uwuzu-mirror/abi/addabi.php

<?php
require('../db.php');

if (htmlentities(isset($_POST['uniqid'])) && htmlentities(isset($_POST['abitext']))) {
    $postUniqid = htmlentities($_POST['uniqid']);
    $abitext = htmlentities($_POST['abitext']);
    $username = htmlentities($_POST['username']);
    $abidate = date("Y-m-d H:i:s");

    //-------------------------------------------
    function get_mentions_userid($postText) {
        // @useridを検出する
        $usernamePattern = '/@(\w+)/';
        $mentionedUsers = [];

        preg_replace_callback($usernamePattern, function($matches) use (&$mentionedUsers) {
            $mention_username = $matches[1];

            $dbh = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST, DB_USER, DB_PASS, array(
                PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
                PDO::MYSQL_ATTR_USE_BUFFERED_QUERY => true,
            ));
        
            $mention_userQuery = $dbh->prepare("SELECT username, userid FROM account WHERE userid = :userid");
            $mention_userQuery->bindValue(':userid', $mention_username);
            $mention_userQuery->execute();
            $mention_userData = $mention_userQuery->fetch();   
            
            if (!empty($mention_userData)) {
                $mentionedUsers[] = $mention_username;
            }
        }, $postText);

        return $mentionedUsers;
    }

    try {
        $pdo = new PDO('mysql:charset=utf8mb4;dbname='.DB_NAME.';host='.DB_HOST , DB_USER, DB_PASS);

        $pdo->beginTransaction();

        $stmt = $pdo->prepare("UPDATE ueuse SET abi = :abi, abidate = :abidate WHERE uniqid = :uniqid");
        $stmt->bindValue(':abi', $abitext, PDO::PARAM_STR);
        $stmt->bindValue(':abidate', $abidate, PDO::PARAM_STR);
        $stmt->bindValue(':uniqid', $postUniqid, PDO::PARAM_STR);
        
        // SQLクエリの実行
        $res = $stmt->execute();

        // コミット
        $pdo->commit();

        $mentionedUsers = get_mentions_userid($abitext);

        foreach ($mentionedUsers as $mentionedUser) {
        
            $pdo->beginTransaction();

            try {
                $touserid = $mentionedUser;
                $datetime = date("Y-m-d H:i:s");
                $msg = "" . $abitext . "";
                $title = "" . $username . "さんにメンションされました！";
                $url = "/!" . $uniqid . "~" . $userid . "";
                $userchk = 'none';

                // 通知用SQL作成
                $stmt = $pdo->prepare("INSERT INTO notification (touserid, msg, url, datetime, userchk, title) VALUES (:touserid, :msg, :url, :datetime, :userchk, :title)");


                $stmt->bindParam(':touserid', $touserid, PDO::PARAM_STR);
                $stmt->bindParam(':msg', $msg, PDO::PARAM_STR);
                $stmt->bindParam(':url', $url, PDO::PARAM_STR);
                $stmt->bindParam(':userchk', $userchk, PDO::PARAM_STR);
                $stmt->bindParam(':title', $title, PDO::PARAM_STR);

                $stmt->bindParam(':datetime', $datetime, PDO::PARAM_STR);

                // SQLクエリの実行
                $res2 = $stmt->execute();

                // コミット
                $res2 = $pdo->commit();

            } catch(Exception $e) {

                // エラーが発生した時はロールバック
                $pdo->rollBack();
            }

            if ($res2) {
                header('Content-Type: application/json');
                echo json_encode(['success' => true]);
                exit;
            } else {
                header('Content-Type: application/json');
                echo json_encode(['success' => false, 'error' => '追加に失敗しました。']);
                exit;
            }
    
        }

        if ($res) {
            header('Content-Type: application/json');
            echo json_encode(['success' => true]);
            exit;
        } else {
            header('Content-Type: application/json');
            echo json_encode(['success' => false, 'error' => '追加に失敗しました。']);
            exit;
        }
    } catch(PDOException $e) {
        header('Content-Type: application/json');
        echo json_encode(['success' => false, 'error' => 'データベースエラー：' . $e->getMessage()]);
        exit;
    }
}
?>