analytics.php
5 months ago
apiban.php
5 months ago
apilog.php
5 months ago
apiplugin.php
5 months ago
apiuser.php
5 months ago
backup.php
5 months ago
calendar.php
5 months ago
city.php
5 months ago
closure.php
5 months ago
configapp.php
5 months ago
configcldays.php
5 months ago
configcron.php
5 months ago
configemp.php
5 months ago
configsmsapi.php
5 months ago
configuration.php
5 months ago
conversion.php
5 months ago
country.php
5 months ago
coupon.php
5 months ago
coupongroup.php
5 months ago
cronjob.php
5 months ago
cronjoblog.php
5 months ago
customer.php
5 months ago
customf.php
5 months ago
dashboard.php
5 months ago
emplocwdays.php
5 months ago
employee.php
5 months ago
emprates.php
5 months ago
export.php
5 months ago
exportres.php
5 months ago
file.php
5 months ago
findreservation.php
5 months ago
group.php
5 months ago
import.php
5 months ago
index.html
5 months ago
invoice.php
5 months ago
langcustomf.php
5 months ago
langemployee.php
5 months ago
langgroup.php
5 months ago
langmedia.php
5 months ago
langoption.php
5 months ago
langoptiongroup.php
5 months ago
langpackage.php
5 months ago
langpackgroup.php
5 months ago
langpayment.php
5 months ago
langservice.php
5 months ago
langstatuscode.php
5 months ago
langsubscr.php
5 months ago
langtax.php
5 months ago
location.php
5 months ago
mailtext.php
5 months ago
makerecurrence.php
5 months ago
media.php
5 months ago
multiorder.php
5 months ago
option.php
5 months ago
optiongroup.php
5 months ago
package.php
5 months ago
packgroup.php
5 months ago
packorder.php
5 months ago
payment.php
5 months ago
rate.php
5 months ago
reportsemp.php
5 months ago
reportsser.php
5 months ago
reservation.php
5 months ago
restriction.php
5 months ago
review.php
5 months ago
service.php
5 months ago
serworkday.php
5 months ago
state.php
5 months ago
statuscode.php
5 months ago
subscription.php
5 months ago
subscrorder.php
5 months ago
tag.php
5 months ago
tax.php
5 months ago
usernote.php
5 months ago
waitinglist.php
5 months ago
webhook.php
5 months ago
wizard.php
5 months ago
emprates.php
119 lines
| 1 | <?php |
| 2 | /** |
| 3 | * @package VikAppointments |
| 4 | * @subpackage core |
| 5 | * @author E4J s.r.l. |
| 6 | * @copyright Copyright (C) 2021 E4J s.r.l. All Rights Reserved. |
| 7 | * @license http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL |
| 8 | * @link https://vikwp.com |
| 9 | */ |
| 10 | |
| 11 | // No direct access |
| 12 | defined('ABSPATH') or die('No script kiddies please!'); |
| 13 | |
| 14 | VAPLoader::import('libraries.mvc.controllers.admin'); |
| 15 | |
| 16 | /** |
| 17 | * VikAppointments employee rates (services) controller. |
| 18 | * |
| 19 | * @since 1.7 |
| 20 | */ |
| 21 | class VikAppointmentsControllerEmprates extends VAPControllerAdmin |
| 22 | { |
| 23 | /** |
| 24 | * Task used to save the record data set in the request. |
| 25 | * After saving, the user is redirected to the main list. |
| 26 | * |
| 27 | * @return void |
| 28 | */ |
| 29 | public function saveclose() |
| 30 | { |
| 31 | if ($this->save()) |
| 32 | { |
| 33 | $this->cancel(); |
| 34 | } |
| 35 | } |
| 36 | |
| 37 | /** |
| 38 | * Task used to save the record data set in the request. |
| 39 | * After saving, the user is redirected to the management |
| 40 | * page of the record that has been saved. |
| 41 | * |
| 42 | * @return boolean |
| 43 | */ |
| 44 | public function save() |
| 45 | { |
| 46 | $app = JFactory::getApplication(); |
| 47 | $input = $app->input; |
| 48 | $user = JFactory::getUser(); |
| 49 | |
| 50 | /** |
| 51 | * Added token validation. |
| 52 | * |
| 53 | * @since 1.7 |
| 54 | */ |
| 55 | if (!JSession::checkToken()) |
| 56 | { |
| 57 | // back to main list, missing CSRF-proof token |
| 58 | $app->enqueueMessage(JText::translate('JINVALID_TOKEN'), 'error'); |
| 59 | $this->cancel(); |
| 60 | |
| 61 | return false; |
| 62 | } |
| 63 | |
| 64 | $id_employee = $input->get('id', 0, 'uint'); |
| 65 | |
| 66 | // check user permissions |
| 67 | if (!$user->authorise('core.edit', 'com_vikappointments') || !$user->authorise('core.access.services', 'com_vikappointments') || !$id_employee) |
| 68 | { |
| 69 | // back to main list, not authorised to create/edit records |
| 70 | $app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error'); |
| 71 | $this->cancel(); |
| 72 | |
| 73 | return false; |
| 74 | } |
| 75 | |
| 76 | // get service-employee relation model |
| 77 | $model = $this->getModel('serempassoc'); |
| 78 | |
| 79 | // load deleted services |
| 80 | $ser_deleted = $input->get('service_deleted', array(), 'uint'); |
| 81 | |
| 82 | // delete services before save the other ones |
| 83 | $model->delete($ser_deleted); |
| 84 | |
| 85 | // load service details |
| 86 | $ser_json = $input->get('service_json', array(), 'array'); |
| 87 | |
| 88 | foreach ($ser_json as $i => $json) |
| 89 | { |
| 90 | // decode the service data |
| 91 | $src = json_decode($json, true); |
| 92 | |
| 93 | // always specify the employee ID |
| 94 | $src['id_employee'] = $id_employee; |
| 95 | |
| 96 | // attempt to save the employee |
| 97 | $model->save($src); |
| 98 | } |
| 99 | |
| 100 | // display generic successful message |
| 101 | $app->enqueueMessage(JText::translate('JLIB_APPLICATION_SAVE_SUCCESS')); |
| 102 | |
| 103 | // redirect to edit page |
| 104 | $this->setRedirect('index.php?option=com_vikappointments&view=emprates&cid[]=' . $id_employee); |
| 105 | |
| 106 | return true; |
| 107 | } |
| 108 | |
| 109 | /** |
| 110 | * Redirects the users to the main records list. |
| 111 | * |
| 112 | * @return void |
| 113 | */ |
| 114 | public function cancel() |
| 115 | { |
| 116 | $this->setRedirect('index.php?option=com_vikappointments&view=employees'); |
| 117 | } |
| 118 | } |
| 119 |