company.php

来自「groupoffice」· PHP 代码 · 共 605 行 · 第 1/2 页

<?php
/*
Copyright Intermesh 2003
Author: Merijn Schering <[e-mail]>
Version: 1.0 Release date: 08 July 2003

This program is free software; you can redistribute it and/or modify it
under the terms of the GNU General Public License as published by the
Free Software Foundation; either version 2 of the License, or (at your
option) any later version.
*/

require_once ("../../Group-Office.php");

$GO_SECURITY->authenticate();
$GO_MODULES->authenticate('addressbook');
require_once ($GO_LANGUAGE->get_language_file('addressbook'));

require_once ($GO_MODULES->class_path."addressbook.class.inc");
$ab = new addressbook();


$templates_plugin = $GO_MODULES->get_plugin('templates');
if ($templates_plugin) {
	require_once ($templates_plugin['class_path'].'templates.class.inc');
	$tp = new templates();
}

$task = isset ($_REQUEST['task']) ? $_REQUEST['task'] : '';
$return_to = (isset ($_REQUEST['return_to']) && $_REQUEST['return_to'] != '') ? $_REQUEST['return_to'] : $_SERVER['HTTP_REFERER'];
$link_back = (isset ($_REQUEST['link_back']) && $_REQUEST['link_back'] != '') ? $_REQUEST['link_back'] : $_SERVER['REQUEST_URI'];

$company_id = isset ($_REQUEST['company_id']) ? $_REQUEST['company_id'] : '0';
$vcf_file = isset ($_REQUEST['vcf_file']) ? $_REQUEST['vcf_file'] : '';

if (isset ($_REQUEST['popup'])) {
	$popup = true;
	$return_to = 'javascript:window.close();';
} else {
	$popup = false;
}

$ab_settings = $ab->get_settings($GO_SECURITY->user_id);
$addressbook_id = $company['addressbook_id'] = isset($_REQUEST['addressbook_id']) ? $_REQUEST['addressbook_id'] : $ab_settings['addressbook_id'];
if($addressbook_id == 0)
{
	$addressbook = $ab->get_addressbook();
	$addressbook_id = $addressbook['id'];
}

if($ab_settings['addressbook_id'] != $addressbook_id)
{
	$ab_settings['addressbook_id'] = $addressbook_id;
	$ab->update_settings($ab_settings);
}


//save
switch ($task) {
	case 'activate_linking':
		$link_company = $ab->get_company($company_id);
		$link_id = $link_company['link_id'];
		if(empty($link_company['link_id']))
		{
			$update_company['id'] = $company_id;
			$update_company['link_id'] = $link_id = $GO_LINKS->get_link_id();
			$ab->update_company($update_company);
		}
		
		$GO_LINKS->activate_linking($link_id, 3, $link_company['name'], $link_back);
		
		if(!empty($_REQUEST['goto_url']))
		{
			header('Location: '.$_REQUEST['goto_url']);
			exit();
		}
	break;
	
	case 'create_link':
		if($link = $GO_LINKS->get_active_link())
		{
			$link_company = $ab->get_company($company_id);
			$link_id = $link_company['link_id'];
			if(empty($link_company['link_id']))
			{
				$update_company['id'] = $company_id;
				$update_company['link_id'] = $link_id = $GO_LINKS->get_link_id();
				$ab->update_company($update_company);
			}
			$GO_LINKS->add_link($link['id'], $link['type'], $link_id, 3);
			$GO_LINKS->deactivate_linking();
			header('Location: '.$link['return_to']);
			exit();
		}
	break;
	
	case 'save_company' :
		$company['name'] = isset ($_REQUEST['name']) ? smart_addslashes($_REQUEST['name']) : '';
	$company['address'] = isset ($_REQUEST['address']) ? smart_addslashes($_REQUEST['address']) : '';
	$company['address_no'] = isset ($_REQUEST['address_no']) ? smart_addslashes($_REQUEST['address_no']) : '';
	$company['zip'] = isset ($_REQUEST['zip']) ? smart_addslashes($_REQUEST['zip']) : '';
	$company['city'] = isset ($_REQUEST['city']) ? smart_addslashes($_REQUEST['city']) : '';

	if ($company['zip'] != '' && $company['address'] == '' && $company['city'] == '' && $addressinfo = $ab->get_addressinfo($company['zip'])) {
		$company['address'] = $addressinfo['street'];
		$company['city'] = $addressinfo['city'];
	}

	$company['state'] = isset ($_REQUEST['state']) ? smart_addslashes($_REQUEST['state']) : '';
	$company['country'] = isset ($_REQUEST['country']) ? smart_addslashes($_REQUEST['country']) : '';

	$company['post_address'] = 
		(isset ($_REQUEST['post_address'])  && !empty($_REQUEST['post_address'])) ? 
		smart_addslashes($_REQUEST['post_address']) : $company['address'];
		
	$company['post_address_no'] = 
		(isset($_REQUEST['post_address_no']) && !empty($_REQUEST['post_address_no'])) ? 
		smart_addslashes($_REQUEST['post_address_no']) :  $company['address_no'];
		
	$company['post_zip'] = 
		(isset ($_REQUEST['post_zip']) && !empty($_REQUEST['post_zip'])) 
		 ? smart_addslashes($_REQUEST['post_zip']) : $company['zip'];
		 
	$company['post_city'] = 
		(isset ($_REQUEST['post_city']) && !empty($_REQUEST['post_city']))
			 ? smart_addslashes($_REQUEST['post_city']) : $company['city'];

	if ($company['post_zip'] != '' && $company['post_address'] == '' && $company['post_city'] == '' && $addressinfo = $ab->get_addressinfo($company['post_zip'])) {
		$company['post_address'] = $addressinfo['street'];
		$company['post_city'] = $addressinfo['city'];
	}

	$company['post_state'] = 
		( isset ($_REQUEST['post_state']) && !empty($_REQUEST['post_state']))
		 ? smart_addslashes($_REQUEST['post_state']) : $company['state'];
		 
	$company['post_country'] = 
		(isset($_REQUEST['post_country']) && !empty($_REQUEST['post_country']))
	 ? smart_addslashes($_REQUEST['post_country']) : $company['country'];

	$company['email'] = isset ($_REQUEST['email']) ? smart_addslashes($_REQUEST['email']) : '';	
	$company['phone'] = isset ($_REQUEST['phone']) ? smart_addslashes($_REQUEST['phone']) : '';
	$company['fax'] = isset ($_REQUEST['fax']) ? smart_addslashes($_REQUEST['fax']) : '';
	$company['homepage'] = isset ($_REQUEST['homepage']) ? smart_addslashes($_REQUEST['homepage']) : '';
	$company['bank_no'] = isset ($_REQUEST['bank_no']) ? smart_addslashes($_REQUEST['bank_no']) : '';
	$company['vat_no'] = isset ($_REQUEST['vat_no']) ? smart_addslashes($_REQUEST['vat_no']) : '';

		if ($_REQUEST['homepage']  != '' && !eregi('http', $_REQUEST['homepage'])) {
			$company['homepage'] = 'http://'.smart_addslashes($_REQUEST['homepage']);
		}
		$company['addressbook_id']  = $addressbook_id;

		if ($company['name'] == '') {
			$feedback = $error_missing_field;
		} else {
			if ($company_id > 0) {
				$company['id'] = $company_id;
				if ($ab->update_company($company)) {
					if ($_POST['close'] == 'true') {
						if ($popup) {
							echo '<script type="text/javascript">window.close();</script>';
						} else {
							if (isset ($_REQUEST['return_company_id'])) {
								$return_to = add_params_to_url($return_to, 'company_id='.$_REQUEST['company_id']);
							}
							header('Location: '.$return_to);
						}
						exit ();
					}
				} else {
					$feedback = $strSaveError;
				}
			}elseif (!isset($_POST['ignore']) && $existing_company_id = $ab->check_company($GO_SECURITY->user_id, $company)) {
				$link = '<a href="company.php?return_to='.urlencode($return_to).'&company_id='.$existing_company_id.'">'.$ab_here.'</a>';
				$feedback = sprintf($ab_contact_exists, $link);
				
				$ignore = true;
				
			} else {
				if ($company_id = $ab->add_company($company)) {

					if ($_POST['close'] == 'true') {
						if ($popup) {
							echo '<script type="text/javascript">'.
								 'window.close();</script>';
						} else {
							if (isset ($_REQUEST['return_company_id'])) {
								$return_to = add_params_to_url($return_to, 'company_id='.$_REQUEST['company_id']);
							}

							header('Location: '.$return_to);
						}
						exit ();
					}
				} else {
					$feedback = $strSaveError;
				}
			}
		}
		break;

		case 'save_custom_fields':
			require_once($GO_MODULES->modules['custom_fields']['class_path'].'custom_fields.class.inc');
			$cf = new custom_fields();			
			
			$cf->save_fields($_POST['company_tabstrip_'.$company_id], $_POST['link_id']);
		
			if ($_POST['close'] == 'true') {
				if ($popup) {
					echo '<script type="text/javascript">window.close()</script>';
				} else {
					if (isset ($_REQUEST['return_company_id'])) {
						$return_to = add_params_to_url($return_to, 'company_id='.$_REQUEST['company_id']);
					}
					if($return_to != 'javascript:window.close();')
					{
						header('Location: '.$return_to);
					}else
					{
						echo '<script type="text/javascript">'.
						 'window.close();</script>';
					}
				}
				exit();
		}
		break;


	case 'save_mailing_groups' :
		$tp->remove_company_from_mailing_groups($company_id);
		if (isset ($_POST['mailing_groups'])) {
			while ($mailing_group_id = array_shift($_POST['mailing_groups'])) {
				$tp->add_company_to_mailing_group($company_id, $mailing_group_id);
			}
		}
		break;
}

$vcard_count = 0;
if (!empty ($vcf_file)) {
	require_once ($GO_MODULES->class_path."vcard.class.inc");
	$vcard = new vcard();
	$vcard_count = $vcard->get_count($vcf_file);
}

//check permissions
if ($company_id > 0 && $company = $ab->get_company($company_id)) {
	$addressbook_id = $company['addressbook_id'];
	if (!$write_permission = $GO_SECURITY->has_permission($GO_SECURITY->user_id, $company['acl_write'])) {
		$read_permission = $GO_SECURITY->has_permission($GO_SECURITY->user_id, $company['acl_read']);
	}
		$tabstrip = new tabstrip('company_tabstrip_'.$company_id, $company['name'], '120', 'company_form', 'vertical');

	$tabstrip->add_tab('profile', $ab_company_properties);
	if ($templates_plugin) {

		if ($company['email'] != '' && $tp->get_mailing_groups($GO_SECURITY->user_id) && $write_permission) {
			$tabstrip->add_tab('mailings', $ab_mailings);
		}
	}

	$tabstrip->add_tab('contacts', $ab_employees);
	$tabstrip->add_tab('links', $strLinks);

	if(isset($GO_MODULES->modules['custom_fields']))
	{
		require_once($GO_MODULES->modules['custom_fields']['class_path'].'custom_fields.class.inc');
		$cf = new custom_fields();
		
		if($cf->get_authorized_categories(3, $GO_SECURITY->user_id))
		{
			while($cf->next_record())
			{
				$tabstrip->add_tab($cf->f('id'), $cf->f('name'));
			}
		}
	}
} else {
	$tabstrip = new tabstrip('company_tabstrip_'.$company_id, $ab_new_company, '120', 'company_form', 'vertical');
	
	
	$write_permission = true;
	$read_permission = true;
}

$tabstrip->set_attribute('style', 'width:100%');
$tabstrip->set_return_to($return_to);

if (!$write_permission && !$read_permission) {
	header('Location: '.$GO_CONFIG->host.'error_docs/403.php');
	exit ();
}


$active_tab = isset ($_REQUEST['active_tab']) ? $_REQUEST['active_tab'] : null;
if (isset ($active_tab)) {
	$tabstrip->set_active_tab($active_tab);
} else {
	$link_back .= '&active_tab='.$tabstrip->value;
}


$form = new form('company_form');