This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php declare(strict_types=1); |
||
2 | |||
3 | /* |
||
4 | * You may not change or alter any portion of this comment or credits |
||
5 | * of supporting developers from this source code or any supporting source code |
||
6 | * which is considered copyrighted (c) material of the original comment or credit authors. |
||
7 | * |
||
8 | * This program is distributed in the hope that it will be useful, |
||
9 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
10 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
11 | */ |
||
12 | |||
13 | /** |
||
14 | * @copyright {@link https://xoops.org/ XOOPS Project} |
||
15 | * @license {@link https://www.gnu.org/licenses/gpl-2.0.html GNU GPL 2 or later} |
||
16 | * @author Brian Wahoff <[email protected]> |
||
17 | * @author Eric Juden <[email protected]> |
||
18 | * @author XOOPS Development Team |
||
19 | */ |
||
20 | |||
21 | use Xmf\Request; |
||
22 | use XoopsModules\Xhelp\{ |
||
23 | EventService, |
||
24 | DepartmentHandler, |
||
25 | Helper, |
||
26 | StaffHandler, |
||
27 | TicketHandler, |
||
28 | Utility, |
||
29 | Validation |
||
30 | }; |
||
31 | |||
32 | /** @var DepartmentHandler $departmentHandler */ |
||
33 | /** @var Helper $helper */ |
||
34 | |||
35 | require_once __DIR__ . '/header.php'; |
||
36 | require_once XHELP_INCLUDE_PATH . '/events.php'; |
||
37 | |||
38 | $helper = Helper::getInstance(); |
||
39 | |||
40 | global $xoopsUser, $xhelp_isStaff, $xoopsTpl, $session, $staff, $xhelp_module_header, $allowed_mimetypes, $xoopsUserIsAdmin, $eventService, $xoopsModule; |
||
41 | |||
42 | if (Request::hasVar('deptid', 'GET')) { |
||
43 | $dept_id = Request::getInt('deptid', 0, 'GET'); |
||
44 | } |
||
45 | |||
46 | if (Request::hasVar('view_id', 'GET')) { |
||
47 | $view_id = Request::getInt('view_id', 0, 'GET'); |
||
48 | setcookie('xhelp_logMode', (string)$view_id, time() + 60 * 60 * 24 * 30); |
||
49 | if (isset($dept_id)) { |
||
50 | $helper->redirect("addTicket.php&deptid=$dept_id"); |
||
51 | } else { |
||
52 | $helper->redirect('addTicket.php'); |
||
53 | } |
||
54 | } else { |
||
55 | if (isset($_COOKIE['xhelp_logMode'])) { |
||
56 | setcookie('xhelp_logMode', $_COOKIE['xhelp_logMode'], time() + 60 * 60 * 24 * 30); |
||
57 | } else { |
||
58 | setcookie('xhelp_logMode', '1', time() + 60 * 60 * 24 * 30); |
||
59 | } |
||
60 | } |
||
61 | |||
62 | $eventService = new EventService(); |
||
63 | |||
64 | /* |
||
65 | $eventService->advise('new_ticket', xhelp_notificationService::getInstance()); |
||
66 | $eventService->advise('new_ticket', xhelp_logService::getInstance()); |
||
67 | $eventService->advise('new_ticket', xhelp_cacheService::getInstance()); |
||
68 | $eventService->advise('new_response', xhelp_logService::getInstance()); |
||
69 | $eventService->advise('new_response', xhelp_notificationService::getInstance()); |
||
70 | $eventService->advise('update_owner', xhelp_notificationService::getInstance()); |
||
71 | $eventService->advise('update_owner', xhelp_logService::getInstance()); |
||
72 | */ |
||
73 | |||
74 | /** @var TicketHandler $ticketHandler */ |
||
75 | /** @var \XoopsModules\Xhelp\TicketHandler $ticketHandler */ |
||
76 | $ticketHandler = $helper->getHandler('Ticket'); |
||
77 | /** @var StaffHandler $staffHandler */ |
||
78 | /** @var \XoopsModules\Xhelp\StaffHandler $staffHandler */ |
||
79 | $staffHandler = $helper->getHandler('Staff'); |
||
80 | /** @var \XoopsGroupPermHandler $grouppermHandler */ |
||
81 | $grouppermHandler = xoops_getHandler('groupperm'); |
||
82 | /** @var \XoopsMemberHandler $memberHandler */ |
||
83 | $memberHandler = xoops_getHandler('member'); |
||
84 | /** @var \XoopsModules\Xhelp\MembershipHandler $membershipHandler */ |
||
85 | $membershipHandler = $helper->getHandler('Membership'); |
||
86 | /** @var \XoopsModules\Xhelp\TicketFieldDepartmentHandler $ticketFieldDepartmentHandler */ |
||
87 | $ticketFieldDepartmentHandler = $helper->getHandler('TicketFieldDepartment'); |
||
88 | |||
89 | $module_id = $xoopsModule->getVar('mid'); |
||
90 | |||
91 | if ($xoopsUser) { |
||
92 | if (!isset($dept_id)) { |
||
93 | $dept_id = (int)Utility::getMeta('default_department'); |
||
94 | } |
||
95 | |||
96 | if (Request::hasVar('saveTicket', 'GET') && 1 === $_GET['saveTicket']) { |
||
97 | saveTicket(); |
||
98 | } |
||
99 | |||
100 | // if (!isset($_POST['addTicket'])) { // Initial load of page |
||
101 | if (Request::hasVar('addTicket', 'POST')) { |
||
102 | $dept_id = Request::getInt('departments', 0, 'POST'); |
||
103 | |||
104 | // require_once XHELP_CLASS_PATH . '/validator.php'; |
||
105 | $v = []; |
||
106 | $v['subject'][] = new Validation\ValidateLength(Request::getString('subject', '', 'POST'), 2, 255); |
||
107 | $v['description'][] = new Validation\ValidateLength(Request::getString('description', '', 'POST'), 2); |
||
108 | |||
109 | // Get current dept's custom fields |
||
110 | $fields = $ticketFieldDepartmentHandler->fieldsByDepartment($dept_id, true); |
||
111 | $aFields = []; |
||
112 | |||
113 | foreach ($fields as $field) { |
||
114 | $values = $field->getVar('fieldvalues'); |
||
115 | if (XHELP_CONTROL_YESNO == $field->getVar('controltype')) { |
||
116 | $values = [1 => _YES, 0 => _NO]; |
||
117 | } |
||
118 | $fieldname = $field->getVar('fieldname'); |
||
119 | |||
120 | if (XHELP_CONTROL_FILE != $field->getVar('controltype')) { |
||
121 | $checkField = Request::getString('fieldname', '', 'POST'); //array? |
||
122 | } else { |
||
123 | $checkField = $_FILES[$fieldname]; |
||
124 | } |
||
125 | |||
126 | $v[$fieldname][] = new Validation\ValidateRegex($checkField, $field->getVar('validation'), $field->getVar('required')); |
||
127 | |||
128 | $aFields[$field->getVar('id')] = [ |
||
129 | 'name' => $field->getVar('name'), |
||
130 | 'desc' => $field->getVar('description'), |
||
131 | 'fieldname' => $field->getVar('fieldname'), |
||
132 | 'defaultvalue' => $field->getVar('defaultvalue'), |
||
133 | 'controltype' => $field->getVar('controltype'), |
||
134 | 'required' => $field->getVar('required'), |
||
135 | 'fieldlength' => $field->getVar('fieldlength'), |
||
136 | 'maxlength' => $field->getVar('fieldlength') < 50 ? $field->getVar('fieldlength') : 50, |
||
137 | 'weight' => $field->getVar('weight'), |
||
138 | 'fieldvalues' => $values, |
||
139 | 'validation' => $field->getVar('validation'), |
||
140 | ]; |
||
141 | } |
||
142 | |||
143 | saveTicket($aFields); // Save ticket information in a session |
||
144 | |||
145 | // Perform each validation |
||
146 | $fields = []; |
||
147 | $errors = []; |
||
148 | foreach ($v as $fieldname => $validator) { |
||
149 | if (Utility::checkRules($validator, $errors)) { |
||
150 | $fields[$fieldname]['haserrors'] = false; |
||
151 | } else { |
||
152 | //Mark field with error |
||
153 | $fields[$fieldname]['haserrors'] = true; |
||
154 | $fields[$fieldname]['errors'] = $errors; |
||
155 | } |
||
156 | } |
||
157 | |||
158 | if (!empty($errors)) { |
||
159 | $session->set('xhelp_validateError', $fields); |
||
160 | $message = _XHELP_MESSAGE_VALIDATE_ERROR; |
||
161 | $helper->redirect('addTicket.php'); |
||
162 | } |
||
163 | |||
164 | // /** @var \XoopsModules\Xhelp\TicketHandler $ticketHandler */ |
||
165 | $ticketHandler = $helper->getHandler('Ticket'); |
||
166 | /** @var \XoopsModules\Xhelp\Ticket $ticket */ |
||
167 | $ticket = $ticketHandler->create(); |
||
168 | $ticket->setVar('uid', Request::getInt('user_id', 0, 'POST')); |
||
169 | $ticket->setVar('subject', Request::getString('subject', '', 'POST')); |
||
170 | $ticket->setVar('description', Request::getString('description', '', 'POST')); |
||
171 | $ticket->setVar('department', $dept_id); |
||
172 | $ticket->setVar('priority', Request::getInt('priority', 0, 'POST')); |
||
173 | if ($xhelp_isStaff && 2 === $_COOKIE['xhelp_logMode']) { |
||
174 | $ticket->setVar('status', Request::getInt('status', 0, 'POST')); // Set status |
||
175 | // if (Request::hasVar('owner', 'POST')) { //Check if user claimed ownership |
||
176 | if (!Request::hasVar('owner', 'POST')) { |
||
177 | if (Request::getInt('owner', 0, 'POST') > 0) { |
||
178 | $oldOwner = 0; |
||
179 | $session->set('xhelp_oldOwner', $oldOwner); |
||
180 | $ticket->setVar('ownership', Request::getInt('owner', 0, 'POST')); |
||
181 | $session->set('xhelp_changeOwner', true); |
||
182 | } |
||
183 | } |
||
184 | $session->set('xhelp_ticket_ownership', Request::getInt('owner', 0, 'POST')); // Store in session |
||
185 | } else { |
||
186 | $ticket->setVar('status', 1); |
||
187 | } |
||
188 | $ticket->setVar('posted', time()); |
||
189 | $ticket->setVar('userIP', getenv('REMOTE_ADDR')); |
||
190 | $ticket->setVar('overdueTime', $ticket->getVar('posted') + ($helper->getConfig('xhelp_overdueTime') * 60 * 60)); |
||
191 | |||
192 | $aUploadFiles = []; |
||
193 | if ($helper->getConfig('xhelp_allowUpload')) { |
||
194 | foreach ($_FILES as $key => $aFile) { |
||
195 | $pos = mb_strpos($key, 'userfile'); |
||
196 | if (false !== $pos |
||
197 | && is_uploaded_file($aFile['tmp_name'])) { // In the userfile array and uploaded file? |
||
198 | if (false !== ($ret = $ticket->checkUpload($key, $allowed_mimetypes, $errors))) { |
||
199 | $aUploadFiles[$key] = $aFile; |
||
200 | } else { |
||
201 | $errorstxt = implode('<br>', $errors); |
||
202 | $message = sprintf(_XHELP_MESSAGE_FILE_ERROR, $errorstxt); |
||
203 | $helper->redirect('addTicket.php', 5, $message); |
||
204 | } |
||
205 | } |
||
206 | } |
||
207 | } |
||
208 | |||
209 | if ($ticketHandler->insert($ticket)) { |
||
210 | /** @var \XoopsMemberHandler $memberHandler */ |
||
211 | $memberHandler = xoops_getHandler('member'); |
||
212 | $newUser = $memberHandler->getUser($ticket->getVar('uid')); |
||
213 | $ticket->addSubmitter($newUser->getVar('email'), $newUser->getVar('uid')); |
||
214 | |||
215 | if (count($aUploadFiles) > 0) { // Has uploaded files? |
||
216 | foreach ($aUploadFiles as $key => $aFile) { |
||
217 | $file = $ticket->storeUpload($key, null, $allowed_mimetypes); |
||
218 | $eventService->trigger('new_file', [&$ticket, &$file]); |
||
219 | } |
||
220 | } |
||
221 | |||
222 | // Add custom field values to db |
||
223 | /** @var \XoopsModules\Xhelp\TicketValuesHandler $ticketValuesHandler */ |
||
224 | $ticketValuesHandler = $helper->getHandler('TicketValues'); |
||
225 | /** @var \XoopsModules\Xhelp\TicketValues $ticketValues */ |
||
226 | $ticketValues = $ticketValuesHandler->create(); |
||
227 | |||
228 | foreach ($aFields as $field) { |
||
229 | $fieldname = $field['fieldname']; |
||
230 | $fieldtype = $field['controltype']; |
||
231 | |||
232 | if (XHELP_CONTROL_FILE == $fieldtype) { // If custom field was a file upload |
||
233 | if ($helper->getConfig('xhelp_allowUpload')) { // If uploading is allowed |
||
234 | if (is_uploaded_file(($_FILES[$fieldname]['tmp_name'])??'')) { |
||
235 | if (!$ret = $ticket->checkUpload($fieldname, $allowed_mimetypes, $errors)) { |
||
236 | $errorstxt = implode('<br>', $errors); |
||
237 | |||
238 | $message = sprintf(_XHELP_MESSAGE_FILE_ERROR, $errorstxt); |
||
239 | $helper->redirect('addTicket.php', 5, $message); |
||
240 | } |
||
241 | if (false !== ($file = $ticket->storeUpload($fieldname, -1, $allowed_mimetypes))) { |
||
242 | $ticketValues->setVar($fieldname, $file->getVar('id') . '_' . $_FILES[$fieldname]['name']); |
||
243 | } |
||
244 | } |
||
245 | } |
||
246 | } else { |
||
247 | $fieldvalue = Request::getString($fieldname, '', 'POST'); |
||
248 | $ticketValues->setVar($fieldname, $fieldvalue); |
||
249 | } |
||
250 | } |
||
251 | $ticketValues->setVar('ticketid', $ticket->getVar('id')); |
||
252 | |||
253 | if (!$ticketValuesHandler->insert($ticketValues)) { |
||
254 | $message = _XHELP_MESSAGE_NO_CUSTFLD_ADDED; |
||
255 | } |
||
256 | |||
257 | $eventService->trigger('new_ticket', [&$ticket]); |
||
258 | |||
259 | if ($session->get('xhelp_changeOwner')) { |
||
260 | $oldOwner = $session->get('xhelp_oldOwner'); |
||
261 | $eventService->trigger('update_owner', [&$ticket, $oldOwner, $xoopsUser->getVar('uid')]); |
||
262 | $session->del('xhelp_changeOwner'); |
||
263 | $session->del('xhelp_oldOwner'); |
||
264 | $session->del('xhelp_ticket_ownership'); |
||
265 | } |
||
266 | |||
267 | // Add response |
||
268 | if ($xhelp_isStaff |
||
269 | && 2 === $_COOKIE['xhelp_logMode']) { // Make sure user is a staff member and is using advanced form |
||
270 | // if ('' != $_POST['response']) { // Don't run if no value for response |
||
271 | if (Request::hasVar('response', 'POST')) { |
||
272 | /** @var \XoopsModules\Xhelp\ResponseHandler $responseHandler */ |
||
273 | $responseHandler = $helper->getHandler('Response'); |
||
274 | /** @var \XoopsModules\Xhelp\Response $newResponse */ |
||
275 | $newResponse = $responseHandler->create(); |
||
276 | $newResponse->setVar('uid', $xoopsUser->getVar('uid')); |
||
277 | $newResponse->setVar('ticketid', $ticket->getVar('id')); |
||
278 | $newResponse->setVar('message', Request::getString('response', '', 'POST')); |
||
279 | $newResponse->setVar('timeSpent', Request::getInt('timespent', 0, 'POST')); |
||
280 | $newResponse->setVar('updateTime', $ticket->getVar('posted')); |
||
281 | $newResponse->setVar('userIP', $ticket->getVar('userIP')); |
||
282 | if (Request::hasVar('private', 'POST')) { |
||
283 | $newResponse->setVar('private', Request::getInt('private', 0, 'POST')); |
||
284 | } |
||
285 | if ($responseHandler->insert($newResponse)) { |
||
286 | $eventService->trigger('new_response', [&$ticket, &$newResponse]); |
||
287 | $session->del('xhelp_response'); |
||
288 | } |
||
289 | } |
||
290 | } |
||
291 | |||
292 | $session->del('xhelp_ticket'); |
||
293 | $session->del('xhelp_validateError'); |
||
294 | $session->del('xhelp_custFields'); |
||
295 | |||
296 | $message = _XHELP_MESSAGE_ADDTICKET; |
||
297 | } else { |
||
298 | //$session->set('xhelp_ticket', $ticket); |
||
299 | $message = _XHELP_MESSAGE_ADDTICKET_ERROR . $ticket->getHtmlErrors(); // Unsuccessfully added new ticket |
||
300 | } |
||
301 | $helper->redirect('index.php', 5, $message); |
||
302 | } else { |
||
303 | $GLOBALS['xoopsOption']['template_main'] = 'xhelp_addTicket.tpl'; // Always set main template before including the header |
||
304 | require_once XOOPS_ROOT_PATH . '/header.php'; |
||
305 | |||
306 | /** @var \XoopsModules\Xhelp\DepartmentHandler $departmentHandler */ |
||
307 | $departmentHandler = $helper->getHandler('Department'); // Department handler |
||
308 | $criteria = new \Criteria('', ''); |
||
309 | $criteria->setSort('department'); |
||
310 | $departments = $departmentHandler->getObjects($criteria); |
||
311 | if (0 == count($departments)) { |
||
312 | $message = _XHELP_MESSAGE_NO_DEPTS; |
||
313 | $helper->redirect('index.php', 3, $message); |
||
314 | } |
||
315 | $aDept = []; |
||
316 | $myGroups = $memberHandler->getGroupsByUser($xoopsUser->getVar('uid')); |
||
317 | if ($xhelp_isStaff && (0 == $helper->getConfig('xhelp_deptVisibility'))) { // If staff are not applied |
||
0 ignored issues
–
show
Bug
Best Practice
introduced
by
![]() |
|||
318 | foreach ($departments as $dept) { |
||
319 | $deptid = $dept->getVar('id'); |
||
320 | $aDept[] = [ |
||
321 | 'id' => $deptid, |
||
322 | 'department' => $dept->getVar('department'), |
||
323 | ]; |
||
324 | } |
||
325 | } else { |
||
326 | foreach ($departments as $dept) { |
||
327 | $deptid = $dept->getVar('id'); |
||
328 | foreach ($myGroups as $group) { // Check for user to be in multiple groups |
||
329 | if ($grouppermHandler->checkRight(_XHELP_GROUP_PERM_DEPT, $deptid, $group, $module_id)) { |
||
330 | //Assign the first value to $dept_id incase the default department property not set |
||
331 | if (null === $dept_id) { |
||
332 | $dept_id = $deptid; |
||
333 | } |
||
334 | $aDept[] = [ |
||
335 | 'id' => $deptid, |
||
336 | 'department' => $dept->getVar('department'), |
||
337 | ]; |
||
338 | break; |
||
339 | } |
||
340 | } |
||
341 | } |
||
342 | } |
||
343 | |||
344 | // User Dept visibility check |
||
345 | if (empty($aDept)) { |
||
346 | $message = _XHELP_MESSAGE_NO_DEPTS; |
||
347 | $helper->redirect('index.php', 3, $message); |
||
348 | } |
||
349 | |||
350 | $xoopsTpl->assign('xhelp_isUser', true); |
||
351 | |||
352 | if ($xhelp_isStaff) { |
||
353 | $checkStaff = $staffHandler->getByUid($xoopsUser->getVar('uid')); |
||
354 | if (!$hasRights = $checkStaff->checkRoleRights(XHELP_SEC_TICKET_ADD)) { |
||
355 | $message = _XHELP_MESSAGE_NO_ADD_TICKET; |
||
356 | $helper->redirect('index.php', 3, $message); |
||
357 | } |
||
358 | unset($checkStaff); |
||
359 | |||
360 | if (false !== ($hasRights = $staff->checkRoleRights(XHELP_SEC_TICKET_OWNERSHIP, $dept_id))) { |
||
361 | $staff = $membershipHandler->xoopsUsersByDept($dept_id); |
||
362 | |||
363 | $aOwnership = []; |
||
364 | $aOwnership[0] = _XHELP_NO_OWNER; |
||
365 | foreach ($staff as $stf) { |
||
366 | $aOwnership[$stf->getVar('uid')] = $stf->getVar('uname'); |
||
367 | } |
||
368 | $xoopsTpl->assign('xhelp_aOwnership', $aOwnership); |
||
369 | } else { |
||
370 | $xoopsTpl->assign('xhelp_aOwnership', false); |
||
371 | } |
||
372 | } |
||
373 | |||
374 | $has_mimes = false; |
||
375 | if ($helper->getConfig('xhelp_allowUpload')) { |
||
376 | // Get available mimetypes for file uploading |
||
377 | /** @var \XoopsModules\Xhelp\MimetypeHandler $mimetypeHandler */ |
||
378 | $mimetypeHandler = $helper->getHandler('Mimetype'); |
||
379 | $xhelp = Utility::getModule(); |
||
380 | $mid = $xhelp->getVar('mid'); |
||
381 | if ($xhelp_isStaff) { |
||
382 | $criteria = new \Criteria('mime_admin', '1'); |
||
383 | } else { |
||
384 | $criteria = new \Criteria('mime_user', '1'); |
||
385 | } |
||
386 | $mimetypes = $mimetypeHandler->getObjects($criteria); |
||
387 | $mimes = ''; |
||
388 | foreach ($mimetypes as $mime) { |
||
389 | if ('' === $mimes) { |
||
390 | $mimes = $mime->getVar('mime_ext'); |
||
391 | } else { |
||
392 | $mimes .= ', ' . $mime->getVar('mime_ext'); |
||
393 | } |
||
394 | } |
||
395 | $xoopsTpl->assign('xhelp_mimetypes', $mimes); |
||
396 | } |
||
397 | |||
398 | $xoopsTpl->assign('xhelp_has_logUser', false); |
||
399 | if ($xhelp_isStaff) { |
||
400 | $checkStaff = $staffHandler->getByUid($xoopsUser->getVar('uid')); |
||
401 | if (false !== ($hasRights = $checkStaff->checkRoleRights(XHELP_SEC_TICKET_LOGUSER))) { |
||
402 | $xoopsTpl->assign('xhelp_has_logUser', true); |
||
403 | } |
||
404 | unset($checkStaff); |
||
405 | } |
||
406 | |||
407 | // Get current dept's custom fields |
||
408 | $fields = $ticketFieldDepartmentHandler->fieldsByDepartment($dept_id, true); |
||
409 | |||
410 | if (!$savedFields = $session->get('xhelp_custFields')) { |
||
411 | $savedFields = []; |
||
412 | } |
||
413 | |||
414 | $aFields = []; |
||
415 | foreach ($fields as $field) { |
||
416 | $values = $field->getVar('fieldvalues'); |
||
417 | if (XHELP_CONTROL_YESNO == $field->getVar('controltype')) { |
||
418 | $values = [1 => _YES, 0 => _NO]; |
||
419 | } |
||
420 | |||
421 | // Check for values already submitted, and fill those values in |
||
422 | if (array_key_exists($field->getVar('fieldname'), $savedFields)) { |
||
423 | $defaultValue = $savedFields[$field->getVar('fieldname')]; |
||
424 | } else { |
||
425 | $defaultValue = $field->getVar('defaultvalue'); |
||
426 | } |
||
427 | |||
428 | $aFields[$field->getVar('id')] = [ |
||
429 | 'name' => $field->getVar('name'), |
||
430 | 'desc' => $field->getVar('description'), |
||
431 | 'fieldname' => $field->getVar('fieldname'), |
||
432 | 'defaultvalue' => $defaultValue, |
||
433 | 'controltype' => $field->getVar('controltype'), |
||
434 | 'required' => $field->getVar('required'), |
||
435 | 'fieldlength' => $field->getVar('fieldlength') < 50 ? $field->getVar('fieldlength') : 50, |
||
436 | 'maxlength' => $field->getVar('fieldlength'), |
||
437 | 'weight' => $field->getVar('weight'), |
||
438 | 'fieldvalues' => $values, |
||
439 | 'validation' => $field->getVar('validation'), |
||
440 | ]; |
||
441 | } |
||
442 | $xoopsTpl->assign('xhelp_custFields', $aFields); |
||
443 | if (!empty($aFields)) { |
||
444 | $xoopsTpl->assign('xhelp_hasCustFields', true); |
||
445 | } else { |
||
446 | $xoopsTpl->assign('xhelp_hasCustFields', false); |
||
447 | } |
||
448 | |||
449 | $javascript = '<script type="text/javascript" src="' . XHELP_BASE_URL . "/include/functions.js\"></script> |
||
450 | <script type=\"text/javascript\" src='" . XHELP_SCRIPT_URL . "/addTicketDeptChange.php?client'></script> |
||
451 | <script type=\"text/javascript\"> |
||
452 | <!-- |
||
453 | function departments_onchange() |
||
454 | { |
||
455 | dept = xoopsGetElementById('departments'); |
||
456 | var wl = new Xhelp\WebLib(fieldHandler); |
||
457 | wl.customFieldsByDept(dept.value);\n"; |
||
458 | |||
459 | if ($xhelp_isStaff) { |
||
460 | $javascript .= "var w = new Xhelp\WebLib(staffHandler); |
||
461 | w.staffbydept(dept.value);\n"; |
||
462 | } |
||
463 | $javascript .= '} |
||
464 | |||
465 | var staffHandler = { |
||
466 | staffbydept: function(result){'; |
||
467 | if ($xhelp_isStaff) { |
||
468 | if (Request::hasVar('xhelp_logMode', 'COOKIE') && 2 === $_COOKIE['xhelp_logMode'] |
||
469 | && is_object($staff) |
||
470 | && $staff->checkRoleRights(XHELP_SEC_TICKET_OWNERSHIP, $dept_id)) { |
||
471 | $javascript .= "var sel = gE('owner');"; |
||
472 | $javascript .= "xhelpFillStaffSelect(sel, result);\n"; |
||
473 | } |
||
474 | } |
||
475 | $javascript .= "} |
||
476 | } |
||
477 | |||
478 | var fieldHandler = { |
||
479 | customFieldsByDept: function(result){ |
||
480 | var tbl = gE('tblAddTicket');\n"; |
||
481 | if ($xhelp_isStaff && isset($_COOKIE['xhelp_logMode']) && 2 === $_COOKIE['xhelp_logMode']) { |
||
482 | $javascript .= "var beforeele = gE('privResponse');\n"; |
||
483 | } else { |
||
484 | $javascript .= "var beforeele = gE('addButtons');\n"; |
||
485 | } |
||
486 | $javascript .= "tbody = tbl.tBodies[0];\n"; |
||
487 | $javascript .= "xhelpFillCustomFlds(tbody, result, beforeele); |
||
488 | } |
||
489 | } |
||
490 | |||
491 | function window_onload() |
||
492 | { |
||
493 | xhelpDOMAddEvent(xoopsGetElementById('departments'), 'change', departments_onchange, true); |
||
494 | } |
||
495 | |||
496 | window.setTimeout('window_onload()', 1500); |
||
497 | //--> |
||
498 | </script>"; |
||
499 | |||
500 | $xoopsTpl->assign('xhelp_baseURL', XHELP_BASE_URL); |
||
501 | $xoopsTpl->assign('xhelp_includeURL', XHELP_INCLUDE_URL); |
||
502 | $xoopsTpl->assign('xoops_module_header', $javascript . $xhelp_module_header); |
||
503 | $xoopsTpl->assign('xhelp_allowUpload', $helper->getConfig('xhelp_allowUpload')); |
||
504 | $xoopsTpl->assign('xhelp_text_lookup', _XHELP_TEXT_LOOKUP); |
||
505 | $xoopsTpl->assign('xhelp_text_email', _XHELP_TEXT_EMAIL); |
||
506 | $xoopsTpl->assign('xhelp_imagePath', XOOPS_URL . '/modules/xhelp/assets/images/'); |
||
507 | $xoopsTpl->assign('xhelp_departments', $aDept); |
||
508 | $xoopsTpl->assign('xhelp_current_file', basename(__file__)); |
||
509 | $xoopsTpl->assign('xhelp_priorities', [5, 4, 3, 2, 1]); |
||
510 | $xoopsTpl->assign('xhelp_priorities_desc', [ |
||
511 | 5 => _XHELP_PRIORITY5, |
||
512 | 4 => _XHELP_PRIORITY4, |
||
513 | 3 => _XHELP_PRIORITY3, |
||
514 | 2 => _XHELP_PRIORITY2, |
||
515 | 1 => _XHELP_PRIORITY1, |
||
516 | ]); |
||
517 | $xoopsTpl->assign('xhelp_default_priority', XHELP_DEFAULT_PRIORITY); |
||
518 | $xoopsTpl->assign('xhelp_currentUser', $xoopsUser->getVar('uid')); |
||
519 | $xoopsTpl->assign('xhelp_numTicketUploads', $helper->getConfig('xhelp_numTicketUploads')); |
||
520 | // if (Request::hasVar('logFor', 'POST')) { |
||
521 | if (Request::hasVar('logFor', 'POST')) { |
||
522 | $uid = Request::getInt('logFor', 0, 'POST'); |
||
523 | $username = $xoopsUser::getUnameFromId($uid); |
||
524 | $xoopsTpl->assign('xhelp_username', $username); |
||
525 | $xoopsTpl->assign('xhelp_user_id', $uid); |
||
526 | } else { |
||
527 | $uid = $xoopsUser->getVar('uid'); |
||
528 | $username = $xoopsUser->getVar('uname'); |
||
529 | $xoopsTpl->assign('xhelp_username', $username); |
||
530 | $xoopsTpl->assign('xhelp_user_id', $uid); |
||
531 | } |
||
532 | $xoopsTpl->assign('xhelp_isStaff', $xhelp_isStaff); |
||
533 | if (isset($_COOKIE['xhelp_logMode'])) { |
||
534 | $xoopsTpl->assign('xhelp_logMode', $_COOKIE['xhelp_logMode']); |
||
535 | } else { |
||
536 | $xoopsTpl->assign('xhelp_logMode', 1); |
||
537 | } |
||
538 | |||
539 | if ($xhelp_isStaff) { |
||
540 | if (Request::hasVar('xhelp_logMode', 'COOKIE') && 2 === $_COOKIE['xhelp_logMode']) { |
||
541 | /** @var \XoopsModules\Xhelp\StatusHandler $statusHandler */ |
||
542 | $statusHandler = $helper->getHandler('Status'); |
||
543 | $criteria = new \Criteria('', ''); |
||
544 | $criteria->setSort('description'); |
||
545 | $criteria->setOrder('ASC'); |
||
546 | $statuses = $statusHandler->getObjects($criteria); |
||
547 | $aStatuses = []; |
||
548 | foreach ($statuses as $status) { |
||
549 | $aStatuses[$status->getVar('id')] = [ |
||
550 | 'id' => $status->getVar('id'), |
||
551 | 'desc' => $status->getVar('description'), |
||
552 | 'state' => $status->getVar('state'), |
||
553 | ]; |
||
554 | } |
||
555 | |||
556 | $xoopsTpl->assign('xhelp_statuses', $aStatuses); |
||
557 | } |
||
558 | $xoopsTpl->assign('xhelp_savedSearches', $aSavedSearches); |
||
559 | } |
||
560 | |||
561 | $errors = []; |
||
562 | $aElements = []; |
||
563 | if (false !== ($validateErrors = $session->get('xhelp_validateError'))) { |
||
564 | foreach ($validateErrors as $fieldname => $error) { |
||
565 | if (!empty($error['errors'])) { |
||
566 | $aElements[] = $fieldname; |
||
567 | foreach ($error['errors'] as $err) { |
||
568 | $errors[$fieldname] = $err; |
||
569 | } |
||
570 | } |
||
571 | } |
||
572 | $xoopsTpl->assign('xhelp_errors', $errors); |
||
573 | } else { |
||
574 | $xoopsTpl->assign('xhelp_errors', null); |
||
575 | } |
||
576 | |||
577 | $elements = ['subject', 'description']; |
||
578 | foreach ($elements as $element) { // Foreach element in the predefined list |
||
579 | $xoopsTpl->assign("xhelp_element_$element", 'formButton'); |
||
580 | foreach ($aElements as $aElement) { // Foreach that has an error |
||
581 | if ($aElement == $element) { // If the names are equal |
||
582 | $xoopsTpl->assign("xhelp_element_$element", 'validateError'); |
||
583 | break; |
||
584 | } |
||
585 | } |
||
586 | } |
||
587 | |||
588 | if (false !== ($ticket = $session->get('xhelp_ticket'))) { |
||
589 | $xoopsTpl->assign('xhelp_ticket_uid', $ticket['uid']); |
||
590 | $xoopsTpl->assign('xhelp_ticket_username', $xoopsUser::getUnameFromId($ticket['uid'])); |
||
591 | $xoopsTpl->assign('xhelp_ticket_subject', stripslashes($ticket['subject'])); |
||
592 | $xoopsTpl->assign('xhelp_ticket_description', stripslashes($ticket['description'])); |
||
593 | $xoopsTpl->assign('xhelp_ticket_department', $ticket['department']); |
||
594 | $xoopsTpl->assign('xhelp_ticket_priority', $ticket['priority']); |
||
595 | } else { |
||
596 | $xoopsTpl->assign('xhelp_ticket_uid', $uid); |
||
597 | $xoopsTpl->assign('xhelp_ticket_username', $username); |
||
598 | $xoopsTpl->assign('xhelp_ticket_subject', null); |
||
599 | $xoopsTpl->assign('xhelp_ticket_description', null); |
||
600 | $xoopsTpl->assign('xhelp_ticket_department', $dept_id); |
||
601 | $xoopsTpl->assign('xhelp_ticket_priority', XHELP_DEFAULT_PRIORITY); |
||
602 | } |
||
603 | |||
604 | if (false !== ($response = $session->get('xhelp_response'))) { |
||
605 | $xoopsTpl->assign('xhelp_response_uid', $response['uid']); |
||
606 | $xoopsTpl->assign('xhelp_response_message', $response['message']); |
||
607 | $xoopsTpl->assign('xhelp_response_timespent', $response['timeSpent']); |
||
608 | $xoopsTpl->assign('xhelp_response_userIP', $response['userIP']); |
||
609 | $xoopsTpl->assign('xhelp_response_private', $response['private']); |
||
610 | $xoopsTpl->assign('xhelp_ticket_status', $response['status']); |
||
611 | $xoopsTpl->assign('xhelp_ticket_ownership', $response['owner']); |
||
612 | } else { |
||
613 | $xoopsTpl->assign('xhelp_response_uid', null); |
||
614 | $xoopsTpl->assign('xhelp_response_message', null); |
||
615 | $xoopsTpl->assign('xhelp_response_timeSpent', 0); |
||
616 | $xoopsTpl->assign('xhelp_response_userIP', null); |
||
617 | $xoopsTpl->assign('xhelp_response_private', null); |
||
618 | $xoopsTpl->assign('xhelp_ticket_status', 1); |
||
619 | $xoopsTpl->assign('xhelp_ticket_ownership', 0); |
||
620 | } |
||
621 | |||
622 | require_once XOOPS_ROOT_PATH . '/footer.php'; //Include the page footer |
||
623 | } |
||
624 | } else { // If not a user |
||
625 | /** @var \XoopsConfigHandler $configHandler */ |
||
626 | $configHandler = xoops_getHandler('config'); |
||
627 | //$xoopsConfigUser = $configHandler->getConfigsByCat(XOOPS_CONF_USER); |
||
628 | $xoopsConfigUser = []; |
||
629 | $criteria = new \CriteriaCompo(new \Criteria('conf_name', 'allow_register'), 'OR'); |
||
630 | $criteria->add(new \Criteria('conf_name', 'activation_type'), 'OR'); |
||
631 | $myConfigs = $configHandler->getConfigs($criteria); |
||
632 | |||
633 | foreach ($myConfigs as $myConf) { |
||
634 | $xoopsConfigUser[$myConf->getVar('conf_name')] = $myConf->getVar('conf_value'); |
||
635 | } |
||
636 | if (0 == $xoopsConfigUser['allow_register']) { // Use to doublecheck that anonymous users are allowed to register |
||
637 | $helper->redirect('error.php'); |
||
638 | } else { |
||
639 | $helper->redirect('anon_addTicket.php'); |
||
640 | } |
||
641 | exit(); |
||
642 | } |
||
643 | |||
644 | /** |
||
645 | * @param string|array $fields |
||
646 | * @return bool |
||
647 | */ |
||
648 | function saveTicket($fields = ''): bool |
||
649 | { |
||
650 | global $session, $xhelp_isStaff; |
||
651 | $session->set('xhelp_ticket', [ |
||
652 | 'uid' => Request::getInt('user_id', 0, 'POST'), |
||
653 | 'subject' => Request::getString('subject', '', 'POST'), |
||
654 | 'description' => Request::getText('description', '', 'POST'), //htmlspecialchars($_POST['description'], ENT_QUOTES), |
||
655 | 'department' => Request::getInt('departments', 0, 'POST'), //$_POST['departments'], |
||
656 | 'priority' => Request::getInt('priority', 0, 'POST'), |
||
657 | ]); |
||
658 | |||
659 | if ($xhelp_isStaff && 2 === $_COOKIE['xhelp_logMode']) { |
||
660 | $session->set('xhelp_response', [ |
||
661 | 'uid' => Request::getInt('user_id', 0, 'POST'), |
||
662 | 'message' => Request::getString('response', '', 'POST'), |
||
663 | 'timeSpent' => Request::getInt('timespent', 0, 'POST'), |
||
664 | 'userIP' => getenv('REMOTE_ADDR'), |
||
665 | 'private' => Request::hasVar('private', 'POST') ? 1 : 0, //isset($_POST['private']) ? 1 : 0, |
||
666 | 'status' => Request::getInt('status', 0, 'POST'), |
||
667 | 'owner' => Request::getInt('owner', 0, 'POST'), //$_POST['owner'] |
||
668 | ]); |
||
669 | } |
||
670 | |||
671 | if ('' != $fields) { |
||
672 | $session->set('xhelp_custFields', $fields); |
||
673 | } |
||
674 | |||
675 | return true; |
||
676 | } |
||
677 |