r539: Added permission checking to construct_pcv_select()
[bugdar.git] / newreport.php
1 <?php
2 /*=====================================================================*\
3 || ################################################################### ||
4 || # BugStrike [#]version[#]
5 || # --------------------------------------------------------------- # ||
6 || # Copyright ©2002-[#]year[#] by Iris Studios, Inc. All Rights Reserved. # ||
7 || # This file may not be reproduced in any way without permission. # ||
8 || # --------------------------------------------------------------- # ||
9 || # User License Agreement at http://www.iris-studios.com/license/ # ||
10 || ################################################################### ||
11 \*=====================================================================*/
12
13 $fetchtemplates = array(
14 'newreport',
15 );
16
17 define('SVN', '$Id$');
18
19 $focus['newreport'] = 'focus';
20
21 require_once('./global.php');
22 require_once('./includes/functions_product.php');
23
24 if (!can_perform('cansubmitbugs', intval($bugsys->in['productid'])))
25 {
26 $message->error_permission();
27 }
28
29 // ###################################################################
30
31 if (empty($_REQUEST['do']))
32 {
33 $_REQUEST['do'] = 'add';
34 }
35
36 // ###################################################################
37
38 if ($_POST['do'] == 'insert')
39 {
40 // -------------------------------------------------------------------
41 // check permissions on various input values
42 if (!can_perform('canchangestatus', intval($bugsys->in['productid'])))
43 {
44 $bugsys->in['priority'] = $bugsys->options['defaultpriority'];
45 $bugsys->in['status'] = $bugsys->options['defaultstatus'];
46 $bugsys->in['resolution'] = $bugsys->options['defaultresolve'];
47 }
48 else
49 {
50 if (!$bugsys->datastore['priority'][ $bugsys->in['priority'] ])
51 {
52 $bugsys->in['priority'] = $bugsys->options['defaultpriority'];
53 }
54 if (!$bugsys->datastore['status'][ $bugsys->in['status'] ])
55 {
56 $bugsys->in['status'] = $bugsys->options['defaultstatus'];
57 }
58 if (!$bugsys->datastore['resolution'][ $bugsys->in['resolution'] ])
59 {
60 $bugsys->in['resolution'] = $bugsys->options['defaultresolve'];
61 }
62 }
63 if (!can_perform('canassign', intval($bugsys->in['productid'])))
64 {
65 $bugsys->in['assignedto'] = $bugsys->options['defaultassign'];
66 }
67 else
68 {
69 // assigned person is not a dev or a valid user
70 if (!$bugsys->datastore['assignto'][ $bugsys->in['assignedto'] ]['userid'])
71 {
72 $bugsys->in['assignedto'] = $bugsys->options['defaultassign'];
73 }
74 }
75
76 // -------------------------------------------------------------------
77 // product/component/version stuff
78 $pcv = parse_pcv_select($bugsys->in['pcv_select'], true);
79
80 // -------------------------------------------------------------------
81 // sanity checks
82 if (!$pcv)
83 {
84 $message->error($lang->string('Invalid product/component/version selected.'));
85 }
86 if (!$bugsys->in['summary'])
87 {
88 $message->error($lang->string('Please enter a title for the bug'));
89 }
90 if (!$bugsys->in['comment'])
91 {
92 $message->error($lang->string('Please fill in the bug\'s description field'));
93 }
94
95 // -------------------------------------------------------------------
96 // data clean and insert
97 $bugsys->in['comment_parsed'] = $bugsys->in['comment'];
98
99 if (!$bugsys->options['allowhtml'])
100 {
101 $bugsys->in['comment_parsed'] = $bugsys->sanitize($bugsys->in['comment_parsed']);
102 }
103
104 // create the bug report
105 $db->query("
106 INSERT INTO " . TABLE_PREFIX . "bug
107 (userid, productid, componentid, versionid, summary, severity, priority, status, assignedto, resolution)
108 VALUES
109 (" . $bugsys->userinfo['userid'] . ", " . $pcv['product'] . ", " . $pcv['component'] . ", " . $pcv['version'] . ",
110 '" . $bugsys->in['summary'] . "', " . intval($bugsys->in['severity']) . ", " . intval($bugsys->in['priority']) . ",
111 " . intval($bugsys->in['status']) . ", " . intval($bugsys->in['assignedto']) . ", " . intval($bugsys->in['resolution']) . "
112 )"
113 );
114
115 $bugid = $db->insert_id();
116
117 $time = TIMENOW;
118
119 // insert the comment to the database
120 $db->query("
121 INSERT INTO " . TABLE_PREFIX . "comment
122 (bugid, userid, dateline, comment, comment_parsed)
123 VALUES
124 ($bugid, " . $bugsys->userinfo['userid'] . ",
125 $time, '" . $bugsys->in['comment'] . "',
126 '" . nl2br($bugsys->in['comment_parsed']) . "'
127 )"
128 );
129
130 $initialreport = $db->insert_id();
131
132 $db->query("
133 UPDATE " . TABLE_PREFIX . "bug
134 SET dateline = $time,
135 initialreport = $initialreport,
136 lastposttime = $time,
137 lastpostby = " . $bugsys->userinfo['userid'] . ",
138 hiddenlastposttime = $time,
139 hiddenlastpostby = " . $bugsys->userinfo['userid'] . "
140 WHERE bugid = $bugid"
141 );
142
143 $db->query("INSERT INTO " . TABLE_PREFIX . "vote (bugid, votefor, voteagainst) VALUES ($bugid, 0, 0)");
144
145 $message->redirect($lang->string('The bug has been added to the database.'), "showreport.php?bugid=$bugid");
146 }
147
148 // ###################################################################
149
150 if ($_REQUEST['do'] == 'add')
151 {
152 $select['severity'] = construct_datastore_select('severity', 'severity', 'severityid');
153
154 $show['changestatus'] = ((can_perform('canchangestatus')) ? true : false);
155
156 if (can_perform('canchangestatus'))
157 {
158 $select['priority'] = construct_datastore_select('priority', 'priority', 'priorityid');
159 $select['status'] = construct_datastore_select('status', 'status', 'statusid');
160 $select['resolution'] = construct_datastore_select('resolution', 'resolution', 'resolutionid');
161 }
162
163 $show['assign'] = ((can_perform('canassign')) ? true : false);
164
165 if (can_perform('canassign'))
166 {
167 foreach ($bugsys->datastore['assignto'] AS $dev)
168 {
169 $value = $dev['userid'];
170 $label = construct_user_display($dev, false);
171 eval('$select[dev] .= "' . $template->fetch('selectoption') . '";');
172 }
173 }
174
175 $pcv_select = construct_pcv_select('cansubmitbugs');
176
177 eval('$template->flush("' . $template->fetch('newreport') . '");');
178 }
179
180 /*=====================================================================*\
181 || ###################################################################
182 || # $HeadURL$
183 || # $Id$
184 || ###################################################################
185 \*=====================================================================*/
186 ?>