Files
UNIT3D-Community-Edition/app/Http/Controllers/RequestController.php
Roardom 47647bd481 fix: request deletion permissions
If we don't allow users to edit their request if someone else has added their bon to it, surely we shouldn't allow them to delete the request either.
2024-08-23 05:22:26 +00:00

266 lines
9.2 KiB
PHP

<?php
declare(strict_types=1);
/**
* NOTICE OF LICENSE.
*
* UNIT3D Community Edition is open-sourced software licensed under the GNU Affero General Public License v3.0
* The details is bundled with this project in the file LICENSE.txt.
*
* @project UNIT3D Community Edition
*
* @author HDVinnie <hdinnovations@protonmail.com>
* @license https://www.gnu.org/licenses/agpl-3.0.en.html/ GNU Affero General Public License v3.0
*/
namespace App\Http\Controllers;
use App\Http\Requests\StoreTorrentRequestRequest;
use App\Http\Requests\UpdateTorrentRequestRequest;
use App\Models\Category;
use App\Models\Movie;
use App\Models\Resolution;
use App\Models\Torrent;
use App\Models\TorrentRequest;
use App\Models\TorrentRequestBounty;
use App\Models\Tv;
use App\Models\Type;
use App\Repositories\ChatRepository;
use App\Services\Tmdb\TMDBScraper;
use Illuminate\Http\Request;
use MarcReichel\IGDBLaravel\Models\Game;
use Exception;
/**
* @see \Tests\Todo\Feature\Http\Controllers\RequestControllerTest
*/
class RequestController extends Controller
{
/**
* RequestController Constructor.
*/
public function __construct(private readonly ChatRepository $chatRepository)
{
}
/**
* Display a listing of the resource.
*/
public function index(): \Illuminate\Contracts\View\Factory|\Illuminate\View\View
{
return view('requests.index');
}
/**
* Display The Torrent Request.
*/
public function show(Request $request, TorrentRequest $torrentRequest): \Illuminate\Contracts\View\Factory|\Illuminate\View\View
{
return view('requests.show', [
'torrentRequest' => $torrentRequest->load(['category', 'claim' => ['user'], 'bounties', 'torrent']),
'user' => $request->user(),
'canEdit' => $request->user()->group->is_modo || TorrentRequest::query()
->whereDoesntHave('bounties', fn ($query) => $query->where('user_id', '!=', $request->user()->id))
->whereNull('claimed')
->whereNull('filled_by')
->whereKey($torrentRequest)
->exists(),
'meta' => match (true) {
($torrentRequest->category->tv_meta && $torrentRequest->tmdb) => Tv::with([
'genres',
'credits' => ['person', 'occupation'],
'networks',
'seasons'
])
->find($torrentRequest->tmdb),
($torrentRequest->category->movie_meta && $torrentRequest->tmdb) => Movie::with([
'genres',
'credits' => ['person', 'occupation'],
'companies',
'collection'
])
->find($torrentRequest->tmdb),
($torrentRequest->category->game_meta && $torrentRequest->igdb) => Game::with([
'cover' => ['url', 'image_id'],
'artworks' => ['url', 'image_id'],
'genres' => ['name'],
'videos' => ['video_id', 'name'],
'involved_companies.company',
'involved_companies.company.logo',
'platforms',
])
->find($torrentRequest->igdb),
default => null,
},
]);
}
/**
* Torrent Request Add Form.
*/
public function create(Request $request): \Illuminate\Contracts\View\Factory|\Illuminate\View\View
{
return view('requests.create', [
'categories' => Category::orderBy('position')
->get()
->mapWithKeys(fn ($category) => [$category->id => [
'name' => $category->name,
'type' => match (true) {
$category->movie_meta => 'movie',
$category->tv_meta => 'tv',
$category->game_meta => 'game',
$category->music_meta => 'music',
$category->no_meta => 'no',
default => 'no',
},
]])
->toArray(),
'types' => Type::orderBy('position')->get(),
'resolutions' => Resolution::orderBy('position')->get(),
'user' => $request->user(),
'category_id' => $request->category_id ?? Category::first('id')->id,
'title' => urldecode((string) $request->title),
'imdb' => $request->imdb,
'tmdb' => $request->tmdb,
'mal' => $request->mal,
'tvdb' => $request->tvdb,
'igdb' => $request->igdb,
]);
}
/**
* Store A New Torrent Request.
*/
public function store(StoreTorrentRequestRequest $request): \Illuminate\Http\RedirectResponse
{
$user = $request->user();
$user->decrement('seedbonus', $request->bounty);
$torrentRequest = TorrentRequest::create(['user_id' => $request->user()->id, 'votes' => 1] + $request->validated());
TorrentRequestBounty::create([
'user_id' => $user->id,
'seedbonus' => $request->bounty,
'requests_id' => $torrentRequest->id,
'anon' => $request->anon,
]);
// Auto Shout
if ($torrentRequest->anon == 0) {
$this->chatRepository->systemMessage(
\sprintf('[url=%s]%s[/url] has created a new request [url=%s]%s[/url]', href_profile($user), $user->username, href_request($torrentRequest), $torrentRequest->name)
);
} else {
$this->chatRepository->systemMessage(
\sprintf('An anonymous user has created a new request [url=%s]%s[/url]', href_request($torrentRequest), $torrentRequest->name)
);
}
$category = $torrentRequest->category;
if ($torrentRequest->tmdb > 0) {
switch (true) {
case $category->tv_meta:
(new TMDBScraper())->tv($torrentRequest->tmdb);
break;
case $category->movie_meta:
(new TMDBScraper())->movie($torrentRequest->tmdb);
break;
}
}
return to_route('requests.index')
->withSuccess(trans('request.added-request'));
}
/**
* Torrent Request Edit Form.
*/
public function edit(Request $request, TorrentRequest $torrentRequest): \Illuminate\Contracts\View\Factory|\Illuminate\View\View
{
return view('requests.edit', [
'categories' => Category::orderBy('position')->get(),
'types' => Type::orderBy('position')->get(),
'resolutions' => Resolution::orderBy('position')->get(),
'user' => $request->user(),
'torrentRequest' => $torrentRequest,
]);
}
/**
* Edit A Torrent Request.
*/
public function update(UpdateTorrentRequestRequest $request, TorrentRequest $torrentRequest): \Illuminate\Http\RedirectResponse
{
$user = $request->user();
abort_unless(
(
$user->group->is_modo
|| (
$user->id === $torrentRequest->user_id
&& TorrentRequest::query()
->whereDoesntHave('bounties', fn ($query) => $query->where('user_id', '!=', $request->user()->id))
->whereNull('claimed')
->whereNull('filled_by')
->whereKey($torrentRequest)
->exists()
)
),
403
);
$torrentRequest->update($request->validated());
if ($torrentRequest->tmdb > 0) {
switch (true) {
case $torrentRequest->category->tv_meta:
(new TMDBScraper())->tv($torrentRequest->tmdb);
break;
case $torrentRequest->category->movie_meta:
(new TMDBScraper())->movie($torrentRequest->tmdb);
break;
}
}
return to_route('requests.show', ['torrentRequest' => $torrentRequest])
->withSuccess(trans('request.edited-request'));
}
/**
* Delete A Torrent Request.
*
* @throws Exception
*/
public function destroy(Request $request, TorrentRequest $torrentRequest): \Illuminate\Http\RedirectResponse
{
$user = $request->user();
abort_unless(
$user->group->is_modo
|| (
$torrentRequest->user_id === $user->id
&& TorrentRequest::query()
->whereDoesntHave('bounties', fn ($query) => $query->where('user_id', '!=', $request->user()->id))
->whereNull('claimed')
->whereNull('filled_by')
->whereKey($torrentRequest)
->exists()
),
403
);
$torrentRequest->bounties()->delete();
$torrentRequest->delete();
return to_route('requests.index')
->withSuccess(\sprintf(trans('request.deleted'), $torrentRequest->name));
}
}