1<?php 2/* Copyright (C) 2007-2017 Laurent Destailleur <eldy@users.sourceforge.net> 3 * Copyright (C) ---Put here your own copyright and developer email--- 4 * 5 * This program is free software; you can redistribute it and/or modify 6 * it under the terms of the GNU General Public License as published by 7 * the Free Software Foundation; either version 3 of the License, or 8 * (at your option) any later version. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program. If not, see <https://www.gnu.org/licenses/>. 17 */ 18 19/** 20 * \file htdocs/modulebuilder/template/myobject_document.php 21 * \ingroup mymodule 22 * \brief Tab for documents linked to MyObject 23 */ 24 25//if (! defined('NOREQUIREDB')) define('NOREQUIREDB', '1'); // Do not create database handler $db 26//if (! defined('NOREQUIREUSER')) define('NOREQUIREUSER', '1'); // Do not load object $user 27//if (! defined('NOREQUIRESOC')) define('NOREQUIRESOC', '1'); // Do not load object $mysoc 28//if (! defined('NOREQUIRETRAN')) define('NOREQUIRETRAN', '1'); // Do not load object $langs 29//if (! defined('NOSCANGETFORINJECTION')) define('NOSCANGETFORINJECTION', '1'); // Do not check injection attack on GET parameters 30//if (! defined('NOSCANPOSTFORINJECTION')) define('NOSCANPOSTFORINJECTION', '1'); // Do not check injection attack on POST parameters 31//if (! defined('NOCSRFCHECK')) define('NOCSRFCHECK', '1'); // Do not check CSRF attack (test on referer + on token if option MAIN_SECURITY_CSRF_WITH_TOKEN is on). 32//if (! defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL', '1'); // Do not roll the Anti CSRF token (used if MAIN_SECURITY_CSRF_WITH_TOKEN is on) 33//if (! defined('NOSTYLECHECK')) define('NOSTYLECHECK', '1'); // Do not check style html tag into posted data 34//if (! defined('NOREQUIREMENU')) define('NOREQUIREMENU', '1'); // If there is no need to load and show top and left menu 35//if (! defined('NOREQUIREHTML')) define('NOREQUIREHTML', '1'); // If we don't need to load the html.form.class.php 36//if (! defined('NOREQUIREAJAX')) define('NOREQUIREAJAX', '1'); // Do not load ajax.lib.php library 37//if (! defined("NOLOGIN")) define("NOLOGIN", '1'); // If this page is public (can be called outside logged session). This include the NOIPCHECK too. 38//if (! defined('NOIPCHECK')) define('NOIPCHECK', '1'); // Do not check IP defined into conf $dolibarr_main_restrict_ip 39//if (! defined("MAIN_LANG_DEFAULT")) define('MAIN_LANG_DEFAULT', 'auto'); // Force lang to a particular value 40//if (! defined("MAIN_AUTHENTICATION_MODE")) define('MAIN_AUTHENTICATION_MODE', 'aloginmodule'); // Force authentication handler 41//if (! defined("NOREDIRECTBYMAINTOLOGIN")) define('NOREDIRECTBYMAINTOLOGIN', 1); // The main.inc.php does not make a redirect if not logged, instead show simple error message 42//if (! defined("FORCECSP")) define('FORCECSP', 'none'); // Disable all Content Security Policies 43//if (! defined('CSRFCHECK_WITH_TOKEN')) define('CSRFCHECK_WITH_TOKEN', '1'); // Force use of CSRF protection with tokens even for GET 44//if (! defined('NOBROWSERNOTIF')) define('NOBROWSERNOTIF', '1'); // Disable browser notification 45 46// Load Dolibarr environment 47$res = 0; 48// Try main.inc.php into web root known defined into CONTEXT_DOCUMENT_ROOT (not always defined) 49if (!$res && !empty($_SERVER["CONTEXT_DOCUMENT_ROOT"])) { 50 $res = @include $_SERVER["CONTEXT_DOCUMENT_ROOT"]."/main.inc.php"; 51} 52// Try main.inc.php into web root detected using web root calculated from SCRIPT_FILENAME 53$tmp = empty($_SERVER['SCRIPT_FILENAME']) ? '' : $_SERVER['SCRIPT_FILENAME']; $tmp2 = realpath(__FILE__); $i = strlen($tmp) - 1; $j = strlen($tmp2) - 1; 54while ($i > 0 && $j > 0 && isset($tmp[$i]) && isset($tmp2[$j]) && $tmp[$i] == $tmp2[$j]) { 55 $i--; $j--; 56} 57if (!$res && $i > 0 && file_exists(substr($tmp, 0, ($i + 1))."/main.inc.php")) { 58 $res = @include substr($tmp, 0, ($i + 1))."/main.inc.php"; 59} 60if (!$res && $i > 0 && file_exists(dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php")) { 61 $res = @include dirname(substr($tmp, 0, ($i + 1)))."/main.inc.php"; 62} 63// Try main.inc.php using relative path 64if (!$res && file_exists("../main.inc.php")) { 65 $res = @include "../main.inc.php"; 66} 67if (!$res && file_exists("../../main.inc.php")) { 68 $res = @include "../../main.inc.php"; 69} 70if (!$res && file_exists("../../../main.inc.php")) { 71 $res = @include "../../../main.inc.php"; 72} 73if (!$res) { 74 die("Include of main fails"); 75} 76 77require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php'; 78require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php'; 79require_once DOL_DOCUMENT_ROOT.'/core/lib/images.lib.php'; 80require_once DOL_DOCUMENT_ROOT.'/core/class/html.formfile.class.php'; 81dol_include_once('/mymodule/class/myobject.class.php'); 82dol_include_once('/mymodule/lib/mymodule_myobject.lib.php'); 83 84// Load translation files required by the page 85$langs->loadLangs(array("mymodule@mymodule", "companies", "other", "mails")); 86 87 88$action = GETPOST('action', 'aZ09'); 89$confirm = GETPOST('confirm'); 90$id = (GETPOST('socid', 'int') ? GETPOST('socid', 'int') : GETPOST('id', 'int')); 91$ref = GETPOST('ref', 'alpha'); 92 93// Get parameters 94$limit = GETPOST('limit', 'int') ? GETPOST('limit', 'int') : $conf->liste_limit; 95$sortfield = GETPOST("sortfield", 'alpha'); 96$sortorder = GETPOST("sortorder", 'alpha'); 97$page = GETPOSTISSET('pageplusone') ? (GETPOST('pageplusone') - 1) : GETPOST("page", 'int'); 98if (empty($page) || $page == -1) { 99 $page = 0; 100} // If $page is not defined, or '' or -1 101$offset = $liste_limit * $page; 102$pageprev = $page - 1; 103$pagenext = $page + 1; 104if (!$sortorder) { 105 $sortorder = "ASC"; 106} 107if (!$sortfield) { 108 $sortfield = "name"; 109} 110//if (! $sortfield) $sortfield="position_name"; 111 112// Initialize technical objects 113$object = new MyObject($db); 114$extrafields = new ExtraFields($db); 115$diroutputmassaction = $conf->mymodule->dir_output.'/temp/massgeneration/'.$user->id; 116$hookmanager->initHooks(array('myobjectdocument', 'globalcard')); // Note that conf->hooks_modules contains array 117// Fetch optionals attributes and labels 118$extrafields->fetch_name_optionals_label($object->table_element); 119 120// Load object 121include DOL_DOCUMENT_ROOT.'/core/actions_fetchobject.inc.php'; // Must be include, not include_once // Must be include, not include_once. Include fetch and fetch_thirdparty but not fetch_optionals 122 123if ($id > 0 || !empty($ref)) { 124 $upload_dir = $conf->mymodule->multidir_output[$object->entity ? $object->entity : $conf->entity]."/myobject/".get_exdir(0, 0, 0, 1, $object); 125} 126 127$permissiontoadd = $user->rights->mymodule->myobject->write; // Used by the include of actions_addupdatedelete.inc.php and actions_linkedfiles.inc.php 128 129// Security check (enable the most restrictive one) 130//if ($user->socid > 0) accessforbidden(); 131//if ($user->socid > 0) $socid = $user->socid; 132//$isdraft = (($object->status == $object::STATUS_DRAFT) ? 1 : 0); 133//restrictedArea($user, $object->element, $object->id, $object->table_element, '', 'fk_soc', 'rowid', $isdraft); 134//if (empty($conf->mymodule->enabled)) accessforbidden(); 135//if (!$permissiontoread) accessforbidden(); 136 137 138/* 139 * Actions 140 */ 141 142include DOL_DOCUMENT_ROOT.'/core/actions_linkedfiles.inc.php'; 143 144 145/* 146 * View 147 */ 148 149$form = new Form($db); 150 151$title = $langs->trans("MyObject").' - '.$langs->trans("Files"); 152$help_url = ''; 153//$help_url='EN:Module_Third_Parties|FR:Module_Tiers|ES:Empresas'; 154llxHeader('', $title, $help_url); 155 156if ($object->id) { 157 /* 158 * Show tabs 159 */ 160 $head = myobjectPrepareHead($object); 161 162 print dol_get_fiche_head($head, 'document', '', -1, $object->picto); 163 164 165 // Build file list 166 $filearray = dol_dir_list($upload_dir, "files", 0, '', '(\.meta|_preview.*\.png)$', $sortfield, (strtolower($sortorder) == 'desc' ?SORT_DESC:SORT_ASC), 1); 167 $totalsize = 0; 168 foreach ($filearray as $key => $file) { 169 $totalsize += $file['size']; 170 } 171 172 // Object card 173 // ------------------------------------------------------------ 174 $linkback = '<a href="'.dol_buildpath('/mymodule/myobject_list.php', 1).'?restore_lastsearch_values=1'.(!empty($socid) ? '&socid='.$socid : '').'">'.$langs->trans("BackToList").'</a>'; 175 176 $morehtmlref = '<div class="refidno">'; 177 /* 178 // Ref customer 179 $morehtmlref.=$form->editfieldkey("RefCustomer", 'ref_client', $object->ref_client, $object, 0, 'string', '', 0, 1); 180 $morehtmlref.=$form->editfieldval("RefCustomer", 'ref_client', $object->ref_client, $object, 0, 'string', '', null, null, '', 1); 181 // Thirdparty 182 $morehtmlref.='<br>'.$langs->trans('ThirdParty') . ' : ' . (is_object($object->thirdparty) ? $object->thirdparty->getNomUrl(1) : ''); 183 // Project 184 if (! empty($conf->projet->enabled)) 185 { 186 $langs->load("projects"); 187 $morehtmlref.='<br>'.$langs->trans('Project') . ' '; 188 if ($permissiontoadd) 189 { 190 if ($action != 'classify') 191 //$morehtmlref.='<a class="editfielda" href="' . $_SERVER['PHP_SELF'] . '?action=classify&id=' . $object->id . '">' . img_edit($langs->transnoentitiesnoconv('SetProject')) . '</a> : '; 192 $morehtmlref.=' : '; 193 if ($action == 'classify') { 194 //$morehtmlref.=$form->form_project($_SERVER['PHP_SELF'] . '?id=' . $object->id, $object->socid, $object->fk_project, 'projectid', 0, 0, 1, 1); 195 $morehtmlref.='<form method="post" action="'.$_SERVER['PHP_SELF'].'?id='.$object->id.'">'; 196 $morehtmlref.='<input type="hidden" name="action" value="classin">'; 197 $morehtmlref.='<input type="hidden" name="token" value="'.newToken().'">'; 198 $morehtmlref.=$formproject->select_projects($object->socid, $object->fk_project, 'projectid', $maxlength, 0, 1, 0, 1, 0, 0, '', 1); 199 $morehtmlref.='<input type="submit" class="button valignmiddle" value="'.$langs->trans("Modify").'">'; 200 $morehtmlref.='</form>'; 201 } else { 202 $morehtmlref.=$form->form_project($_SERVER['PHP_SELF'] . '?id=' . $object->id, $object->socid, $object->fk_project, 'none', 0, 0, 0, 1); 203 } 204 } else { 205 if (! empty($object->fk_project)) { 206 $proj = new Project($db); 207 $proj->fetch($object->fk_project); 208 $morehtmlref .= ': '.$proj->getNomUrl(); 209 } else { 210 $morehtmlref .= ''; 211 } 212 } 213 }*/ 214 $morehtmlref .= '</div>'; 215 216 dol_banner_tab($object, 'ref', $linkback, 1, 'ref', 'ref', $morehtmlref); 217 218 print '<div class="fichecenter">'; 219 220 print '<div class="underbanner clearboth"></div>'; 221 print '<table class="border centpercent tableforfield">'; 222 223 // Number of files 224 print '<tr><td class="titlefield">'.$langs->trans("NbOfAttachedFiles").'</td><td colspan="3">'.count($filearray).'</td></tr>'; 225 226 // Total size 227 print '<tr><td>'.$langs->trans("TotalSizeOfAttachedFiles").'</td><td colspan="3">'.$totalsize.' '.$langs->trans("bytes").'</td></tr>'; 228 229 print '</table>'; 230 231 print '</div>'; 232 233 print dol_get_fiche_end(); 234 235 $modulepart = 'mymodule'; 236 //$permissiontoadd = $user->rights->mymodule->myobject->write; 237 $permissiontoadd = 1; 238 //$permtoedit = $user->rights->mymodule->myobject->write; 239 $permtoedit = 1; 240 $param = '&id='.$object->id; 241 242 //$relativepathwithnofile='myobject/' . dol_sanitizeFileName($object->id).'/'; 243 $relativepathwithnofile = 'myobject/'.dol_sanitizeFileName($object->ref).'/'; 244 245 include DOL_DOCUMENT_ROOT.'/core/tpl/document_actions_post_headers.tpl.php'; 246} else { 247 accessforbidden('', 0, 1); 248} 249 250// End of page 251llxFooter(); 252$db->close(); 253