| | |
| | | +-----------------------------------------------------------------------+ |
| | | | program/steps/addressbook/save.inc | |
| | | | | |
| | | | This file is part of the RoundCube Webmail client | |
| | | | Copyright (C) 2005, RoundCube Dev. - Switzerland | |
| | | | Licensed under the GNU GPL | |
| | | | This file is part of the Roundcube Webmail client | |
| | | | Copyright (C) 2005-2011, The Roundcube Dev Team | |
| | | | | |
| | | | Licensed under the GNU General Public License version 3 or | |
| | | | any later version with exceptions for skins & plugins. | |
| | | | See the README file for a full license statement. | |
| | | | | |
| | | | PURPOSE: | |
| | | | Save a contact entry or to add a new one | |
| | |
| | | |
| | | */ |
| | | |
| | | // check input |
| | | if ((empty($_POST['_name']) || empty($_POST['_email'])) && empty($_GET['_framed'])) |
| | | { |
| | | show_message('formincomplete', 'warning'); |
| | | rcmail_overwrite_action(empty($_POST['_cid']) ? 'add' : 'show'); |
| | | return; |
| | | } |
| | | $CONTACTS = rcmail_contact_source(null, true, true); |
| | | $cid = get_input_value('_cid', RCUBE_INPUT_POST); |
| | | $return_action = empty($cid) ? 'add' : 'edit'; |
| | | |
| | | // setup some vars we need |
| | | $a_save_cols = array('name', 'firstname', 'surname', 'email'); |
| | | $contacts_table = get_table_name('contacts'); |
| | | // Source changed, display the form again |
| | | if (!empty($_GET['_reload'])) { |
| | | rcmail_overwrite_action($return_action); |
| | | return; |
| | | } |
| | | |
| | | // cannot edit record |
| | | if ($CONTACTS->readonly) { |
| | | $OUTPUT->show_message('contactreadonly', 'error'); |
| | | rcmail_overwrite_action($return_action); |
| | | return; |
| | | } |
| | | |
| | | // read POST values into hash array |
| | | $a_record = array(); |
| | | foreach ($GLOBALS['CONTACT_COLTYPES'] as $col => $colprop) { |
| | | $fname = '_'.$col; |
| | | if ($colprop['composite']) |
| | | continue; |
| | | // gather form data of composite fields |
| | | if ($colprop['childs']) { |
| | | $values = array(); |
| | | foreach ($colprop['childs'] as $childcol => $cp) { |
| | | $vals = get_input_value('_'.$childcol, RCUBE_INPUT_POST, true); |
| | | foreach ((array)$vals as $i => $val) |
| | | $values[$i][$childcol] = $val; |
| | | } |
| | | $subtypes = isset($_REQUEST['_subtype_' . $col]) ? (array)get_input_value('_subtype_' . $col, RCUBE_INPUT_POST) : array(''); |
| | | foreach ($subtypes as $i => $subtype) { |
| | | $suffix = $subtype ? ':'.$subtype : ''; |
| | | if ($values[$i]) |
| | | $a_record[$col.$suffix][] = $values[$i]; |
| | | } |
| | | } |
| | | // assign values and subtypes |
| | | else if (is_array($_POST[$fname])) { |
| | | $values = get_input_value($fname, RCUBE_INPUT_POST, true); |
| | | $subtypes = get_input_value('_subtype_' . $col, RCUBE_INPUT_POST); |
| | | foreach ($values as $i => $val) { |
| | | $subtype = $subtypes[$i] ? ':'.$subtypes[$i] : ''; |
| | | $a_record[$col.$subtype][] = $val; |
| | | } |
| | | } |
| | | else if (isset($_POST[$fname])) { |
| | | $a_record[$col] = get_input_value($fname, RCUBE_INPUT_POST, true); |
| | | } |
| | | } |
| | | |
| | | // Generate contact's display name (must be before validation) |
| | | if (empty($a_record['name'])) { |
| | | $a_record['name'] = rcube_addressbook::compose_display_name($a_record, true); |
| | | // Reset it if equals to email address (from compose_display_name()) |
| | | if ($a_record['name'] == $a_record['email'][0]) |
| | | $a_record['name'] = ''; |
| | | } |
| | | |
| | | // do input checks (delegated to $CONTACTS instance) |
| | | if (!$CONTACTS->validate($a_record)) { |
| | | $err = (array)$CONTACTS->get_error(); |
| | | $OUTPUT->show_message($err['message'] ? $err['message'] : 'formincomplete', 'warning'); |
| | | $GLOBALS['EDIT_RECORD'] = $a_record; // store submitted data to be used in edit form |
| | | rcmail_overwrite_action($return_action); |
| | | return; |
| | | } |
| | | |
| | | // get raw photo data if changed |
| | | if (isset($a_record['photo'])) { |
| | | if ($a_record['photo'] == '-del-') { |
| | | $a_record['photo'] = ''; |
| | | } |
| | | else if ($tempfile = $_SESSION['contacts']['files'][$a_record['photo']]) { |
| | | $tempfile = $RCMAIL->plugins->exec_hook('attachment_get', $tempfile); |
| | | if ($tempfile['status']) |
| | | $a_record['photo'] = $tempfile['data'] ? $tempfile['data'] : @file_get_contents($tempfile['path']); |
| | | } |
| | | else |
| | | unset($a_record['photo']); |
| | | |
| | | // cleanup session data |
| | | $RCMAIL->plugins->exec_hook('attachments_cleanup', array('group' => 'contact')); |
| | | $RCMAIL->session->remove('contacts'); |
| | | } |
| | | |
| | | $source = get_input_value('_source', RCUBE_INPUT_GPC); |
| | | |
| | | // update an existing contact |
| | | if (!empty($_POST['_cid'])) |
| | | { |
| | | $a_write_sql = array(); |
| | | if (!empty($cid)) |
| | | { |
| | | $plugin = $RCMAIL->plugins->exec_hook('contact_update', |
| | | array('id' => $cid, 'record' => $a_record, 'source' => $source)); |
| | | $a_record = $plugin['record']; |
| | | |
| | | foreach ($a_save_cols as $col) |
| | | { |
| | | $fname = '_'.$col; |
| | | if (!isset($_POST[$fname])) |
| | | continue; |
| | | |
| | | $a_write_sql[] = sprintf("%s=%s", |
| | | $DB->quoteIdentifier($col), |
| | | $DB->quote(get_input_value($fname, RCUBE_INPUT_POST))); |
| | | } |
| | | |
| | | if (sizeof($a_write_sql)) |
| | | { |
| | | $DB->query("UPDATE $contacts_table |
| | | SET changed=now(), ".join(', ', $a_write_sql)." |
| | | WHERE contact_id=? |
| | | AND user_id=? |
| | | AND del<>1", |
| | | $_POST['_cid'], |
| | | $_SESSION['user_id']); |
| | | |
| | | $updated = $DB->affected_rows(); |
| | | } |
| | | |
| | | if ($updated) |
| | | { |
| | | $_action = 'show'; |
| | | show_message('successfullysaved', 'confirmation'); |
| | | |
| | | if ($_framed) |
| | | { |
| | | // define list of cols to be displayed |
| | | $a_show_cols = array('name', 'email'); |
| | | $a_js_cols = array(); |
| | | |
| | | $sql_result = $DB->query("SELECT * FROM $contacts_table |
| | | WHERE contact_id=? |
| | | AND user_id=? |
| | | AND del<>1", |
| | | $_POST['_cid'], |
| | | $_SESSION['user_id']); |
| | | |
| | | $sql_arr = $DB->fetch_assoc($sql_result); |
| | | foreach ($a_show_cols as $col) |
| | | $a_js_cols[] = (string)$sql_arr[$col]; |
| | | |
| | | // update the changed col in list |
| | | $OUTPUT->add_script(sprintf("if(parent.%s)parent.%s.update_contact_row('%d', %s);", |
| | | $JS_OBJECT_NAME, |
| | | $JS_OBJECT_NAME, |
| | | $_POST['_cid'], |
| | | array2js($a_js_cols))); |
| | | |
| | | // show confirmation |
| | | show_message('successfullysaved', 'confirmation'); |
| | | } |
| | | } |
| | | if (!$plugin['abort']) |
| | | $result = $CONTACTS->update($cid, $a_record); |
| | | else |
| | | { |
| | | // show error message |
| | | show_message('errorsaving', 'error'); |
| | | rcmail_overwrite_action('show'); |
| | | } |
| | | } |
| | | $result = $plugin['result']; |
| | | |
| | | // insert a new contact |
| | | else |
| | | { |
| | | $a_insert_cols = $a_insert_values = array(); |
| | | |
| | | // check for existing contacts |
| | | $sql = "SELECT 1 FROM $contacts_table |
| | | WHERE user_id = {$_SESSION['user_id']} |
| | | AND del <> '1' "; |
| | | |
| | | // get email and name, build sql for existing user check |
| | | if (isset($_GET['_emails']) && isset($_GET['_names'])) |
| | | { |
| | | $sql .= "AND email IN ("; |
| | | $emails = explode(',', get_input_value('_emails', RCUBE_INPUT_GET)); |
| | | $names = explode(',', get_input_value('_names', RCUBE_INPUT_GET)); |
| | | $count = count($emails); |
| | | $n = 0; |
| | | foreach ($emails as $email) |
| | | { |
| | | $end = (++$n == $count) ? '' : ','; |
| | | $sql .= $DB->quote($email) . $end; |
| | | } |
| | | $sql .= ")"; |
| | | $ldap_form = true; |
| | | } |
| | | else if (isset($_POST['_email'])) |
| | | $sql .= "AND email = " . $DB->quote(get_input_value('_email', RCUBE_INPUT_POST)); |
| | | |
| | | $sql_result = $DB->query($sql); |
| | | |
| | | // show warning message |
| | | if ($DB->num_rows($sql_result)) |
| | | { |
| | | show_message('contactexists', 'warning'); |
| | | |
| | | if ($ldap_form) |
| | | rcmail_overwrite_action('ldappublicsearch'); |
| | | else |
| | | rcmail_overwrite_action('add'); |
| | | |
| | | return; |
| | | if ($result) { |
| | | // LDAP DN change |
| | | if (is_string($result) && strlen($result)>1) { |
| | | $newcid = $result; |
| | | // change cid in POST for 'show' action |
| | | $_POST['_cid'] = $newcid; |
| | | } |
| | | |
| | | if ($ldap_form) |
| | | { |
| | | $n = 0; |
| | | foreach ($emails as $email) |
| | | { |
| | | $DB->query("INSERT INTO $contacts_table |
| | | (user_id, name, email |
| | | VALUES ({$_SESSION['user_id']}," . $DB->quote($names[$n++]) . "," . |
| | | $DB->quote($email) . ")"); |
| | | $insert_id[] = $DB->insert_id(); |
| | | } |
| | | } |
| | | else |
| | | { |
| | | foreach ($a_save_cols as $col) |
| | | { |
| | | $fname = '_'.$col; |
| | | if (!isset($_POST[$fname])) |
| | | continue; |
| | | |
| | | $a_insert_cols[] = $col; |
| | | $a_insert_values[] = $DB->quote(get_input_value($fname, RCUBE_INPUT_POST)); |
| | | } |
| | | |
| | | if (sizeof($a_insert_cols)) |
| | | { |
| | | $DB->query("INSERT INTO $contacts_table |
| | | (user_id, changed, del, ".join(', ', $a_insert_cols).") |
| | | VALUES (?, now(), 0, ".join(', ', $a_insert_values).")", |
| | | $_SESSION['user_id']); |
| | | |
| | | $insert_id = $DB->insert_id(get_sequence_name('contacts')); |
| | | } |
| | | } |
| | | |
| | | if ($insert_id) |
| | | { |
| | | if (!$ldap_form) |
| | | { |
| | | $_action = 'show'; |
| | | $_GET['_cid'] = $insert_id; |
| | | // define list of cols to be displayed |
| | | $a_js_cols = array(); |
| | | $record = $CONTACTS->get_record($newcid ? $newcid : $cid, true); |
| | | $record['email'] = reset($CONTACTS->get_col_values('email', $record, true)); |
| | | $record['name'] = rcube_addressbook::compose_list_name($record); |
| | | |
| | | if ($_framed) |
| | | { |
| | | // add contact row or jump to the page where it should appear |
| | | $commands = sprintf("if(parent.%s)parent.", $JS_OBJECT_NAME); |
| | | $sql_result = $DB->query("SELECT * FROM $contacts_table |
| | | WHERE contact_id=? |
| | | AND user_id=?", |
| | | $insert_id, |
| | | $_SESSION['user_id']); |
| | | $commands .= rcmail_js_contacts_list($sql_result, $JS_OBJECT_NAME); |
| | | foreach (array('name', 'email') as $col) |
| | | $a_js_cols[] = Q((string)$record[$col]); |
| | | |
| | | $commands .= sprintf("if(parent.%s)parent.%s.select('%d');\n", |
| | | $JS_OBJECT_NAME, |
| | | $JS_OBJECT_NAME, |
| | | $insert_id); |
| | | |
| | | // update record count display |
| | | $commands .= sprintf("if(parent.%s)parent.%s.set_rowcount('%s');\n", |
| | | $JS_OBJECT_NAME, |
| | | $JS_OBJECT_NAME, |
| | | rcmail_get_rowcount_text()); |
| | | |
| | | $OUTPUT->add_script($commands); |
| | | } |
| | | |
| | | // show confirmation |
| | | show_message('successfullysaved', 'confirmation'); |
| | | } |
| | | else |
| | | { |
| | | // add contact row or jump to the page where it should appear |
| | | $commands = ''; |
| | | foreach ($insert_id as $id) |
| | | { |
| | | $sql_result = $DB->query("SELECT * FROM $contacts_table |
| | | WHERE contact_id = $id |
| | | AND user_id = {$_SESSION['user_id']}"); |
| | | |
| | | $commands .= sprintf("if(parent.%s)parent.", $JS_OBJECT_NAME); |
| | | $commands .= rcmail_js_contacts_list($sql_result, $JS_OBJECT_NAME); |
| | | $last_id = $id; |
| | | } |
| | | |
| | | // display the last insert id |
| | | $commands .= sprintf("if(parent.%s)parent.%s.select('%d');\n", |
| | | $JS_OBJECT_NAME, |
| | | $JS_OBJECT_NAME, |
| | | $last_id); |
| | | |
| | | // update record count display |
| | | $commands .= sprintf("if(parent.%s)parent.%s.set_rowcount('%s');\n", |
| | | $JS_OBJECT_NAME, |
| | | $JS_OBJECT_NAME, |
| | | rcmail_get_rowcount_text()); |
| | | |
| | | $OUTPUT->add_script($commands); |
| | | rcmail_overwrite_action('ldappublicsearch'); |
| | | } |
| | | // update the changed col in list |
| | | $OUTPUT->command('parent.update_contact_row', $cid, $a_js_cols, $newcid, $source); |
| | | |
| | | // show confirmation |
| | | show_message('successfullysaved', 'confirmation'); |
| | | } |
| | | else |
| | | { |
| | | $OUTPUT->show_message('successfullysaved', 'confirmation', null, false); |
| | | rcmail_overwrite_action('show'); |
| | | } |
| | | else { |
| | | // show error message |
| | | show_message('errorsaving', 'error'); |
| | | rcmail_overwrite_action('add'); |
| | | } |
| | | $err = $CONTACTS->get_error(); |
| | | $OUTPUT->show_message($plugin['message'] ? $plugin['message'] : ($err['message'] ? $err['message'] : 'errorsaving'), 'error', null, false); |
| | | rcmail_overwrite_action('show'); |
| | | } |
| | | } |
| | | |
| | | // insert a new contact |
| | | else { |
| | | // Name of the addressbook already selected on the list |
| | | $orig_source = get_input_value('_orig_source', RCUBE_INPUT_GPC); |
| | | |
| | | if (!strlen($source)) |
| | | $source = $orig_source; |
| | | |
| | | // show notice if existing contacts with same e-mail are found |
| | | $existing = false; |
| | | foreach ($CONTACTS->get_col_values('email', $a_record, true) as $email) { |
| | | if ($email && ($res = $CONTACTS->search('email', $email, 1, false, true)) && $res->count) { |
| | | $OUTPUT->show_message('contactexists', 'notice', null, false); |
| | | break; |
| | | } |
| | | } |
| | | |
| | | ?> |
| | | $plugin = $RCMAIL->plugins->exec_hook('contact_create', array( |
| | | 'record' => $a_record, 'source' => $source)); |
| | | $a_record = $plugin['record']; |
| | | |
| | | // insert record and send response |
| | | if (!$plugin['abort']) |
| | | $insert_id = $CONTACTS->insert($a_record); |
| | | else |
| | | $insert_id = $plugin['result']; |
| | | |
| | | if ($insert_id) { |
| | | $CONTACTS->reset(); |
| | | |
| | | // add new contact to the specified group |
| | | if ($CONTACTS->groups && $CONTACTS->group_id) { |
| | | $plugin = $RCMAIL->plugins->exec_hook('group_addmembers', array( |
| | | 'group_id' => $CONTACTS->group_id, 'ids' => $insert_id, 'source' => $source)); |
| | | |
| | | $counts = $CONTACTS->count(); |
| | | |
| | | if (!$plugin['abort']) { |
| | | if (($maxnum = $RCMAIL->config->get('max_group_members', 0)) && ($counts->count + 1 > $maxnum)) |
| | | $OUTPUT->show_message('maxgroupmembersreached', 'warning', array('max' => $maxnum)); |
| | | |
| | | $CONTACTS->add_to_group($gid, $plugin['ids']); |
| | | } |
| | | } |
| | | else |
| | | $counts = $CONTACTS->count(); |
| | | |
| | | if ((string)$source === (string)$orig_source) { |
| | | // add contact row or jump to the page where it should appear |
| | | $CONTACTS->reset(); |
| | | $result = $CONTACTS->search($CONTACTS->primary_key, $insert_id); |
| | | |
| | | rcmail_js_contacts_list($result, 'parent.'); |
| | | $OUTPUT->command('parent.contact_list.select', html_identifier($insert_id)); |
| | | |
| | | // update record count display |
| | | $CONTACTS->reset(); |
| | | $OUTPUT->command('parent.set_rowcount', rcmail_get_rowcount_text($counts)); |
| | | } |
| | | else { |
| | | // re-set iframe |
| | | $OUTPUT->command('parent.show_contentframe'); |
| | | } |
| | | |
| | | // show confirmation |
| | | $OUTPUT->show_message('successfullysaved', 'confirmation', null, false); |
| | | $OUTPUT->send('iframe'); |
| | | } |
| | | else { |
| | | // show error message |
| | | $err = $CONTACTS->get_error(); |
| | | $OUTPUT->show_message($plugin['message'] ? $plugin['message'] : ($err['message'] ? $err['message'] : 'errorsaving'), 'error', null, false); |
| | | rcmail_overwrite_action('add'); |
| | | } |
| | | } |