Im Xentral Community Forum könnt Ihr euch einen Überblick über die neuen Funktionen verschaffen.
Neues von Xentral![](\"./themes/[THEME]/images/1x1t.gif\"){kind=spacer}
![](\"./themes/[THEME]/images/right.png\" "\\"Erledigen\\"")
![](\"./themes/[THEME]/images/delete.svg\" "\\"Erledigt\\"")
app->Tpl->Set('CALENDAR_MONTHNAMES','["{|Januar|}", "{|Februar|}", "{|März|}", "{|April|}", "{|Mai|}",
"{|Juni|}", "{|Juli|}", "{|August|}", "{|September|}", "{|Oktober|}", "{|November|}", "{|Dezember|}"]');
$this->app->Tpl->Set('CALENDAR_TODAY','{|Heute|}');
$this->app->Tpl->Set('CALENDAR_MONTH','{|Monat|}');
$this->app->Tpl->Set('CALENDAR_WEEK','{|Woche|}');
$this->app->Tpl->Set('CALENDAR_DAY','{|Tag|}');
$this->app->erp->KalenderList('KALENDER');
$this->app->Tpl->Parse('STARTSEITE','lesezeichen.tpl');
if($this->app->User->GetType()==='admin')
{
$this->app->Tpl->Set('UMSATZ','Umsatz ab Montag
'); } if($this->app->erp->RechteVorhanden('kalender','list')) { $this->app->Tpl->Set('TERMINE', $this->Termine($this->app->DB->Select('SELECT CURDATE();'))); $this->app->Tpl->Set('TERMINEMORGEN', $this->Termine($this->app->DB->Select('SELECT DATE_ADD(CURDATE(), INTERVAL 1 DAY);'))); } $summestunden = $this->app->DB->Select("SELECT SUM((UNIX_TIMESTAMP(z.bis)-UNIX_TIMESTAMP(z.von))/3600.0) as stunden FROM zeiterfassung z WHERE z.abrechnen='1' AND z.ist_abgerechnet IS NULL OR z.ist_abgerechnet='0' AND z.adresse_abrechnung > 0"); if($summestunden > 0) $this->app->Tpl->Add('DRINGEND','
von ".$name.""; } else { $additional=''; } if($tmp[$i]['prio']=='1') { $class='noteit_highprio'; $high=" (Prio)"; } else { $class='noteit'; } $this->app->Tpl->Add('TODOFORUSER',"
![](\"./themes/new/images/edit.svg\")
![](\"./themes/new/images/forward.svg\")
Vergebene Aufgaben:
'); } for($i=0;$i<$ctmp;$i++) { $name = $this->app->DB->Select("SELECT name FROM adresse WHERE id='".$tmp[$i]['adresse']."' LIMIT 1"); $high=''; if($tmp[$i]['prio']=='1') { $class='noteit_highprio'; $high=' (Prio)'; } else { $class='noteit'; } $this->app->Tpl->Add('TODOFORMITARBEITER','für ".$name.'
Die neue Version 20.3 ist nun verfügbar und gespickt mit dutzenden neuen Features!
';
}
$this->app->Tpl->Set('EXTERNALNEWS', $result_news);
*/
/*
$result_handbook = file_get_contents('https://xentral.biz/handbook.php?version='.$this->app->erp->Version(),0, $ctx);
if($result_handbook=='')
{
$result_handbook='- Erste Schritte / Einstieg
- Import von Stammdaten mehr
- Automatisches Backup einrichten mehr
- Link zu Online-Handbuch
- Forum für Open-Source Version
- Supportverträge für Xentral
{|Weniger als 500 MB Speicherplatz frei.|}
');
}
elseif($freeDiskSpaceInMegabyte < 2048){
$this->app->Tpl->Set('MESSAGE', '{|Weniger als 2 GB Speicherplatz frei.|}
');
}
} catch(Exception $e){
$this->app->erp->LogFile('can not evaluate disk space: ' . $e->getMessage());
}
}
public function WelcomeIcons()
{
$type = $this->app->Secure->GetGET('type');
header('Content-type: image/svg+xml');
switch($type)
{
case 'artikelgruppe.svg':
$xml = file_get_contents('./images/icons/artikelgruppe.svg');
break;
}
$farbe1 = $this->app->erp->Firmendaten('firmenfarbeganzdunkel');
if($farbe1 ==''){
$farbe1 = '#26727a';//$farbe1 = "rgb(7, 134, 153)";
}
$farbe2 = '#e43f25'; // rot im artikel
$farbe3 = '#a6e0be'; // hell tyrkis im artikel kreis
$farbe4 = '#449cbe'; // dunkelblau im artikel rechteck
$xml = str_replace('#3fb9cd',$farbe1,$xml);
$xml = str_replace('#e43f25',$farbe2,$xml);
$xml = str_replace('#a6e0be',$farbe3,$xml);
$xml = str_replace('#449cbe',$farbe4,$xml);
echo $xml;
$this->app->erp->ExitWawi();
}
public function WelcomeLogo()
{
$firmenlogo = $this->app->erp->getSettingsFile('firmenlogo');
if($firmenlogo!='')
{
header('Content-Type: image/png');
echo $firmenlogo;
}
$this->app->erp->ExitWawi();
}
public function WelcomeCss()
{
$file = $this->app->Secure->GetGET('file');
if ($this->app->erp->UserDevice()!=='smartphone') {
if($file==='style.css'){
$tmp = file_get_contents('./themes/new/css/style.css');
}
if($file==='popup.css'){
$tmp = file_get_contents('./themes/new/css/popup.css');
}
if($file==='grid.css'){
$tmp = file_get_contents('./themes/new/css/grid.css');
}
}
$tmpfirmendatenfkt = 'Firmendaten';
if(method_exists($this->app->erp,'TplFirmendaten')){
$tmpfirmendatenfkt = 'TplFirmendaten';
}
$firmenfarbehell = $this->app->erp->$tmpfirmendatenfkt('firmenfarbehell');
if($firmenfarbehell ==''){
$firmenfarbehell = '#c2e3ea';//rgb(67, 187, 209)"; //ALT
}
$firmenfarbedunkel = $this->app->erp->$tmpfirmendatenfkt('firmenfarbedunkel');
if($firmenfarbedunkel ==''){
$firmenfarbedunkel = '#53bed0';//rgb(2, 125, 141)"; //ALT
}
$firmenfarbeganzdunkel = $this->app->erp->$tmpfirmendatenfkt('firmenfarbeganzdunkel');
if($firmenfarbeganzdunkel ==''){
$firmenfarbeganzdunkel = '#018fa3';
}
$navigationfarbe = $this->app->erp->$tmpfirmendatenfkt('navigationfarbe'); //ALT
if($navigationfarbe ==''){
$navigationfarbe = '#48494b';
}
$navigationfarbeschrift = $this->app->erp->$tmpfirmendatenfkt('navigationfarbeschrift');
if($navigationfarbeschrift ==''){
$navigationfarbeschrift = '#c9c9cb';
}
$navigationfarbe2 = $this->app->erp->$tmpfirmendatenfkt('navigationfarbe2'); //ALT
if($navigationfarbe2 ==''){
$navigationfarbe2 = $navigationfarbeschrift;
}
$navigationfarbeschrift2 = $this->app->erp->$tmpfirmendatenfkt('navigationfarbeschrift2');
if($navigationfarbeschrift2 ==''){
$navigationfarbeschrift2 = $navigationfarbe;
}
$unternavigationfarbe = $this->app->erp->$tmpfirmendatenfkt('unternavigationfarbe');
if($unternavigationfarbe ==''){
$unternavigationfarbe = '#d5ecf2';
}
$unternavigationfarbeschrift = $this->app->erp->$tmpfirmendatenfkt('unternavigationfarbeschrift');
if($unternavigationfarbeschrift ==''){
$unternavigationfarbeschrift = '#027d8d';
}
$firmenfarbe = $this->app->erp->$tmpfirmendatenfkt('firmenfarbe');
if($firmenfarbe ==''){
$firmenfarbe = '#48494b';
}
$navigationfarbeschrift2 = $this->app->erp->$tmpfirmendatenfkt('navigationfarbeschrift2');
if($navigationfarbeschrift2 ==''){
$navigationfarbeschrift2 = '#ffffff';
}
$tmp = str_replace('[TPLSYSTEMBASE]',$firmenfarbe,$tmp);
if($this->app->erp->Firmendaten('iconset_dunkel')=='1'){
$tmp = str_replace('[TPLNACHRICHTBOX]', 'rgba(255,255,255,0.5)', $tmp);
}
else{
$tmp = str_replace('[TPLNACHRICHTBOX]', 'rgba(255,255,255,0.1)', $tmp);
}
$tmp = str_replace('[TPLFIRMENFARBEHELL]',$firmenfarbehell,$tmp);
$tmp = str_replace('[TPLFIRMENFARBEDUNKEL]',$firmenfarbedunkel,$tmp);
$tmp = str_replace('[TPLFIRMENFARBEGANZDUNKEL]',$firmenfarbeganzdunkel,$tmp);
$tmp = str_replace('[TPLNAVIGATIONFARBE]',$navigationfarbe,$tmp);
$tmp = str_replace('[TPLNAVIGATIONFARBE2]',$navigationfarbe2,$tmp);
$tmp = str_replace('[TPLNAVIGATIONFARBESCHRIFT]',$navigationfarbeschrift,$tmp);
$tmp = str_replace('[TPLNAVIGATIONFARBESCHRIFT2]',$navigationfarbeschrift2,$tmp);
$tmp = str_replace('[TPLUNTERNAVIGATIONFARBE]',$unternavigationfarbe,$tmp);
$tmp = str_replace('[TPLUNTERNAVIGATIONFARBESCHRIFT]',$unternavigationfarbeschrift,$tmp);
$subaction = $this->app->Secure->GetGET('subaction');
$submodule = $this->app->Secure->GetGET('submodule');
if($subaction=='pinwand' || $subaction=='start' || $submodule=='kalender'){
$tmp = str_replace('[JSDMMZINDEX]', '10000', $tmp);
}
else{
$tmp = str_replace('[JSDMMZINDEX]', '10', $tmp);
}
if($this->app->erp->Firmendaten('standardaufloesung')=='1'){
$tmp = str_replace('[CSSSMALL1]','1000',$tmp);
$tmp = str_replace('[CSSSMALL2]','1000',$tmp);
$tmp = str_replace('[CSSMARGIN]','margin-left: auto; margin-right: auto;',$tmp);
} else {
$tmp = str_replace('[CSSSMALL1]','1200',$tmp);
$tmp = str_replace('[CSSSMALL2]','1200',$tmp);
$tmp = str_replace('[CSSMARGIN]','margin-left: auto; margin-right: auto;',$tmp);
}
header('Content-type: text/css');
echo $tmp;
$this->app->erp->ExitWawi();
}
public function WelcomeAddPinwand()
{
$user = $this->app->User->GetID();
$users = $this->app->DB->SelectArr("SELECT u.id, a.name as description FROM user u LEFT JOIN adresse a ON a.id=u.adresse WHERE u.activ='1' ORDER BY u.username");
$user_out = '';
$cusers = !empty($users)?count($users):0;
for($i=0; $i<$cusers;$i++){
$select = $user==$users[$i]['id'] ? 'selected' : '';
$user_out .= "";
}
$this->app->Tpl->Set('PERSONEN', $user_out);
$name = $this->app->Secure->GetPOST('name');
if($name!='')
{
$personen = $this->app->Secure->GetPOST('personen');
$this->app->DB->Insert("INSERT INTO pinwand (id,name,user) VALUES ('','$name','$user')");
$pinwand = $this->app->DB->GetInsertID();
$cpersonen = !empty($personen)?count($personen):0;
for($i=0;$i<=$cpersonen;$i++)
{
if($personen[$i] > 0)
{
$this->app->DB->Insert("INSERT INTO pinwand_user (pinwand,user) VALUES ('$pinwand','".$personen[$i]."')");
}
}
$this->app->Tpl->Set('PAGE', "");
}
else {
$this->app->Tpl->Parse('PAGE','welcome_pinwand_addpinwand.tpl');
}
$this->app->BuildNavigation=false;
}
public function WelcomeAddNote()
{
$aufgabeid = (int)$this->app->Secure->GetGET('aufgabeid');
$beschreibung = $this->app->Secure->GetPOST('notebody');
if($beschreibung!='')
{
$color = $this->app->Secure->GetPOST('color');
$aufgabe = $beschreibung;
$pinwand = $this->app->Secure->GetGET('pinwand');
$aufgabe = str_replace('\r\n',' ',$aufgabe);
$max_z = $this->app->DB->Select("SELECT MAX(note_z) FROM aufgabe WHERE adresse='".$this->app->User->GetAdresse()."' ");
$new = true;
if($aufgabeid)
{
$cuid = $this->app->DB->Select("SELECT id FROM aufgabe WHERE adresse = '".$this->app->User->GetAdresse()."' AND id = ".$aufgabeid." LIMIT 1");
if($cuid)
{
$new = false;
$id = $cuid;
}
}
if($this->app->erp->is_html($aufgabe))
{
$aufgabe = strip_tags(str_replace('<', ' <', $aufgabe));
$aufgabe = trim(str_replace(' ', ' ', $aufgabe));
if($new){
$id = $this->app->erp->CreateAufgabe($this->app->User->GetAdresse(),$aufgabe);
}
}
else{
if($new){
$id = $this->app->erp->CreateAufgabe($this->app->User->GetAdresse(), $aufgabe);
}
}
$xy = $this->getCoordsForNewTask($id);
$note_x = $xy['note_x'];
$note_y = $xy['note_y'];
$this->app->DB->Update(
"UPDATE aufgabe
SET pinwand='1',
pinwand_id='$pinwand',
note_color='$color',
note_z='$max_z',
note_x='".$note_x."',
note_y='".$note_y."',
beschreibung='$beschreibung'
WHERE id='$id' LIMIT 1"
);
$this->app->Tpl->Set('PAGE', "");
}
else {
if($aufgabeid)
{
$aufg = $this->app->DB->SelectArr('SELECT * FROM aufgabe WHERE id = '.$aufgabeid.' LIMIT 1');
if($aufg)
{
$aufg = reset($aufg);
$this->app->Tpl->Set('PADDNOTE_BODY',$aufg['beschreibung']);
$this->app->Tpl->Set('PADDNOTE_JS',"
");
}
}
$this->app->YUI->CkEditor('notebody','belege');//,array("height"=>"450"));
$this->app->Tpl->Parse('PAGE','welcome_pinwand_addnote.tpl');
}
$this->app->BuildNavigation=false;
}
public function WelcomeDelNote()
{
$id = $this->app->Secure->GetGET('id');
$pinwand = $this->app->Secure->GetGET('pinwand');
if($id > 0){
$this->app->DB->Update("DELETE FROM aufgabe WHERE id='$id' LIMIT 1");
}
header('Location: index.php?module=welcome&action=pinwand&pinwand='.$pinwand);
exit;
}
public function WelcomeOkNote()
{
$id = $this->app->Secure->GetGET('id');
$pinwand = $this->app->Secure->GetGET('pinwand');
$this->app->erp->AbschlussAufgabe($id);
//$this->app->DB->Update("UPDATE aufgabe SET status='abgeschlossen' WHERE id='$id' LIMIT 1");
header('Location: index.php?module=welcome&action=pinwand&pinwand='.$pinwand);
exit;
}
public function WelcomeMoveNote()
{
$id = $this->app->Secure->GetGET('id');
if($id > 0){
$x = $this->app->Secure->GetGET('x');
$y = $this->app->Secure->GetGET('y');
$z = $this->app->Secure->GetGET('z');
$this->app->DB->Update("UPDATE aufgabe SET note_x='$x',note_y='$y',note_z='$z' WHERE id='$id' LIMIT 1");
}
exit;
}
public function WelcomePinwand()
{
$this->app->erp->StartseiteMenu();
$cmd = $this->app->Secure->GetGET('cmd');
$pinwand = $this->app->Secure->GetGET('pinwand');
switch($cmd)
{
case 'resize':
$id = $this->app->Secure->GetGET('id');
if($id > 0)
{
$w = $this->app->Secure->GetGET('w');
$h = $this->app->Secure->GetGET('h');
$this->app->DB->Update("UPDATE aufgabe SET note_w='".$this->app->DB->real_escape_string($w)."',
note_h='".$this->app->DB->real_escape_string($h)."' WHERE id='$id' LIMIT 1");
$result['status']=1;
} else {
$result['status']=0;
$result['statusText']='Fehlgeschlagen';
}
echo json_encode($result);
exit;
break;
case 'get':
$id = $this->app->Secure->GetPOST('id');
$result['id']=$id;
$result['beschreibung']=$this->app->DB->Select("SELECT beschreibung FROM aufgabe WHERE id='$id' LIMIT 1");
$result['note_color']=$this->app->DB->Select("SELECT note_color FROM aufgabe WHERE id='$id' LIMIT 1");
$result['status']=1;
$result['statusText']='';
echo json_encode($result);
exit;
break;
case 'save':
$id = $this->app->Secure->GetPOST('id');
$beschreibung = $this->app->Secure->GetPOST('beschreibung');
$note_color = $this->app->Secure->GetPOST('note_color');
$pinwand = $this->app->Secure->GetPOST('pinwand');
if($pinwand <=0) {
$pinwand=0;
}
if($id > 0)
{
$this->app->DB->Update("UPDATE aufgabe SET beschreibung='".$this->app->DB->real_escape_string($beschreibung)."',
note_color='".$this->app->DB->real_escape_string($note_color)."' WHERE id='$id' LIMIT 1");
$result['note_color']=$note_color;
$result['beschreibung']=$beschreibung;
$result['status']=1;
} else {
$aufgabe = strip_tags(str_replace('<', ' <', $beschreibung));
$aufgabe = trim(str_replace(' ', ' ', $aufgabe));
$max_z = $this->app->DB->Select("SELECT MAX(note_z) FROM aufgabe WHERE adresse='".$this->app->User->GetAdresse()."'");
$id = $this->app->erp->CreateAufgabe($this->app->User->GetAdresse(),$aufgabe);
$xy = $this->getCoordsForNewTask($id);
$note_x = $xy['note_x'];
$note_y = $xy['note_y'];
$this->app->DB->Update(
"UPDATE aufgabe
SET note_color='".$this->app->DB->real_escape_string($note_color)."',
beschreibung='".$this->app->DB->real_escape_string($beschreibung)."',
note_z='".$max_z."',
note_x='".$note_x."',
note_y='".$note_y."',
pinwand='1',
pinwand_id='".$pinwand."'
WHERE id='$id' LIMIT 1"
);
$result['note_color']=$note_color;
$result['beschreibung']=$beschreibung;
$result['status']=1;
$result['statusText']='';
}
echo json_encode($result);
exit;
break;
}
if($pinwand <=0)
{
$tmp = $this->app->DB->SelectArr("SELECT * FROM aufgabe WHERE adresse='".$this->app->User->GetAdresse()."' AND pinwand='1' AND pinwand_id='0' AND status='offen'");
} else {
$erlaubt = true;
if($this->app->User->GetType() != 'admin')
{
$check = $this->app->DB->Select("SELECT id FROM pinwand WHERE id = '$pinwand' AND `user` = '".$this->app->User->GetID()."'");
if(!$check && !$this->app->DB->Select("SELECT id FROM pinwand_user WHERE pinwand = '$pinwand' AND `user` = '".$this->app->User->GetID()."' LIMIT 1"))
{
$erlaubt = false;
}
}
if($erlaubt)
{
$tmp = $this->app->DB->SelectArr("SELECT * FROM aufgabe WHERE pinwand='1' AND pinwand_id='$pinwand' AND status='offen'");
}
}
$ctmp = !empty($tmp)?count($tmp):0;
for($i=0;$i<$ctmp;$i++)
{
$left = $tmp[$i]['note_x'];
$color = $tmp[$i]['note_color'];
if($color==''){
$color='yellow';
}
$top = $tmp[$i]['note_y'];
$zindex = $tmp[$i]['note_z'];
$text = nl2br($this->app->erp->ReadyForPDF($tmp[$i]['beschreibung']));
if($text=='') {
$text = $tmp[$i]['aufgabe'];
}
$id = $tmp[$i]['id'];
$projekt = $this->app->DB->Select("SELECT abkuerzung FROM projekt WHERE id='".$tmp[$i]['projekt']."' LIMIT 1");
$width = $tmp[$i]['note_w']?$tmp[$i]['note_w']:130;
$height = $tmp[$i]['note_h']?$tmp[$i]['note_h']:130;
if($pinwand <= 0) {
$pinwand=0;
}
$seriennummer = $this->app->DB->Select("SELECT seriennummer FROM adapterbox WHERE verwendenals='bondrucker' LIMIT 1");
if($seriennummer!=''){
$menu_bon = '
';
}
else{
$menu_bon = ' ';
}
switch($color)
{
case 'yellow': $color='#f69e06'; break;
case 'blue': $color='#41b3ce'; break;
case 'green': $color='#a9ca45'; break;
case 'coral': $color='#be3978'; break;
}
$result = ' '.$text.'
'.$id.'
Herzlich Willkommen in Ihrem Xentral,
wir freuen uns Sie als Xentral Benutzer begrüßen zu dürfen. Mit Xentral organisieren Sie Ihre Firma schnell und einfach. Sie haben alle wichtigen Zahlen und Vorgänge im Überblick.
Für Einsteiger sind die folgenden Themen wichtig:
- Firmendaten (dort richten Sie Ihr Briefpapier ein)
- Stammdaten / Adressen (Kunden und Lieferanten anlegen)
- Artikel anlegen (Ihr Artikelstamm)
- Angebot / Auftrag (Alle Dokumente für Ihr Geschäft)
- Rechnung / Gutschrift
- Lieferschein
Kennen Sie unsere Zusatzmodule die Struktur und Organisation in das tägliche Geschäft bringen?
";
$wikipage_exists = $this->app->DB->Select("SELECT '1' FROM wiki WHERE name='StartseiteWiki' LIMIT 1");
if($wikipage_exists!='1'){
$this->app->DB->Insert("INSERT INTO wiki (name) VALUES ('StartseiteWiki')");
}
$wikipage_content = $this->app->DB->Select("SELECT content FROM wiki WHERE name='StartseiteWiki' LIMIT 1");
$this->app->DB->DisableHTMLClearing(false);
$wikipage_content = $this->app->erp->ReadyForPDF($wikipage_content);
$wikiparser = new WikiParser();
$content = $wikiparser->parse($wikipage_content);
$this->app->Tpl->Set("ACCORDIONEDIT",$edit);
$this->app->Tpl->Set('ACCORDIONENTRY0', $content);
$entry = '[ACCORDIONENTRY0]';
$out .= "
$entry
$von $bis
Es wurde keine Weiterleitungs-URL übergeben
');
}
$urlParts = parse_url($url);
if (!is_array($urlParts)) {
$this->app->Tpl->Set('MESSAGE', 'Die übergebene Weiterleitungs-URL is ungültig.
');
}
if (empty($urlParts['scheme']) && empty($urlParts['host'])) {
$this->app->Tpl->Set('MESSAGE', 'Die übergebene Weiterleitungs-URL ist unvollständig.
');
}
if (!empty($urlParts['scheme']) && !in_array($urlParts['scheme'], ['http', 'https'])) {
$this->app->Tpl->Set('MESSAGE', 'Die Weiterleitungs-URL führt nicht auf eine Webseite.
');
}
$this->app->Tpl->Set('REDIRECT_URL_LINK', $url);
$this->app->Tpl->Set('REDIRECT_URL_TEXT', htmlspecialchars($url));
$this->app->Tpl->Parse('PAGE','welcome_redirect.tpl');
}
/**
* @param Application $app
* @param string $name
* @param array $erlaubtevars
*
* @return array
*/
public function TableSearch(&$app, $name, $erlaubtevars)
{
$result = [];
switch ($name) {
case 'welcome_spooler':
$id = (int)$this->app->Secure->GetGET('id');
$aligncenter = array(1);
$heading = array('', 'Zeit', 'Dateiname', 'Bearbeiter', 'Gedruckt', 'Menü');
$width = array('1%', '30%', '30%', '20%', '10%', '5%');
$findcols = array('d.id', 'd.zeitstempel', 'd.filename', 'a.name', 'd.gedruckt', 'd.id');
$searchsql = array("DATE_FORMAT(d.zeitstempel,'%d.%m.%Y %H:%i:%s')", 'd.filename', 'a.name');
$menu = "| " .
"" .
" |
Die Open Source-Version wurde wiederhergestellt
'));
exit;
}
}
header('Location: index.php?module=welcome&action=info&msg='.$this->app->erp->base64_url_encode('Die Open Source-Version konnte nicht wiederhergestellt werden. Bitte prüfen Sie die Dateirechte!
'));
exit;
}
$this->app->erp->Headlines('Informationen zur Software');
$this->app->Tpl->Set('TABTEXT','Informationen zur Software');
$this->app->Tpl->Set('TAB1','');
$this->app->Tpl->Parse('PAGE','tabview.tpl');
}
public function WelcomeMenu()
{
$this->app->Tpl->Add('KURZUEBERSCHRIFT','Startseite
'); } public function WelcomeMain() { $this->app->Tpl->Set('UEBERSCHRIFT','Herzlich Willkommen '.$this->app->User->GetDescription().'!'); $this->WelcomeMenu(); // muss jeder sehen $this->app->erp->LagerAusgehend('ARTIKEL'); $this->app->Tpl->Parse('PAGE','welcome_main.tpl'); } public function WelcomeStartseite() { $this->app->erp->Startseite(); } public function WelcomeLogin() { if($this->app->User->GetID()>0) { // alle cookies SpryMedia loeschen // Setzen des Verfalls-Zeitpunktes auf 1 Stunde in der Vergangenheit $this->app->erp->ClearCookies(); $startseite = ''; if($code = $this->app->Secure->GetPOST('code')) { $result = $this->app->DB->SelectArr("SELECT url, reduziert FROM stechuhrdevice WHERE code = '$code' AND aktiv = 1 LIMIT 1"); $startseite = $result[0]['url'] ; $isReduziert = $result[0]['reduziert']; if($isReduziert){ $this->app->User->SetParameter('stechuhrdevicereduziert',true); } if($isReduziert && empty($startseite)){ $startseite = 'index.php?module=stechuhr&action=list&prodcmd=arbeitsschritt'; } } $this->app->erp->Startseite($startseite); } else { $this->app->erp->InitialSetup(); $this->app->Tpl->Set('UEBERSCHRIFT','Xentral · Enterprise Warehouse Management'); $this->app->acl->Login(); } } public function WelcomeLogout() { $this->app->acl->Logout(); $this->app->erp->ClearCookies(); } public function WelcomeUnlock() { $gui = $this->app->Secure->GetGET('gui'); $id = $this->app->Secure->GetGET('id'); $backlink = $this->app->Secure->GetGET('backlink'); // Prüfen ob Backlink mit index.php? beginnt; ansonsten ist Open Redirect möglich if (!empty($backlink) && strpos($backlink, 'index.php?') !== 0){ unset($backlink); } // sperre entfernen bzw umschreiben if($gui==='angebot' || $gui==='auftrag' || $gui==='rechnung' || $gui==='bestellung' || $gui==='gutschrift' || $gui==='lieferschein' || $gui==='retoure' || $gui==='adresse' || $gui==='artikel' || $gui==='produktion' || $gui==='reisekosten' || $gui==='preisanfrage') { $this->app->DB->Update("UPDATE $gui SET usereditid='".$this->app->User->GetID()."' WHERE id='$id' LIMIT 1"); if(!empty($backlink)) { header('Location: '.$backlink); }else{ header("Location: index.php?module=$gui&action=edit&id=$id"); } exit; } } public function VorgangAnlegen() { //print_r($_SERVER['HTTP_REFERER']); $titel = $this->app->Secure->GetGET('titel'); $url = parse_url($_SERVER['HTTP_REFERER']); //$url = parse_url("http://dev.eproo.de/~sauterbe/eprooSystem-2009-11-21/webroot/index.php?module=ticket&action=edit&id=1"); //module=ticket&action=edit&id=1 //$url['query'] $params = explode('&',$url['query']); foreach($params as $value){ $attribut = explode('=',$value); $arrPara[$attribut[0]] = (!empty($attribut)?count($attribut):0) > 1?$attribut[1]:''; } $adresse = $this->app->User->GetAdresse(); if($titel==''){ $titel = ucfirst($arrPara['module']) . ' ' . $arrPara['id']; } $href = $url['query']; $this->app->erp->AddOffenenVorgang($adresse, $titel, $href); header('Location: '.$_SERVER['HTTP_REFERER']); } /** * @param int $cacheTime * * @return string */ public function loadChangeLogCacheFile(int $cacheTime = 4): string { $version = $this->app->erp->Version(); $revision = $this->app->erp->Revision(); $tmp = explode('.',$revision); $branch = strtolower($version).'_'.$tmp[0].'.'.$tmp[1]; $blogUrl = "https://{$this->app->Conf->updateHost}/wawision_2016.php?all=1&branch=".$branch; $cacheFile = $this->app->erp->GetTMP().md5($blogUrl); $cacheFile2 = $this->app->erp->GetTMP().md5($blogUrl).'2'; if(!file_exists($cacheFile2)) { if(file_exists($cacheFile)) { @unlink($cacheFile); } } else{ if(trim(file_get_contents($cacheFile2)) != $version.$revision) { @unlink($cacheFile); } } if(!file_exists($cacheFile) || ((time() - filemtime($cacheFile)) > 3600 * $cacheTime)) { if($feed_contents = @file_get_contents($blogUrl)) { $fp = fopen($cacheFile, 'w'); fwrite($fp, $feed_contents); fclose($fp); @file_put_contents($cacheFile2, $version.$revision); } } return $cacheFile; } /** * @param int $hours */ public function loadChangeLogByTime(int $hours = 4): void { $lastTime = (int)$this->app->erp->GetKonfiguration('welcome_changelog_last_save'); if($lastTime > 0 && time() - $lastTime < $hours * 3600) { return; } $this->loadArrFromChangeLogFile(); } /** * @return array */ public function loadArrFromChangeLogFile(): array { $file = $this->loadChangeLogCacheFile(); $this->app->erp->SetKonfigurationValue('welcome_changelog_last_save', time()); if(!is_file($file)){ $this->app->erp->SetKonfigurationValue('welcome_changelog_count', 0); return ['changelog' => [], 'act' => [], 'found' => false, 'types' => [], 'count_new' => 0,]; } $content = file_get_contents($file); if(empty($content)) { $this->app->erp->SetKonfigurationValue('welcome_changelog_count', 0); return ['changelog' => [], 'act' => [], 'found' => false, 'types' => [], 'count_new' => 0,]; } $xml = simplexml_load_string($content); if(empty($xml)) { $this->app->erp->SetKonfigurationValue('welcome_changelog_count', 0); return ['changelog' => [], 'act' => [], 'found' => false, 'types' => [], 'count_new' => 0,]; } $json = json_encode($xml); $array = json_decode($json, true); if(empty($array)) { $this->app->erp->SetKonfigurationValue('welcome_changelog_count', 0); return ['changelog' => [], 'act' => [], 'found' => false, 'types' => [], 'count_new' => 0,]; } $found = false; $akt = []; $version_revision = null; include dirname(dirname(__DIR__)) .'/version.php'; if(isset($version_revision) && $version_revision != '') { $ra = explode('.', $version_revision); if(isset($ra[2]) && $ra[2] != '') { $citems = isset($array['channel']['item'])?count($array['channel']['item']):0; for($i=0;$i<$citems;$i++) { if($found !== false) { if(!empty($array['channel']['item'][$i]['title'])){ $akt['channel']['item'][$i] = $array['channel']['item'][$i]; } unset($array['channel']['item'][$i]); } else { $rev = isset($array['channel']['item'][$i]['guid'])?$array['channel']['item'][$i]['guid']:''; if($rev == '') { $rev = trim(trim($array['channel']['item'][$i]['title']),')'); $rev = trim(substr($rev, strrpos($rev, '(')+4)); } if($rev == $ra[2]) { $found = $i; $akt['channel']['item'][$i] = $array['channel']['item'][$i]; unset($array['channel']['item'][$i]); } } } } } $citems = isset($array['channel']['item'])?count($array['channel']['item']):0; $types = array(); for($i=0;$i<$citems;$i++) { $messageType = explode(' ', ltrim($array['channel']['item'][$i]['description'])); $messageType = strtolower($messageType[0]); if(!array_key_exists($messageType, $types)){ $types[$messageType] = []; } $types[$messageType][] = $array['channel']['item'][$i]; } $this->app->erp->SetKonfigurationValue('welcome_changelog_count', $citems); return ['changelog' => $array, 'act' => $akt, 'found' => $found, 'types' => $types, 'count_new' => $citems,]; } public function WelcomeChangelog() { $this->StartseiteMenu(); $version_revision = null; $revision = $this->app->erp->Revision(); $changeLogArray = $this->loadArrFromChangeLogFile(); $found = $changeLogArray['found']; $array = $changeLogArray['changelog']; $akt = $changeLogArray['act']; $types = $changeLogArray['types']; $this->app->Tpl->Add('TAB1', 'Beispieldaten einspielen'; } $pages[] = $lastPage; return new JsonResponse(['success'=>true, 'pages'=>$pages]); } /** * @param int $addressId * * @return int */ protected function ChangeAddressIdIfCollideWithExampleData(int $addressId): int { $lastAddressIdInExampleDataset = 8; if($addressId > $lastAddressIdInExampleDataset) { return $addressId; } $this->app->DB->Update( sprintf( 'UPDATE `adresse` SET `id` = %d WHERE `id` = %d', $lastAddressIdInExampleDataset + 1, $addressId ) ); if($this->app->DB->affected_rows() > 0) { $addressId = $lastAddressIdInExampleDataset + 1; } return $addressId; } /** * @param int $userId * * @return int */ protected function ChangeUserIdIfCollideWithExampleData(int $userId): int { $lastUserIdInExampleDataset = 3; if($userId > $lastUserIdInExampleDataset) { return $userId; } $this->app->DB->Update( sprintf( 'UPDATE `user` SET `id` = %d WHERE `id` = %d', $lastUserIdInExampleDataset + 1 , $userId ) ); if($this->app->DB->affected_rows() > 0) { $userId = $lastUserIdInExampleDataset + 1; } return $userId; } /** * @return JsonResponse */ protected function HandleInviteTeamClickByClick() { $userNames = []; $members = []; $needToPreventExampleImportFailure = !empty(erpAPI::Ioncube_Property('testlizenz')) && !empty(erpAPI::Ioncube_Property('iscloud')); for($i = 0; $i < 5; $i++) { $userName = $this->app->Secure->GetPOST('teamMemberName'.($i > 0?(string)$i:'')); if(empty($userName)) { continue; } if(in_array($userName, $userNames)) { return new JsonResponse(['error'=>'Usernamen sind identisch'],JsonResponse::HTTP_BAD_REQUEST); } $userNames[] = $userName; $userEmail = $this->app->Secure->GetPOST('teamMemberEmail'.($i > 0?(string)$i:'')); if(empty($userEmail)) { return new JsonResponse(['error'=>'Bitte füllen Sie die Email-Adresse aus'],JsonResponse::HTTP_BAD_REQUEST); } $userRole = $this->app->Secure->GetPOST('teamMemberRole'.($i > 0?(string)$i:'')); if( $this->app->DB->Select(sprintf("SELECT COUNT(`id`) FROM `user` WHERE `username` = '%s'", $userName)) > 0 || $this->app->DB->Select(sprintf("SELECT COUNT(`id`) FROM `adresse` WHERE `name` = '%s'", $userName)) > 0 ) { return new JsonResponse( ['error'=>sprintf('Usernamen %s existiert bereits', $userName)], JsonResponse::HTTP_BAD_REQUEST ); } $members[] = ['username' => $userName, 'email' => $userEmail, 'role' => $userRole]; } if(empty($members)) { return new JsonResponse(['success'=>true]); } $projectId = $this->app->DB->Select( 'SELECT `id` FROM `projekt` WHERE `geloescht` = 0 ORDER BY `oeffentlich` DESC LIMIT 1' ); foreach($members as $member) { $password = $member['username']; $this->app->DB->Insert( sprintf( "INSERT INTO `adresse` (`name`, `email`, `projekt`) VALUES ('%s', '%s', %d)", $member['username'], $member['email'], $projectId ) ); $addressId = (int)$this->app->DB->GetInsertID(); if($needToPreventExampleImportFailure) { $addressId = $this->ChangeAddressIdIfCollideWithExampleData($addressId); } $this->app->erp->AddRolleZuAdresse($addressId, 'Mitarbeiter', 'von', 'Projekt', $projectId); $vorlage = $this->app->DB->real_escape_string( $this->app->DB->Select( sprintf( "SELECT `bezeichnung` FROM `uservorlage` WHERE `bezeichnung` = '%s'", $member['role'] ) ) ); $this->app->DB->Insert( sprintf( "INSERT INTO `user` (`username`, `passwordmd5`, `hwtoken`, `type`, `repassword`, `externlogin`,`firma`,`fehllogins`, `adresse`,`standarddrucker`,`settings`, `activ`,`vorlage`,`role`) VALUES ('%s', '%s', 0, 'benutzer', 0, 1,1,0, %d,0,'',1,'%s','%s')", $member['username'], md5($password), $addressId, $vorlage, $member['role'] ) ); $newUserId = (int)$this->app->DB->GetInsertID(); if($needToPreventExampleImportFailure){ $newUserId = $this->ChangeUserIdIfCollideWithExampleData($newUserId); } $this->app->erp->insertDefaultUserRights($newUserId); if($vorlage !== '') { $this->app->erp->AbgleichBenutzerVorlagen($newUserId); } $link = $this->app->Location->getServer(); $this->app->erp->MailSend( $this->app->erp->Firmendaten('email'), $this->app->erp->Firmendaten('absendername'), $member['email'], $member['username'], 'Einladung', sprintf( 'Hallo %s,
Willkommen auf Xentral.
Du kannst dich mit den folgenden Zugangsdaten einloggen
Username: %s
Passwort: %s
Hier gehts los', $member['username'], $member['username'], $password, $link ), '',0,true,'','', true ); } return new JsonResponse(['success'=>true]); } /** * @return JsonResponse */ protected function HandleChangeRoleClickByClick() { $role = $this->app->Secure->GetPOST('teamMemberRole'); if(empty($role)) { return new JsonResponse( ['error'=>'Bitte eine Rolle angeben!'], JsonResponse::HTTP_BAD_REQUEST ); } $this->app->DB->Update( sprintf( "UPDATE `user` SET `role` = '%s' WHERE `id` = %d", $role, $this->app->User->GetID() ) ); return new JsonResponse(['success'=>true]); } /** * @return JsonResponse */ protected function HandlePasswordChangeClickByClick() { $password = $this->app->Secure->GetPOST('setPassword'); $repassword = $this->app->Secure->GetPOST('repeatPassword'); $role = (string)$this->app->Secure->GetPOST('teamMemberRole'); $otherRole = (string)$this->app->Secure->GetPOST('teamMemberOtherRole'); $hasUserRole = !empty($this->app->User->GetField('role')); if($otherRole !== '' && ($role === '' || $role === 'Sonstiges')) { $role = $otherRole; } if(!$hasUserRole && $role === '' && (string)$this->app->DB->Select( sprintf( 'SELECT `role` FROM `user` WHERE `id` = %d', $this->app->User->GetID() ) ) ) { return new JsonResponse( ['error'=>'Bitte gebe eine Rolle ein!'], JsonResponse::HTTP_BAD_REQUEST ); } $passwordunescaped = $this->app->Secure->GetPOST('setPassword', '', '', 'noescape'); if(empty($password)) { return new JsonResponse( ['error'=>'Passworteingabe falsch! Bitte geben Sie ein Passwort ein!'], JsonResponse::HTTP_BAD_REQUEST ); } if(strlen($password) < 8) { return new JsonResponse( ['error'=>'Passworteingabe falsch! Das Passwort muss mindestens 8 Zeichen enthalten!'], JsonResponse::HTTP_BAD_REQUEST ); } if($password !== $repassword){ return new JsonResponse( ['error'=>'Passworteingabe falsch! Bitte zwei mal das gleiche Passwort eingeben!'], JsonResponse::HTTP_BAD_REQUEST ); } if($password === $this->app->User->GetUsername()){ return new JsonResponse( ['error'=>'Das Passwort darf nicht dem Username entsprechen!'], JsonResponse::HTTP_BAD_REQUEST ); } $this->changeUserPassword($password, $passwordunescaped); if(!empty($role)) { $this->app->DB->Update( sprintf( "UPDATE `user` SET `role` = '%s' WHERE `id` = %d", $role, $this->app->User->GetID() ) ); } return new JsonResponse(['success'=>true]); } /** * @param string $password * @param string $passwordunescaped * * @return string|null */ protected function changeUserPassword($password, $passwordunescaped) { if(!empty($password) && $password !== $this->app->User->GetUsername()){ $this->app->DB->Select("SELECT u.passwordhash FROM `user` AS u WHERE u.id = '" . $this->app->User->GetID() . "' LIMIT 1"); if(!$this->app->DB->error()){ $options = array( 'cost' => 12, ); $passwordhash = @password_hash($passwordunescaped, PASSWORD_BCRYPT, $options); if(!empty($passwordhash)){ $this->app->DB->Update( "UPDATE `user` SET `passwordhash` = '" . $this->app->DB->real_escape_string($passwordhash) . "', `password` = '', `passwordmd5` = '', `passwordsha512` = '', `salt` = '' WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1" ); return '
{|Passwort wurde erfolgreich geändert!|}
';
}
}else{
$salt = $this->app->DB->Select("SELECT u.salt FROM `user` AS u WHERE u.id = '" . $this->app->User->GetID() . "' LIMIT 1");
if(!$this->app->DB->error()){
if(empty($salt)){
$salt = hash('sha512', microtime(true));
}
$passwordsha512 = hash('sha512', $password . $salt);
if(!empty($salt) && !empty($passwordsha512)){
$this->app->DB->Update(
"UPDATE `user` SET
`password` = '',
`passwordmd5` = '',
`salt` = '{$salt}',
`passwordsha512` = '{$passwordsha512}'
WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1"
);
}else{
$this->app->DB->Update(
"UPDATE `user` SET
`password` = '',
`passwordmd5` = MD5('{$password}'),
`salt` = '{$salt}',
`passwordsha512` = '{$passwordsha512}'
WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1"
);
}
}else{
$this->app->DB->Update(
"UPDATE `user` SET
`password` = '',
`passwordmd5` = MD5('{$password}')
WHERE `id`='" . $this->app->User->GetID() . "' LIMIT 1"
);
}
}
}
return null;
}
/**
* Passwort-Änderung
*
* @return void
*/
protected function HandlePasswordChange()
{
$password = $this->app->Secure->GetPOST('password');
$repassword = $this->app->Secure->GetPOST('passwordre');
$passwordunescaped = $this->app->Secure->GetPOST('password', '', '', 'noescape');
if(!empty($password) && $password !== $repassword){
$this->app->Tpl->Set('MESSAGE', '{|Passworteingabe falsch! Bitte zwei mal das gleiche Passwort eingeben!|}
');
return;
}
if($password === $this->app->User->GetUsername()){
$this->app->Tpl->Set('MESSAGE', '{|Das Passwort darf nicht dem Username entsprechen!|}
');
return;
}
$message = $this->changeUserPassword($password, $passwordunescaped);
if($message !== null) {
$this->app->Tpl->Set('MESSAGE', $message);
}
}
/**
* Profileinstellungen speichern
*
* @return void
*/
protected function HandleProfileSettingsSave()
{
$submit_startseite = $this->app->Secure->GetPOST('submit_startseite');
$startseite = $this->app->Secure->GetPOST('startseite');
$chat_popup = (int)$this->app->Secure->GetPOST('chat_popup');
$callcenter_notification = (int)$this->app->Secure->GetPOST('callcenter_notification');
$defaultcolor = $this->app->Secure->GetPOST('defaultcolor');
if($defaultcolor === 'transparent') $defaultcolor = '';
$sprachebevorzugen = $this->app->Secure->GetPOST('sprachebevorzugen');
// umzug in tabelle user
if($this->app->User->GetParameter('welcome_defaultcolor_fuer_kalender') != ''){
$defaultcolor = $this->app->Secure->GetPOST('defaultcolor');
$this->app->DB->Update("UPDATE `user` SET `defaultcolor` = '{$defaultcolor}' WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1");
$this->app->User->SetParameter('welcome_defaultcolor_fuer_kalender', '');
}
if($sprachebevorzugen != ''){
$sprachebevorzugen = $this->app->Secure->GetPOST('sprachebevorzugen');
$this->app->DB->Update("UPDATE `user` SET `sprachebevorzugen` = '$sprachebevorzugen' WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1");
}
if($submit_startseite != ''){
$this->app->DB->Update(
"UPDATE `user` SET
`startseite` = '{$startseite}',
`chat_popup` = '{$chat_popup}',
`callcenter_notification` = '{$callcenter_notification}',
`defaultcolor` = '{$defaultcolor}'
WHERE `id` = '" . $this->app->User->GetID() . "' LIMIT 1"
);
}
}
/**
* Vorhandenes Profilbild löschen
*
* @return void
*/
protected function HandleProfilePictureDeletion()
{
if(!empty($this->app->Secure->GetPOST('delete_datei'))){
$adresse = $this->app->User->GetAdresse();
$dateien = $this->app->DB->SelectArr(
"SELECT d.id
FROM datei AS d
INNER JOIN datei_stichwoerter AS ds ON d.id = ds.datei
WHERE d.geloescht = 0 AND ds.objekt LIKE 'Adressen' AND ds.parameter = '" . $adresse . "' AND ds.subjekt LIKE 'Profilbild'
ORDER BY d.id DESC"
);
if(!empty($dateien)){
foreach ($dateien as $datei) {
$this->app->erp->DeleteDatei($datei['id']);
}
}
}
}
/**
* Neues Profilbild hochladen
*
* @return void
*/
protected function HandleProfilePictureUpload()
{
if(!empty($this->app->Secure->GetPOST('submit_datei'))){
$fileName = $this->app->DB->real_escape_string($_FILES['upload']['name']);
$fileTmp = $this->app->DB->real_escape_string($_FILES['upload']['tmp_name']);
if(empty($fileTmp)){
$this->app->Tpl->Set('UPLOADERROR', "Keine Datei ausgewählt!
");
$this->app->erp->EnableTab("tabs-3");
}else{
$addressId = $this->app->User->GetAdresse();
$fileid = $this->app->erp->CreateDatei($fileName, 'Profilbild', '', '', $fileTmp, $this->app->User->GetName());
$this->app->erp->AddDateiStichwort($fileid, 'Profilbild', 'Adressen', $addressId);
}
}
}
/**
* API-Account für mobile Apps de-/aktivieren
*
* @return void
*/
protected function HandleMobileAppsAccount()
{
$hasPermission = (bool)$this->app->erp->RechteVorhanden('welcome','mobileapps');
if (!$hasPermission) {
$this->app->Tpl->Set('MESSAGE', 'Sie haben nicht die erforderlichen Rechte für einen API-Account!
');
return;
}
// API-Account anlegen und aktivieren
if(!empty($this->app->Secure->GetPOST('mobile_app_api_create'))){
$title = $this->app->User->GetName() . ' / Mobile-Dashboard';
$username = $this->app->User->GetUsername() . '_dashboard';
$password = md5(uniqid('', true));
$sql = sprintf(
"INSERT INTO `api_account`
(`id`, `bezeichnung`, `initkey`, `importwarteschlange_name`, `event_url`, `remotedomain`, `aktiv`,
`importwarteschlange`, `cleanutf8`, `uebertragung_account`, `permissions`)
VALUES (NULL, '%s', '%s', '', '', '%s', 1, 0, 1, 0 , '%s')",
$this->app->DB->real_escape_string($title),
$this->app->DB->real_escape_string($password),
$this->app->DB->real_escape_string($username),
$this->app->DB->real_escape_string(json_encode(['mobile_app_communication']))
);
$this->app->DB->Insert($sql);
$apiAccountId = (int)$this->app->DB->Select(
sprintf(
"SELECT a.id FROM `api_account` AS `a` WHERE a.remotedomain = '%s' LIMIT 1",
$this->app->DB->real_escape_string($username)
)
);
$this->app->User->SetParameter('mobile_apps_api_account_id', $apiAccountId);
if ($apiAccountId === 0) {
$this->app->Tpl->Set('MESSAGE', 'API-Account konnte nicht angelegt werden!
');
}
}
// API-Account aktivieren
if(!empty($this->app->Secure->GetPOST('mobile_app_api_activate'))){
$apiAccountId = (int)$this->app->User->GetParameter('mobile_apps_api_account_id');
$this->app->DB->Update("UPDATE api_account SET aktiv = 1 WHERE id = '{$apiAccountId}' LIMIT 1");
}
// API-Account deaktivieren
if(!empty($this->app->Secure->GetPOST('mobile_app_api_deactivate'))){
$apiAccountId = (int)$this->app->User->GetParameter('mobile_apps_api_account_id');
$this->app->DB->Update("UPDATE api_account SET aktiv = 0 WHERE id = '{$apiAccountId}' LIMIT 1");
}
}
private function handleTOTPRegenerate(){
/** @var TOTPLoginService $totpLoginManager */
$totpLoginManager = $this->app->Container->get('TOTPLoginService');
$userID = $this->app->User->GetID();
$totpLoginManager->regenerateUserSecret($userID);
$redirect = RedirectResponse::createFromUrl('index.php?module=welcome&action=settings');
$redirect->send();
$this->app->ExitXentral();
}
private function HandleTOTPToggle(){
/** @var TOTPLoginService $totpLoginManager */
$totpLoginManager = $this->app->Container->get('TOTPLoginService');
$userId = $this->app->User->GetID();
if($totpLoginManager->isTOTPEnabled($userId)){
$totpLoginManager->disableTotp($userId);
}else{
$totpLoginManager->enableTotp($userId);
}
$redirect = RedirectResponse::createFromUrl('index.php?module=welcome&action=settings');
$redirect->send();
$this->app->ExitXentral();
}
protected function HandleGoogleMailAuth()
{
/** @var Request $request */
$request = $this->app->Container->get('Request');
$email = $request->post->get('gmail_address');
$doAuthorize = $request->post->has('submit_authorize_gmail');
$doTest = $request->post->has('submit_testmail_gmail');
if (empty($email)) {
$this->app->Tpl->Add(
'MSG_NO_GMAILAPI',
'Fehler: Google E-Mail ist ein Pflichtfeld.
'
);
return;
}
/** @var GoogleAccountGateway $gateway */
$gateway = $this->app->Container->get('GoogleAccountGateway');
/** @var GoogleAccountService $service */
$service = $this->app->Container->get('GoogleAccountService');
try {
$account = $gateway->getAccountByUser((int)$this->app->User->GetID());
} catch (Exception $e) {
$account = $service->createAccount((int)$this->app->User->GetID(), null, null);
}
$props = $gateway->getAccountProperties($account->getId());
$props = $props->set('gmail_address', $email);
$service->saveAccountProperties($account->getId(), $props);
if ($doAuthorize && !$gateway->hasAccountScope($account->getId(), GoogleScope::MAIL)) {
/** @var Session $session */
$session = $this->app->Container->get('Session');
/** @var GoogleAuthorizationService $authorizer */
$authorizer = $this->app->Container->get('GoogleAuthorizationService');
$redirect = $authorizer->requestScopeAuthorization(
$session,
[GoogleScope::MAIL],
'index.php?module=welcome&action=settings'
);
SessionHandler::commitSession($session);
$redirect->send();
$this->app->ExitXentral();
}
if (!$doAuthorize && $doTest) {
$this->HandleGoogleMailTest();
}
RedirectResponse::createFromUrl('?module=welcome&action=settings')
->send();
$this->app->ExitXentral();
}
protected function HandleGoogleMailTest()
{
/** @var Request $request */
$request = $this->app->Container->get('Request');
if (!$request->post->has('submit_testmail_gmail')) {
$redirect = RedirectResponse::createFromUrl('index.php?module=welcome&action=settings');
$redirect->send();
$this->app->ExitXentral();
}
/** @var GoogleAccountGateway $gateway */
$gateway = $this->app->Container->get('GoogleAccountGateway');
$success = false;
$error = false;
$userId = (int)$this->app->User->GetID();
$msg = '';
try {
$account = $gateway->getAccountByUser($userId);
$email = $gateway->getAccountProperties($account->getId())->get('gmail_address');
if (empty($email)) {
throw new RuntimeException('Google Account has no email address');
}
} catch (Exception $e) {
$error = true;
$msg = 'Google Account nicht gefunden.
';
}
if (!$error) {
try {
/** @var SystemMailer $mailer */
$mailer = $this->app->Container->get('SystemMailer');
$success = $mailer->composeAndSendEmail(
$email,
$this->app->User->GetName(),
[new EmailRecipient($email, $this->app->User->GetName())],
'Test Email Von Xentral',
'Wenn Sie Diese Test-Email erhalten haben, hat die Verwendung von Google Mail funktioniert.
' ); } catch (Exception $e) { $success = false; } if (!$success) { $msg = 'Das Versenden der Test-Email ist fehlgeschlagen.
Bitte wiederholen Sie den Authorisierungsvorgang.
';
}
}
if (!$error && $success === true) {
$msg = sprintf(
'Eine Test-Email wurde an "%s" verschickt. Bitte überprüfen Sie den Posteingang.
',
$email
);
}
$url = 'index.php?module=welcome&action=settings';
if (!empty($msg)) {
$url .= sprintf('%s&msg=%s', $url, base64_encode($msg));
}
$redirect = RedirectResponse::createFromUrl($url);
$redirect->send();
$this->app->ExitXentral();
}
/**
* @return void
*/
protected function renderGoogleMailSettings()
{
if (!$this->app->Container->has('GoogleCredentialsService')) {
return;
}
/** @var GoogleCredentialsService $credService */
$credService = $this->app->Container->get('GoogleCredentialsService');
if (!$credService->existCredentials()) {
$this->app->Tpl->Add(
'MSG_NO_GMAILAPI',
'Die Google Schnittstelle ist im System nicht aktiv.'
);
$this->app->Tpl->Set('GMAIL_AUTH_DISABLE', 'disabled');
$this->app->Tpl->Set('GMAIL_ADDRESS_DISABLE', 'disabled');
$this->app->Tpl->Set('GMAIL_TESTMAIL_DISABLE', 'disabled');
return;
}
/** @var GoogleAccountGateway $gateway */
$gateway = $this->app->Container->get('GoogleAccountGateway');
try {
$account = $gateway->getAccountByUser((int)$this->app->User->GetID());
} catch (GoogleAccountNotFoundException $e) {
$this->app->Tpl->Set('GMAIL_AUTH_DISABLE', '');
$this->app->Tpl->Set('GMAIL_TESTMAIL_DISABLE', 'disabled');
return;
}
if (!$gateway->hasAccountScope($account->getId(), GoogleScope::MAIL)) {
$this->app->Tpl->Set('GMAIL_TESTMAIL_DISABLE', 'disabled');
}
$props = $gateway->getAccountProperties($account->getId());
if ($props->has('gmail_address')) {
$this->app->Tpl->Set('GMAIL_ADDRESS', $props->get('gmail_address'));
}
//try {
// $gmailUser = $googleApiGate->getGmailApiUserByUser($this->app->User->GetID());
// if ($gmailUser === null) {
// /** @var EmailAccountGateway $emailAccountGate */
// $emailAccountGate = $this->app->Container->get('EmailAccountGateway');
// /** @var EmailBackupAccount $emailAccount */
// $emailAccount = $emailAccountGate->findGmailAccountByUser($this->app->User->GetID());
// if ($emailAccount !== null) {
// /** @var GoogleAccountService $googleApiService */
// $googleApiService = $this->app->Container->get('GoogleApiService');
// try {
// $gmailUser = $googleApiService->createAccount(
// $this->app->User->GetID(),
// GoogleApiAccount::TYPE_MAIL,
// $emailAccount->smtpSenderEmail
// );
// }catch (Exception $e) {}
// }
// }
//} catch (Exception $e) {
// $gmailUser = null;
//}
}
protected function HandleGoogleCalendarSave()
{
/** @var Request $request */
$request = $this->app->Container->get('Request');
$doAuthorize = $request->post->has('authorize_google_calendar');
$doImport = $request->post->has('import_google_calendar');
/** @var GoogleAccountGateway $gateway */
$gateway = $this->app->Container->get('GoogleAccountGateway');
/** @var GoogleAccountService $service */
$service = $this->app->Container->get('GoogleAccountService');
try {
$account = $gateway->getAccountByUser((int)$this->app->User->GetID());
} catch (Exception $e) {
$account = $service->createAccount((int)$this->app->User->GetID(), null, null);
}
if ($doAuthorize && !$gateway->hasAccountScope($account->getId(), GoogleScope::CALENDAR)) {
/** @var Session $session */
$session = $this->app->Container->get('Session');
/** @var GoogleAuthorizationService $authorizer */
$authorizer = $this->app->Container->get('GoogleAuthorizationService');
$redirect = $authorizer->requestScopeAuthorization(
$session,
[GoogleScope::CALENDAR],
'index.php?module=welcome&action=settings&selectcalendar=1'
);
SessionHandler::commitSession($session);
$redirect->send();
$this->app->ExitXentral();
}
if (!$doAuthorize && $doImport) {
$this->HandleGoogleCalendarImport();
}
RedirectResponse::createFromUrl('?module=welcome&action=settings')
->send();
$this->app->ExitXentral();
}
protected function HandleGoogleCalendarImport()
{
/** @var Request $request */
$request = $this->app->Container->get('Request');
if (!$request->post->has('import_google_calendar')) {
$redirect = RedirectResponse::createFromUrl('index.php?module=welcome&action=settings');
$redirect->send();
$this->app->ExitXentral();
}
$msg = '';
$userId = (int)$this->app->User->GetID();
try{
/** @var GoogleCalendarClientFactory $factory */
$factory = $this->app->Container->get('GoogleCalendarClientFactory');
/** @var GoogleCalendarSynchronizer $synchronizer */
$synchronizer = $this->app->Container->get('GoogleCalendarSynchronizer');
$client = $factory->createClient($userId);
$synchronizer->importAbsoluteEvents($client);
$msg = '
Termine erfolgreich Importiert.
';
}
catch (GoogleAccountNotFoundException $e) {
$msg = 'Fehler: Keine Verbindung zur Google-API
';
}
catch (GoogleCalendarSyncException $e) {
$msg = 'Fehler beim Terminimport
';
}
catch (Exception $e) {
$msg = sprintf('Fehler: %s
', $e->getMessage());
}
$url = 'index.php?module=welcome&action=settings';
if (!empty($msg)) {
$url .= sprintf('&msg=%s', base64_encode($msg));
}
$redirect = RedirectResponse::createFromUrl($url);
$redirect->send();
$this->app->ExitXentral();
}
protected function renderGoogleCalendarSettings()
{
if (!$this->app->Container->has('GoogleCredentialsService')) {
return;
}
/** @var GoogleCredentialsService $credService */
$credService = $this->app->Container->get('GoogleCredentialsService');
if (!$credService->existCredentials()) {
$this->app->Tpl->Add(
'MSG_GOOGLE_CALENDAR',
'Die Goolge Schnittstelle ist im System nicht aktiv.'
);
$this->app->Tpl->Set('GOOGLE_AUTH_DISABLE', 'disabled');
$this->app->Tpl->Set('GOOGLE_SYNC_DISABLE', 'disabled');
return;
}
/** @var GoogleAccountGateway $gateway */
$gateway = $this->app->Container->get('GoogleAccountGateway');
try {
$userId = (int)$this->app->User->GetID();
$account = $gateway->getAccountByUser($userId);
} catch (GoogleAccountNotFoundException $e) {
$this->app->Tpl->Set('GOOGLE_AUTH_DISABLE', 'disabled');
$this->app->Tpl->Set('GOOGLE_SYNC_DISABLE', 'disabled');
return;
}
$this->app->Tpl->Set('GOOGLE_AUTH_DISABLE', '');
$this->app->Tpl->Set('GOOGLE_SYNC_DISABLE', '');
if (!$gateway->hasAccountScope($account->getId(), GoogleScope::CALENDAR)) {
$this->app->Tpl->Set('GOOGLE_SYNC_DISABLE', 'disabled');
return;
}
$props = $gateway->getAccountProperties($account->getId());
$this->app->Tpl->Set('GOOGLE_CALENDAR', $props->get('selected_calendar'));
/** @var Request $request */
$request = $this->app->Container->get('Request');
if ($request->get->getInt('selectcalendar') !== 1) {
return;
}
/** @var GoogleCalendarClientFactory $factory */
$factory = $this->app->Container->get('GoogleCalendarClientFactory');
$client = $factory->createClient($userId);
$calendar = $client->getPrimaryCalendar();
$this->app->Tpl->Set('GOOGLE_CALENDAR', $calendar->getId());
/** @var GoogleAccountService $service */
$service = $this->app->Container->get('GoogleAccountService');
$props = $props->set('selected_calendar', $calendar->getId());
$service->saveAccountProperties($account->getId(), $props);
$redirect = RedirectResponse::createFromUrl('index.php?module=welcome&action=settings');
$redirect->send();
$this->app->ExitXentral();
}
/**
* @return NotificationService
*/
protected function GetNotificationService()
{
return $this->app->Container->get('NotificationService');
}
/**
* @return DownloadSpoolerService
*/
protected function GetDownloadSpoolerService()
{
return $this->app->Container->get('DownloadSpoolerService');
}
/**
* @return DownloadSpoolerGateway
*/
protected function GetDownloadSpoolerGateway()
{
return $this->app->Container->get('DownloadSpoolerGateway');
}
}