre>
   8  *  owner varchar(128) NOT NULL
   9  *  nickname varchar(16) NOT NULL
  10  *  firstname varchar(128)
  11  *  lastname varchar(128)
  12  *  email varchar(128) NOT NULL
  13  *  label varchar(255)
  14  *  PRIMARY KEY (owner,nickname)
  15  * </pre>
  16  *
  17  * @copyright &copy; 1999-2007 The SquirrelMail Project Team
  18  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  19  * @version $Id$
  20  * @package squirrelmail
  21  * @subpackage addressbook
  22  */
  23
  24 /**
  25  * Needs the DB functions
  26  * Don't display errors here. Error will be set in class constructor function.
  27  */
  28 @include_once('DB.php');
  29
  30 /**
  31  * Address book in a database backend
  32  *
  33  * Backend for personal/shared address book stored in a database,
  34  * accessed using the DB-classes in PEAR.
  35  *
  36  * IMPORTANT:  The PEAR modules must be in the include path
  37  * for this class to work.
  38  *
  39  * An array with the following elements must be passed to
  40  * the class constructor (elements marked ? are optional):
  41  * <pre>
  42  *   dsn       => database DNS (see PEAR for syntax)
  43  *   table     => table to store addresses in (must exist)
  44  *   owner     => current user (owner of address data)
  45  * ? name      => name of address book
  46  * ? writeable => set writeable flag (true/false)
  47  * ? listing   => enable/disable listing
  48  * </pre>
  49  * The table used should have the following columns:
  50  * owner, nickname, firstname, lastname, email, label
  51  * The pair (owner,nickname) should be unique (primary key).
  52  *
  53  *  NOTE. This class should not be used directly. Use the
  54  *        "AddressBook" class instead.
  55  * @package squirrelmail
  56  * @subpackage addressbook
  57  */
  58 class abook_database extends addressbook_backend {
  59     /**
  60      * Backend type
  61      * @var string
  62      */
  63     var $btype = 'local';
  64     /**
  65      * Backend name
  66      * @var string
  67      */
  68     var $bname = 'database';
  69
  70     /**
  71      * Data Source Name (connection description)
  72      * @var string
  73      */
  74     var $dsn       = '';
  75     /**
  76      * Table that stores addresses
  77      * @var string
  78      */
  79     var $table     = '';
  80     /**
  81      * Owner name
  82      *
  83      * Limits list of database entries visible to end user
  84      * @var string
  85      */
  86     var $owner     = '';
  87     /**
  88      * Database Handle
  89      * @var resource
  90      */
  91     var $dbh       = false;
  92     /**
  93      * Enable/disable writing into address book
  94      * @var bool
  95      */
  96     var $writeable = true;
  97     /**
  98      * Enable/disable address book listing
  99      * @var bool
 100      */
 101     var $listing = true;
 102
 103     /* ========================== Private ======================= */
 104
 105     /**
 106      * Constructor
 107      * @param array $param address book backend options
 108      */
 109     function abook_database($param) {
 110         $this->sname = _("Personal Address Book");
 111
 112         /* test if Pear DB class is available and freak out if it is not */
 113         if (! class_exists('DB')) {
 114             // same error also in db_prefs.php
 115             $error  = _("Could not include PEAR database functions required for the database backend.") . "\n";
 116             $error .= sprintf(_("Is PEAR installed, and is the include path set correctly to find %s?"),
 117                               'DB.php') . "\n";
 118             $error .= _("Please contact your system administrator and report this error.");
 119             return $this->set_error($error);
 120         }
 121
 122         if (is_array($param)) {
 123             if (empty($param['dsn']) ||
 124                 empty($param['table']) ||
 125                 empty($param['owner'])) {
 126                 return $this->set_error('Invalid parameters');
 127             }
 128
 129             $this->dsn   = $param['dsn'];
 130             $this->table = $param['table'];
 131             $this->owner = $param['owner'];
 132
 133             if (!empty($param['name'])) {
 134                $this->sname = $param['name'];
 135             }
 136
 137             if (isset($param['writeable'])) {
 138                $this->writeable = $param['writeable'];
 139             }
 140
 141             if (isset($param['listing'])) {
 142                $this->listing = $param['listing'];
 143             }
 144
 145             $this->open(true);
 146         }
 147         else {
 148             return $this->set_error('Invalid argument to constructor');
 149         }
 150     }
 151
 152
 153     /**
 154      * Open the database.
 155      * @param bool $new new connection if it is true
 156      * @return bool
 157      */
 158     function open($new = false) {
 159         $this->error = '';
 160
 161         /* Return true is file is open and $new is unset */
 162         if ($this->dbh && !$new) {
 163             return true;
 164         }
 165
 166         /* Close old file, if any */
 167         if ($this->dbh) {
 168             $this->close();
 169         }
 170
 171         $dbh = DB::connect($this->dsn, true);
 172
 173         if (DB::isError($dbh)) {
 174             return $this->set_error(sprintf(_("Database error: %s"),
 175                                             DB::errorMessage($dbh)));
 176         }
 177
 178         $this->dbh = $dbh;
 179
 180         /**
 181          * field names are lowercased.
 182          * We use unquoted identifiers and they use upper case in Oracle
 183          */
 184         $this->dbh->setOption('portability', DB_PORTABILITY_LOWERCASE);
 185
 186         return true;
 187     }
 188
 189     /**
 190      * Close the file and forget the filehandle
 191      */
 192     function close() {
 193         $this->dbh->disconnect();
 194         $this->dbh = false;
 195     }
 196
 197     /**
 198      * Determine internal database field name given one of
 199      * the SquirrelMail SM_ABOOK_FIELD_* constants
 200      *
 201      * @param integer $field The SM_ABOOK_FIELD_* contant to look up
 202      *
 203      * @return string The desired field name, or the string "ERROR"
 204      *                if the $field is not understood (the caller
 205      *                is responsible for handing errors)
 206      *
 207      */
 208     function get_field_name($field) {
 209         switch ($field) {
 210             case SM_ABOOK_FIELD_NICKNAME:
 211                 return 'nickname';
 212             case SM_ABOOK_FIELD_FIRSTNAME:
 213                 return 'firstname';
 214             case SM_ABOOK_FIELD_LASTNAME:
 215                 return 'lastname';
 216             case SM_ABOOK_FIELD_EMAIL:
 217                 return 'email';
 218             case SM_ABOOK_FIELD_LABEL:
 219                 return 'label';
 220             default:
 221                 return 'ERROR';
 222         }
 223     }
 224
 225     /* ========================== Public ======================== */
 226
 227     /**
 228      * Search the database
 229      *
 230      * Backend supports only * and ? wildcards. Complex eregs are not supported.
 231      * Search is case insensitive.
 232      * @param string $expr search expression
 233      * @return array search results. boolean false on error
 234      */
 235     function search($expr) {
 236         $ret = array();
 237         if(!$this->open()) {
 238             return false;
 239         }
 240
 241         /* To be replaced by advanded search expression parsing */
 242         if (is_array($expr)) {
 243             return;
 244         }
 245
 246         // don't allow wide search when listing is disabled.
 247         if ($expr=='*' && ! $this->listing)
 248             return array();
 249
 250         /* lowercase expression in order to make it case insensitive */
 251         $expr = strtolower($expr);
 252
 253         /* escape SQL wildcards */
 254         $expr = str_replace('_', '\\_', $expr);
 255         $expr = str_replace('%', '\\%', $expr);
 256
 257         /* Convert wildcards to SQL syntax  */
 258         $expr = str_replace('?', '_', $expr);
 259         $expr = str_replace('*', '%', $expr);
 260         $expr = $this->dbh->quoteString($expr);
 261         $expr = "%$expr%";
 262
 263         /* create escape expression */
 264         $escape = 'ESCAPE \'' . $this->dbh->quoteString('\\') . '\'';
 265
 266         $query = sprintf("SELECT * FROM %s WHERE owner='%s' AND " .
 267                          "(LOWER(firstname) LIKE '%s' %s OR LOWER(lastname) LIKE '%s' %s)",
 268                          $this->table, $this->owner, $expr, $escape, $expr, $escape);
 269
 270         $res = $this->dbh->query($query);
 271
 272         if (DB::isError($res)) {
 273             return $this->set_error(sprintf(_("Database error: %s"),
 274                                             DB::errorMessage($res)));
 275         }
 276
 277         while ($row = $res->fetchRow(DB_FETCHMODE_ASSOC)) {
 278             array_push($ret, array('nickname'  => $row['nickname'],
 279                                    'name'      => $this->fullname($row['firstname'], $row['lastname']),
 280                                    'firstname' => $row['firstname'],
 281                                    'lastname'  => $row['lastname'],
 282                                    'email'     => $row['email'],
 283                                    'label'     => $row['label'],
 284                                    'backend'   => $this->bnum,
 285                                    'source'    => &$this->sname));
 286         }
 287         return $ret;
 288     }
 289
 290     /**
 291      * Lookup an address by the indicated field.
 292      *
 293      * @param string  $value The value to look up
 294      * @param integer $field The field to look in, should be one
 295      *                       of the SM_ABOOK_FIELD_* constants
 296      *                       defined in include/constants.php
 297      *                       (OPTIONAL; defaults to nickname field)
 298      *
 299      * @return array Array with lookup results when the value
 300      *               was found, an empty array if the value was
 301      *               not found.
 302      *
 303      */
 304     function lookup($value, $field=SM_ABOOK_FIELD_NICKNAME) {
 305         if (empty($value)) {
 306             return array();
 307         }
 308
 309         $value = strtolower($value);
 310
 311         if (!$this->open()) {
 312             return false;
 313         }
 314
 315         $query = sprintf("SELECT * FROM %s WHERE owner = '%s' AND LOWER(%s) = '%s'",
 316                          $this->table, $this->owner, $this->get_field_name($field),
 317                          $this->dbh->quoteString($value));
 318
 319         $res = $this->dbh->query($query);
 320
 321         if (DB::isError($res)) {
 322             return $this->set_error(sprintf(_("Database error: %s"),
 323                                             DB::errorMessage($res)));
 324         }
 325
 326         if ($row = $res->fetchRow(DB_FETCHMODE_ASSOC)) {
 327             return array('nickname'  => $row['nickname'],
 328                          'name'      => $this->fullname($row['firstname'], $row['lastname']),
 329                          'firstname' => $row['firstname'],
 330                          'lastname'  => $row['lastname'],
 331                          'email'     => $row['email'],
 332                          'label'     => $row['label'],
 333                          'backend'   => $this->bnum,
 334                          'source'    => &$this->sname);
 335         }
 336         return array();
 337     }
 338
 339     /**
 340      * List all addresses
 341      * @return array search results
 342      */
 343     function list_addr() {
 344         $ret = array();
 345         if (!$this->open()) {
 346             return false;
 347         }
 348
 349         if(isset($this->listing) && !$this->listing) {
 350             return array();
 351         }
 352
 353
 354         $query = sprintf("SELECT * FROM %s WHERE owner='%s'",
 355                          $this->table, $this->owner);
 356
 357         $res = $this->dbh->query($query);
 358
 359         if (DB::isError($res)) {
 360             return $this->set_error(sprintf(_("Database error: %s"),
 361                                             DB::errorMessage($res)));
 362         }
 363
 364         while ($row = $res->fetchRow(DB_FETCHMODE_ASSOC)) {
 365             array_push($ret, array('nickname'  => $row['nickname'],
 366                                    'name'      => $this->fullname($row['firstname'], $row['lastname']),
 367                                    'firstname' => $row['firstname'],
 368                                    'lastname'  => $row['lastname'],
 369                                    'email'     => $row['email'],
 370                                    'label'     => $row['label'],
 371                                    'backend'   => $this->bnum,
 372                                    'source'    => &$this->sname));
 373         }
 374         return $ret;
 375     }
 376
 377     /**
 378      * Add address
 379      * @param array $userdata added data
 380      * @return bool
 381      */
 382     function add($userdata) {
 383         if (!$this->writeable) {
 384             return $this->set_error(_("Address book is read-only"));
 385         }
 386
 387         if (!$this->open()) {
 388             return false;
 389         }
 390
 391         /* See if user exist already */
 392         $ret = $this->lookup($userdata['nickname']);
 393         if (!empty($ret)) {
 394             return $this->set_error(sprintf(_("User \"%s\" already exists"),$ret['nickname']));
 395         }
 396
 397         /* Create query */
 398         $query = sprintf("INSERT INTO %s (owner, nickname, firstname, " .
 399                          "lastname, email, label) VALUES('%s','%s','%s'," .
 400                          "'%s','%s','%s')",
 401                          $this->table, $this->owner,
 402                          $this->dbh->quoteString($userdata['nickname']),
 403                          $this->dbh->quoteString($userdata['firstname']),
 404                          $this->dbh->quoteString((!empty($userdata['lastname'])?$userdata['lastname']:'')),
 405                          $this->dbh->quoteString($userdata['email']),
 406                          $this->dbh->quoteString((!empty($userdata['label'])?$userdata['label']:'')) );
 407
 408          /* Do the insert */
 409          $r = $this->dbh->simpleQuery($query);
 410
 411          /* Check for errors */
 412          if (DB::isError($r)) {
 413              return $this->set_error(sprintf(_("Database error: %s"),
 414                                              DB::errorMessage($r)));
 415          }
 416          return true;
 417     }
 418
 419     /**
 420      * Deletes address book entries
 421      * @param array $alias aliases that have to be deleted. numerical
 422      *  array with nickname values
 423      * @return bool
 424      */
 425     function remove($alias) {
 426         if (!$this->writeable) {
 427             return $this->set_error(_("Address book is read-only"));
 428         }
 429
 430         if (!$this->open()) {
 431             return false;
 432         }
 433
 434         /* Create query */
 435         $query = sprintf("DELETE FROM %s WHERE owner='%s' AND (",
 436                          $this->table, $this->owner);
 437
 438         $sepstr = '';
 439         while (list($undef, $nickname) = each($alias)) {
 440             $query .= sprintf("%s nickname='%s' ", $sepstr,
 441                               $this->dbh->quoteString($nickname));
 442             $sepstr = 'OR';
 443         }
 444         $query .= ')';
 445
 446         /* Delete entry */
 447         $r = $this->dbh->simpleQuery($query);
 448
 449         /* Check for errors */
 450         if (DB::isError($r)) {
 451             return $this->set_error(sprintf(_("Database error: %s"),
 452                                             DB::errorMessage($r)));
 453         }
 454         return true;
 455     }
 456
 457     /**
 458      * Modify address
 459      * @param string $alias modified alias
 460      * @param array $userdata new data
 461      * @return bool
 462      */
 463     function modify($alias, $userdata) {
 464         if (!$this->writeable) {
 465             return $this->set_error(_("Address book is read-only"));
 466         }
 467
 468         if (!$this->open()) {
 469             return false;
 470         }
 471
 472          /* See if user exist */
 473         $ret = $this->lookup($alias);
 474         if (empty($ret)) {
 475             return $this->set_error(sprintf(_("User \"%s\" does not exist"),$alias));
 476         }
 477
 478         /* make sure that new nickname is not used */
 479         if (strtolower($alias) != strtolower($userdata['nickname'])) {
 480             /* same check as in add() */
 481             $ret = $this->lookup($userdata['nickname']);
 482             if (!empty($ret)) {
 483                 $error = sprintf(_("User '%s' already exist."), $ret['nickname']);
 484                 return $this->set_error($error);
 485             }
 486         }
 487
 488         /* Create query */
 489         $query = sprintf("UPDATE %s SET nickname='%s', firstname='%s', ".
 490                          "lastname='%s', email='%s', label='%s' ".
 491                          "WHERE owner='%s' AND nickname='%s'",
 492                          $this->table,
 493                          $this->dbh->quoteString($userdata['nickname']),
 494                          $this->dbh->quoteString($userdata['firstname']),
 495                          $this->dbh->quoteString((!empty($userdata['lastname'])?$userdata['lastname']:'')),
 496                          $this->dbh->quoteString($userdata['email']),
 497                          $this->dbh->quoteString((!empty($userdata['label'])?$userdata['label']:'')),
 498                          $this->owner,
 499                          $this->dbh->quoteString($alias) );
 500
 501         /* Do the insert */
 502         $r = $this->dbh->simpleQuery($query);
 503
 504         /* Check for errors */
 505         if (DB::isError($r)) {
 506             return $this->set_error(sprintf(_("Database error: %s"),
 507                                             DB::errorMessage($r)));
 508         }
 509         return true;
 510     }
 511 } /* End of class abook_database */
 512
 513 // vim: et ts=4