<?php
/*=====================================================================*\
|| ###################################################################
-|| # Bugdar [#]version[#]
-|| # Copyright ©2002-[#]year[#] Iris Studios, Inc.
+|| # Bugdar
+|| # Copyright (c)2004-2009 Blue Static
|| #
|| # This program is free software; you can redistribute it and/or modify
|| # it under the terms of the GNU General Public License as published by
-|| # the Free Software Foundation; version [#]gpl[#] of the License.
+|| # the Free Software Foundation; version 2 of the License.
|| #
|| # This program is distributed in the hope that it will be useful, but
|| # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
'editattach'
);
-define('SVN', '$Id$');
$focus['showreport'] = 'focus';
require_once('./global.php');
-require_once('./includes/class_api_error.php');
require_once('./includes/class_notification.php');
require_once('./includes/api_attachment.php');
require_once('./includes/api_comment.php');
-APIError(array(new API_Error_Handler($message), 'user_cumulative'));
-
-if (isset($bugsys->in['attachmentid']))
+if (isset($input->in['attachmentid']))
{
- $attachment = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . $bugsys->input_clean('attachmentid', TYPE_UINT));
+ $attachment = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . $input->inputClean('attachmentid', TYPE_UINT));
if (!$attachment)
{
- $message->error($lang->getlex('error_invalid_id'));
+ $message->error(L_INVALID_ID);
}
}
-$bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : $bugsys->input_clean('bugid', TYPE_UINT)));
+$bug = $db->queryFirst("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : $input->inputClean('bugid', TYPE_UINT)));
if (!$bug)
{
- $message->error($lang->getlex('error_invalid_id'));
+ $message->error(L_INVALID_ID);
+}
+
+if (!check_bug_permissions($bug))
+{
+ $message->errorPermission();
}
require_once('./includes/class_logging.php');
-$notif = new NotificationCenter;
-$notif->set_bug_data($bug);
+$notif = new NotificationCenter();
+$notif->setBugData($bug);
// ###################################################################
if ($_POST['do'] == 'insert')
{
- $attachapi = new AttachmentAPI($bugsys);
- $attachapi->set('bugid', $bugsys->in['bugid']);
+ $attachapi = new AttachmentAPI();
+ $attachapi->set('bugid', $input->in['bugid']);
- if (!can_perform('canputattach', $bug['productid']))
+ if (!can_perform('canputattach', $bug['product']))
{
- $message->error_permission();
+ $message->errorPermission();
}
// max packet size
- $var = $db->query_first("SHOW VARIABLES LIKE 'max_allowed_packet'");
- $bugsys->debug("max_allowed_packet = $var[Value]");
+ $var = $db->queryFirst("SHOW VARIABLES LIKE 'max_allowed_packet'");
+ BSApp::debug("max_allowed_packet = $var[Value]");
// create alias
- $FILE =& $_FILES['attachment'];
+ $FILE = &$_FILES['attachment'];
// PHP errors
switch ($FILE['error'])
{
case 0: break;
- case 1: $message->add_error($lang->string('PHP said the file you uploaded was too big.')); break;
- case 2: $message->add_error($lang->string('The file exceeds the allowed upload size.')); break;
- case 3: $message->add_error($lang->string('The file was only partially uploaded.')); break;
- case 4: $message->add_error($lang->string('The file was not uploaded at all.')); break;
- case 6: $message->add_error($lang->string('PHP could not find the /tmp directory.')); break;
+ case 1: $message->addError(T('PHP said the file you uploaded was too big.')); break;
+ case 2: $message->addError(T('The file exceeds the allowed upload size.')); break;
+ case 3: $message->addError(T('The file was only partially uploaded.')); break;
+ case 4: $message->addError(T('The file was not uploaded at all.')); break;
+ case 6: $message->addError(T('PHP could not find the /tmp directory.')); break;
}
// did it upload?
if (!is_uploaded_file($FILE['tmp_name']))
{
- $message->add_error($lang->string('The file you specified did not upload.'));
+ $message->addError(T('The file you specified did not upload.'));
}
- // #*# put some MIME-type validation here
+ // TODO - put some MIME-type validation here
if (filesize($FILE['tmp_name']) > $var['Value'])
{
- $message->add_error($lang->string('The file you specified exceeds MySQL\'s maximum allowed packet.'));
+ $message->addError(T('The file you specified exceeds MySQL\'s maximum allowed packet.'));
}
$attachapi->set('attachment', file_get_contents($FILE['tmp_name']));
$attachapi->set('filename', $FILE['name']);
$attachapi->set('mimetype', $FILE['type']);
$attachapi->set('filesize', $FILE['size']);
- $attachapi->set('description', $bugsys->in['description']);
- $attachapi->set('userid', $bugsys->userinfo['userid']);
+ $attachapi->set('description', $input->in['description']);
+ $attachapi->set('userid', bugdar::$userinfo['userid']);
// insert an attachment
- if (!$message->items)
+ if (!$message->hasErrors())
{
$attachapi->insert();
- $obsoletes = $bugsys->input_clean('obsoletes', TYPE_UINT);
+ $obsoletes = $input->inputClean('obsoletes', TYPE_UINT);
- $notif->send_new_attachment_notice($attachapi->values, $obsoletes, $attachapi->insertid);
+ $notif->sendNewAttachmentNotice($attachapi->values, $obsoletes, $attachapi->insertid);
// mark obsoletes
if (is_array($obsoletes) AND sizeof($obsoletes) > 0)
{
$db->query("UPDATE " . TABLE_PREFIX . "attachment SET obsolete = 1 WHERE attachmentid IN (" . implode(',', $obsoletes) . ") AND !obsolete AND bugid = $bug[bugid]");
- foreach ($obsoletes AS $attachmentid)
+ foreach ($obsoletes as $attachmentid)
{
$log = new Logging;
- $log->set_bugid($bug['bugid']);
- $log->set_attachmentid($attachmentid);
- $log->add_data(true, array('obsolete' => 0), array('obsolete'), false, 'attachment');
- $log->add_data(false, array('obsolete' => 1), array('obsolete'), false, 'attachment');
- $log->update_history();
+ $log->setBugId($bug['bugid']);
+ $log->setAttachmentId($attachmentid);
+ $log->addData(true, array('obsolete' => 0), array('obsolete'), false, 'attachment');
+ $log->addData(false, array('obsolete' => 1), array('obsolete'), false, 'attachment');
+ $log->updateHistory();
}
}
// handle comment stuff
- if (can_perform('canpostcomments', $bug['productid']) AND trim($bugsys->in['comment']))
+ if (can_perform('canpostcomments', $bug['product']) AND trim($input->in['comment']))
{
- $comment = new CommentAPI($bugsys);
- $comment->set('bugid', $bugsys->in['bugid']);
- $comment->set('userid', $bugsys->userinfo['userid']);
- $comment->set('comment', $bugsys->in['comment']);
+ $comment = new CommentAPI();
+ $comment->set('bugid', $input->in['bugid']);
+ $comment->set('userid', bugdar::$userinfo['userid']);
+ $comment->set('comment', $input->in['comment']);
$comment->set('dateline', $attachapi->values['dateline']);
$comment->insert();
- $notif->send_new_comment_notice($comment->values);
+ $notif->sendNewCommentNotice($comment->values);
}
// update the last post data
- $db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = " . $attachapi->values['dateline'] . ", hiddenlastposttime = " . $attachapi->values['dateline'] . ", lastpostby = " . $bugsys->userinfo['userid'] . ", hiddenlastpostby = " . $bugsys->userinfo['userid'] . " WHERE bugid = $bug[bugid]");
+ $db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = " . $attachapi->values['dateline'] . ", hiddenlastposttime = " . $attachapi->values['dateline'] . ", lastpostby = " . bugdar::$userinfo['userid'] . ", hiddenlastpostby = " . bugdar::$userinfo['userid'] . " WHERE bugid = $bug[bugid]");
$notif->finalize();
- $message->redirect($lang->string('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
+ $message->redirect(T('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
}
else
{
$show['errors'] = true;
$_REQUEST['do'] = 'add';
- $message->error_list_process();
}
}
if ($_REQUEST['do'] == 'add')
{
- if (!can_perform('canputattach', $bug['productid']))
+ if (!can_perform('canputattach', $bug['product']))
{
- $message->error_permission();
+ $message->errorPermission();
}
- $MAXFILESIZE = $funct->fetch_max_attachment_size();
+ $MAXFILESIZE = BSFunctions::fetch_max_php_file_size();
- $show['addcomment'] = ((can_perform('canpostcomments', $bug['productid'])) ? true : false);
+ $show['addcomment'] = ((can_perform('canpostcomments', $bug['product'])) ? true : false);
$show['obsoletes'] = false;
$obsoletes_fetch = $db->query("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE bugid = $bug[bugid] AND !obsolete");
$obsoletes = '';
- while ($obsolete = $db->fetch_array($obsoletes_fetch))
+ foreach ($obsoletes_fetch as $obsolete)
{
$show['obsoletes'] = true;
- $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (in_array($obsolete['attachmentid'], (array)$bugsys->in['obsoletes']) ? ' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ? " [$obsolete[description]]" : '') . "</div>\n";
+ $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (is_array($input->in['obsoletes']) AND in_array($obsolete['attachmentid'], $input->in['obsoletes']) ? ' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ? " [$obsolete[description]]" : '') . "</div>\n";
}
- eval('$template->flush("' . $template->fetch('newattach') . '");');
+ $tpl = new BSTemplate('newattach');
+ $tpl->vars = array(
+ 'bug' => $bug,
+ 'message' => $message,
+ 'MAXFILESIZE' => $MAXFILESIZE,
+ 'obsoletes' => $obsoletes,
+ 'input' => $input
+ );
+ $tpl->evaluate()->flush();
}
// ###################################################################
if ($_POST['do'] == 'update')
{
- if (!(can_perform('caneditattach', $bug['productid']) OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach', $bug['productid']))))
+ if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
{
- $message->error_permission();
+ $message->errorPermission();
}
- $log = new Logging;
- $log->set_bugid($bug['bugid']);
- $log->set_attachmentid($bugsys->in['attachmentid']);
-
- $attachapi = new AttachmentAPI($bugsys);
- $attachapi->set('attachmentid', $bugsys->in['attachmentid']);
- $attachapi->set_condition();
- $attachapi->dorelations = array();
- $attachapi->fetch();
-
- $log->add_data(true, $attachapi->objdata, array('attachment'), true, 'attachment');
-
- $attachapi->set('description', $bugsys->in['description']);
- $attachapi->set('obsolete', $bugsys->in['obsolete']);
- $attachapi->update();
+ $attachapi = new AttachmentAPI();
+ $attachapi->set('attachmentid', $input->in['attachmentid']);
- $log->add_data(false, $attachapi->values, array('attachment'), true, 'attachment');
-
- $log->update_history();
-
- $message->redirect($lang->string('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
+ if ($input->in['__delete__'] != '')
+ {
+ if (!(can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid'])))
+ {
+ $message->errorPermission();
+ }
+
+ $attachapi->remove();
+
+ $message->redirect(T('The attachment was successfully deleted.'), "showreport.php?bugid=$bug[bugid]");
+ }
+ else
+ {
+ $log = new Logging();
+ $log->setBugId($bug['bugid']);
+ $log->setAttachmentId($input->in['attachmentid']);
+
+ $attachapi->fetch();
+
+ $log->addData(true, $attachapi->record, array('attachment'), true, 'attachment');
+
+ $attachapi->set('description', $input->in['description']);
+ $attachapi->set('obsolete', $input->in['obsolete']);
+ $attachapi->update();
+
+ $log->addData(false, $attachapi->values, array('attachment'), true, 'attachment');
+
+ $log->updateHistory();
+
+ $message->redirect(T('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
+ }
}
// ###################################################################
if ($_REQUEST['do'] == 'edit')
{
- if (!(can_perform('caneditattach', $bug['productid']) OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach', $bug['productid']))))
+ if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == bugdar::$userinfo['userid'] AND can_perform('canputattach', $bug['product']))))
{
- $message->error_permission();
+ $message->errorPermission();
}
- $show['delete'] = ((can_perform('caneditattach', $bug['productid'])) ? true : false);
+ $show['delete'] = (can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid']));
- eval('$template->flush("' . $template->fetch('editattach') . '");');
+ $tpl = new BSTemplate('editattach');
+ $tpl->vars = array(
+ 'attachment' => $attachment,
+ 'bug' => $bug
+ );
+ $tpl->evaluate()->flush();
}
-/*=====================================================================*\
-|| ###################################################################
-|| # $HeadURL$
-|| # $Id$
-|| ###################################################################
-\*=====================================================================*/
?>
\ No newline at end of file