<?php
/*=====================================================================*\
|| ################################################################### ||
|| # [#]app[#] [#]version[#]
|| # --------------------------------------------------------------- # ||
|| # All parts of this file are Š2003-[#]year[#] Iris Studios, Inc. No     # || 
|| # part of this file may be reproduced in any way: part or whole.  # ||
|| # --------------------------------------------------------------- # ||
|| # Š2003 - [#]year[#] Iris Studios, Inc. | http://www.iris-studios.com   # ||
|| ################################################################### ||
\*=====================================================================*/

require_once('./global.php');

if (!($bugsys->userinfo['permissions'] & CANSUBMITBUGS))
{
	echo 'NO permission';
	exit;
}

// ###################################################################

if (empty($_REQUEST['do']))
{
	$_REQUEST['do'] = 'add';
}

// ###################################################################

if ($_POST['do'] == 'insert')
{
	sanitize(array(
		'product' => INT,
		'component' => INT,
		'version' => INT,
		'summary' => STR_NOHTML,
		'severity' => INT,
		'priority' => INT,
		'status' => INT,
		'resolution' => INT,
		'assignedto' => INT,
		'comment' => STR)
	);
	
	// check permissions on various input values
	if (!($bugsys->userinfo['permissions'] & CANCHANGESTATUS))
	{
		$vars['priority'] = $bugsys->options['defaultpriority'];
		$vars['status'] = $bugsys->options['defaultstatus'];
		$vars['resolution'] = $bugsys->options['defaultresolve'];
	}
	else
	{
		if (!$bugsys->datastore['priority']["$vars[priority]"])
		{
			$vars['priority'] = $bugsys->options['defaultpriority'];
		}
		if (!$bugsys->datastore['status']["$vars[status]"])
		{
			$vars['status'] = $bugsys->options['defaultstatus'];
		}
		if (!$bugsys->datastore['resolution']["$vars[resolution]"])
		{
			$vars['resolution'] = $bugsys->options['defaultresolve'];
		}
	}
	if (!($bugsys->userinfo['permissions'] & CANASSIGN))
	{
		$vars['assignedto'] = $bugsys->options['defaultassign'];
	}
	else
	{
		// assigned person is not a dev or a valid user
		if (!$bugsys->datastore['assignto']["$vars[assignedto]"]['userid'])
		{
			$vars['assignedto'] = $bugsys->options['defaultassign'];
		}
	}
	
	if (!$vars['product'] OR !$vars['component'] OR !$vars['version'])
	{
		echo 'there was a problem selecting the product, component, or version';
		exit;
	}
	if (!$vars['summary'])
	{
		echo 'please enter a bug title';
		exit;
	}
	if (!$vars['comment'])
	{
		echo 'please enter a bug description';
		exit;
	}
	$product = $bugsys->datastore['product']["$vars[product]"];
	if (!$product)
	{
		echo 'please select a valid product';
		exit;
	}
	$version = $bugsys->datastore['version']["$vars[version]"];
	if (!$version)
	{
		echo 'please select a valid version';
		exit;
	}
	// no component
	if ($vars['component'] == -1)
	{
		// not global version and version.productid != product.productid
		if ($version['productid'] != 0 AND $version['productid'] != $product['productid'])
		{
			echo 'invalid version specified';
			exit;
		}
	}
	// using a component
	else
	{
		$component = $bugsys->datastore['product']["$vars[component]"];
		// component has the right mother
		if ($component['componentmother'] == $product['productid'])
		{
			// version.productid != {component.productid | product.productid}
			if ($version['productid'] != $component['productid'] AND $version['productid'] != $product['productid'])
			{
				echo 'invalid version specified';
				exit;
			}
		}
		else
		{
			echo 'invalid component specified';
			exit;
		}
	}
	
	if (!$bugsys->options['allowhtml'])
	{
		$vars['comment'] = htmlspecialcharslike($vars['comment']);
	}
	
	// create the bug report
	$DB_sql->query("
		INSERT INTO " . TABLE_PREFIX . "bug
			(userid, productid, componentid, versionid, summary, severity, priority, status, assignedto, resolution)
		VALUES
			(" . $bugsys->userinfo['userid'] . ", $vars[product], $vars[component], $vars[version],
			'" . addslasheslike($vars['summary']) . "', $vars[severity], $vars[priority], $vars[status], $vars[assignedto], $vars[resolution]
		)"
	);
	
	$bugid = $DB_sql->insert_id();
	
	// insert the comment to the database
	$DB_sql->query("
		INSERT INTO " . TABLE_PREFIX . "comment
			(bugid, userid, dateline, comment ## comment_parsed -- not using, ATM ###
			)
		VALUES
			($bugid, " . $bugsys->userinfo['userid'] . ",
			" . time() . ", '" . addslasheslike($vars['comment']) . "'
		)"
	);
	
	echo 'bug is done!';
}

// ###################################################################

if ($_REQUEST['do'] == 'add')
{
	sanitize(array(
		'product' => INT,
		'component' => INT,
		'version' => INT)
	);
	
	// the user can hit the back button without reposting data...
	if (!$vars['product'] OR !$vars['component'] OR !$vars['version'])
	{
		$method = 'get';
	}
	else
	{
		$method = 'post';
	}
	
	echo '<form name="newbug" action="newreport.php" method="' . $method . '">';
	
	$do = 'add';
	
	if (!$vars['product'])
	{
		echo '<strong>Product:</strong> <select name="product">';
		$products = $DB_sql->query("SELECT * FROM " . TABLE_PREFIX . "product WHERE !componentmother ORDER BY displayorder ASC");
		while ($product = $DB_sql->fetch_array($products))
		{
			echo "<option value=\"$product[productid]\">$product[title]</option>";
		}
		echo '</select>';
	}
	else if (!$vars['component'])
	{
		echo '<strong>Component:</strong> <select name="component"><option value="-1">No Component</option>';
		$components = $DB_sql->query("SELECT * FROM " . TABLE_PREFIX . "product WHERE componentmother IN ($vars[product]) ORDER BY displayorder ASC");
		while ($component = $DB_sql->fetch_array($components))
		{
			echo "<option value=\"$component[productid]\">$component[title]</option>";
		}
		echo '</select>';
		echo '<input type="hidden" name="product" value="' . $vars['product'] . '" />';
	}
	else if (!$vars['version'])
	{
		echo '<strong>Version:</strong> <select name="version">';
		$versions = $DB_sql->query("
			SELECT version.*, product.componentmother, product.title AS productname
			FROM " . TABLE_PREFIX . "version AS version
			LEFT JOIN " . TABLE_PREFIX . "product ON (product.productid = version.productid)
			WHERE version.productid IN (0, $vars[product]" . iff($vars['component'] != -1, ", $vars[component]", '') . ")
			ORDER BY version.productid, version.displayorder ASC"
		);
		
		while ($version = $DB_sql->fetch_array($versions))
		{
			$versionlist["$version[productid]"][] = $version;
			$lookup["$version[productid]"] = array('componentmother' => $version['componentmother'], 'productname' => $version['productname']);
		}
		
		foreach ($versionlist AS $productid => $versions)
		{
			$prepend = '-- ';
			// global version
			if ($productid == 0)
			{
				echo '<optgroup label="Global Versions">';
			}
			// component
			else if ($lookup["$productid"]['componentmother'])
			{
				echo '<optgroup label="' . $lookup["$productid"]['productname'] . '">';
			}
			else
			{
				echo '<optgroup label="' . $lookup["$productid"]['productname'] . '">';
			}
			
			foreach ($versions AS $version)
			{
				echo '<option value="' . $version['versionid'] . '">' . $prepend . $version['version'] . '</option>';
			}
			
			echo '</optgroup>';
		}
		
		echo '</select>';
		echo '<input type="hidden" name="product" value="' . $vars['product'] . '" />';
		echo '<input type="hidden" name="component" value="' . $vars['component'] . '" />';
	}
	else
	{
		$do = 'insert';
		echo '<div><strong>Summary/Title:</strong> <input type="text" name="summary" size="25" /></div>';
		
		echo '<div><strong>Severity:</strong> <select name="severity">';
		foreach ($bugsys->datastore['severity'] AS $severity)
		{
			echo '<option value="' . $severity['severityid'] . '">' . $severity['severity'] . '</option>';
		}
		echo '</select></div>';
		
		if ($bugsys->userinfo['permissions'] & CANCHANGESTATUS)
		{
			echo '<div><strong>Priority:</strong> <select name="priority">';
			foreach ($bugsys->datastore['priority'] AS $priority)
			{
				echo '<option value="' . $priority['priorityid'] . '">' . $priority['priority'] . '</option>';
			}
			echo '</select></div>';
			
			echo '<div><strong>Status:</strong> <select name="status">';
			foreach ($bugsys->datastore['status'] AS $status)
			{
				echo '<option value="' . $status['statusid'] . '">' . $status['status'] . '</option>';
			}
			echo '</select></div>';
			
			echo '<div><strong>Resolution:</strong> <select name="resolution">';
			foreach ($bugsys->datastore['resolution'] AS $resolution)
			{
				echo '<option value="' . $resolution['resolutionid'] . '">' . $resolution['resolution'] . '</option>';
			}
			echo '</select></div>';
		}
		
		if ($bugsys->userinfo['permissions'] & CANASSIGN)
		{
			echo '<div><strong>Assigned to:</strong> <select name="assignedto"><option value="0">No Assignment</option>';
			foreach ($bugsys->datastore['assignto'] AS $dev)
			{
				fetch_user_display_name($dev);
				echo '<option value="' . $dev['userid'] . '">' . $dev['displayname'] . iff($dev['showemail'], ' <' . $dev['email'] . '>', '') . '</option>';
			}
			echo '</select></div>';
		}
		
		echo '<div><strong>Detailed description:</strong><div><textarea name="comment" rows="15" cols="75"></textarea></div></div>';
		
		echo '<input type="hidden" name="product" value="' . $vars['product'] . '" />';
		echo '<input type="hidden" name="component" value="' . $vars['component'] . '" />';
		echo '<input type="hidden" name="version" value="' . $vars['version'] . '" />';
	}
	
	echo '<div><input type="hidden" name="do" value="' . $do . '" /><input type="submit" name="submit" value="  Proceed  " /></div>';
	
	echo '</form>';
}

/*=====================================================================*\
|| ###################################################################
|| # $HeadURL$
|| # $Id$
|| ###################################################################
\*=====================================================================*/
?>