attachment.php

   1 <?php
   2 /*=====================================================================*\
   3 || ################################################################### ||
   4 || # BugStrike [#]version[#]
   5 || # --------------------------------------------------------------- # ||
   6 || # Copyright ©2002-[#]year[#] by Iris Studios, Inc. All Rights Reserved. # ||
   7 || # This file may not be reproduced in any way without permission.  # ||
   8 || # --------------------------------------------------------------- # ||
   9 || # User License Agreement at http://www.iris-studios.com/license/  # ||
  10 || ################################################################### ||
  11 \*=====================================================================*/
  12
  13 $fetchtemplates = array(
  14         'newattach',
  15         'editattach'
  16 );
  17
  18 define('SVN', '$Id$');
  19
  20 $focus['showreport'] = 'focus';
  21
  22 require_once('./global.php');
  23
  24 if (isset($bugsys->in['attachmentid']))
  25 {
  26         $attachment = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = " . intval($bugsys->in['attachmentid']));
  27         if (!$attachment)
  28         {
  29                 $message->error($lang->getlex('error_invalid_id'));
  30         }
  31 }
  32
  33 $bug = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "bug WHERE bugid = " . (($attachment['attachmentid']) ? $attachment['bugid'] : intval($bugsys->in['bugid'])));
  34 if (!$bug)
  35 {
  36         $message->error($lang->getlex('error_invalid_id'));
  37 }
  38
  39 // setup logging
  40 require_once('./includes/class_history.php');
  41 $log = new History();
  42 $log->bugid = $bug['bugid'];
  43
  44 // ###################################################################
  45
  46 if ($_POST['do'] == 'insert')
  47 {
  48         if (!can_perform('canputattach'))
  49         {
  50                 $message->error_permission();
  51         }
  52
  53         // create alias
  54         $FILE =& $_FILES['attachment'];
  55
  56         // PHP errors
  57         switch ($FILE['error'])
  58         {
  59                 case 0: break;
  60                 case 1: $message->error($lang->string('PHP said the file you uploaded was too big.')); break;
  61                 case 2: $message->error($lang->string('The file exceeds the allowed upload size.')); break;
  62                 case 3: $message->error($lang->string('The file was only partially uploaded.')); break;
  63                 case 4: $message->error($lang->string('The file was not uploaded at all.')); break;
  64                 case 6: $message->error($lang->string('PHP could not find the /tmp directory.')); break;
  65         }
  66
  67         // did it upload?
  68         if (!is_uploaded_file($FILE['tmp_name']))
  69         {
  70                 $message->error($lang->string('The file you specified did not upload.'));
  71         }
  72
  73         // #*# put some MIME-type validation here
  74
  75         if (!$bugsys->in['description'])
  76         {
  77                 $message->error($lang->string('You need to specify a file description.'));
  78         }
  79
  80         $filedata = $bugsys->escape(file_get_contents($FILE['tmp_name']), true, true);
  81         $time = TIMENOW;
  82
  83         // insert an attachment
  84         $db->query("
  85                 INSERT INTO attachment
  86                         (bugid, filename, mimetype, filesize,
  87                         attachment, description, dateline, userid)
  88                 VALUES
  89                         ($bug[bugid], '" . $bugsys->escape($FILE['name']) . "',
  90                         '" . $bugsys->escape($FILE['type']) . "', " . intval($FILE['size']) . ",
  91                         '$filedata', '" . $bugsys->in['description'] . "', $time,
  92                         " . $bugsys->userinfo['userid'] . "
  93                 )"
  94         );
  95
  96         // mark obsoletes
  97         $obsoletes = $_POST['obsoletes'];
  98         if (count($obsoletes) > 0)
  99         {
 100                 array_walk($obsoletes, 'intval');
 101                 $db->query("UPDATE " . TABLE_PREFIX . "attachment SET obsolete = 1 WHERE attachmentid IN (" . implode(',', $obsoletes) . ") AND !obsolete AND bugid = $bug[bugid]");
 102
 103                 $log->arguments = array($attachmentid, $FILE['name'], implode(', ', $obsoletes));
 104                 $log->log($log->diff($lang->string('Obsoleted attachments'), '', implode(', ', $obsoletes)));
 105         }
 106
 107         // handle comment stuff
 108         if (can_perform('canpostcomments') AND trim($bugsys->in['comment']))
 109         {
 110                 $bugsys->in['comment_parsed'] = $bugsys->in['comment'];
 111
 112                 if (!$bugsys->options['allowhtml'])
 113                 {
 114                         $bugsys->in['comment_parsed'] = $bugsys->sanitize($bugsys->in['comment_parsed']);
 115                 }
 116
 117                 $db->query("
 118                         INSERT INTO " . TABLE_PREFIX . "comment
 119                                 (bugid, userid, dateline, comment, comment_parsed)
 120                         VALUES
 121                                 ($bug[bugid], " . $bugsys->userinfo['userid'] . ",
 122                                 $time, '" . $bugsys->in['comment'] . "',
 123                                 '" . nl2br($bugsys->in['comment_parsed']) . "'
 124                         )"
 125                 );
 126         }
 127
 128         // update the last post data
 129         $db->query("UPDATE " . TABLE_PREFIX . "bug SET lastposttime = $time, lastpostby = " . $bugsys->userinfo['userid'] . " WHERE bugid = $bug[bugid]");
 130
 131         $message->redirect($lang->string('The attachment has been added to the bug.'), "showreport.php?bugid=$bug[bugid]");
 132 }
 133
 134 // ###################################################################
 135
 136 if ($_REQUEST['do'] == 'add')
 137 {
 138         if (!can_perform('canputattach'))
 139         {
 140                 $message->error_permission();
 141         }
 142
 143         $MAXFILESIZE = $funct->fetch_max_attachment_size();
 144
 145         $show['addcomment'] = ((can_perform('canpostcomments')) ? true : false);
 146         $show['obsoletes'] = false;
 147
 148         $obsoletes_fetch = $db->query("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE bugid = $bug[bugid] AND !obsolete");
 149         $obsoletes = '';
 150         while ($obsolete = $db->fetch_array($obsoletes_fetch))
 151         {
 152                 $show['obsoletes'] = true;
 153                 $obsoletes .= "<div><input name=\"obsoletes[]\" type=\"checkbox\" value=\"$obsolete[attachmentid]\" /> $obsolete[filename] [$obsolete[description]]</div>\n";
 154         }
 155
 156         eval('$template->flush("' . $template->fetch('newattach') . '");');
 157 }
 158
 159 // ###################################################################
 160
 161 if ($_POST['do'] == 'update')
 162 {
 163         if (!(can_perform('caneditattach') OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach'))))
 164         {
 165                 $message->error_permission();
 166         }
 167
 168         $db->query("
 169                 UPDATE " . TABLE_PREFIX . "attachment
 170                 SET description = '" . $bugsys->in['description'] . "',
 171                         obsolete = " . intval($bugsys->in['obsolete']) . "
 172                 WHERE attachmentid = " . intval($bugsys->in['attachmentid'])
 173         );
 174
 175         $hist[1] = $db->query_first("SELECT * FROM " . TABLE_PREFIX . "attachment WHERE attachmentid = $attachment[attachmentid]");
 176
 177         $diff[0] = array_diff_assoc($attachment, $hist[1]);
 178         $diff[1] = array_diff_assoc($hist[1], $attachment);
 179
 180         $log->arguments = array($attachment['attachmentid']);
 181         $log->log($log->diff('description', $diff[0]['description'], $diff[1]['description']));
 182         $log->log($log->diff('obsolete', $diff[0]['obsolete'], $diff[1]['obsolete']));
 183
 184         $message->redirect($lang->string('The attachment was successfully modified.'), "showreport.php?bugid=$bug[bugid]");
 185 }
 186
 187 // ###################################################################
 188
 189 if ($_REQUEST['do'] == 'edit')
 190 {
 191         if (!(can_perform('caneditattach') OR ($attachment['userid'] == $bugsys->userinfo['userid'] AND can_perform('canputattach'))))
 192         {
 193                 $message->error_permission();
 194         }
 195
 196         $show['delete'] = ((can_perform('caneditattach')) ? true : false);
 197
 198         eval('$template->flush("' . $template->fetch('editattach') . '");');
 199 }
 200
 201 /*=====================================================================*\
 202 || ###################################################################
 203 || # $HeadURL$
 204 || # $Id$
 205 || ###################################################################
 206 \*=====================================================================*/
 207 ?>