noalyss_ynh/sources/html/ajax_todo_list.php

<?php
/*
 *   This file is part of NOALYSS.
 *
 *   NOALYSS is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 *   NOALYSS is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *   GNU General Public License for more details.
 *
 *   You should have received a copy of the GNU General Public License
 *   along with NOALYSS; if not, write to the Free Software
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/

// Copyright Author Dany De Bontridder danydb@aevalys.eu

/*!\file
 * \brief handle the ajax request for the todo_list (delete, update
 * and insert)
 * for add, needed parameters
 * - gDossier
 * - d date,
 * - t title
 * - de description
 * for update, same as ADD +
 * - i id
 * for delete
 * - gDossier
 * - i id
 */
define ('ALLOWED',1);
require_once '../include/constant.php';
require_once  NOALYSS_INCLUDE.'/class_dossier.php';
require_once  NOALYSS_INCLUDE.'/class_todo_list.php';
require_once  NOALYSS_INCLUDE.'/class_database.php';
require_once  NOALYSS_INCLUDE.'/class_user.php';
mb_internal_encoding("UTF-8");

$cn= Dossier::connect();
global $g_user;
$g_user=new User($cn);
$g_user->check(true);
$g_user->check_dossier(Dossier::id(),true);
set_language();
ajax_disconnected('add_todo_list');
////////////////////////////////////////////////////////////////////////////////
// Display the note
////////////////////////////////////////////////////////////////////////////////
if (isset($_REQUEST['show']))
{
    $cn=new Database(dossier::id());
    $todo=new Todo_list($cn);
    $todo->set_parameter('id',$_REQUEST['id']);
    $todo->load();
    $content=$todo->display();
    header('Content-type: text/xml; charset=UTF-8');
    $dom=new DOMDocument('1.0','UTF-8');
    $tl_id=$dom->createElement('tl_id',$todo->get_parameter('id'));
    $tl_content=$dom->createElement('tl_content',$content);
    
    
    $root=$dom->createElement("root");
    
    $root->appendChild($tl_id);
    $root->appendChild($tl_content);
    $dom->appendChild($root);
   
    echo $dom->saveXML();
    exit();
}
////////////////////////////////////////////////////////////////////////////////
// Delete  the note
////////////////////////////////////////////////////////////////////////////////
if (isset($_REQUEST['del']))
{
    $cn=new Database(dossier::id());
    $todo=new Todo_list($cn);
    $todo->set_parameter('id',$_REQUEST['id']);
    $todo->delete();
    exit();
}
$ac=HtmlInput::default_value_get('act', 'save');

////////////////////////////////////////////////////////////////////////////////
// Save the modification of a note
////////////////////////////////////////////////////////////////////////////////
if ($ac == 'save')
{
    
    $cn=new Database(dossier::id());
    $todo=new Todo_List($cn);
     $id=HtmlInput::default_value_get("id", 0);
    $todo->set_parameter("id",$id);
    if ($id <> 0 ) { $todo->load(); }
    else
    {
        $todo->set_parameter("owner", $_SESSION['g_user']);
    }
    
    $todo->set_parameter("date", HtmlInput::default_value_get("p_date_todo", ""));
    $todo->set_parameter("title", HtmlInput::default_value_get("p_title", ""));
    $todo->set_parameter("desc", HtmlInput::default_value_get("p_desc", ""));
    $todo->set_is_public(HtmlInput::default_value_get("p_public", "N"));
    
    if ( $todo->get_parameter('owner') == $_SESSION['g_user'] ) $todo->save();
    $todo->load();
     header('Content-type: text/xml; charset=UTF-8');
    $dom=new DOMDocument('1.0','UTF-8');
    $tl_id=$dom->createElement('tl_id',$todo->get_parameter('id'));
    $tl_content=$dom->createElement('row',$todo->display_row('class="odd"','N'));
     $root=$dom->createElement("root");
     $todo_class=$todo->get_class();
     $todo_class=($todo_class=="")?' odd ':$todo_class;
     $class=$dom->createElement("style",$todo_class);
    
    $root->appendChild($tl_id);
    $root->appendChild($tl_content);
    $root->appendChild($class);
    $dom->appendChild($root);
   
    echo $dom->saveXML();
    exit();
}

////////////////////////////////////////////////////////////////////////////////
// Display a list to select the user with who we want to share notes
////////////////////////////////////////////////////////////////////////////////
if ($ac=='shared_note')
{
    $id=HtmlInput::default_value_get("todo_id", -1);
    // If note_id is not correct then give an error
    if ($id==-1||isNumber($id)==0)
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Erreur : note invalide"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    if ($id==0)
    {
        ob_start();
        echo HtmlInput::title_box(_('Liste utilisateurs'), "shared_{$id}");
        echo '<p class="notice">';
        echo _("Vous devez d'abord sauver");
        echo '</p>';
        echo '<p style="text-align:center">';
        echo HtmlInput::submit('close'.$id, 'Ferme'," onclick=\"\$('shared_{$id}').remove();\"");
        echo '</p>';
        $result=ob_get_clean();
    // 
    // output the XML
    header('Content-type: text/xml; charset=UTF-8');
    $dom=new DOMDocument('1.0', 'UTF-8');
    $tl_id=$dom->createElement('content',  escape_xml($result));
    $dom->appendChild($tl_id);
    echo $dom->saveXML();
        return;
    }
    $todo=new Todo_List($cn);
    $todo->set_parameter("id", $id);
    $todo->load();
    if ($g_user->login!=$todo->get_parameter("owner"))
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Cette note n'est pas à vous"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    if ($g_user->check_action(SHARENOTE)== 0) 
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Accès interdit"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    ob_start();
    echo HtmlInput::title_box(_('Liste utilisateurs'), "shared_".$id);
    $todo->display_user();
    echo '<p style="text-align:center">';
    echo HtmlInput::submit('close'.$id, 'Ferme'," onclick=\"\$('shared_{$id}').remove();\"");
    echo '</p>';
    $result=ob_get_clean();
    // 
    // output the XML
    header('Content-type: text/xml; charset=UTF-8');
    $dom=new DOMDocument('1.0', 'UTF-8');
    $tl_id=$dom->createElement('content',  escape_xml($result));
    $dom->appendChild($tl_id);
    echo $dom->saveXML();
    return;
}
////////////////////////////////////////////////////////////////////////////////
// Share the note with someone or remove it
////////////////////////////////////////////////////////////////////////////////
if ( $ac=="set_share") 
{
    $id=HtmlInput::default_value_get("todo_id", 0);
    $p_login=HtmlInput::default_value_get("login","");
    // If note_id is not correct then give an error
    if ($id==0||isNumber($id)==0  || trim ($p_login)=="")
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Erreur : paramètre invalide"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    $todo=new Todo_List($cn);
    $todo->set_parameter("id", $id);
    $todo->load();
    if ($g_user->login!=$todo->get_parameter("owner"))
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Cette note n'est pas à vous"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    if ($g_user->login!=$todo->get_parameter("owner"))
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Cette note n'est pas à vous"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    } 
    if ($g_user->check_action(SHARENOTE)== 0) 
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $tl_id=$dom->createElement('content', _("Accès interdit"));
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    if ( $todo->is_shared_with($p_login) == 0 )
    {
        // Add a share to the user
        $todo->add_share($p_login);
        
    } else {
        // remove a share from the user
        $todo->remove_share($p_login);
    }
}
////////////////////////////////////////////////////////////////////////////////
// Remove the share of a note which the connected user doesn't own
// 
////////////////////////////////////////////////////////////////////////////////
if ( $ac=="remove_share") 
{
    $id=HtmlInput::default_value_get("todo_id", 0);
    $p_login=HtmlInput::default_value_get("login","");
    // If note_id is not correct then give an error
    if ($id==0||isNumber($id)==0  || trim ($p_login)=="")
    {
        header('Content-type: text/xml; charset=UTF-8');
        $dom=new DOMDocument('1.0', 'UTF-8');
        $status=$dom->createElement('status', "nok");
        $tl_id=$dom->createElement('content', _("Erreur : paramètre invalide"));
        $dom->appendChild($status);
        $dom->appendChild($tl_id);
        echo $dom->saveXML();
        return;
    }
    $todo=new Todo_List($cn);
    $todo->set_parameter("id", $id);
    $todo->load();
    $todo->remove_share($p_login);
    
    header('Content-type: text/xml; charset=UTF-8');
    $dom=new DOMDocument('1.0', 'UTF-8');
    $status=$dom->createElement('status', "ok");
    $dom->appendChild($status);
    echo $dom->saveXML();
    return;
}