99 lines
3.3 KiB
PHP
99 lines
3.3 KiB
PHP
<?php
|
|
|
|
namespace App\Controller;
|
|
|
|
use App\Entity\Review;
|
|
use App\Form\ReviewType;
|
|
use Doctrine\ORM\EntityManagerInterface;
|
|
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
|
|
use Symfony\Component\Security\Http\Attribute\IsGranted;
|
|
use Symfony\Component\HttpFoundation\RedirectResponse;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
|
|
/**
|
|
* ReviewController wires up CRUD routes for reviews and keeps users inside the album-focused flow.
|
|
*/
|
|
#[Route('/reviews')]
|
|
class ReviewController extends AbstractController
|
|
{
|
|
/**
|
|
* Maintains backwards compatibility by redirecting to the dashboard.
|
|
*/
|
|
#[Route('', name: 'review_index', methods: ['GET'])]
|
|
public function index(): Response
|
|
{
|
|
return $this->redirectToRoute('account_dashboard');
|
|
}
|
|
|
|
/**
|
|
* Nudges users back to the album flow so new reviews always start from a specific album.
|
|
*/
|
|
#[Route('/new', name: 'review_new', methods: ['GET', 'POST'])]
|
|
#[IsGranted('ROLE_USER')]
|
|
public function create(Request $request): Response
|
|
{
|
|
$albumId = (string) $request->query->get('album_id', '');
|
|
if ($albumId !== '') {
|
|
return $this->redirectToRoute('album_show', ['id' => $albumId]);
|
|
}
|
|
$this->addFlash('info', 'Select an album first.');
|
|
return $this->redirectToRoute('album_search');
|
|
}
|
|
|
|
/**
|
|
* Shows a read-only page for a single review.
|
|
*/
|
|
#[Route('/{id}', name: 'review_show', requirements: ['id' => '\\d+'], methods: ['GET'])]
|
|
public function show(Review $review): Response
|
|
{
|
|
return $this->render('review/show.html.twig', [
|
|
'review' => $review,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Handles review edits by running the voter, binding the form, and saving valid updates.
|
|
*/
|
|
#[Route('/{id}/edit', name: 'review_edit', requirements: ['id' => '\\d+'], methods: ['GET', 'POST'])]
|
|
#[IsGranted('ROLE_USER')]
|
|
public function edit(Request $request, Review $review, EntityManagerInterface $em): Response
|
|
{
|
|
$this->denyAccessUnlessGranted('REVIEW_EDIT', $review);
|
|
|
|
$form = $this->createForm(ReviewType::class, $review);
|
|
$form->handleRequest($request);
|
|
|
|
if ($form->isSubmitted() && $form->isValid()) {
|
|
$em->flush();
|
|
$this->addFlash('success', 'Review updated.');
|
|
return $this->redirectToRoute('review_show', ['id' => $review->getId()]);
|
|
}
|
|
|
|
return $this->render('review/edit.html.twig', [
|
|
'form' => $form->createView(),
|
|
'review' => $review,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Deletes a review after both the CSRF token and voter checks pass.
|
|
*/
|
|
#[Route('/{id}/delete', name: 'review_delete', requirements: ['id' => '\\d+'], methods: ['POST'])]
|
|
#[IsGranted('ROLE_USER')]
|
|
public function delete(Request $request, Review $review, EntityManagerInterface $em): RedirectResponse
|
|
{
|
|
$this->denyAccessUnlessGranted('REVIEW_DELETE', $review);
|
|
if ($this->isCsrfTokenValid('delete_review_' . $review->getId(), (string) $request->request->get('_token'))) {
|
|
$em->remove($review);
|
|
$em->flush();
|
|
$this->addFlash('success', 'Review deleted.');
|
|
}
|
|
return $this->redirectToRoute('account_dashboard');
|
|
}
|
|
|
|
}
|
|
|
|
|