Dolibarr\Code\Reception\Classes\Reception::valid()

Complexity

Conditions	42
Paths	> 20000

Size

Total Lines	222
Code Lines	139

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function valid($user, $notrigger = 0)
    {
        global $conf, $langs;

        require_once constant('DOL_DOCUMENT_ROOT') . '/core/lib/files.lib.php';

        dol_syslog(get_class($this) . "::valid");

        // Protection
        if ($this->statut) {

The property Dolibarr\Core\Base\CommonObject::$statut has been deprecated: Use $status instead.

            dol_syslog(get_class($this) . "::valid no draft status", LOG_WARNING);
            return 0;
        }

        if (
            !((!getDolGlobalInt('MAIN_USE_ADVANCED_PERMS') && $user->hasRight('reception', 'creer'))
            || (getDolGlobalInt('MAIN_USE_ADVANCED_PERMS') && $user->hasRight('reception', 'reception_advance', 'validate')))
        ) {
            $this->error = 'Permission denied';
            dol_syslog(get_class($this) . "::valid " . $this->error, LOG_ERR);
            return -1;
        }

        $this->db->begin();

        $error = 0;

        // Define new ref
        $soc = new Societe($this->db);
        $soc->fetch($this->socid);


        // Define new ref
        if (!$error && (preg_match('/^[\(]?PROV/i', $this->ref) || empty($this->ref))) { // empty should not happened, but when it occurs, the test save life
            $numref = $this->getNextNumRef($soc);
        } else {
            $numref = $this->ref;
        }

        $this->newref = dol_sanitizeFileName($numref);

        $now = dol_now();

        // Validate
        $sql = "UPDATE " . MAIN_DB_PREFIX . "reception SET";
        $sql .= " ref='" . $this->db->escape($numref) . "'";
        $sql .= ", fk_statut = 1";
        $sql .= ", date_valid = '" . $this->db->idate($now) . "'";
        $sql .= ", fk_user_valid = " . $user->id;
        $sql .= " WHERE rowid = " . ((int) $this->id);
        dol_syslog(get_class($this) . "::valid update reception", LOG_DEBUG);
        $resql = $this->db->query($sql);
        if (!$resql) {
            $this->error = $this->db->lasterror();
            $error++;
        }

        // If stock increment is done on reception (recommended choice)
        if (!$error && isModEnabled('stock') && getDolGlobalInt('STOCK_CALCULATE_ON_RECEPTION')) {
            require_once constant('DOL_DOCUMENT_ROOT') . '/product/stock/class/mouvementstock.class.php';

            $langs->load("agenda");

            // Loop on each product line to add a stock movement
            // TODO in future, reception lines may not be linked to order line
            $sql = "SELECT cd.fk_product, cd.subprice, cd.remise_percent,";
            $sql .= " ed.rowid, ed.qty, ed.fk_entrepot,";
            $sql .= " ed.eatby, ed.sellby, ed.batch,";
            $sql .= " ed.cost_price";
            $sql .= " FROM " . MAIN_DB_PREFIX . "commande_fournisseurdet as cd,";
            $sql .= " " . MAIN_DB_PREFIX . "receptiondet_batch as ed";
            $sql .= " WHERE ed.fk_reception = " . ((int) $this->id);
            $sql .= " AND cd.rowid = ed.fk_elementdet";

            dol_syslog(get_class($this) . "::valid select details", LOG_DEBUG);
            $resql = $this->db->query($sql);
            if ($resql) {
                $cpt = $this->db->num_rows($resql);
                for ($i = 0; $i < $cpt; $i++) {
                    $obj = $this->db->fetch_object($resql);

                    $qty = $obj->qty;

                    if ($qty == 0 || ($qty < 0 && !getDolGlobalInt('RECEPTION_ALLOW_NEGATIVE_QTY'))) {
                        continue;
                    }
                    dol_syslog(get_class($this) . "::valid movement index " . $i . " ed.rowid=" . $obj->rowid . " edb.rowid=" . $obj->edbrowid);

                    //var_dump($this->lines[$i]);
                    $mouvS = new MouvementStock($this->db);
                    $mouvS->origin = &$this;
                    $mouvS->setOrigin($this->element, $this->id);

                    if (empty($obj->batch)) {
                        // line without batch detail

                        // We decrement stock of product (and sub-products) -> update table llx_product_stock (key of this table is fk_product+fk_entrepot) and add a movement record.
                        $inventorycode = '';
                        $result = $mouvS->reception($user, $obj->fk_product, $obj->fk_entrepot, $qty, $obj->cost_price, $langs->trans("ReceptionValidatedInDolibarr", $numref), '', '', '', '', 0, $inventorycode);

                        if (intval($result) < 0) {
                            $error++;
                            $this->errors[] = $mouvS->error;
                            $this->errors = array_merge($this->errors, $mouvS->errors);
                            break;
                        }
                    } else {
                        // line with batch detail

                        // We decrement stock of product (and sub-products) -> update table llx_product_stock (key of this table is fk_product+fk_entrepot) and add a movement record.
                        // Note: ->fk_origin_stock = id into table llx_product_batch (may be rename into llx_product_stock_batch in another version)
                        $inventorycode = '';
                        $result = $mouvS->reception($user, $obj->fk_product, $obj->fk_entrepot, $qty, $obj->cost_price, $langs->trans("ReceptionValidatedInDolibarr", $numref), $this->db->jdate($obj->eatby), $this->db->jdate($obj->sellby), $obj->batch, '', 0, $inventorycode);

                        if (intval($result) < 0) {
                            $error++;
                            $this->errors[] = $mouvS->error;
                            $this->errors = array_merge($this->errors, $mouvS->errors);
                            break;
                        }
                    }
                }
            } else {
                $this->db->rollback();
                $this->error = $this->db->error();
                return -2;
            }
        }

        if (!$error) {
            // Change status of purchase order to "reception in process" or "totally received"
            $status = $this->getStatusDispatch();
            if ($status < 0) {
                $error++;
            } else {
                $trigger_key = '';
                if ($this->origin_object instanceof CommandeFournisseur && $status == CommandeFournisseur::STATUS_RECEIVED_COMPLETELY) {
                    $ret = $this->origin_object->Livraison($user, dol_now(), 'tot', '');

The method Livraison() does not exist on Dolibarr\Core\Base\CommonObject. Since you implemented __call, consider adding a @method annotation.

                    if ($ret < 0) {
                        $error++;
                        $this->errors = array_merge($this->errors, $this->origin_object->errors);
                    }
                } else {
                    $ret = $this->setStatut($status, $this->origin_id, 'commande_fournisseur', $trigger_key);
                    if ($ret < 0) {
                        $error++;
                    }
                }
            }
        }

        if (!$error && !$notrigger) {
            // Call trigger
            $result = $this->call_trigger('RECEPTION_VALIDATE', $user);
            if ($result < 0) {
                $error++;
            }
            // End call triggers
        }

        if (!$error) {
            $this->oldref = $this->ref;

            // Rename directory if dir was a temporary ref
            if (preg_match('/^[\(]?PROV/i', $this->ref)) {
                // Now we rename also files into index
                $sql = 'UPDATE ' . MAIN_DB_PREFIX . "ecm_files set filename = CONCAT('" . $this->db->escape($this->newref) . "', SUBSTR(filename, " . (strlen($this->ref) + 1) . ")), filepath = 'reception/" . $this->db->escape($this->newref) . "'";
                $sql .= " WHERE filename LIKE '" . $this->db->escape($this->ref) . "%' AND filepath = 'reception/" . $this->db->escape($this->ref) . "' AND entity = " . ((int) $conf->entity);
                $resql = $this->db->query($sql);
                if (!$resql) {
                    $error++;
                    $this->error = $this->db->lasterror();
                }
                $sql = 'UPDATE ' . MAIN_DB_PREFIX . "ecm_files set filepath = 'reception/" . $this->db->escape($this->newref) . "'";
                $sql .= " WHERE filepath = 'reception/" . $this->db->escape($this->ref) . "' and entity = " . $conf->entity;
                $resql = $this->db->query($sql);
                if (!$resql) {
                    $error++;
                    $this->error = $this->db->lasterror();
                }

                // We rename directory ($this->ref = old ref, $num = new ref) in order not to lose the attachments
                $oldref = dol_sanitizeFileName($this->ref);
                $newref = dol_sanitizeFileName($numref);
                $dirsource = $conf->reception->dir_output . '/' . $oldref;
                $dirdest = $conf->reception->dir_output . '/' . $newref;
                if (!$error && file_exists($dirsource)) {
                    dol_syslog(get_class($this) . "::valid rename dir " . $dirsource . " into " . $dirdest);

                    if (@rename($dirsource, $dirdest)) {
                        dol_syslog("Rename ok");
                        // Rename docs starting with $oldref with $newref
                        $listoffiles = dol_dir_list($conf->reception->dir_output . '/' . $newref, 'files', 1, '^' . preg_quote($oldref, '/'));
                        foreach ($listoffiles as $fileentry) {
                            $dirsource = $fileentry['name'];
                            $dirdest = preg_replace('/^' . preg_quote($oldref, '/') . '/', $newref, $dirsource);
                            $dirsource = $fileentry['path'] . '/' . $dirsource;
                            $dirdest = $fileentry['path'] . '/' . $dirdest;
                            @rename($dirsource, $dirdest);

It seems like you do not handle an error condition for rename(). This can introduce security issues, and is generally not recommended.

                        }
                    }
                }
            }
        }

        // Set new ref and current status
        if (!$error) {
            $this->ref = $numref;
            $this->statut = self::STATUS_VALIDATED;

The property Dolibarr\Core\Base\CommonObject::$statut has been deprecated: Use $status instead.

            $this->status = self::STATUS_VALIDATED;
        }

        if (!$error) {
            $this->db->commit();
            return 1;
        } else {
            foreach ($this->errors as $errmsg) {
                dol_syslog(get_class($this) . "::valid " . $errmsg, LOG_ERR);
                $this->error .= ($this->error ? ', ' . $errmsg : $errmsg);
            }
            $this->db->rollback();
            return -1 * $error;
        }