edit_item.php

Go to the documentation of this file.

<?php

require_once 'Smarty.class.php';
require_once 'error.php';
require_once 'redirect.php';
require_once 'book.php';
require_once 'sql.php';
require_once 'util.php';
require_once 'const.php';
require_once 'config.php';
require_once 'upload.php';



function edit_item($smarty, $INPUT, $db) {

global $_SESSION, $default_role_id, $default_location_id, $debug_level;
global $actions_info, $item_info, $validation_info, $use_z3950;

$default = array(
        "page" => "1"
);      

## current time 

$now = strftime("%Y-%m-%d %H:%M:%S");

## apply defaults to $INPUT

$INPUT = array_merge($default, $INPUT);

if (($INPUT['mode'] != "new") and (isset($_SESSION['mode']))) {
        $INPUT['mode'] = $_SESSION['mode'];
}

if ($debug_level > 10) {
         print "<hr><pre>Input: ";
        print_r($INPUT);
        print "</pre><hr>";
}

# check for missing id

if (empty($errors) and $INPUT['mode'] != "new" and empty($INPUT['id']) ) {
        $errors[] = 'id';
}


if (!empty($errors)) {
        user_error("Missing or malformed input parameter(s): " . join($errors, ", "),
                E_USER_ERROR); 
}

# xxx

if (!isset($INPUT['user_id']) and isset($_SESSION['user'])) {
        $INPUT['user_id'] = $_SESSION['user']['id'];
}

# Fetch all information about our item from $item_info[], and  
# store it into $item. Use $item_info['DEFAULT'] as a fallback.

$item = $item_info['DEFAULT'];
$item['name'] = $INPUT['item'];

if (isset($item_info[ $INPUT['item'] ])) {
        $item = $item_info[ $INPUT['item'] ];
}

# initialize form

if (($_SERVER['REQUEST_METHOD'] == "GET")) {

        if  ($INPUT['mode'] == "new") {

                ## Initialize with default values

                if (isset($item['sql_param']['data'])) { 
                        $INPUT = array_merge($item['sql_param']['data'], $INPUT);
                }

        } else {

        ## edit mode: load record from data base

        $sql_param = $item['sql_param'];

        $sql_param['cond'] = strtr($sql_param['cond'], 
                             array( "@id@" => $INPUT['id']));

        $ans = sql_query('select', $sql_param, $db);

        if (empty($ans)) {
                user_error("No record in database: id=" . 
                        $INPUT['id'] .  ", item=" . $item['name'] , 
                        E_USER_ERROR); 
        }
        
        $INPUT = array_merge($ans[0], $INPUT);

        } 
} 


## set default expiry date

if ((!isset($INPUT['expiry_date']) ) or ($INPUT['expiry_date'] < $now)) {
        $INPUT['expiry_date'] = get_new_expiry_date();
}

## process buttons

if (isset($INPUT['b_prio_up'])) {

        if ($INPUT['relevance'] < 5) {
                $INPUT['relevance'] +=1;
        }
} 

if (isset($INPUT['b_prio_down'])) {
        if ($INPUT['relevance'] > 0) {
                $INPUT['relevance'] -=1;
        }
} 

# "cancel" button pressed? 

#if (isset($INPUT['b_cancel'])) {
#       return;
#}

# "OK" button pressed? 

$display_html_form = (isset($INPUT['b_ok'])) ? FALSE : TRUE;

# stricter checks for user input (per item)

if (! $display_html_form ) {
        $errors = check_input($INPUT, $item['validation_info'], FALSE); 

        if (!empty($errors)) {
                # user input was invalid, user must correct it
                $display_html_form = TRUE;
        } 
}

if (isset($INPUT['expiry_date_Day'])) {
        $INPUT['expiry_date'] = sprintf("%04d-%02d-%02d", 
                $INPUT['expiry_date_Year'],
                $INPUT['expiry_date_Month'],
                $INPUT['expiry_date_Day']);

        if ($INPUT['expiry_date'] <= $now)  {
#               $errors[] = 'expiry_date';
#               $display_html_form = TRUE;
        }
}


# look up books in library catalogue (z39.50)


if    ( $use_z3950 and ($INPUT['mode'] == "new") and  
        isset($INPUT['b_ok']) and ($INPUT['item'] == "book") ) {
        
        # normalize signature

#       if (isset($INPUT['signature'])) {
#               $INPUT['signature'] = preg_replace("/[^a-zA-Z0-9 ]/", " ", 
#                                       $INPUT['signature']);
#       }

        # look up book in catalogue

        $books = book_info($INPUT);

        if (isset($INPUT['ppn'])) {
                # note: ppn is a unique identifier
                
                $books2 = array();

                foreach ($INPUT['ppn'] as $ppn) {
                        foreach ($books as $b) {
                                if ( $b['ppn'] == $ppn )
                                        $books2[] = $b;
                        }
                }
                $books = $books2;
        }

        switch(count($books)) {
                case 0:
                        # wrong signature

                        $errors[] = 'signature';
                        $display_html_form = TRUE;
                        break;

                case 1:         
                        break;

                default:
                        # multiple books --> user must select one of them
                        if (!isset($INPUT['ppn'])) {

                                $INPUT['page'] = '2';  
                                $display_html_form = TRUE;
                        }

                        break;
        }
} 

if ($display_html_form) {

        ## (re-)display the input form

        $tpl_vars = $INPUT; 

        $tpl_vars['item_info']   = $item;
        $tpl_vars['errors_info'] = $errors;
        $tpl_vars['files_info'] = list_files($INPUT['item'], $INPUT['id']);

        if (isset($books)) {
                $tpl_vars['books_info'] = $books;
        }

        $tpl = $item['template'][$INPUT['mode']];

        ## query data base for options, etc

        $t = array("doc_type", "url_type", "role", "location", "degree");  
        $tpl_vars['html_options'] = get_html_options($t, $db);

        $tpl_vars['html_options']['sex'] =  
                array(  'm' => "Herr", 'f' => "Frau" );

        ### try to resolve document type id 

        if (!isset($tpl_vars['doc_type_id'])) {

                $param = array (
                        cond => "name = '" . $INPUT['item'] . "'",
                        tables => "doc_type" 
                );

                $ans = sql_query('select', $param, $db); 

                if (!empty($ans)) {
                        $tpl_vars['doc_type_id'] = $ans[0]['id'];
                }
        }

        $tpl_vars['actions_info'] = $actions_info;

        # translate state id to state 

                if (isset($tpl_vars['state_id'])) {

                        ## translate state name to state id

                        $ans = sql_query( 'select', 
                                array( tables => "state", 
                                       cond => "id = " . $tpl_vars['state_id'],
                                ) , $db);

                        if (empty($ans)) {
                                user_error("Illegal state id",
                                E_USER_ERROR); 
                                exit(0);
                        } 

                        $tpl_vars['state'] = $ans[0]['name'];
                }

        do_template($smarty, $tpl, $tpl_vars);

        exit(0);


} else  {
        ## do post-processing of user input

        if (isset($INPUT['c_order_toc'])) {
        $INPUT['order_notes'] .= "\nInhaltsverzeichnis bitte einscannen";
        };
        
        # "protected" is a checkbox, convert to boolean
        $INPUT['protected'] = isset($INPUT['protected']);

        # "use_alias" is a checkbox, convert to boolean
        $INPUT['use_alias'] = isset($INPUT['use_alias']);

        # encrypt password
        if (isset($INPUT['password']) and ($INPUT['password'] != "") 
                and (strncmp("{SHA1}", $INPUT['password'], 6) != 0)) {
                $INPUT['password'] = "{SHA1}" . 
                        sha1($INPUT['password']);
        }

        # set login

        if ($INPUT['mode'] == "new" AND $INPUT['item'] == "user") {

                $l1 = strtolower($INPUT['forename']);
                $l1 = preg_replace("/[^a-zäöüß]/", "", $l1);
                $l1 = substr( $l1,0,1); 

                $l2 = strtolower($INPUT['surname']);
                $l2 = preg_replace("/[^a-zäöüß]/", "", $l2);
                $l2 = substr( $l2,0,7); 

                $INPUT['login'] = $l1 . $l2;
        }

        # items to be modified / stored into database

        $items = array();




        if (isset($books)) {

                # special case: multiple books

                foreach ($books as $b) {
                        $items[] = array_merge($INPUT, $b) ;
                }

        } else {

                # single item, e.g. an article

                $items = array( $INPUT );
        }


        foreach ($items as $i) {

                ## $sql_param['data'] is an associative array that holds the 
                ## data  that will be stored into the database.

                ## Copy data from $i[] (user input) to $sql_param['data'].
                ## 

                ## Restriction:  only certain variables are "allowed", 
                ## i.e listed in $item['sql_input'][mode]

                ## We will construct an INSERT or UPDATE sql query
                ## to store the user input into an SQL table.

                $action = ($i['mode'] == 'new') ? 'insert' : 'update';

                $sql_param = $item['sql_param'];

                $sql_param['cond'] = strtr($sql_param['cond'], 
                                   array( "@id@" => $i['id']));


                # Reset default data when in edit mode, because it would
                # overwrite existing data of the record.
        
                if ($i['mode'] != 'new') {
                        $sql_param['data'] = array();
                }

                # find out what keys are allowed

                $allowed_keys = split(',', $item['sql_input'][$i['mode']]);
                
                # copy data from $i[]

                foreach ($allowed_keys as $key) {
                        if (isset($i[$key])) {
                        $sql_param['data'][$key] = $i[$key];
                        }
                }

                if (isset($sql_param['data']['state'])) {

                        ## translate state name to state id

                        $state_name = $sql_param['data']['state']; 

                        $ans = sql_query( 'select', 
                                array(  tables => "state", 
                                        cond => "name = '$state_name'" 
                                ) , $db);

                        if (empty($ans)) {
                                user_error("Illegal state: $state_name ",
                                E_USER_ERROR); 
                                exit(0);
                        } 

                        unset($sql_param['data']['state']);
                        $sql_param['data']['state_id'] = $ans[0]['id'];
                        $sql_param['data']['last_state_change'] = $now;
                }

                $sql_param['data']['last_modified'] = $now;

                ## execute the SQL query 
                sql_query($action, $sql_param, $db);


                # send e-mail

                if ($INPUT['item'] == "email" and $INPUT['mode'] == "new") {

                        $tpl_vars = $INPUT;

                        $owner = get_item_owner("document",
                                $INPUT['document_id'], $db);

                        $tpl_vars['user_info'] = $owner;
                        
                        $email_to = $owner['degree_name'] . " ";
                        $email_to .= $owner['forename'] . " ";
                        $email_to .= $owner['surname'] . " ";
                        $email_to .= "<" . $owner['email'] . ">";

                        $p = array ( 
                                "tables" => "document",
                                "cond" => "id = " . $INPUT['document_id'],
                        );

                        $ans = sql_query('select', $p, $db);

                        if (empty($ans)) {
                                user_error("invalid document id: ". 
                                $INPUT['document_id'] , E_USER_ERROR);
                        }
                        
                        $tpl_vars['document_info'] = $ans[0];

                        $coll_id = $tpl_vars['document_info']['collection_id'];

                        $p = array ( 
                                "tables" => "collection",
                                "cond" => "id = " . $coll_id
                        );

                        $ans = sql_query('select', $p, $db);

                        if (empty($ans)) {
                                user_error("invalid collection id: " . 
                                $coll_id , E_USER_ERROR);
                        }

                        $tpl_vars['collection_info'] = $ans[0];

                        send_email($smarty,'msg_generic.tpl',$tpl_vars,$email_to);
                }



                # handle file uploads

                if ($i['item'] == 'file' and $i['mode'] == 'new')  {

                        # retrieve id of newly created item

                        $ans = sql_query('last_id', array(), $db);
                        $i['id'] = $ans[0]['last_id'];  

                        if ($i['id'] <= 0) {
                                user_error("could not retrieve last_id "  , 
                                E_USER_ERROR);
                        }


                        foreach ($_FILES as $f) {

                                if (!is_uploaded_file($f['tmp_name'])) {
                                        continue;
                                }

                                $c = file_get_contents($f['tmp_name']); 
                                $fn = basename($f['name']);
                                put_file($i['item'], $i['id'], $fn, $c);
                        }

                }
        }
}

}
?>

---