include/MVC/View/views/view.popup.php

   1 <?php
   2 /*********************************************************************************
   3  * SugarCRM Community Edition is a customer relationship management program developed by
   4  * SugarCRM, Inc. Copyright (C) 2004-2012 SugarCRM Inc.
   5  *
   6  * This program is free software; you can redistribute it and/or modify it under
   7  * the terms of the GNU Affero General Public License version 3 as published by the
   8  * Free Software Foundation with the addition of the following permission added
   9  * to Section 15 as permitted in Section 7(a): FOR ANY PART OF THE COVERED WORK
  10  * IN WHICH THE COPYRIGHT IS OWNED BY SUGARCRM, SUGARCRM DISCLAIMS THE WARRANTY
  11  * OF NON INFRINGEMENT OF THIRD PARTY RIGHTS.
  12  *
  13  * This program is distributed in the hope that it will be useful, but WITHOUT
  14  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
  15  * FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
  16  * details.
  17  *
  18  * You should have received a copy of the GNU Affero General Public License along with
  19  * this program; if not, see http://www.gnu.org/licenses or write to the Free
  20  * Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
  21  * 02110-1301 USA.
  22  *
  23  * You can contact SugarCRM, Inc. headquarters at 10050 North Wolfe Road,
  24  * SW2-130, Cupertino, CA 95014, USA. or at email address contact@sugarcrm.com.
  25  *
  26  * The interactive user interfaces in modified source and object code versions
  27  * of this program must display Appropriate Legal Notices, as required under
  28  * Section 5 of the GNU Affero General Public License version 3.
  29  *
  30  * In accordance with Section 7(b) of the GNU Affero General Public License version 3,
  31  * these Appropriate Legal Notices must retain the display of the "Powered by
  32  * SugarCRM" logo. If the display of the logo is not reasonably feasible for
  33  * technical reasons, the Appropriate Legal Notices must display the words
  34  * "Powered by SugarCRM".
  35  ********************************************************************************/
  36
  37 class ViewPopup extends SugarView{
  38         var $type ='list';
  39         function ViewPopup(){
  40                 parent::SugarView();
  41         }
  42
  43         function display(){
  44                 global $popupMeta, $mod_strings;
  45
  46         if(($this->bean instanceOf SugarBean) && !$this->bean->ACLAccess('list')){
  47             ACLController::displayNoAccess();
  48             sugar_cleanup(true);
  49         }
  50
  51                 if(isset($_REQUEST['metadata']) && strpos($_REQUEST['metadata'], "..") !== false)
  52                         die("Directory navigation attack denied.");
  53                 if(!empty($_REQUEST['metadata']) && $_REQUEST['metadata'] != 'undefined'
  54                         && file_exists('modules/' . $this->module . '/metadata/' . $_REQUEST['metadata'] . '.php')) // if custom metadata is requested
  55                         require_once('modules/' . $this->module . '/metadata/' . $_REQUEST['metadata'] . '.php');
  56                 elseif(file_exists('custom/modules/' . $this->module . '/metadata/popupdefs.php'))
  57                 require_once('custom/modules/' . $this->module . '/metadata/popupdefs.php');
  58             elseif(file_exists('modules/' . $this->module . '/metadata/popupdefs.php'))
  59                 require_once('modules/' . $this->module . '/metadata/popupdefs.php');
  60
  61             if(!empty($popupMeta) && !empty($popupMeta['listviewdefs'])){
  62                 if(is_array($popupMeta['listviewdefs'])){
  63                         //if we have an array, then we are not going to include a file, but rather the
  64                         //listviewdefs will be defined directly in the popupdefs file
  65                         $listViewDefs[$this->module] = $popupMeta['listviewdefs'];
  66                 }else{
  67                         //otherwise include the file
  68                         require_once($popupMeta['listviewdefs']);
  69                 }
  70             }elseif(file_exists('custom/modules/' . $this->module . '/metadata/listviewdefs.php')){
  71                         require_once('custom/modules/' . $this->module . '/metadata/listviewdefs.php');
  72                 }elseif(file_exists('modules/' . $this->module . '/metadata/listviewdefs.php')){
  73                         require_once('modules/' . $this->module . '/metadata/listviewdefs.php');
  74                 }
  75
  76                 //check for searchdefs as well
  77                 if(!empty($popupMeta) && !empty($popupMeta['searchdefs'])){
  78                 if(is_array($popupMeta['searchdefs'])){
  79                         //if we have an array, then we are not going to include a file, but rather the
  80                         //searchdefs will be defined directly in the popupdefs file
  81                         $searchdefs[$this->module]['layout']['advanced_search'] = $popupMeta['searchdefs'];
  82                 }else{
  83                         //otherwise include the file
  84                         require_once($popupMeta['searchdefs']);
  85                 }
  86             }else if(empty($searchdefs) && file_exists('custom/modules/'.$this->module.'/metadata/searchdefs.php')){
  87                         require_once('custom/modules/'.$this->module.'/metadata/searchdefs.php');
  88                 }else if(empty($searchdefs) && file_exists('modules/'.$this->module.'/metadata/searchdefs.php')){
  89                 require_once('modules/'.$this->module.'/metadata/searchdefs.php');
  90                 }
  91
  92                 //if you click the pagination button, it will populate the search criteria here
  93         if(!empty($this->bean) && isset($_REQUEST[$this->module.'2_'.strtoupper($this->bean->object_name).'_offset'])) {
  94             if(!empty($_REQUEST['current_query_by_page'])) {
  95                 $blockVariables = array('mass', 'uid', 'massupdate', 'delete', 'merge', 'selectCount',
  96                     'sortOrder', 'orderBy', 'request_data', 'current_query_by_page');
  97                 $current_query_by_page = unserialize(base64_decode($_REQUEST['current_query_by_page']));
  98                 foreach($current_query_by_page as $search_key=>$search_value) {
  99                     if($search_key != $this->module.'2_'.strtoupper($this->bean->object_name).'_offset'
 100                         && !in_array($search_key, $blockVariables)) {
 101                         if (!is_array($search_value)) {
 102                             $_REQUEST[$search_key] = $GLOBALS['db']->quote($search_value);
 103                         }
 104                         else {
 105                             foreach ($search_value as $key=>&$val) {
 106                                 $val = $GLOBALS['db']->quote($val);
 107                             }
 108                             $_REQUEST[$search_key] = $search_value;
 109                         }
 110                     }
 111                 }
 112             }
 113         }
 114
 115                 if(!empty($listViewDefs) && !empty($searchdefs)){
 116                         require_once('include/Popups/PopupSmarty.php');
 117                         $displayColumns = array();
 118                         $filter_fields = array();
 119                         $popup = new PopupSmarty($this->bean, $this->module);
 120                         foreach($listViewDefs[$this->module] as $col => $params) {
 121                         $filter_fields[strtolower($col)] = true;
 122                                  if(!empty($params['related_fields'])) {
 123                     foreach($params['related_fields'] as $field) {
 124                         //id column is added by query construction function. This addition creates duplicates
 125                         //and causes issues in oracle. #10165
 126                         if ($field != 'id') {
 127                             $filter_fields[$field] = true;
 128                         }
 129                     }
 130                 }
 131                         if(!empty($params['default']) && $params['default'])
 132                                 $displayColumns[$col] = $params;
 133                 }
 134                 $popup->displayColumns = $displayColumns;
 135                 $popup->filter_fields = $filter_fields;
 136                 $popup->mergeDisplayColumns = true;
 137                 //check to see if popupdefs contains searchdefs
 138                 $popup->_popupMeta = $popupMeta;
 139             $popup->listviewdefs = $listViewDefs;
 140                 $popup->searchdefs = $searchdefs;
 141
 142                 if(isset($_REQUEST['query'])){
 143                                 $popup->searchForm->populateFromRequest();
 144                 }
 145
 146                         $massUpdateData = '';
 147                         if(isset($_REQUEST['mass'])) {
 148                                 foreach(array_unique($_REQUEST['mass']) as $record) {
 149                                         $massUpdateData .= "<input style='display: none' checked type='checkbox' name='mass[]' value='$record'>\n";
 150                                 }
 151                         }
 152                         $popup->massUpdateData = $massUpdateData;
 153
 154                         $popup->setup('include/Popups/tpls/PopupGeneric.tpl');
 155
 156             //We should at this point show the header and javascript even if to_pdf is true.
 157             //The insert_popup_header javascript is incomplete and shouldn't be relied on.
 158             if (isset($this->options['show_all']) && $this->options['show_all'] == false)
 159             {
 160                 unset($this->options['show_all']);
 161                 $this->options['show_javascript'] = true;
 162                 $this->options['show_header'] = true;
 163                 $this->_displayJavascript();
 164             }
 165             insert_popup_header(null, false);
 166                         echo $popup->display();
 167
 168                 }else{
 169                         if(file_exists('modules/' . $this->module . '/Popup_picker.php')){
 170                                 require_once('modules/' . $this->module . '/Popup_picker.php');
 171                         }else{
 172                                 require_once('include/Popups/Popup_picker.php');
 173                         }
 174
 175                         $popup = new Popup_Picker();
 176                         $popup->_hide_clear_button = true;
 177                         echo $popup->process_page();
 178                 }
 179         }
 180 }
 181 ?>