ajaxJSON.php

<?php
/*
 * As a work of the United States government, this project is in the public domain within the United States.
 */

/*
    JSON index for legacy API
    Date Created: August 13, 2009

*/

use App\Leaf\XSSHelpers;

error_reporting(E_ERROR);

require_once getenv('APP_LIBS_PATH') . '/loaders/Leaf_autoloader.php';

$login->loginUser();

$action = isset($_GET['a']) ? $_GET['a'] : '';

switch ($action) {
    case 'getform':
        $form = new Portal\Form($db, $login);
        header('Content-type: application/json');
        echo $form->getFormJSON($_GET['recordID']);

        break;
    case 'getprogress': // support legacy customizations
           $form = new Portal\Form($db, $login);
           header('Content-type: application/json');
           // this method does not exist in Form class
           // echo $form->getProgressJSON($_GET['recordID']);
           // but this one does
           echo $form->getProgress((int)$_GET['recordID']);

           break;
    case 'getrecentactions':
        if (!is_numeric($_GET['lastStatusTime']))
        {
            exit();
        }
        $vars = array(':lastStatusTime' => $_GET['lastStatusTime']);
        $res = $db->prepared_query('SELECT recordID FROM action_history
        								WHERE time > :lastStatusTime
        								GROUP BY recordID', $vars);
        echo json_encode($res);

        break;
    case 'getlastaction':
        if (!is_numeric($_GET['recordID']))
        {
            exit();
        }

        $vars = array(':recordID' => $_GET['recordID']);
        $res = $db->prepared_query('SELECT * FROM records_dependencies
    									LEFT JOIN category_count USING (recordID)
    									LEFT JOIN categories USING (categoryID)
    									LEFT JOIN step_dependencies USING (dependencyID)
    									LEFT JOIN workflow_routes USING (workflowID, stepID)
    									LEFT JOIN workflow_steps USING (workflowID, stepID)
    									LEFT JOIN actions USING (actionType)
    									LEFT JOIN dependencies USING (dependencyID)
    									RIGHT JOIN action_history USING (recordID, dependencyID, actionType)
    									WHERE records_dependencies.recordID=:recordID
    										AND actionType IS NOT NULL
    									ORDER BY actionID DESC
                                        LIMIT 1', $vars);

        $record = $res[0];
        foreach (array_keys($record) as $key)
        {
            $record[$key] = XSSHelpers::xscrub($record[$key]);
        }

        echo json_encode($record);

        break;
    default:
        break;
}