statuscode.php — VikAppointments Services Booking Calendar trunk

vikappointments / admin / controllers / statuscode.php

vikappointments / admin / controllers Last commit date

statuscode.php

304 lines

1	<?php
2	/**
3	* @package VikAppointments
4	* @subpackage core
5	* @author E4J s.r.l.
6	* @copyright Copyright (C) 2021 E4J s.r.l. All Rights Reserved.
7	* @license http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
8	* @link https://vikwp.com
9	*/
10
11	// No direct access
12	defined('ABSPATH') or die('No script kiddies please!');
13
14	VAPLoader::import('libraries.mvc.controllers.admin');
15
16	/**
17	* VikAppointments status code controller.
18	*
19	* @since 1.7
20	*/
21	class VikAppointmentsControllerStatuscode extends VAPControllerAdmin
22	{
23	/**
24	* Task used to access the creation page of a new record.
25	*
26	* @return boolean
27	*/
28	public function add()
29	{
30	$app = JFactory::getApplication();
31	$user = JFactory::getUser();
32
33	// unset user state for being recovered again
34	$app->setUserState('vap.statuscode.data', array());
35
36	// check user permissions
37	if (!$user->authorise('core.create', 'com_vikappointments') \|\| !$user->authorise('core.access.statuscodes', 'com_vikappointments'))
38	{
39	// back to main list, not authorised to create records
40	$app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error');
41	$this->cancel();
42
43	return false;
44	}
45
46	$this->setRedirect('index.php?option=com_vikappointments&view=managestatuscode');
47
48	return true;
49	}
50
51	/**
52	* Task used to access the management page of an existing record.
53	*
54	* @return boolean
55	*/
56	public function edit()
57	{
58	$app = JFactory::getApplication();
59	$user = JFactory::getUser();
60
61	// unset user state for being recovered again
62	$app->setUserState('vap.statuscode.data', array());
63
64	// check user permissions
65	if (!$user->authorise('core.edit', 'com_vikappointments') \|\| !$user->authorise('core.access.statuscodes', 'com_vikappointments'))
66	{
67	// back to main list, not authorised to edit records
68	$app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error');
69	$this->cancel();
70
71	return false;
72	}
73
74	$cid = $app->input->getUint('cid', array(0));
75
76	$this->setRedirect('index.php?option=com_vikappointments&view=managestatuscode&cid[]=' . $cid[0]);
77
78	return true;
79	}
80
81	/**
82	* Task used to save the record data set in the request.
83	* After saving, the user is redirected to the main list.
84	*
85	* @return void
86	*/
87	public function saveclose()
88	{
89	if ($this->save())
90	{
91	$this->cancel();
92	}
93	}
94
95	/**
96	* Task used to save the record data set in the request.
97	* After saving, the user is redirected to the creation
98	* page of a new record.
99	*
100	* @return void
101	*/
102	public function savenew()
103	{
104	if ($this->save())
105	{
106	$this->setRedirect('index.php?option=com_vikappointments&task=statuscode.add');
107	}
108	}
109
110	/**
111	* Task used to save the record data set in the request.
112	* After saving, the user is redirected to the management
113	* page of the record that has been saved.
114	*
115	* @return boolean
116	*/
117	public function save()
118	{
119	$app = JFactory::getApplication();
120	$input = $app->input;
121	$user = JFactory::getUser();
122
123	/**
124	* Added token validation.
125	*
126	* @since 1.7
127	*/
128	if (!JSession::checkToken())
129	{
130	// back to main list, missing CSRF-proof token
131	$app->enqueueMessage(JText::translate('JINVALID_TOKEN'), 'error');
132	$this->cancel();
133
134	return false;
135	}
136
137	$args = array();
138	$args['name'] = $input->getString('name', '');
139	$args['description'] = JComponentHelper::filterText($input->getRaw('description', ''));
140	$args['code'] = $input->getString('code', '');
141	$args['color'] = $input->getString('color', '');
142	$args['appointments'] = $input->getUint('appointments', 0);
143	$args['packages'] = $input->getUint('packages', 0);
144	$args['subscriptions'] = $input->getUint('subscriptions', 0);
145	$args['approved'] = $input->getUint('approved', 0);
146	$args['reserved'] = $input->getUint('reserved', 0);
147	$args['expired'] = $input->getUint('expired', 0);
148	$args['cancelled'] = $input->getUint('cancelled', 0);
149	$args['paid'] = $input->getUint('paid', 0);
150	$args['id'] = $input->getUint('id', 0);
151
152	$rule = 'core.' . ($args['id'] > 0 ? 'edit' : 'create');
153
154	// check user permissions
155	if (!$user->authorise($rule, 'com_vikappointments') \|\| !$user->authorise('core.access.statuscodes', 'com_vikappointments'))
156	{
157	// back to main list, not authorised to create/edit records
158	$app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error');
159	$this->cancel();
160
161	return false;
162	}
163
164	// get status code model
165	$code = $this->getModel();
166
167	// try to save arguments
168	$id = $code->save($args);
169
170	if (!$id)
171	{
172	// get string error
173	$error = $code->getError(null, true);
174
175	// display error message
176	$app->enqueueMessage(JText::sprintf('JLIB_APPLICATION_ERROR_SAVE_FAILED', $error), 'error');
177
178	$url = 'index.php?option=com_vikappointments&view=managestatuscode';
179
180	if ($args['id'])
181	{
182	$url .= '&cid[]=' . $args['id'];
183	}
184
185	// redirect to new/edit page
186	$this->setRedirect($url);
187
188	return false;
189	}
190
191	// display generic successful message
192	$app->enqueueMessage(JText::translate('JLIB_APPLICATION_SAVE_SUCCESS'));
193
194	// redirect to edit page
195	$this->setRedirect('index.php?option=com_vikappointments&task=statuscode.edit&cid[]=' . $id);
196
197	return true;
198	}
199
200	/**
201	* Deletes a list of records set in the request.
202	*
203	* @return boolean
204	*/
205	public function delete()
206	{
207	$app = JFactory::getApplication();
208	$user = JFactory::getUser();
209
210	/**
211	* Added token validation.
212	* Both GET and POST are supported.
213	*
214	* @since 1.7
215	*/
216	if (!JSession::checkToken() && !JSession::checkToken('get'))
217	{
218	// back to main list, missing CSRF-proof token
219	$app->enqueueMessage(JText::translate('JINVALID_TOKEN'), 'error');
220	$this->cancel();
221
222	return false;
223	}
224
225	$cid = $app->input->get('cid', array(), 'uint');
226
227	// check user permissions
228	if (!$user->authorise('core.delete', 'com_vikappointments') \|\| !$user->authorise('core.access.statuscodes', 'com_vikappointments'))
229	{
230	// back to main list, not authorised to delete records
231	$app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error');
232	$this->cancel();
233
234	return false;
235	}
236
237	// delete selected records
238	$this->getModel()->delete($cid);
239
240	// back to main list
241	$this->cancel();
242
243	return true;
244	}
245
246	/**
247	* Restores the status codes to the factory settings.
248	*
249	* @return void
250	*
251	* @since 1.7.1
252	*/
253	public function restore()
254	{
255	$app = JFactory::getApplication();
256	$user = JFactory::getUser();
257
258	/**
259	* Added token validation.
260	* Both GET and POST are supported.
261	*
262	* @since 1.7
263	*/
264	if (!JSession::checkToken() && !JSession::checkToken('get'))
265	{
266	// back to main list, missing CSRF-proof token
267	$app->enqueueMessage(JText::translate('JINVALID_TOKEN'), 'error');
268	$this->cancel();
269
270	return false;
271	}
272
273	$cid = $app->input->get('cid', array(), 'uint');
274
275	// check user permissions
276	if (!$user->authorise('core.admin', 'com_vikappointments'))
277	{
278	// back to main list, not authorised to restore the status codes
279	$app->enqueueMessage(JText::translate('JERROR_ALERTNOAUTHOR'), 'error');
280	$this->cancel();
281
282	return false;
283	}
284
285	// reset the status codes
286	$this->getModel()->restore();
287
288	// back to main list
289	$this->cancel();
290
291	return true;
292	}
293
294	/**
295	* Redirects the users to the main records list.
296	*
297	* @return void
298	*/
299	public function cancel()
300	{
301	$this->setRedirect('index.php?option=com_vikappointments&view=statuscodes');
302	}
303	}
304