modify_attr_write2db.php

<?php

   require_once 'config/main.php';
   require_once 'include/head.php';

   // delay normaly short (given from config)
   // but if there is a special message, the message should be read, so put the delay few seconds higher
   $redirecting_delay = REDIRECTING_DELAY;

   // will be added to url redirection, for knowing about naming attribute information on attribute overview
   $naming_attr_message = "";


    # when naming_attr = yes we must set mandatory to yes (should come from select boxes, but this code here will ensure that.
    if(isset($_POST['naming_attr']) AND $_POST['naming_attr'] == "yes"){
        $_POST['mandatory'] = "yes";
        $mandatory = $_POST['mandatory'];
        message($debug, 'attribute mandatory is set to "yes" (because this attr is saved as naming_attr)');
    }elseif( !empty($_POST['mandatory']) ){
        $mandatory = $_POST['mandatory'];
    }elseif( !empty($_POST['HIDDEN_mandatory']) ){
        $mandatory = $_POST['HIDDEN_mandatory'];
        $_POST['mandatory'] = $_POST['HIDDEN_mandatory'];
    }


    // read mandatory values  
    $attr_id = $_POST['attr_id'];
    $attr_name = escape_string($_POST['attr_name']);
    $friendly_name = escape_string($_POST['friendly_name']);
    $visible = $_POST['visible'];
    $write2conf = $_POST['conf'];



    # take attr class from form if it is an ADD, else it gets the class from the DB (attention: this should only be so if class cant be modified)
    if ($attr_id == "new"){
        $fk_id_class = $_POST['fk_id_class'];
        # additional entries needed for ADD
        $datatype = $_POST['datatype'];
        $naming_attr = $_POST['naming_attr'];

        // process non-mandatory values
        if(isset($_POST['fk_show_class_items'])){
            $fk_show_class_items = $_POST['fk_show_class_items'];
        }else{
            $fk_show_class_items = "NULL";
        }

        if(isset($_POST['link_as_child'])){
            $link_as_child = $_POST['link_as_child'];
        }else{
            $link_as_child = "no";
        }


    }else{
        $query = "SELECT fk_id_class FROM ConfigAttrs WHERE id_attr=$attr_id";
        $fk_id_class = db_handler($query, 'getOne', "get class id");
    }

    # Get class name for later use (e.g. in link)
    $query = 'SELECT config_class FROM ConfigClasses where id_class = "'.$fk_id_class.'"';
    $class_name = db_handler($query, "getOne", "get class name");


    ###
    # check if attr already exists in this class
    ###
    $query = 'SELECT id_attr, attr_name, friendly_name FROM ConfigAttrs WHERE fk_id_class="'.$fk_id_class.'" AND attr_name ="'.mysql_real_escape_string($attr_name).'"';
    $result = db_handler($query, "assoc", "Check if attribute name already exists in this class");

    # Entry exists?  -> if its a modify, the id should be the same as attr_id, else the user tries to rename it to a existing one, which is not allowed!
    if ( (!empty($result)) AND ( ($attr_id == "new") OR ($attr_id != $result["id_attr"]) )  ){
        message($error, 'Attribute with name &quot;'.$attr_name.'&quot; already exists for this class! <br>&nbsp;Click for details or go back:<br>');
        message($error, '<a href="detail_attributes.php?class='.$class_name.'&id='.$result["id_attr"].'">'.$result["attr_name"].'</a>', "list");
        $write2db = "no";

        # When user clicks on a listed item, and goes to delete it, the redirect must know where to go after delete, this would be the add page:
        # this feature is not finished with attributes!
        $_SESSION["after_delete_page"] = $_SERVER["HTTP_REFERER"];
        message($debug, 'Setting after delete page to : '.$_SERVER["HTTP_REFERER"]);


    }else{

        # check mandatory input
        # It divers for ADD or MODIFY !
        if ($attr_id == "new"){
            # mandatory for ADD
            $mandatory_fields = array("attr_name" => "attribute name", 'friendly_name' => "friendly name", 'datatype'=> "attribute datatype", 'mandatory' => "mandatory", 'visible' => "visible", 'conf' => "write to conf", 'fk_id_class' => "attribute class", 'naming_attr' => "is naming attribute");
        }else{
            # mandatory for modify
            $mandatory_fields = array("attr_name" => "attribute name", 'friendly_name' => "friendly name", 'mandatory' => "mandatory", 'visible' => "visible", 'conf' => "write to conf");
        }

        # Check mandatory fields
        $write2db = check_mandatory($mandatory_fields,$_POST);

    }





    // process non-mandatory values
    if(isset($_POST['description'])){
        $description = escape_string($_POST['description']);
    }else{
        $description = "NULL";
    }

    if(isset($_POST['poss_values'])){
        $poss_values = escape_string($_POST['poss_values']);
    }else{
        $poss_values = "";
    }

    if(isset($_POST['predef_value'])){
        $predef_value = escape_string($_POST['predef_value']);
    }else{
        $predef_value = "";
    }

    if(isset($_POST['max_length'])){
        $max_length = $_POST['max_length'];
    }else{
        $max_length = "";
    }

    if($_POST['ordering'] != ""){
        $ordering = $_POST['ordering'];
    }else{
        $query = "SELECT MAX(ordering) FROM ConfigAttrs WHERE fk_id_class=$fk_id_class";
        $max_ord = db_handler($query, 'getOne', "get highest ordering number in class");
        $ordering = $max_ord+1;
    }



    # write to db
    if ($write2db == "yes"){


        # ADD OR MODIFY
        if ($attr_id == "new"){
            ##
            ## ADD CONTENT ##
            ##
           $query = "INSERT INTO ConfigAttrs (attr_name,friendly_name,description,datatype,max_length,poss_values,predef_value,mandatory,ordering,visible,write_to_conf,naming_attr,link_as_child,fk_show_class_items,fk_id_class) VALUES ('$attr_name','$friendly_name','$description','$datatype','$max_length','$poss_values','$predef_value','$mandatory','$ordering','$visible','$write2conf','$naming_attr','$link_as_child',$fk_show_class_items,'$fk_id_class')";
           $result = db_handler($query, "result", "insert");
           if($result){
              echo "<h2>Successfully added attribute &quot;$attr_name&quot;</h2>";
                    history_add("created", "Attribute", $attr_name);

                    // Delete Cache of modify (if still exist)
                    if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

                    // Go to show_attr page and show the class which the new added attribute belongs to
                    $url = 'show_attr.php?class='.$class_name;
                    echo '<meta http-equiv="refresh" content="'.REDIRECTING_DELAY.'; url='.$url.'">';
                    message($info, '...redirecting to <a href="'.$url.'">page</a> in '.REDIRECTING_DELAY.' seconds...');
           }else{
              echo "<h2>Failed to add attribute &quot;$attr_name&quot;</h2>";
           }


        }else{
            ##
            ## MODIFY CONTENT: ##
            ##

           // 2009-03-04 A. Gargiulo: disabled this code because we don't want users to be able to
           // modify all of the attr params, especially the naming attr (could cause data inconsistency)!

           // read mandatory values  
           //$datatype = $_POST['datatype'];
           //$fk_id_class = $_POST['fk_id_class'];
           //$naming_attr = $_POST['naming_attr'];

           // process non-mandatory values
           //if(isset($_POST['fk_show_class_items'])){
           //   $fk_show_class_items = $_POST['fk_show_class_items'];
           //}else{
           //   $fk_show_class_items = "NULL";
           //}

           //if(isset($_POST['link_as_child'])){
           //    $link_as_child = $_POST['link_as_child'];
           //}else{
           //    $link_as_child = "no";
           //}

           // search other naming attr (but not this attrbiute), because there can be only 1 Naming Attribute
           //$old_naming_attr_query = 'SELECT id_attr FROM ConfigAttrs WHERE fk_id_class='.$fk_id_class.' AND naming_attr = "yes" AND id_attr != '.$attr_id;
           //$old_naming_attr_array = db_handler($old_naming_attr_query, "array", "looking up OTHER naming attrs in this class");
           //if($naming_attr == "yes"){
                // nothing hapens here, because all other will be deleted, this will be set
           //}elseif($naming_attr == "no"){
                // if there is no other naming attr
                // select all other attributes in this class, and look if there is one naming attr set to yes.
                // that is needed, otherwise the naming attr can't get "no" because this is the last one (so actual it should be yes)
           //     if ( count($old_naming_attr_array) == 0 ){
           //         $naming_attr = "yes";
           //         message($info, TXT_NAMING_ATTR_LAST);
           //         $naming_attr_message = "&naming_attr=last";
           //     }
           //}

           // UPDATE ConfigAttrs
           //$query = mysql_query("UPDATE ConfigAttrs
           // SET
           //     attr_name = '$attr_name',
           //     friendly_name = '$friendly_name',
           //     description = '$description',
           //     datatype = '$datatype',
           //     max_length = '$max_length',
           //     poss_values = '$poss_values',
           //     predef_value = '$predef_value',
           //     mandatory = '$mandatory',
           //     ordering = '$ordering',
           //     visible = '$visible',
           //     write_to_conf = '$write2conf',
           //     naming_attr = '$naming_attr',
           //     link_as_child = '$link_as_child',
           //     fk_show_class_items = $fk_show_class_items,
           //     fk_id_class = '$fk_id_class'
           // WHERE
           //     id_attr = $attr_id
           // ");


           // UPDATE ConfigAttrs
           $query = "UPDATE ConfigAttrs
                    SET
                    attr_name = '$attr_name',
                    friendly_name = '$friendly_name',
                    description = '$description',
                    max_length = '$max_length',
                    poss_values = '$poss_values',
                    predef_value = '$predef_value',
                    mandatory = '$mandatory',
                    ordering = '$ordering',
                    visible = '$visible',
                    write_to_conf = '$write2conf'
                    WHERE
                    id_attr = $attr_id";
            
           db_handler($query, "update", "Modify attribute parameters");

           echo "<h2>Successfully modified attribute &quot;$attr_name&quot;</h2>";
           if ($naming_attr_message == "&naming_attr=last"){
                echo TXT_NAMING_ATTR_LAST;
           }

                // 2009-03-04 A. Gargiulo: disabled this code because we don't want users to be able to
                // modify all of the attr params, especially the naming attr (could cause data inconsistency)!

                // When succesfully set new entry including new naming attribute, delete the old one
                //if($naming_attr == "yes"){
                //    if ( (count($old_naming_attr_array) != "0") AND $naming_attr == "yes" ){
                //        foreach ($old_naming_attr_array as $attribute){
                //            $update_query = 'UPDATE `ConfigAttrs` SET `naming_attr` = "no" WHERE `id_attr` = '.$attribute["id_attr"];
                //            db_handler($update_query, "insert", "set old naming attr to 'no'");
                //        }
                //        $naming_attr_message = "&naming_attr=changed";
                //    }
                //}

           // Go to next page without pressing the button

           // Delete Cache of modify (if still exist)
           if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

           // set go back page (show attr ) with defined class
           $_SESSION["go_back_page"] = 'show_attr.php?class='.$class_name;

           echo '<meta http-equiv="refresh" content="'.$redirecting_delay.'; url='.$_SESSION["go_back_page"].$naming_attr_message.'">';
           message($info, '...redirecting to <a href="'.$_SESSION["go_back_page"].$naming_attr_message.'">page</a> in '.REDIRECTING_DELAY.' seconds...');


        }

    }else{  # write to db

        if ( isset($_SESSION["cache"]["modify_attr"]) ) unset($_SESSION["cache"]["modify_attr"]);

        if ( !isset($error) ) {
            echo "<br>$info<br>";
        }else{
            echo "<b>Error:</b><br><br>";
            echo $error;
            echo "<br><br>";
            echo '<div id=buttons>';
                echo '<input type=button onClick="window.location.href=\''.$_SESSION["go_back_page"].'\'" value="Back">';
            echo '</div>';

            # Cache
            foreach ($_POST as $key => $value) {
                $_SESSION["cache"]["modify_attr"][$attr_id][$key] = $value;
            }

        }

    }



   mysql_close($dbh);
   require_once 'include/foot.php';
?>