src/Controller/WebserviceController.php line 648

Open in your IDE?
  1. <?php
  2. namespace App\Controller;
  4. use App\Entity\Users;
  5. use App\Entity\UsersAmbienti;
  6. use App\Entity\Questionari;
  7. use App\Entity\QuestionariIniziati;
  8. use App\Entity\Domande;
  9. use App\Entity\Risposte;
  10. use Doctrine\ORM\EntityManagerInterface;
  11. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpFoundation\Response;
  14. use Symfony\Component\Routing\Annotation\Route;
  15. use Doctrine\Persistence\ManagerRegistry;
  16. use Symfony\Component\HttpFoundation\RequestStack;
  17. use Symfony\Component\Yaml\Yaml;
  20. class WebserviceController extends AbstractController
  21. {
  22.     private $requestStack;
  23.     public function __construct(RequestStack $requestStack)
  24.     {
  25.         $this->requestStack = $requestStack;
  26.     }
  27.     private function checkAuth($auth, $doctrine)
  28.     {
  29.         $a = explode(" ", $auth);
  30.         if ($a[0] == "Basic") {
  31.             $t = $a[1];
  32.             if ($t == "") {
  33.                 return false;
  34.             } else {
  35.                 $t = explode(".", $t);
  36.                 $t0_header = base64_decode($t[0]);
  37.                 $t1_payload = base64_decode($t[1]);
  38.                 $t0_header = json_decode($t0_header);
  39.                 if ($t0_header) {
  40.                     $t1_payload = json_decode($t1_payload);
  41.                     if ($t1_payload) {
  42.                         $from = $t1_payload->from;
  43.                         $to = $t1_payload->to;
  44.                         if ($from <= $t1_payload->from && $to >= $t1_payload->to) {
  45.                             $user = $doctrine->getRepository(Users::class)->findOneBy(['email' => $t1_payload->user]);
  46.                             if ($user) {
  47.                                 $ambiente = $doctrine->getRepository(UsersAmbienti::class)->findOneBy(['user' => $user, "url" => $t1_payload->url]);
  48.                                 $apisecret = $ambiente->getApisecret();
  49.                                 if ($t0_header == "HS256") {
  50.                                     $alg = "sha256";
  51.                                 } else {
  52.                                     $alg = "sha256";
  53.                                 }
  54.                                 $signature = hash_hmac($alg, $t[0] . $t[1], $apisecret, true);
  55.                                 $signature = base64_encode($signature);
  56.                                 if ($signature == $t[2]) {
  57.                                     return $ambiente->getId();
  58.                                 } else {
  59.                                     //$signature = $user->getEmail()."|".$t1_payload->url."|".$signature;
  60.                                     return "-3";
  61.                                 }
  62.                             } else {
  63.                                 return "-1";
  64.                             }
  65.                         } else {
  66.                             return "-2";
  67.                         }
  68.                         
  69.                     } else {
  70.                         return false;
  71.                     }
  72.                 } else {
  73.                     return false;
  74.                 }
  75.             }
  76.         }
  77.         return false;
  78.     }
  79.     
  80.     #[Route('/webservice', name: 'app_webservice')]
  81.     public function index(Request $request, ManagerRegistry $doctrine): Response
  82.     {
  83.         echo '<html>
  84.             <head>
  85.             <meta charset="UTF-8">
  86.             <meta name="viewport" content="width=device-width, initial-scale=1">
  87.             <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css">
  88.             <title>LIVE</title>
  89.             <link href="/dist/css/pages/login-register-lock.css" rel="stylesheet">
  90.             <link href="/dist/css/style.min.css" rel="stylesheet">
  91.             <style>
  92.             footer {
  93.             width: 100%;
  94.             position: fixed;
  95.             bottom: 0px;
  96.             text-align: center;
  97.             padding: 3px;
  98.             background-color: #000;
  99.             color: #fff;
  100.             }
  101.             </style>
  102.             </head>
  103.             <body>
  104.             <div style="width: 100%; height: 20px; position: absolute; top: 50%; margin-top: -10px;">
  105.             <center>LIVE</center>
  106.             </div>
  107.             </body>
  108.             <footer><center>42b.it</center></footer>
  109.             </html>';
  110.         exit();
  111.         $this->denyAccessUnlessGranted('ROLE_USER');
  112.         echo "no";
  113.         exit();
  114.     }
  115.     
  116.     #[Route('/webservice/connect', name: 'app_webservice_connect')]
  117.     public function connect(Request $request,ManagerRegistry $doctrine): Response
  118.     {
  119.         $apikey = $request->get("a");
  120.         $apisecret = $request->get("b");
  121.         $url = $request->get("c");
  122.         $user = $doctrine->getRepository(UsersAmbienti::class)->findOneBy(['apikey' => $apikey, "apisecret" => $apisecret]);
  123.         if ($user) {
  124.             $header = [
  125.                 'typ' => 'JWT',
  126.                 'alg' => 'HS256'
  127.             ];
  128.             $header = json_encode($header);        
  129.             $header = base64_encode($header);
  130.             $now = strtotime(date("Y-m-d H:i:s"));
  131.             $to = $now + 3600; // 1 ora;
  132.             $payload = [            
  133.                 "from" => date("Y-m-d H:i:s"),
  134.                 "to" => date("Y-m-d H:i:s", $to),
  135.                 "url" => $url,
  136.                 "user" => $user->getUser()->getEmail()
  137.             ];
  138.             $payload = json_encode($payload);
  139.             $payload = base64_encode($payload);
  140.             $signature = hash_hmac('sha256', $header . $payload, $apisecret, true);
  141.             $signature = base64_encode($signature);
  142.             $token = $header . "." . $payload . "." . $signature;
  143.             echo $token;
  144.             exit();
  145.         } else {
  146.             echo "0";
  147.             exit();
  148.         }
  149.     }
  150.     
  151.     
  152.     #[Route('/webservice/getquestionari', name: 'app_webservice_getquestionari')]
  153.     public function getQuestionari(Request $request,ManagerRegistry $doctrine): Response
  154.     {
  155.         $headers = apache_request_headers();
  156.         $check = $this->checkAuth($headers["Authorization"], $doctrine);
  157.         if ((int)$check > 0) {
  158.             $questionari = $doctrine->getRepository(Questionari::class)->findBy(['ambiente' => $check]);
  159.             $res = [];
  160.             foreach ($questionari as $q) {
  161.                 if ($q->getQuestionario()) {
  162.                     // non riporto 
  163.                 } else {
  164.                     $res[$q->getId()] = $q->getTitolo();
  165.                 }
  166.             }
  167.             echo json_encode($res);
  168.         } else {
  169.             if ((int)$check == -1) {
  170.                 echo "Api error";
  171.             } elseif ((int)$check == -2) {
  172.                 echo "Expired";
  173.             } elseif ((int)$check == -3) {
  174.                 echo "Api error";
  175.             } else {
  176.                 echo "Error";
  177.             }
  178.         }
  179.         exit();
  180.     }
  181.     
  182.     #[Route('/webservice/createquestionaro', name: 'app_webservice_createquestionario')]
  183.     public function createQuestionario(Request $request,ManagerRegistry $doctrine): Response
  184.     {
  185.         $headers = apache_request_headers();
  186.         $check = $this->checkAuth($headers["Authorization"], $doctrine);
  187.         if ((int)$check > 0){
  188.             $teachers = [];
  189.             $nteachers = $request->get("nteachers");
  190.             if ((int)$nteachers > 0) {
  191.                 for ($i = 1; $i <= $nteachers; $i++) {
  192.                     $teachers[] = [
  193.                         "id" => $request->get("teacher_id_" . $i),
  194.                         "username" => $request->get("teacher_id_username_" . $i),
  195.                         "name" => $request->get("teacher_id_name_" . $i)
  196.                     ];
  197.                 } 
  198.             }
  199.             $questionario = $_REQUEST["questionario"];
  200.             $q = $doctrine->getRepository(Questionari::class)->findOneById((int)$questionario);
  201.             if ($q) {
  202.                 $q2 = new Questionari();
  203.                 $q2->setQuestionario($q);
  204.                 $q2->setAmbiente($q->getAmbiente());
  205.                 $q2->setCorsoId($_REQUEST["course"]);
  206.                 $q2->setUser($q->getUser());
  207.                 $q2->setTitolo($q->getTitolo());     
  208.                 $q2->setDescrizione($q->getDescrizione());     
  209.                 $q2->setCreatedAt(new \DateTimeImmutable("now"));
  210.                 $token = bin2hex(random_bytes(32));
  211.                 $soken = bin2hex(hash_hmac('sha256',$token,bin2hex(random_bytes(8)), true));
  212.                 $q2->setToken($soken);
  213.                 $entityManager = $doctrine->getManager();
  214.                 $entityManager->persist($q2);
  215.                 $entityManager->flush();
  216.                 $qid = $q2->getId();
  217.                 $domande = $doctrine->getRepository(Domande::class)->findByQuestionario(["questionario" => $q], ["posizione" => "ASC"]);
  218.                 if ($domande){
  219.                     $posizione = 1;
  220.                     foreach ($domande as $d) {
  221.                         if ($d->getTipoRisposta() == "docente") {
  222.                             foreach ($teachers as $t) {
  223.                                 $d2 = new Domande();
  224.                                 $d2->setQuestionario($q2);
  225.                                 $d2->setDomanda($d->getDomanda());
  226.                                 $d2->setTipoRisposta($d->getTipoRisposta());
  227.                                 $d2->setOpzioniRisposta($d->getOpzioniRisposta() . "\nTeacher:" . json_encode($t));     
  228.                                 $d2->setMultipla($d->isMultipla());
  229.                                 $d2->setPosizione($posizione);
  230.                                 $d2->setCreatedAt(new \DateTimeImmutable("now"));
  231.                                 $d2->setPlaceholder($d->getPlaceholder());
  232.                                 $d2->setObbligatoria($d->isObbligatoria());
  233.                                 $entityManager->persist($d2);
  234.                                 $posizione++;
  235.                             }
  236.                         } else {
  237.                             $d2 = new Domande();
  238.                             $d2->setQuestionario($q2);
  239.                             $d2->setDomanda($d->getDomanda());
  240.                             $d2->setTipoRisposta($d->getTipoRisposta());
  241.                             $d2->setOpzioniRisposta($d->getOpzioniRisposta());     
  242.                             $d2->setMultipla($d->isMultipla());
  243.                             $d2->setPosizione($posizione);
  244.                             $d2->setCreatedAt(new \DateTimeImmutable("now"));
  245.                             $d2->setPlaceholder($d->getPlaceholder());
  246.                             $d2->setObbligatoria($d->isObbligatoria());
  247.                             $entityManager->persist($d2);
  248.                             $posizione++;
  249.                         }     
  250.                     }
  251.                     $entityManager->flush();
  252.                 }
  253.                 echo $soken . "." . $q2->getId();
  254.             } else {
  255.                 echo "Errore 149";
  256.             }
  257.             exit();
  258.         } else {
  259.             if((int)$check == -1) {
  260.                 echo "Api error";
  261.             } elseif ((int)$check == -2) {
  262.                 echo "Expired";
  263.             } elseif ((int)$check == -3) {
  264.                 echo "Api error";
  265.             } else {
  266.                 echo "Error";
  267.             }
  268.         }
  269.         exit();
  270.     }
  271.     #[Route('/webservice/getStudentQuestionario', name: 'app_webservice_getstudentquestionario')]
  272.     public function getStudentQuestionario(Request $request,ManagerRegistry $doctrine): Response{
  273.         $headers = apache_request_headers();
  274.         $check = $this->checkAuth($headers["Authorization"], $doctrine);
  275.         $user = $request->get("user");
  276.         if ((int)$check > 0 && $user != "") {
  277.             // il token generale e' corretto
  278.             // controllo che il token passato sia corretto rispetto al questioanrio
  279.             $q = $doctrine->getRepository(Questionari::class)->findOneByToken($request->get("token"));
  280.             if ($q->getId() == $request->get("questionario") || $q->getQuestionario()->getId() == $request->get("questionario")) {
  281.                 if ($q->getId() == $request->get("questionario")) {
  282.                     $qid = $q->getId();
  283.                 } else {
  284.                     $qid = $q->getQuestionario()->getId();
  285.                 }
  286.                 $qi = $doctrine->getRepository(QuestionariIniziati::class)->findOneBy([
  287.                     "questionario" => $q,
  288.                     "user_id" => $user,
  289.                     "status" => 1,
  290.                     "ambiente" => $q->getQuestionario()->getAmbiente()
  291.                 ]);
  292.                 if ($qi) {
  293.                     $qid .= "_" . $qi->getId();
  294.                 }
  295.                 echo $qid;
  296.             } else {
  297.                 echo "error";
  298.             }
  299.         }
  300.         exit();
  301.     }
  302.     
  303.     #[Route('/webservice/sustain', name: 'app_webservice_sustainstudentquestionario')]
  304.     public function sustainStudentQuestionario(Request $request,ManagerRegistry $doctrine): Response
  305.     { 
  306.         $headers = apache_request_headers();
  307.         $session = $this->requestStack->getSession();
  308.         $session_token = $session->get('token');
  309.         $session_signature = $session->get('signature');
  310.         $session_message = $session->get('message');
  311.         if ($session_token != "") {
  312.             $token1 = $session_token;
  313.             $session->set('token', "");
  314.             $signature = $session_signature;
  315.             $session->set('signature', "");
  316.             $res = json_decode(base64_decode($token1));
  317.         } else {
  318.             $token1 = $request->get("token");
  319.             $signature = $request->get("signature");
  320.         }
  321.         if ($token1 == "") {
  322.             echo "288";
  323.             return $this->redirectToRoute("login");
  324.         }
  325.         $res = json_decode(base64_decode($token1));
  326.         // controllo se esiste il questionario ( questionario ) con il token passato ( token )
  327.         $q = $doctrine->getRepository(Questionari::class)->findOneBy([
  328.             "id" => $res->questionario,
  329.             "token"=> $res->token
  330.         ]);
  331.         
  332.         if (!$q) {
  333.             $questionario = $doctrine->getRepository(Questionari::class)->find($res->questionario);
  334.             if ($questionario) {
  335.                 $q = $doctrine->getRepository(Questionari::class)->findOneBy([
  336.                     "questionario" => $questionario,
  337.                     "token"=> $res->token
  338.                 ]);
  339.             }
  340.         }
  341.         if ($q) {
  342.             $ambiente = $q->getQuestionario()->getAmbiente();
  343.             $secret = $ambiente->getApisecret();
  344.             $signature2 = hash_hmac("sha256", $token1, $secret, true);
  345.             $signature2 = base64_encode($signature2);
  346.             if ($signature != $signature2) {
  347.                 echo "Error code 283";
  348.                 echo $signature . " " . $signature2 . "<br />";
  349.                 exit();
  350.             }
  351.             if ((int)$res->questionarioiniziato != 0) {
  352.                 $qi = $doctrine->getRepository(QuestionariIniziati::class)->findOneBy([
  353.                     "id" => $res->questionarioiniziato
  354.                 ]);
  355.                 if ($qi) {
  356.                     $domande = $doctrine->getRepository(Domande::class)->findBy(["questionario" => $q], ["posizione" => "ASC"]);
  357.                     $risposte = $doctrine->getRepository(Risposte::class)->findBy(["questionario_iniziato" => $qi], ["posizione" => "ASC"]);
  358.                     $risp = [];
  359.                     foreach ($risposte as $r){
  360.                         $risp[$r->getDomanda()->getId()] = $r;
  361.                     }
  362.                 } else {
  363.                     echo "errore";
  364.                     exit();
  365.                 }
  366.                 
  367.             } else {
  368.                 //exit();
  369.                 $qi = new QuestionariIniziati();
  370.                 $qi->setQuestionario($q);
  371.                 $qi->setAmbiente($q->getQuestionario()->getAmbiente());
  372.                 $qi->setUserId($res->user);
  373.                 $qi->setUserEmail($res->user_email);
  374.                 $qi->setUserEmailHash($res->user_email_hash);
  375.                 $qi->setStatus(1);
  376.                 $qi->setLastQuestion(0);
  377.                 $qi->setReturnurl($res->return);
  378.                 $qi->setCreatedAt(new \DateTimeImmutable("now"));
  379.                 $qi->setModifiedAt(new \DateTimeImmutable("now"));
  380.                 $entityManager = $doctrine->getManager();
  381.                 $entityManager->persist($qi);
  382.                 $entityManager->flush();
  383.                 
  384.                 // riscrivo il token e la signature perche' e' cambiato il valore di questionarioiniziato
  385.                 $r= [];
  386.                 $r["user"] = $res->user;
  387.                 $r["user_email"] = $res->user_email;
  388.                 $r["user_email_hash"] = $res->user_email_hash;
  389.                 $r["course"] = $res->course;
  390.                 $r["questionario"] = $res->questionario;
  391.                 $r["questionarioiniziato"] = $qi->getId();
  392.                 $r["return"] = $res->return;
  393.                 $r["token"] = $res->token;
  394.                 echo "<!-- token: " . $token1 . "<br/>-->";
  395.                 echo "<!-- secret: " . $secret . "<br />-->";
  396.                 echo "<!-- signature: " . $signature . "<br />-->";
  397.                 $token1 = base64_encode(json_encode($r));
  398.                 $signature = hash_hmac("sha256", $token1, $secret, true);
  399.                 $signature = base64_encode($signature);
  400.                 $domande = $doctrine->getRepository(Domande::class)->findBy(["questionario" => $q], ["posizione" => "ASC"]);
  401.                 if ($domande) {
  402.                     $posizione = 1;
  403.                     foreach ($domande as $d) {
  404.                         $r = new Risposte();
  405.                         $r->setQuestionario($q);
  406.                         $r->setQuestionarioIniziato($qi);
  407.                         $r->setDomanda($d);
  408.                         $r->setTipoRisposta($d->getTipoRisposta());
  409.                         $r->setOpzioniRisposta($d->getOpzioniRisposta());     
  410.                         $r->setMultipla($d->isMultipla());
  411.                         $r->setPosizione($posizione);
  412.                         $r->setRisposta("");
  413.                         $r->setCreatedAt(new \DateTimeImmutable("now"));
  414.                         $r->setModifiedAt(new \DateTimeImmutable("now"));
  415.                         $r->setObbligatoria($d->isObbligatoria());
  416.                         $entityManager->persist($r);
  417.                         $posizione++;
  418.                     }     
  419.                 }
  420.                 $entityManager->flush();
  421.                 $risposte = $doctrine->getRepository(Risposte::class)->findBy(["questionario_iniziato" => $qi], ["posizione" => "ASC"]);
  422.                 $risp = [];
  423.                 foreach ($risposte as $r) {
  424.                     $risp[$r->getDomanda()->getId()] = $r;
  425.                 }
  426.             }
  427.             return $this->render('webservice/questionario.html.twig', [
  428.                 "qi" => $qi,
  429.                 "domande" => $domande,
  430.                 "risposte" => $risp,
  431.                 "token" => $token1,
  432.                 "signature" => $signature,
  433.                 "message" => $session_message,
  434.             ]);
  435.         } else {
  436.             var_dump($res);
  437.             echo "Error code 380";
  438.             exit();
  439.         }
  440.     }
  441.     #[Route('/webservice/cancelAndBack/{qi}', name: 'app_webservice_cancelquestionario_andback')]
  442.     public function cancelQuestionarioAndBack(Request $request, ManagerRegistry $doctrine, QuestionariIniziati $qi): Response
  443.     {
  444.         $entityManager = $doctrine->getManager();
  445.         $token1 = $request->get("token");
  446.         $signature = $request->get("signature");
  447.         $url = $request->get("return");
  448.         $res = json_decode(base64_decode($token1));
  449.         var_dump($res);
  450.         // controllo se esiste il questionario ( questionario ) con il token passato ( token )
  451.         $q = $doctrine->getRepository(Questionari::class)->findOneBy([
  452.             "id" => $res->questionario,
  453.             "token" => $res->token
  454.         ]);
  455.         if ($q) {
  456.             $ambiente = $q->getQuestionario()->getAmbiente();
  457.             $secret = $ambiente->getApisecret();
  458.             $signature2 = hash_hmac("sha256", $token1, $secret, true);
  459.             $signature2 = base64_encode($signature2);
  460.             if ($signature != $signature2) {
  461.                 echo "Error code 283";
  462.                 exit();
  463.             }
  464.         }
  465.         if ($qi) {
  466.             $qi->setStatus("-1");
  467.             $qi->setModifiedAt(new \DateTimeImmutable("now"));
  468.             $entityManager->persist($qi);
  469.             $entityManager->flush();
  470.             return $this->redirect($res->return);
  471.         } else {
  472.             echo "Error code 387";
  473.             exit();
  474.         }
  475.     }
  476.     #[Route('/webservice/save/{qi}', name: 'app_webservice_savequestionario')]
  477.     public function save(Request $request, ManagerRegistry $doctrine, QuestionariIniziati $qi): Response
  478.     {
  479.         $entityManager = $doctrine->getManager();
  480.         $token1 = $request->get("token");
  481.         $signature = $request->get("signature");
  482.         $url = $request->get("return");
  483.         $res = json_decode(base64_decode($token1));
  484.         // controllo se esiste il questionario ( questionario ) con il token passato ( token )
  485.         $q = $doctrine->getRepository(Questionari::class)->findOneBy([
  486.             "id" => $res->questionario,
  487.             "token"=> $res->token
  488.         ]);
  489.         if ($q) {
  490.             $ambiente = $q->getQuestionario()->getAmbiente();
  491.             $secret = $ambiente->getApisecret();
  492.             $signature2 = hash_hmac("sha256", $token1, $secret, true);
  493.             $signature2 = base64_encode($signature2);
  494.             if ($signature != $signature2) {
  495.                 echo "Error code 283";
  496.                 exit();
  497.             }
  498.         }
  499.         if ($qi) {
  500.             $domandeObbligatorie = [];
  501.             $domandes = $qi->getQuestionario()->getDomandes();
  502.             foreach ($domandes as $d) {
  503.                 if ($d->isObbligatoria()) {
  504.                     if ($d->getTipoRisposta() == "linkert5" || $d->getTipoRisposta() == "linkert7" || $d->getTipoRisposta()=="docente"){
  505.                         $domandeObbligatorie[$d->getId()] = [];
  506.                         $argomenti = $d->getOpzioniRisposta();
  507.                         $righe = explode("\n",$argomenti);
  508.                         foreach($righe as $r){
  509.                             $v = explode("#",$r);
  510.                             if($v[0]=="argomenti"){
  511.                                 $args = explode("|",$v[1]);
  512.                                 $i = 1;
  513.                                 foreach($args as $a){
  514.                                     $domandeObbligatorie[$d->getId()][$i] = 1;
  515.                                     $i++;
  516.                                 }
  517.                             }
  518.                         }
  519.                     }
  520.                 }
  521.             }
  522.             
  523.             $risposte = [];
  524.             $risposte_complete = [];
  525.             foreach ($_REQUEST as $k => $v) {
  526.                 if (stripos($k,"domanda_") !== false) {
  527.                     $d = explode("_",$k);
  528.                     $id_domanda = $d[1];
  529.                     if (count($d) == 3) {
  530.                         $argomento = $d[2];
  531.                     } else {
  532.                         $argomento = "";
  533.                     }
  534.                     if (!isset($risposte[$id_domanda])) {
  535.                         $risposte[$id_domanda] = [];
  536.                     }
  537.                     $valore = $v;
  538.                     $risposte[$id_domanda][$argomento] = $v;
  539.                 }
  540.             }
  541.             
  542.             foreach ($risposte as $id_domanda => $k) {
  543.                 $i = 1;
  544.                 foreach ($risposte[$id_domanda] as $k2 => $v2) {
  545.                     if ($k2 == "") {
  546.                         $risposte_complete[$id_domanda][$k2] = $v2;
  547.                     } else {
  548.                         if ($k2 == $i) {
  549.                             $risposte_complete[$id_domanda][$k2] = $v2;
  550.                         } else {
  551.                             while ($i < $k2) {
  552.                                 $risposte_complete[$id_domanda][$i] = "";
  553.                                 $i++;
  554.                             }
  555.                             $risposte_complete[$id_domanda][$k2] = $v2;
  556.                         }
  557.                     }
  558.                     $i++;
  559.                 }
  560.             }
  561.         } else {
  562.             echo "Error code 387";
  563.             exit();
  564.         }
  565.         foreach ($risposte_complete as $domanda => $v) {
  566.             if (isset($domandeObbligatorie[$domanda])) {
  567.                 $d = array_diff_key($risposte_complete[$domanda],$domandeObbligatorie[$domanda]);
  568.                 if (count($d) == 0) {
  569.                     unset($domandeObbligatorie[$domanda]);
  570.                 }
  571.             }
  572.         }
  573.         $error = 0;
  574.         $message = [];
  575.         $message["Error"] = [];
  576.         $message["Success"] = [];
  577.         if (isset($domandeObbligatorie) && count($domandeObbligatorie) > 0) {
  578.             $message['Error'][] = 'Tutte le domande obbligatorie devono essere completate. Grazie!';
  579.             $error = 1;
  580.         }
  581.         if (!$error) {
  582.             foreach ($risposte_complete as $domanda => $v) {
  583.                 $domanda_ = $doctrine->getRepository(Domande::class)->findOneBy(["id" => $domanda]);
  584.                 if ($domanda_) {
  585.                     $risposta = $doctrine->getRepository(Risposte::class)->findOneBy([
  586.                         "questionario_iniziato" => $qi,
  587.                         "domanda"=> $domanda_
  588.                     ]);
  589.                     if ($risposta) {
  590.                         $s = [];
  591.                         $posizione = "";
  592.                         foreach ($risposte_complete[$domanda] as $posizione => $valore) {
  593.                             if (is_array($valore)) {
  594.                                 $valore = implode(",", $valore);
  595.                             }
  596.                             $s[] = $posizione . ":" . $valore;
  597.                         }
  598.                         if (count($s) == 1 && $posizione == "") {
  599.                             $r = $risposte_complete[$domanda][$posizione];
  600.                             if (is_array($r)) {
  601.                                 $r = implode("|", $r);
  602.                             }
  603.                         } else {
  604.                             $r = implode("|", $s);
  605.                         }
  606.                         $risposta->setRisposta($r);
  607.                         $risposta->setModifiedAt(new \DateTimeImmutable("now"));
  608.                         $entityManager->persist($risposta);
  609.                         $qi->setModifiedAt(new \DateTimeImmutable("now"));
  610.                         $entityManager->persist($qi);
  611.                     } else {
  612.                         echo "489";
  613.                         exit();
  614.                     }
  615.                 } else {
  616.                     echo "492";
  617.                     exit();
  618.                 }
  619.             }
  620.             $entityManager->flush();
  621.             $message["Success"][] = "Questionario salvato correttamente";
  622.             $session = $this->requestStack->getSession();
  623.             $session->set('token', $token1);
  624.             $session->set('signature', $signature);
  625.             $session->set('message', $message);
  626.             return $this->redirectToRoute("app_webservice_sustainstudentquestionariook", ["qi" => $qi->getId()]);
  627.         }
  628.         $session = $this->requestStack->getSession();
  629.         $session->set('token', $token1);
  630.         $session->set('signature', $signature);
  631.         $session->set('message', $message);
  632.         //$foo = $session->get('foo');
  633.         // the second argument is the value returned when the attribute doesn't exist
  634.         //$filters = $session->get('filters', []);
  635.         return $this->redirectToRoute("app_webservice_sustainstudentquestionario");
  636.     }
  637.     #[Route('/webservice/saved/{qi}', name: 'app_webservice_sustainstudentquestionariook')]
  638.     public function saved(Request $request,ManagerRegistry $doctrine,QuestionariIniziati $qi): Response
  639.     {
  640.         $entityManager = $doctrine->getManager();
  641.         $session = $this->requestStack->getSession();
  642.         $token1 = $session->get("token");
  643.         $signature = $session->get("signature");
  644.         $url = $qi->getReturnurl();
  645.         $res = json_decode(base64_decode($token1));
  646.         // controllo se esiste il questionario ( questionario ) con il token passato ( token )
  647.         $q = $doctrine->getRepository(Questionari::class)->findOneBy([
  648.             "id" => $res->questionario,
  649.             "token" => $res->token
  650.         ]);
  651.         if ($q) {
  652.             $ambiente = $q->getQuestionario()->getAmbiente();
  653.             $secret = $ambiente->getApisecret();
  654.             $signature2 = hash_hmac("sha256", $token1, $secret, true);
  655.             $signature2 = base64_encode($signature2);
  656.             if($signature!=$signature2){
  657.                 echo "Error code 283";
  658.                 exit();
  659.             }
  660.         }
  661.         $session = $this->requestStack->getSession();
  662.         $session->set('token', $token1);
  663.         $session->set('signature', $signature);
  664.         return $this->render('webservice/saved.html.twig', [
  665.             "qi" => $qi
  666.         ]);
  667.     }
  668.     #[Route('/webservice/chiamaallinea/{ambiente}', name: 'app_webservice_chiama_allinea_ambiente')]
  669.     public function chiamaallinea(Request $request, ManagerRegistry $doctrine, $ambiente = ""): Response
  670.     {
  671.         // wget https://questionari.42b.it/webservice/chiamaallinea/partecipa?token=UN49MEURY2vNn6zf --output-document=logAllinea.`date +\%Y\%m\%d-\%H_\%M_\%S`.log
  672.         // da mettere in crontab
  673.         // il token e' definito nel file yaml dell' ambiente, nella cartella conig, assieme a username e password con cui contattare moodle.
  674.         echo "---------------------------------------\n\r";
  675.         echo date("Y-m-d H:i:s")."\n\r";
  676.         echo "---------------------------------------\n\r";
  677.         if ($_SERVER["REMOTE_ADDR"] != "51.77.220.131" && 0) {
  678.             echo "Non puoi eseguire da qui: ".$_SERVER["REMOTE_ADDR"];
  679.             exit();
  680.         }
  681.         $token = $request->get("token");
  682.         $yaml = Yaml::parse(file_get_contents('../config/' . $ambiente . '.yaml'));
  683.         $stored_token = $yaml["parameters"]["token"];
  684.         if ($token != $stored_token) {
  685.             echo "Token errato";
  686.             exit();
  687.         }
  688.         $token2 = "";
  689.         if (isset($yaml["parameters"]["password"])) {
  690.             $token2 = md5(date("Y-m-d H") . " " . $ambiente . " " . $yaml["parameters"]["password"]);
  691.         } else {
  692.             echo "File errato";
  693.             exit();
  694.         }
  695.         if ($token2 == "") {
  696.             echo "Token2 errato";
  697.             exit();
  698.         }
  699.         // chiamata di fatto interna, ma la faccio come se fosse esterna
  700.         $url = "https://questionari.42b.it/webservice/allineaambiente/" . $ambiente . "?token=" . $token2;
  701.         $ch = curl_init();
  702.         curl_setopt($ch, CURLOPT_URL, $url);
  703.         curl_setopt($ch, CURLOPT_HEADER, 0);
  704.         $res = curl_exec($ch);
  705.         curl_close($ch);
  706.         echo "ok";
  707.         exit();
  708.     }
  709.     #[Route('/webservice/allineaambiente/{ambiente}', name: 'app_webservice_allinea_ambiente')]
  710.     public function allinea(Request $request, ManagerRegistry $doctrine, $ambiente = ""): Response
  711.     {
  712.         $entityManager = $doctrine->getManager();
  713.         $session = $this->requestStack->getSession();
  714.         $yaml = Yaml::parse(file_get_contents('../config/' . $ambiente . '.yaml'));
  715.         $token1 = md5(date("Y-m-d H") . " " . $ambiente . " " . $yaml["parameters"]["password"]);
  716.         $t = $request->get("token");
  717.         if ($ambiente == "") {
  718.             echo "manca ambiente";
  719.             exit();
  720.         }
  721.         if ($_SERVER["REMOTE_ADDR"] != "51.77.220.131" && $_SERVER["REMOTE_ADDR"] != "92.246.117.18" && $_SERVER["REMOTE_ADDR"] != "92.246.117.158") {
  722.             echo "Non puoi eseguire da qui: " . $_SERVER["REMOTE_ADDR"];
  723.             exit();
  724.         }
  725.         if ($t != $token1) {
  726.             echo "Token errato";
  727.             exit();
  728.         }
  729.         // se sono qui, posso cominciare ad eseguire
  730.         switch ($ambiente) {
  731.             case "partecipa":
  732.                 $url = "https://www.partecipa.eu";
  733.                 break;
  734.             case "cfcs":
  735.                 $url = "https://fad.cafoscarichallengeschool.it";
  736.                 break;
  737.             default:
  738.                 echo "Manca ambiente";
  739.                 exit();
  740.         }
  741.         $username = $password = "";
  742.         if (isset($yaml) && isset($yaml["parameters"])) {
  743.             $username = $yaml["parameters"]["username"];
  744.             $password = $yaml["parameters"]["password"];
  745.         }
  746.         if ($username=="" || $password == "") {
  747.             echo "mancano credenziali";
  748.             exit();
  749.         } else {
  750.             $x = exec('curl "' . $url . '/login/token.php?service=moodle_mobile_app" -d "username=' . $username . '&password=' . $password . '"');
  751.             $j = json_decode($x);
  752.             if (!$j) {
  753.                 echo "error 751";
  754.                 exit();
  755.             }
  756.             $token = $j->token;
  757.             if ($token) {
  758.                 $ambiente = $doctrine->getRepository(UsersAmbienti::class)
  759.                 ->findOneBy(["url" => $url]);
  760.                 if ($ambiente) {
  761.                     $entityManager = $doctrine->getManager();
  762.                     $query = $entityManager->createQuery(
  763.                     'SELECT q
  764.                     FROM App\Entity\Questionari q
  765.                     WHERE q.ambiente = :ambiente
  766.                     AND q.corso_id IS NOT NULL
  767.                     ORDER BY q.id ASC'
  768.                     )->setParameter('ambiente', $ambiente->getId());
  769.                     $res = $query->getResult();
  770.                     $corsi = [];
  771.                     foreach ($res as $r) {
  772.                         if (!in_array($r->getCorsoId(), $corsi)) {
  773.                             $corsi[] = $r->getCorsoId();
  774.                         }
  775.                     }
  776.                     $utenti = [];
  777.                     if (count($corsi) > 0) {
  778.                         foreach ($corsi as $c) {
  779.                             //$x = exec('curl "https:///www.partecipa.eu/webservice/rest/server.php?wstoken='.$token.'&wsfunction=core_user_get_users_by_field" -d "field=username&values[0]='.$username.'&moodlewsrestformat=json"');
  780.                             $x = exec('curl "' . $url . '/webservice/rest/server.php?wstoken=' . $token . '&wsfunction=core_enrol_get_enrolled_users" -d "courseid=' . $c . '&moodlewsrestformat=json"');
  781.                             $j = json_decode($x);
  782.                             foreach ($j as $u) {
  783.                                 foreach ($u->roles as $role) {
  784.                                     if ($role->shortname == "manager") {
  785.                                         if (!isset($utenti[$u->email])) {
  786.                                             $utenti[$u->email] = [];
  787.                                         }
  788.                                         $utenti[$u->email][] = $c;
  789.                                     }
  790.                                 }
  791.                             }
  792.                         }
  793.                     }
  794.                 }
  795.                 foreach ($utenti as $k => $v) {
  796.                     $user = $doctrine->getRepository(Users::class)
  797.                     ->findOneBy(["email" => $k]);
  798.                     if ($user) {
  799.                         if (count($v) > 0) {
  800.                             echo "utente " . $k . " assegno corsi " . json_encode($v) . "\n\r";
  801.                             echo "\n\r";
  802.                             $user->setCorsiMoodle(json_encode($v));
  803.                         }
  804.                         $entityManager = $doctrine->getManager();
  805.                         $entityManager->persist($user);
  806.                         $entityManager->flush();
  807.                     } else {
  808.                         $u = new Users();
  809.                         $u->setEmail($k);
  810.                         $u->setPassword("emty");
  811.                         $u->setRoles(array("ROLE_MANAGER"));
  812.                         $u->setIsVerified(0);
  813.                         if (count($v) > 0) {                         
  814.                             $u->setCorsiMoodle(json_encode($v));
  815.                         }
  816.                         $entityManager = $doctrine->getManager();
  817.                         $entityManager->persist($u);
  818.                         $entityManager->flush();
  819.                     }
  820.                 }
  821.                 exit();
  822.             } else {
  823.                 echo "errore nel token";
  824.                 exit();
  825.             }
  826.             exit();
  827.         }
  828.     }
  829. }