action.php

Go to the documentation of this file.

<?php



set_include_path( '../php' . PATH_SEPARATOR . get_include_path());
set_include_path( '../smarty/libs' . PATH_SEPARATOR . get_include_path());

require_once('Smarty.class.php');

require_once('redirect.php');
require_once('edit_item.php');
require_once('mod_item.php');
require_once('del_item.php');
require_once('view_item.php');
require_once('setpw.php');
require_once('email.php');
require_once('const.php');
require_once('config.php');
require_once('report.php');
require_once('util.php');


function do_action() {

global $_GET, $_POST, $_SESSION;
global $actions_info, $item_info, $validation_info;

if (session_id() == "") { session_start(); }

$smarty =& smarty_init();

# syntax
# action.php?action=xxx&item=yyy&id=zz
$INPUT = array_merge($_GET,$_POST);

## validation of user input

$errors = check_input($INPUT, $validation_info); 

if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . join($errors, ", "), E_USER_ERROR); 
}

$item   = $INPUT['item'];
$id     = $INPUT['id'];

## xxx prevent multiple invocations of the same form

## xxx ugly hack

if(isset($INPUT['b_ok_x'])) {
        $INPUT['b_ok'] = "yes";
        unset($INPUT['b_ok_x']); 
        unset($INPUT['b_ok_y']);
}

## "cancel" button pressed?
$action = "";   # action

if (isset($INPUT['action'])) {
        # action specified as part of URL

        $action = $INPUT['action'];
        unset($INPUT['action']);

}  else {

        # button pressed?

        foreach ($actions_info as $k => $v) {
        $btn = $v['button'];

        if (isset($INPUT[$btn])) {
                $action = $k; 
                unset($INPUT[$btn]);
        }
        }
}

# suppress confirmation question (because user told us to shut up)

if (isset($INPUT['c_dontask'])) {
        $_SESSION['noconfirm'][$action][$item] = TRUE;
}

# user pressed "cancel" button

if (($action == "cancel") or isset($INPUT['b_cancel'])) {

        if (isset($INPUT['redirect'])) {
                $url = $INPUT['redirect'];
        } else {
                $url = $_SESSION['last_page'];
                if (isset($INPUT['document_id']))  {
                        $url .= "#id_" .$INPUT['document_id']; 
                } else if (isset($INPUT['id'])) {
                        $url .= "#id_" .$INPUT['id']; 
                }
        }


        redirect($url);
        exit(0);
}

$db = sql_init();

# may the user do what he intends to do? 

if (!check_acl($actions_info[$action]['acl'],$item,$INPUT['id'],$db)) {
        user_error("Permission denied: action '$action' on item type '$item'", 
                E_USER_ERROR); 
}

# ask the user for confirmation (e.g. when deleting something)

if (($actions_info[$action]['confirm']) and !isset($INPUT['b_ok'])
        and !isset($_SESSION['noconfirm'][$action][$item]) ) {

        $smarty->assign('item', $INPUT['item']);
        $smarty->assign('id', $INPUT['id']);
        $smarty->assign('action', $action);
        $smarty->assign('file', $INPUT['file']);
        $smarty->assign('redirect', $INPUT['redirect']);

        $smarty->display("header.tpl");
        $smarty->display("confirm.tpl");
        $smarty->display("footer.tpl");

        exit(0);
}



# execute the action

foreach ($actions_info as $v) {
        $b = $v['button'];
        unset($INPUT[$b]);
}


unset($INPUT['action']);

## override of $INPUT[] by $actions_info[$action['input'] 

$INPUT = array_merge($INPUT, $actions_info[$action]['input']);


if (isset($actions_info[$action]['url'])) {

        # action is an url --> redirect

        $url = $actions_info[$action]['url'];

        foreach ($INPUT as $k => $v) {
                $url .= urlencode($k) .  "=" . urlencode($v) . "&";
        }

        $url = rtrim($url,'&?');

        redirect($url);
        exit(0);

} else if (isset( $actions_info[$action]['eval'])) {

        # action is php code --> eval()

        expire($smarty, $db);

        eval($actions_info[$action]['eval']);


} else {
        user_error("Unknown action:  $action", E_USER_ERROR); 
}

# cleanup, go to last_page

sql_exit($db);

if (isset($INPUT['redirect']))  {
        $url = $INPUT['redirect'];
} else {
        $url = $_SESSION['last_page'];
        if (isset($INPUT['document_id']))  {
                $url .= "#id_" .$INPUT['document_id']; 
        } else if (isset($INPUT['id'])) {
                $url .= "#id_" .$INPUT['id']; 
        }
}


redirect($url);

}

do_action(); // execute this function

?>

---