Added validation of checkbox group input on project config.
[timetracker.git] / project_edit.php
1 <?php
2 // +----------------------------------------------------------------------+
3 // | Anuko Time Tracker
4 // +----------------------------------------------------------------------+
5 // | Copyright (c) Anuko International Ltd. (https://www.anuko.com)
6 // +----------------------------------------------------------------------+
7 // | LIBERAL FREEWARE LICENSE: This source code document may be used
8 // | by anyone for any purpose, and freely redistributed alone or in
9 // | combination with other software, provided that the license is obeyed.
10 // |
11 // | There are only two ways to violate the license:
12 // |
13 // | 1. To redistribute this code in source form, with the copyright
14 // |    notice or license removed or altered. (Distributing in compiled
15 // |    forms without embedded copyright notices is permitted).
16 // |
17 // | 2. To redistribute modified versions of this code in *any* form
18 // |    that bears insufficient indications that the modifications are
19 // |    not the work of the original author(s).
20 // |
21 // | This license applies to this document only, not any other software
22 // | that it may be combined with.
23 // |
24 // +----------------------------------------------------------------------+
25 // | Contributors:
26 // | https://www.anuko.com/time_tracker/credits.htm
27 // +----------------------------------------------------------------------+
28
29 require_once('initialize.php');
30 import('form.Form');
31 import('ttProjectHelper');
32 import('ttGroupHelper');
33
34 // Access checks.
35 if (!ttAccessAllowed('manage_projects')) {
36   header('Location: access_denied.php');
37   exit();
38 }
39 if (MODE_PROJECTS != $user->getTrackingMode() && MODE_PROJECTS_AND_TASKS != $user->getTrackingMode()) {
40   header('Location: feature_disabled.php');
41   exit();
42 }
43 $cl_project_id = (int)$request->getParameter('id');
44 $project = ttProjectHelper::get($cl_project_id);
45 if (!$project) {
46   header('Location: access_denied.php');
47   exit();
48 }
49 // End of access checks.
50
51 $users = ttGroupHelper::getActiveUsers();
52 foreach ($users as $user_item)
53   $all_users[$user_item['id']] = $user_item['name'];
54
55 $tasks = ttGroupHelper::getActiveTasks();
56 foreach ($tasks as $task_item)
57   $all_tasks[$task_item['id']] = $task_item['name'];
58
59 if ($request->isPost()) {
60   $cl_name = trim($request->getParameter('project_name'));
61   $cl_description = trim($request->getParameter('description'));
62   $cl_status = $request->getParameter('status');
63   $cl_users = $request->getParameter('users', array());
64   $cl_tasks = $request->getParameter('tasks', array());
65 } else {
66   $cl_name = $project['name'];
67   $cl_description = $project['description'];
68   $cl_status = $project['status'];
69
70   $mdb2 = getConnection();
71   $sql = "select user_id from tt_user_project_binds where status = 1 and project_id = $cl_project_id";
72   $res = $mdb2->query($sql);
73   if (is_a($res, 'PEAR_Error'))
74     die($res->getMessage());
75   while ($row = $res->fetchRow())
76     $cl_users[] = $row['user_id'];
77
78   $cl_tasks = explode(',', $project['tasks']);
79 }
80
81 $form = new Form('projectForm');
82 $form->addInput(array('type'=>'hidden','name'=>'id','value'=>$cl_project_id));
83 $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'project_name','style'=>'width: 250px;','value'=>$cl_name));
84 $form->addInput(array('type'=>'textarea','name'=>'description','style'=>'width: 250px; height: 40px;','value'=>$cl_description));
85 $form->addInput(array('type'=>'combobox','name'=>'status','value'=>$cl_status,
86   'data'=>array(ACTIVE=>$i18n->get('dropdown.status_active'),INACTIVE=>$i18n->get('dropdown.status_inactive'))));
87 $form->addInput(array('type'=>'checkboxgroup','name'=>'users','data'=>$all_users,'layout'=>'H','value'=>$cl_users));
88 if (MODE_PROJECTS_AND_TASKS == $user->getTrackingMode())
89   $form->addInput(array('type'=>'checkboxgroup','name'=>'tasks','data'=>$all_tasks,'layout'=>'H','value'=>$cl_tasks));
90 $form->addInput(array('type'=>'submit','name'=>'btn_save','value'=>$i18n->get('button.save')));
91 $form->addInput(array('type'=>'submit','name'=>'btn_copy','value'=>$i18n->get('button.copy')));
92
93 if ($request->isPost()) {
94   // Validate user input.
95   if (!ttValidString($cl_name)) $err->add($i18n->get('error.field'), $i18n->get('label.thing_name'));
96   if (!ttValidString($cl_description, true)) $err->add($i18n->get('error.field'), $i18n->get('label.description'));
97   if (!ttGroupHelper::validateCheckboxGroupInput($cl_users, 'tt_users')) $err->add($i18n->get('error.field'), $i18n->get('label.users'));
98   if (!ttGroupHelper::validateCheckboxGroupInput($cl_tasks, 'tt_tasks')) $err->add($i18n->get('error.field'), $i18n->get('label.tasks'));
99
100   if ($err->no()) {
101     if ($request->getParameter('btn_save')) {
102       $existing_project = ttProjectHelper::getProjectByName($cl_name);
103       if (!$existing_project || ($cl_project_id == $existing_project['id'])) {
104          // Update project information.
105          if (ttProjectHelper::update(array(
106            'id' => $cl_project_id,
107            'name' => $cl_name,
108            'description' => $cl_description,
109            'status' => $cl_status,
110            'users' => $cl_users,
111            'tasks' => $cl_tasks))) {
112            header('Location: projects.php');
113            exit();
114         } else
115            $err->add($i18n->get('error.db'));
116       } else
117         $err->add($i18n->get('error.object_exists'));
118     }
119
120     if ($request->getParameter('btn_copy')) {
121       if (!ttProjectHelper::getProjectByName($cl_name)) {
122         if (ttProjectHelper::insert(array('name' => $cl_name,
123           'description' => $cl_description,
124           'users' => $cl_users,
125           'tasks' => $cl_tasks,
126           'status' => ACTIVE))) {
127           header('Location: projects.php');
128           exit();
129         } else
130           $err->add($i18n->get('error.db'));
131       } else
132         $err->add($i18n->get('error.object_exists'));
133     }
134   }
135 } // isPost
136
137 $smarty->assign('forms', array($form->getName()=>$form->toArray()));
138 $smarty->assign('show_users', count($users) > 0);
139 $smarty->assign('show_tasks', count($tasks) > 0);
140 $smarty->assign('onload', 'onLoad="document.projectForm.name.focus()"');
141 $smarty->assign('title', $i18n->get('title.edit_project'));
142 $smarty->assign('content_page_name', 'project_edit.tpl');
143 $smarty->display('index.tpl');