346 lines
11 KiB
PHP
346 lines
11 KiB
PHP
<?php
|
|
|
|
include_once __DIR__.'/core.php';
|
|
|
|
use Models\Note;
|
|
use Modules\Checklists\Check;
|
|
use Modules\Checklists\Checklist;
|
|
|
|
if (empty($structure) || empty($structure['enabled'])) {
|
|
die(tr('Accesso negato'));
|
|
}
|
|
|
|
$upload_dir = DOCROOT.'/'.Uploads::getDirectory($id_module, $id_plugin);
|
|
|
|
$database->beginTransaction();
|
|
|
|
// Upload allegati e rimozione
|
|
if (filter('op') == 'link_file' || filter('op') == 'unlink_file') {
|
|
// Controllo sui permessi di scrittura per il modulo
|
|
if (Modules::getPermission($id_module) != 'rw') {
|
|
flash()->error(tr('Non hai permessi di scrittura per il modulo _MODULE_', [
|
|
'_MODULE_' => '"'.Modules::get($id_module)['name'].'"',
|
|
]));
|
|
}
|
|
|
|
// Controllo sui permessi di scrittura per il file system
|
|
elseif (!directory($upload_dir)) {
|
|
flash()->error(tr('Non hai i permessi di scrittura nella cartella _DIR_!', [
|
|
'_DIR_' => '"files"',
|
|
]));
|
|
}
|
|
|
|
// Gestione delle operazioni
|
|
else {
|
|
// UPLOAD
|
|
if (filter('op') == 'link_file' && !empty($_FILES) && !empty($_FILES['blob']['name'])) {
|
|
$upload = Uploads::upload($_FILES['blob'], [
|
|
'name' => filter('nome_allegato'),
|
|
'category' => filter('categoria'),
|
|
'id_module' => $id_module,
|
|
'id_plugin' => $id_plugin,
|
|
'id_record' => $id_record,
|
|
]);
|
|
|
|
// Creazione file fisico
|
|
if (!empty($upload)) {
|
|
flash()->info(tr('File caricato correttamente!'));
|
|
} else {
|
|
flash()->error(tr('Errore durante il caricamento del file!'));
|
|
}
|
|
}
|
|
|
|
// DELETE
|
|
elseif (filter('op') == 'unlink_file' && filter('filename') !== null) {
|
|
$name = Uploads::delete(filter('filename'), [
|
|
'id_module' => $id_module,
|
|
'id_plugin' => $id_plugin,
|
|
'id_record' => $id_record,
|
|
]);
|
|
|
|
if (!empty($name)) {
|
|
flash()->info(tr('File _FILE_ eliminato!', [
|
|
'_FILE_' => '"'.$name.'"',
|
|
]));
|
|
} else {
|
|
flash()->error(tr("Errore durante l'eliminazione del file!"));
|
|
}
|
|
}
|
|
|
|
redirect(ROOTDIR.'/editor.php?id_module='.$id_module.'&id_record='.$id_record.((!empty($options['id_plugin'])) ? '#tab_'.$options['id_plugin'] : ''));
|
|
}
|
|
}
|
|
|
|
// Download allegati
|
|
elseif (filter('op') == 'download_file') {
|
|
$rs = $dbo->fetchArray('SELECT * FROM zz_files WHERE id_module='.prepare($id_module).' AND id='.prepare(filter('id')).' AND filename='.prepare(filter('filename')));
|
|
|
|
download($upload_dir.'/'.$rs[0]['filename'], $rs[0]['original']);
|
|
}
|
|
|
|
// Validazione dati
|
|
elseif (filter('op') == 'validate') {
|
|
// Lettura informazioni di base
|
|
$init = $structure->filepath('init.php');
|
|
if (!empty($init)) {
|
|
include_once $init;
|
|
}
|
|
|
|
// Validazione del campo
|
|
$validation = $structure->filepath('validation.php');
|
|
if (!empty($validation)) {
|
|
include_once $validation;
|
|
}
|
|
|
|
echo json_encode($response);
|
|
|
|
return;
|
|
}
|
|
|
|
// Aggiunta nota interna
|
|
elseif (filter('op') == 'add_nota') {
|
|
$contenuto = post('contenuto');
|
|
$data_notifica = post('data_notifica') ?: null;
|
|
|
|
$nota = Note::build($user, $structure, $id_record, $contenuto, $data_notifica);
|
|
|
|
flash()->info(tr('Nota interna aggiunta correttamente!'));
|
|
}
|
|
|
|
// Rimozione data di notifica dalla nota interna
|
|
elseif (filter('op') == 'notification_nota') {
|
|
$id_nota = post('id_nota');
|
|
$nota = Note::find($id_nota);
|
|
|
|
$nota->notification_date = null;
|
|
$nota->save();
|
|
|
|
flash()->info(tr('Data di notifica rimossa dalla nota interna!'));
|
|
}
|
|
|
|
// Rimozione nota interna
|
|
elseif (filter('op') == 'delete_nota') {
|
|
$id_nota = post('id_nota');
|
|
$nota = Note::find($id_nota);
|
|
|
|
$nota->delete();
|
|
|
|
flash()->info(tr('Nota interna aggiunta correttamente!'));
|
|
}
|
|
|
|
// Clonazione di una checklist
|
|
elseif (filter('op') == 'clone_checklist') {
|
|
$content = post('content');
|
|
$checklist_id = post('checklist');
|
|
|
|
$users = post('assigned_users');
|
|
$users = array_clean($users);
|
|
|
|
$group_id = post('group_id');
|
|
|
|
$checklist = Checklist::find($checklist_id);
|
|
$checklist->copia($user, $id_record, $users, $group_id);
|
|
}
|
|
|
|
// Aggiunta check alla checklist
|
|
elseif (filter('op') == 'add_check') {
|
|
$content = post('content');
|
|
$parent_id = post('parent') ?: null;
|
|
|
|
$users = post('assigned_users');
|
|
$users = array_clean($users);
|
|
|
|
$group_id = post('group_id');
|
|
|
|
$check = Check::build($user, $structure, $id_record, $content, $parent_id);
|
|
$check->setAccess($users, $group_id);
|
|
}
|
|
|
|
// Rimozione di un check della checklist
|
|
elseif (filter('op') == 'delete_check') {
|
|
$check_id = post('check_id');
|
|
$check = Check::find($check_id);
|
|
|
|
if (!empty($check) && $check->user->id == $user->id) {
|
|
$check->delete();
|
|
} else {
|
|
flash()->error(tr('Impossibile eliminare il check!'));
|
|
}
|
|
}
|
|
|
|
// Gestione check per le checklist
|
|
elseif (filter('op') == 'toggle_check') {
|
|
$check_id = post('check_id');
|
|
$check = Check::find($check_id);
|
|
|
|
if (!empty($check) && $check->assignedUsers->pluck('id')->search($user->id) !== false) {
|
|
$check->toggleCheck();
|
|
} else {
|
|
flash()->error(tr('Impossibile cambiare lo stato del check!'));
|
|
}
|
|
}
|
|
|
|
// Gestione ordine per le checklist
|
|
elseif (filter('op') == 'sort_checks') {
|
|
$ids = explode(',', $_POST['order']);
|
|
$order = 0;
|
|
|
|
foreach ($ids as $id) {
|
|
$dbo->query('UPDATE `zz_checks` SET `order` = '.prepare($order).' WHERE id = '.prepare($id));
|
|
++$order;
|
|
}
|
|
}
|
|
|
|
// Invio email
|
|
elseif (post('op') == 'send-email') {
|
|
$id_template = post('template');
|
|
|
|
// Inizializzazione
|
|
$mail = new Notifications\EmailNotification();
|
|
$mail->setTemplate($id_template, $id_record);
|
|
|
|
// Rimozione allegati predefiniti
|
|
$mail->setAttachments([]);
|
|
|
|
// Destinatari
|
|
$receivers = array_clean(post('destinatari'));
|
|
$types = post('tipo_destinatari');
|
|
foreach ($receivers as $key => $receiver) {
|
|
$mail->addReceiver($receiver, $types[$key]);
|
|
}
|
|
|
|
// Contenuti
|
|
$mail->setSubject(post('subject'));
|
|
$mail->setContent(post('body'));
|
|
|
|
// Stampe da allegare
|
|
$prints = post('prints');
|
|
foreach ($prints as $print) {
|
|
$mail->addPrint($print, $id_record);
|
|
}
|
|
|
|
// Allegati originali
|
|
$files = post('attachments');
|
|
foreach ($files as $file) {
|
|
$mail->addUpload($file);
|
|
}
|
|
|
|
// Invio mail
|
|
try {
|
|
$mail->send(true); // Il valore true impone la gestione degli errori tramite eccezioni
|
|
|
|
flash()->info(tr('Email inviata correttamente!'));
|
|
} catch (PHPMailer\PHPMailer\Exception $e) {
|
|
flash()->error(tr("Errore durante l'invio dell'email").': '.$e->errorMessage());
|
|
}
|
|
}
|
|
|
|
// Inclusione di eventuale plugin personalizzato
|
|
if (!empty($structure['script'])) {
|
|
include $structure->getEditFile();
|
|
|
|
$database->commitTransaction();
|
|
|
|
return;
|
|
}
|
|
|
|
// Lettura risultato query del modulo
|
|
$init = $structure->filepath('init.php');
|
|
if (!empty($init)) {
|
|
include_once $init;
|
|
}
|
|
|
|
// Retrocompatibilità
|
|
if (!isset($record) && isset($records[0])) {
|
|
$record = $records[0];
|
|
} elseif (!isset($records[0]) && isset($record)) {
|
|
$records = [$record];
|
|
} elseif (!isset($record)) {
|
|
$record = [];
|
|
$records = [$record];
|
|
}
|
|
|
|
// Registrazione del record
|
|
HTMLBuilder\HTMLBuilder::setRecord($record);
|
|
|
|
if ($structure->permission == 'rw') {
|
|
// Esecuzione delle operazioni di gruppo
|
|
$id_records = post('id_records');
|
|
$id_records = is_array($id_records) ? $id_records : explode(';', $id_records);
|
|
$id_records = array_clean($id_records);
|
|
$id_records = array_unique($id_records);
|
|
|
|
$bulk = $structure->filepath('bulk.php');
|
|
$bulk = empty($bulk) ? [] : include $bulk;
|
|
$bulk = empty($bulk) ? [] : $bulk;
|
|
|
|
if (in_array(post('op'), array_keys($bulk))) {
|
|
redirect(ROOTDIR.'/controller.php?id_module='.$id_module, 'js');
|
|
} else {
|
|
// Esecuzione delle operazioni del modulo
|
|
include $structure->filepath('actions.php');
|
|
|
|
// Operazioni generiche per i campi personalizzati
|
|
if (post('op') != null) {
|
|
$custom_where = !empty($id_plugin) ? '`id_plugin` = '.prepare($id_plugin) : '`id_module` = '.prepare($id_module);
|
|
|
|
$query = 'SELECT `id`, `html_name` AS `name` FROM `zz_fields` WHERE '.$custom_where;
|
|
$customs = $dbo->fetchArray($query);
|
|
|
|
if (!starts_with(post('op'), 'delete')) {
|
|
$values = [];
|
|
foreach ($customs as $custom) {
|
|
if (post($custom['name']) !== null) {
|
|
$values[$custom['id']] = post($custom['name']);
|
|
}
|
|
}
|
|
|
|
// Inserimento iniziale
|
|
if (starts_with(post('op'), 'add')) {
|
|
// Informazioni di log
|
|
Filter::set('get', 'id_record', $id_record);
|
|
|
|
foreach ($values as $key => $value) {
|
|
$dbo->insert('zz_field_record', [
|
|
'id_record' => $id_record,
|
|
'id_field' => $key,
|
|
'value' => $value,
|
|
]);
|
|
}
|
|
}
|
|
|
|
// Aggiornamento
|
|
elseif (starts_with(post('op'), 'update')) {
|
|
$query = 'SELECT `zz_field_record`.`id_field` FROM `zz_field_record` JOIN `zz_fields` ON `zz_fields`.`id` = `zz_field_record`.`id_field` WHERE id_record = '.prepare($id_record).' AND '.$custom_where;
|
|
$customs_present = $dbo->fetchArray($query);
|
|
$customs_present = array_column($customs_present, 'id_field');
|
|
|
|
foreach ($values as $key => $value) {
|
|
if (in_array($key, $customs_present)) {
|
|
$dbo->update('zz_field_record', [
|
|
'value' => $value,
|
|
], [
|
|
'id_record' => $id_record,
|
|
'id_field' => $key,
|
|
]);
|
|
} else {
|
|
$dbo->insert('zz_field_record', [
|
|
'id_record' => $id_record,
|
|
'id_field' => $key,
|
|
'value' => $value,
|
|
]);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Eliminazione
|
|
elseif (!empty($customs)) {
|
|
$dbo->query('DELETE FROM `zz_field_record` WHERE `id_record` = '.prepare($id_record).' AND `id_field` IN ('.implode(',', array_column($customs, 'id')).')');
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$database->commitTransaction();
|