ImageHotspotsController.php in Image Hotspots 8

Namespace

Drupal\image_hotspots\Controller

File

src/Controller/ImageHotspotsController.php

<?php

namespace Drupal\image_hotspots\Controller;

use Drupal\Core\Ajax\AjaxResponse;
use Drupal\Core\Controller\ControllerBase;
use Drupal\Core\Entity\EntityStorageException;
use Drupal\image_hotspots\Entity\ImageHotspot;
use Symfony\Component\HttpFoundation\Request;
use Drupal\Component\Utility\Xss;

/**
 * Class ImageHotspotsController.
 *
 * @package Drupal\image_hotspots\Controller
 */
class ImageHotspotsController extends ControllerBase {

  /**
   * Deletes hotspot with $hid.
   *
   * @param string $hid
   *   Hotspot id.
   *
   * @return \Drupal\Core\Ajax\AjaxResponse
   *   AjaxResponse
   */
  public function deleteAction($hid) {
    if (!$this
      ->accessCallback()) {
      $code = 403;
      $data = $this
        ->t('You did a lot actions with hotspots and can not delete this hotspot right now. Wait some seconds before you can do it again.');
    }
    else {
      try {

        /** @var \Drupal\image_hotspots\Entity\ImageHotspot $hotspot */
        $hotspot = ImageHotspot::load($hid);
        $target = $hotspot
          ->getTarget();
        $hotspot
          ->delete();
        $this
          ->disableCache($target);
        $code = 200;
        $data = $this
          ->t('Hotspot was successfully deleted');
      } catch (EntityStorageException $e) {
        $code = 500;
        $data = $e
          ->getMessage();
      }
    }
    return new AjaxResponse($data, $code);
  }

  /**
   * Creates hotspot with values from request data.
   *
   * @param \Symfony\Component\HttpFoundation\Request $request
   *   Request from user to change hotspot.
   *
   * @return \Drupal\Core\Ajax\AjaxResponse
   *   AjaxResponse
   */
  public function createAction(Request $request) {
    if (!$this
      ->accessCallback()) {
      $code = 403;
      $parameters['error'] = $this
        ->t('You did a lot actions with hotspots and can not create hotspot right now. Wait some seconds before you can do it again.');
    }
    else {
      $parameters = $request->request
        ->all();
      $parameters['title'] = preg_replace('/(javascript)+(\\s)*:+/', '', Xss::filter($parameters['title']));
      $parameters['description'] = preg_replace('/(javascript)+(\\s)*:+/', '', Xss::filter($parameters['description']));
      $parameters['link'] = preg_replace('/(javascript)+(\\s)*:+/', '', Xss::filter($parameters['link']));
      $parameters['target'] = preg_replace('/(javascript)+(\\s)*:+/', '', Xss::filter($parameters['target']));
      $parameters['uid'] = $this
        ->currentUser()
        ->id();
      try {
        $hotspot = ImageHotspot::create($parameters);
        $hotspot
          ->save();
        $this
          ->disableCache($hotspot
          ->getTarget());
        $code = 200;
        $parameters['hid'] = $hotspot
          ->id();
      } catch (EntityStorageException $e) {
        $code = 500;
        $parameters['error'] = $e
          ->getMessage();
      }
    }
    return new AjaxResponse($parameters, $code);
  }

  /**
   * Update hotspot with $hid.
   *
   * @param string $hid
   *   Hotspot id.
   * @param \Symfony\Component\HttpFoundation\Request $request
   *   Request from user to change hotspot.
   *
   * @return \Drupal\Core\Ajax\AjaxResponse
   *   AjaxResponse
   */
  public function updateAction($hid, Request $request) {
    if (!$this
      ->accessCallback()) {
      $code = 403;
      $parameters['error'] = $this
        ->t('You did a lot actions with hotspots and can not update this hotspot right now. Wait some seconds before you can do it again.');
    }
    else {

      /** @var \Drupal\image_hotspots\Entity\ImageHotspot $hotspot */
      $hotspot = ImageHotspot::load($hid);
      if (is_null($hotspot)) {
        $code = 404;
        $parameters['error'] = $this
          ->t('Can not find hotspot with hid @hid', [
          '@hid' => $hid,
        ]);
      }
      else {
        $parameters = $request->request
          ->all();
        $parameters['title'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['title']));
        $parameters['description'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['description']));
        $parameters['link'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['link']));
        $parameters['target'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['target']));
        $hotspot
          ->setTitle($parameters['title']);
        $hotspot
          ->setDescription($parameters['description']);
        $hotspot
          ->setLink($parameters['link']);
        $hotspot
          ->setTargetLink($parameters['target']);
        $hotspot
          ->setCoordinates([
          'x' => $parameters['x'],
          'y' => $parameters['y'],
          'x2' => $parameters['x2'],
          'y2' => $parameters['y2'],
        ]);
        try {
          $hotspot
            ->save();
          $this
            ->disableCache($hotspot
            ->getTarget());
          $code = 200;
          $parameters['hid'] = $hotspot
            ->id();
        } catch (EntityStorageException $e) {
          $code = 500;
          $parameters['error'] = $e
            ->getMessage();
        }
      }
    }
    return new AjaxResponse($parameters, $code);
  }

  /**
   * Translate hotspot with $hid.
   *
   * @param $hid
   *   Hotspot id.
   * @param $langcode
   *   Language ID.
   * @param \Symfony\Component\HttpFoundation\Request $request
   *
   * @return \Drupal\Core\Ajax\AjaxResponse
   */
  public function translateAction($hid, $langcode, Request $request) {
    if (!$this
      ->accessCallback()) {
      $code = 403;
      $parameters['error'] = $this
        ->t('You did a lot actions with hotspots and can not update this hotspot right now. Wait some seconds before you can do it again.');
    }
    else {

      /** @var ImageHotspotInterface $hotspot */
      $hotspot = ImageHotspot::load($hid);
      if (is_null($hotspot)) {
        $code = 404;
        $parameters['error'] = $this
          ->t('Can not find hotspot with hid ') + $hid;
      }
      else {
        if ($hotspot
          ->hasTranslation($langcode)) {
          $hotspot = $hotspot
            ->getTranslation($langcode);
        }
        else {
          $hotspot = $hotspot
            ->addTranslation($langcode);
        }
        $parameters = $request->request
          ->all();
        $parameters['title'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['title']));
        $parameters['description'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['description']));
        $parameters['link'] = preg_replace('/(javascript)+(\\s)*:+/', "", Xss::filter($parameters['link']));
        $hotspot
          ->setTitle($parameters['title']);
        $hotspot
          ->setDescription($parameters['description']);
        $hotspot
          ->setLink($parameters['link']);
        try {
          $hotspot
            ->save();
          $this
            ->disableCache($hotspot
            ->getTarget());
          $code = 200;
          $parameters['hid'] = $hotspot
            ->id();
        } catch (EntityStorageException $e) {
          $code = 500;
          $parameters['error'] = $e
            ->getMessage();
        }
      }
    }
    return new AjaxResponse($parameters, $code);
  }

  /**
   * Check if user allowed to do actions with hotspots right now.
   *
   * @return bool
   *   Returns true of false when access is requested.
   */
  protected function accessCallback() {
    $flood = \Drupal::flood();
    $name = 'image_hotspots.action';
    $ip = \Drupal::request()
      ->getClientIp();

    // Anonymous can work with hotspots every 20 seconds.
    if ($this
      ->currentUser()
      ->isAnonymous()) {
      $count = 1;
      $window = 20;
      if ($flood
        ->isAllowed($name, $count, $window, $ip)) {
        $flood
          ->register($name, $window, $ip);
        return TRUE;
      }
      else {
        return FALSE;
      }
    }
    else {
      $count = 5;
      $window = 10;
      if ($flood
        ->isAllowed($name, $count, $window, $ip)) {
        $flood
          ->register($name, $window, $ip);
        return TRUE;
      }
      else {
        return FALSE;
      }
    }
  }

  /**
   * Invalidated cache items with current hotspot tag.
   *
   * If user edit hotspots in one place it will displayed in other.
   *
   * @param array $target
   *   Hotspot target.
   */
  protected function disableCache(array $target) {
    $tag = 'hotspots:' . $target['field_name'] . ':' . $target['fid'] . ':' . $target['image_style'];
    \Drupal::service('cache_tags.invalidator')
      ->invalidateTags([
      $tag,
    ]);
  }

}

Classes

Name	Description
ImageHotspotsController	Class ImageHotspotsController.