westdc-zf1/application/admin/controllers/ReviewController.php

1579 lines
46 KiB
PHP
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?php
class Admin_ReviewController extends Zend_Controller_Action
{
function preDispatch()
{
$this->db=Zend_Registry::get('db');
$this->view->config = Zend_Registry::get('config');
$this->view->theme = new Theme();
$this->_helper->layout->setLayout('administry');
$this->view->pageID = "review-".$this->_request->getActionName();
}
/*
* indexAction() 元数据评审管理首页
*
*/
function indexAction()
{
$sql = "select m.id,md.title,u.username,u.realname,m.status from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
order by m.id desc limit 10 ";
$re = $this->db->query($sql);
$queue = $re->fetchAll();
foreach ($queue as $k=>$v)
{
$queue[$k]['status']=$this->rewritestatus($v['status']);
}
$this->view->queue = $queue;
$auth = Zend_Auth::getInstance();
if($auth->hasIdentity())
{
$user = $auth->getIdentity();
$userid = $user->id;
}
$sql = "select m.id,md.title,u.username,u.realname,m.status from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where u.id='$userid'";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$this->view->my = $rows;
}//indexAction
/*
* rewritestatus() 将评审状态转化为文字说明
*
* @param $status int
*
* return string
*/
function rewritestatus($status){
if($status==-1)
{return "取消评审";}
else if($status==0)
{return "初始状态";}
else if($status==1)
{return "接受元数据评审";}
else if($status==2)
{return "开始邀请专家";}
else if($status==3)
{return "专家接受邀请";}
else if($status==4)
{return "专家反馈";}
else if($status>=5)
{return "已发布";}
else
{return "";}
}
/*
* changestatus() 更改mdstatus中的status字段
*
* @param int $id //要更改状态的mdstatus记录的ID
* @param int $status //状态
*
* return bool
*/
function changestatus($id,$status){
$stvalues = array(
-1, //取消评审
0, //初始状态
1, //接受元数据评审,进入评审阶段
2, //开始邀请专家,送审阶段
3, //专家接受邀请,在审阶段
4, //专家反馈,在审
5, //评审结束,发布
6,7
);
if(empty($id) || !isset($status) || !in_array($status,$stvalues))
{
return false;
}
else
{
if($status==1)
{$sql = "update mdstatus set status='$status',ts_accepted='now()' where id in ($id)"; }
else if($status==5)
{$sql = "update mdstatus set status='$status',ts_finished='now()' where id in ($id)";}
else
{$sql = "update mdstatus set status='$status' where id in ($id)";}
try{
if($this->db->exec($sql)>0)
{
return true;
}
}
catch(Exception $e)
{
return false;
}
}
}//changestatus 更改状态
/*
* acceptAction()待审元数据
*
* @param string $search //搜索
* @param string $cancel //取消
* @param string $keyword //搜索关键词
* @param string $page //列表分页
*
* return view
*/
function acceptAction()
{
$search = $this->_request->getParam('search');
$cancel = $this->_request->getParam('cancel');
$update = $this->_request->getParam('update');
$invite = $this->_request->getParam('invite');
include_once("helper/view.php");
if($cancel>0)
{
if($this->changestatus($cancel,-1))
{
//update search document
$search=new Search();
//create search view in xunsearch
$sql="select uuid from mdstatus where id=?";
$sth = $this->db->prepare($sql);
$sth->execute(array($cancel));
$data = $sth->fetch();
$search->del($data['uuid'],'uuid');
view::Post($this,array("content"=>'操作成功:已取消该数据的评审','url'=>'/admin/review/accept'));
return true;
}
else{
view::Post($this,array("content"=>'操作失败','url'=>'/admin/review/accept'));
return true;
}
}//取消元数据评审
if($search)
{
$keyword = $this->_request->getParam('keyword');
if(!empty($keyword))
{
$sql = "select m.*,md.title,u.username,u.realname from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where m.status=1
and md.title like '%$keyword%'
";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}
}//搜索
else
{
$sql = "select m.*,md.title,u.username,u.realname from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where m.status=1 order by m.ts_created desc";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//列表
}//acceptAction
/*
* inreviewAction() 在审元数据查看
*
* @param int $show //查看详细
* @param int $search //搜索
* @param string keyword //关键字
*
*
* return view
*/
function inreviewAction(){
$show = $this->_request->getParam('show');
$search = $this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
if($show>0)
{
$sql = "select m.*,md.*,u.realname from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where m.id=$show
";
$rs = $this->db->query($sql);
$rows = $rs->fetch();
$sql = "select exp.*,u.* from mdexpertreview exp
left join users u on u.id=exp.id
where exp.uuid='{$rows['uuid']}'";
$rs = $this->db->query($sql);
$exps = $rs->fetchAll();
$expname = array();
foreach ($exps as $k=>$v)
{
if($v['id']!='')
{
if($v['status']==1)
{
$v['status']="接受邀请";
}else if($v['status']==-1)
{
$v['status']="拒绝邀请";
}else if(empty($v['status']))
{
$v['status']="未答复";
}
$expname[] = '<li><a href="/admin/user/show/id/'.$v['id'].'">'.$v['realname'].'</a> [状态:'.$v['status'].']
[<a href="/admin/review/invite/user/'.$v['id'].'/uuid/'.$rows['uuid'].'/id/'.$show.'">再次发送邀请邮件</a>]</li>';
}
}
if(count($expname>0))
{$rows['exps'] = join('',$expname);}
$rows['status'] = $this->rewritestatus($rows['status']);
$this->view->info = $rows;
$this->_helper->viewRenderer('inreviewshow');
}//查看详细
else
{
$searchjoin = "";
if(!empty($search) && !empty($keyword))
{
$searchjoin = " and md.title like '%$keyword%'";
$this->view->keyword = $keyword;
}
$sql = "select m.id,md.title,m.status,m.uuid,u.username,u.realname from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where m.status in (2,3,4) $searchjoin order by m.ts_accepted desc";
$rs = $this->db->query($sql);
$rows = $rs->fetchAll();
foreach ($rows as $k=>$v)
{
$rows[$k]['status']=$this->rewritestatus($v['status']);
}
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//列表
}//在审元数据
/*
* inviteAction() 专家
*
* @param int id //评审ID
* @param int $user //用户
* @param int search //搜索
* @param int keyword //关键词
* @param $submit //提交判断
* @param array $exps //专家ID
*
* return view
*
* 管理员可以邀请专家评审属于自己管理的元数据在列表中包含表单表单中提交专家ID这与用户表中的ID对应
* 邀请邮件由邮件模板实现,需要数据库中存在 invite-expert-review 模板
*/
function inviteAction(){
$id = $this->_request->getParam('id');
$user = $this->_request->getParam('user');
if(empty($id))
{
$this->_redirect("/admin/review");
}
$search = $this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
$submit = $this->_request->getParam('submit');
$exps = $this->_request->getParam('exps');
$stid = $this->_request->getParam('stid');
$uid = $this->_request->getParam('uid');
$this->view->id = $id;
include_once("helper/view.php");
if(!empty($submit))
{
if(is_array($exps))
{
$sql = "select m.uuid,m.title,s.status from metadata m
left join mdstatus s on s.uuid=m.uuid
where s.id='$id'";
$rs = $this -> db -> query($sql);
$md = $rs -> fetch();
$uuid = $md['uuid'];
foreach ($exps as $v)
{
$sql = "select m.id,u.realname,m.uuid,u.email from mdexpertreview m
left join users u on m.id=u.id
where m.uuid='$uuid' and m.id='$v'";
$rs = $this->db->query($sql);
$rows = $rs->fetch();
if($rows['id']!='')
{
view::Post($this,array("content"=>'已经邀请过专家:'.$rows['realname'],'url'=>-1));
return true;
}//已经有评审记录
else
{
$sql = "insert into mdexpertreview (id,uuid) values ('$v','$uuid')";
$expinfo="select realname,email from users where id='$v'";
$rs = $this->db->query($expinfo);
$expinfo = $rs->fetch();
try{
if($this->db->exec($sql)>0)
{
if($md['status']<2)
{
$update = "update mdstatus set status=2 where uuid='$uuid'";
@$this->db->exec($update);
}
//实例化EmailText
$mailtp=new EmailText($this->db,'invite-expert-review',array('user'=>$expinfo['realname'],'uuid'=>$uuid,'title'=>$md['title'],'userid'=>$v));
$mail=new WestdcMailer($this->view->config->smtp);
$mail->setBodyText($mailtp->getBody());
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
$mail->addTo($expinfo['email']);
$mail->setSubject($mailtp->getSubject());
$filecontent=file_get_contents("http://" . $_SERVER['HTTP_HOST'].'/data/doc/review/1/uuid/'.$uuid);
$mail->createAttachment($filecontent,'application/octet-stream',Zend_Mime::DISPOSITION_ATTACHMENT, Zend_Mime::ENCODING_BASE64, $md['title'].'.doc');
$filecontent=file_get_contents("http://" . $_SERVER['HTTP_HOST'].'/service/pdf/uuid/'.$uuid);
$mail->createAttachment($filecontent,'application/octet-stream',Zend_Mime::DISPOSITION_ATTACHMENT, Zend_Mime::ENCODING_BASE64, $md['title'].'.pdf');
if($mail->send())
{
view::Post($this,array("content"=>'成功邀请专家:'.$expinfo['realname'],'url'=>-1));
return true;
}else
{
view::Post($this,array("content"=>'邀请专家'.$expinfo['realname'].'的邮件发送失败,请尝试手动发送邀请邮件','url'=>-1));
return true;
}
}
}catch(Exception $e){
view::Post($this,array("content"=>'邀请失败:'.$e->getMessage(),'url'=>-1));
return true;
}
}//不存在原来的记录
}//循环结束
$this->_redirect("/admin/review/invite/?id=$id");
}
else
{
view::Post($this,array("content"=>'请选择要邀请的专家','url'=>"/admin/review/invite/?id=$id"));
return true;
}
} elseif ($user>0) {
$uuid=$this->_request->getParam('uuid');
$sql="update mdexpertreview set ts_modified=now() where id='$user' and uuid='$uuid'";
$this->db->exec($sql);
$sql="select realname,email,(select title from metadata where uuid='$uuid') as title from users where id='$user'";
$row=$this->db->fetchRow($sql);
//实例化EmailText
$mailtp=new EmailText($this->db,'invite-expert-review',array('user'=>$row['realname'],'uuid'=>$uuid,'title'=>$row['title'],'userid'=>$user));
$mail=new WestdcMailer($this->view->config->smtp);
$mail->setBodyText($mailtp->getBody());
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
$mail->addTo($row['email']);
$mail->setSubject($mailtp->getSubject());
$filecontent=file_get_contents("http://" . $_SERVER['HTTP_HOST'].'/service/doc/review/1/uuid/'.$uuid);
$mail->createAttachment($filecontent,'application/octet-stream',Zend_Mime::DISPOSITION_ATTACHMENT, Zend_Mime::ENCODING_BASE64, $row['title'].'.doc');
$filecontent=file_get_contents("http://" . $_SERVER['HTTP_HOST'].'/service/pdf/uuid/'.$uuid);
$mail->createAttachment($filecontent,'application/octet-stream',Zend_Mime::DISPOSITION_ATTACHMENT, Zend_Mime::ENCODING_BASE64, $row['title'].'.pdf');
if($mail->send())
{
view::Post($this,array("content"=>'成功再次邀请专家:'.$row['realname'],'url'=>"/admin/review/inreview/show/$id"));
return true;
}else
{
view::Post($this,array("content"=>'邀请专家'.$row['realname'].'的邮件发送失败,请尝试手动发送邀请邮件','url'=>"/admin/review/inreview/show/$id"));
return true;
}
}
$searchjoin = "";
if(!empty($search) && !empty($keyword))
{
$searchjoin = " where u.username like '%$keyword%'
or u.realname like '%$keyword%'
or u.unit like '%$keyword%'
or u.email like '%$keyword%'";
$this->view->keyword = $keyword;
}
$sql = "select me.id,u.username,u.realname,u.unit,u.phone,u.email from users u
right join mdexperts me on u.id=me.id
$searchjoin";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
$sql = "select m.title from metadata m
left join mdstatus s on s.uuid=m.uuid
where s.id='$id'";
$re = $this->db->query($sql);
$title = $re->fetch();
$this->view->md=$title;
}//邀请专家
/*
* changeadminAction() 更改管理员
*
* @param int id //评审ID
* @param int uid //管理员ID
*
* return view
*
* 每一条评审的元数据都有对应的管理员通过changeadminAction()更改管理员
*/
function changeadminAction(){
$id = $this->_request->getParam('id');
$uid = $this->_request->getParam('uid');
if(empty($id))
{
$this->_redirect("/admin/review");
}
$this->view->id = $id;
if(!empty($uid))
{
$sql = "update mdstatus set userid='$uid' where id='$id'";
if($this->db->exec($sql)>0)
{
include_once('helper/view.php');
view::Post($this,array("content"=>'修改成功','url'=>-1));
return true;
}
}
$sql = "select u.* from users u
where usertype='administrator'";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//改变管理员
/*
* addonAction() 将元数据加入评审
*
* @param $uuid //元数据UUID
*
* return view
*/
function addonAction()
{
$uuid=$this->_request->getParam('uuid');
$userid=Zend_Auth::getInstance()->getIdentity()->id;
$sql = "select * from mdstatus where uuid='$uuid'";
$re = $this->db->query($sql);
$row = $re->fetch();
include_once('helper/view.php');
if(empty($row['id']))
{
$sql = "insert into mdstatus (uuid,userid,status) values ('$uuid','$userid','0')";
try{
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'操作成功!该数据已放入评审','url'=>'/admin/review/draft'));
return true;
}
}catch( Exception $e){
view::Post($this,array("content"=>'操作失败:'.$e->getMessage(),'url'=>'/admin/review/draft'));
return true;
}
} else if ($row['status']==5){
$sql="update mdstatus set status=1,ts_accepted=now() where status=5 and id=".$row['id'];
$this->db->query($sql);
view::Post($this,array("content"=>'操作成功!该数据已重新放入评审','url'=>'/admin/review/accept'));
return true;
} else {
view::Post($this,array("content"=>'该数据已放入评审','url'=>'/admin/data/md'));
return true;
}
}//将数据放入评审
/*
* myreviewAction() 我负责的元数据
*
* @param $search //搜索
* @param string $keyword //关键词
*
* return view
*
* 相比在审元数据列表,我负责的元数据列表的管理功能更多,而且独有
*/
function myreviewAction(){
include_once("data/Review.php");
include_once("helper/view.php");
$search=$this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
$review = new Review($this->db);
if(!empty($search) && !empty($keyword))
{
$rows = $review->adminReviews($keyword);
$this->view->keyword = $keyword;
}else{
$rows = $review->adminReviews();
}
view::addPaginator($rows,$this->view,$this->_request);
return true;
}//我管理的元数据
/*
* checkmailAction()
*
* @param int id
*
* return view
*
* 选择需要发送邮件的邮箱,需要视图中配合提交表单实现
*/
function checkmailAction(){
$id = $this->view->id = $this->_request->getParam('id');
$sql="select m.title,m.uuid,array_to_string(array(select distinct(email) from role r left join responsible rs on r.resid=rs.id where r.uuid=m.uuid and length(rs.email)>4),',') as emails from mdstatus s left join metadata m on s.uuid=m.uuid where s.id=?";
$res=$this->db->fetchRow($this->db->quoteInto($sql,$id));
$rv=explode(',',$res['emails']);
$rows = array();
foreach ($rv as $k=>$v)
{
$rows[$k]['id'] = $k;
$rows[$k]['email'] = $v;
}
$this->view->paginator = $rows;
}
/*
* postAction() 元数据评审通过
*
* @param int id //评审ID
* @param string emails //要通知的邮件地址
*
* return view
*
* 要通知的邮箱地址通过邮件地址列表选择即checkmailAction()中列出的可选择的邮箱地址
*/
function postAction(){
$id = $this->_request->getParam('id');
$emails = $this->_request->getParam('emails');
include_once('helper/view.php');
$auth = Zend_Auth::getInstance();
if($auth->hasIdentity())
{
$user = $auth->getIdentity();
$userid = $user->id;
$sql = "select id from mdstatus where id='$id' and userid='$userid'";
$rs = $this->db->query($sql);
$row = $rs->fetch();
if(!empty($row['id']))
{
if($this->changestatus($id,5))
{
//发布正式版本
$sql = "UPDATE mdversion SET changelog=?,userid=? WHERE id in (select id from mdversion where uuid in (select uuid from mdstatus where id=?) order by ts_created desc limit 1)";
$this->db->query($sql,array('发布第一个正式版本 version 1.0',$userid,$id));
//删除所有的中间版本
$sql="delete from mdversion where changelog is null and uuid in (select uuid from mdstatus where id=?)";
$this->db->query($sql,array($id));
//email message
$mail=new WestdcMailer($this->view->config->smtp);
$sql="select m.uuid,m.title from metadata m left join mdstatus s on m.uuid=s.uuid where s.id='$id'";
$rs=$this->db->query($sql);
$res=$rs->fetch();
$mailtp=new EmailText($this->db,'metadata-publish',array('uuid'=>$res['uuid'],'title'=>$res['title']));
$mail->setBodyText($mailtp->getBody());
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
$mail->addTo($emails);
$mail->setSubject($mailtp->getSubject());
$mail->send();
view::Post($this,array("content"=>'操作成功:该元数据成功发布','url'=>"/admin/review/myreview"));
return true;
}else{
view::Post($this,array("content"=>'操作失败','url'=>"/admin/review/myreview"));
return true;
}
}else{
view::Post($this,array("content"=>'您没有权限操作其他管理员管理的元数据评审','url'=>"/admin/review/myreview"));
return true;
}
}else
{
view::Post($this,array("content"=>'权限读取失败','url'=>"/admin/review/myreview"));
return true;
}
}//发布元数据
/*
* rollbackAction() 重新评审
*
* @param int id
*
* return view
*
* 对需要重新评审的元数据进行回滚即状态为3
*/
function rollbackAction(){
$id=$this->_request->getParam('id');
include_once("helper/view.php");
if($this->changestatus($id,3))
{
view::Post($this,array("content"=>'操作成功!','url'=>"/admin/review/reviewed"));
return true;
}
else{
view::Post($this,array("content"=>'操作失败'.$id,'url'=>"/admin/review/reviewed"));
return true;
}
}//重新评审
/*
* draftAction() 投稿元数据
*
* @param search //搜索
* @param string keyword //关键词
* @param array update //进入评审的id ,数组形式
*
* retrun view
*
*/
function draftAction(){
$search=$this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
$update = $this->_request->getParam('update');
include_once("helper/view.php");
if($update>0 || is_array($update))
{
$ids = '';
if(is_array($update))
{
$ids = implode(',',$update);
} else $ids=$update;
if($this->changestatus($ids,1))
{
//update search document
$search=new Search();
//create search view in xunsearch
$sql="select * from xunsearch where uuid in (select uuid from mdstatus where id in (".$ids."))";
$sth = $this->db->prepare($sql);
$sth->execute();
while ($data = $sth->fetch())
{
$search->update($data);
}
//仅对单条数据发送email信息
if (is_numeric($ids))
{
$sql="select distinct u.email,m.title,m.uuid from mdstatus s left join metadata m on s.uuid=m.uuid
left join mdauthor a on s.uuid=a.uuid left join users u on a.userid=u.id where s.id=? order by u.email";
$rs=$this->db->query($sql,array($ids));
$rows=$rs->fetchAll($rs);
if ($rows)
{
//有数据作者
$mail=array();
foreach ($rows as $row)
{
$mail[]=$row['email'];
}
$title=$rows[0]['title'];
$uuid=$rows[0]['uuid'];
//send email
$mail=new WestdcMailer($this->view->config->smtp);
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
$mailtp=new EmailText($this->db,"review-new-accept",array(
'uuid' => $iso->uuid,
'title'=> $iso->resTitle
));
$mail->setBodyText($mailtp->getBody());
$mail->setSubject($mailtp->getSubject());
$mail->addTo($mail);
$mail->addCC($this->view->config->service->email);
$mail->send();
}
}
view::Post($this,array("content"=>'操作成功!'.$ids,'url'=>"/admin/review/draft"));
return true;
}
else{
view::Post($this,array("content"=>'操作失败'.$ids,'url'=>"/admin/review/accept"));
return true;
}
}//开始评审
$searchjoin = "";
if(!empty($search) && !empty($keyword))
{
$searchjoin = " and md.title like '%$keyword%'";
$this->view->keyword = $keyword;
}
$sql = "select m.id,md.title,md.uuid,u.username,u.realname,m.status,m.ts_created from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where status=0 $searchjoin order by m.ts_created desc";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}// draftAction 投稿元数据
/*
* canceledAction() 取消元数据评审
*
* @param search //搜索
* @param string keyword //关键词
* @param array update //进入评审的id ,数组形式
*
* return view
*
* 这里的取消不等于删除,评审记录不能随意删除
*/
function canceledAction(){
$search=$this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
$update = $this->_request->getParam('update');
include_once('helper/view.php');
if($update>0 || is_array($update))
{
$ids = '';
if(is_array($update))$ids = join(',',$update);
else $ids=$update;
if($this->changestatus($ids,0))
{
view::Post($this,array("content"=>'操作成功!','url'=>"/admin/review/canceled"));
return true;
}
else{
view::Post($this,array("content"=>'操作失败'.$ids,'url'=>"/admin/review/canceled"));
return true;
}
}//取消评审
$searchjoin = "";
if(!empty($search) && !empty($keyword))
{
$searchjoin = " and md.title like '%$keyword%'";
$this->view->keyword = $keyword;
}
$sql = "select m.id,md.title,md.uuid,u.username,u.realname,m.status from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where status=-1 $searchjoin";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//被取消评审的元数据
/*
* reviewedAction() 已结束评审的元数据列表
*
* @param search //搜索
* @param string keyword //关键词
*
* return view
*
*
*/
function reviewedAction(){
$search=$this->_request->getParam('search');
$keyword = $this->_request->getParam('keyword');
$searchjoin = "";
if(!empty($search) && !empty($keyword))
{
$searchjoin = " and md.title like '%$keyword%'";
$this->view->keyword = $keyword;
}
$sql = "select m.id,md.title,md.uuid,u.username,u.realname,m.status,m.ts_finished from mdstatus m
right join metadata md on md.uuid=m.uuid
left join users u on u.id=m.userid
where status=5 $searchjoin";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//已结束评审
/*
* deleteAction() 删除元数据评审记录
*
* @param $id //评审记录的ID
*
* return view
*
* 删除功能需要权限判断,没个管理员只能删除自己管理的评审元数据
*/
function deleteAction(){
$id=$this->_request->getParam('id');
include_once("helper/view.php");
try{
$auth = Zend_Auth::getInstance();
if($auth->hasIdentity())
{
$user = $auth->getIdentity();
$userid = $user->id;
$sql = "select id from mdstatus where userid='$userid' and id='$id'";
$rs = $this->db->query($sql);
$row = $rs->fetch();
if(!empty($row['id']))
{
$sql = "delete from mdstatus where id='$id'";
if($this->db->exec($sql))
{
view::Post($this,array("content"=>'删除成功','url'=>"/admin/review/myreview"));
return true;
}else{
view::Post($this,array("content"=>'删除失败','url'=>"/admin/review/myreview"));
return true;
}
}else{
view::Post($this,array("content"=>'您没有权限操作其他管理员管理的元数据评审','url'=>"/admin/review/myreview"));
return true;
}
}else
{
view::Post($this,array("content"=>'权限读取失败','url'=>"/admin/review/myreview"));
return true;
}
}catch(Exception $e){
view::Post($this,array("content"=>'删除失败:'.$e->getMessage(),'url'=>"/admin/review/myreview"));
return true;
}
}
/*
* expertsAction() 评审专家管理
*
* @param $search //搜索
* @param string $keyword //关键词
* @param string $submit //添加新专家时的提交动作
* @param int $edit //编辑管理员
* @param int $del //删除
*
*
* return view
*/
function expertsAction()
{
$search = $this->_request->getParam('search');
$keyword= $this->_request->getParam('keyword');
$submit = $this->_request->getParam('submit');
$edit = $this->_request->getParam('edit');
$del = $this->_request->getParam('del');
$add = $this->_request->getParam('add');
include_once("helper/view.php");
if($add)
{
if(!empty($submit))
{
foreach($_POST as $k=>$v)
{
$$k=$v;
}
$speciality = $_POST['speciality'];
$chars = array(
"a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k",
"l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v",
"w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G",
"H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R",
"S", "T", "U", "V", "W", "X", "Y", "Z", "0", "1", "2",
"3", "4", "5", "6", "7", "8", "9"
);
$charsLen = count($chars) - 1;
shuffle($chars);
$output = "";
for ($i=0; $i<8; $i++)
{
$output .= $chars[mt_rand(0, $charsLen)];
}
$password=$output;
$testsql="select id from users where username='$username' or email='$email'";
$re=$this->db->query($testsql);
$test=$re->fetch();
if(!empty($test['id']))
{
view::Post($this,array("content"=>'用户名或邮箱重复','url'=>"/admin/review/experts"));
return true;
}
else
{
$data = array(
'username' => $username,
'realname' => $realname,
'email' => $email,
'unit' => $unit,
'address' => $address,
'phone' => $phone,
'project' => $project,
'password' => md5($password)
);
if($this->db->insert('users',$data))
{
$mail=new WestdcMailer($this->view->config->smtp);
$mailtp=new EmailText($this->db,'expert-register',array('user'=>$username,'password'=>$password));
$mail->setBodyText($mailtp->getBody());
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
$mail->addTo($email);
$mail->setSubject($mailtp->getSubject());
$mail->send();
$sql="select id from users where username='{$data['username']}'";
$re=$this->db->query($sql);
$row = $re->fetch();
$sql="insert into mdexperts (id,speciality) values ('{$row['id']}','$speciality')";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'成功添加评审专家','url'=>"/admin/review/experts"));
return true;
}
}
}
}
else
{
$this->_helper->viewRenderer('expertsadd');
}
}
if($del>0)
{
$sql="delete from mdexperts where id='$del'";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'删除成功!','url'=>'/admin/review/experts'));
return true;
}
}
if($edit>0)
{
if(!empty($submit))
{
$speciality = $this->_request->getParam('speciality');
$sql = "update mdexperts set speciality='$speciality',ts_modified='".date("Y-m-d H:i:s",time())."' where id='$edit'";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'编辑成功!','url'=>'/admin/review/experts'));
return true;
}
}
else
{
$sql = "select m.*,m.id as mid,u.* from mdexperts m left join users u on u.id=m.id
where m.id='$edit'";
$re = $this->db->query($sql);
$row = $re->fetch();
$this->view->infos = $row;
$this->view->id=$edit;
$this->_helper->viewRenderer('expertsedit');
}
}//编辑
if($search)
{
$sql = "select m.*,m.id as mid,u.* from mdexperts m left join users u on u.id=m.id
where u.realname like '%$keyword%' or m.speciality like '%$keyword%' or u.unit like '%$keyword%'";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination_param.phtml');
$this->view->paginator=$paginator;
}//搜索
else
{
$sql="select m.*,m.id as mid,u.* from mdexperts m left join users u on u.id=m.id";
$re = $this->db->query($sql);
$rows = $re->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination.phtml');
$this->view->paginator=$paginator;
}//列表
}//expertsAction 专家库
/*
* commentsAction() 评审意见
*
* @param string $ac //动作: view 查看(详细单条)
* list 评审意见列表
* listbyuser 按用户查看评审意见列表
* del 删除评审意见
* rollback 重置为草稿状态
* @param $uuid //评审元数据uuid
* @param $id //评审id
* @param $q //搜索关键词
* @param $search //搜索
*
* return view
*
* 默认视图是评审意见列表视图
*
*/
function commentsAction(){
$ac = $this->_request->getParam('ac');
$uuid = $this->_request->getParam('uuid');
$id = $this->_request->getParam('id');
$q = $this->_request->getParam('q');
$search = $this->_request->getParam('search');
include_once('helper/view.php');
if($ac=='view' && !empty($id))
{
$redirect = "/admin/review/comments/ac/view/id/$id";
if(!is_numeric($id))
{
view::Post($this,array("content"=>'参数不正确,请按正确的步骤进行访问','url'=>$redirect));
return true;
}
$sql = "select r.*,md.title,u.realname,u.id as uid from mdreview r
left join metadata md on md.uuid=r.uuid
left join users u on u.id=r.userid
where r.id='$id'
";
$rs = $this->db->query($sql);
$row = $rs->fetch();
if(empty($row['id']))
{
view::Post($this,array("content"=>'该评审不存在或者已删除','url'=>$redirect));
return true;
}
$sql = "select att.realname,att.id from attachments att
left join mdreviewattach ratt on att.id=ratt.attachid
where ratt.reviewid=$id";
$rs = $this->db->query($sql);
$rows = $rs->fetchAll();
$row['attid'] = "";
if(!empty($rows))
{
foreach($rows as $v)
{
$row['attid'] .= '<li>'.$v['realname'].'<a href="/admin/data/attachments/down/'.$v['id'].'">下载</a></li>';
}
}
else
{
$row['attid'] = '无附件';
}
$this->view->info = $row;
$this->_helper->viewRenderer('commentsview');
}//查看单个元数据的评审
else if($ac=='list')
{
try{
$redirect = "/admin/review/comments/ac/list/";
$wheresql = array();
$userid = $this->_request->getParam('userid');
if(!empty($userid))
{
$redirect.="/uuid/$userid";
$wheresql[] = " r.userid='$userid' ";
}
if(!empty($uuid))
{
$redirect.="/uuid/$uuid";
$wheresql[] = " md.uuid='$uuid' ";
}
$wheresql[]=' r.status>-1 ';
if(!empty($q) && !empty($search))
{
if (preg_match("/[<|>|#|$|%|^|*|(|)|{|}|'|\"|;|:]/i",$q) || !is_numeric($search))
{
view::Post($this,array("content"=>'您的输入的搜索条件包含非法请求,请不要输入特殊符号','url'=>$redirect));
return true;
}
$this->view->q = $q;
$wheresql[] = " (md.title like '%$q%' or u.realname like '%$q%') ";
}
if(count($wheresql>0))$wheresql = join(' and ',$wheresql);
else $wheresql='';
if($wheresql!='')
{
$wheresql = 'where '.$wheresql;
}
$sql = "select md.title,md.uuid,u.realname,r.id,r.ts_created,r.is_expert from mdreview r
left join metadata md on md.uuid=r.uuid
left join users u on u.id=r.userid
$wheresql
order by r.ts_created desc
";
$rs = $this->db->query($sql);
$rows = $rs->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination.phtml');
$this->view->paginator=$paginator;
}catch(Exception $e){
echo $e->getMessage().'<br />';
}
$this->_helper->viewRenderer('commentslist');
}//评审意见列表 or 某条元数据的评审意见列表
else if($ac=='listbyuser')
{
try{
$redirect = "/admin/review/comments/ac/list/";
$wheresql = array();
$wheresql[]=' r.status>-1 ';
if(!empty($q) && !empty($search))
{
if (preg_match("/[<|>|#|$|%|^|*|(|)|{|}|'|\"|;|:]/i",$q) || !is_numeric($search))
{
view::Post($this,array("content"=>'您的输入的搜索条件包含非法请求,请不要输入特殊符号','url'=>$redirect));
return true;
}
$this->view->q = $q;
$wheresql[] = " u.realname like '%$q%' ";
}
if(count($wheresql>0))$wheresql = join(' and ',$wheresql);
else $wheresql='';
if($wheresql!='')
{
$wheresql = 'where '.$wheresql;
}
$sql = "select u.id,u.realname as title,count(r.id) as c from mdreview r
left join metadata md on md.uuid=r.uuid
left join users u on u.id=r.userid
$wheresql
GROUP BY u.id,u.realname
";
$rs = $this->db->query($sql);
$rows = $rs->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination.phtml');
$this->view->paginator=$paginator;
}catch(Exception $e){
echo $e->getMessage().'<br />';
}
$this->_helper->viewRenderer('commentslistbyuser');
}//按评审用户查看
else if($ac=='del' && !empty($id))
{
$redirect = "/admin/review/comments/ac/list/";
if(!is_numeric($id))
{
view::Post($this,array("content"=>'参数不正确,请按正确的步骤进行访问','url'=>$redirect));
return true;
}
$sql = "select r.id,att.filename,ratt.attachid as attid from mdreview r
left join mdreviewattach ratt on ratt.reviewid=r.id
left join attachments att on att.id=ratt.attachid
where r.id='$id'";
$rs = $this->db->query($sql);
$row = $rs->fetch();
if(!empty($row['filename']))
{
//需要删除文件通过Zend_Registry::get('upload')获得上传文件的根目录
$basepath = $this->view->config->upload;
$filepath = $basepath.$row['filename'];
if(unlink($filepath))
{
$sql = "delete from mdreview where id='$id'";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'评审意见删除成功!','url'=>$redirect));
return true;
}
}
else
{
$sql = "delete from mdreview where id='$id'";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'评审意见删除成功!但附件删除失败,请手动删除文件:'.$row['filename'],'url'=>$redirect));
return true;
}
}
}else{
$sql = "delete from mdreview where id='$id'";
if($this->db->exec($sql)>0)
{
view::Post($this,array("content"=>'评审意见删除成功!','url'=>$redirect));
return true;
}
}
}//删除评审意见 同时删除附件
else if($ac=='rollback' && !empty($id))
{
$redirect = "/admin/review/comments/ac/list/";
$sql = "update mdreview set status=-1 where id=$id";
try{
if($this->db->exec($sql))
{
view::Post($this,array("content"=>'更改成功','url'=>$redirect));
return true;
}else{
view::Post($this,array("content"=>'更改失败','url'=>$redirect));
return true;
}
}catch(Exception $e){
view::Post($this,array("content"=>'更新失败:'.$e->getMessage(),'url'=>$redirect));
return true;
}
}//为用户重置为草稿状态
else
{
try{
$redirect = "/admin/review/comments";
$wheresql = array();
$wheresql[]=' r.status>-1 ';
if(!empty($q) && !empty($search))
{
if (preg_match("/[<|>|#|$|%|^|*|(|)|{|}|'|\"|;|:]/i",$q) || !is_numeric($search))
{
view::Post($this,array("content"=>'您的输入的搜索条件包含非法请求,请不要输入特殊符号','url'=>$redirect));
return true;
}//非法请求过滤
$this->view->q = $q;
$wheresql[] = " md.title like '%$q%' ";
}
if(count($wheresql>0))$wheresql = join(' and ',$wheresql);
else $wheresql='';
if($wheresql!='')
{
$wheresql = 'where '.$wheresql;
}
$sql = "select md.title,md.uuid,count(r.id) as c from mdreview r
left join metadata md on md.uuid=r.uuid
$wheresql
GROUP BY md.title,md.uuid
";
$rs = $this->db->query($sql);
$rows = $rs->fetchAll();
$paginator = Zend_Paginator::factory($rows);
$paginator->setCurrentPageNumber($this->_getParam('page'));
$paginator->setItemCountPerPage($this->view->config->page->max);
$paginator->setView($this->view);
Zend_View_Helper_PaginationControl::setDefaultViewPartial('pagination.phtml');
$this->view->paginator=$paginator;
}catch(Exception $e){
echo $e->getMessage().'<br />';
}
}//列表
}//commentsAction 查看所有评审意见
//replyAction() 数据评审信息反馈
function replyAction(){
$uuid = $this->_getParam('uuid');
$submit = $this->_getParam('submit');
include_once("helper/view.php");
include_once("data/Review.php");
include_once("data/Metadata.php");
include_once("data/Author.php");
if(empty($uuid))
{
view::Post($this,array('content'=>'参数错误','url' => -1));
return true;
}
$review = new Review($this->db);
$this->view->uuid = $uuid;
$reviews = $review->getReviews($uuid);
$this->view->review = $reviews;
$metadata = new Metadata($this->db);
$this->view->md = $metadata->View($uuid);
$body = "元数据《".$this->view->md['title']."》的作者,您好:\r\n
以下是您的元数据《".$this->view->md['title']."》的反馈信息。\r\n";
$body .= "--------------------------------------\r\n";
if(!empty($reviews))
foreach($reviews as $k=>$v)
{
$body .= $v['username'].":".$v['mdcomment']."\r\n";
}
else
$body .= "\r\n\r\n\r\n";
$body .= "--------------------------------------";
$body .= "\r\n           西部数据中心服务组";
$author = new Author($this->db);
$emails = $author->getAuthor($uuid,'email');
if(count($emails)<1)
{
$email = "";
}else{
$email = join(";",$emails);
}
$data = array(
'title'=>"您的元数据《".$this->view->md['title']."》有新的反馈",
'content'=>$body,
'email'=>$email
);
$this->view->data = $data;
if(!empty($submit))
{
$this->view->data['title'] = $title = $this->_getParam('title');
$this->view->data['email'] = $email = $this->_getParam('email');
$this->view->data['content'] = $cotent = $this->_getParam('content');
$emails = explode(";",$email);
$mail=new WestdcMailer($this->view->config->smtp);
$mail->setBodyText($cotent);
$mail->setFrom($this->view->config->service->email,'西部数据中心服务组');
foreach($emails as $v)
{
$mail->addTo($v);
}
$mail->addBcc($this->view->config->service->email);
$mail->setSubject($title);
if($mail->send())
{
view::Post($this,array('content'=>'发送成功!','url'=>'/admin/review/reply/uuid/'.$uuid));
return true;
}else{
$this->view->error = view::Error('邮件发送失败');
return true;
}
}
}//replyAction()
}