Bug 21336: Introduce administrative lockout
[koha.git] / members / paycollect.pl
blobcecf2e3fb28a5521d3282e83bb489ef90a261168
1 #!/usr/bin/perl
2 # Copyright 2009,2010 PTFS Inc.
3 # Copyright 2011 PTFS-Europe Ltd
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Modern::Perl;
21 use URI::Escape;
22 use CGI qw ( -utf8 );
24 use C4::Context;
25 use C4::Auth;
26 use C4::Output;
27 use C4::Members;
28 use C4::Accounts;
29 use C4::Koha;
31 use Koha::Patrons;
32 use Koha::Patron::Categories;
33 use Koha::AuthorisedValues;
34 use Koha::Account;
35 use Koha::Token;
37 my $input = CGI->new();
39 my $updatecharges_permissions = $input->param('writeoff_individual') ? 'writeoff' : 'remaining_permissions';
40 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
41 { template_name => 'members/paycollect.tt',
42 query => $input,
43 type => 'intranet',
44 authnotrequired => 0,
45 flagsrequired => { borrowers => 'edit_borrowers', updatecharges => $updatecharges_permissions },
46 debug => 1,
50 # get borrower details
51 my $borrowernumber = $input->param('borrowernumber');
52 my $logged_in_user = Koha::Patrons->find( $loggedinuser ) or die "Not logged in";
53 my $patron = Koha::Patrons->find( $borrowernumber );
54 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
56 my $borrower = $patron->unblessed;
57 my $category = $patron->category;
58 my $user = $input->remote_user;
60 my $branch = C4::Context->userenv->{'branch'};
61 my $total_due = $patron->account->outstanding_debits->total_outstanding;
63 my $total_paid = $input->param('paid');
65 my $individual = $input->param('pay_individual');
66 my $writeoff = $input->param('writeoff_individual');
67 my $select_lines = $input->param('selected');
68 my $select = $input->param('selected_accts');
69 my $payment_note = uri_unescape scalar $input->param('payment_note');
70 my $payment_type = scalar $input->param('payment_type');
71 my $type = scalar $input->param('type') || 'payment',
72 my $accountlines_id;
74 if ( $individual || $writeoff ) {
75 if ($individual) {
76 $template->param( pay_individual => 1 );
77 } elsif ($writeoff) {
78 $template->param( writeoff_individual => 1 );
80 my $accounttype = $input->param('accounttype');
81 $accountlines_id = $input->param('accountlines_id');
82 my $amount = $input->param('amount');
83 my $amountoutstanding = $input->param('amountoutstanding');
84 my $itemnumber = $input->param('itemnumber');
85 my $description = $input->param('description');
86 my $title = $input->param('title');
87 $total_due = $amountoutstanding;
88 $template->param(
89 accounttype => $accounttype,
90 accountlines_id => $accountlines_id,
91 amount => $amount,
92 amountoutstanding => $amountoutstanding,
93 title => $title,
94 itemnumber => $itemnumber,
95 individual_description => $description,
96 payment_note => $payment_note,
98 } elsif ($select_lines) {
99 $total_due = $input->param('amt');
100 $template->param(
101 selected_accts => $select_lines,
102 amt => $total_due,
103 selected_accts_notes => scalar $input->param('notes'),
107 if ( $total_paid and $total_paid ne '0.00' ) {
108 if ( $total_paid < 0 or $total_paid > $total_due ) {
109 $template->param(
110 error_over => 1,
111 total_due => $total_due
113 } else {
114 output_and_exit( $input, $cookie, $template, 'wrong_csrf_token' )
115 unless Koha::Token->new->check_csrf( {
116 session_id => $input->cookie('CGISESSID'),
117 token => scalar $input->param('csrf_token'),
120 if ($individual) {
121 my $line = Koha::Account::Lines->find($accountlines_id);
122 Koha::Account->new( { patron_id => $borrowernumber } )->pay(
124 lines => [$line],
125 amount => $total_paid,
126 library_id => $branch,
127 note => $payment_note,
128 interface => C4::Context->interface,
129 payment_type => $payment_type,
132 print $input->redirect(
133 "/cgi-bin/koha/members/pay.pl?borrowernumber=$borrowernumber");
134 } else {
135 if ($select) {
136 if ( $select =~ /^([\d,]*).*/ ) {
137 $select = $1; # ensure passing no junk
139 my @acc = split /,/, $select;
140 my $note = $input->param('selected_accts_notes');
142 my @lines = Koha::Account::Lines->search(
144 borrowernumber => $borrowernumber,
145 amountoutstanding => { '<>' => 0 },
146 accountlines_id => { 'IN' => \@acc },
148 { order_by => 'date' }
151 Koha::Account->new(
153 patron_id => $borrowernumber,
155 )->pay(
157 type => $type,
158 amount => $total_paid,
159 lines => \@lines,
160 note => $note,
161 interface => C4::Context->interface,
162 payment_type => $payment_type,
166 else {
167 my $note = $input->param('selected_accts_notes');
168 Koha::Account->new( { patron_id => $borrowernumber } )->pay(
170 amount => $total_paid,
171 note => $note,
172 payment_type => $payment_type,
173 interface => C4::Context->interface
178 print $input->redirect("/cgi-bin/koha/members/boraccount.pl?borrowernumber=$borrowernumber");
181 } else {
182 $total_paid = '0.00'; #TODO not right with pay_individual
185 $template->param(%$borrower);
187 if ( $input->param('error_over') ) {
188 $template->param( error_over => 1, total_due => scalar $input->param('amountoutstanding') );
191 $template->param(
192 type => $type,
193 borrowernumber => $borrowernumber, # some templates require global
194 patron => $patron,
195 total => $total_due,
197 csrf_token => Koha::Token->new->generate_csrf({ session_id => scalar $input->cookie('CGISESSID') }),
200 output_html_with_http_headers $input, $cookie, $template->output;