src/Controller/ApiController.php line 243

Open in your IDE?
  1. <?php
  2. namespace App\Controller;
  4. use Symfony\Component\HttpFoundation\Request;
  5. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  6. use Symfony\Component\Routing\Annotation\Route;
  7. use Symfony\Component\HttpFoundation\JsonResponse;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Doctrine\ORM\EntityManagerInterface;
  10. use App\Entity\Tracking;
  11. use App\Entity\Mdmrdblog;
  12. use App\Entity\Device;
  13. use App\Entity\Gptype;
  14. use App\Service\AppHelper;
  15. use App\Entity\Specialization;
  17. class ApiController extends AbstractController
  18. {
  19.     /**
  20.      * @Route("/api/data.json")
  21.      */
  22.     public function dataApi(Request $request, AppHelper $appHelper, String $gmapApikey, String $appquarterUrl, String $nappUrl)
  23.     {
  24.         $em      = $this->getDoctrine()->getManager();
  25.         $error   = $this->validateRequest($request);
  26.         $arrResp = [];
  28.         if (count($error) > 0)
  29.         {
  30.             return $this->createErrorResponse($error);
  31.         }
  33.         if ($request->headers->has('X-i42Device') && $request->headers->has('X-i42Customer'))
  34.         {
  35.             $i42Device   = $request->headers->get('X-i42Device', false);
  36.             $i42Customer = $request->headers->get('X-i42Customer', false);
  37.             if (
  38.                 $i42Device && $i42Customer &&
  39.                 isset($this->requestData['data']) && isset($this->requestData['data']['device']) &&
  40.                 is_array($this->requestData['data']['device']) && count($this->requestData['data']['device'])
  41.             )
  42.             {
  43.                 foreach ($this->requestData['data']['device'] as $data)
  44.                 {
  45.                     $lCountry = null;
  46.                     $sql      = 'SELECT country FROM tracking ';
  47.                     $sql     .= 'WHERE device_token = "'.$i42Device.'" AND customer_token = "'.$i42Customer.'" AND ';
  48.                     $sql     .= 'country != "" AND country IS NOT NULL ORDER BY id DESC';
  49.                     $stm      = $em->getConnection()->executeQuery($sql);
  50.                     $lEntry   = $stm->fetch();
  52.                     if (is_array($lEntry) && isset($lEntry['country']))
  53.                     {
  54.                         $lCountry = $lEntry['country'];
  55.                     }
  57.                     $address = $appHelper->getAdressByPositionFromGoogle($gmapApikey, $data['latitude'], $data['longitude']);
  58.                     $country = '';
  59.                     $fAdress = 'unknown address';
  60.                     if (isset($address['formatted_address']))
  61.                     {
  62.                         $fAdress = $address['formatted_address'];
  63.                         foreach ($address['address_components'] as $_component)
  64.                         {
  65.                             $component = (array) $_component;
  66.                             foreach ($component['types'] as $type)
  67.                             {
  68.                                 if ($type == 'country')
  69.                                 {
  70.                                     $country = $component['short_name'];
  71.                                 }
  72.                             }
  73.                         }
  74.                     }
  75.                     $track = new Tracking();
  76.                     $track->setDeviceToken($i42Device);
  77.                     $track->setCustomerToken($i42Customer);
  78.                     $track->setDeviceState($data['userState']);
  79.                     $track->setEmergencyState($data['emergency']);
  80.                     $track->setLat($data['latitude']);
  81.                     $track->setLng($data['longitude']);
  82.                     $track->setAccuracy(number_format($data['accuracy'], 4));
  83.                     $track->setAltitude(number_format($data['altitude'], 4));
  84.                     $track->setAddress($fAdress);
  85.                     $track->setCountry($country);
  86.                     $track->setCreatedAt(\DateTime::createFromFormat('U', $data['timestamp']));
  87.                     $em->persist($track);
  88.                     $em->flush();
  90.                     if (
  91.                         !empty($lCountry) && (!empty($country) && ($lCountry != $country))
  92.                     )
  93.                     {
  94.                         $curl = curl_init();
  95.                         curl_setopt_array($curl, array(
  96.                           CURLOPT_URL            => $appquarterUrl.'/pnb/api/changed_location',
  97.                           CURLOPT_RETURNTRANSFER => true,
  98.                           CURLOPT_ENCODING       => '',
  99.                           CURLOPT_MAXREDIRS      => 10,
  100.                           CURLOPT_TIMEOUT        => 0,
  101.                           CURLOPT_FOLLOWLOCATION => true,
  102.                           CURLOPT_HTTP_VERSION   => CURL_HTTP_VERSION_1_1,
  103.                           CURLOPT_SSL_VERIFYPEER => 0,
  104.                           CURLOPT_CUSTOMREQUEST  => 'POST',
  105.                           CURLOPT_POSTFIELDS     =>'{
  106.                             "data": {
  107.                                 "currentCountry": "'.$country.'",
  108.                                 "deviceId": "'.$i42Device.'"
  109.                             }
  110.                         }',
  111.                           CURLOPT_HTTPHEADER => array(
  112.                             'Content-Type: application/json',
  113.                             'X-i42AccountToken: 42'
  114.                           ),
  115.                         ));
  116.                         curl_exec($curl);
  117.                         curl_close($curl);
  118.                     }
  120.                     $nappCurlOptions = array(
  121.                         CURLOPT_URL => $nappUrl.'/api/data.json',
  122.                         CURLOPT_RETURNTRANSFER => true,
  123.                         CURLOPT_ENCODING       => '',
  124.                         CURLOPT_MAXREDIRS      => 10,
  125.                         CURLOPT_TIMEOUT        => 0,
  126.                         CURLOPT_FOLLOWLOCATION => true,
  127.                         CURLOPT_HTTP_VERSION   => CURL_HTTP_VERSION_1_1,
  128.                         CURLOPT_SSL_VERIFYPEER => 0,
  129.                         CURLOPT_CUSTOMREQUEST  => 'POST',
  130.                         CURLOPT_POSTFIELDS     => '',
  131.                         CURLOPT_HTTPHEADER     => array(),
  132.                         CURLOPT_POSTFIELDS =>'{
  133.                             "apiTimestamp": "'.$this->requestData['apiTimestamp'].'",
  134.                             "appTimestamp": "'.$this->requestData['appTimestamp'].'",
  135.                             "responseApi": "'.$this->requestData['responseApi'].'",
  136.                             "requestApi": "'.$this->requestData['requestApi'].'",
  137.                             "data": {
  138.                                 "device": [
  139.                                     {
  140.                                         "latitude": "'.$data['latitude'].'",
  141.                                         "longitude": "'.$data['longitude'].'",
  142.                                         "userState": '.$data['userState'].',
  143.                                         "emergency": '.$data['emergency'].',
  144.                                         "timestamp": '.$data['timestamp'].',
  145.                                         "accuracy": '.$data['accuracy'].',
  146.                                         "altitude": '.$data['altitude'].'
  147.                                     }
  148.                                 ]
  149.                             }
  150.                         }',
  151.                         CURLOPT_HTTPHEADER => array(
  152.                             'Content-Type: application/json',
  153.                             'X-i42Device: '.$i42Device,
  154.                             'X-i42Customer: '.$i42Customer
  155.                         )
  156.                     );
  157.                     $curl = curl_init();
  158.                     curl_setopt_array($curl, $nappCurlOptions);
  159.                     $arrResp = json_decode(curl_exec($curl), true);
  160.                     curl_close($curl);
  161.                 }
  162.             }
  163.             else
  164.             {
  165.                 $arrResp = $this->createErrorMessage(21, 'not all necessary data submitted');
  166.             }
  167.         }
  168.         return $this->createJsonResponse($arrResp);
  169.     }
  171.     /**
  172.      * @Route("/api/route.json")
  173.      *
  174.      * @param type $request
  175.      * @return type
  176.      */
  177.     public function routeAction(Request $request)
  178.     {
  179.         $em     = $this->getDoctrine()->getManager();
  180.         $error  = $this->validateRequest($request);
  181.         $arrRes = [];
  182.         if (count($error) > 0)
  183.         {
  184.             return $this->createErrorResponse( $error );
  185.         }
  187.         if ($request->headers->has('X-i42AccountToken'))
  188.         {
  189.             $i42AccountToken = $request->headers->get('X-i42AccountToken', false);
  190.             if ($i42AccountToken)
  191.             {
  192.                 if (
  193.                     is_array($this->requestData) && count($this->requestData) && isset($this->requestData['data']) &&
  194.                     isset($this->requestData['data']['device_token'])  && !empty($this->requestData['data']['device_token'])
  195.                 )
  196.                 {
  197.                     $deviceToken = $this->requestData['data']['device_token'];
  198.                     $sql  = 'SELECT * FROM tracking WHERE device_token = "'.$deviceToken.'" ';
  199.                     if (isset($this->requestData['data']['timerange']))
  200.                     {
  201.                         $sql .= 'AND created_at >= "'.date("Y-m-d H:i:s", time() - $this->requestData['data']['timerange']).'" ';
  202.                     }
  203.                     $sql .= 'AND lat <> 0 AND lng <> 0 ORDER BY created_at';
  205.                     $stm     = $em->getConnection()->executeQuery($sql);
  206.                     $arrResp = $stm->fetchAll();
  207.                     if ($arrResp)
  208.                     {
  209.                         foreach ($arrResp as $res)
  210.                         {
  211.                             $resSet                 = [];
  212.                             $resSet['id']           = $res['id'];
  213.                             $resSet['lat']          = $res['lat'];
  214.                             $resSet['lng']          = $res['lng'];
  215.                             $arrRes[]               = $resSet;
  216.                         }
  217.                     }
  218.                     $arrResp = array('results' => $arrRes);
  219.                 }
  220.                 else
  221.                 {
  222.                     $arrResp = $this->createErrorMessage(21, 'not all necessary data submitted');
  223.                 }
  224.             }
  225.             else
  226.             {
  227.                 $arrResp = $this->createErrorMessage(19, 'unregistered account token');
  228.             }
  229.         }
  230.         else
  231.         {
  232.             $arrResp = $this->createErrorMessage(18, 'unregistered account');
  233.         }
  234.         return $this->createJsonResponse($arrResp);
  235.     }
  237.     /**
  238.      * @Route("/api/wakeup.json")
  239.      *
  240.      * @param type $request
  241.      * @return type
  242.      */
  243.     public function wakeupAction(Request $request, String $appquarterUrl)
  244.     {
  245.         $em      = $this->getDoctrine()->getManager();
  246.         $error   = $this->validateRequest($request, true, false);
  247.         $arrResp = [];
  249.         if (count($error) > 0)
  250.         {
  251.             return $this->createErrorResponse($error);
  252.         }
  253.         if ($request->headers->has('X-i42Device') && $request->headers->has('X-i42Customer'))
  254.         {
  255.             $i42Device   = $request->headers->get('X-i42Device', false);
  256.             $i42Customer = $request->headers->get('X-i42Customer', false);
  257.             if ($i42Device && $i42Customer)
  258.             {
  259.                 $wat     = new \DateTime();
  260.                 $device  = $em->getRepository(Device::class)->findOneBy(['deviceToken' => $i42Device, 'customerToken' => $i42Customer]);
  261.                 if (!$device)
  262.                 {
  263.                     $device = new Device();
  264.                     $device->setDeviceToken($i42Device);
  265.                     $device->setCustomerToken($i42Customer);
  266.                     $device->setCreatedAt($wat);
  267.                 }
  268.                 if (
  269.                     isset($this->requestData['data']) && isset($this->requestData['data']['config']) &&
  270.                     is_array($this->requestData['data']['config']) && count($this->requestData['data']['config'])
  271.                 )
  272.                 {
  273.                     $device->setDeviceConfig(json_encode($this->requestData['data']['config']));
  274.                 }
  275.                 $device->setUpdatedAt($wat);
  276.                 $em->persist($device);
  277.                 $em->flush();
  278.             }
  279.             return $this->createJsonResponse($arrResp);
  280.         }
  281.     }
  283.     /**
  284.      * @Route(
  285.      *     "/api/places.json",
  286.      *     name="api_places",
  287.      *     methods={"POST", "OPTIONS"}
  288.      * )
  289.      */
  290.     public function placesAction(Request $request, String $accountToken)
  291.     {
  292.         $em        = $this->getDoctrine()->getManager();
  293.         $inputData = $request->getContent();
  294.         $arrData   = json_decode($inputData, true);
  295.         $arrRet    = [];
  297.         if (!$request->isMethod('POST')) {
  298.             $arrRet['message'] = 'Request method is not correct!';
  299.             return $this->createJsonResponse($arrRet);
  300.         }
  302.         if (!$request->headers->has('X-i42AccountToken')) {
  303.             $arrRet['message'] = 'Account token is missing!';
  304.             return $this->createJsonResponse($arrRet);
  305.         }
  307.         $i42AccountToken = $request->headers->get('X-i42AccountToken');
  308.         if ($i42AccountToken != $accountToken) {
  309.             $arrRet['message'] = 'Unregistered account token!';
  310.             return $this->createJsonResponse($arrRet);
  311.         }
  313.         if (!(
  314.             is_array($arrData)           &&
  315.             isset($arrData['lat'])       && !empty($arrData['lat'])        && is_numeric($arrData['lat']) &&
  316.             isset($arrData['lng'])       && !empty($arrData['lng'])        && is_numeric($arrData['lng']) &&
  317.             isset($arrData['distance'])  && !empty($arrData['distance'])   && ctype_digit((string) $arrData['distance'])
  318.         )) {
  319.             $arrRet['message'] = 'Not all necessary data submitted!';
  320.             return $this->createJsonResponse($arrRet);
  321.         }
  323.         $lat      = $arrData['lat'];
  324.         $lng      = $arrData['lng'];
  325.         $distance = $arrData['distance'];
  326.         if (isset($arrData['type']) && !empty(trim($arrData['type'])) && $arrData['type']!=='' ){
  327.             $typeId     = $arrData['type'];
  328.         }
  329.         $distClmn = '(6371*acos(cos(radians('.$lat.'))*cos(radians(gp.lat))*cos(radians(gp.lng)-radians('.$lng.'))+sin(radians('.$lat.'))*sin(radians(gp.lat)))) AS distance';
  330.         $sql      = 'SELECT gp.*, '.$distClmn.' FROM gplace AS gp ';
  331.         if (isset($arrData['specialist']) && $arrData['specialist']) {
  332.             $sql .= ' Where gp.specialist = true ';
  333.         }
  334.         if (isset($arrData['gender']) && !empty(trim($arrData['gender']))) {
  335.             if (isset($arrData['specialist']) && $arrData['specialist']) {
  336.                 $sql .= ' AND (gp.gender = "' . trim($arrData['gender']) . '" OR gp.gender = "female / male")';
  337.             } else {
  338.                 $sql .= ' WHERE (gp.gender = "' . trim($arrData['gender']) . '" OR gp.gender = "female / male") ';
  339.             }
  340.         }
  341.         $sql     .= 'HAVING distance <= '.$distance.' ';
  342.         $sql     .= 'ORDER BY distance ASC';
  344.         
  345.         if (isset($arrData['type']) && !empty(trim($arrData['type'])) && $arrData['type']!=='' ){
  346.             $sql      = 'SELECT gp.*, '.$distClmn.' FROM gplace AS gp ';
  347.             $sql     .= 'LEFT JOIN gplace_gptype AS gpgpt ON gp.id = gpgpt.gplace_id ';
  348.             $sql     .= 'LEFT JOIN gptype AS gpt ON gpgpt.gptype_id = gpt.id ';
  349.             $sql     .= 'WHERE gpt.id = "'.$typeId.'" ';
  350.             if (isset($arrData['specialist'])) {
  351.                 $sql .= ' AND gp.specialist = true ';
  352.             }
  353.             if (isset($arrData['gender']) && !empty(trim($arrData['gender']))) {
  354.                 $sql .= ' AND (gp.gender = "' . trim($arrData['gender']) . '" OR gp.gender = "female / male") ';
  355.             }
  356.             $sql     .= 'HAVING distance <= '.$distance.' ';
  357.             $sql     .= 'ORDER BY distance ASC';
  358.         }
  359.         
  360.         if (isset($arrData['specialization']) && !empty($arrData['specialization']) && $arrData['specialization'][0]!==''){
  361.             $sql      = 'SELECT gp.*, '.$distClmn.' FROM gplace AS gp ';
  362.             $sql     .= 'INNER JOIN gplace_specialization AS gpspec ON gp.id = gpspec.gplace_id ';
  363.             
  364.             if (is_array($arrData['specialization'])) {
  365.                 for ($i = 0;$i<count($arrData['specialization']);$i++){
  366.                     if ($i === 0){
  367.                         $sql .= 'WHERE (gpspec.specialization_id='.$arrData['specialization'][$i];
  368.                     } else {
  369.                         $sql .= ' OR gpspec.specialization_id=' . $arrData['specialization'][$i];
  370.                     }
  371.                     if ($i===count($arrData['specialization'])-1){
  372.                         $sql .= ')';
  373.                     }
  374.                 } 
  375.                 if (isset($arrData['specialist']) && $arrData['specialist']) {
  376.                     $sql .= ' AND gp.specialist = true ';
  377.                 }
  378.                 if (isset($arrData['gender']) && !empty(trim($arrData['gender']))) {
  379.                     $sql .= ' AND (gp.gender = "' . trim($arrData['gender']) . '" OR gp.gender = "female / male") ';
  380.                 }
  381.                     $sql     .= ' Group BY gp.id ';
  382.                     $sql     .= ' HAVING (((distance <= '.$distance.')) AND ((Count(DISTINCT gpspec.specialization_id) = ' .  Count($arrData['specialization']) . ')))';
  383.                     $sql     .= ' ORDER BY distance ASC';
  384.             }
  385.         }
  387.         if (isset($arrData['type']) && !empty(trim($arrData['type'])) && $arrData['type']!=='' && (isset($arrData['specialization']) && !empty($arrData['specialization']) && $arrData['specialization'][0]!=='')){
  388.             $sql      = 'SELECT DISTINCT gp.*, '.$distClmn.' FROM gplace AS gp ';
  389.             $sql     .= 'INNER JOIN gplace_specialization AS gpspec ON gp.id = gpspec.gplace_id ';
  390.             $sql     .= 'LEFT JOIN gplace_gptype AS gpgpt ON gp.id = gpgpt.gplace_id ';
  391.             $sql     .= 'LEFT JOIN gptype AS gpt ON gpgpt.gptype_id = gpt.id ';
  392.             $sql     .= 'WHERE gpt.id = "'.$typeId.'" ';
  393.             if (isset($arrData['specialist']) && $arrData['specialist']) {
  394.                 $sql .= ' AND gp.specialist = true ';
  395.             }
  396.             if (isset($arrData['gender']) && !empty(trim($arrData['gender']))) {
  397.                 $sql .= ' AND (gp.gender = "' . trim($arrData['gender']) . '" OR gp.gender = "female / male") ';
  398.             }
  399.         
  400.             if (is_array($arrData['specialization'])) {
  401.                 for ($i = 0;$i<count($arrData['specialization']);$i++){
  402.                     if ($i === 0){
  403.                         $sql .= 'AND (gpspec.specialization_id='.$arrData['specialization'][$i];
  404.                     } else {
  405.                         $sql .= ' OR gpspec.specialization_id=' . $arrData['specialization'][$i];
  406.                     }
  407.                     if ($i===count($arrData['specialization'])-1){
  408.                         $sql .= ')';
  409.                     }
  410.                 } 
  411.                     $sql     .= ' Group BY gp.id ';
  412.                     $sql     .= ' HAVING (((distance <= '.$distance.')) AND ((Count(DISTINCT gpspec.specialization_id) = ' .  Count($arrData['specialization']) . ')))';
  413.                     $sql     .= ' ORDER BY distance ASC';
  414.             }
  415.         }
  417.         $stm     = $em->getConnection()->executeQuery($sql);
  418.         $arrRess = $stm->fetchAll();
  420.         if ($arrRess)
  421.         {
  422.             foreach ($arrRess as $idx => $res)
  423.             {
  424.                 $arrRet[$idx] = $res;
  425.                 $arrRet[$idx]['lat'] = (float) $arrRet[$idx]['lat'];
  426.                 $arrRet[$idx]['lng'] = (float) $arrRet[$idx]['lng'];
  427.                 $arrRet[$idx]['opening_hour'] = nl2br($arrRet[$idx]['opening_hour']);
  428.             }
  429.         }
  430.         $arrRet = array('results' => $arrRet);
  431.         return $this->createJsonResponse($arrRet);
  433.     }
  435.     /**
  436.      * @Route(
  437.      *     "/api/research.json",
  438.      *     name="api_research",
  439.      *     methods={"POST", "OPTIONS"}
  440.      * )
  441.      */
  442.     public function researchAction(Request $request, AppHelper $appHelper, String $gmapApikey, String $accountToken)
  443.     {
  444.         $em        = $this->getDoctrine()->getManager();
  445.         $inputData = $request->getContent();
  446.         $arrData   = json_decode($inputData, true);
  447.         $arrRet    = [];
  449.         if (!$request->isMethod('POST')) {
  450.             $arrRet['message'] = 'Request method is not correct!';
  451.             return $this->createJsonResponse($arrRet);
  452.         }
  454.         if (!$request->headers->has('X-i42AccountToken')) {
  455.             $arrRet['message'] = 'Account token is missing!';
  456.             return $this->createJsonResponse($arrRet);
  457.         }
  459.         $i42AccountToken = $request->headers->get('X-i42AccountToken');
  460.         if ($i42AccountToken != $accountToken) {
  461.             $arrRet['message'] = 'Unregistered account token!';
  462.             return $this->createJsonResponse($arrRet);
  463.         }
  465.         if (!(
  466.             is_array($arrData)                 &&
  467.             isset($arrData['zipcode'])         && !empty(trim($arrData['zipcode']))        &&
  468.             isset($arrData['distance'])        && !empty($arrData['distance'])             && ctype_digit((string) $arrData['distance']) &&
  469.             isset($arrData['specialization'])  && !empty(trim($arrData['specialization'])) &&
  470.             isset($arrData['limit'])           && !empty($arrData['limit'])                && ctype_digit((string) $arrData['limit'])
  472.         )) {
  473.             $arrRet['message'] = 'Not all necessary data submitted!';
  474.             return $this->createJsonResponse($arrRet);
  475.         }
  476.         $rdblog = new Mdmrdblog();
  477.         $rdblog->setZipcode((string) $arrData['zipcode']);
  478.         $rdblog->setDistance((string) $arrData['distance']);
  479.         $rdblog->setSpecialization((string) $arrData['specialization']);
  480.         $rdblog->setCountlimit((string) $arrData['limit']);
  481.         $rdblog->setOnlyfemaledoctor((string) $arrData['only_female_doctor']);
  482.         $rdblog->setOnlymaledoctor((string) $arrData['only_male_doctor']);
  483.         $rdblog->setLegal('NaN');
  484.         $rdblog->setPrivate('NaN');
  485.         $rdblog->setCreatedAt(new \DateTime());
  487.         $legal = false;
  488.         if (isset($arrData['legal']))
  489.         {
  490.             $legal = $arrData['legal'];
  491.             $rdblog->setLegal((string) $arrData['legal']);
  492.         }
  493.         $private = false;
  494.         if (isset($arrData['private']))
  495.         {
  496.             $private = $arrData['private'];
  497.             $rdblog->setPrivate((string) $arrData['private']);
  498.         }
  499.         $em->persist($rdblog);
  500.         $em->flush();
  502.         $location = $appHelper->getPositionByZipcodeFromGoogle($this->getParameter('gmap_apikey', ''), $arrData['zipcode']);
  503.         if (count($location) && isset($location['lat']) && isset($location['lng']))
  504.         {
  505.             $lat      = $location['lat'];
  506.             $lng      = $location['lng'];
  507.             $distance = $arrData['distance'];
  508.             $distClmn = '(6371*acos(cos(radians('.$lat.'))*cos(radians(gp.lat))*cos(radians(gp.lng)-radians('.$lng.'))+sin(radians('.$lat.'))*sin(radians(gp.lat)))) AS distance';
  509.             $sql      = 'SELECT DISTINCT gp.*, '.$distClmn.' FROM gplace AS gp ';
  510.             $sql     .= 'LEFT JOIN gplace_specialization AS gpspec ON gp.id = gpspec.gplace_id ';
  511.             $sql     .= 'LEFT JOIN specialization AS spec ON gpspec.specialization_id = spec.id ';
  513.             if (isset($arrData['only_female_doctor']) && $arrData['only_female_doctor']) {
  514.                 $sql .= ' WHERE (gp.gender = "female" OR gp.gender = "female / male") ';
  515.             } elseif (isset($arrData['only_male_doctor']) && $arrData['only_male_doctor']) {
  516.                 $sql .= ' WHERE (gp.gender = "male" OR gp.gender = "female / male") ';
  517.             }
  518.             $arrSpecs = explode(',', $arrData['specialization']);
  519.             if (is_array($arrSpecs)) {
  520.                 for ($i = 0;$i<count($arrSpecs);$i++){
  521.                     if ($i === 0){
  522.                         if ((isset($arrData['only_female_doctor']) && $arrData['only_female_doctor']) || (isset($arrData['only_male_doctor']) && $arrData['only_male_doctor'])){
  523.                             $sql .= 'AND (gpspec.specialization_id='.$arrSpecs[$i];
  524.                         } else {
  525.                             $sql .= 'WHERE (gpspec.specialization_id='.$arrSpecs[$i];
  526.                         }
  527.                     } else {
  528.                         $sql .= ' OR gpspec.specialization_id=' . $arrSpecs[$i];
  529.                     }
  530.                     if ($i===count($arrSpecs)-1){
  531.                         $sql .= ')';
  532.                     }
  533.                 } 
  534.                     $sql     .= ' Group BY gp.id ';
  535.                     $sql     .= ' HAVING (((distance <= '.$distance.')) AND ((Count(DISTINCT gpspec.specialization_id) = ' .  Count($arrSpecs) . ')))';
  536.                     $sql     .= ' ORDER BY distance ASC LIMIT 1,'.$arrData['limit'];
  537.             }
  538.  
  539.             $stm     = $em->getConnection()->executeQuery($sql);
  540.             $arrRess = $stm->fetchAll();
  541.             if ($arrRess)
  542.             {
  543.                 foreach ($arrRess as $idx => $res)
  544.                 {
  545.                     $arrRet[$idx]['name']                      = $res['name'];
  546.                     $arrRet[$idx]['Fachrichtungen']            = $res['specialization'];
  547.                     $arrRet[$idx]['Strasse']                   = $res['street'].' '.$res['street_nr'];
  548.                     $arrRet[$idx]['PLZ']                       = $res['zipcode'];
  549.                     if ($res['country'] == 'DE' && strlen($res['zipcode']) == 4)
  550.                     {
  551.                         $arrRet[$idx]['PLZ']                   = '0'.$res['zipcode'];
  552.                     }
  553.                     $arrRet[$idx]['Ort']                       = $res['city'];
  554.                     $arrRet[$idx]['Telefon Nummer']            = $res['phonenumber'];
  555.                     $arrRet[$idx]['Fax Nummer']                = '';
  556.                     $arrRet[$idx]['Webseite']                  = $res['website'];
  557.                     if (!$res['website'] || empty($res['website']))
  558.                     {
  559.                         $arrRet[$idx]['Webseite']              = "";
  560.                     }
  561.                     $arrRet[$idx]['Email']                     = '';
  562.                     $arrRet[$idx]['Öffnungszeiten Montag']     = '';
  563.                     $arrRet[$idx]['Öffnungszeiten Dienstag']   = '';
  564.                     $arrRet[$idx]['Öffnungszeiten Mittwoch']   = '';
  565.                     $arrRet[$idx]['Öffnungszeiten Donnerstag'] = '';
  566.                     $arrRet[$idx]['Öffnungszeiten Freitag']    = '';
  567.                     $arrRet[$idx]['Öffnungszeiten Samstag']    = '';
  568.                     $arrRet[$idx]['Öffnungszeiten Sonntag']    = '';
  569.                     $arrRet[$idx]['Gesetzlich']                = '';
  570.                     $arrRet[$idx]['Privat']                    = '';
  571.                 }
  572.             }
  573.             $arrRet = array('results' => $arrRet);
  574.         }
  576.         return $this->createJsonResponse($arrRet);
  577.     }
  579.     /**
  580.      * @Route(
  581.      *     "/api/research_old.json",
  582.      *     name="api_research_old",
  583.      *     methods={"POST", "OPTIONS"}
  584.      * )
  585.      */
  586.     public function researchActionOld(Request $request, AppHelper $appHelper, String $gmapApikey, String $accountToken)
  587.     {
  588.         $em        = $this->getDoctrine()->getManager();
  589.         $inputData = $request->getContent();
  590.         $arrData   = json_decode($inputData, true);
  591.         $arrRet    = [];
  593.         if (!$request->isMethod('POST')) {
  594.             $arrRet['message'] = 'Request method is not correct!';
  595.             return $this->createJsonResponse($arrRet);
  596.         }
  598.         if (!$request->headers->has('X-i42AccountToken')) {
  599.             $arrRet['message'] = 'Account token is missing!';
  600.             return $this->createJsonResponse($arrRet);
  601.         }
  603.         $i42AccountToken = $request->headers->get('X-i42AccountToken');
  604.         if ($i42AccountToken != $accountToken) {
  605.             $arrRet['message'] = 'Unregistered account token!';
  606.             return $this->createJsonResponse($arrRet);
  607.         }
  609.         if (!(
  610.             is_array($arrData)                 &&
  611.             isset($arrData['zipcode'])         && !empty(trim($arrData['zipcode']))        &&
  612.             isset($arrData['distance'])        && !empty($arrData['distance'])             && ctype_digit((string) $arrData['distance']) &&
  613.             isset($arrData['specialization'])  && !empty(trim($arrData['specialization'])) &&
  614.             isset($arrData['limit'])           && !empty($arrData['limit'])                && ctype_digit((string) $arrData['limit'])
  616.         )) {
  617.             $arrRet['message'] = 'Not all necessary data submitted!';
  618.             return $this->createJsonResponse($arrRet);
  619.         }
  620.         $rdblog = new Mdmrdblog();
  621.         $rdblog->setZipcode((string) $arrData['zipcode']);
  622.         $rdblog->setDistance((string) $arrData['distance']);
  623.         $rdblog->setSpecialization((string) $arrData['specialization']);
  624.         $rdblog->setCountlimit((string) $arrData['limit']);
  625.         $rdblog->setOnlyfemaledoctor('NaN');
  626.         $rdblog->setOnlymaledoctor('NaN');
  627.         $rdblog->setLegal('NaN');
  628.         $rdblog->setPrivate('NaN');
  629.         $rdblog->setCreatedAt(new \DateTime());
  631.         $onlyMaleDoctor = false;
  632.         if (isset($arrData['only_male_doctor']))
  633.         {
  634.             $onlyMaleDoctor = $arrData['only_male_doctor'];
  635.             $rdblog->setOnlymaledoctor((string) $arrData['only_male_doctor']);
  636.         }
  637.         $onlyFemaleDoctor = false;
  638.         if (isset($arrData['only_female_doctor']))
  639.         {
  640.             $onlyFemaleDoctor = $arrData['only_female_doctor'];
  641.             $rdblog->setOnlyfemaledoctor((string) $arrData['only_male_doctor']);
  642.         }
  643.         $legal = false;
  644.         if (isset($arrData['legal']))
  645.         {
  646.             $legal = $arrData['legal'];
  647.             $rdblog->setLegal((string) $arrData['legal']);
  648.         }
  649.         $private = false;
  650.         if (isset($arrData['private']))
  651.         {
  652.             $private = $arrData['private'];
  653.             $rdblog->setPrivate((string) $arrData['private']);
  654.         }
  655.         $em->persist($rdblog);
  656.         $em->flush();
  658.         $location = $appHelper->getPositionByZipcodeFromGoogle($this->getParameter('gmap_apikey', ''), $arrData['zipcode']);
  659.         if (count($location) && isset($location['lat']) && isset($location['lng']))
  660.         {
  661.             $lat      = $location['lat'];
  662.             $lng      = $location['lng'];
  663.             $distance = $arrData['distance'];
  664.             $distClmn = '(6371*acos(cos(radians('.$lat.'))*cos(radians(gp.lat))*cos(radians(gp.lng)-radians('.$lng.'))+sin(radians('.$lat.'))*sin(radians(gp.lat)))) AS distance';
  665.             $sql      = 'SELECT DISTINCT gp.*, '.$distClmn.' FROM gplace AS gp ';
  666.             $sql     .= 'LEFT JOIN gplace_specialization AS gpspec ON gp.id = gpspec.gplace_id ';
  667.             $sql     .= 'LEFT JOIN specialization AS spec ON gpspec.specialization_id = spec.id ';
  669.             $arrSpecs = explode(',', $arrData['specialization']);
  670.             if (!empty($arrData['specialization']))
  671.             {
  672.                 $sql .= 'WHERE gpspec.specialization_id IN ('.implode(',', $arrSpecs).') ';
  673.             }
  674.             $sql     .= 'HAVING distance <= '.$distance.' ';
  675.             $sql     .= 'ORDER BY distance ASC LIMIT 1,'.$arrData['limit'];
  676.             $stm     = $em->getConnection()->executeQuery($sql);
  677.             $arrRess = $stm->fetchAll();
  678.             if ($arrRess)
  679.             {
  680.                 foreach ($arrRess as $idx => $res)
  681.                 {
  682.                     $arrRet[$idx]['name']                      = $res['name'];
  683.                     $arrRet[$idx]['Fachrichtungen']            = $res['specialization'];
  684.                     $arrRet[$idx]['Strasse']                   = $res['street'].' '.$res['street_nr'];
  685.                     $arrRet[$idx]['PLZ']                       = $res['zipcode'];
  686.                     if ($res['country'] == 'DE' && strlen($res['zipcode']) == 4)
  687.                     {
  688.                         $arrRet[$idx]['PLZ']                   = '0'.$res['zipcode'];
  689.                     }
  690.                     $arrRet[$idx]['Ort']                       = $res['city'];
  691.                     $arrRet[$idx]['Telefon Nummer']            = $res['phonenumber'];
  692.                     $arrRet[$idx]['Fax Nummer']                = '';
  693.                     $arrRet[$idx]['Webseite']                  = $res['website'];
  694.                     if (!$res['website'] || empty($res['website']))
  695.                     {
  696.                         $arrRet[$idx]['Webseite']              = "";
  697.                     }
  698.                     $arrRet[$idx]['Email']                     = '';
  699.                     $arrRet[$idx]['Öffnungszeiten Montag']     = '';
  700.                     $arrRet[$idx]['Öffnungszeiten Dienstag']   = '';
  701.                     $arrRet[$idx]['Öffnungszeiten Mittwoch']   = '';
  702.                     $arrRet[$idx]['Öffnungszeiten Donnerstag'] = '';
  703.                     $arrRet[$idx]['Öffnungszeiten Freitag']    = '';
  704.                     $arrRet[$idx]['Öffnungszeiten Samstag']    = '';
  705.                     $arrRet[$idx]['Öffnungszeiten Sonntag']    = '';
  706.                     $arrRet[$idx]['Gesetzlich']                = '';
  707.                     $arrRet[$idx]['Privat']                    = '';
  708.                 }
  709.             }
  710.             $arrRet = array('results' => $arrRet);
  711.         }
  713.         return $this->createJsonResponse($arrRet);
  714.     }
  716.     /**
  717.      * @Route(
  718.      *     "/api/gp_type.json",
  719.      *     name="api_gp_typelist",
  720.      *     methods={"POST", "OPTIONS"}
  721.      * )
  722.      */
  723.     public function gp_typelistAction(Request $request, String $accountToken)
  724.     {
  725.         $em        = $this->getDoctrine()->getManager();
  726.         $arrRet    = [];
  728.         if (!$request->isMethod('POST')) {
  729.             $arrRet['message'] = 'Request method is not correct!';
  730.             return $this->createJsonResponse($arrRet);
  731.         }
  733.         if (!$request->headers->has('X-i42AccountToken')) {
  734.             $arrRet['message'] = 'Account token is missing!';
  735.             return $this->createJsonResponse($arrRet);
  736.         }
  738.         $i42AccountToken = $request->headers->get('X-i42AccountToken');
  739.         if ($i42AccountToken != $accountToken) {
  740.             $arrRet['message'] = 'Unregistered account token!';
  741.             return $this->createJsonResponse($arrRet);
  742.         }
  744.         $types = $em->getRepository(Gptype::class)->findBy(array(), array('type' => 'ASC'));
  745.         
  746.         foreach ($types as $type)
  747.         {
  748.             $arrRet[$type->getId()] = $type->getType();
  749.         }
  750.         return $this->createJsonResponse($arrRet);
  751.     }
  753.     /**
  754.      * @Route(
  755.      *     "/api/specializationlist.json",
  756.      *     name="api_specializationlist",
  757.      *     methods={"POST", "OPTIONS"}
  758.      * )
  759.      */
  760.     public function specializationlistAction(Request $request, String $accountToken)
  761.     {
  762.         $em        = $this->getDoctrine()->getManager();
  763.         $inputData = $request->getContent();
  764.         $arrData   = json_decode($inputData, true);
  765.         $arrRet    = [];
  767.         if (!$request->isMethod('POST')) {
  768.             $arrRet['message'] = 'Request method is not correct!';
  769.             return $this->createJsonResponse($arrRet);
  770.         }
  772.         if (!$request->headers->has('X-i42AccountToken')) {
  773.             $arrRet['message'] = 'Account token is missing!';
  774.             return $this->createJsonResponse($arrRet);
  775.         }
  777.         $i42AccountToken = $request->headers->get('X-i42AccountToken');
  778.         if ($i42AccountToken != $accountToken) {
  779.             $arrRet['message'] = 'Unregistered account token!';
  780.             return $this->createJsonResponse($arrRet);
  781.         }
  782.         $language = 'de';
  783.         if (is_array($arrData) && isset($arrData['language']) && $arrData['language'] == 'en')
  784.         {
  785.             $language = 'en';
  786.         }
  788.         if ($language == 'en')
  789.         {
  790.             $specializations = $em->getRepository(Specialization::class)->findBy(array('is_active' => true), array('nameEn' => 'ASC'));
  791.         }
  792.         else
  793.         {
  794.             $specializations = $em->getRepository(Specialization::class)->findBy(array('is_active' => true), array('name' => 'ASC'));
  795.         }
  796.         
  797.         foreach ($specializations as $specialization)
  798.         {
  799.             if ($language == 'en')
  800.             {
  801.                 $arrRet[$specialization->getId()] = $specialization->getNameEn();
  802.             }
  803.             else
  804.             {
  805.                 $arrRet[$specialization->getId()] = $specialization->getName();
  806.             }
  807.         }
  808.         return $this->createJsonResponse($arrRet);
  809.     }
  812.     /**
  813.      * A basic validation of the received request data
  814.      *
  815.      * @param Request $request
  816.      * @return false|array
  817.      */
  818.     protected function validateRequest(Request $request, $validateContentType = true, $bodycheck = true)
  819.     {
  820.         $e = array();
  821.         //check content-type
  822.         if( $validateContentType && $request->headers->get('Content-Type') != "application/json" )
  823.         {
  824.             $e[] = $this->createErrorMessage(11, 'invalid content type');
  825.         }
  826.         //check method
  827.         if( $request->getMethod() != Request::METHOD_POST )
  828.         {
  829.             $e[] = $this->createErrorMessage(12, 'invalid request method');
  830.         }
  831.         //check i43-header information
  832.         if ($request->headers->has('X-i43AccountToken'))
  833.         {
  834.             $i43AccountToken = $request->headers->get('X-i43AccountToken', '');
  835.             if ($i43AccountToken !== 'DE955A86-69FF-42D9-9B77-7F00CD69EF4E')
  836.             {
  837.                 $e[]  = $this->createErrorMessage(21, 'auth information fault');
  838.             }
  839.         }
  840.         //check body data
  841.         $this->requestData = array();
  842.         $inputData         = $request->getContent();
  843.         if ($bodycheck)
  844.         {
  845.             if (strlen($inputData) == 0)
  846.             {
  847.                 $e[] = $this->createErrorMessage(13, 'no data found in the body');
  848.             }
  849.         }
  850.         if (strlen($inputData))
  851.         {
  852.             $this->requestData = json_decode($inputData, true);
  853.             if(json_last_error())
  854.             {
  855.                 $e[] = $this->createErrorMessage(17, 'json error: '.json_last_error_msg());
  856.             }
  857.         }
  858.         return $e;
  859.     }
  860.     
  861.     protected function createErrorMessage($errorCode, $msg)
  862.     {
  863.         $data = [];
  864.         $data['error']['code'] = $errorCode;
  865.         $data['error']['msg']  = $msg;
  866.         return $data;
  867.     }
  869.     protected function createJsonResponse($data)
  870.     {
  871.         $response = new Response();
  872.         $response->headers->set('Content-Type', 'application/json');
  873.         $response->headers->set('Access-Control-Allow-Credentials', true);
  874.         $response->headers->set('Access-Control-Allow-Origin', '*');
  875.         $response->headers->set('Access-Control-Allow-Headers', '*');
  876.         if (is_array($data) && count($data))
  877.         {
  878.             return $response->setContent(json_encode($data));
  879.         }
  880.         else
  881.         {
  882.             return $response->setContent('{}');
  883.         }
  884.     }
  887.     /**
  888.      * Creates the json from given error list
  889.      *
  890.      * @param type $errorList
  891.      * @return type
  892.      */
  893.     protected function createErrorResponse($errorList)
  894.     {
  895.         return $this->createJsonResponse(array_shift($errorList));
  896.     }
  897. }