Bug 12176: Remove HTML from additem.pl
[koha.git] / admin / authorised_values.pl
blob9e8351287d875bb3d2e4df91e997b33e7578d632
1 #!/usr/bin/perl
3 # Copyright 2000-2002 Katipo Communications
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use strict;
21 use warnings;
23 use CGI qw ( -utf8 );
24 use C4::Auth;
25 use C4::Branch;
26 use C4::Context;
27 use C4::Koha;
28 use C4::Output;
31 sub AuthorizedValuesForCategory {
32 my ($searchstring) = shift or return;
33 my $dbh = C4::Context->dbh;
34 $searchstring=~ s/\'/\\\'/g;
35 my @data=split(' ',$searchstring);
36 my $sth=$dbh->prepare('
37 SELECT id, category, authorised_value, lib, lib_opac, imageurl
38 FROM authorised_values
39 WHERE (category = ?)
40 ORDER BY category, authorised_value
41 ');
42 $sth->execute("$data[0]");
43 return $sth->fetchall_arrayref({});
46 my $input = new CGI;
47 my $id = $input->param('id');
48 my $op = $input->param('op') || '';
49 our $offset = $input->param('offset') || 0;
50 our $searchfield = $input->param('searchfield');
51 $searchfield = '' unless defined $searchfield;
52 $searchfield =~ s/\,//g;
53 our $script_name = "/cgi-bin/koha/admin/authorised_values.pl";
54 our $dbh = C4::Context->dbh;
56 our ($template, $borrowernumber, $cookie)= get_template_and_user({
57 template_name => "admin/authorised_values.tt",
58 authnotrequired => 0,
59 flagsrequired => {parameters => 'parameters_remaining_permissions'},
60 query => $input,
61 type => "intranet",
62 debug => 1,
63 });
65 $template->param( script_name => $script_name,
66 ($op||'else') => 1 );
67 ################## ADD_FORM ##################################
68 # called by default. Used to create form to add or modify a record
69 if ($op eq 'add_form') {
70 my $data;
71 my @selected_branches;
72 if ($id) {
73 my $sth=$dbh->prepare("select id, category, authorised_value, lib, lib_opac, imageurl from authorised_values where id=?");
74 $sth->execute($id);
75 $data=$sth->fetchrow_hashref;
76 $sth = $dbh->prepare("SELECT b.branchcode, b.branchname FROM authorised_values_branches AS avb, branches AS b WHERE avb.branchcode = b.branchcode AND avb.av_id = ?;");
77 $sth->execute( $id );
78 while ( my $branch = $sth->fetchrow_hashref ) {
79 push @selected_branches, $branch;
81 } else {
82 $data->{'category'} = $input->param('category');
85 my $branches = GetBranches;
86 my @branches_loop;
88 foreach my $branchcode ( sort { uc($branches->{$a}->{branchname}) cmp uc($branches->{$b}->{branchname}) } keys %$branches ) {
89 my $selected = ( grep {$_->{branchcode} eq $branchcode} @selected_branches ) ? 1 : 0;
90 push @branches_loop, {
91 branchcode => $branchcode,
92 branchname => $branches->{$branchcode}->{branchname},
93 selected => $selected,
97 if ($id) {
98 $template->param(action_modify => 1);
99 $template->param('heading_modify_authorized_value_p' => 1);
100 } elsif ( ! $data->{'category'} ) {
101 $template->param(action_add_category => 1);
102 $template->param('heading_add_new_category_p' => 1);
103 } else {
104 $template->param(action_add_value => 1);
105 $template->param('heading_add_authorized_value_p' => 1);
107 $template->param('use_heading_flags_p' => 1);
108 $template->param( category => $data->{'category'},
109 authorised_value => $data->{'authorised_value'},
110 lib => $data->{'lib'},
111 lib_opac => $data->{'lib_opac'},
112 id => $data->{'id'},
113 imagesets => C4::Koha::getImageSets( checked => $data->{'imageurl'} ),
114 offset => $offset,
115 branches_loop => \@branches_loop,
118 ################## ADD_VALIDATE ##################################
119 # called by add_form, used to insert/modify data in DB
120 } elsif ($op eq 'add_validate') {
121 my $new_authorised_value = $input->param('authorised_value');
122 my $new_category = $input->param('category');
123 my $imageurl = $input->param( 'imageurl' ) || '';
124 $imageurl = '' if $imageurl =~ /removeImage/;
125 my $duplicate_entry = 0;
126 my @branches = $input->param('branches');
128 if ( $id ) { # Update
129 my $sth = $dbh->prepare( "SELECT category, authorised_value FROM authorised_values WHERE id = ? ");
130 $sth->execute($id);
131 my ($category, $authorised_value) = $sth->fetchrow_array();
132 if ( $authorised_value ne $new_authorised_value ) {
133 my $sth = $dbh->prepare_cached( "SELECT COUNT(*) FROM authorised_values " .
134 "WHERE category = ? AND authorised_value = ? and id <> ? ");
135 $sth->execute($new_category, $new_authorised_value, $id);
136 ($duplicate_entry) = $sth->fetchrow_array();
138 unless ( $duplicate_entry ) {
139 my $sth=$dbh->prepare( 'UPDATE authorised_values
140 SET category = ?,
141 authorised_value = ?,
142 lib = ?,
143 lib_opac = ?,
144 imageurl = ?
145 WHERE id=?' );
146 my $lib = $input->param('lib');
147 my $lib_opac = $input->param('lib_opac');
148 undef $lib if ($lib eq ""); # to insert NULL instead of a blank string
149 undef $lib_opac if ($lib_opac eq ""); # to insert NULL instead of a blank string
150 $sth->execute($new_category, $new_authorised_value, $lib, $lib_opac, $imageurl, $id);
151 if ( @branches ) {
152 $sth = $dbh->prepare("DELETE FROM authorised_values_branches WHERE av_id = ?");
153 $sth->execute( $id );
154 $sth = $dbh->prepare(
155 "INSERT INTO authorised_values_branches
156 ( av_id, branchcode )
157 VALUES ( ?, ? )"
159 for my $branchcode ( @branches ) {
160 next if not $branchcode;
161 $sth->execute($id, $branchcode);
164 $sth->finish;
165 print $input->redirect("/cgi-bin/koha/admin/authorised_values.pl?searchfield=$new_category&amp;offset=$offset");
166 exit;
169 else { # Insert
170 my $sth = $dbh->prepare_cached( "SELECT COUNT(*) FROM authorised_values " .
171 "WHERE category = ? AND authorised_value = ? ");
172 $sth->execute($new_category, $new_authorised_value);
173 ($duplicate_entry) = $sth->fetchrow_array();
174 unless ( $duplicate_entry ) {
175 my $sth=$dbh->prepare( 'INSERT INTO authorised_values
176 ( category, authorised_value, lib, lib_opac, imageurl )
177 values (?, ?, ?, ?, ?)' );
178 my $lib = $input->param('lib');
179 my $lib_opac = $input->param('lib_opac');
180 undef $lib if ($lib eq ""); # to insert NULL instead of a blank string
181 undef $lib_opac if ($lib_opac eq ""); # to insert NULL instead of a blank string
182 $sth->execute( $new_category, $new_authorised_value, $lib, $lib_opac, $imageurl );
183 $id = $dbh->{'mysql_insertid'};
184 if ( @branches ) {
185 $sth = $dbh->prepare(
186 "INSERT INTO authorised_values_branches
187 ( av_id, branchcode )
188 VALUES ( ?, ? )"
190 for my $branchcode ( @branches ) {
191 next if not $branchcode;
192 $sth->execute($id, $branchcode);
195 my $category = $input->param('category');
196 print $input->redirect("/cgi-bin/koha/admin/authorised_values.pl?searchfield=$category&amp;offset=$offset");
197 exit;
200 if ( $duplicate_entry ) {
201 $template->param(duplicate_category => $new_category,
202 duplicate_value => $new_authorised_value,
203 else => 1);
204 default_form();
207 ################## DELETE_CONFIRM ##################################
208 # called by default form, used to confirm deletion of data in DB
209 } elsif ($op eq 'delete_confirm') {
210 my $sth=$dbh->prepare("select category,authorised_value,lib,lib_opac from authorised_values where id=?");
211 $sth->execute($id);
212 my $data=$sth->fetchrow_hashref;
213 $id = $input->param('id') unless $id;
214 $template->param(searchfield => $searchfield,
215 Tlib => $data->{'lib'},
216 Tlib_opac => $data->{'lib_opac'},
217 Tvalue => $data->{'authorised_value'},
218 id =>$id,
221 # END $OP eq DELETE_CONFIRM
222 ################## DELETE_CONFIRMED ##################################
223 # called by delete_confirm, used to effectively confirm deletion of data in DB
224 } elsif ($op eq 'delete_confirmed') {
225 my $id = $input->param('id');
226 my $sth=$dbh->prepare("delete from authorised_values where id=?");
227 $sth->execute($id);
228 print $input->redirect("/cgi-bin/koha/admin/authorised_values.pl?searchfield=$searchfield&amp;offset=$offset");
229 exit;
230 # END $OP eq DELETE_CONFIRMED
231 ################## DEFAULT ##################################
232 } else { # DEFAULT
233 default_form();
234 } #---- END $OP eq DEFAULT
235 output_html_with_http_headers $input, $cookie, $template->output;
237 exit 0;
239 sub default_form {
240 # build categories list
241 my $category_list = C4::Koha::GetAuthorisedValueCategories();
242 my @category_list = @{$category_list};
243 my %categories; # a hash, to check that some hardcoded categories exist.
244 for my $category ( @category_list ) {
245 $categories{$category} = 1;
248 # push koha system categories
249 foreach (qw(Asort1 Asort2 Bsort1 Bsort2 SUGGEST DAMAGED LOST REPORT_GROUP REPORT_SUBGROUP DEPARTMENT TERM SUGGEST_STATUS)) {
250 push @category_list, $_ unless $categories{$_};
253 #reorder the list
254 @category_list = sort {lc($a) cmp lc($b)} @category_list;
255 if (!$searchfield) {
256 $searchfield=$category_list[0];
258 my $tab_list = {
259 values => \@category_list,
260 default => $searchfield,
262 my ($results) = AuthorizedValuesForCategory($searchfield);
263 my $count = scalar(@$results);
264 my @loop_data = ();
265 # builds value list
266 my $sth = $dbh->prepare("SELECT b.branchcode, b.branchname FROM authorised_values_branches AS avb, branches AS b WHERE avb.branchcode = b.branchcode AND avb.av_id = ?");
267 for (my $i=0; $i < $count; $i++){
268 $sth->execute( $results->[$i]{id} );
269 my @selected_branches;
270 while ( my $branch = $sth->fetchrow_hashref ) {
271 push @selected_branches, $branch;
273 my %row_data; # get a fresh hash for the row data
274 $row_data{category} = $results->[$i]{'category'};
275 $row_data{authorised_value} = $results->[$i]{'authorised_value'};
276 $row_data{lib} = $results->[$i]{'lib'};
277 $row_data{lib_opac} = $results->[$i]{'lib_opac'};
278 $row_data{imageurl} = getitemtypeimagelocation( 'intranet', $results->[$i]{'imageurl'} );
279 $row_data{edit} = "$script_name?op=add_form&amp;id=".$results->[$i]{'id'}."&amp;offset=$offset";
280 $row_data{delete} = "$script_name?op=delete_confirm&amp;searchfield=$searchfield&amp;id=".$results->[$i]{'id'}."&amp;offset=$offset";
281 $row_data{branches} = \@selected_branches;
282 push(@loop_data, \%row_data);
285 $template->param(
286 loop => \@loop_data,
287 tab_list => $tab_list,
288 category => $searchfield,