mirror of
https://github.com/OpenXE-org/OpenXE.git
synced 2024-11-15 12:37:14 +01:00
1081 lines
30 KiB
PHP
1081 lines
30 KiB
PHP
<?php
|
|
/*
|
|
**** COPYRIGHT & LICENSE NOTICE *** DO NOT REMOVE ****
|
|
*
|
|
* Xentral (c) Xentral ERP Sorftware GmbH, Fuggerstrasse 11, D-86150 Augsburg, * Germany 2019
|
|
*
|
|
* This file is licensed under the Embedded Projects General Public License *Version 3.1.
|
|
*
|
|
* You should have received a copy of this license from your vendor and/or *along with this file; If not, please visit www.wawision.de/Lizenzhinweis
|
|
* to obtain the text of the corresponding license version.
|
|
*
|
|
**** END OF COPYRIGHT & LICENSE NOTICE *** DO NOT REMOVE ****
|
|
*/
|
|
?>
|
|
<?php
|
|
|
|
|
|
class FormHandlerField
|
|
{
|
|
var $parsetarget;
|
|
var $htmlobject;
|
|
|
|
var $identifier;
|
|
|
|
var $delmsg;
|
|
var $delmsgcol;
|
|
|
|
var $mandatoryok=true;
|
|
var $mandatorymsg;
|
|
var $mandatoryrule;
|
|
var $mandatorycheck=false;
|
|
var $mandatoryparse='MSG';
|
|
|
|
var $htmlformat;
|
|
var $dbformat;
|
|
|
|
var $value;
|
|
|
|
/**
|
|
* FormHandlerField constructor.
|
|
*
|
|
* @param $identifier
|
|
* @param $htmlobject
|
|
*/
|
|
function __construct($identifier,$htmlobject)
|
|
{
|
|
$this->htmlobject = $htmlobject;
|
|
$this->identifier = $identifier;
|
|
}
|
|
|
|
/**
|
|
* @param $parsetarget
|
|
*/
|
|
function ParseTarget($parsetarget)
|
|
{
|
|
$this->parsetarget = $parsetarget;
|
|
}
|
|
}
|
|
|
|
class HTMLListEntry { var $htmlobject; var $parsetarget; var $dbvalue; var $htmlvalue;}
|
|
class MandatoryEntry { var $rule; var $message; var $messageparsetarget; }
|
|
class CallbackEntry { var $function;}
|
|
|
|
class FormActionHandler
|
|
{
|
|
private $app; //ok
|
|
private $template; //ok
|
|
private $name; //ok
|
|
private $table; //ok
|
|
private $submitname;
|
|
public $locafterexe;
|
|
private $parsetarget; //ok
|
|
private $pkname; //ok
|
|
private $pkvalue;
|
|
private $specialaction;
|
|
private $event;
|
|
|
|
private $replacecallbacks;
|
|
|
|
private $formaction;
|
|
private $values;
|
|
|
|
public $HTMLList;
|
|
private $MandatoryList;
|
|
private $CallbackList;
|
|
|
|
function __construct(&$app,$name)
|
|
{
|
|
$this->app = $app;
|
|
$this->name = base64_encode($name);
|
|
$this->HTMLList = array();
|
|
$this->MandatoryList = array();
|
|
$this->CallbackList = array();
|
|
}
|
|
|
|
function UseTable($table,$pkname="id")
|
|
{
|
|
$this->table = $table;
|
|
$this->pkname = $pkname;
|
|
}
|
|
|
|
function UseTemplate($template,$parsetarget)
|
|
{
|
|
$this->template = $template;
|
|
$this->parsetarget = $parsetarget;
|
|
}
|
|
|
|
function NewField($htmlobject,$parsetarget="")
|
|
{
|
|
$entry = new HTMLListEntry();
|
|
|
|
if($parsetarget=="")
|
|
$parsetarget = strtoupper($htmlobject->name);
|
|
|
|
$entry->htmlobject=$htmlobject;
|
|
if(get_class($htmlobject)!="BlindField")
|
|
{
|
|
if($this->app->Secure->GetPOST('ishtml_cke_'.$htmlobject->name))
|
|
{
|
|
$entry->htmlvalue = $this->app->Secure->GetPOST($htmlobject->name, "nojs");
|
|
}else{
|
|
$entry->htmlvalue = $this->app->Secure->GetPOST($htmlobject->name);
|
|
}
|
|
}
|
|
else
|
|
$entry->htmlvalue = $htmlobject->value;
|
|
|
|
$entry->parsetarget=$parsetarget;
|
|
|
|
$this->HTMLList[$htmlobject->name]=$entry;
|
|
}
|
|
|
|
/* alt
|
|
function AddCallbackFromDB($field, $function)
|
|
{
|
|
$this->CallbackFromList[$field]=$function;
|
|
}
|
|
|
|
function AddCallbackToDB($field, $function)
|
|
{
|
|
$this->CallbackToList[$field]=$function;
|
|
}
|
|
*/
|
|
|
|
function ReplaceFunction($fieldname,&$ref,$callback)
|
|
{
|
|
$this->replacecallbacks[$fieldname] = array($fieldname,&$ref,$callback);
|
|
}
|
|
|
|
|
|
|
|
function AddMandatory($field, $rule,$message="Fehler",$msgparsetarget="MSG")
|
|
{
|
|
$entry = new MandatoryEntry();
|
|
|
|
$entry->rule = $rule;
|
|
$entry->message = $message;
|
|
$entry->msgparsetarget = $msgparsetarget;
|
|
|
|
$this->MandatoryList[$field]=$entry;
|
|
}
|
|
|
|
|
|
function SpecialActionAfterExecute($event,$href)
|
|
{
|
|
$this->specialaction = 1;
|
|
$this->event = $event;
|
|
$this->href = $href;
|
|
}
|
|
|
|
function SpecialActionAfterExecuteBad($event,$href)
|
|
{
|
|
$this->bad_specialaction = 1;
|
|
$this->bad_event = $event;
|
|
$this->bad_href = $href;
|
|
}
|
|
|
|
|
|
|
|
function ActionAfterExecute()
|
|
{
|
|
$module = $this->app->Secure->GetGET("module");
|
|
$action = $this->app->Secure->GetGET("action");
|
|
$id = $this->app->Secure->GetGET("id");
|
|
if($this->specialaction==1)
|
|
{
|
|
if($this->event == "close_refresh")
|
|
{
|
|
|
|
echo "<script>
|
|
parent.document.location.href=\"{$this->href}\";
|
|
</script>";
|
|
exit;
|
|
}
|
|
else {
|
|
header("Location: ".$this->href);
|
|
exit;
|
|
}
|
|
}
|
|
|
|
// wenn location after execute
|
|
if($action=="create") {
|
|
$msg = base64_encode("<div class=\"error2\">Die Daten wurden gespeichert!</div>");
|
|
header("Location: index.php?module=$module&action=edit&id=".$this->pkvalue."&msg=".$msg);
|
|
exit;
|
|
}
|
|
else if($action=="edit")
|
|
{
|
|
$msg = base64_encode("<div class=\"error2\">Die Daten wurden gespeichert!</div>");
|
|
header("Location: index.php?module=$module&action=edit&id=".$id."&msg=".$msg);
|
|
exit;
|
|
}
|
|
|
|
$this->PrintForm();
|
|
}
|
|
|
|
function FormhandlerEvent()
|
|
{
|
|
// add formhandler action
|
|
$this->app->Tpl->Set('FORMHANDLEREVENT',
|
|
"<input type=\"hidden\" name=\"phpwf_formhandlerevent_{$this->name}\" value=\"go\">");
|
|
|
|
if($this->app->Secure->GetPOST("phpwf_formhandlerevent_{$this->name}")=="go") {
|
|
return true;
|
|
} else {
|
|
// bei false wird das originale formualr angezeigt (also das erste mal)
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function PrintForm()
|
|
{
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
$fieldname = $entry->htmlobject->name;
|
|
$arr = isset($this->replacecallbacks[$fieldname])?$this->replacecallbacks[$fieldname]:null;
|
|
if($arr && $arr[0]==$entry->htmlobject->name)
|
|
{
|
|
//aufruf der replacecallback funktion
|
|
$_fnname = $arr[2];
|
|
$entry->htmlobject->value = $arr[1]->$_fnname(0,$entry->htmlobject->value,0);
|
|
}
|
|
|
|
$entry->htmlobject->value = str_replace("\\\\\\\"",'"',isset($entry->htmlobject->value)?$entry->htmlobject->value:'');
|
|
$entry->htmlobject->value = str_replace("NONBLOCKINGZERO","",$entry->htmlobject->value);
|
|
$entry->htmlobject->value = str_replace('"','"',$entry->htmlobject->value);
|
|
|
|
$this->app->Tpl->Set($entry->parsetarget,$entry->htmlobject->Get().$entry->htmlobject->GetClose());
|
|
}
|
|
// anzeige
|
|
$this->app->Tpl->Parse($this->parsetarget,$this->template);
|
|
}
|
|
|
|
|
|
function CallbackAndMandatorycheck($returnonly = false)
|
|
{
|
|
// check mandatory
|
|
// gehe alle html felder durch und pruefe bei jedem ob es eine regel gibt
|
|
$errors=false;
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
$rule = $this->MandatoryList[$name]->rule;
|
|
$msg = $this->MandatoryList[$name]->message;
|
|
$parsetarget = $this->MandatoryList[$name]->msgparsetarget;
|
|
|
|
$value = $this->HTMLList[$name]->htmlvalue;
|
|
|
|
// wert wieder ins htmlfeld legen
|
|
if(!$returnonly)$this->HTMLList[$name]->htmlobject->value = $entry->htmlvalue;
|
|
|
|
if($rule!="") {
|
|
if(!$this->app->Secure->RuleCheck($value,$rule)) {
|
|
$errors = true;
|
|
// wert entspricht nicht der regel
|
|
if(!$returnonly)$this->app->Tpl->Add($parsetarget,"<font color=\"red\"> $msg</font>");
|
|
}
|
|
}
|
|
}
|
|
|
|
// wenn daten im falschen format daliegen, dann return false
|
|
if($errors)
|
|
return false;
|
|
|
|
// sonst callback funktionen aufrufen um daten richtig zu formatieren
|
|
// htmlobject->value mit FromDB und value mit ToDB
|
|
//and callback functions
|
|
|
|
// TODOOOOOOOOO ACHTUNG DAS HIER IST 100% FALSCH!!!
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
// werte in dbvalue felder richtig setzen
|
|
if(!$returnonly)$this->HTMLList[$name]->dbvalue=$entry->htmlvalue;
|
|
//$entry->
|
|
}
|
|
// TODOOOOOOOOO
|
|
return true;
|
|
}
|
|
|
|
function Search()
|
|
{
|
|
|
|
$this->PrintForm();
|
|
}
|
|
|
|
|
|
function Edit()
|
|
{
|
|
if($this->FormhandlerEvent()) {
|
|
// wenn es fehlerfrei ist dann irgendwo hin sonst wieder das formular anzeigen
|
|
if($this->CallbackAndMandatorycheck() && $this->app->erp->commonreadonly!="1"){
|
|
// hier aenderung an db machen
|
|
$tmp = $this->app->ObjAPI->Get($this->table);
|
|
$tmp->Select($this->app->Secure->GetGET("id"));
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
$methodname = "Set".ucfirst($name);
|
|
if(method_exists($tmp,$methodname)){
|
|
$value = $entry->dbvalue;
|
|
// spezial konvertierung
|
|
$arr = $this->replacecallbacks[$name];
|
|
if($arr[0]==$name)
|
|
{
|
|
// aufruf der replacecallback funktion
|
|
$_name = $arr[2];
|
|
$value = $arr[1]->$_name(1,$value,1); // wenn speichern dann 1 bei uebernehmen = 0
|
|
}
|
|
|
|
$tmp->$methodname($value);
|
|
}
|
|
}
|
|
if($this->table != 'shopexport')$this->app->erp->StartChangeLog($this->table);
|
|
$tmp->Update();
|
|
$this->app->erp->WriteChangeLog();
|
|
// $this->app->Tpl->Add('MESSAGE','<div class="error2">Die Daten wurden erfolgreich gespeichert!</div>');
|
|
// passt und speichern
|
|
//if($this->locafterexe!="")
|
|
if(!empty($this->table) && method_exists($tmp, 'GetId')){
|
|
$table = $this->table;
|
|
$tableId = $tmp->GetId();
|
|
$this->app->erp->RunHook($table . '_update', 1, $tableId);
|
|
}
|
|
|
|
$this->ActionAfterExecute();
|
|
// else
|
|
// $this->PrintForm();
|
|
} else {
|
|
$id = $this->app->Secure->GetGET("id");
|
|
$module = $this->app->Secure->GetGET("module");
|
|
if($id > 0 && $module != '' && $this->app->DB->Select("SELECT id FROM $module WHERE id = '$id' AND schreibschutz = 1 LIMIT 1"))
|
|
{
|
|
}else{
|
|
// if($this->app->erp->commonreadonly!="1")
|
|
$this->app->Tpl->Set('MESSAGE',"<div class=\"error\">Bitte alle Pflichtfelder ausfüllen!</div>");
|
|
}
|
|
$this->PrintForm();
|
|
}
|
|
} else {
|
|
//TODOOOOOOOOO
|
|
// hole daten
|
|
|
|
$tmp = $this->app->ObjAPI->Get($this->table);
|
|
$id = $this->app->Secure->GetGET("id");
|
|
|
|
// wenn es ein id feld mit wert gibt dann dies als id verwenden!!!!
|
|
if(isset($this->HTMLList) && isset($this->HTMLList['id']) && $this->HTMLList['id']->htmlobject->value!="")
|
|
$id = $this->HTMLList['id']->htmlobject->value;
|
|
$tmp->Select($id);
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
$methodname = "Get".ucfirst($name);
|
|
//echo $this->app->Secure->GetGET("id").' '.$methodname.' '.$tmp->$methodname().'<br>';
|
|
if(method_exists($tmp,$methodname))
|
|
$this->HTMLList[$name]->htmlobject->value = $tmp->$methodname();
|
|
|
|
}
|
|
//TODOOOOOOOOO
|
|
$this->PrintForm();
|
|
}
|
|
}
|
|
|
|
function Copy()
|
|
{
|
|
//if($this->FormhandlerEvent()) {
|
|
$tmp = $this->app->ObjAPI->Get($this->table);
|
|
$tmp->Select($this->app->Secure->GetGET("id"));
|
|
$tmp->id="";
|
|
$tmp->Create();
|
|
$this->app->erp->ObjektProtokoll($this->table,$tmp->GetId(),$this->table."_create",ucfirst($this->table)." angelegt");
|
|
// passt und speichern
|
|
$this->ActionAfterExecute();
|
|
//}
|
|
}
|
|
|
|
function Create()
|
|
{
|
|
if($this->FormhandlerEvent()) {
|
|
// wenn es fehlerfrei ist dann irgendwo hin sonst wieder das formular anzeigen
|
|
if($this->CallbackAndMandatorycheck()){
|
|
// hier aenderung an db machen
|
|
//echo "jetzt anlegen ";
|
|
|
|
// einmal mit Create ein Objekt erstellen
|
|
$tmp = $this->app->ObjAPI->Get($this->table);
|
|
$tmp->Create();
|
|
$this->app->erp->ObjektProtokoll($this->table,$tmp->GetId(),$this->table."_create",ucfirst($this->table)." angelegt");
|
|
|
|
$this->pkvalue=$tmp->GetId();
|
|
|
|
foreach($this->HTMLList as $name=>$entry){
|
|
//echo $name;
|
|
//echo $entry->dbvalue;
|
|
|
|
$methodname = "Set".ucfirst($name);
|
|
if(method_exists($tmp,$methodname)){
|
|
// spezial konvertierung
|
|
$arr = $this->replacecallbacks[$name];
|
|
$value = $entry->dbvalue;
|
|
if($arr[0]==$name)
|
|
{
|
|
// aufruf der replacecallback funktion
|
|
$_name = $arr[2];
|
|
$value = $arr[1]->$_name(1,$value,1);
|
|
}
|
|
|
|
$tmp->$methodname($value);
|
|
}
|
|
|
|
//echo "hier wuerd ich die dbvalues speichern";
|
|
}
|
|
if($this->table != 'shopexport')$this->app->erp->StartChangeLog($this->table);
|
|
if(!empty($this->table) && method_exists($tmp, 'GetId')){
|
|
$table = $this->table;
|
|
$tableId = $tmp->GetId();
|
|
}
|
|
$tmp->Update();
|
|
$this->app->erp->WriteChangeLog();
|
|
if(!empty($this->table) && method_exists($tmp, 'GetId') && !empty($tableId)){
|
|
$this->app->erp->RunHook($table . '_create', 1, $tableId);
|
|
}
|
|
|
|
// passt und speichern
|
|
$this->ActionAfterExecute();
|
|
} else {
|
|
// validierungsfehler
|
|
//echo "fehler!!!";
|
|
//if($this->app->erp->commonreadonly!="1")
|
|
$this->app->Tpl->Add('MESSAGE',"<div class=\"error\">Bitte alle Pflichtfelder ausfüllen! [TMPSCRIPT]</div>");
|
|
|
|
$this->PrintForm();
|
|
}
|
|
} else {
|
|
// das erste mal aneigen
|
|
//echo "das erste mal";
|
|
$this->PrintForm();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
/// some functions for easy form processing ( save form to db ...)
|
|
class FormHandler
|
|
{
|
|
|
|
var $FormList;
|
|
var $defaultmandatorycss;
|
|
|
|
/**
|
|
* FormHandler constructor.
|
|
*
|
|
* @param Application $app
|
|
*/
|
|
public function __construct($app)
|
|
{
|
|
$this->app=$app;
|
|
}
|
|
|
|
|
|
function FormToDatabase($table,$extfield,$extvalue, $escape = false)
|
|
{
|
|
$this->app->DB->Insert("INSERT INTO $table ($extfield) VALUES ('$extvalue')");
|
|
$id = $this->app->DB->GetInsertID();
|
|
$zielspalten = $this->app->DB->SelectArr("show columns from ".$table);
|
|
if($zielspalten)
|
|
{
|
|
foreach($zielspalten as $val)$ziel[$val['Field']] = true;
|
|
}
|
|
if(is_numeric($id))
|
|
{
|
|
$sql = "UPDATE $table SET ";
|
|
foreach($this->app->Secure->POST as $key=>$value)
|
|
{
|
|
if($key != 'id' && (isset($ziel[$key]) || !$zielspalten))$sqla[] = $key." = '".($escape?$this->app->DB->real_escape_string($value):$value)."' ";
|
|
}
|
|
$sql .= implode(', ',$sqla)." WHERE id='$id' LIMIT 1";
|
|
$this->app->DB->Update($sql);
|
|
if(mysqli_error($this->app->DB->connection))
|
|
{
|
|
foreach($this->app->Secure->POST as $key=>$value)
|
|
{
|
|
if($key != 'id')$this->app->DB->Update("UPDATE $table SET $key='".($escape?$this->app->DB->real_escape_string($value):$value)."' WHERE id='$id' LIMIT 1");
|
|
}
|
|
}
|
|
}
|
|
|
|
return $id;
|
|
}
|
|
|
|
function ArrayUpdateDatabase($table,$id,$values, $escape = false)
|
|
{
|
|
$zielspalten = $this->app->DB->SelectArr("show columns from ".$table);
|
|
if($zielspalten)
|
|
{
|
|
foreach($zielspalten as $val)$ziel[$val['Field']] = true;
|
|
}
|
|
//$this->app->DB->Insert("INSERT INTO $table ($extfield) VALUES ('$extvalue')");
|
|
//$id = $this->app->DB->GetInsertID();
|
|
if(is_numeric($id))
|
|
{
|
|
|
|
$sql = "UPDATE $table SET ";
|
|
foreach($values as $key=>$value)
|
|
{
|
|
if($key!="id" && (isset($ziel[$key]) || !$zielspalten))
|
|
{
|
|
$sqla[] = $key." = '".($escape?$this->app->DB->real_escape_string($value):$value)."' ";
|
|
}
|
|
}
|
|
|
|
$sql .= implode(', ',$sqla)." WHERE id='$id' LIMIT 1";
|
|
$this->app->DB->Update($sql);
|
|
|
|
if(mysqli_error($this->app->DB->connection))
|
|
{
|
|
foreach($values as $key=>$value)
|
|
{
|
|
if($key != "id")
|
|
{
|
|
$this->app->DB->Update("UPDATE $table SET $key='".($escape?$this->app->DB->real_escape_string($value):$value)."' WHERE id='$id' LIMIT 1");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
/*
|
|
foreach($values as $key=>$value)
|
|
{
|
|
if($key!="id" && is_numeric($id))
|
|
$this->app->DB->Update("UPDATE $table SET $key='$value' WHERE id='$id' LIMIT 1");
|
|
}*/
|
|
return $id;
|
|
}
|
|
|
|
|
|
function FormUpdateDatabase($table,$id, $escape = false)
|
|
{
|
|
//$this->app->DB->Insert("INSERT INTO $table ($extfield) VALUES ('$extvalue')");
|
|
|
|
//$id = $this->app->DB->GetInsertID();
|
|
$zielspalten = $this->app->DB->SelectArr("show columns from ".$table);
|
|
if($zielspalten)
|
|
{
|
|
foreach($zielspalten as $val)$ziel[$val['Field']] = true;
|
|
}
|
|
if(is_numeric($id))
|
|
{
|
|
$sql = "UPDATE $table SET ";
|
|
foreach($this->app->Secure->POST as $key=>$value)
|
|
{
|
|
if($key != 'id' && (isset($ziel[$key]) || !$zielspalten))$sqla[] = $key." = '".($escape?$this->app->DB->real_escape_string($value):$value)."' ";
|
|
}
|
|
$sql .= implode(', ',$sqla)." WHERE id='$id' LIMIT 1";
|
|
$this->app->DB->Update($sql);
|
|
if(mysqli_error($this->app->DB->connection))
|
|
{
|
|
foreach($this->app->Secure->POST as $key=>$value)
|
|
{
|
|
if($key != 'id')$this->app->DB->Update("UPDATE $table SET $key='".($escape?$this->app->DB->real_escape_string($value):$value)."' WHERE id='$id' LIMIT 1");
|
|
}
|
|
}
|
|
}
|
|
/*foreach($this->app->Secure->POST as $key=>$value)
|
|
{
|
|
if($key!="id" && is_numeric($id))
|
|
$this->app->DB->Update("UPDATE $table SET $key='$value' WHERE id='$id' LIMIT 1");
|
|
}*/
|
|
return $id;
|
|
}
|
|
|
|
|
|
function FormGetVars($table,$id)
|
|
{
|
|
|
|
$cols = $this->app->DB->GetColArray("$table");
|
|
|
|
foreach($cols as $key=>$value)
|
|
{
|
|
$this->app->Tpl->Set(strtoupper($value),$this->app->DB->Select("SELECT $value FROM $table WHERE id='$id' LIMIT 1"));
|
|
}
|
|
return $id;
|
|
}
|
|
|
|
|
|
function CreateNew($name)
|
|
{
|
|
return new FormActionHandler($this->app,$name);
|
|
}
|
|
|
|
// ********************************************************************** alt
|
|
|
|
function DefaultMandatoryCSSClass($cssclass)
|
|
{
|
|
$this->defaultmandatorycss=$cssclass;
|
|
}
|
|
function Create($formname,$table="",$pkname="id",$pkvalue="")
|
|
{
|
|
$this->FormList[$formname] = new FormActionHandler();
|
|
$this->FormList[$formname]->mandatoryparse = "MSG";
|
|
$this->FormList[$formname]->changelist;
|
|
$this->FormList[$formname]->table=$table;
|
|
$this->FormList[$formname]->pkname=$pkname;
|
|
$this->FormList[$formname]->pkvalue=$pkvalue;
|
|
$this->FormList[$formname]->getvaluesfromdb=false;
|
|
|
|
$formaction=$this->app->Secure->GetGET("formaction");
|
|
|
|
// create simple list fpr repesent the form as data structure
|
|
$this->FormList[$formname]->HTMLList = new SimpleList();
|
|
}
|
|
|
|
|
|
function Template($formname,$template,$parsetarget="PAGE")
|
|
{
|
|
$this->FormList[$formname]->template=$template;
|
|
$this->FormList[$formname]->parsetarget=$parsetarget;
|
|
}
|
|
|
|
|
|
|
|
function Execute($formname,$nextformaction)
|
|
{
|
|
|
|
// check if table exists
|
|
//$this->app->DBUpgrade->Checker('tabellenname');
|
|
|
|
$this->FormList[$formname]->formaction=$nextformaction;
|
|
$formaction = $this->app->Secure->GetGET("formaction");
|
|
|
|
// check for edit if id is online
|
|
$pkname = $this->FormList[$formname]->pkname;
|
|
if($this->FormList[$formname]->pkvalue=="")
|
|
$this->FormList[$formname]->pkvalue=$this->app->Secure->GetGET($pkname);
|
|
|
|
if($this->FormList[$formname]->pkvalue!="" && $formaction=="")
|
|
{
|
|
$this->FormList[$formname]->getvaluesfromdb=true;
|
|
}
|
|
|
|
|
|
if($nextformaction=="delete")
|
|
$formaction="delete";
|
|
|
|
switch($formaction)
|
|
{
|
|
case "create":
|
|
if($this->MandatoryCheck($formname))
|
|
{
|
|
$this->InsertFormToDB($formname);
|
|
$this->GoToLocation($formname);
|
|
}
|
|
else
|
|
{
|
|
// show mandatory msgs and given values
|
|
$this->MandatoryErrors($formname);
|
|
//$this->FillActualFields($formname);
|
|
$this->PrintForm($formname);
|
|
}
|
|
break;
|
|
case "edit":
|
|
if($this->MandatoryCheck($formname))
|
|
{
|
|
//$this->FillActualFields($formname);
|
|
$this->UpdateFormToDB($formname);
|
|
|
|
$this->GoToLocation($formname);
|
|
}
|
|
else
|
|
{
|
|
// show mandatory msgs and given values
|
|
$this->MandatoryErrors($formname);
|
|
//$this->FillActualFields($formname);
|
|
$this->PrintForm($formname);
|
|
}
|
|
break;
|
|
|
|
case "replace":
|
|
if($this->MandatoryCheck($formname))
|
|
{
|
|
if($this->FormList[$formname]->pkvalue=="")
|
|
$this->InsertFormToDB($formname);
|
|
else
|
|
$this->UpdateFormToDB($formname);
|
|
$this->GoToLocation($formname);
|
|
}
|
|
else
|
|
{
|
|
// show mandatory msgs and given values
|
|
$this->MandatoryErrors($formname);
|
|
//$this->FillActualFields($formname);
|
|
$this->PrintForm($formname);
|
|
}
|
|
break;
|
|
|
|
case "delete":
|
|
// delete actual data
|
|
$pkname=$this->FormList[$formname]->pkname;
|
|
$pkvalue=$this->FormList[$formname]->pkvalue;
|
|
$table=$this->FormList[$formname]->table;
|
|
|
|
$pkvalue = $this->app->DB->Select("SELECT $pkname FROM `$table`
|
|
WHERE userid='".$this->app->User->GetID()."' AND `$pkname`='$pkvalue' LIMIT 1");
|
|
|
|
$this->app->DB->Delete("DELETE FROM `$table` WHERE `$pkname`='$pkvalue' LIMIT 1");
|
|
|
|
$this->GoToLocation($formname);
|
|
break;
|
|
default:
|
|
$this->PrintForm($formname);
|
|
}
|
|
|
|
}
|
|
|
|
function GoToLocation($formname)
|
|
{
|
|
header("Location: ".$this->app->http."://".$_SERVER['HTTP_HOST']
|
|
.dirname($_SERVER['REQUEST_URI'])
|
|
."/".$this->FormList[$formname]->locafterexe);
|
|
}
|
|
|
|
function GetAssocValueArray($formname,$dbformat=true)
|
|
{
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
if($htmllist->items > 0)
|
|
{
|
|
$field = &$htmllist->getFirst();
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
if(get_class($field->htmlobject)=="blindfield")
|
|
{
|
|
$value = $field->htmlobject->value;
|
|
}
|
|
else {
|
|
if($field->value=="")
|
|
$value = $field->htmlobject->defvalue;
|
|
else
|
|
$value = $field->value;
|
|
}
|
|
// echo "hier {$field->identifier} {$field->value} jetzt $value<br>";
|
|
|
|
// convert html to database format
|
|
if($dbformat)
|
|
{
|
|
$value = $this->app->String->Convert(
|
|
$value,$field->htmlformat,$field->dbformat);
|
|
}
|
|
|
|
$ret[$field->identifier]=$value;
|
|
$field = &$htmllist->getNext();
|
|
}
|
|
}
|
|
return $ret;
|
|
}
|
|
|
|
function InsertFormToDB($formname)
|
|
{
|
|
$this->app->DB->InsertArr(
|
|
$this->FormList[$formname]->table,
|
|
$this->FormList[$formname]->pkname,
|
|
$this->GetAssocValueArray($formname)
|
|
);
|
|
}
|
|
|
|
function UpdateFormToDB($formname)
|
|
{
|
|
$this->app->DB->UpdateArr(
|
|
$this->FormList[$formname]->table,
|
|
$this->FormList[$formname]->pkvalue,
|
|
$this->FormList[$formname]->pkname,
|
|
$this->GetAssocValueArray($formname)
|
|
);
|
|
}
|
|
|
|
/*
|
|
Syntax: array(
|
|
array(
|
|
<select|text|password|checkbox|radio|submit|reset|file|hidden|image|button>,
|
|
name,
|
|
<array(options)|value>,
|
|
checked
|
|
),*
|
|
)
|
|
*/
|
|
function ConvertToForm($data) {
|
|
$outdata = array();
|
|
foreach($data as $field){
|
|
if($field[0]=="select") {
|
|
$nextfield = '<select name="'.$field[1].'">';
|
|
$endtag = '</select>';
|
|
} else {
|
|
$nextfield = '<input type="'.$field[0].'" name="'.$field[1].'" ';
|
|
$endtag = '/>';
|
|
}
|
|
|
|
if(!empty($field[2])){
|
|
switch($field[0]){
|
|
case "select":
|
|
for ($i=0;$i<count($field[2]);$i++){
|
|
$nextfield .= '<option value="'.$field[2][$i].'">'.$field[2][$i].'</option>';
|
|
}
|
|
break;
|
|
case "radio":
|
|
case "checkbox":
|
|
if($field[3]) $nextfield .= 'checked="checked" ';
|
|
case "text":
|
|
default:
|
|
$nextfield .= 'value="'.$field[2].'" ';
|
|
}
|
|
}
|
|
|
|
$nextfield .= $endtag;
|
|
$outdata[]=$nextfield;
|
|
}
|
|
return $outdata;
|
|
}
|
|
/// define output (html) and input (database) format
|
|
function HTMLToDBConvert($formname,$identifier,$html,$db)
|
|
{
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
if($htmllist->items>0)
|
|
{
|
|
$field = &$htmllist->getFirst();
|
|
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
if($field->identifier == $identifier)
|
|
{
|
|
$field->htmlformat = $html;
|
|
$field->dbformat = $db;
|
|
}
|
|
$field = &$htmllist->getNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
|
|
function AddMandatoryField($formname,$identifier,$msg,$rule="",$parsetarget="")
|
|
{
|
|
if($rule=="")
|
|
$rule="notempty";
|
|
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
if($htmllist->items>0)
|
|
{
|
|
$form = &$htmllist->getFirst();
|
|
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
if($form->identifier == $identifier)
|
|
{
|
|
$form->mandatorycheck = true;
|
|
$form->mandatorymsg = $msg;
|
|
$form->mandatoryrule = $rule;
|
|
if($parsetarget!="")
|
|
$form->mandatoryparse = $parsetarget;
|
|
}
|
|
$form = &$htmllist->getNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
function MandatoryCheck($formname)
|
|
{
|
|
$dismiss = true;
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
if($htmllist->items>0)
|
|
{
|
|
$form = &$htmllist->getFirst();
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
if($form->mandatorycheck)
|
|
{
|
|
if(!$this->app->Secure->RuleCheck($form->value,$form->mandatoryrule))
|
|
{
|
|
$form->mandatoryok = false;
|
|
$dismiss=false;
|
|
}
|
|
}
|
|
$form = &$htmllist->getNext();
|
|
}
|
|
}
|
|
return $dismiss;
|
|
}
|
|
|
|
|
|
function MandatoryErrors($formname)
|
|
{
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
if($htmllist->items>0)
|
|
{
|
|
$form = &$htmllist->getFirst();
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
if(!$form->mandatoryok)
|
|
{
|
|
$this->app->Tpl->Add($form->mandatoryparse,$form->mandatorymsg);
|
|
// mark up error field
|
|
$form->htmlobject->class=$this->defaultmandatorycss;
|
|
//$form->mandatoryrule = $rule;
|
|
}
|
|
$form = &$htmllist->getNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
function NewField($formname,$htmlobject,$identifier="",$parsetarget="")
|
|
{
|
|
if($identifier=="")
|
|
$identifier = $htmlobject->name;
|
|
|
|
if($parsetarget=="")
|
|
$parsetarget = strtoupper($htmlobject->name);
|
|
|
|
// create new formhandlerfield
|
|
$field = new FormHandlerField($identifier,$htmlobject);
|
|
$field->ParseTarget($parsetarget);
|
|
|
|
|
|
// nur wenn werte vom formular kommen, diese wirklich als value hernehmen
|
|
if($this->app->Secure->GetPOST($identifier)!="")
|
|
{
|
|
$field->value = $this->app->Secure->GetPOST($identifier);
|
|
}
|
|
|
|
/*else
|
|
{
|
|
//$field->value = $field->htmlobject->value;
|
|
}
|
|
*/
|
|
|
|
$this->FormList[$formname]->HTMLList->Add($field);
|
|
}
|
|
|
|
|
|
function DeleteMsg($formname,$delmsg,$delmsgcol)
|
|
{
|
|
$this->FormList[$formname]->delmsg = $delmsg;
|
|
$this->FormList[$formname]->delmsgcol = $delmsgcol;
|
|
}
|
|
|
|
function PrintForm($formname) // work only with hmtlobjects
|
|
{
|
|
if($this->FormList[$formname]->formaction=="edit" && $this->FormList[$formname]->pkvalue=="")
|
|
{
|
|
}
|
|
else
|
|
{
|
|
// show form
|
|
// go through htmllist an parse every field
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
|
|
//load values from db when action = update
|
|
if($this->FormList[$formname]->getvaluesfromdb)
|
|
{
|
|
if($htmllist->items>0)
|
|
{
|
|
$field = &$htmllist->getFirst();
|
|
|
|
$pkname = $this->FormList[$formname]->pkname;
|
|
$pkvalue = $this->FormList[$formname]->pkvalue;
|
|
$table = $this->FormList[$formname]->table;
|
|
|
|
while($field)
|
|
{
|
|
$value = $this->app->DB->Select("SELECT `{$field->identifier}` FROM
|
|
`$table` WHERE `$pkname`='$pkvalue' LIMIT 1");
|
|
|
|
//value im html
|
|
$field->htmlobject->value = $value;
|
|
|
|
$field = &$htmllist->getNext();
|
|
}
|
|
}
|
|
$this->FillActualFields($formname); // fuer die homepage
|
|
}
|
|
else
|
|
$this->FillActualFields($formname,false); // fuer die datenbank
|
|
|
|
|
|
|
|
if($htmllist->items>0)
|
|
{
|
|
$field = &$htmllist->getFirst();
|
|
while($field)
|
|
{
|
|
$htmlobject = &$field->htmlobject;
|
|
$this->app->Tpl->Add($field->parsetarget,$htmlobject->Get().$htmlobject->GetClose());
|
|
$field = &$htmllist->getNext();
|
|
}
|
|
}
|
|
$formaction = $this->FormList[$formname]->formaction;
|
|
|
|
$module = $this->app->Secure->GetGET("module","alpha");
|
|
|
|
$action = $this->app->Secure->GetGET("action","alpha");
|
|
|
|
$pkname = $this->FormList[$formname]->pkname;
|
|
$pkvalue = $this->FormList[$formname]->pkvalue;
|
|
|
|
$this->app->Tpl->Set('ACTION',
|
|
$_SERVER['REQUEST_URI']."?module=$module&action=$action&formaction=$formaction
|
|
&$pkname=$pkvalue");
|
|
|
|
$this->app->Tpl->Parse(
|
|
$this->FormList[$formname]->parsetarget,
|
|
$this->FormList[$formname]->template
|
|
);
|
|
}
|
|
}
|
|
|
|
|
|
// add form fields to values for db input
|
|
|
|
function FillActualFields($formname,$convert=true) // fuer die datenbank
|
|
{
|
|
$htmllist = &$this->FormList[$formname]->HTMLList;
|
|
if($htmllist->items>0)
|
|
{
|
|
$field = &$htmllist->getFirst();
|
|
for($i=0; $i <= $htmllist->items; $i++)
|
|
{
|
|
|
|
if($this->app->Secure->GetPOST($field->identifier)!="")
|
|
{
|
|
$field->value = $this->app->Secure->GetPOST($field->identifier);
|
|
}else
|
|
{
|
|
$field->value = $field->htmlobject->value;
|
|
}
|
|
|
|
|
|
if($field->value!="" && $convert){
|
|
$value = $this->app->String->Convert(
|
|
//$field->value,$field->htmlformat,$field->dbformat);
|
|
$field->value,$field->dbformat,$field->htmlformat);
|
|
|
|
$value = $this->app->String->decodeText($value);
|
|
$field->value = $value;
|
|
}
|
|
|
|
if(get_class($htmlobject)=="blindfield")
|
|
$field->value=$field->htmlobject->value;
|
|
|
|
|
|
$field->htmlobject->value=$field->value;
|
|
|
|
|
|
$field = &$htmllist->getNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
function LocationAfterExecute($formname,$target)
|
|
{
|
|
$this->FormList[$formname]->locafterexe=$target;
|
|
}
|
|
|
|
|
|
}
|