Bug 25898: Prohibit indirect object notation
[koha.git] / reports / borrowers_out.pl
blob394bf38b1512b866aa9ee3e06b298a458fbd427c
1 #!/usr/bin/perl
3 # Copyright 2000-2002 Katipo Communications
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Modern::Perl;
22 use CGI qw ( -utf8 );
23 use C4::Auth;
24 use C4::Context;
25 use C4::Koha;
26 use C4::Output;
27 use C4::Circulation;
28 use C4::Reports;
29 use C4::Members;
31 use Koha::DateUtils;
32 use Koha::Patron::Categories;
34 =head1 NAME
36 reports/borrowers_out.pl
38 =head1 DESCRIPTION
40 Plugin that shows a stats on borrowers
42 =cut
44 my $input = CGI->new;
45 my $do_it=$input->param('do_it');
46 my $fullreportname = "reports/borrowers_out.tt";
47 my $limit = $input->param("Limit");
48 my $column = $input->param("Criteria");
49 my @filters = $input->multi_param("Filter");
50 $filters[1] = eval { output_pref( { dt => dt_from_string( $filters[1]), dateonly => 1, dateformat => 'iso' } ); }
51 if ( $filters[1] );
53 my $output = $input->param("output");
54 my $basename = $input->param("basename");
55 our $sep = $input->param("sep") || '';
56 $sep = "\t" if ($sep eq 'tabulation');
57 my ($template, $borrowernumber, $cookie)
58 = get_template_and_user({template_name => $fullreportname,
59 query => $input,
60 type => "intranet",
61 flagsrequired => {reports => '*'},
62 debug => 1,
63 });
64 $template->param(do_it => $do_it,
66 if ($do_it) {
67 # Displaying results
68 my $results = calculate($limit, $column, \@filters);
69 if ($output eq "screen"){
70 # Printing results to screen
71 $template->param(mainloop => $results);
72 output_html_with_http_headers $input, $cookie, $template->output;
73 exit;
74 } else {
75 # Printing to a csv file
76 print $input->header(-type => 'application/vnd.sun.xml.calc',
77 -encoding => 'utf-8',
78 -attachment=>"$basename.csv",
79 -filename=>"$basename.csv" );
80 my $cols = @$results[0]->{loopcol};
81 my $lines = @$results[0]->{looprow};
82 # header top-right
83 print "num /". @$results[0]->{column} .$sep;
84 # Other header
85 foreach my $col ( @$cols ) {
86 print $col->{coltitle}.$sep;
88 print "Total\n";
89 # Table
90 foreach my $line ( @$lines ) {
91 my $x = $line->{loopcell};
92 print $line->{rowtitle}.$sep;
93 foreach my $cell (@$x) {
94 my $cellvalue = defined $cell->{value} ? $cell->{value}.$sep : ''.$sep;
95 print $cellvalue;
97 # print $line->{totalrow};
98 print "\n";
100 # footer
101 print "TOTAL";
102 $cols = @$results[0]->{loopfooter};
103 foreach my $col ( @$cols ) {
104 print $sep.$col->{totalcol};
106 print $sep.@$results[0]->{total};
107 exit;
109 # Displaying choices
110 } else {
111 my $dbh = C4::Context->dbh;
113 my $CGIextChoice = ( 'CSV' ); # FIXME translation
114 my $CGIsepChoice = GetDelimiterChoices;
116 my $patron_categories = Koha::Patron::Categories->search_limited({}, {order_by => ['categorycode']});
117 $template->param(
118 CGIextChoice => $CGIextChoice,
119 CGIsepChoice => $CGIsepChoice,
120 patron_categories => $patron_categories,
122 output_html_with_http_headers $input, $cookie, $template->output;
126 sub calculate {
127 my ($line, $column, $filters) = @_;
128 my @mainloop;
129 my @loopfooter;
130 my @loopcol;
131 my @looprow;
132 my %globalline;
133 my $grantotal =0;
134 # extract parameters
135 my $dbh = C4::Context->dbh;
137 # Filters
138 # Checking filters
140 my @loopfilter;
141 for (my $i=0;$i<=2;$i++) {
142 my %cell;
143 if ( @$filters[$i] ) {
144 if (($i==1) and (@$filters[$i-1])) {
145 $cell{err} = 1 if (@$filters[$i]<@$filters[$i-1]) ;
147 $cell{filter} .= @$filters[$i];
148 $cell{crit} .="Bor Cat" if ($i==0);
149 $cell{crit} .="Without issues since" if ($i==1);
150 push @loopfilter, \%cell;
153 my $colfield;
154 my $colorder;
155 if ($column){
156 $column = "borrowers.".$column if $column=~/categorycode/ || $column=~/branchcode/;
157 my @colfilter ;
158 $colfilter[0] = @$filters[0] if ($column =~ /category/ ) ;
159 # $colfilter[0] = @$filters[11] if ($column =~ /sort2/ ) ;
160 #warn "filtre col ".$colfilter[0]." ".$colfilter[1];
162 # loop cols.
163 $colfield .= $column;
164 $colorder .= $column;
166 my $strsth2;
167 $strsth2 .= "select distinct " . $dbh->quote($colfield) . " FROM borrowers WHERE 1";
168 my @query_args;
169 if ( $colfilter[0] ) {
170 $colfilter[0] =~ s/\*/%/g;
171 $strsth2 .= " and " . $dbh->quote($column) . "LIKE ?" ;
172 push @query_args, $colfilter[0];
174 $strsth2 .=" group by " . $dbh->quote($colfield);
175 $strsth2 .=" order by " . $dbh->quote($colorder);
176 # warn "". $strsth2;
178 my $sth2 = $dbh->prepare( $strsth2 );
179 $sth2->execute( @query_args );
180 while (my ($celvalue) = $sth2->fetchrow) {
181 my %cell;
182 # my %ft;
183 # warn "coltitle :".$celvalue;
184 $cell{coltitle} = $celvalue;
185 # $ft{totalcol} = 0;
186 push @loopcol, \%cell;
188 # warn "fin des titres colonnes";
191 my $i=0;
192 # my @totalcol;
194 #Initialization of cell values.....
195 my @table;
197 # warn "init table";
198 if($line) {
199 for (my $i=1;$i<=$line;$i++) {
200 foreach my $col ( @loopcol ) {
201 $table[$i]->{($col->{coltitle})?$col->{coltitle}:"Global"}=0;
207 # preparing calculation
208 my $strcalc ;
210 # Processing calculation
211 $strcalc .= "SELECT CONCAT( borrowers.surname , \"\\t\",borrowers.firstname, \"\\t\", borrowers.cardnumber)";
212 $strcalc .= " , " . $dbh->quote($colfield) if ($colfield);
213 $strcalc .= " FROM borrowers ";
214 $strcalc .= "WHERE 1 ";
215 my @query_args;
216 if ( @$filters[0] ) {
217 @$filters[0]=~ s/\*/%/g;
218 $strcalc .= " AND borrowers.categorycode like ?";
219 push @query_args, @$filters[0];
221 $strcalc .= " AND NOT EXISTS (SELECT * FROM issues WHERE issues.borrowernumber=borrowers.borrowernumber ";
222 if ( @$filters[1] ) {
223 $strcalc .= " AND issues.timestamp > ?";
224 push @query_args, @$filters[1];
226 $strcalc .= ") ";
227 $strcalc .= " AND NOT EXISTS (SELECT * FROM old_issues WHERE old_issues.borrowernumber=borrowers.borrowernumber ";
228 if ( @$filters[1] ) {
229 $strcalc .= " AND old_issues.timestamp > ?";
230 push @query_args, @$filters[1];
232 $strcalc .= ") ";
233 $strcalc .= " group by borrowers.borrowernumber";
234 $strcalc .= ", " . $dbh->quote($colfield) if ($column);
235 $strcalc .= " order by " . $dbh->quote($colfield) if ($colfield);
236 my $max;
237 if ($line) {
238 if (@loopcol) {
239 $max = $line*@loopcol;
240 } else { $max=$line;}
241 $strcalc .= " LIMIT 0,$max";
244 my $dbcalc = $dbh->prepare($strcalc);
245 $dbcalc->execute( @query_args );
246 # warn "filling table";
247 my $previous_col;
248 $i=1;
249 while (my @data = $dbcalc->fetchrow) {
250 my ($row, $col )=@data;
251 $col = "zzEMPTY" if (!defined($col));
252 $i=1 if (($previous_col) and not($col eq $previous_col));
253 $table[$i]->{$col}=$row;
254 # warn " $i $col $row";
255 $i++;
256 $previous_col=$col;
259 push @loopcol,{coltitle => "Global"} if not($column);
261 $max =(($line)?$line:@table -1);
262 for ($i=1; $i<=$max;$i++) {
263 my @loopcell;
264 #@loopcol ensures the order for columns is common with column titles
265 # and the number matches the number of columns
266 my $colcount=0;
267 foreach my $col ( @loopcol ) {
268 my $value;
269 if (@loopcol){
270 $value =$table[$i]->{(($col->{coltitle} eq "NULL") or ($col->{coltitle} eq "Global"))?"zzEMPTY":$col->{coltitle}};
271 } else {
272 $value =$table[$i]->{"zzEMPTY"};
274 push @loopcell, {value => $value} ;
276 push @looprow,{ 'rowtitle' => $i ,
277 'loopcell' => \@loopcell,
283 # the header of the table
284 $globalline{loopfilter}=\@loopfilter;
285 # the core of the table
286 $globalline{looprow} = \@looprow;
287 $globalline{loopcol} = \@loopcol;
288 # # the foot (totals by borrower type)
289 $globalline{loopfooter} = \@loopfooter;
290 $globalline{total}= $grantotal;
291 $globalline{line} = $line;
292 $globalline{column} = $column;
293 push @mainloop,\%globalline;
294 return \@mainloop;
298 __END__