upgrade

main/inc/ajax/portfolio.ajax.php

@@ -0,0 +1,79 @@
+<?php
+
+/* For licensing terms, see /license.txt */
+
+use Chamilo\CoreBundle\Entity\Portfolio;
+use Chamilo\CoreBundle\Entity\PortfolioComment;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request as HttpRequest;
+use Symfony\Component\HttpFoundation\Response;
+
+require_once __DIR__.'/../global.inc.php';
+
+$httpRequest = HttpRequest::createFromGlobals();
+
+$action = $httpRequest->query->has('a') ? $httpRequest->query->get('a') : $httpRequest->request->get('a');
+$currentUserId = api_get_user_id();
+$currentUser = api_get_user_entity($currentUserId);
+
+$em = Database::getManager();
+
+$item = null;
+$comment = null;
+
+if ($httpRequest->query->has('item')) {
+    /** @var Portfolio $item */
+    $item = $em->find(
+        Portfolio::class,
+        $httpRequest->query->getInt('item')
+    );
+}
+
+if ($httpRequest->query->has('comment')) {
+    $comment = $em->find(
+        PortfolioComment::class,
+        $httpRequest->query->getInt('comment')
+    );
+}
+
+$httpResponse = Response::create();
+
+switch ($action) {
+    case 'find_template':
+        if (!$item) {
+            $httpResponse->setStatusCode(Response::HTTP_NOT_FOUND);
+            break;
+        }
+
+        if (!$item->isTemplate() || $item->getUser() !== $currentUser) {
+            $httpResponse->setStatusCode(Response::HTTP_FORBIDDEN);
+            break;
+        }
+
+        $httpResponse = JsonResponse::create(
+            [
+                'title' => $item->getTitle(),
+                'content' => $item->getContent(),
+            ]
+        );
+        break;
+    case 'find_template_comment':
+        if (!$comment) {
+            $httpResponse->setStatusCode(Response::HTTP_NOT_FOUND);
+            break;
+        }
+
+        if (!$comment->isTemplate() || $comment->getAuthor() !== $currentUser) {
+            $httpResponse->setStatusCode(Response::HTTP_FORBIDDEN);
+            break;
+        }
+
+        $httpResponse = JsonResponse::create(
+            [
+                'content' => $comment->getContent(),
+            ]
+        );
+        break;
+}
+
+$httpResponse->send();