Bug 25898: Prohibit indirect object notation
[koha.git] / tools / overduerules.pl
blob293c51c78abc9a330aadd4069c110173483fee89
1 #!/usr/bin/perl
3 # Copyright 2000-2002 Katipo Communications
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Modern::Perl;
21 use CGI qw ( -utf8 );
22 use C4::Context;
23 use C4::Output;
24 use C4::Auth;
25 use C4::Koha;
26 use C4::Letters;
27 use C4::Members;
28 use C4::Overdues;
29 use Koha::Libraries;
31 use Koha::Patron::Categories;
33 our $input = CGI->new;
34 my $dbh = C4::Context->dbh;
36 my @patron_categories = Koha::Patron::Categories->search( { overduenoticerequired => { '>' => 0 } } );
37 my @category_codes = map { $_->categorycode } @patron_categories;
38 our @rule_params = qw(delay letter debarred);
40 # blank_row($category_code) - return true if the entire row is blank.
41 sub blank_row {
42 my ($category_code) = @_;
43 for my $rp (@rule_params) {
44 for my $n (1 .. 3) {
45 my $key = "${rp}${n}-$category_code";
47 if (utf8::is_utf8($key)) {
48 utf8::encode($key);
51 my $value = $input->param($key);
52 if ($value) {
53 return 0;
57 return 1;
60 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
62 template_name => "tools/overduerules.tt",
63 query => $input,
64 type => "intranet",
65 flagsrequired => { tools => 'edit_notice_status_triggers' },
66 debug => 1,
70 my $type = $input->param('type');
72 my $branch = $input->param('branch');
73 $branch =
74 defined $branch ? $branch
75 : C4::Context->preference('DefaultToLoggedInLibraryOverdueTriggers') ? C4::Context::mybranch()
76 : Koha::Libraries->search->count() == 1 ? undef
77 : undef;
78 $branch ||= q{};
80 my $op = $input->param('op');
81 $op ||= q{};
83 my $err=0;
85 # save the values entered into tables
86 my %temphash;
87 my $input_saved = 0;
88 if ($op eq 'save') {
89 my @names=$input->multi_param();
90 my $sth_search = $dbh->prepare("SELECT count(*) AS total FROM overduerules WHERE branchcode=? AND categorycode=?");
92 my $sth_insert = $dbh->prepare("INSERT INTO overduerules (branchcode,categorycode, delay1,letter1,debarred1, delay2,letter2,debarred2, delay3,letter3,debarred3) VALUES (?,?,?,?,?,?,?,?,?,?,?)");
93 my $sth_update=$dbh->prepare("UPDATE overduerules SET delay1=?, letter1=?, debarred1=?, delay2=?, letter2=?, debarred2=?, delay3=?, letter3=?, debarred3=? WHERE branchcode=? AND categorycode=?");
94 my $sth_delete=$dbh->prepare("DELETE FROM overduerules WHERE branchcode=? AND categorycode=?");
95 my $sth_insert_mtt = $dbh->prepare("
96 INSERT INTO overduerules_transport_types(
97 overduerules_id, letternumber, message_transport_type
98 ) VALUES (
99 (SELECT overduerules_id FROM overduerules WHERE branchcode = ? AND categorycode = ?), ?, ?
102 my $sth_delete_mtt = $dbh->prepare("
103 DELETE FROM overduerules_transport_types
104 WHERE overduerules_id = (SELECT overduerules_id FROM overduerules WHERE branchcode = ? AND categorycode = ?)
107 foreach my $key (@names){
108 # ISSUES
109 if ($key =~ /(delay|letter|debarred)([1-3])-(.*)/) {
110 my $type = $1; # data type
111 my $num = $2; # From 1 to 3
112 my $bor = $3; # borrower category
113 my $value = $input->param($key);
114 if ($type eq 'delay') {
115 $temphash{$bor}->{"$type$num"} = ($value =~ /^\d+$/ && int($value) > 0) ? int($value) : '';
116 } else {
117 # type is letter
118 $temphash{$bor}->{"$type$num"} = $value if $value ne '';
123 # figure out which rows need to be deleted
124 my @rows_to_delete = grep { blank_row($_) } @category_codes;
126 foreach my $bor (keys %temphash){
127 # get category name if we need it for an error message
128 my $bor_category = Koha::Patron::Categories->find($bor);
129 my $bor_category_name = $bor_category ? $bor_category->description : $bor;
131 # Do some Checking here : delay1 < delay2 <delay3 all of them being numbers
132 # Raise error if not true
133 if ($temphash{$bor}->{delay1}=~/[^0-9]/ and $temphash{$bor}->{delay1} ne ""){
134 $template->param("ERROR"=>1,"ERRORDELAY"=>"delay1","BORERR"=>$bor_category_name);
135 $err=1;
136 } elsif ($temphash{$bor}->{delay2}=~/[^0-9]/ and $temphash{$bor}->{delay2} ne ""){
137 $template->param("ERROR"=>1,"ERRORDELAY"=>"delay2","BORERR"=>$bor_category_name);
138 $err=1;
139 } elsif ($temphash{$bor}->{delay3}=~/[^0-9]/ and $temphash{$bor}->{delay3} ne ""){
140 $template->param("ERROR"=>1,"ERRORDELAY"=>"delay3","BORERR"=>$bor_category_name);
141 $err=1;
142 } elsif ($temphash{$bor}->{delay1} and not ($temphash{$bor}->{"letter1"} or $temphash{$bor}->{"debarred1"})) {
143 $template->param("ERROR"=>1,"ERRORUSELESSDELAY"=>"delay1","BORERR"=>$bor_category_name);
144 $err=1;
145 } elsif ($temphash{$bor}->{delay2} and not ($temphash{$bor}->{"letter2"} or $temphash{$bor}->{"debarred2"})) {
146 $template->param("ERROR"=>1,"ERRORUSELESSDELAY"=>"delay2","BORERR"=>$bor_category_name);
147 $err=1;
148 } elsif ($temphash{$bor}->{delay3} and not ($temphash{$bor}->{"letter3"} or $temphash{$bor}->{"debarred3"})) {
149 $template->param("ERROR"=>1,"ERRORUSELESSDELAY"=>"delay3","BORERR"=>$bor_category_name);
150 $err=1;
151 }elsif ($temphash{$bor}->{delay3} and
152 ($temphash{$bor}->{delay3}<=$temphash{$bor}->{delay2} or $temphash{$bor}->{delay3}<=$temphash{$bor}->{delay1})
153 or $temphash{$bor}->{delay2} and ($temphash{$bor}->{delay2}<=$temphash{$bor}->{delay1})){
154 $template->param("ERROR"=>1,"ERRORORDER"=>1,"BORERR"=>$bor_category_name);
155 $err=1;
157 unless ($err){
158 if (($temphash{$bor}->{delay1} and ($temphash{$bor}->{"letter1"} or $temphash{$bor}->{"debarred1"}))
159 or ($temphash{$bor}->{delay2} and ($temphash{$bor}->{"letter2"} or $temphash{$bor}->{"debarred2"}))
160 or ($temphash{$bor}->{delay3} and ($temphash{$bor}->{"letter3"} or $temphash{$bor}->{"debarred3"}))) {
161 $sth_search->execute($branch,$bor);
162 my $res = $sth_search->fetchrow_hashref();
163 if ($res->{'total'}>0) {
164 $sth_update->execute(
165 ($temphash{$bor}->{"delay1"}?$temphash{$bor}->{"delay1"}:undef),
166 ($temphash{$bor}->{"letter1"}?$temphash{$bor}->{"letter1"}:""),
167 ($temphash{$bor}->{"debarred1"}?$temphash{$bor}->{"debarred1"}:0),
168 ($temphash{$bor}->{"delay2"}?$temphash{$bor}->{"delay2"}:undef),
169 ($temphash{$bor}->{"letter2"}?$temphash{$bor}->{"letter2"}:""),
170 ($temphash{$bor}->{"debarred2"}?$temphash{$bor}->{"debarred2"}:0),
171 ($temphash{$bor}->{"delay3"}?$temphash{$bor}->{"delay3"}:undef),
172 ($temphash{$bor}->{"letter3"}?$temphash{$bor}->{"letter3"}:""),
173 ($temphash{$bor}->{"debarred3"}?$temphash{$bor}->{"debarred3"}:0),
174 $branch ,$bor
176 } else {
177 $sth_insert->execute($branch,$bor,
178 ($temphash{$bor}->{"delay1"}?$temphash{$bor}->{"delay1"}:0),
179 ($temphash{$bor}->{"letter1"}?$temphash{$bor}->{"letter1"}:""),
180 ($temphash{$bor}->{"debarred1"}?$temphash{$bor}->{"debarred1"}:0),
181 ($temphash{$bor}->{"delay2"}?$temphash{$bor}->{"delay2"}:0),
182 ($temphash{$bor}->{"letter2"}?$temphash{$bor}->{"letter2"}:""),
183 ($temphash{$bor}->{"debarred2"}?$temphash{$bor}->{"debarred2"}:0),
184 ($temphash{$bor}->{"delay3"}?$temphash{$bor}->{"delay3"}:0),
185 ($temphash{$bor}->{"letter3"}?$temphash{$bor}->{"letter3"}:""),
186 ($temphash{$bor}->{"debarred3"}?$temphash{$bor}->{"debarred3"}:0)
190 $sth_delete_mtt->execute( $branch, $bor );
191 for my $letternumber ( 1..3 ) {
192 my @mtt = $input->multi_param( "mtt${letternumber}-$bor" );
193 next unless @mtt;
194 for my $mtt ( @mtt ) {
195 $sth_insert_mtt->execute( $branch, $bor, $letternumber, $mtt);
201 unless ($err) {
202 for my $category_code (@rows_to_delete) {
203 $sth_delete->execute($branch, $category_code);
205 $template->param(datasaved => 1);
206 $input_saved = 1;
210 my $letters = C4::Letters::GetLettersAvailableForALibrary(
212 branchcode => $branch,
213 module => "circulation",
217 my $message_transport_types = C4::Letters::GetMessageTransportTypes();
218 my ( @first, @second, @third );
219 for my $patron_category (@patron_categories) {
220 if (%temphash and not $input_saved){
221 # if we managed to save the form submission, don't
222 # reuse %temphash, but take the values from the
223 # database - this makes it easier to identify
224 # bugs where the form submission was not correctly saved
225 for my $i ( 1..3 ){
226 my %row = (
227 overduename => $patron_category->categorycode,
228 line => $patron_category->description,
230 $row{delay}=$temphash{$patron_category->categorycode}->{"delay$i"};
231 $row{debarred}=$temphash{$patron_category->categorycode}->{"debarred$i"};
232 $row{selected_lettercode} = $temphash{ $patron_category->categorycode }->{"letter$i"};
233 my @selected_mtts = @{ GetOverdueMessageTransportTypes( $branch, $patron_category->categorycode, $i) };
234 my @mtts;
235 for my $mtt ( @$message_transport_types ) {
236 push @mtts, {
237 value => $mtt,
238 selected => ( grep {/$mtt/} @selected_mtts ) ? 1 : 0 ,
241 $row{message_transport_types} = \@mtts;
242 if ( $i == 1 ) {
243 push @first, \%row;
244 } elsif ( $i == 2 ) {
245 push @second, \%row;
246 } else {
247 push @third, \%row;
250 } else {
251 #getting values from table
252 my $sth2=$dbh->prepare("SELECT * from overduerules WHERE branchcode=? AND categorycode=?");
253 $sth2->execute($branch,$patron_category->categorycode);
254 my $dat=$sth2->fetchrow_hashref;
255 for my $i ( 1..3 ){
256 my %row = (
257 overduename => $patron_category->categorycode,
258 line => $patron_category->description,
261 $row{selected_lettercode} = $dat->{"letter$i"};
263 if ($dat->{"delay$i"}){$row{delay}=$dat->{"delay$i"};}
264 if ($dat->{"debarred$i"}){$row{debarred}=$dat->{"debarred$i"};}
265 my @selected_mtts = @{ GetOverdueMessageTransportTypes( $branch, $patron_category->categorycode, $i) };
266 my @mtts;
267 for my $mtt ( @$message_transport_types ) {
268 push @mtts, {
269 value => $mtt,
270 selected => ( grep {/$mtt/} @selected_mtts ) ? 1 : 0 ,
273 $row{message_transport_types} = \@mtts;
274 if ( $i == 1 ) {
275 push @first, \%row;
276 } elsif ( $i == 2 ) {
277 push @second, \%row;
278 } else {
279 push @third, \%row;
286 my @tabs = (
288 id => 'first',
289 number => 1,
290 values => \@first,
293 id => 'second',
294 number => 2,
295 values => \@second,
298 id => 'third',
299 number => 3,
300 values => \@third,
304 $template->param(
305 table => ( @first or @second or @third ? 1 : 0 ),
306 branch => $branch,
307 tabs => \@tabs,
308 message_transport_types => $message_transport_types,
309 letters => $letters,
311 output_html_with_http_headers $input, $cookie, $template->output;