Switch the 'modify' code of admin/field.php to use templates
[bugdar.git] / attachment.php
index 9303412f099a46bf70a4b533487b05bf6b92229c..89a6240a7d4fc36b570ec802bcc402a3902d7eac 100755 (executable)
@@ -1,12 +1,12 @@
 <?php
 /*=====================================================================*\
 || ###################################################################
-|| # Bugdar [#]version[#]
-|| # Copyright ©2002-[#]year[#] Blue Static
+|| # Bugdar
+|| # Copyright (c)2004-2009 Blue Static
 || #
 || # This program is free software; you can redistribute it and/or modify
 || # it under the terms of the GNU General Public License as published by
-|| # the Free Software Foundation; version [#]gpl[#] of the License.
+|| # the Free Software Foundation; version 2 of the License.
 || #
 || # This program is distributed in the hope that it will be useful, but
 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
@@ -24,143 +24,138 @@ $fetchtemplates = array(
        'editattach'
 );
 
-define('SVN', '$Id$');
 
 $focus['showreport'] = 'focus';
 
 require_once('./global.php');
-require_once('./includes/class_api_error.php');
 require_once('./includes/class_notification.php');
 require_once('./includes/api_attachment.php');
 require_once('./includes/api_comment.php');
 
-APIError(array(new API_Error_Handler($message), 'user_cumulative'));
-
-if (isset($bugsys->in['attachmentid']))
+if (isset($input->in['attachmentid']))
 {
-       $attachment = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . $bugsys->input_clean('attachmentid', TYPE_UINT));
+       $attachment = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . $input->inputClean('attachmentid', TYPE_UINT));
        if (!$attachment)
        {
-               $message->error($lang->getlex('error_invalid_id'));
+               $message->error(L_INVALID_ID);
        }
 }
 
-$bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : $bugsys->input_clean('bugid', TYPE_UINT)));
+$bug = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : $input->inputClean('bugid', TYPE_UINT)));
 if (!$bug)
 {
-       $message->error($lang->getlex('error_invalid_id'));
+       $message->error(L_INVALID_ID);
 }
 
 if (!check_bug_permissions($bug))
 {
-       $message->error_permission();
+       $message->errorPermission();
 }
 
 require_once('./includes/class_logging.php');
 
-$notif = new NotificationCenter;
-$notif->set_bug_data($bug);
+$notif = new NotificationCenter();
+$notif->setBugData($bug);
 
 // ###################################################################
 
 if ($_POST['do'] == 'insert')
 {
-       $attachapi = new AttachmentAPI($bugsys);
-       $attachapi->set('bugid',        $bugsys->in['bugid']);
+       $attachapi = new AttachmentAPI();
+       $attachapi->set('bugid',        $input->in['bugid']);
        
        if (!can_perform('canputattach', $bug['product']))
        {
-               $message->error_permission();
+               $message->errorPermission();
        }
        
        // max packet size
-       $var = $db->query_first("SHOW VARIABLES LIKE 'max_allowed_packet'");
-       $bugsys->debug("max_allowed_packet = $var[Value]");
+       $var = $db->queryFirst("SHOW VARIABLES LIKE 'max_allowed_packet'");
+       BSApp::debug("max_allowed_packet = $var[Value]");
        
        // create alias
-       $FILE =$_FILES['attachment'];
+       $FILE = &$_FILES['attachment'];
        
        // PHP errors
        switch ($FILE['error'])
        {
                case 0: break;
-               case 1: $message->add_error(_('PHP said the file you uploaded was too big.')); break;
-               case 2: $message->add_error(_('The file exceeds the allowed upload size.')); break;
-               case 3: $message->add_error(_('The file was only partially uploaded.')); break;
-               case 4: $message->add_error(_('The file was not uploaded at all.')); break;
-               case 6: $message->add_error(_('PHP could not find the /tmp directory.')); break;
+               case 1: $message->addError(T('PHP said the file you uploaded was too big.')); break;
+               case 2: $message->addError(T('The file exceeds the allowed upload size.')); break;
+               case 3: $message->addError(T('The file was only partially uploaded.')); break;
+               case 4: $message->addError(T('The file was not uploaded at all.')); break;
+               case 6: $message->addError(T('PHP could not find the /tmp directory.')); break;
        }
        
        // did it upload?
        if (!is_uploaded_file($FILE['tmp_name']))
        {
-               $message->add_error(_('The file you specified did not upload.'));
+               $message->addError(T('The file you specified did not upload.'));
        }
        
-       // #*# put some MIME-type validation here
+       // TODO - put some MIME-type validation here
        
        if (filesize($FILE['tmp_name']) > $var['Value'])
        {
-               $message->add_error(_('The file you specified exceeds MySQL\'s maximum allowed packet.'));
+               $message->addError(T('The file you specified exceeds MySQL\'s maximum allowed packet.'));
        }
        
        $attachapi->set('attachment',   file_get_contents($FILE['tmp_name']));
        $attachapi->set('filename',             $FILE['name']);
        $attachapi->set('mimetype',             $FILE['type']);
        $attachapi->set('filesize',             $FILE['size']);
-       $attachapi->set('description',  $bugsys->in['description']);
-       $attachapi->set('userid',               $bugsys->userinfo['userid']);
+       $attachapi->set('description',  $input->in['description']);
+       $attachapi->set('userid',               bugdar::$userinfo['userid']);
                
        // insert an attachment
-       if (!$message->items)
+       if (!$message->hasErrors())
        {
                $attachapi->insert();
                
-               $obsoletes = $bugsys->input_clean('obsoletes', TYPE_UINT);
+               $obsoletes = $input->inputClean('obsoletes', TYPE_UINT);
                
-               $notif->send_new_attachment_notice($attachapi->values, $obsoletes, $attachapi->insertid);
+               $notif->sendNewAttachmentNotice($attachapi->values, $obsoletes, $attachapi->insertid);
                
                // mark obsoletes
                if (is_array($obsoletes) AND sizeof($obsoletes) > 0)
                {
                        $db->query("UPDATE " . TABLE_PREFIX . "attachment SET obsolete = 1 WHERE attachmentid IN (" . implode(',', $obsoletes) . ") AND !obsolete AND bugid = $bug[bugid]");
                        
-                       foreach ($obsoletes AS $attachmentid)
+                       foreach ($obsoletes as $attachmentid)
                        {
                                $log = new Logging;
-                               $log->set_bugid($bug['bugid']);
-                               $log->set_attachmentid($attachmentid);
-                               $log->add_data(true, array('obsolete' => 0), array('obsolete'), false, 'attachment');
-                               $log->add_data(false, array('obsolete' => 1), array('obsolete'), false, 'attachment'); 
-                               $log->update_history();
+                               $log->setBugId($bug['bugid']);
+                               $log->setAttachmentId($attachmentid);
+                               $log->addData(true, array('obsolete' => 0), array('obsolete'), false, 'attachment');
+                               $log->addData(false, array('obsolete' => 1), array('obsolete'), false, 'attachment'); 
+                               $log->updateHistory();
                        }
                }
                
                // handle comment stuff
-               if (can_perform('canpostcomments', $bug['product']) AND trim($bugsys->in['comment']))
+               if (can_perform('canpostcomments', $bug['product']) AND trim($input->in['comment']))
                {
-                       $comment = new CommentAPI($bugsys);
-                       $comment->set('bugid',          $bugsys->in['bugid']);
-                       $comment->set('userid',         $bugsys->userinfo['userid']);
-                       $comment->set('comment',        $bugsys->in['comment']);
+                       $comment = new CommentAPI();
+                       $comment->set('bugid',          $input->in['bugid']);
+                       $comment->set('userid',         bugdar::$userinfo['userid']);
+                       $comment->set('comment',        $input->in['comment']);
                        $comment->set('dateline',       $attachapi->values['dateline']);
                        $comment->insert();
                        
-                       $notif->send_new_comment_notice($comment->values);
+                       $notif->sendNewCommentNotice($comment->values);
                }
                
                // update the last post data
-               $db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = " . $attachapi->values['dateline'] . ", hiddenlastposttime = " . $attachapi->values['dateline'] . ", lastpostby = " . $bugsys->userinfo['userid'] . ", hiddenlastpostby = " . $bugsys->userinfo['userid'] . " WHERE bugid = $bug[bugid]");
+               $db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = " . $attachapi->values['dateline'] . ", hiddenlastposttime = " . $attachapi->values['dateline'] . ", lastpostby = " . bugdar::$userinfo['userid'] . ", hiddenlastpostby = " . bugdar::$userinfo['userid'] . " WHERE bugid = $bug[bugid]");
                
                $notif->finalize();
                
-               $message->redirect(_('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
+               $message->redirect(T('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
        }
        else
        {
                $show['errors'] = true;
                $_REQUEST['do'] = 'add';
-               $message->error_list_process();
        }
 }
 
@@ -170,75 +165,95 @@ if ($_REQUEST['do'] == 'add')
 {
        if (!can_perform('canputattach', $bug['product']))
        {
-               $message->error_permission();
+               $message->errorPermission();
        }
        
-       $MAXFILESIZE = $funct->fetch_max_attachment_size();
+       $MAXFILESIZE = BSFunctions::fetch_max_php_file_size();
        
        $show['addcomment'] = ((can_perform('canpostcomments', $bug['product'])) ? true : false);
        $show['obsoletes'] = false;
        
        $obsoletes_fetch = $db->query("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE bugid = $bug[bugid] AND !obsolete");
        $obsoletes = '';
-       while ($obsolete = $db->fetch_array($obsoletes_fetch))
+       foreach ($obsoletes_fetch as $obsolete)
        {
                $show['obsoletes'] = true;
-               $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (in_array($obsolete['attachmentid'], (array)$bugsys->in['obsoletes']) ? ' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ? " [$obsolete[description]]" : '') . "</div>\n";
+               $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (is_array($input->in['obsoletes']) AND in_array($obsolete['attachmentid'], $input->in['obsoletes']) ? ' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ? " [$obsolete[description]]" : '') . "</div>\n";
        }
        
-       eval('$template->flush("' . $template->fetch('newattach') . '");');
+       $tpl = new BSTemplate('newattach');
+       $tpl->vars = array(
+               'bug'                   => $bug,
+               'message'               => $message,
+               'MAXFILESIZE'   => $MAXFILESIZE,
+               'obsoletes'             => $obsoletes,
+               'input'                 => $input
+       );
+       $tpl->evaluate()->flush();
 }
 
 // ###################################################################
 
 if ($_POST['do'] == 'update')
 {
-       if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
+       if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
        {
-               $message->error_permission();
+               $message->errorPermission();
        }
        
-       $log = new Logging;
-       $log->set_bugid($bug['bugid']);
-       $log->set_attachmentid($bugsys->in['attachmentid']);
-       
-       $attachapi = new AttachmentAPI($bugsys);
-       $attachapi->set('attachmentid', $bugsys->in['attachmentid']);
-       $attachapi->set_condition();
-       $attachapi->dorelations = array();
-       $attachapi->fetch();
-       
-       $log->add_data(true, $attachapi->objdata, array('attachment'), true, 'attachment');
-       
-       $attachapi->set('description',  $bugsys->in['description']);
-       $attachapi->set('obsolete',             $bugsys->in['obsolete']);
-       $attachapi->update();
+       $attachapi = new AttachmentAPI();
+       $attachapi->set('attachmentid', $input->in['attachmentid']);
        
-       $log->add_data(false, $attachapi->values, array('attachment'), true, 'attachment');
-       
-       $log->update_history();
-       
-       $message->redirect(_('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
+       if ($input->in['__delete__'] != '')
+       {
+               if (!(can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid'])))
+               {
+                       $message->errorPermission();
+               }
+               
+               $attachapi->remove();
+               
+               $message->redirect(T('The attachment was successfully deleted.'), "showreport.php?bugid=$bug[bugid]");
+       }
+       else
+       {
+               $log = new Logging();
+               $log->setBugId($bug['bugid']);
+               $log->setAttachmentId($input->in['attachmentid']);
+               
+               $attachapi->fetch();
+               
+               $log->addData(true, $attachapi->record, array('attachment'), true, 'attachment');
+               
+               $attachapi->set('description',  $input->in['description']);
+               $attachapi->set('obsolete',             $input->in['obsolete']);
+               $attachapi->update();
+               
+               $log->addData(false, $attachapi->values, array('attachment'), true, 'attachment');
+               
+               $log->updateHistory();
+               
+               $message->redirect(T('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
+       }
 }
 
 // ###################################################################
 
 if ($_REQUEST['do'] == 'edit')
 {
-       if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
+       if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
        {
-               $message->error_permission();
+               $message->errorPermission();
        }
        
-       $show['delete'] = ((can_perform('caneditattach', $bug['product'])) ? true : false);
+       $show['delete'] = (can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid']));
        
-       eval('$template->flush("' . $template->fetch('editattach') . '");');
+       $tpl = new BSTemplate('editattach');
+       $tpl->vars = array(
+               'attachment'    => $attachment,
+               'bug'                   => $bug
+       );
+       $tpl->evaluate()->flush();
 }
 
-/*=====================================================================*\
-|| ###################################################################
-|| # $HeadURL$
-|| # $Id$
-|| ###################################################################
-\*=====================================================================*/
 ?>
\ No newline at end of file