--- loncom/lonsql	2007/07/30 23:52:06	1.83
+++ loncom/lonsql	2015/08/05 18:47:12	1.94
@@ -3,7 +3,7 @@
 # The LearningOnline Network
 # lonsql - LON TCP-MySQL-Server Daemon for handling database requests.
 #
-# $Id: lonsql,v 1.83 2007/07/30 23:52:06 albertel Exp $
+# $Id: lonsql,v 1.94 2015/08/05 18:47:12 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -95,8 +95,6 @@ the database.
 
 =head1 Internals
 
-=over 4
-
 =cut
 
 use strict;
@@ -121,6 +119,8 @@ use GDBM_File;
 
 =pod
 
+=over 4
+
 =item Global Variables
 
 =over 4
@@ -233,13 +233,13 @@ unless ($dbh = DBI->connect("DBI:mysql:l
     system("echo 'Cannot connect to MySQL database!' |".
            " mailto $emailto -s '$subj' > /dev/null");
 
-    open(SMP,'>/home/httpd/html/lon-status/mysql.txt');
+    open(SMP,">$perlvar{'lonDocRoot'}/lon-status/mysql.txt");
     print SMP 'time='.time.'&mysql=defunct'."\n";
     close(SMP);
 
     exit 1;
 } else {
-    unlink('/home/httpd/html/lon-status/mysql.txt');
+    unlink("$perlvar{'lonDocRoot'}/lon-status/mysql.txt");
     $dbh->disconnect;
 }
 
@@ -387,7 +387,7 @@ sub make_new_child {
 	    print $client "$queryid\n";
 	    #
 	    # &logthis("QUERY: $query - $arg1 - $arg2 - $arg3 - $queryid");
-	    sleep 1;
+	    # sleep 1;
             #
             my $result='';
             #
@@ -442,56 +442,24 @@ sub make_new_child {
                     $result .= &escape(join(':',map{$_.'='.$replies{$_}} keys %replies));
                 }
             } elsif ($query eq 'usersearch') {
-                my $srchdomain = &unescape($arg1);
-                my @items  = split(/%%/,$arg2);
-                my ($srchby,$srchtype) = map {&unescape($_)} @items; 
-                my $srchterm = &unescape($arg3);
-                my $quoted_dom = $dbh->quote( $srchdomain );
-                my ($query,$quoted_srchterm,@fields);
-                my ($table_columns,$table_indices) =
-                   &LONCAPA::lonmetadata::describe_metadata_storage('allusers');
-                foreach my $coldata (@{$table_columns}) {
-                    push(@fields,$coldata->{'name'});
-                }
-                my $fieldlist = join(',',@fields);
-                $query = "SELECT $fieldlist FROM allusers WHERE (domain = $quoted_dom AND ";
-                if ($srchby eq 'lastfirst') {
-                    my ($fraglast,$fragfirst) = split(/,/,$srchterm);
-                    if ($srchtype eq 'exact') {
-                        $query .= 'lastname = '.$dbh->quote($fraglast).
-                                  ' AND firstname = '.$dbh->quote($fragfirst);
-                    } else {
-                        $query .= 'lastname LIKE '.$dbh->quote('%'.$fraglast.'%').' AND firstname LIKE '.$dbh->quote('%'.$fragfirst.'%');
-                    }
+                my ($srchby,$srchtype,$srchterm);
+                if ((&unescape($arg1) eq $searchdomain) &&
+                    ($arg2 =~ /\%\%/)) {
+                    ($srchby,$srchtype) =
+                        map {&unescape($_);} (split(/\%\%/,$arg2));
+                    $srchterm = &unescape($arg3);
                 } else {
-                    my %srchfield = (
-                                      uname    => 'username',
-                                      lastname => 'lastname',
-                                    );
-                    if ($srchtype eq 'exact') {
-                        $query .= $srchfield{$srchby}.' = '.$dbh->quote($srchterm);
-                    } else {
-                        $query .= $srchfield{$srchby}.' LIKE '.$dbh->quote('%'.$srchterm.'%');
-                    }
+                    ($srchby,$srchtype,$srchterm) =
+                        map {&unescape($_);} ($arg1,$arg2,$arg3);
                 }
-                $query .= ") ORDER BY username ";
-                my $sth = $dbh->prepare($query);
-                if ($sth->execute()) {
-                    my @results;
-                    while (my @row = $sth->fetchrow_array) {
-                        my @items;
-                        for (my $i=0; $i<@row; $i++) {
-                            push(@items,&escape($fields[$i]).'='.&escape($row[$i]));
-                        }
-                        push(@results,join(":", @items));
-                    }
-                    $sth->finish;
-                    $result = &escape(join("&",@results));
-                } else {
-                    &logthis('<font color="blue">'.
-                             'WARNING: Could not retrieve from database:'.
-                             $sth->errstr().'</font>');
-               }
+                $result = &do_user_search($searchdomain,$srchby,
+                                          $srchtype,$srchterm);
+	    } elsif ($query eq 'instdirsearch') {
+		$result = &do_inst_dir_search($searchdomain,$arg1,$arg2,$arg3);
+            } elsif ($query eq 'getinstuser') {
+                $result = &get_inst_user($searchdomain,$arg1,$arg2);
+            } elsif ($query eq 'getmultinstusers') {
+                $result = &get_multiple_instusers($searchdomain,$arg3);
             } elsif ($query eq 'prepare activity log') {
                 my ($cid,$domain) = map {&unescape($_);} ($arg1,$arg2);
                 &logthis('preparing activity log tables for '.$cid);
@@ -523,7 +491,7 @@ sub make_new_child {
                 $result = &allusers_table_update($query,$uname,$udom,\%userdata);
             } else {
                 # Do an sql query
-                $result = &do_sql_query($query,$arg1,$arg2,$searchdomain);
+                $result = &do_sql_query($query,$arg1,$arg2,$arg3,$searchdomain);
             }
             # result does not need to be escaped because it has already been
             # escaped.
@@ -543,6 +511,144 @@ sub make_new_child {
     }
 }
 
+sub do_user_search {
+    my ($domain,$srchby,$srchtype,$srchterm) = @_;
+    my $result;
+    my $quoted_dom = $dbh->quote( $domain );
+    my ($query,$quoted_srchterm,@fields);
+    my ($table_columns,$table_indices) =
+        &LONCAPA::lonmetadata::describe_metadata_storage('allusers');
+    foreach my $coldata (@{$table_columns}) {
+        push(@fields,$coldata->{'name'});
+    }
+    my $fieldlist = join(',',@fields);
+    $query = "SELECT $fieldlist FROM allusers WHERE (domain = $quoted_dom AND ";
+    if ($srchby eq 'lastfirst') {
+        my ($fraglast,$fragfirst) = split(/,/,$srchterm);
+        $fragfirst =~ s/^\s+//;
+        $fraglast =~ s/\s+$//;
+        if ($srchtype eq 'exact') {
+            $query .= 'lastname = '.$dbh->quote($fraglast).
+                      ' AND firstname = '.$dbh->quote($fragfirst);
+        } elsif ($srchtype eq 'begins') {
+            $query .= 'lastname LIKE '.$dbh->quote($fraglast.'%').
+                      ' AND firstname LIKE '.$dbh->quote($fragfirst.'%');
+        } else {
+            $query .= 'lastname LIKE '.$dbh->quote('%'.$fraglast.'%').
+                      ' AND firstname LIKE '.$dbh->quote('%'.$fragfirst.'%');
+        }
+    } else {
+        my %srchfield = (
+                          uname    => 'username',
+                          lastname => 'lastname',
+                        );
+        if ($srchtype eq 'exact') {
+            $query .= $srchfield{$srchby}.' = '.$dbh->quote($srchterm);
+        } elsif ($srchtype eq 'begins') {
+             $query .= $srchfield{$srchby}.' LIKE '.$dbh->quote($srchterm.'%');
+        } else {
+             $query .= $srchfield{$srchby}.' LIKE '.$dbh->quote('%'.$srchterm.'%');
+        }
+    }
+    $query .= ") ORDER BY username ";
+    my $sth = $dbh->prepare($query);
+    if ($sth->execute()) {
+        my @results;
+        while (my @row = $sth->fetchrow_array) {
+            my @items;
+            for (my $i=0; $i<@row; $i++) {
+                push(@items,&escape($fields[$i]).'='.&escape($row[$i]));
+            }
+            my $userstr = join(':', @items);
+            push(@results,&escape($userstr));
+        }
+        $sth->finish;
+        $result = join('&',@results);
+    } else {
+        &logthis('<font color="blue">'.
+                'WARNING: Could not retrieve from database:'.
+        $sth->errstr().'</font>');
+    }
+    return $result;
+}
+
+sub do_inst_dir_search {
+    my ($domain,$srchby,$srchterm,$srchtype) = @_;
+    $srchby   = &unescape($srchby);
+    $srchterm = &unescape($srchterm);
+    $srchtype = &unescape($srchtype);
+    my (%instusers,%instids,$result,$response);
+    eval {
+        local($SIG{__DIE__})='DEFAULT';
+        $result=&localenroll::get_userinfo($domain,undef,undef,\%instusers,
+					   \%instids,undef,$srchby,$srchterm,
+					   $srchtype);
+    };
+    if ($result eq 'ok') {
+        if (%instusers) {
+            foreach my $key (keys(%instusers)) {
+                my $usrstr = &Apache::lonnet::freeze_escape($instusers{$key});
+                $response .=&escape(&escape($key).'='.$usrstr).'&';
+            }
+        }
+        $response=~s/\&$//;
+    } else {
+        $response = 'unavailable';
+    }
+    return $response;
+}
+
+sub get_inst_user {
+    my ($domain,$uname,$id) = @_;
+    $uname = &unescape($uname);
+    $id = &unescape($id);
+    my (%instusers,%instids,$result,$response);
+    eval {
+        local($SIG{__DIE__})='DEFAULT';
+        $result=&localenroll::get_userinfo($domain,$uname,$id,\%instusers,
+                                           \%instids);
+    };
+    if ($result eq 'ok') {
+        if (keys(%instusers) > 0) {
+            foreach my $key (keys(%instusers)) {
+                my $usrstr = &Apache::lonnet::freeze_escape($instusers{$key});
+                $response .= &escape(&escape($key).'='.$usrstr).'&';
+            }
+        }
+        $response=~s/\&$//;
+    } else {
+        $response = 'unavailable';
+    }
+    return $response;
+}
+
+sub get_multiple_instusers {
+    my ($domain,$data) = @_;
+    my ($type,$users) = split(/=/,$data,2);
+    my $requested = &Apache::lonnet::thaw_unescape($users);
+    my $response;
+    if (ref($requested) eq 'HASH') {
+        my (%instusers,%instids,$result);
+        eval {
+            local($SIG{__DIE__})='DEFAULT';
+            $result=&localenroll::get_multusersinfo($domain,$type,$requested,\%instusers,
+                                                    \%instids);
+        };
+        if ($@) {
+            $response = 'error';
+        } elsif ($result eq 'ok') {
+            if (keys(%instusers)) {
+                $response = $result.':'.&Apache::lonnet::freeze_escape(\%instusers); 
+            }
+        } else {
+            $response = 'unavailable';
+        }
+    } else {
+        $response = 'invalid';
+    }
+    return $response;
+}
+
 ########################################################
 ########################################################
 
@@ -574,12 +680,30 @@ sub process_file {
 }
 
 sub do_sql_query {
-    my ($query,$custom,$customshow,$searchdomain) = @_;
+    my ($query,$custom,$customshow,$domainstr,$searchdomain) = @_;
 
 #
 # limit to searchdomain if given and table is metadata
 #
-    if (($searchdomain) && ($query=~/FROM metadata/)) {
+    if ($domainstr && ($query=~/FROM metadata/)) {
+        my $havingstr;
+        $domainstr = &unescape($domainstr); 
+        if ($domainstr =~ /,/) {
+            foreach my $dom (split(/,/,$domainstr)) {
+                if ($dom =~ /^$LONCAPA::domain_re$/) {
+                    $havingstr .= 'domain="'.$dom.'" OR ';
+                }
+            }
+            $havingstr =~ s/ OR $//;
+        } else {
+            if ($domainstr =~ /^$LONCAPA::domain_re$/) {
+                $havingstr = 'domain="'.$domainstr.'"';
+            }
+        }
+        if ($havingstr) {
+            $query.=' HAVING ('.$havingstr.')';
+        }
+    } elsif (($searchdomain) && ($query=~/FROM metadata/)) {
 	$query.=' HAVING (domain="'.$searchdomain.'")';
     }
 #    &logthis('doing query ('.$searchdomain.')'.$query);