2 /*=====================================================================*\
3 || ###################################################################
5 || # Copyright (c)2002-2007 Blue Static
7 || # This program is free software; you can redistribute it and/or modify
8 || # it under the terms of the GNU General Public License as published by
9 || # the Free Software Foundation; version 2 of the License.
11 || # This program is distributed in the hope that it will be useful, but
12 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
13 || # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
16 || # You should have received a copy of the GNU General Public License along
17 || # with this program; if not, write to the Free Software Foundation, Inc.,
18 || # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
19 || ###################################################################
20 \*=====================================================================*/
22 $fetchtemplates = array(
28 $focus['showreport'] = 'focus';
30 require_once('./global.php');
31 require_once('./includes/class_api_error.php');
32 require_once('./includes/class_notification.php');
33 require_once('./includes/api_attachment.php');
34 require_once('./includes/api_comment.php');
36 APIError(array(new API_Error_Handler($message), 'user_cumulative'));
38 if (isset($bugsys->in
['attachmentid']))
40 $attachment = $db->query_first("SELECT * FROM " . TABLE_PREFIX
. "attachment WHERE attachmentid = " . $bugsys->input_clean('attachmentid', TYPE_UINT
));
43 $message->error(L_INVALID_ID
);
47 $bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX
. "bug WHERE bugid = " . (($attachment['attachmentid']) ?
$attachment['bugid'] : $bugsys->input_clean('bugid', TYPE_UINT
)));
50 $message->error(L_INVALID_ID
);
53 if (!check_bug_permissions($bug))
55 $message->errorPermission();
58 require_once('./includes/class_logging.php');
60 $notif = new NotificationCenter
;
61 $notif->set_bug_data($bug);
63 // ###################################################################
65 if ($_POST['do'] == 'insert')
67 $attachapi = new AttachmentAPI($bugsys);
68 $attachapi->set('bugid', $bugsys->in
['bugid']);
70 if (!can_perform('canputattach', $bug['product']))
72 $message->errorPermission();
76 $var = $db->query_first("SHOW VARIABLES LIKE 'max_allowed_packet'");
77 $bugsys->debug("max_allowed_packet = $var[Value]");
80 $FILE =& $_FILES['attachment'];
83 switch ($FILE['error'])
86 case 1: $message->addError(T('PHP said the file you uploaded was too big.')); break;
87 case 2: $message->addError(T('The file exceeds the allowed upload size.')); break;
88 case 3: $message->addError(T('The file was only partially uploaded.')); break;
89 case 4: $message->addError(T('The file was not uploaded at all.')); break;
90 case 6: $message->addError(T('PHP could not find the /tmp directory.')); break;
94 if (!is_uploaded_file($FILE['tmp_name']))
96 $message->addError(T('The file you specified did not upload.'));
99 // TODO - put some MIME-type validation here
101 if (filesize($FILE['tmp_name']) > $var['Value'])
103 $message->addError(T('The file you specified exceeds MySQL\'s maximum allowed packet.'));
106 $attachapi->set('attachment', file_get_contents($FILE['tmp_name']));
107 $attachapi->set('filename', $FILE['name']);
108 $attachapi->set('mimetype', $FILE['type']);
109 $attachapi->set('filesize', $FILE['size']);
110 $attachapi->set('description', $bugsys->in
['description']);
111 $attachapi->set('userid', $bugsys->userinfo
['userid']);
113 // insert an attachment
114 if (!$message->hasErrors())
116 $attachapi->insert();
118 $obsoletes = $bugsys->input_clean('obsoletes', TYPE_UINT
);
120 $notif->send_new_attachment_notice($attachapi->values
, $obsoletes, $attachapi->insertid
);
123 if (is_array($obsoletes) AND sizeof($obsoletes) > 0)
125 $db->query("UPDATE " . TABLE_PREFIX
. "attachment SET obsolete = 1 WHERE attachmentid IN (" . implode(',', $obsoletes) . ") AND !obsolete AND bugid = $bug[bugid]");
127 foreach ($obsoletes AS $attachmentid)
130 $log->set_bugid($bug['bugid']);
131 $log->set_attachmentid($attachmentid);
132 $log->add_data(true
, array('obsolete' => 0), array('obsolete'), false
, 'attachment');
133 $log->add_data(false
, array('obsolete' => 1), array('obsolete'), false
, 'attachment');
134 $log->update_history();
138 // handle comment stuff
139 if (can_perform('canpostcomments', $bug['product']) AND trim($bugsys->in
['comment']))
141 $comment = new CommentAPI($bugsys);
142 $comment->set('bugid', $bugsys->in
['bugid']);
143 $comment->set('userid', $bugsys->userinfo
['userid']);
144 $comment->set('comment', $bugsys->in
['comment']);
145 $comment->set('dateline', $attachapi->values
['dateline']);
148 $notif->send_new_comment_notice($comment->values
);
151 // update the last post data
152 $db->query("UPDATE " . TABLE_PREFIX
. "bug SET lastposttime = " . $attachapi->values
['dateline'] . ", hiddenlastposttime = " . $attachapi->values
['dateline'] . ", lastpostby = " . $bugsys->userinfo
['userid'] . ", hiddenlastpostby = " . $bugsys->userinfo
['userid'] . " WHERE bugid = $bug[bugid]");
156 $message->redirect(T('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
160 $show['errors'] = true
;
161 $_REQUEST['do'] = 'add';
165 // ###################################################################
167 if ($_REQUEST['do'] == 'add')
169 if (!can_perform('canputattach', $bug['product']))
171 $message->errorPermission();
174 $MAXFILESIZE = $funct->fetch_max_attachment_size();
176 $show['addcomment'] = ((can_perform('canpostcomments', $bug['product'])) ? true
: false
);
177 $show['obsoletes'] = false
;
179 $obsoletes_fetch = $db->query("SELECT * FROM " . TABLE_PREFIX
. "attachment WHERE bugid = $bug[bugid] AND !obsolete");
181 while ($obsolete = $db->fetch_array($obsoletes_fetch))
183 $show['obsoletes'] = true
;
184 $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\"" . (is_array($bugsys->in
['obsoletes']) AND in_array($obsolete['attachmentid'], $bugsys->in
['obsoletes']) ?
' checked="checked"' : '') . " /> $obsolete[filename]" . ($obsolete['description'] ?
" [$obsolete[description]]" : '') . "</div>\n";
187 eval('$template->flush("' . $template->fetch('newattach') . '");');
190 // ###################################################################
192 if ($_POST['do'] == 'update')
194 if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == $bugsys->userinfo
['userid'] AND can_perform('canputattach', $bug['product']))))
196 $message->errorPermission();
199 $attachapi = new AttachmentAPI($bugsys);
200 $attachapi->set('attachmentid', $bugsys->in
['attachmentid']);
201 $attachapi->dorelations
= array();
202 $attachapi->set_condition();
204 if ($bugsys->in
['__delete__'] != '')
206 if (!(can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid'])))
208 $message->errorPermission();
211 $attachapi->delete();
213 $message->redirect(T('The attachment was successfully deleted.'), "showreport.php?bugid=$bug[bugid]");
218 $log->set_bugid($bug['bugid']);
219 $log->set_attachmentid($bugsys->in
['attachmentid']);
223 $log->add_data(true
, $attachapi->objdata
, array('attachment'), true
, 'attachment');
225 $attachapi->set('description', $bugsys->in
['description']);
226 $attachapi->set('obsolete', $bugsys->in
['obsolete']);
227 $attachapi->update();
229 $log->add_data(false
, $attachapi->values
, array('attachment'), true
, 'attachment');
231 $log->update_history();
233 $message->redirect(T('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
237 // ###################################################################
239 if ($_REQUEST['do'] == 'edit')
241 if (!(can_perform('caneditattach', $bug['product']) OR ($attachment['userid'] == $bugsys->userinfo
['userid'] AND can_perform('canputattach', $bug['product']))))
243 $message->errorPermission();
246 $show['delete'] = (can_perform('caneditattach', $bug['product']) AND can_perform('candeletedata', $bug['productid']));
248 eval('$template->flush("' . $template->fetch('editattach') . '");');