X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=WEB-INF%2Flib%2FttGroupExportHelper.class.php;h=c6e1d9a5d810acd9cc8589a3f3f2433073e78dd7;hb=cd0fdd6bdf0879f047732df3d0092a291b35ff6c;hp=ce3dbb672f29cac948909d216650c8120b3a1b89;hpb=252197d9417610f49c555a454995e0949741a01e;p=timetracker.git diff --git a/WEB-INF/lib/ttGroupExportHelper.class.php b/WEB-INF/lib/ttGroupExportHelper.class.php index ce3dbb67..c6e1d9a5 100644 --- a/WEB-INF/lib/ttGroupExportHelper.class.php +++ b/WEB-INF/lib/ttGroupExportHelper.class.php @@ -49,6 +49,7 @@ class ttGroupExportHelper { var $logMap = array(); var $customFieldMap = array(); var $customFieldOptionMap = array(); + var $favReportMap = array(); // Constructor. function __construct($group_id, $file, $indentation) { @@ -71,7 +72,7 @@ class ttGroupExportHelper { } // getGroupData obtains group attributes for export. - function getGroupData() { + private function getGroupData() { global $user; $mdb2 = getConnection(); @@ -85,7 +86,7 @@ class ttGroupExportHelper { } // The getUsers obtains all users in group for the purpose of export. - function getUsers() { + private function getUsers() { global $user; $mdb2 = getConnection(); @@ -102,6 +103,9 @@ class ttGroupExportHelper { return false; } + // TODO: write a generic (private?) get function for exclusive use in this class, that obtains + // all fields from a given table. + // getRoles - obtains all roles defined for group. function getRoles() { global $user; @@ -174,13 +178,85 @@ class ttGroupExportHelper { return false; } + // getFavReports - obtains all favorite reports defined for group. + function getFavReports() { + global $user; + $mdb2 = getConnection(); + + $result = array(); + $sql = "select * from tt_fav_reports where group_id = $this->group_id and org_id = $user->org_id"; + $res = $mdb2->query($sql); + $result = array(); + if (!is_a($res, 'PEAR_Error')) { + while ($val = $res->fetchRow()) { + $result[] = $val; + } + return $result; + } + return false; + } + + // getPredefinedExpenses - obtains all predefined expenses for group. + function getPredefinedExpenses() { + global $user; + $mdb2 = getConnection(); + + $result = array(); + $sql = "select * from tt_predefined_expenses where group_id = $this->group_id and org_id = $user->org_id"; + $res = $mdb2->query($sql); + $result = array(); + if (!is_a($res, 'PEAR_Error')) { + while ($val = $res->fetchRow()) { + $result[] = $val; + } + return $result; + } + return false; + } + + // getNotifications - obtains all notifications defined for group. + function getNotifications() { + global $user; + $mdb2 = getConnection(); + + $result = array(); + $sql = "select * from tt_cron where group_id = $this->group_id and org_id = $user->org_id"; + $res = $mdb2->query($sql); + $result = array(); + if (!is_a($res, 'PEAR_Error')) { + while ($val = $res->fetchRow()) { + $result[] = $val; + } + return $result; + } + return false; + } + + // getRecordsFromTable - obtains all fields from a given table for a group. + function getRecordsFromTable($table_name) { + global $user; + $mdb2 = getConnection(); + + $result = array(); + $sql = "select * from $table_name where group_id = $this->group_id and org_id = $user->org_id"; + $res = $mdb2->query($sql); + $result = array(); + if (!is_a($res, 'PEAR_Error')) { + while ($val = $res->fetchRow()) { + $result[] = $val; + } + return $result; + } + return false; + } + // writeData writes group data into file. function writeData() { // Write group info. $group = $this->getGroupData(); - $group_part = "$option) $this->customFieldOptionMap[$option['id']] = $key + 1; + // Prepare favorite report map. + $fav_reports = $this->getFavReports(); + foreach ($fav_reports as $key=>$fav_report) + $this->favReportMap[$fav_report['id']] = $key + 1; + // Write roles. fwrite($this->file, $this->indentation." \n"); foreach ($roles as $role) { $role_part = $this->indentation.' '."roleMap[$role['id']]."\""; - $role_part .= " name=\"".htmlentities($role['name'])."\""; - $role_part .= " description=\"".htmlentities($role['description'])."\""; + $role_part .= " name=\"".htmlspecialchars($role['name'])."\""; + $role_part .= " description=\"".htmlspecialchars($role['description'])."\""; $role_part .= " rank=\"".$role['rank']."\""; - $role_part .= " rights=\"".htmlentities($role['rights'])."\""; + $role_part .= " rights=\"".htmlspecialchars($role['rights'])."\""; $role_part .= " status=\"".$role['status']."\""; $role_part .= ">\n"; fwrite($this->file, $role_part); @@ -265,8 +346,8 @@ class ttGroupExportHelper { fwrite($this->file, $this->indentation." \n"); foreach ($tasks as $task) { $task_part = $this->indentation.' '."taskMap[$task['id']]."\""; - $task_part .= " name=\"".htmlentities($task['name'])."\""; - $task_part .= " description=\"".htmlentities($task['description'])."\""; + $task_part .= " name=\"".htmlspecialchars($task['name'])."\""; + $task_part .= " description=\"".htmlspecialchars($task['description'])."\""; $task_part .= " status=\"".$task['status']."\""; $task_part .= ">\n"; fwrite($this->file, $task_part); @@ -278,6 +359,7 @@ class ttGroupExportHelper { // Write projects. fwrite($this->file, $this->indentation." \n"); foreach ($projects as $project_item) { + $tasks_str = null; if($project_item['tasks']){ $tasks = explode(',', $project_item['tasks']); $tasks_mapped = array(); @@ -286,8 +368,8 @@ class ttGroupExportHelper { $tasks_str = implode(',', $tasks_mapped); } $project_part = $this->indentation.' '."projectMap[$project_item['id']]."\""; - $project_part .= " name=\"".htmlentities($project_item['name'])."\""; - $project_part .= " description=\"".htmlentities($project_item['description'])."\""; + $project_part .= " name=\"".htmlspecialchars($project_item['name'])."\""; + $project_part .= " description=\"".htmlspecialchars($project_item['description'])."\""; $project_part .= " tasks=\"".$tasks_str."\""; $project_part .= " status=\"".$project_item['status']."\""; $project_part .= ">\n"; @@ -308,8 +390,8 @@ class ttGroupExportHelper { $projects_str = implode(',', $projects_mapped); } $client_part = $this->indentation.' '."clientMap[$client_item['id']]."\""; - $client_part .= " name=\"".htmlentities($client_item['name'])."\""; - $client_part .= " address=\"".htmlentities($client_item['address'])."\""; + $client_part .= " name=\"".htmlspecialchars($client_item['name'])."\""; + $client_part .= " address=\"".htmlspecialchars($client_item['address'])."\""; $client_part .= " tax=\"".$client_item['tax']."\""; $client_part .= " projects=\"".$projects_str."\""; $client_part .= " status=\"".$client_item['status']."\""; @@ -325,8 +407,8 @@ class ttGroupExportHelper { foreach ($users as $user_item) { $role_id = $user_item['rank'] == 512 ? 0 : $this->roleMap[$user_item['role_id']]; // Special role_id 0 (not null) for top manager. $user_part = $this->indentation.' '."userMap[$user_item['id']]."\""; - $user_part .= " name=\"".htmlentities($user_item['name'])."\""; - $user_part .= " login=\"".htmlentities($user_item['login'])."\""; + $user_part .= " name=\"".htmlspecialchars($user_item['name'])."\""; + $user_part .= " login=\"".htmlspecialchars($user_item['login'])."\""; $user_part .= " password=\"".$user_item['password']."\""; $user_part .= " role_id=\"".$role_id."\""; $user_part .= " client_id=\"".$this->clientMap[$user_item['client_id']]."\""; @@ -361,7 +443,7 @@ class ttGroupExportHelper { fwrite($this->file, $this->indentation." \n"); foreach ($invoices as $invoice_item) { $invoice_part = $this->indentation.' '."invoiceMap[$invoice_item['id']]."\""; - $invoice_part .= " name=\"".htmlentities($invoice_item['name'])."\""; + $invoice_part .= " name=\"".htmlspecialchars($invoice_item['name'])."\""; $invoice_part .= " date=\"".$invoice_item['date']."\""; $invoice_part .= " client_id=\"".$this->clientMap[$invoice_item['client_id']]."\""; $invoice_part .= " status=\"".$invoice_item['status']."\""; @@ -391,7 +473,7 @@ class ttGroupExportHelper { $log_part .= " project_id=\"".$this->projectMap[$record['project_id']]."\""; $log_part .= " task_id=\"".$this->taskMap[$record['task_id']]."\""; $log_part .= " invoice_id=\"".$this->invoiceMap[$record['invoice_id']]."\""; - $log_part .= " comment=\"".htmlentities($record['comment'])."\""; + $log_part .= " comment=\"".htmlspecialchars($record['comment'])."\""; $log_part .= " billable=\"".$record['billable']."\""; $log_part .= " paid=\"".$record['paid']."\""; $log_part .= " status=\"".$record['status']."\""; @@ -408,7 +490,7 @@ class ttGroupExportHelper { foreach ($custom_fields as $custom_field) { $custom_field_part = $this->indentation.' '."customFieldMap[$custom_field['id']]."\""; $custom_field_part .= " type=\"".$custom_field['type']."\""; - $custom_field_part .= " label=\"".htmlentities($custom_field['label'])."\""; + $custom_field_part .= " label=\"".htmlspecialchars($custom_field['label'])."\""; $custom_field_part .= " required=\"".$custom_field['required']."\""; $custom_field_part .= " status=\"".$custom_field['status']."\""; $custom_field_part .= ">\n"; @@ -423,7 +505,7 @@ class ttGroupExportHelper { foreach ($custom_field_options as $option) { $custom_field_option_part = $this->indentation.' '."customFieldOptionMap[$option['id']]."\""; $custom_field_option_part .= " field_id=\"".$this->customFieldMap[$option['field_id']]."\""; - $custom_field_option_part .= " value=\"".htmlentities($option['value'])."\""; + $custom_field_option_part .= " value=\"".htmlspecialchars($option['value'])."\""; $custom_field_option_part .= ">\n"; fwrite($this->file, $custom_field_option_part); } @@ -438,7 +520,7 @@ class ttGroupExportHelper { $custom_field_log_part = $this->indentation.' '."logMap[$entry['log_id']]."\""; $custom_field_log_part .= " field_id=\"".$this->customFieldMap[$entry['field_id']]."\""; $custom_field_log_part .= " option_id=\"".$this->customFieldOptionMap[$entry['option_id']]."\""; - $custom_field_log_part .= " value=\"".htmlentities($entry['value'])."\""; + $custom_field_log_part .= " value=\"".htmlspecialchars($entry['value'])."\""; $custom_field_log_part .= " status=\"".$entry['status']."\""; $custom_field_log_part .= ">\n"; fwrite($this->file, $custom_field_log_part); @@ -455,7 +537,7 @@ class ttGroupExportHelper { $expense_item_part .= " user_id=\"".$this->userMap[$expense_item['user_id']]."\""; $expense_item_part .= " client_id=\"".$this->clientMap[$expense_item['client_id']]."\""; $expense_item_part .= " project_id=\"".$this->projectMap[$expense_item['project_id']]."\""; - $expense_item_part .= " name=\"".htmlentities($expense_item['name'])."\""; + $expense_item_part .= " name=\"".htmlspecialchars($expense_item['name'])."\""; $expense_item_part .= " cost=\"".$expense_item['cost']."\""; $expense_item_part .= " invoice_id=\"".$this->invoiceMap[$expense_item['invoice_id']]."\""; $expense_item_part .= " paid=\"".$expense_item['paid']."\""; @@ -467,6 +549,19 @@ class ttGroupExportHelper { unset($expense_items); unset($expense_item_part); + // Write predefined expenses. + $predefined_expenses = $this->getPredefinedExpenses(); + fwrite($this->file, $this->indentation." \n"); + foreach ($predefined_expenses as $predefined_expense) { + $predefined_expense_part = $this->indentation.' '."file, $predefined_expense_part); + } + fwrite($this->file, $this->indentation." \n"); + unset($predefined_expenses); + unset($predefined_expense_part); + // Write monthly quotas. $quotas = ttTeamHelper::getMonthlyQuotas($this->group_id); fwrite($this->file, $this->indentation." \n"); @@ -482,7 +577,7 @@ class ttGroupExportHelper { unset($quota_part); // Write fav reports. - $fav_reports = ttTeamHelper::getFavReports($this->group_id); + $fav_reports = $this->getFavReports(); fwrite($this->file, $this->indentation." \n"); foreach ($fav_reports as $fav_report) { $user_list = ''; @@ -493,8 +588,9 @@ class ttGroupExportHelper { $user_list .= (strlen($user_list) == 0? '' : ',').$this->userMap[$v]; } } - $fav_report_part = $this->indentation.' '."userMap[$fav_report['user_id']]."\""; - $fav_report_part .= " name=\"".htmlentities($fav_report['name'])."\""; + $fav_report_part = $this->indentation.' '."favReportMap[$fav_report['id']]."\""; + $fav_report_part .= " user_id=\"".$this->userMap[$fav_report['user_id']]."\""; + $fav_report_part .= " name=\"".htmlspecialchars($fav_report['name'])."\""; $fav_report_part .= " client_id=\"".$this->clientMap[$fav_report['client_id']]."\""; $fav_report_part .= " cf_1_option_id=\"".$this->customFieldOptionMap[$fav_report['cf_1_option_id']]."\""; $fav_report_part .= " project_id=\"".$this->projectMap[$fav_report['project_id']]."\""; @@ -528,6 +624,40 @@ class ttGroupExportHelper { unset($fav_reports); unset($fav_report_part); + // Write notifications. + $notifications = $this->getNotifications(); + fwrite($this->file, $this->indentation." \n"); + foreach ($notifications as $notification) { + $notification_part = $this->indentation.' '."favReportMap[$notification['report_id']]."\""; + $notification_part .= " email=\"".htmlspecialchars($notification['email'])."\""; + $notification_part .= " cc=\"".htmlspecialchars($notification['cc'])."\""; + $notification_part .= " subject=\"".htmlspecialchars($notification['subject'])."\""; + $notification_part .= " report_condition=\"".htmlspecialchars($notification['report_condition'])."\""; + $notification_part .= " status=\"".$notification['status']."\""; + $notification_part .= ">\n"; + fwrite($this->file, $notification_part); + } + fwrite($this->file, $this->indentation." \n"); + unset($notifications); + unset($notification_part); + + // Write user config parameters. + $user_params = $this->getRecordsFromTable('tt_config'); + fwrite($this->file, $this->indentation." \n"); + foreach ($user_params as $user_param) { + $user_param_part = $this->indentation.' '."userMap[$user_param['user_id']]."\""; + $user_param_part .= " param_name=\"".htmlspecialchars($user_param['param_name'])."\""; + $user_param_part .= " param_value=\"".htmlspecialchars($user_param['param_value'])."\""; + $user_param_part .= ">\n"; + fwrite($this->file, $user_param_part); + } + fwrite($this->file, $this->indentation." \n"); + unset($user_params); + unset($user_param_part); + // We are mostly done with writing this group data, destroy all maps. unset($this->roleMap); unset($this->userMap);