<?php

/**

 * JComments - Joomla Comment System

 *

 * @version 3.0

 * @package JComments

 * @author Sergey M. Litvinov (smart@joomlatune.ru)

 * @copyright (C) 2006-2013 by Sergey M. Litvinov (http://www.joomlatune.ru)

 * @license GNU/GPL: http://www.gnu.org/copyleft/gpl.html

 */



defined('_JEXEC') or die;



/**

 * JComments ACL

 */

class JCommentsACL

{

	var $canDelete = 0;

	var $canDeleteOwn = 0;

	var $canDeleteForMyObject = 0;

	var $canEdit = 0;

	var $canEditOwn = 0;

	var $canEditForMyObject = 0;

	var $canPublish = 0;

	var $canPublishForMyObject = 0;

	var $canViewIP = 0;

	var $canViewEmail = 0;

	var $canViewHomepage = 0;

	var $canComment = 0;

	var $canQuote = 0;

	var $canReply = 0;

	var $canVote = 0;

	var $canReport = 0;

	var $canBan = 0;

	var $userID = 0;

	var $userIP = 0;

	var $deleteMode = 0;

	var $userBlocked = 0;


	
function __construct()

	{

		$user = JFactory::getUser();

		$config = JCommentsFactory::getConfig();



		$this->canDelete = $this->check('can_delete');

		$this->canDeleteOwn = $this->check('can_delete_own');

		$this->canDeleteForMyObject = $this->check('can_delete_for_my_object');

		$this->canEdit = $this->check('can_edit');

		$this->canEditOwn = $this->check('can_edit_own');

		$this->canEditForMyObject = $this->check('can_edit_for_my_object');

		$this->canPublish = $this->check('can_publish');

		$this->canPublishForMyObject = $this->check('can_publish_for_my_object');

		$this->canViewIP = $this->check('can_view_ip');

		$this->canViewEmail = $this->check('can_view_email');

		$this->canViewHomepage = $this->check('can_view_homepage');

		$this->canComment = $this->check('can_comment');

		$this->canVote = $this->check('can_vote');

		$this->canReport = intval($this->check('can_report') && $config->getInt('enable_reports'));

		$this->canBan = 0;

		$this->canQuote = intval($this->canComment && $this->check('enable_bbcode_quote'));

		$this->canReply = intval($this->canComment && $this->check('can_reply') && $config->get('template_view') == 'tree');



		$this->userID = (int)$user->id;

		$this->userIP = $_SERVER['REMOTE_ADDR'];

		$this->userBlocked = 0;



		$this->deleteMode = $config->getInt('delete_mode');



		$this->commentsLocked = false;



		if ($config->getInt('enable_blacklist', 0) == 1) {

			$options = array();

			$options['ip'] = $this->getUserIP();

			$options['userid'] = $this->getUserID();

			if (!JCommentsSecurity::checkBlacklist($options)) {

				$this->userBlocked = 1;

				$this->canComment = 0;

				$this->canQuote = 0;

				$this->canReply = 0;

				$this->canVote = 0;

				$this->canBan = 0;

			} else {

				$this->canBan = $this->check('can_ban');

			}

		}

	}



	public static function check($str, $isName = true)

	{

		static $group = null;



		if ($isName) {

			$str = JCommentsFactory::getConfig()->get($str);

		}



		if (!empty($str)) {

			$user = JFactory::getUser();



			$list = explode(',', $str);



			if ($group === null) {

				if ($user->id) {

					$db = JFactory::getDbo();

					// get highest group

					$query = $db->getQuery(true);

					$query->select('a.id');

					$query->from('#__user_usergroup_map AS map');

					$query->leftJoin('#__usergroups AS a ON a.id = map.group_id');

					$query->where('map.user_id = ' . (int)$user->id);

					$query->order('a.lft desc');

					$db->setQuery($query, 0, 1);



					$group = $db->loadResult();

				} else {

					$group = JComponentHelper::getParams('com_users')->get('guest_usergroup', 1);

				}

			}



			if (in_array($group, $list)) {

				return 1;

			}

		}



		return 0;

	}



	function getUserIP()

	{

		return $this->userIP;

	}



	function getUserId()

	{

		return $this->userID;

	}



	function getUserBlocked()

	{

		return $this->userBlocked;

	}



	function getUserAccess()

	{

		static $access = null;



		if (!isset($access)) {

			$user = JFactory::getUser();

			$access = array_unique(JAccess::getAuthorisedViewLevels($user->get('id')));

			$access[] = 0; // for backward compatibility

		}



		return $access;

	}



	function isLocked($obj)

	{

		if (isset($obj) && ($obj != null)) {

			return ($obj->checked_out && $obj->checked_out != $this->userID) ? 1 : 0;

		}



		return 0;

	}



	function isDeleted($obj)

	{

		if (isset($obj) && ($obj != null)) {

			return $obj->deleted ? 1 : 0;

		}



		return 0;

	}



	function isObjectOwner($obj)

	{

		if (is_null($obj)) {

			return false;

		} else {

			$objectOwner = $this->userID ? JCommentsObjectHelper::getOwner($obj->object_id, $obj->object_group) : 0;



			return $this->userID ? ($this->userID == $objectOwner) : false;

		}

	}



	function canDelete($obj)

	{

		return (($this->canDelete || ($this->canDeleteForMyObject && $this->isObjectOwner($obj))

				|| ($this->canDeleteOwn && ($obj->userid == $this->userID)))

			&& (!$this->isLocked($obj)) && (!$this->isDeleted($obj) || $this->deleteMode == 0)) ? 1 : 0;

	}



	function canEdit($obj)

	{

		return (($this->canEdit || ($this->canEditForMyObject && $this->isObjectOwner($obj))

				|| ($this->canEditOwn && ($obj->userid == $this->userID)))

			&& (!$this->isLocked($obj)) && (!$this->isDeleted($obj))) ? 1 : 0;

	}



	function canPublish($obj = null)

	{

		return (($this->canPublish || ($this->canPublishForMyObject && $this->isObjectOwner($obj)))

			&& (!$this->isLocked($obj)) && (!$this->isDeleted($obj))) ? 1 : 0;

	}



	function canPublishForObject($object_id, $object_group)

	{

		return ($this->userID

			&& $this->canPublishForMyObject

			&& $this->userID == JCommentsObjectHelper::getOwner($object_id, $object_group)) ? 1 : 0;

	}



	function canViewIP($obj = null)

	{

		if (is_null($obj)) {

			return ($this->canViewIP) ? 1 : 0;

		} else {

			return ($this->canViewIP && ($obj->ip != '') && (!$this->isDeleted($obj))) ? 1 : 0;

		}

	}



	function canViewEmail($obj = null)

	{

		if (is_null($obj)) {

			return ($this->canViewEmail) ? 1 : 0;

		} else {

			return ($this->canViewEmail && ($obj->email != '')) ? 1 : 0;

		}

	}



	function canViewHomepage($obj = null)

	{

		if (is_null($obj)) {

			return ($this->canViewHomepage) ? 1 : 0;

		} else {

			return ($this->canViewHomepage && ($obj->homepage != '')) ? 1 : 0;

		}

	}



	function canComment()

	{

		return $this->canComment;

	}



	function canQuote($obj = null)

	{

		if (is_null($obj)) {

			return $this->canQuote && !$this->commentsLocked;

		} else {

			return ($this->canQuote && !$this->commentsLocked && (!isset($obj->_disable_quote)) && (!$this->isDeleted($obj))) ? 1 : 0;

		}

	}



	function canReply($obj = null)

	{

		if (is_null($obj)) {

			return $this->canReply && !$this->commentsLocked;

		} else {

			return ($this->canReply && !$this->commentsLocked && (!isset($obj->_disable_reply)) && (!$this->isDeleted($obj))) ? 1 : 0;

		}

	}



	function canVote($obj)

	{

		if ($this->userID) {

			return ($this->canVote && $obj->userid != $this->userID && !isset($obj->voted) && (!$this->isDeleted($obj)));

		} else {

			return ($this->canVote && $obj->ip != $this->userIP && !isset($obj->voted) && (!$this->isDeleted($obj)));

		}



	}



	function canReport($obj = null)

	{

		if (is_null($obj)) {

			return $this->canReport;

		} else {

			return ($this->canReport && (!isset($obj->_disable_report)) && (!$this->isDeleted($obj))) ? 1 : 0;

		}

	}



	function canModerate($obj)

	{

		return ($this->canEdit($obj) || $this->canDelete($obj)

			|| $this->canPublish($obj) || $this->canViewIP($obj) || $this->canBan($obj)) && (!$this->isDeleted($obj) || $this->deleteMode == 0);

	}



	function canBan($obj = null)

	{

		if (is_null($obj)) {

			return $this->canBan;

		} else {

			return ($this->canBan && (!$this->isDeleted($obj))) ? 1 : 0;

		}

	}



	function setCommentsLocked($value)

	{

		$this->commentsLocked = $value;



		//$this->canComment = $this->canComment && !$this->commentsLocked;

		$this->canQuote = $this->canQuote && !$this->commentsLocked;

		$this->canReply = $this->canReply && !$this->commentsLocked;

	}



	function isCommentsLocked()

	{

		return $this->commentsLocked;

	}

}