Bug 25898: Prohibit indirect object notation
[koha.git] / members / memberentry.pl
blob221026acb9069ccf3607ef8108ee54a1c50d5102
1 #!/usr/bin/perl
3 # Copyright 2006 SAN OUEST PROVENCE et Paul POULAIN
4 # Copyright 2010 BibLibre
6 # This file is part of Koha.
8 # Koha is free software; you can redistribute it and/or modify it
9 # under the terms of the GNU General Public License as published by
10 # the Free Software Foundation; either version 3 of the License, or
11 # (at your option) any later version.
13 # Koha is distributed in the hope that it will be useful, but
14 # WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
18 # You should have received a copy of the GNU General Public License
19 # along with Koha; if not, see <http://www.gnu.org/licenses>.
21 # pragma
22 use Modern::Perl;
24 # external modules
25 use CGI qw ( -utf8 );
26 use List::MoreUtils qw/uniq/;
28 # internal modules
29 use C4::Auth;
30 use C4::Context;
31 use C4::Output;
32 use C4::Members;
33 use C4::Koha;
34 use C4::Log;
35 use C4::Letters;
36 use C4::Form::MessagingPreferences;
37 use Koha::AuthUtils;
38 use Koha::AuthorisedValues;
39 use Koha::Patron::Debarments;
40 use Koha::Cities;
41 use Koha::DateUtils;
42 use Koha::Libraries;
43 use Koha::Patrons;
44 use Koha::Patron::Attribute::Types;
45 use Koha::Patron::Categories;
46 use Koha::Patron::HouseboundRole;
47 use Koha::Patron::HouseboundRoles;
48 use Koha::Token;
49 use Email::Valid;
50 use Koha::SMS::Providers;
52 use vars qw($debug);
54 BEGIN {
55 $debug = $ENV{DEBUG} || 0;
58 my $input = CGI->new;
59 ($debug) or $debug = $input->param('debug') || 0;
60 my %data;
62 my $dbh = C4::Context->dbh;
64 my ($template, $loggedinuser, $cookie)
65 = get_template_and_user({template_name => "members/memberentrygen.tt",
66 query => $input,
67 type => "intranet",
68 flagsrequired => {borrowers => 'edit_borrowers'},
69 debug => ($debug) ? 1 : 0,
70 });
72 my $borrowernumber = $input->param('borrowernumber');
73 my $patron = Koha::Patrons->find($borrowernumber);
75 if ( $borrowernumber and not $patron ) {
76 output_and_exit( $input, $cookie, $template, 'unknown_patron' );
79 if ( C4::Context->preference('SMSSendDriver') eq 'Email' ) {
80 my @providers = Koha::SMS::Providers->search();
81 $template->param( sms_providers => \@providers );
84 my $actionType = $input->param('actionType') || '';
85 my $modify = $input->param('modify');
86 my $delete = $input->param('delete');
87 my $op = $input->param('op');
88 my $destination = $input->param('destination');
89 my $cardnumber = $input->param('cardnumber');
90 my $check_member = $input->param('check_member');
91 my $nodouble = $input->param('nodouble');
92 my $duplicate = $input->param('duplicate');
93 my $quickadd = $input->param('quickadd');
94 $nodouble = 1 if ($op eq 'modify' or $op eq 'duplicate'); # FIXME hack to represent fact that if we're
95 # modifying an existing patron, it ipso facto
96 # isn't a duplicate. Marking FIXME because this
97 # script needs to be refactored.
98 my $nok = $input->param('nok');
99 my $step = $input->param('step') || 0;
100 my @errors;
101 my $borrower_data;
102 my $NoUpdateLogin;
103 my $NoUpdateEmail;
104 my $userenv = C4::Context->userenv;
105 my @messages;
107 ## Deal with guarantor stuff
108 $template->param( relationships => scalar $patron->guarantor_relationships ) if $patron;
110 my @relations = split /,|\|/, C4::Context->preference('borrowerRelationship');
111 my $empty_relationship_allowed = grep {$_ eq ""} @relations;
112 $template->param( empty_relationship_allowed => $empty_relationship_allowed );
114 my $guarantor_id = $input->param('guarantor_id');
115 my $guarantor = undef;
116 $guarantor = Koha::Patrons->find( $guarantor_id ) if $guarantor_id;
117 $template->param( guarantor => $guarantor );
119 my @delete_guarantor = $input->multi_param('delete_guarantor');
120 foreach my $id ( @delete_guarantor ) {
121 my $r = Koha::Patron::Relationships->find( $id );
122 $r->delete() if $r;
125 ## Deal with debarments
126 $template->param(
127 debarments => scalar GetDebarments( { borrowernumber => $borrowernumber } ) );
128 my @debarments_to_remove = $input->multi_param('remove_debarment');
129 foreach my $d ( @debarments_to_remove ) {
130 DelDebarment( $d );
132 if ( $input->param('add_debarment') ) {
134 my $expiration = $input->param('debarred_expiration');
135 $expiration =
136 $expiration
137 ? dt_from_string($expiration)->ymd
138 : undef;
140 AddDebarment(
142 borrowernumber => $borrowernumber,
143 type => 'MANUAL',
144 comment => scalar $input->param('debarred_comment'),
145 expiration => $expiration,
150 $template->param("uppercasesurnames" => C4::Context->preference('uppercasesurnames'));
152 # function to designate mandatory fields (visually with css)
153 my $check_BorrowerMandatoryField=C4::Context->preference("BorrowerMandatoryField");
154 my @field_check=split(/\|/,$check_BorrowerMandatoryField);
155 foreach (@field_check) {
156 $template->param( "mandatory$_" => 1 );
158 # function to designate unwanted fields
159 my $check_BorrowerUnwantedField=C4::Context->preference("BorrowerUnwantedField");
160 @field_check=split(/\|/,$check_BorrowerUnwantedField);
161 foreach (@field_check) {
162 next unless m/\w/o;
163 $template->param( "no$_" => 1 );
165 $template->param( "add" => 1 ) if ( $op eq 'add' );
166 $template->param( "quickadd" => 1 ) if ( $quickadd );
167 $template->param( "duplicate" => 1 ) if ( $op eq 'duplicate' );
168 $template->param( "checked" => 1 ) if ( defined($nodouble) && $nodouble eq 1 );
169 if ( $op eq 'modify' or $op eq 'save' or $op eq 'duplicate' ) {
170 my $logged_in_user = Koha::Patrons->find( $loggedinuser );
171 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
173 # check permission to modify email info.
174 if ( $patron->is_superlibrarian && !$logged_in_user->is_superlibrarian ) {
175 $NoUpdateEmail = 1;
178 $borrower_data = $patron->unblessed;
179 $borrower_data->{category_type} = $patron->category->category_type;
182 my $categorycode = $input->param('categorycode') || $borrower_data->{'categorycode'};
183 my $category_type = $input->param('category_type') || '';
184 unless ($category_type or !($categorycode)){
185 my $borrowercategory = Koha::Patron::Categories->find($categorycode);
186 $category_type = $borrowercategory->category_type;
187 my $category_name = $borrowercategory->description;
188 $template->param("categoryname"=>$category_name);
190 $category_type="A" unless $category_type; # FIXME we should display a error message instead of a 500 error !
192 # if a add or modify is requested => check validity of data.
193 %data = %$borrower_data if ($borrower_data);
195 # initialize %newdata
196 my %newdata; # comes from $input->param()
197 if ( $op eq 'insert' || $op eq 'modify' || $op eq 'save' || $op eq 'duplicate' ) {
198 my @names = ( $borrower_data && $op ne 'save' ) ? keys %$borrower_data : $input->param();
199 foreach my $key (@names) {
200 if (defined $input->param($key)) {
201 $newdata{$key} = $input->param($key);
205 foreach (qw(dateenrolled dateexpiry dateofbirth)) {
206 next unless exists $newdata{$_};
207 my $userdate = $newdata{$_} or next;
209 my $formatteddate = eval { output_pref({ dt => dt_from_string( $userdate ), dateformat => 'iso', dateonly => 1 } ); };
210 if ( $formatteddate ) {
211 $newdata{$_} = $formatteddate;
212 } else {
213 ($userdate eq '0000-00-00') and warn "Data error: $_ is '0000-00-00'";
214 $template->param( "ERROR_$_" => 1 );
215 push(@errors,"ERROR_$_");
219 # check permission to modify login info.
220 if (ref($borrower_data) && ($borrower_data->{'category_type'} eq 'S') && ! (C4::Auth::haspermission($userenv->{'id'},{'staffaccess'=>1})) ) {
221 $NoUpdateLogin = 1;
225 # remove keys from %newdata that is not part of patron's attributes
227 my @keys_to_delete = (
228 qr/^BorrowerMandatoryField$/,
229 qr/^category_type$/,
230 qr/^check_member$/,
231 qr/^destination$/,
232 qr/^nodouble$/,
233 qr/^op$/,
234 qr/^save$/,
235 qr/^updtype$/,
236 qr/^SMSnumber$/,
237 qr/^setting_extended_patron_attributes$/,
238 qr/^setting_messaging_prefs$/,
239 qr/^digest$/,
240 qr/^modify$/,
241 qr/^step$/,
242 qr/^\d+$/,
243 qr/^\d+-DAYS/,
244 qr/^patron_attr_/,
245 qr/^csrf_token$/,
246 qr/^add_debarment$/, qr/^debarred_expiration$/, qr/^remove_debarment$/, # We already dealt with debarments previously
247 qr/^housebound_chooser$/, qr/^housebound_deliverer$/,
248 qr/^select_city$/,
249 qr/^new_guarantor_/,
250 qr/^guarantor_firstname$/,
251 qr/^guarantor_surname$/,
252 qr/^delete_guarantor$/,
254 for my $regexp (@keys_to_delete) {
255 for (keys %newdata) {
256 delete($newdata{$_}) if /$regexp/;
261 # Test uniqueness of surname, firstname and dateofbirth
262 if ( ( $op eq 'insert' ) and !$nodouble ) {
263 my @dup_fields = split '\|', C4::Context->preference('PatronDuplicateMatchingAddFields');
264 my $conditions;
265 for my $f ( @dup_fields ) {
266 $conditions->{$f} = $newdata{$f} if $newdata{$f};
268 $nodouble = 1;
269 my $patrons = Koha::Patrons->search($conditions); # FIXME Should be search_limited?
270 if ( $patrons->count > 0) {
271 $nodouble = 0;
272 $check_member = $patrons->next->borrowernumber;
275 my @new_guarantors;
276 my @new_guarantor_id = $input->multi_param('new_guarantor_id');
277 my @new_guarantor_relationship = $input->multi_param('new_guarantor_relationship');
278 foreach my $gid ( @new_guarantor_id ) {
279 my $patron = Koha::Patrons->find( $gid );
280 my $relationship = shift( @new_guarantor_relationship );
281 next unless $patron;
282 my $g = { patron => $patron, relationship => $relationship };
283 push( @new_guarantors, $g );
285 $template->param( new_guarantors => \@new_guarantors );
289 ###############test to take the right zipcode, country and city name ##############
290 # set only if parameter was passed from the form
291 $newdata{'city'} = $input->param('city') if defined($input->param('city'));
292 $newdata{'zipcode'} = $input->param('zipcode') if defined($input->param('zipcode'));
293 $newdata{'country'} = $input->param('country') if defined($input->param('country'));
295 $newdata{'lang'} = $input->param('lang') if defined($input->param('lang'));
297 # builds default userid
298 # userid input text may be empty or missing because of syspref BorrowerUnwantedField
299 if ( ( defined $newdata{'userid'} && $newdata{'userid'} eq '' ) || $check_BorrowerUnwantedField =~ /userid/ && !defined $data{'userid'} ) {
300 my $fake_patron = Koha::Patron->new;
301 $fake_patron->userid($patron->userid) if $patron; # editing
302 if ( ( defined $newdata{'firstname'} || $category_type eq 'I' ) && ( defined $newdata{'surname'} ) ) {
303 # Full page edit, firstname and surname input zones are present
304 $fake_patron->firstname($newdata{firstname});
305 $fake_patron->surname($newdata{surname});
306 $fake_patron->generate_userid;
307 $newdata{'userid'} = $fake_patron->userid;
309 elsif ( ( defined $data{'firstname'} || $category_type eq 'I' ) && ( defined $data{'surname'} ) ) {
310 # Partial page edit (access through "Details"/"Library details" tab), firstname and surname input zones are not used
311 # Still, if the userid field is erased, we can create a new userid with available firstname and surname
312 # FIXME clean thiscode newdata vs data is very confusing
313 $fake_patron->firstname($data{firstname});
314 $fake_patron->surname($data{surname});
315 $fake_patron->generate_userid;
316 $newdata{'userid'} = $fake_patron->userid;
318 else {
319 $newdata{'userid'} = $data{'userid'};
323 $debug and warn join "\t", map {"$_: $newdata{$_}"} qw(dateofbirth dateenrolled dateexpiry);
324 my $extended_patron_attributes;
325 if ($op eq 'save' || $op eq 'insert'){
327 output_and_exit( $input, $cookie, $template, 'wrong_csrf_token' )
328 unless Koha::Token->new->check_csrf({
329 session_id => scalar $input->cookie('CGISESSID'),
330 token => scalar $input->param('csrf_token'),
333 # If the cardnumber is blank, treat it as null.
334 $newdata{'cardnumber'} = undef if $newdata{'cardnumber'} =~ /^\s*$/;
336 if (my $error_code = checkcardnumber($newdata{cardnumber},$newdata{borrowernumber})){
337 push @errors, $error_code == 1
338 ? 'ERROR_cardnumber_already_exists'
339 : $error_code == 2
340 ? 'ERROR_cardnumber_length'
341 : ()
344 my $dateofbirth;
345 if ($op eq 'save' && $step == 3) {
346 $dateofbirth = $patron->dateofbirth;
348 else {
349 $dateofbirth = $newdata{dateofbirth};
352 if ( $dateofbirth ) {
353 my $patron = Koha::Patron->new({ dateofbirth => $dateofbirth });
354 my $age = $patron->get_age;
355 my $borrowercategory = Koha::Patron::Categories->find($categorycode);
356 my ($low,$high) = ($borrowercategory->dateofbirthrequired, $borrowercategory->upperagelimit);
357 if (($high && ($age > $high)) or ($age < $low)) {
358 push @errors, 'ERROR_age_limitations';
359 $template->param( age_low => $low);
360 $template->param( age_high => $high);
364 if (C4::Context->preference("IndependentBranches")) {
365 unless ( C4::Context->IsSuperLibrarian() ){
366 $debug and print STDERR " $newdata{'branchcode'} : ".$userenv->{flags}.":".$userenv->{branch};
367 unless (!$newdata{'branchcode'} || $userenv->{branch} eq $newdata{'branchcode'}){
368 push @errors, "ERROR_branch";
372 # Check if the 'userid' is unique. 'userid' might not always be present in
373 # the edited values list when editing certain sub-forms. Get it straight
374 # from the DB if absent.
375 my $userid = $newdata{ userid } // $borrower_data->{ userid };
376 my $p = $borrowernumber ? Koha::Patrons->find( $borrowernumber ) : Koha::Patron->new();
377 $p->userid( $userid );
378 unless ( $p->has_valid_userid ) {
379 push @errors, "ERROR_login_exist";
382 my $password = $input->param('password');
383 my $password2 = $input->param('password2');
384 push @errors, "ERROR_password_mismatch" if ( $password ne $password2 );
386 if ( $password and $password ne '****' ) {
387 my ( $is_valid, $error ) = Koha::AuthUtils::is_password_valid( $password, Koha::Patron::Categories->find($categorycode) );
388 unless ( $is_valid ) {
389 push @errors, 'ERROR_password_too_short' if $error eq 'too_short';
390 push @errors, 'ERROR_password_too_weak' if $error eq 'too_weak';
391 push @errors, 'ERROR_password_has_whitespaces' if $error eq 'has_whitespaces';
395 # Validate emails
396 my $emailprimary = $input->param('email');
397 my $emailsecondary = $input->param('emailpro');
398 my $emailalt = $input->param('B_email');
400 if ($emailprimary) {
401 push (@errors, "ERROR_bad_email") if (!Email::Valid->address($emailprimary));
403 if ($emailsecondary) {
404 push (@errors, "ERROR_bad_email_secondary") if (!Email::Valid->address($emailsecondary));
406 if ($emailalt) {
407 push (@errors, "ERROR_bad_email_alternative") if (!Email::Valid->address($emailalt));
410 if (C4::Context->preference('ExtendedPatronAttributes') and $input->param('setting_extended_patron_attributes')) {
411 $extended_patron_attributes = parse_extended_patron_attributes($input);
412 for my $attr ( @$extended_patron_attributes ) {
413 $attr->{borrowernumber} = $borrowernumber if $borrowernumber;
414 my $attribute = Koha::Patron::Attribute->new($attr);
415 eval {$attribute->check_unique_id};
416 if ( $@ ) {
417 push @errors, "ERROR_extended_unique_id_failed";
418 my $attr_type = Koha::Patron::Attribute::Types->find($attr->{code});
419 $template->param(
420 ERROR_extended_unique_id_failed_code => $attr->{code},
421 ERROR_extended_unique_id_failed_value => $attr->{attribute},
422 ERROR_extended_unique_id_failed_description => $attr_type->description()
428 elsif ( $borrowernumber ) {
429 $extended_patron_attributes = Koha::Patrons->find($borrowernumber)->extended_attributes->unblessed;
432 if ( ($op eq 'modify' || $op eq 'insert' || $op eq 'save'|| $op eq 'duplicate') and ($step == 0 or $step == 3 )){
433 unless ($newdata{'dateexpiry'}){
434 my $patron_category = Koha::Patron::Categories->find( $newdata{categorycode} );
435 $newdata{'dateexpiry'} = $patron_category->get_expiry_date( $newdata{dateenrolled} ) if $patron_category;
439 # BZ 14683: Do not mixup mobile [read: other phone] with smsalertnumber
440 my $sms = $input->param('SMSnumber');
441 if ( defined $sms ) {
442 $newdata{smsalertnumber} = $sms;
445 ### Error checks should happen before this line.
446 $nok = $nok || scalar(@errors);
447 if ((!$nok) and $nodouble and ($op eq 'insert' or $op eq 'save')){
448 $debug and warn "$op dates: " . join "\t", map {"$_: $newdata{$_}"} qw(dateofbirth dateenrolled dateexpiry);
449 my $success;
450 if ($op eq 'insert'){
451 # we know it's not a duplicate borrowernumber or there would already be an error
452 delete $newdata{password2};
453 $patron = eval { Koha::Patron->new(\%newdata)->store };
454 if ( $@ ) {
455 # FIXME Urgent error handling here, we cannot fail without relevant feedback
456 # Lot of code will need to be removed from this script to handle exceptions raised by Koha::Patron->store
457 warn "Patron creation failed! - $@"; # Maybe we must die instead of just warn
458 push @messages, {error => 'error_on_insert_patron'};
459 $op = "add";
460 } else {
461 $success = 1;
462 add_guarantors( $patron, $input );
463 $borrowernumber = $patron->borrowernumber;
464 $newdata{'borrowernumber'} = $borrowernumber;
467 # If 'AutoEmailOpacUser' syspref is on, email user their account details from the 'notice' that matches the user's branchcode.
468 if ( C4::Context->preference("AutoEmailOpacUser") == 1 && $newdata{'userid'} && $newdata{'password'}) {
469 #look for defined primary email address, if blank - attempt to use borr.email and borr.emailpro instead
470 my $emailaddr;
471 if (C4::Context->preference("AutoEmailPrimaryAddress") ne 'OFF' &&
472 $newdata{C4::Context->preference("AutoEmailPrimaryAddress")} =~ /\w\@\w/ ) {
473 $emailaddr = $newdata{C4::Context->preference("AutoEmailPrimaryAddress")}
475 elsif ($newdata{email} =~ /\w\@\w/) {
476 $emailaddr = $newdata{email}
478 elsif ($newdata{emailpro} =~ /\w\@\w/) {
479 $emailaddr = $newdata{emailpro}
481 elsif ($newdata{B_email} =~ /\w\@\w/) {
482 $emailaddr = $newdata{B_email}
484 # if we manage to find a valid email address, send notice
485 if ($emailaddr) {
486 $newdata{emailaddr} = $emailaddr;
487 my $err;
488 eval {
489 $err = SendAlerts ( 'members', \%newdata, "ACCTDETAILS" );
491 if ( $@ ) {
492 $template->param(error_alert => $@);
493 } elsif ( ref($err) eq "HASH" && defined $err->{error} and $err->{error} eq "no_email" ) {
494 $template->{VARS}->{'error_alert'} = "no_email";
495 } else {
496 $template->{VARS}->{'info_alert'} = 1;
501 if ( $patron && (C4::Context->preference('EnhancedMessagingPreferences') and $input->param('setting_messaging_prefs')) ) {
502 C4::Form::MessagingPreferences::handle_form_action($input, { borrowernumber => $borrowernumber }, $template, 1, $newdata{'categorycode'});
505 # Create HouseboundRole if necessary.
506 # Borrower did not exist, so HouseboundRole *cannot* yet exist.
507 my ( $hsbnd_chooser, $hsbnd_deliverer ) = ( 0, 0 );
508 $hsbnd_chooser = 1 if $input->param('housebound_chooser');
509 $hsbnd_deliverer = 1 if $input->param('housebound_deliverer');
510 # Only create a HouseboundRole if patron has a role.
511 if ( $patron && ( $hsbnd_chooser || $hsbnd_deliverer ) ) {
512 Koha::Patron::HouseboundRole->new({
513 borrowernumber_id => $borrowernumber,
514 housebound_chooser => $hsbnd_chooser,
515 housebound_deliverer => $hsbnd_deliverer,
516 })->store;
519 } elsif ($op eq 'save') {
521 if ($NoUpdateLogin) {
522 delete $newdata{'password'};
523 delete $newdata{'userid'};
526 $patron = Koha::Patrons->find( $borrowernumber );
528 if ($NoUpdateEmail) {
529 delete $newdata{'email'};
530 delete $newdata{'emailpro'};
531 delete $newdata{'B_email'};
534 $newdata{debarredcomment} = $newdata{debarred_comment};
535 delete $newdata{debarred_comment};
536 delete $newdata{password2};
538 eval {
539 $patron->set(\%newdata)->store if scalar(keys %newdata) > 1; # bug 4508 - avoid crash if we're not
540 # updating any columns in the borrowers table,
541 # which can happen if we're only editing the
542 # patron attributes or messaging preferences sections
544 if ( $@ ) {
545 warn "Patron modification failed! - $@"; # Maybe we must die instead of just warn
546 push @messages, {error => 'error_on_update_patron'};
547 $op = "modify";
548 } else {
550 $success = 1;
551 # Update or create our HouseboundRole if necessary.
552 my $housebound_role = Koha::Patron::HouseboundRoles->find($borrowernumber);
553 my ( $hsbnd_chooser, $hsbnd_deliverer ) = ( 0, 0 );
554 $hsbnd_chooser = 1 if $input->param('housebound_chooser');
555 $hsbnd_deliverer = 1 if $input->param('housebound_deliverer');
556 if ( $housebound_role ) {
557 if ( $hsbnd_chooser || $hsbnd_deliverer ) {
558 # Update our HouseboundRole.
559 $housebound_role
560 ->housebound_chooser($hsbnd_chooser)
561 ->housebound_deliverer($hsbnd_deliverer)
562 ->store;
563 } else {
564 $housebound_role->delete; # No longer needed.
566 } else {
567 # Only create a HouseboundRole if patron has a role.
568 if ( $hsbnd_chooser || $hsbnd_deliverer ) {
569 $housebound_role = Koha::Patron::HouseboundRole->new({
570 borrowernumber_id => $borrowernumber,
571 housebound_chooser => $hsbnd_chooser,
572 housebound_deliverer => $hsbnd_deliverer,
573 })->store;
577 # should never raise an exception as password validity is checked above
578 my $password = $newdata{password};
579 if ( $password and $password ne '****' ) {
580 $patron->set_password({ password => $password });
583 add_guarantors( $patron, $input );
584 if (C4::Context->preference('EnhancedMessagingPreferences') and $input->param('setting_messaging_prefs')) {
585 C4::Form::MessagingPreferences::handle_form_action($input, { borrowernumber => $borrowernumber }, $template);
590 if ( $success ) {
591 if (C4::Context->preference('ExtendedPatronAttributes') and $input->param('setting_extended_patron_attributes')) {
592 $patron->extended_attributes->filter_by_branch_limitations->delete;
593 $patron->extended_attributes($extended_patron_attributes);
596 if ( $destination eq 'circ' and not C4::Auth::haspermission( C4::Context->userenv->{id}, { circulate => 'circulate_remaining_permissions' } ) ) {
597 # If we want to redirect to circulation.pl and need to check if the logged in user has the necessary permission
598 $destination = 'not_circ';
600 print scalar( $destination eq "circ" )
601 ? $input->redirect(
602 "/cgi-bin/koha/circ/circulation.pl?borrowernumber=$borrowernumber")
603 : $input->redirect(
604 "/cgi-bin/koha/members/moremember.pl?borrowernumber=$borrowernumber"
606 exit; # You can only send 1 redirect! After that, content or other headers don't matter.
610 if ($delete){
611 print $input->redirect("/cgi-bin/koha/deletemem.pl?member=$borrowernumber");
612 exit; # same as above
615 if ($nok or !$nodouble){
616 $op="add" if ($op eq "insert");
617 $op="modify" if ($op eq "save");
618 %data=%newdata;
619 $template->param( updtype => ($op eq 'add' ?'I':'M')); # used to check for $op eq "insert"... but we just changed $op!
620 unless ($step){
621 $template->param( step_1 => 1,step_2 => 1,step_3 => 1, step_4 => 1, step_5 => 1, step_6 => 1, step_7 => 1 );
624 if (C4::Context->preference("IndependentBranches")) {
625 my $userenv = C4::Context->userenv;
626 if ( !C4::Context->IsSuperLibrarian() && $data{'branchcode'} ) {
627 unless ($userenv->{branch} eq $data{'branchcode'}){
628 print $input->redirect("/cgi-bin/koha/members/members-home.pl");
629 exit;
634 # Define the fields to be pre-filled in guarantee records
635 my $prefillguarantorfields=C4::Context->preference("PrefillGuaranteeField");
636 my @prefill_fields=split(/\,/,$prefillguarantorfields);
638 if ($op eq 'add'){
639 if ($guarantor_id) {
640 foreach (@prefill_fields) {
641 $newdata{$_} = $guarantor->$_;
644 $template->param( updtype => 'I', step_1=>1, step_2=>1, step_3=>1, step_4=>1, step_5 => 1, step_6 => 1, step_7 => 1);
646 if ($op eq "modify") {
647 $template->param( updtype => 'M',modify => 1 );
648 $template->param( step_1=>1, step_2=>1, step_3=>1, step_4=>1, step_5 => 1, step_6 => 1, step_7 => 1) unless $step;
649 if ( $step == 4 ) {
650 $template->param( categorycode => $borrower_data->{'categorycode'} );
653 if ( $op eq "duplicate" ) {
654 $template->param( updtype => 'I' );
655 $template->param( step_1 => 1, step_2 => 1, step_3 => 1, step_4 => 1, step_5 => 1, step_6 => 1, step_7 => 1 ) unless $step;
656 $data{'cardnumber'} = "";
659 if(!defined($data{'sex'})){
660 $template->param( none => 1);
661 } elsif($data{'sex'} eq 'F'){
662 $template->param( female => 1);
663 } elsif ($data{'sex'} eq 'M'){
664 $template->param( male => 1);
665 } elsif ($data{'sex'} eq 'O') {
666 $template->param( other => 1);
667 } else {
668 $template->param( none => 1);
671 ##Now all the data to modify a member.
673 my @typeloop;
674 my $no_categories = 1;
675 my $no_add;
676 foreach my $category_type (qw(C A S P I X)) {
677 my $patron_categories = Koha::Patron::Categories->search_limited({ category_type => $category_type }, {order_by => ['categorycode']});
678 $no_categories = 0 if $patron_categories->count > 0;
680 my @categoryloop;
681 while ( my $patron_category = $patron_categories->next ) {
682 push @categoryloop,
683 { 'categorycode' => $patron_category->categorycode,
684 'categoryname' => $patron_category->description,
685 'effective_min_password_length' => $patron_category->effective_min_password_length,
686 'effective_require_strong_password' => $patron_category->effective_require_strong_password,
687 'categorycodeselected' =>
688 ( defined($categorycode) && $patron_category->categorycode eq $categorycode ),
691 my %typehash;
692 $typehash{'typename'} = $category_type;
693 my $typedescription = "typename_" . $typehash{'typename'};
694 $typehash{'categoryloop'} = \@categoryloop;
695 push @typeloop,
696 { 'typename' => $category_type,
697 $typedescription => 1,
698 'categoryloop' => \@categoryloop
701 $template->param(
702 typeloop => \@typeloop,
703 no_categories => $no_categories,
706 my $cities = Koha::Cities->search( {}, { order_by => 'city_name' } );
707 my $roadtypes = C4::Koha::GetAuthorisedValues( 'ROADTYPE' );
708 $template->param(
709 roadtypes => $roadtypes,
710 cities => $cities,
713 my $default_borrowertitle = '';
714 unless ( $op eq 'duplicate' ) { $default_borrowertitle=$data{'title'} }
716 my @relationships = split /,|\|/, C4::Context->preference('borrowerRelationship');
717 my @relshipdata;
718 while (@relationships) {
719 my $relship = shift @relationships || '';
720 my %row = ('relationship' => $relship);
721 if (defined($data{'relationship'}) and $data{'relationship'} eq $relship) {
722 $row{'selected'}=' selected';
723 } else {
724 $row{'selected'}='';
726 push(@relshipdata, \%row);
729 my %flags = (
730 'gonenoaddress' => ['gonenoaddress'],
731 'lost' => ['lost']
734 my @flagdata;
735 foreach ( keys(%flags) ) {
736 my $key = $_;
737 my %row = (
738 'key' => $key,
739 'name' => $flags{$key}[0]
741 if ( $data{$key} ) {
742 $row{'yes'} = ' checked';
743 $row{'no'} = '';
745 else {
746 $row{'yes'} = '';
747 $row{'no'} = ' checked';
749 push @flagdata, \%row;
752 # get Branch Loop
753 # in modify mod: userbranch value comes from borrowers table
754 # in add mod: userbranch value comes from branches table (ip correspondence)
756 my $userbranch = '';
757 if (C4::Context->userenv && C4::Context->userenv->{'branch'}) {
758 $userbranch = C4::Context->userenv->{'branch'};
761 if (defined ($data{'branchcode'}) and ( $op eq 'modify' || $op eq 'duplicate' || ( $op eq 'add' && $category_type eq 'C' ) )) {
762 $userbranch = $data{'branchcode'};
764 $template->param( userbranch => $userbranch );
766 if ( Koha::Libraries->search->count < 1 ){
767 $no_add = 1;
768 $template->param(no_branches => 1);
770 if($no_categories){
771 $no_add = 1;
772 $template->param(no_categories => 1);
774 $template->param(no_add => $no_add);
775 # --------------------------------------------------------------------------------------------------------
777 $template->param( sort1 => $data{'sort1'});
778 $template->param( sort2 => $data{'sort2'});
779 $template->param( autorenew => $data{'autorenew'});
781 if ($nok) {
782 foreach my $error (@errors) {
783 $template->param($error) || $template->param( $error => 1);
785 $template->param(nok => 1);
788 #Formatting data for display
790 if (!defined($data{'dateenrolled'}) or $data{'dateenrolled'} eq ''){
791 $data{'dateenrolled'} = output_pref({ dt => dt_from_string, dateformat => 'iso', dateonly => 1 });
793 if ( $op eq 'duplicate' ) {
794 $data{'dateenrolled'} = output_pref({ dt => dt_from_string, dateformat => 'iso', dateonly => 1 });
795 my $patron_category = Koha::Patron::Categories->find( $data{categorycode} );
796 $data{dateexpiry} = $patron_category->get_expiry_date( $data{dateenrolled} );
798 if (C4::Context->preference('uppercasesurnames')) {
799 $data{'surname'} &&= uc( $data{'surname'} );
800 $data{'contactname'} &&= uc( $data{'contactname'} );
803 foreach (qw(dateenrolled dateexpiry dateofbirth)) {
804 if ( $data{$_} ) {
805 $data{$_} = eval { output_pref({ dt => dt_from_string( $data{$_} ), dateonly => 1 } ); }; # back to syspref for display
807 $template->param( $_ => $data{$_});
810 if ( C4::Context->preference('ExtendedPatronAttributes') ) {
811 patron_attributes_form( $template, $extended_patron_attributes, $op );
814 if (C4::Context->preference('EnhancedMessagingPreferences')) {
815 if ($op eq 'add') {
816 C4::Form::MessagingPreferences::set_form_values({ categorycode => $categorycode }, $template);
817 } else {
818 C4::Form::MessagingPreferences::set_form_values({ borrowernumber => $borrowernumber }, $template);
820 $template->param(SMSSendDriver => C4::Context->preference("SMSSendDriver"));
821 $template->param(SMSnumber => $data{'smsalertnumber'} );
822 $template->param(TalkingTechItivaPhone => C4::Context->preference("TalkingTechItivaPhoneNotification"));
825 $template->param( "show_guarantor" => ( $category_type =~ /A|I|S|X/ ) ? 0 : 1 ); # associate with step to know where you are
826 $debug and warn "memberentry step: $step";
827 $template->param(%data);
828 $template->param( "step_$step" => 1) if $step; # associate with step to know where u are
829 $template->param( step => $step ) if $step; # associate with step to know where u are
831 $template->param(
832 BorrowerMandatoryField => C4::Context->preference("BorrowerMandatoryField"),#field to test with javascript
833 category_type => $category_type,#to know the category type of the borrower
834 "$category_type" => 1,# associate with step to know where u are
835 destination => $destination,#to know wher u come from and wher u must go in redirect
836 check_member => $check_member,#to know if the borrower already exist(=>1) or not (=>0)
837 "op$op" => 1);
839 $template->param(
840 patron => $patron ? $patron : \%newdata, # Used by address include templates now
841 nodouble => $nodouble,
842 borrowernumber => $borrowernumber, #register number
843 relshiploop => \@relshipdata,
844 btitle=> $default_borrowertitle,
845 flagloop => \@flagdata,
846 category_type =>$category_type,
847 modify => $modify,
848 nok => $nok,#flag to know if an error
849 NoUpdateLogin => $NoUpdateLogin,
850 NoUpdateEmail => $NoUpdateEmail,
853 # Generate CSRF token
854 $template->param( csrf_token =>
855 Koha::Token->new->generate_csrf( { session_id => scalar $input->cookie('CGISESSID'), } ),
858 # HouseboundModule data
859 $template->param(
860 housebound_role => Koha::Patron::HouseboundRoles->find($borrowernumber),
863 if(defined($data{'flags'})){
864 $template->param(flags=>$data{'flags'});
866 if(defined($data{'contacttitle'})){
867 $template->param("contacttitle_" . $data{'contacttitle'} => "SELECTED");
871 my ( $min, $max ) = C4::Members::get_cardnumber_length();
872 if ( defined $min ) {
873 $template->param(
874 minlength_cardnumber => $min,
875 maxlength_cardnumber => $max
879 if ( C4::Context->preference('TranslateNotices') ) {
880 my $translated_languages = C4::Languages::getTranslatedLanguages( 'opac', C4::Context->preference('template') );
881 $template->param( languages => $translated_languages );
884 $template->param( messages => \@messages );
885 output_html_with_http_headers $input, $cookie, $template->output;
887 sub parse_extended_patron_attributes {
888 my ($input) = @_;
889 my @patron_attr = grep { /^patron_attr_\d+$/ } $input->multi_param();
891 my @attr = ();
892 my %dups = ();
893 foreach my $key (@patron_attr) {
894 my $value = $input->param($key);
895 next unless defined($value) and $value ne '';
896 my $code = $input->param("${key}_code");
897 next if exists $dups{$code}->{$value};
898 $dups{$code}->{$value} = 1;
899 push @attr, { code => $code, attribute => $value };
901 return \@attr;
904 sub patron_attributes_form {
905 my $template = shift;
906 my $attributes = shift;
907 my $op = shift;
909 my $library_id = C4::Context->userenv ? C4::Context->userenv->{'branch'} : undef;
910 my $attribute_types = Koha::Patron::Attribute::Types->search_with_library_limits({}, {}, $library_id);
911 if ( $attribute_types->count == 0 ) {
912 $template->param(no_patron_attribute_types => 1);
913 return;
916 # map patron's attributes into a more convenient structure
917 my %attr_hash = ();
918 foreach my $attr (@$attributes) {
919 push @{ $attr_hash{$attr->{code}} }, $attr;
922 my @attribute_loop = ();
923 my $i = 0;
924 my %items_by_class;
925 while ( my ( $attr_type ) = $attribute_types->next ) {
926 my $entry = {
927 class => $attr_type->class(),
928 code => $attr_type->code(),
929 description => $attr_type->description(),
930 repeatable => $attr_type->repeatable(),
931 category => $attr_type->authorised_value_category(),
932 category_code => $attr_type->category_code(),
933 mandatory => $attr_type->mandatory(),
935 if (exists $attr_hash{$attr_type->code()}) {
936 foreach my $attr (@{ $attr_hash{$attr_type->code()} }) {
937 my $newentry = { %$entry };
938 $newentry->{value} = $attr->{attribute};
939 $newentry->{use_dropdown} = 0;
940 if ($attr_type->authorised_value_category()) {
941 $newentry->{use_dropdown} = 1;
942 $newentry->{auth_val_loop} = GetAuthorisedValues($attr_type->authorised_value_category(), $attr->{attribute});
944 $i++;
945 undef $newentry->{value} if ($attr_type->unique_id() && $op eq 'duplicate');
946 $newentry->{form_id} = "patron_attr_$i";
947 push @{$items_by_class{$attr_type->{class}}}, $newentry;
949 } else {
950 $i++;
951 my $newentry = { %$entry };
952 if ($attr_type->authorised_value_category()) {
953 $newentry->{use_dropdown} = 1;
954 $newentry->{auth_val_loop} = GetAuthorisedValues($attr_type->authorised_value_category());
956 $newentry->{form_id} = "patron_attr_$i";
957 push @{$items_by_class{$attr_type->class()}}, $newentry;
960 while ( my ($class, @items) = each %items_by_class ) {
961 my $av = Koha::AuthorisedValues->search({ category => 'PA_CLASS', authorised_value => $class });
962 my $lib = $av->count ? $av->next->lib : $class;
963 push @attribute_loop, {
964 class => $class,
965 items => @items,
966 lib => $lib,
970 $template->param(patron_attributes => \@attribute_loop);
974 sub add_guarantors {
975 my ( $patron, $input ) = @_;
977 my @new_guarantor_id = $input->multi_param('new_guarantor_id');
978 my @new_guarantor_relationship = $input->multi_param('new_guarantor_relationship');
980 for ( my $i = 0 ; $i < scalar @new_guarantor_id; $i++ ) {
981 my $guarantor_id = $new_guarantor_id[$i];
982 my $relationship = $new_guarantor_relationship[$i];
984 next unless $guarantor_id;
986 $patron->add_guarantor(
988 guarantor_id => $guarantor_id,
989 relationship => $relationship,
995 # Local Variables:
996 # tab-width: 8
997 # End: