modify_attr_write2db.php

<?php

require_once 'include/head.php';

// delay normaly short (given from config)
// but if there is a special message, the message should be read, so put the delay few seconds higher
$redirecting_delay = REDIRECTING_DELAY;

// will be added to url redirection, for knowing about naming attribute information on attribute overview
$naming_attr_message = "";


# when naming_attr = yes we must set mandatory to yes (should come from select boxes, but this code here will ensure that.
if(isset($_POST['naming_attr']) AND $_POST['naming_attr'] == "yes"){
    $_POST['mandatory'] = "yes";
    $mandatory = $_POST['mandatory'];
    message($debug, 'attribute mandatory is set to "yes" (because this attr is saved as naming_attr)');
}elseif( !empty($_POST['mandatory']) ){
    $mandatory = $_POST['mandatory'];
}elseif( !empty($_POST['HIDDEN_mandatory']) ){
    $mandatory = $_POST['HIDDEN_mandatory'];
    $_POST['mandatory'] = $_POST['HIDDEN_mandatory'];
}


// read mandatory values  
$attr_id = $_POST['attr_id'];
$attr_name = escape_string($_POST['attr_name']);
$friendly_name = escape_string($_POST['friendly_name']);
$visible = $_POST['visible'];
$write2conf = $_POST['conf'];



# take attr class from form if it is an ADD, else it gets the class from the DB (attention: this should only be so if class cant be modified)
if ($attr_id == "new"){
    $fk_id_class = $_POST['fk_id_class'];
    # additional entries needed for ADD
    $datatype = $_POST['datatype'];
    $naming_attr = $_POST['naming_attr'];

    // process non-mandatory values
    if(isset($_POST['fk_show_class_items'])){
        $fk_show_class_items = $_POST['fk_show_class_items'];
    }else{
        $fk_show_class_items = "NULL";
    }

    if(isset($_POST['link_as_child'])){
        $link_as_child = $_POST['link_as_child'];
    }else{
        $link_as_child = "no";
    }


}else{
    $query = "SELECT fk_id_class FROM ConfigAttrs WHERE id_attr=$attr_id";
    $fk_id_class = db_handler($query, 'getOne', "get class id");
}

# Get class name for later use (e.g. in link)
$query = 'SELECT config_class FROM ConfigClasses where id_class = "'.$fk_id_class.'"';
$class_name = db_handler($query, "getOne", "get class name");


###
# check if attr already exists in this class
###
$query = 'SELECT id_attr, attr_name, friendly_name FROM ConfigAttrs WHERE fk_id_class="'.$fk_id_class.'" AND attr_name ="'.mysql_real_escape_string($attr_name).'"';
$result = db_handler($query, "assoc", "Check if attribute name already exists in this class");

# Entry exists?  -> if its a modify, the id should be the same as attr_id, else the user tries to rename it to a existing one, which is not allowed!
if ( (!empty($result)) AND ( ($attr_id == "new") OR ($attr_id != $result["id_attr"]) )  ){
    //message($error, 'Attribute with name &quot;'.$attr_name.'&quot; already exists for this class! <br>&nbsp;Click for details or go back:<br>');
    //message($error, '<a href="detail_attributes.php?class='.$class_name.'&id='.$result["id_attr"].'">'.$result["attr_name"].'</a>', "list");
    
    NConf_DEBUG::set('An attribute with the name &quot;'.$attr_name.'&quot; already exists for this class!', 'ERROR');
    NConf_DEBUG::set('Click for details or go back:', 'ERROR');
    
    $list_item = '<li><a href="detail_admin_items.php?type=attr&class='.$class_name.'&id='.$result["id_attr"].'">'.$result["attr_name"].'</a></li>';
    $list = '<ul>'.$list_item.'</ul>';
    NConf_DEBUG::set($list, 'ERROR');

    $write2db = "no";

    # When user clicks on a listed item, and goes to delete it, the redirect must know where to go after delete, this would be the add page:
    # this feature is not finished with attributes!
    $_SESSION["after_delete_page"] = $_SERVER["HTTP_REFERER"];
    message($debug, 'Setting after delete page to : '.$_SERVER["HTTP_REFERER"]);


}else{

    # check mandatory input
    # It divers for ADD or MODIFY !
    if ($attr_id == "new"){
        $title = "Add attribute";

        # mandatory for ADD
        $mandatory_fields = array("attr_name" => "attribute name", 'friendly_name' => "friendly name", 'datatype'=> "attribute datatype", 'mandatory' => "mandatory", 'visible' => "visible", 'conf' => "write to conf", 'fk_id_class' => "attribute class", 'naming_attr' => "is naming attribute");
    }else{
        $title = "Modify attribute";

        # mandatory for modify
        $mandatory_fields = array("attr_name" => "attribute name", 'friendly_name' => "friendly name", 'mandatory' => "mandatory", 'visible' => "visible", 'conf' => "write to conf");
    }


    echo NConf_HTML::title($title);

    # Check mandatory fields
    $write2db = check_mandatory($mandatory_fields,$_POST);

}



# special links
# they should not both be yes (already checked, not possible with javascript)
if(isset($_POST['link_as_child'])){
    $link_as_child = $_POST['link_as_child'];
}else{
    $link_as_child = 'no';
}
if(isset($_POST['link_bidirectional'])){
    $link_bidirectional = $_POST['link_bidirectional'];
}else{
    $link_bidirectional = 'no';
}
    
/* Is now allowed:
if ( $link_as_child == "yes" && $link_bidirectional == "yes" ){
    $write2db = "no";
    message($error, 'You cannot have both special linkings on "yes"');
}
*/

// process non-mandatory values
if(isset($_POST['description'])){
    $description = escape_string($_POST['description']);
}else{
    $description = "NULL";
}

if(isset($_POST['poss_values'])){
    $poss_values = escape_string($_POST['poss_values']);
}else{
    $poss_values = "";
}

if(isset($_POST['predef_value'])){
    $predef_value = escape_string($_POST['predef_value']);
}else{
    $predef_value = "";
}

if(isset($_POST['max_length'])){
    $max_length = $_POST['max_length'];
}else{
    $max_length = "";
}

if($_POST['ordering'] != ""){
    $ordering = $_POST['ordering'];
}else{
    $query = "SELECT MAX(ordering) FROM ConfigAttrs WHERE fk_id_class=$fk_id_class";
    $max_ord = db_handler($query, 'getOne', "get highest ordering number in class");
    $ordering = $max_ord+1;
}



# write to db
if ($write2db == "yes"){


    # ADD OR MODIFY
    if ($attr_id == "new"){
        ##
        ## ADD CONTENT ##
        ##

        $query = "INSERT INTO ConfigAttrs (attr_name,friendly_name,description,datatype,max_length,poss_values,predef_value,mandatory,ordering,visible,write_to_conf,naming_attr,link_as_child,link_bidirectional,fk_show_class_items,fk_id_class) VALUES ('$attr_name','$friendly_name','$description','$datatype','$max_length','$poss_values','$predef_value','$mandatory','$ordering','$visible','$write2conf','$naming_attr','$link_as_child','$link_bidirectional',$fk_show_class_items,'$fk_id_class')";

        $result = db_handler($query, "result", "insert");

        if($result){
            # Get ID of insert:
            $new_id = mysql_insert_id();

            echo NConf_HTML::text("Successfully added attribute &quot;$attr_name&quot;");

            history_add("created", "Attribute", $attr_name);

            # Check for other itmes with same order number, and change theme
            set_attr_order($new_id, $ordering, $fk_id_class);

            # Delete Cache of modify (if still exist)
            if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

            # Go to show_attr page and show the class which the new added attribute belongs to
            $url = 'show_attr.php?class='.$class_name;
            echo '<meta http-equiv="refresh" content="'.REDIRECTING_DELAY.'; url='.$url.'">';
            NConf_DEBUG::set('<a href="'.$url.'"> [ this page ] (in '.REDIRECTING_DELAY.' seconds)</a>', 'INFO', "<br>redirecting to");
       }else{
          echo "<h2>Failed to add attribute &quot;$attr_name&quot;</h2>";
       }


    }else{
        ##
        ## MODIFY CONTENT: ##
        ##

       // 2009-03-04 A. Gargiulo: disabled this code because we don't want users to be able to
       // modify all of the attr params, especially the naming attr (could cause data inconsistency)!

       // read mandatory values  
       //$datatype = $_POST['datatype'];
       //$fk_id_class = $_POST['fk_id_class'];
       //$naming_attr = $_POST['naming_attr'];

       // process non-mandatory values
       //if(isset($_POST['fk_show_class_items'])){
       //   $fk_show_class_items = $_POST['fk_show_class_items'];
       //}else{
       //   $fk_show_class_items = "NULL";
       //}

       //if(isset($_POST['link_as_child'])){
       //    $link_as_child = $_POST['link_as_child'];
       //}else{
       //    $link_as_child = "no";
       //}

       // search other naming attr (but not this attrbiute), because there can be only 1 Naming Attribute
       //$old_naming_attr_query = 'SELECT id_attr FROM ConfigAttrs WHERE fk_id_class='.$fk_id_class.' AND naming_attr = "yes" AND id_attr != '.$attr_id;
       //$old_naming_attr_array = db_handler($old_naming_attr_query, "array", "looking up OTHER naming attrs in this class");
       //if($naming_attr == "yes"){
            // nothing hapens here, because all other will be deleted, this will be set
       //}elseif($naming_attr == "no"){
            // if there is no other naming attr
            // select all other attributes in this class, and look if there is one naming attr set to yes.
            // that is needed, otherwise the naming attr can't get "no" because this is the last one (so actual it should be yes)
       //     if ( count($old_naming_attr_array) == 0 ){
       //         $naming_attr = "yes";
       //         message($info, TXT_NAMING_ATTR_LAST);
       //         $naming_attr_message = "&naming_attr=last";
       //     }
       //}

       // UPDATE ConfigAttrs
       //$query = mysql_query("UPDATE ConfigAttrs
       // SET
       //     attr_name = '$attr_name',
       //     friendly_name = '$friendly_name',
       //     description = '$description',
       //     datatype = '$datatype',
       //     max_length = '$max_length',
       //     poss_values = '$poss_values',
       //     predef_value = '$predef_value',
       //     mandatory = '$mandatory',
       //     ordering = '$ordering',
       //     visible = '$visible',
       //     write_to_conf = '$write2conf',
       //     naming_attr = '$naming_attr',
       //     link_as_child = '$link_as_child',
       //     link_bidirectional = '$link_bidirectional',
       //     fk_show_class_items = $fk_show_class_items,
       //     fk_id_class = '$fk_id_class'
       // WHERE
       //     id_attr = $attr_id
       // ");

        # get old ordering number
        $old_ordering = db_handler("SELECT ordering FROM ConfigAttrs WHERE id_attr=$attr_id", "getOne", "GET old ordering number of attr");

       // UPDATE ConfigAttrs
       $query = "UPDATE ConfigAttrs
                SET
                attr_name = '$attr_name',
                friendly_name = '$friendly_name',
                description = '$description',
                max_length = '$max_length',
                poss_values = '$poss_values',
                predef_value = '$predef_value',
                mandatory = '$mandatory',
                ordering = '$ordering',
                visible = '$visible',
                write_to_conf = '$write2conf'
                WHERE
                id_attr = $attr_id";
        
        $result = db_handler($query, "update", "Modify attribute parameters");

        if ($result){

           # handle the ordering of the other items
           set_attr_order($attr_id, $ordering, $fk_id_class, $old_ordering);

           echo NConf_HTML::text("Successfully modified attribute &quot;$attr_name&quot;", FALSE);
           if ($naming_attr_message == "&naming_attr=last"){
                echo TXT_NAMING_ATTR_LAST;
           }

                // 2009-03-04 A. Gargiulo: disabled this code because we don't want users to be able to
                // modify all of the attr params, especially the naming attr (could cause data inconsistency)!

                // When succesfully set new entry including new naming attribute, delete the old one
                //if($naming_attr == "yes"){
                //    if ( (count($old_naming_attr_array) != "0") AND $naming_attr == "yes" ){
                //        foreach ($old_naming_attr_array as $attribute){
                //            $update_query = 'UPDATE `ConfigAttrs` SET `naming_attr` = "no" WHERE `id_attr` = '.$attribute["id_attr"];
                //            db_handler($update_query, "insert", "set old naming attr to 'no'");
                //        }
                //        $naming_attr_message = "&naming_attr=changed";
                //    }
                //}

           // Go to next page without pressing the button

           // Delete Cache of modify (if still exist)
           if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

           // set go back page (show attr ) with defined class
           $_SESSION["go_back_page"] = 'show_attr.php?class='.$class_name;

           echo '<meta http-equiv="refresh" content="'.$redirecting_delay.'; url='.$_SESSION["go_back_page"].$naming_attr_message.'">';
           NConf_DEBUG::set('<a href="'.$_SESSION["go_back_page"].$naming_attr_message.'"> [ this page ] (in '.REDIRECTING_DELAY.' seconds)</a>', 'INFO', "<br>redirecting to");

       }else{
          echo "<h2>Failed to modify attribute &quot;$attr_name&quot;</h2>";
       }


    }

}else{  # write to db

    if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

    if ( NConf_DEBUG::status('ERROR') ) {
        $_SESSION["cache"]["use_cache"] = TRUE;
        echo NConf_HTML::limit_space( NConf_HTML::show_error() );
        echo "<br><br>";
        echo NConf_HTML::back_button($_SESSION["go_back_page"]);

        # Cache
        foreach ($_POST as $key => $value) {
            $_SESSION["cache"]["modify_attr"][$attr_id][$key] = $value;
        }

    }else{
        echo NConf_DEBUG::show_debug('INFO', TRUE);
    }

}



mysql_close($dbh);
require_once 'include/foot.php';
?>