external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

still working on pkgsubmit

Browse source
This commit is contained in:
eric 2004-07-14 00:20:32 +00:00
parent 56effc6ae4
commit 1e1eb451de
2 changed files with 83 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

53
web/html/pkgsubmit.php
View file

@ -21,11 +21,11 @@ if ($_COOKIE["AURSID"]) {
# first, see if this package already exists, and if it can be overwritten
#
if (package_exists($_FILES["pfile"]["name"])) { # TODO write function
$pkg_exists = package_exists($_FILES["pfile"]["name"]);
if ($pkg_exists) {
# ok, it exists - should it be overwritten, and does the user have
# the permissions to do so?
#
# TODO write 'can_overwrite_pkg' function
if (can_overwrite_pkg($_FILES["pfile"]["name"], $_COOKIE["AURSID"])) {
if (!$_REQUEST["overwrite"]) {
$error = __("You did not tag the 'overwrite' checkbox.");
@ -36,7 +36,7 @@ if ($_COOKIE["AURSID"]) {
}
}
if (!$error)) {
if (!$error) {
# no errors checking upload permissions, go ahead and try to process
# the uploaded package file.
#
@ -58,10 +58,48 @@ if ($_COOKIE["AURSID"]) {
}
}
# at this point, we can safely create the directories, and update
# the database with the new package
#
# TODO extract the package contents and parse the included files
#
# update the backend database
#
$dbh = db_connect();
if ($pkg_exists) {
# this is an overwrite of an existing package, the database ID
# needs to be preserved so that any votes are retained. However,
# PackageDepends, PackageSources, and PackageContents can be
# purged.
#
$q = "SELECT * FROM Packages ";
$q.= "WHERE Name = '".mysql_escape_string($_FILES["pfile"]["name"])."'";
$result = db_query($q, $dbh);
$pdata = mysql_fetch_assoc($result);
# flush out old data that will be replaced with new data
#
$q = "DELETE FROM PackageContents WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
$q = "DELETE FROM PackageDepends WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
$q = "DELETE FROM PackageSources WHERE PackageID = ".$pdata["ID"];
db_query($q, $dbh);
} else {
# this is a brand new package
#
}
}
if (!$_REQUEST["pkgsubmit"] || !$error)) {
if (!$_REQUEST["pkgsubmit"] || $error) {
# give the visitor the default upload form
#
if (ini_get("file_uploads")) {
@ -93,15 +131,12 @@ if ($_COOKIE["AURSID"]) {
print __("No");
print " </td>\n";
print "</tr>\n";
print "<tr>\n";
print " <td align='center' colspan='2'>&nbsp;</td>\n";
print "</tr>\n";
print "<tr>\n";
print " <td align='right'>";
print " <td>&nbsp;</td>\n";
print " <td align='left'>";
print "<input class='button' type='submit' value='".__("Upload")."' />\n";
print "</td>\n";
print " <td>&nbsp;</td>\n";
print "</tr>\n";
print "</table>\n";

39
web/lib/aur.inc
View file

@ -444,6 +444,45 @@ function dbug($msg) {
return;
}
# check to see if the package name exists
#
function package_exists($name="") {
if (!$name) {return 0;}
$dbh = db_connect();
$q = "SELECT COUNT(*) FROM Packages ";
$q.= "WHERE Name = '".mysql_escape_string($name)."'";
$result = db_query($q, $dbh);
if (!$result) {return 0;}
$row = mysql_fetch_row($result);
return $row[0];
}
# check to see if the user can overwrite an existing package
#
function can_overwrite_pkg($name="", $sid="") {
if (!$name || !$sid) {return 0;}
$dbh = db_connect();
$q = "SELECT SubmitterUID, MaintainerUID, AURMaintainerUID ";
$q.= "FROM Packages WHERE Name = '".mysql_escape_string($name)."'";
$result = db_query($q, $dbh);
if (!$result) {return 0;}
$row = mysql_fetch_row($result);
$my_uid = uid_from_sid($sid);
# user is a dev and maintains the package
#
if ($my_uid == $row[2]) {return 1;}
# user is a TU and there is no dev
#
if (!$row[2] && $my_uid == $row[1]) {return 1;}
# user is a user and there is no TU or dev
#
if (!$row[2] && !$row[1] && $my_uid == $row[0]) {return 1;}
return 0;
}
# convert an ini_get number to a real integer - stupid PHP!
#
function initeger($inival="0", $isbytes=1) {