1: 2: 3: 4: 5: 6: 7: 8: 9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 54: 55: 56: 57: 58: 59: 60: 61: 62: 63: 64: 65: 66: 67: 68: 69: 70: 71: 72: 73: 74: 75: 76: 77: 78: 79: 80: 81: 82: 83: 84: 85: 86: 87: 88: 89: 90: 91: 92: 93: 94: 95: 96: 97: 98: 99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 144: 145: 146: 147: 148: 149: 150: 151: 152: 153: 154: 155: 156: 157: 158: 159: 160: 161: 162: 163: 164: 165: 166: 167: 168: 169: 170: 171: 172: 173: 174: 175: 176: 177: 178: 179: 180: 181: 182: 183: 184: 185: 186: 187: 188: 189: 190: 191: 192: 193: 194: 195: 196: 197: 198: 199: 200: 201: 202: 203: 204: 205: 206: 207: 208: 209: 210: 211: 212: 213: 214: 215: 216: 217: 218: 219: 220: 221: 222: 223: 224: 225: 226: 227: 228: 229: 230: 231: 232: 233: 234: 235: 236: 237: 238: 239: 240: 241: 242: 243: 244: 245: 246: 247: 248: 249: 250: 251: 252: 253: 254: 255: 256: 257: 258: 259: 260: 261: 262: 263: 264: 265: 266: 267: 268: 269: 270: 271: 272: 273: 274: 275: 276: 277: 278: 279: 280: 281: 282: 283: 284: 285: 286: 287: 288: 289: 290: 291: 292: 293: 294: 295: 296: 297: 298: 299: 300: 301: 302: 303: 304: 305: 306: 307: 308: 309: 310: 311: 312: 313: 314: 315: 316: 317: 318: 319: 320: 321: 322: 323: 324: 325: 326: 327: 328: 329: 330: 331: 332: 333: 334: 335: 336: 337: 338: 339: 340: 341: 342: 343: 344: 345: 346: 347: 348: 349: 350: 351: 352: 353: 354: 355: 356: 357: 358: 359: 360: 361: 362: 363: 364: 365: 366: 367: 368: 369: 370: 371: 372: 373: 374: 375: 376: 377: 378: 379: 380: 381: 382: 383: 384: 385: 386: 387: 388: 389: 390: 391: 392: 393: 394: 395: 396: 397: 398: 399: 400: 401: 402: 403: 404: 405: 406: 407: 408: 409: 410: 411: 412: 413: 414: 415: 416: 417: 418: 419: 420: 421: 422: 423: 424: 425: 426: 427: 428: 429: 430: 431: 432: 433: 434: 435: 436: 437: 438: 439: 440: 441: 442: 443: 444: 445: 446: 447: 448: 449: 450: 451: 452: 453: 454: 455: 456: 457: 458: 459: 460: 461: 462: 463: 464: 465: 466: 467: 468: 469: 470: 471: 472: 473: 474: 475: 476: 477: 478: 479: 480: 481: 482: 483: 484: 485: 486: 487: 488: 489: 490: 491: 492: 493: 494: 495: 496: 497: 498: 499: 500: 501: 502: 503: 504: 505: 506: 507: 508: 509: 510: 511: 512: 513: 514: 515: 516: 517: 518: 519: 520: 521: 522: 523: 524: 525: 526: 527: 528: 529: 530: 531: 532: 533: 534: 535: 536: 537: 538: 539: 540: 541: 542: 543: 544: 545: 546: 547: 548: 549: 550: 551: 552: 553: 554: 555: 556: 557: 558: 559: 560: 561: 562: 563: 564: 565: 566: 567: 568: 569: 570: 571: 572: 573: 574: 575: 576: 577: 578: 579: 580: 581: 582: 583: 584: 585: 586: 587: 588: 589: 590: 591: 592: 593: 594: 595: 596: 597: 598: 599: 600: 601: 602: 603: 604: 605: 606: 607: 608: 609: 610: 611: 612: 613: 614: 615: 616: 617: 618: 619: 620: 621: 622: 623: 624: 625: 626: 627: 628: 629: 630: 631: 632: 633: 634: 635: 636: 637: 638: 639: 640: 641: 642: 643: 644: 645: 646: 647: 648: 649: 650: 651: 652: 653: 654: 655: 656: 657: 658: 659: 660: 661: 662: 663: 664: 665: 666: 667: 668: 669: 670: 671: 672: 673: 674: 675: 676: 677: 678: 679: 680: 681: 682: 683: 684: 685: 686: 687: 688: 689: 690: 691: 692: 693: 694: 695: 696: 697: 698: 699: 700: 701: 702: 703: 704: 705: 706: 707: 708: 709: 710: 711: 712: 713: 714: 715:
<?php
require_once("DataUpdate.php");
require_once("DataEntry.php");
class EditorField
{
var $Field;
var $Sql;
var $Value;
var $Attributes;
var $LookupSql;
var $OptionList;
function __construct( $field, $sql="", $lookup_sql="" ) {
global $session;
$this->Field = $field;
$this->Sql = $sql;
$this->LookupSql = $lookup_sql;
$this->Attributes = array();
}
function Set($value) {
$this->Value = $value;
}
function SetSql( $sql ) {
$this->Sql = $sql;
}
function SetLookup( $lookup_sql ) {
$this->LookupSql = $lookup_sql;
}
function SetOptionList( $options, $current = null, $parameters = null) {
if ( gettype($options) == 'array' ) {
$this->OptionList = '';
if ( is_array($parameters) ) {
if ( isset($parameters['maxwidth']) ) $maxwidth = max(4,intval($parameters['maxwidth']));
if ( isset($parameters['translate']) ) $translate = true;
}
foreach( $options AS $k => $v ) {
if (is_array($current)) {
$selected = ( ( in_array($k,$current,true) || in_array($v,$current,true)) ? ' selected="selected"' : '' );
}
else {
$selected = ( ( "$k" == "$current" || "$v" == "$current" ) ? ' selected="selected"' : '' );
}
if ( isset($translate) ) $v = translate( $v );
if ( isset($maxwidth) ) $v = substr( $v, 0, $maxwidth);
$this->OptionList .= "<option value=\"".htmlspecialchars($k)."\"$selected>".htmlspecialchars($v)."</option>";
}
}
else {
$this->OptionList = $options;
}
}
function GetTarget() {
if ( $this->Sql == "" ) return $this->Field;
return "$this->Sql AS $this->Field";
}
function AddAttribute( $k, $v ) {
$this->Attributes[$k] = $v;
}
function RenderLabel( $wrapme ) {
if ( !isset($this->Attributes['_label']) || !isset($this->Attributes['id'])) return $wrapme;
$class = (isset($this->Attributes['class']) ? $this->Attributes['class'] : 'entry');
$title = (isset($this->Attributes['title']) ? ' title="'.str_replace('"', ''', $this->Attributes['title']) . '"' : '');
return( sprintf( '<label for="%s" class="%s"%s>%s %s</label>',
$this->Attributes['id'], $class, $title, $wrapme, $this->Attributes['_label']) );
}
function RenderAttributes() {
$attributes = "";
if ( count($this->Attributes) == 0 ) return $attributes;
foreach( $this->Attributes AS $k => $v ) {
if ( $k == '_label' ) continue;
$attributes .= " $k=\"" . str_replace('"', ''', $v) . '"';
}
return $attributes;
}
}
class Editor
{
var $Title;
var $Action;
var $Fields;
var $OrderedFields;
var $BaseTable;
var $Joins;
var $Where;
var $NewWhere;
var $Order;
var $Limit;
var $Query;
var $Template;
var $RecordAvailable;
var $Record;
var $SubmitName;
var $Id;
function __construct( $title = "", $fields = null ) {
global $c, $session, $form_id_increment;
$this->Title = $title;
$this->Order = "";
$this->Limit = "";
$this->Template = "";
$this->RecordAvailable = false;
$this->SubmitName = 'submit';
$form_id_increment = (isset($form_id_increment)? ++$form_id_increment : 1);
$this->Id = 'editor_'.$form_id_increment;
if ( isset($fields) ) {
if ( is_array($fields) ) {
foreach( $fields AS $k => $v ) {
$this->AddField($v);
}
}
else if ( is_string($fields) ) {
$this->BaseTable = $fields;
$field_list = get_fields($fields);
foreach( $field_list AS $k => $v ) {
$this->AddField($k);
}
}
}
@dbg_error_log( 'editor', 'DBG: New editor called %s', $title);
}
function &AddField( $field, $sql="", $lookup_sql="" ) {
$this->Fields[$field] = new EditorField( $field, $sql, $lookup_sql );
$this->OrderedFields[] = $field;
return $this->Fields[$field];
}
function SetSql( $field, $sql ) {
$this->Fields[$field]->SetSql( $sql );
}
function SetLookup( $field, $lookup_sql ) {
if (is_object($this->Fields[$field])) {
$this->Fields[$field]->SetLookup( $lookup_sql );
}
}
function Value( $value_field_name ) {
if ( !isset($this->Record->{$value_field_name}) ) return null;
return $this->Record->{$value_field_name};
}
function Assign( $value_field_name, $new_value ) {
if ( !isset($this->Record) ) $this->Record = (object) array();
$this->Record->{$value_field_name} = $new_value;
}
function Id( $id = null ) {
if ( isset($id) ) $this->Id = preg_replace( '#[^a-z0-9_+-]#', '', $id);
return $this->Id;
}
function SetOptionList( $field, $options, $current = null, $parameters = null) {
$this->Fields[$field]->SetOptionList( $options, $current, $parameters );
}
function AddAttribute( $field, $k, $v ) {
$this->Fields[$field]->AddAttribute($k,$v);
}
function SetBaseTable( $base_table ) {
$this->BaseTable = $base_table;
}
function SetJoins( $join_list ) {
$this->Joins = $join_list;
}
function Title( $new_title = null ) {
if ( isset($new_title) ) $this->Title = $new_title;
return $this->Title;
}
function SetSubmitName( $new_submit ) {
$this->SubmitName = $new_submit;
}
function IsSubmit() {
return isset($_POST[$this->SubmitName]);
}
function IsUpdate() {
$is_update = $this->Available();
if ( isset( $_POST['_editor_action']) && isset( $_POST['_editor_action'][$this->Id]) ) {
$is_update = ( $_POST['_editor_action'][$this->Id] == 'update' );
@dbg_error_log( 'editor', 'Checking update: %s => %d', $_POST['_editor_action'][$this->Id], $is_update );
}
return $is_update;
}
function IsCreate() {
return ! $this->IsUpdate();
}
function SetWhere( $where_clause ) {
$this->Where = $where_clause;
}
function WhereNewRecord( $where_clause ) {
$this->NewWhere = $where_clause;
}
function MoreWhere( $operator, $more_where ) {
if ( $this->Where == "" ) {
$this->Where = $more_where;
return;
}
$this->Where = "$this->Where $operator $more_where";
}
function AndWhere( $more_where ) {
$this->MoreWhere("AND",$more_where);
}
function OrWhere( $more_where ) {
$this->MoreWhere("OR",$more_where);
}
function SetTemplate( $template ) {
deprecated('Editor::SetTemplate');
$this->Template = $template;
}
function Layout( $template ) {
if ( strstr( $template, '##form##' ) === false && stristr( $template, '<form' ) === false )
$template = '##form##' . $template;
if ( stristr( $template, '</form' ) === false ) $template .= '</form>';
$this->Template = $template;
}
function Available( ) {
return $this->RecordAvailable;
}
function SetRecord( $row ) {
$this->Record = $row;
$this->RecordAvailable = is_object($this->Record);
return $this->Record;
}
function Initialise( $values ) {
$this->RecordAvailable = false;
if ( !isset($this->Record) ) $this->Record = (object) array();
foreach( $values AS $fname => $value ) {
$this->Record->{$fname} = $value;
}
}
function PostToValues( $prefix = '' ) {
foreach ( $this->Fields AS $fname => $fld ) {
@dbg_error_log( 'editor', ":PostToValues: %s => %s", $fname, $_POST["$prefix$fname"] );
if ( isset($_POST[$prefix.$fname]) ) {
$this->Record->{$fname} = $_POST[$prefix.$fname];
@dbg_error_log( 'editor', ":PostToValues: %s => %s", $fname, $_POST["$prefix$fname"] );
}
}
}
function GetRecord( $where = "" ) {
global $session;
$target_fields = "";
foreach( $this->Fields AS $k => $column ) {
if ( $target_fields != "" ) $target_fields .= ", ";
$target_fields .= $column->GetTarget();
}
if ( $where == "" ) $where = $this->Where;
$sql = sprintf( "SELECT %s FROM %s %s WHERE %s %s %s",
$target_fields, $this->BaseTable, $this->Joins, $where, $this->Order, $this->Limit);
$this->Query = new AwlQuery( $sql );
@dbg_error_log( 'editor', "DBG: EditorGetQry: %s", $sql );
if ( $this->Query->Exec("Browse:$this->Title:DoQuery") ) {
$this->Record = $this->Query->Fetch();
$this->RecordAvailable = is_object($this->Record);
}
if ( !$this->RecordAvailable ) {
$this->Record = (object) array();
}
return $this->Record;
}
function ReplaceEditorPart($matches)
{
global $session;
switch( $matches[0] ) {
case "##form##":
return sprintf('<form method="POST" enctype="multipart/form-data" class="editor" id="form_%s">', $this->Id);
case "##submit##":
$action = ( $this->RecordAvailable ? 'update' : 'insert' );
$submittype = ($this->RecordAvailable ? translate('Apply Changes') : translate('Create'));
return sprintf('<input type="hidden" name="_editor_action[%s]" value="%s"><input type="submit" class="submit" name="%s" value="%s">',
$this->Id, $action, $this->SubmitName, $submittype );
}
$field_name = $matches[1];
$what_part = (isset($matches[3]) ? $matches[3] : null);
$part3 = (isset($matches[5]) ? $matches[5] : null);
$value_field_name = $field_name;
if ( substr($field_name,0,4) == 'xxxx' ) {
$value_field_name = substr($field_name,4);
}
$attributes = "";
if ( isset($this->Fields[$field_name]) && is_object($this->Fields[$field_name]) ) {
$field = $this->Fields[$field_name];
$attributes = $field->RenderAttributes();
}
$field_value = (isset($this->Record->{$value_field_name}) ? $this->Record->{$value_field_name} : null);
switch( $what_part ) {
case "options":
$currval = $part3;
if ( ! isset($currval) && isset($field_value) )
$currval = $field_value;
if ( isset($field->OptionList) && $field->OptionList != "" ) {
$option_list = $field->OptionList;
}
else {
@dbg_error_log( 'editor', "DBG: Current=%s, OptionQuery: %s", $currval, $field->LookupSql );
$opt_qry = new AwlQuery( $field->LookupSql );
$option_list = EntryField::BuildOptionList($opt_qry, $currval, "FieldOptions: $field_name" );
$field->OptionList = $option_list;
}
return $option_list;
case "select":
$currval = $part3;
if ( ! isset($currval) && isset($field_value) )
$currval = $field_value;
if ( isset($field->OptionList) && $field->OptionList != "" ) {
$option_list = $field->OptionList;
}
else {
@dbg_error_log( 'editor', 'DBG: Current=%s, OptionQuery: %s', $currval, $field->LookupSql );
$opt_qry = new AwlQuery( $field->LookupSql );
$option_list = EntryField::BuildOptionList($opt_qry, $currval, 'FieldOptions: '.$field_name );
$field->OptionList = $option_list;
}
return '<select class="entry" name="'.$field_name.'"'.$attributes.'>'.$option_list.'</select>';
case "checkbox":
if ( !isset($field) ) {
@dbg_error_log("ERROR","Field '$field_name' is not defined.");
return "<p>Error: '$field_name' is not defined.</p>";
}
if ( $field_value === true ) {
$checked = ' CHECKED';
}
else {
switch ( $field_value ) {
case 'f':
case 'off':
case 'false':
case '':
case '0':
$checked = "";
break;
default:
$checked = ' CHECKED';
}
}
return $field->RenderLabel('<input type="hidden" value="off" name="'.$field_name.'"><input class="entry" type="checkbox" value="on" name="'.$field_name.'"'.$checked.$attributes.'>' );
case "input":
$size = (isset($part3) ? $part3 : 6);
return "<input class=\"entry\" value=\"".htmlspecialchars($field_value)."\" name=\"$field_name\" size=\"$size\"$attributes>";
case "file":
$size = (isset($part3) ? $part3 : 30);
return "<input type=\"file\" class=\"entry\" value=\"".htmlspecialchars($field_value)."\" name=\"$field_name\" size=\"$size\"$attributes>";
case "money":
$size = (isset($part3) ? $part3 : 8);
return "<input class=\"money\" value=\"".htmlspecialchars(sprintf("%0.2lf",$field_value))."\" name=\"$field_name\" size=\"$size\"$attributes>";
case "date":
$size = (isset($part3) ? $part3 : 10);
return "<input class=\"date\" value=\"".htmlspecialchars($field_value)."\" name=\"$field_name\" size=\"$size\"$attributes>";
case "textarea":
list( $cols, $rows ) = explode( 'x', $part3);
return "<textarea class=\"entry\" name=\"$field_name\" rows=\"$rows\" cols=\"$cols\"$attributes>".htmlspecialchars($field_value)."</textarea>";
case "hidden":
return sprintf( "<input type=\"hidden\" value=\"%s\" name=\"$field_name\">", htmlspecialchars($field_value) );
case "password":
return sprintf( "<input type=\"password\" value=\"%s\" name=\"$field_name\" size=\"10\">", htmlspecialchars($part3) );
case "encval":
case "enc":
return htmlspecialchars($field_value);
case "submit":
$action = ( $this->RecordAvailable ? 'update' : 'insert' );
return sprintf('<input type="hidden" name="_editor_action[%s]" value="%s"><input type="submit" class="submit" name="%s" value="%s">',
$this->Id, $action, $this->SubmitName, $value_field_name );
default:
return str_replace( "\n", "<br />", $field_value );
}
}
function Render( $title_tag = null ) {
@dbg_error_log( 'editor', "classEditor", "Rendering editor $this->Title" );
if ( $this->Template == "" ) $this->DefaultTemplate();
$html = sprintf('<div class="editor" id="%s">', $this->Id);
if ( isset($this->Title) && $this->Title != "" ) {
if ( !isset($title_tag) ) $title_tag = 'h1';
$html = "<$title_tag>$this->Title</$title_tag>\n";
}
$replaced = preg_replace_callback("/##([^#.]+)(\.([^#.]+))?(\.([^#.]+))?##/", array(&$this, "ReplaceEditorPart"), $this->Template );
$html .= $replaced;
$html .= '</div>';
return $html;
}
function Write( $is_update = null ) {
global $c, $component;
@dbg_error_log( 'editor', 'DBG: Writing editor %s', $this->Title);
if ( !isset($is_update) ) {
if ( isset( $_POST['_editor_action']) && isset( $_POST['_editor_action'][$this->Id]) ) {
$is_update = ( $_POST['_editor_action'][$this->Id] == 'update' );
}
else {
$is_update = preg_match( '/(save|update|apply)/i', $_POST[$this->SubmitName] );
dbg_error_log('WARN', $_SERVER['REQUEST_URI']. " is using a deprecated method for controlling insert/update" );
}
}
$this->Action = ( $is_update ? "update" : "create" );
$qry = new AwlQuery( sql_from_post( $this->Action, $this->BaseTable, "WHERE ".$this->Where ) );
if ( !$qry->Exec("Editor::Write") ) {
$c->messages[] = "ERROR: $qry->errorstring";
return 0;
}
if ( $this->Action == "create" && isset($this->NewWhere) ) {
$this->GetRecord($this->NewWhere);
}
else {
$this->GetRecord($this->Where);
}
return $this->Record;
}
}