Fix SUID
[platal.git] / modules / marketing.php
CommitLineData
10b057be 1<?php
2/***************************************************************************
179afa7f 3 * Copyright (C) 2003-2008 Polytechnique.org *
10b057be 4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22class MarketingModule extends PLModule
23{
24 function handlers()
25 {
26 return array(
27 'marketing' => $this->make_hook('marketing', AUTH_MDP, 'admin'),
28 'marketing/promo' => $this->make_hook('promo', AUTH_MDP, 'admin'),
29 'marketing/relance' => $this->make_hook('relance', AUTH_MDP, 'admin'),
30 'marketing/this_week' => $this->make_hook('week', AUTH_MDP, 'admin'),
31 'marketing/volontaire' => $this->make_hook('volontaire', AUTH_MDP, 'admin'),
32
33 'marketing/private' => $this->make_hook('private', AUTH_MDP, 'admin'),
34 'marketing/public' => $this->make_hook('public', AUTH_COOKIE),
d216d84a 35 'marketing/broken' => $this->make_hook('broken', AUTH_COOKIE),
10b057be 36 );
37 }
38
39 function handler_marketing(&$page)
40 {
10b057be 41 $page->changeTpl('marketing/index.tpl');
42
43 $page->assign('xorg_title','Polytechnique.org - Marketing');
44
45 // Quelques statistiques
46
08cce2ff 47 $res = XDB::query(
10b057be 48 "SELECT COUNT(*) AS vivants,
49 COUNT(NULLIF(perms='admin' OR perms='user', 0)) AS inscrits,
50 100*COUNT(NULLIF(perms='admin' OR perms='user', 0))/COUNT(*) AS ins_rate,
51 COUNT(NULLIF(promo >= 1972, 0)) AS vivants72,
52 COUNT(NULLIF(promo >= 1972 AND (perms='admin' OR perms='user'), 0)) AS inscrits72,
53 100 * COUNT(NULLIF(promo >= 1972 AND (perms='admin' OR perms='user'), 0)) /
54 COUNT(NULLIF(promo >= 1972, 0)) AS ins72_rate,
55 COUNT(NULLIF(FIND_IN_SET('femme', flags), 0)) AS vivantes,
56 COUNT(NULLIF(FIND_IN_SET('femme', flags) AND (perms='admin' OR perms='user'), 0)) AS inscrites,
57 100 * COUNT(NULLIF(FIND_IN_SET('femme', flags) AND (perms='admin' OR perms='user'), 0)) /
58 COUNT(NULLIF(FIND_IN_SET('femme', flags), 0)) AS inse_rate
59 FROM auth_user_md5
60 WHERE deces = 0");
61 $stats = $res->fetchOneAssoc();
62 $page->assign('stats', $stats);
63
08cce2ff 64 $res = XDB::query("SELECT count(*) FROM auth_user_md5 WHERE date_ins > ".
10b057be 65 date('Ymd000000', strtotime('1 week ago')));
66 $page->assign('nbInsSem', $res->fetchOneCell());
67
08cce2ff 68 $res = XDB::query("SELECT count(*) FROM register_pending WHERE hash != 'INSCRIT'");
10b057be 69 $page->assign('nbInsEnCours', $res->fetchOneCell());
70
08cce2ff 71 $res = XDB::query("SELECT count(*) FROM register_marketing");
10b057be 72 $page->assign('nbInsMarket', $res->fetchOneCell());
73
08cce2ff 74 $res = XDB::query("SELECT count(*) FROM register_mstats
10b057be 75 WHERE TO_DAYS(NOW()) - TO_DAYS(success) <= 7");
76 $page->assign('nbInsMarkOK', $res->fetchOneCell());
10b057be 77 }
78
926edcd1 79 function handler_private(&$page, $uid = null,
80 $action = null, $value = null)
10b057be 81 {
115c90db 82 global $globals;
10b057be 83 $page->changeTpl('marketing/private.tpl');
84
85 if (is_null($uid)) {
86 return PL_NOT_FOUND;
87 }
88
926edcd1 89 $page->assign('path', 'marketing/private/'.$uid);
90
e654517d 91 $res = XDB::query("SELECT nom, prenom, promo, matricule
92 FROM auth_user_md5
93 WHERE user_id={?} AND perms='pending'", $uid);
10b057be 94
95 if (list($nom, $prenom, $promo, $matricule) = $res->fetchOneRow()) {
433336f3 96 require_once('user.func.inc.php');
10b057be 97 $matricule_X = get_X_mat($matricule);
0025a0c5 98 $page->assign('nom', $nom);
99 $page->assign('prenom', $prenom);
100 $page->assign('promo', $promo);
101 $page->assign('matricule', $matricule);
10b057be 102 $page->assign('matricule_X',$matricule_X);
103 } else {
104 $page->kill('uid invalide');
105 }
106
926edcd1 107 if ($action == 'del') {
e654517d 108 Marketing::clear($uid, $value);
10b057be 109 }
110
926edcd1 111 if ($action == 'rel') {
e654517d 112 $market = Marketing::get($uid, $value);
113 if ($market == null) {
a7d35093 114 $page->trigWarning("Aucun marketing n'a été effectué vers $value");
e654517d 115 } else {
116 $to = $market->user['to'];
117 $title = $market->getTitle();
118 $text = $market->getText();
119 $from = $market->sender_mail;
120 $page->assign('rel_from_user', $from);
121 $page->assign('rel_from_staff',
1d55fe45 122 '"Equipe Polytechnique.org" <register@' . $globals->mail->domain . '>');
e654517d 123 $page->assign('rel_to', $to);
124 $page->assign('rel_title', $title);
125 $page->assign('rel_text', $text);
126 $page->assign('rel_email', $value);
127 }
10b057be 128 }
129
926edcd1 130 if ($action == 'relforce') {
e654517d 131 $market = Marketing::get($uid, Post::v('to'));
132 if (is_null($market)) {
133 $market = new Marketing($uid, Post::v('to'), 'default', null, 'staff');
134 }
135 $market->send(Post::v('title'), Post::v('message'));
a7d35093 136 $page->trigSuccess("Mail envoyé");
10b057be 137 }
138
926edcd1 139 if ($action == 'insrel') {
e654517d 140 if (Marketing::relance($uid)) {
a7d35093 141 $page->trigSuccess('relance faite');
10b057be 142 }
143 }
144
926edcd1 145 if ($action == 'add' && Post::has('email') && Post::has('type')) {
e654517d 146 $market = new Marketing($uid, Post::v('email'), 'default', null, Post::v('type'), S::v('uid'));
147 $market->add(false);
10b057be 148 }
149
08cce2ff 150 $res = XDB::iterator(
10b057be 151 "SELECT r.*, a.alias
152 FROM register_marketing AS r
153 INNER JOIN aliases AS a ON (r.sender=a.id AND a.type = 'a_vie')
154 WHERE uid={?}
155 ORDER BY date", $uid);
156 $page->assign('addr', $res);
157
08cce2ff 158 $res = XDB::query("SELECT date, relance FROM register_pending
e654517d 159 WHERE uid = {?}", $uid);
54f962cd 160 if (list($pending, $relance) = $res->fetchOneRow()) {
0025a0c5 161 $page->assign('pending', $pending);
162 $page->assign('relance', $relance);
10b057be 163 }
10b057be 164 }
165
d216d84a 166 function handler_broken(&$page, $uid = null)
167 {
c441b5ed 168 require_once('user.func.inc.php');
d216d84a 169 $page->changeTpl('marketing/broken.tpl');
170
171 if (is_null($uid)) {
c441b5ed 172 return PL_NOT_FOUND;
173 }
174 $forlife = get_user_forlife($uid);
175 if (!$forlife) {
176 return PL_NOT_FOUND;
177 } elseif ($forlife == S::v('forlife')) {
178 pl_redirect('emails/redirect');
d216d84a 179 }
180
0d693e2f 181 $res = Xdb::query("SELECT u.nom, u.prenom, u.promo, FIND_IN_SET('femme', u.flags) AS sexe,
ea2569eb 182 u.deces = '0000-00-00' AS alive, a.alias AS forlife, b.alias AS bestalias,
0e5ec860 183 IF(e.email IS NOT NULL, e.email, IF(FIND_IN_SET('googleapps', u.mail_storage), 'googleapps', NULL)) AS email, e.last
d216d84a 184 FROM auth_user_md5 AS u
0d693e2f 185 INNER JOIN aliases AS a ON (a.id = u.user_id AND a.type = 'a_vie')
186 INNER JOIN aliases AS b ON (b.id = u.user_id AND FIND_IN_SET('bestalias', b.flags))
187 LEFT JOIN emails AS e ON (e.flags = 'active' AND e.uid = u.user_id)
188 WHERE a.alias = {?}
189 ORDER BY e.panne_level, e.last", $forlife);
d216d84a 190 if (!$res->numRows()) {
c441b5ed 191 return PL_NOT_FOUND;
d216d84a 192 }
193 $user = $res->fetchOneAssoc();
194 $page->assign('user', $user);
195
0d693e2f 196 $email = null;
197 if (Post::has('mail')) {
198 require_once 'emails.inc.php';
199 $email = valide_email(Post::v('mail'));
200 }
201 if (Post::has('valide') && isvalid_email_redirection($email)) {
202 // security stuff
203 check_email($email, "Proposition d'une adresse surveillee pour " . $user['forlife'] . " par " . S::v('forlife'));
98daf8b6 204 $res = XDB::query("SELECT e.flags
0381e170 205 FROM emails AS e
206 INNER JOIN aliases AS a ON (a.id = e.uid)
207 WHERE e.email = {?} AND a.alias = {?}", $email, $user['forlife']);
208 $state = $res->numRows() ? $res->fetchOneCell() : null;
209 if ($state == 'panne') {
a7d35093 210 $page->trigWarning("L'adresse que tu as fournie est l'adresse actuelle de {$user['prenom']} et est en panne.");
0381e170 211 } elseif ($state == 'active') {
a7d35093 212 $page->trigWarning("L'adresse que tu as fournie est l'adresse actuelle de {$user['prenom']}");
0381e170 213 } elseif ($user['email'] && !trim(Post::v('comment'))) {
a7d35093 214 $page->trigError("Il faut que tu ajoutes un commentaire à ta proposition pour justifier le "
0d693e2f 215 ."besoin de changer la redirection de " . $user['prenom']);
216 } else {
217 require_once 'validations.inc.php';
218 $valid = new BrokenReq(S::i('uid'), $user, $email, trim(Post::v('comment')));
219 $valid->submit();
220 $page->assign('sent', true);
221 }
222 } elseif ($email) {
a7d35093 223 $page->trigError("L'adresse proposée n'est pas une adresse acceptable pour une redirection");
d216d84a 224 }
225 }
226
10b057be 227 function handler_promo(&$page, $promo = null)
228 {
10b057be 229 $page->changeTpl('marketing/promo.tpl');
230
0025a0c5 231 if (is_null($promo)) {
cab08090 232 $promo = S::v('promo');
10b057be 233 }
234 $page->assign('promo', $promo);
235
236 $sql = "SELECT u.user_id, u.nom, u.prenom, u.last_known_email, u.matricule_ax,
e654517d 237 IF(MAX(m.last) > p.relance, MAX(m.last), p.relance) AS dern_rel, p.email
10b057be 238 FROM auth_user_md5 AS u
239 LEFT JOIN register_pending AS p ON p.uid = u.user_id
240 LEFT JOIN register_marketing AS m ON m.uid = u.user_id
241 WHERE u.promo = {?} AND u.deces = 0 AND u.perms='pending'
242 GROUP BY u.user_id
243 ORDER BY nom, prenom";
08cce2ff 244 $page->assign('nonins', XDB::iterator($sql, $promo));
10b057be 245 }
246
247 function handler_public(&$page, $uid = null)
248 {
10b057be 249 $page->changeTpl('marketing/public.tpl');
250
251 if (is_null($uid)) {
252 return PL_NOT_FOUND;
253 }
254
08cce2ff 255 $res = XDB::query("SELECT nom, prenom, promo FROM auth_user_md5
10b057be 256 WHERE user_id={?} AND perms='pending'", $uid);
257
258 if (list($nom, $prenom, $promo) = $res->fetchOneRow()) {
259 $page->assign('prenom', $prenom);
260 $page->assign('nom', $nom);
261 $page->assign('promo', $promo);
262
7c8a4874 263 if (Post::has('valide')) {
10b057be 264 require_once('xorg.misc.inc.php');
5e2307dc 265 $email = trim(Post::v('mail'));
8ded5b5e 266
10b057be 267 if (!isvalid_email_redirection($email)) {
a7d35093 268 $page->trigError("Email invalide !");
10b057be 269 } else {
8ded5b5e 270 // On cherche les marketings précédents sur cette adresse
271 // email, en se restreignant au dernier mois
eaf30d86 272
8ded5b5e 273 if (Marketing::get($uid, $email, true)) {
274 $page->assign('already', true);
275 } else {
276 $page->assign('ok', true);
277 check_email($email, "Une adresse surveillée est proposée au marketing par " . S::v('forlife'));
278 $market = new Marketing($uid, $email, 'default', null, Post::v('origine'), S::v('uid'));
279 $market->add();
280 }
10b057be 281 }
282 }
283 }
10b057be 284 }
285
7c8a4874 286 function handler_week(&$page, $sorting = 'per_promo')
10b057be 287 {
10b057be 288 $page->changeTpl('marketing/this_week.tpl');
289
7c8a4874 290 $sort = $sorting == 'per_promo' ? 'promo' : 'date_ins';
10b057be 291
292 $sql = "SELECT a.alias AS forlife, u.date_ins, u.promo, u.nom, u.prenom
293 FROM auth_user_md5 AS u
294 INNER JOIN aliases AS a ON (u.user_id = a.id AND a.type='a_vie')
295 WHERE u.date_ins > ".date("Ymd000000", strtotime ('1 week ago'))."
296 ORDER BY u.$sort DESC";
08cce2ff 297 $page->assign('ins', XDB::iterator($sql));
10b057be 298 }
299
7c8a4874 300 function handler_volontaire(&$page, $promo = null)
10b057be 301 {
10b057be 302 $page->changeTpl('marketing/volontaire.tpl');
303
08cce2ff 304 $res = XDB::query(
10b057be 305 "SELECT
306 DISTINCT a.promo
307 FROM register_marketing AS m
308 INNER JOIN auth_user_md5 AS a ON a.user_id = m.uid
309 ORDER BY a.promo");
310 $page->assign('promos', $res->fetchColumn());
311
312
7c8a4874 313 if (!is_null($promo)) {
10b057be 314 $sql = "SELECT a.nom, a.prenom, a.user_id,
315 m.email, sa.alias AS forlife
316 FROM register_marketing AS m
317 INNER JOIN auth_user_md5 AS a ON a.user_id = m.uid AND a.promo = {?}
318 INNER JOIN aliases AS sa ON (m.sender = sa.id AND sa.type='a_vie')
319 ORDER BY a.nom";
08cce2ff 320 $page->assign('addr', XDB::iterator($sql, $promo));
10b057be 321 }
10b057be 322 }
323
324 function handler_relance(&$page)
325 {
10b057be 326 $page->changeTpl('marketing/relance.tpl');
327
328 if (Post::has('relancer')) {
08cce2ff 329 $res = XDB::query("SELECT COUNT(*) FROM auth_user_md5 WHERE deces=0");
10b057be 330 $nbdix = $res->fetchOneCell();
331
332 $sent = Array();
333 foreach (array_keys($_POST['relance']) as $uid) {
e654517d 334 if ($tmp = Marketing::relance($uid, $nbdix)) {
a7de4ef7 335 $sent[] = $tmp.' a été relancé';
10b057be 336 }
337 }
338 $page->assign('sent', $sent);
339 }
340
341 $sql = "SELECT r.date, r.relance, r.uid, u.promo, u.nom, u.prenom
342 FROM register_pending AS r
343 INNER JOIN auth_user_md5 AS u ON r. uid = u.user_id
344 WHERE hash!='INSCRIT'
345 ORDER BY date DESC";
08cce2ff 346 $page->assign('relance', XDB::iterator($sql));
10b057be 347 }
348}
349
a7de4ef7 350// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
10b057be 351?>