ftimme
2013-02-27 f4038a2160d55a7f519a3b42be1aa96e29e9a908
interface/lib/classes/tform_actions.inc.php
@@ -49,7 +49,7 @@
                $app->tform->loadFormDef($tform_def_file);
            
            // Importing ID
                $this->id = (isset($_REQUEST["id"]))?intval($_REQUEST["id"]):0;
                $this->id = (isset($_REQUEST["id"]))?$app->functions->intval($_REQUEST["id"]):0;
            
            // show print version of the form
            if(isset($_GET["print_form"]) && $_GET["print_form"] == 1) {
@@ -107,17 +107,19 @@
                  
                  // Save record in database
                  $this->onUpdateSave($sql);
                  $app->plugin->raiseEvent($_SESSION['s']['module']['name'].':'.$app->tform->formDef['name'].':'.'on_update_save',array('page_form'=>$this, 'sql'=>$sql));
                  // loading plugins
                  $next_tab = $app->tform->getCurrentTab();
                      $this->loadPlugins($next_tab);
                        // Call plugin
                        foreach($this->plugins as $plugin) {
                                $plugin->onInsert();
                                $plugin->onUpdate();
                        }
                  
                  $this->onAfterUpdate();
                  $app->plugin->raiseEvent($_SESSION['s']['module']['name'].':'.$app->tform->formDef['name'].':'.'on_after_update',$this);
                  
                  // Write data history (sys_datalog)
                  if($app->tform->formDef['db_history'] == 'yes') {
@@ -138,7 +140,7 @@
                                session_write_close();
                                header($redirect);
                     // When a returnto variable is set
                     } elseif ($_SESSION["s"]["form"]["return_to_url"] != '') {
                     } elseif (isset($_SESSION["s"]["form"]["return_to_url"]) && $_SESSION["s"]["form"]["return_to_url"] != '') {
                        $redirect = $_SESSION["s"]["form"]["return_to_url"];
                        $_SESSION["s"]["form"]["return_to_url"] = '';
                        session_write_close();
@@ -184,7 +186,8 @@
                if($app->tform->errorMessage == '') {
                  
                  $this->id = $this->onInsertSave($sql);
                  $app->plugin->raiseEvent($_SESSION['s']['module']['name'].':'.$app->tform->formDef['name'].':'.'on_insert_save',array('page_form'=>$this, 'sql'=>$sql));
                  // loading plugins
                  $next_tab = $app->tform->getCurrentTab();
                      $this->loadPlugins($next_tab);
@@ -195,7 +198,8 @@
                        }
                        $this->onAfterInsert();
                  $app->plugin->raiseEvent($_SESSION['s']['module']['name'].':'.$app->tform->formDef['name'].':'.'on_after_insert',$this);
                  // Write data history (sys_datalog)
                  if($app->tform->formDef['db_history'] == 'yes') {
                     $new_data_record = $app->tform->getDataRecord($this->id);
@@ -214,9 +218,10 @@
                            header($redirect);
                     exit;
                        } elseif ($_SESSION["s"]["form"]["return_to_url"] != '') {
                     $redirect = $_SESSION["s"]["form"]["return_to_url"];
                     $_SESSION["s"]["form"]["return_to_url"] = '';
                     session_write_close();
                     header("Location: ".$_SESSION["s"]["form"]["return_to_url"]);
                     header("Location: ".$redirect);
                     exit;
                  } else {
                                header("Location: ".$app->tform->formDef['list_default']);
@@ -286,7 +291,7 @@
                $app->tform->loadFormDef($tform_def_file);
                // importing ID
                $this->id = intval($_REQUEST["id"]);
                $this->id = $app->functions->intval($_REQUEST["id"]);
                if($this->id > 0) {
@@ -313,13 +318,14 @@
                  $next_tab = $app->tform->getCurrentTab();
                      $this->loadPlugins($next_tab);
                  
                        // Call plugin
                        foreach($this->plugins as $plugin) {
                                $plugin->onDelete();
                        }
                  
                  $this->onAfterDelete();
                  $app->plugin->raiseEvent($_SESSION['s']['module']['name'].':'.$app->tform->formDef['name'].':'.'on_after_delete',$this);
                }
                      //header("Location: ".$liste["file"]."?PHPSESSID=".$_SESSION["s"]["id"]);
@@ -359,7 +365,7 @@
         if($app->tform->formDef['auth'] == 'no') {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
            } else {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
            }
            if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -400,7 +406,7 @@
            if($app->tform->formDef['auth'] == 'no') {
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
               } else {
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
               }
               if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -436,7 +442,7 @@
         if($app->tform->formDef['auth'] == 'no') {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
            } else {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
            }
            if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -480,11 +486,19 @@
                  $navibar .= '<a href="'.$app->tform->formDef['action'].'?id='.$this->id.'&print_form=1" target="_blank"><img src="../themes/iprg/icons/printer.png" border="0" alt="Drucken" /></a> &nbsp;';
               }
               if($app->tform->formDef['template_mailsend'] != '') {
                  $navibar .= "<a href=\"#\" onClick=\"window.open('".$app->tform->formDef['action'].'?id='.$this->id."&send_form_by_mail=1','send','width=370,height=240')\"><img src=\"../themes/iprg/icons/mail.png\" border=\"0\" alt=\"Als E-Mail versenden\" /></a>";
                  $navibar .= "<a href=\"#\" onclick=\"window.open('".$app->tform->formDef['action'].'?id='.$this->id."&send_form_by_mail=1','send','width=370,height=240')\"><img src=\"../themes/iprg/icons/mail.png\" border=\"0\" alt=\"Als E-Mail versenden\" /></a>";
               }
               $app->tpl->setVar('form_navibar',$navibar);
            }
            
                if(isset($_SESSION['show_info_msg'])) {
                    $app->tpl->setVar('show_info_msg', $_SESSION['show_info_msg']);
                    unset($_SESSION['show_info_msg']);
                }
                if(isset($_SESSION['show_error_msg'])) {
                    $app->tpl->setVar('show_error_msg', $_SESSION['show_error_msg']);
                    unset($_SESSION['show_error_msg']);
                }
            
            // loading plugins
                $this->loadPlugins($this->active_tab);
@@ -527,14 +541,14 @@
                // bestehenden Datensatz anzeigen
                if($app->tform->errorMessage == '') {
                        if($app->tform->formDef['auth'] == 'yes' && $_SESSION["s"]["user"]["typ"] != 'admin') {
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
                        } else {
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
                        }
                        if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
                } else {
                        // $record = $app->tform->encode($_POST,$this->active_tab);
                  $record = $app->tform->encode($this->dataRecord,$this->active_tab);
                  $record = $app->tform->encode($this->dataRecord,$this->active_tab,false);
                }
                $this->dataRecord = $record;