Joywork/ajax/deleteMyObjects.php

<?php

require_once($_SERVER['DOCUMENT_ROOT']."/config.php");

if ($_SESSION['id']) {
    $db_sphinx = new MysqlPdo(hstsph2, null, null, null, true, '9306');
    $userId = $_SESSION['id'];
    if (is_array($_SESSION['checked'])) {

        $result = SelectelApi::getTokenAndUrl();

        $token = $result[0];
        $storageUrl = $result[1];

        $sql = "SELECT objects.* FROM objects WHERE objects.id IN (" . implode(',', array_map('intval', $_SESSION['checked'])) . ")";
        $res = mysql_query($sql);

        while ($obj = mysql_fetch_assoc($res)) {
            $id = $obj['id'];

            $canDelete = false;

            if ($obj['id_add_user'] > 0) {

                if ($obj['id_add_user'] == $_SESSION['id']) {
                    $canDelete = true;
                } else {
                    $currentUser =  new User;
                    $currentUser->get($_SESSION['id']);

                    if ($obj['id_add_user'] != $_SESSION['id'] && ($currentUser->agency == 1 || $currentUser->manager == 1 || $_SESSION['users_admin'])) {
                        $objectUser = new User;
                        $objectUser->get($obj['id_add_user']);
                        //если добавлено пользователем агентства
                        if (isset($objectUser->agencyId) && $objectUser->agencyId == $currentUser->agencyId) {
                            $canDelete = true;
                        } else {
                            // или самим агентством
                            if ($currentUser->agencyId == $obj['id_add_user']) {
                                $canDelete = true;
                            }
                        }
                    }
                }
            }

            if ($obj && $obj['archive'] == 1 && $canDelete) {

                //удаление фото
                if ($obj['use_in_advert'] == 0) {
                    //удаляем фото
                    $sqlSelectPhoto = "select oop.id, oop.object_photo_id from objects_object_photo oop where oop.object_id = $id";
                    $rezSelectPhoto = mysql_query($sqlSelectPhoto);

                    if (mysql_num_rows($rezSelectPhoto) > 0) {
                        while ($ph = mysql_fetch_assoc($rezSelectPhoto)) {
                            $sqlPhoto = "SELECT * FROM object_photo WHERE id = $ph[object_photo_id]";
                            $rezPhoto = mysql_query($sqlPhoto);
                            if (mysql_num_rows($rezPhoto) > 0) {
                                $photo = mysql_fetch_assoc($rezPhoto);

                                if (strpos($photo["photo"], "https://data.joywork.ru/") !== false) {
                                    $nfp = str_replace("https://data.joywork.ru/", "", $photo["photo"]);
                                    SelectelApi::deleteFile($storageUrl, $token, $nfp);
                                }
                            }
                        }
                    }
                }

                $sql = "DELETE FROM favor WHERE id_obj=$id";
                mysql_query($sql);

                $sql = "DELETE FROM sended_pdf WHERE id_object=$id";
                mysql_query($sql);

                $sql = "DELETE FROM sp_metro WHERE id_obj=$id";
                mysql_query($sql);

                $sql = "DELETE FROM objects WHERE id=$id AND id_add_user=$obj[id_add_user]";
                mysql_query($sql);

                $sql = "DELETE FROM user_object_events WHERE object_id=$id AND user_id=$obj[id_add_user]";
                mysql_query($sql);

                $sql = "DELETE FROM object_nb_info WHERE object_id = $id";
                mysql_query($sql);

                $sql = "DELETE FROM object_location WHERE object_id = $id";
                mysql_query($sql);

                $sql = "DELETE FROM objects_plan WHERE object_id = $id";
                mysql_query($sql);

                $sql = "DELETE FROM object_notes WHERE object_id = $id";
                mysql_query($sql);

                $sql = "DELETE FROM objects_additional_information WHERE object_id = $id";
                mysql_query($sql);

                $sqlSelectPhoto = "select oop.id, oop.object_photo_id from objects_object_photo oop where oop.object_id = $id";
                $rezSelectPhoto = mysql_query($sqlSelectPhoto);

                if (mysql_num_rows($rezSelectPhoto) > 0) {

                    while ($ph = mysql_fetch_assoc($rezSelectPhoto)) {
                        $sqlDeletePhoto = "DELETE FROM object_photo where id = $ph[object_photo_id]";
                        mysql_query($sqlDeletePhoto);

                        $sqlDeletePhotoLinks = "DELETE FROM objects_object_photo where id = $ph[id]";
                        mysql_query($sqlDeletePhotoLinks);
                    }
                }
                
                //Удаление из сфинкс
                $sql = "DELETE FROM objects_rt WHERE id=$id AND id_add_user=$obj[id_add_user]";
                
                $db_sphinx->query($sql, true);
                $sql = "UPDATE objects SET del=1 WHERE id=$id AND id_add_user=$obj[id_add_user]";
                
                $db_sphinx->query($sql,true); 
            }
        }
    }
}