[platal.git] / modules / xnetevents.php

<?php
/***************************************************************************
 *  Copyright (C) 2003-2009 Polytechnique.org                              *
 *  http://opensource.polytechnique.org/                                   *
 *                                                                         *
 *  This program is free software; you can redistribute it and/or modify   *
 *  it under the terms of the GNU General Public License as published by   *
 *  the Free Software Foundation; either version 2 of the License, or      *
 *  (at your option) any later version.                                    *
 *                                                                         *
 *  This program is distributed in the hope that it will be useful,        *
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
 *  GNU General Public License for more details.                           *
 *                                                                         *
 *  You should have received a copy of the GNU General Public License      *
 *  along with this program; if not, write to the Free Software            *
 *  Foundation, Inc.,                                                      *
 *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
 ***************************************************************************/

define('NB_PER_PAGE', 25);

class XnetEventsModule extends PLModule
{
    function handlers()
    {
        return array(
            '%grp/events'       => $this->make_hook('events',  AUTH_MDP),
            '%grp/events/sub'   => $this->make_hook('sub',     AUTH_MDP),
            '%grp/events/csv'   => $this->make_hook('csv',     AUTH_MDP, 'user', NO_HTTPS),
            '%grp/events/ical'  => $this->make_hook('ical',    AUTH_MDP, 'user', NO_HTTPS),
            '%grp/events/edit'  => $this->make_hook('edit',    AUTH_MDP, 'groupadmin'),
            '%grp/events/admin' => $this->make_hook('admin',   AUTH_MDP, 'groupmember'),
        );
    }

    function handler_events(&$page, $archive = null)
    {
        global $globals;

        $page->changeTpl('xnetevents/index.tpl');
        $action = null;
        $archive = ($archive == 'archive' && may_update());

        if (Post::has('del')) {
            $action = 'del';
            $eid = Post::v('del');
        } elseif (Post::has('archive')) {
            $action = 'archive';
            $eid = Post::v('archive');
        } elseif (Post::has('unarchive')) {
            $action = 'unarchive';
            $eid = Post::v('unarchive');
        }

        if (!is_null($action)) {
            if (!may_update()) {
                return PL_FORBIDDEN;
            }
            S::assert_xsrf_token();

            $res = XDB::query("SELECT asso_id, short_name FROM groupex.evenements
                                WHERE eid = {?} AND asso_id = {?}",
                              $eid, $globals->asso('id'));

            $tmp = $res->fetchOneRow();
            if (!$tmp) {
                return PL_FORBIDDEN;
            }
        }

        if ($action == 'del') {
            // deletes the event mailing aliases
            if ($tmp[1]) {
                XDB::execute(
                    "DELETE FROM virtual WHERE type = 'evt' AND alias LIKE {?}",
                    $tmp[1].'-absents@%');
                XDB::execute(
                    "DELETE FROM virtual WHERE type = 'evt' AND alias LIKE {?}",
                    $tmp[1].'-participants@%');
            }

            // deletes the event items
            XDB::execute("DELETE FROM groupex.evenements_items WHERE eid = {?}", $eid);

            // deletes the event participants
            XDB::execute("DELETE FROM groupex.evenements_participants
                                    WHERE eid = {?}", $eid);

            // deletes the event
            XDB::execute("DELETE FROM groupex.evenements
                                    WHERE eid = {?} AND asso_id = {?}",
                                   $eid, $globals->asso('id'));

            // delete the requests for payments
            require_once 'validations.inc.php';
            XDB::execute("DELETE FROM requests
                                    WHERE type = 'paiements' AND data LIKE {?}",
                                   PayReq::same_event($eid, $globals->asso('id')));
            $globals->updateNbValid();
        }

        if ($action == 'archive') {
            XDB::execute("UPDATE groupex.evenements
                             SET archive = 1
                           WHERE eid = {?} AND asso_id = {?}",
                         $eid, $globals->asso('id'));
        }

        if ($action == 'unarchive') {
            XDB::execute("UPDATE groupex.evenements
                             SET archive = 0
                           WHERE eid = {?} AND asso_id = {?}",
                         $eid, $globals->asso('id'));
        }

        $page->assign('archive', $archive);
        $evenements = XDB::iterator('SELECT  e.*, LEFT(10, e.debut) AS first_day, LEFT(10, e.fin) AS last_day,
                                             IF(e.deadline_inscription,
                                                     e.deadline_inscription >= LEFT(NOW(), 10),
                                                     1) AS inscr_open,
                                             e.deadline_inscription,
                                             MAX(ep.nb) IS NOT NULL AS inscrit, MAX(ep.paid) AS paid
                                       FROM  groupex.evenements              AS e
                                  LEFT JOIN  groupex.evenements_participants AS ep ON (ep.eid = e.eid AND ep.uid = {?})
                                      WHERE  asso_id = {?} AND  archive = {?}
                                   GROUP BY  e.eid
                                   ORDER BY  inscr_open DESC, debut DESC',
                                     S::i('uid'), $globals->asso('id'), $archive ? 1 : 0);

        $evts = array();
        $undisplayed_events = 0;
        $this->load('xnetevents.inc.php');

        while ($e = $evenements->next()) {
            if (!is_member() && !may_update() && !$e['accept_nonmembre']) {
                $undisplayed_events ++;
                continue;
            }

            $e['show_participants'] = ($e['show_participants'] && (is_member() || may_update()));
            $e['moments'] = XDB::fetchAllAssoc('SELECT  titre, details, montant, ei.item_id, nb, ep.paid
                                                  FROM  groupex.evenements_items AS ei
                                             LEFT JOIN  groupex.evenements_participants AS ep
                                                           ON (ep.eid = ei.eid AND ep.item_id = ei.item_id AND ep.uid = {?})
                                                 WHERE ei.eid = {?}',
                                                S::i('uid'), $e['eid']);

            $e['topay'] = 0;
            $e['paid']  = $e['moments'][0]['paid'];
            foreach ($e['moments'] as $m) {
                $e['topay'] += $m['nb'] * $m['montant'];
            }

            $query = XDB::query(
                "SELECT montant
                   FROM {$globals->money->mpay_tprefix}transactions AS t
                 WHERE ref = {?} AND uid = {?}", $e['paiement_id'], S::v('uid'));
            $montants = $query->fetchColumn();

            foreach ($montants as $m) {
                $p = strtr(substr($m, 0, strpos($m, 'EUR')), ',', '.');
                $e['paid'] += trim($p);
            }

            make_event_date($e);

            if (Env::has('updated') && $e['eid'] == Env::i('updated')) {
                $page->assign('updated', $e);
            }
            $evts[] = $e;
        }

        $page->assign('evenements', $evts);
        $page->assign('undisplayed_events', $undisplayed_events);
    }

    function handler_sub(&$page, $eid = null)
    {
        $this->load('xnetevents.inc.php');
        $page->changeTpl('xnetevents/subscribe.tpl');

        $evt = get_event_detail($eid);
        if (is_null($evt)) {
            return PL_NOT_FOUND;
        }
        if ($evt === false) {
            global $globals, $platal;
            $url = $globals->asso('sub_url');
            if (empty($url)) {
                $url = $platal->ns . 'subscribe';
            }
            $page->kill('Cet événement est reservé aux membres du groupe ' . $globals->asso('nom') .
                        '. Pour devenir membre, rends-toi sur la page de <a href="' . $url . '">demande d\'inscripton</a>.');
        }

        if (!$evt['inscr_open']) {
            $page->kill('Les inscriptions pour cet événement sont closes');
        }
        if (!$evt['accept_nonmembre'] && !is_member() && !may_update()) {
            $page->kill('Cet événement est fermé aux non-membres du groupe');
        }

        global $globals;
        $res = XDB::query("SELECT  stamp FROM requests
                            WHERE  type = 'paiements' AND data LIKE {?}",
                           PayReq::same_event($evt['eid'], $globals->asso('id')));
        $page->assign('validation', $res->numRows());
        $page->assign('event', $evt);

        if (!Post::has('submit')) {
            return;
        } else {
            S::assert_xsrf_token();
        }

        $moments = Post::v('moment',    array());
        $pers    = Post::v('personnes', array());
        $subs    = array();

        foreach ($moments as $j => $v) {
            $subs[$j] = intval($v);

            // retreive ohter field when more than one person
            if ($subs[$j] == 2) {
                if (!isset($pers[$j]) || !is_numeric($pers[$j])
                ||  $pers[$j] < 0)
                {
                    $page->trigError('Tu dois choisir un nombre d\'invités correct !');
                    return;
                }
                $subs[$j] = 1 + $pers[$j];
            }
        }

        // impossible to unsubscribe if you already paid sthing
        if (!array_sum($subs) && $evt['paid'] != 0) {
            $page->trigError("Impossible de te désinscrire complètement ".
                            "parce que tu as fait un paiement par ".
                            "chèque ou par liquide. Contacte un ".
                            "administrateur du groupe si tu es sûr de ".
                            "ne pas venir");
            return;
        }

        // update actual inscriptions
        $updated = false;
        $total   = 0;
        $paid    = $evt['paid'] ? $evt['paid'] : 0;
        $telepaid= $evt['telepaid'] ? $evt['telepaid'] : 0;
        foreach ($subs as $j => $nb) {
            if ($nb >= 0) {
                XDB::execute(
                    "REPLACE INTO  groupex.evenements_participants
                           VALUES  ({?}, {?}, {?}, {?}, {?}, {?})",
                    $eid, S::v('uid'), $j, $nb, Env::has('notify_payment') ? 'notify_payment' : '',
                    $j == 1 ? $paid - $telepaid : 0);
                $updated = $eid;
            } else {
                XDB::execute(
                    "DELETE FROM  groupex.evenements_participants
                           WHERE  eid = {?} AND uid = {?} AND item_id = {?}",
                    $eid, S::v("uid"), $j);
                $updated = $eid;
            }
            $total += $nb;
        }
        if ($updated !== false) {
            $page->trigSuccess('Ton inscription à l\'événement a été mise à jour avec succès.');
            subscribe_lists_event($total, S::i('uid'), $evt);
        }
        $page->assign('event', get_event_detail($eid));
    }

    function handler_csv(&$page, $eid = null, $item_id = null)
    {
        $this->load('xnetevents.inc.php');

        if (!is_numeric($item_id)) {
            $item_id = null;
        }

        $evt = get_event_detail($eid, $item_id);
        if (!$evt) {
            return PL_NOT_FOUND;
        }

        header('Content-type: text/x-csv; encoding=UTF-8');
        header('Pragma: ');
        header('Cache-Control: ');

        $page->changeTpl('xnetevents/csv.tpl', NO_SKIN);

        $admin = may_update();

        $tri = (Env::v('order') == 'alpha' ? UserFilter::sortByPromo() : UserFilter::sortByName());

        $page->assign('participants',
                      get_event_participants($evt, $item_id, $tri));

        $page->assign('admin', $admin);
        $page->assign('moments', $evt['moments']);
        $page->assign('money', $evt['money']);
        $page->assign('telepayment', $evt['paiement_id']);
        $page->assign('tout', !Env::v('item_id', false));
    }

    function handler_ical(&$page, $eid = null)
    {
        global $globals;

        $this->load('xnetevents.inc.php');
        $evt = get_event_detail($eid);
        if (!$evt) {
            return PL_FORBIDDEN;
        }
        $evt['debut'] = preg_replace('/(\d+)-(\d+)-(\d+) (\d+):(\d+):(\d+)/', "\\1\\2\\3T\\4\\5\\6", $evt['debut']);
        $evt['fin'] = preg_replace('/(\d+)-(\d+)-(\d+) (\d+):(\d+):(\d+)/', "\\1\\2\\3T\\4\\5\\6", $evt['fin']);

        foreach ($evt['moments'] as $m) {
            $evt['descriptif'] .= "\n\n** " . $m['titre'] . " **\n" . $m['details'];
        }

        $page->changeTpl('xnetevents/calendar.tpl', NO_SKIN);

        require_once('ical.inc.php');
        $page->assign('asso', $globals->asso());
        $page->assign('timestamp', time());
        $page->assign('admin', may_update());

        if (may_update()) {
            $page->assign('participants', get_event_participants($evt, null, UserFilter::sortByPromo()));
        }
        $page->register_function('display_ical', 'display_ical');
        $page->assign_by_ref('e', $evt);

        header('Content-Type: text/calendar; charset=utf-8');
    }

    function handler_edit(&$page, $eid = null)
    {
        global $globals;

        // get eid if the the given one is a short name
        if (!is_null($eid) && !is_numeric($eid)) {
            $res = XDB::query("SELECT eid
                                 FROM groupex.evenements
                                WHERE asso_id = {?} AND short_name = {?}",
                              $globals->asso('id'), $eid);
            if ($res->numRows()) {
                $eid = (int)$res->fetchOneCell();
            }
        }

        // check the event is in our group
        if (!is_null($eid)) {
            $res = XDB::query("SELECT short_name
                                 FROM groupex.evenements
                                WHERE eid = {?} AND asso_id = {?}",
                              $eid, $globals->asso('id'));
            if ($res->numRows()) {
                $infos = $res->fetchOneAssoc();
            } else {
                return PL_FORBIDDEN;
            }
        }

        $page->changeTpl('xnetevents/edit.tpl');

        $moments    = range(1, 4);
        $error      = false;
        $page->assign('moments', $moments);

        if (Post::v('intitule')) {
            S::assert_xsrf_token();

            $this->load('xnetevents.inc.php');
            $short_name = event_change_shortname($page, $eid,
                                                 $infos['short_name'],
                                                 Env::v('short_name', ''));
            if ($short_name != Env::v('short_name')) {
                $error = true;
            }
            $evt = array(
                'eid'              => $eid,
                'asso_id'          => $globals->asso('id'),
                'paiement_id'      => Post::v('paiement_id') > 0 ? Post::v('paiement_id') : null,
                'debut'            => Post::v('deb_Year').'-'.Post::v('deb_Month')
                                      .'-'.Post::v('deb_Day').' '.Post::v('deb_Hour')
                                      .':'.Post::v('deb_Minute').':00',
                'fin'              => Post::v('fin_Year').'-'.Post::v('fin_Month')
                                      .'-'.Post::v('fin_Day').' '.Post::v('fin_Hour')
                                      .':'.Post::v('fin_Minute').':00',
                'short_name'       => $short_name,
            );

            $trivial = array('intitule', 'descriptif', 'noinvite',
                             'show_participants', 'accept_nonmembre', 'organisateur_uid');
            foreach ($trivial as $k) {
                $evt[$k] = Post::v($k);
            }
            if (!$eid) {
                $evt['organisateur_uid'] = S::v('uid');
            }

            if (Post::v('deadline')) {
                $evt['deadline_inscription'] = Post::v('inscr_Year').'-'
                                             . Post::v('inscr_Month').'-'
                                             . Post::v('inscr_Day');
            } else {
                $evt['deadline_inscription'] = null;
            }

            // Store the modifications in the database
            XDB::execute('REPLACE INTO groupex.evenements
                SET eid={?}, asso_id={?}, organisateur_uid={?}, intitule={?},
                    paiement_id = {?}, descriptif = {?}, debut = {?},
                    fin = {?}, show_participants = {?}, short_name = {?},
                    deadline_inscription = {?}, noinvite = {?},
                    accept_nonmembre = {?}',
                    $evt['eid'], $evt['asso_id'], $evt['organisateur_uid'],
                    $evt['intitule'], $evt['paiement_id'], $evt['descriptif'],
                    $evt['debut'], $evt['fin'], $evt['show_participants'],
                    $evt['short_name'], $evt['deadline_inscription'],
                    $evt['noinvite'], $evt['accept_nonmembre']);

            // if new event, get its id
            if (!$eid) {
                $eid = XDB::insertId();
            }

            $nb_moments   = 0;
            $money_defaut = 0;

            foreach ($moments as $i) {
                if (Post::v('titre'.$i)) {
                    $nb_moments++;

                    $montant = strtr(Post::v('montant'.$i), ',', '.');
                    $money_defaut += (float)$montant;
                    XDB::execute("
                        REPLACE INTO groupex.evenements_items
                        VALUES ({?}, {?}, {?}, {?}, {?})",
                        $eid, $i, Post::v('titre'.$i),
                        Post::v('details'.$i), $montant);
                } else {
                    XDB::execute("DELETE FROM groupex.evenements_items
                                            WHERE eid = {?} AND item_id = {?}", $eid, $i);
                }
            }
            // request for a new payment
            if (Post::v('paiement_id') == -1 && $money_defaut >= 0) {
                require_once 'validations.inc.php';
                $p = new PayReq(S::user(),
                                Post::v('intitule')." - ".$globals->asso('nom'),
                                Post::v('site'), $money_defaut,
                                Post::v('confirmation'), 0, 999,
                                $globals->asso('id'), $eid);
                if ($p->accept()) {
                    $p->submit();
                } else {
                    $page->assign('paiement_message', Post::v('confirmation'));
                    $page->assign('paiement_site', Post::v('site'));
                    $error = true;
                }
            }

            // events with no sub-event: add a sub-event with no name
            if ($nb_moments == 0) {
                XDB::execute("INSERT INTO groupex.evenements_items
                                   VALUES ({?}, {?}, '', '', 0)", $eid, 1);
            }

            if (!$error) {
                pl_redirect('events');
            }
        }

        // get a list of all the payment for this asso
        $res = XDB::iterator("SELECT id, text
                                FROM {$globals->money->mpay_tprefix}paiements
                               WHERE asso_id = {?}", $globals->asso('id'));
        $paiements = array();
        while ($a = $res->next()) $paiements[$a['id']] = $a['text']; {
            $page->assign('paiements', $paiements);
        }

        // when modifying an old event retreive the old datas
        if ($eid) {
            $res = XDB::query(
                    "SELECT	eid, intitule, descriptif, debut, fin, organisateur_uid,
                            show_participants, paiement_id, short_name,
                            deadline_inscription, noinvite, accept_nonmembre
                       FROM	groupex.evenements
                      WHERE eid = {?}", $eid);
            $evt = $res->fetchOneAssoc();
            // find out if there is already a request for a payment for this event
            require_once 'validations.inc.php';
            $res = XDB::query("SELECT stamp FROM requests
                                WHERE type = 'paiements' AND data LIKE {?}",
                               PayReq::same_event($eid, $globals->asso('id')));
            $stamp = $res->fetchOneCell();
            if ($stamp) {
                $evt['paiement_id']  = -2;
                $evt['paiement_req'] = $stamp;
            }
            $page->assign('evt', $evt);
            // get all the different moments infos
            $res = XDB::iterator(
                    "SELECT item_id, titre, details, montant
                       FROM groupex.evenements_items AS ei
                 INNER JOIN groupex.evenements AS e ON(e.eid = ei.eid)
                      WHERE e.eid = {?}
                   ORDER BY item_id", $eid);
            $items = array();
            while ($item = $res->next()) {
                $items[$item['item_id']] = $item;
            }
            $page->assign('items', $items);
        }
        $page->assign('url_ref', $eid);
    }

    function handler_admin(&$page, $eid = null, $item_id = null)
    {
        global $globals;

        $this->load('xnetevents.inc.php');

        $evt = get_event_detail($eid, $item_id);
        if (!$evt) {
            return PL_NOT_FOUND;
        }

        $page->changeTpl('xnetevents/admin.tpl');
        if (!$evt['show_participants'] && !may_update()) {
            return PL_FORBIDDEN;
        }

        if (may_update() && Post::v('adm')) {
            S::assert_xsrf_token();

            $member = get_infos(Post::v('mail'));
            if (!$member) {
                $page->trigError("Membre introuvable");
            }

            // change the price paid by a participant
            if (Env::v('adm') == 'prix' && $member) {
                XDB::execute("UPDATE groupex.evenements_participants
                                 SET paid = IF(paid + {?} > 0, paid + {?}, 0)
                               WHERE uid = {?} AND eid = {?} AND item_id = 1",
                        strtr(Env::v('montant'), ',', '.'),
                        strtr(Env::v('montant'), ',', '.'),
                        $member['uid'], $evt['eid']);
            }

            // change the number of personns coming with a participant
            if (Env::v('adm') == 'nbs' && $member) {
                $res = XDB::query("SELECT paid
                                     FROM groupex.evenements_participants
                                    WHERE uid = {?} AND eid = {?}",
                                  $member['uid'], $evt['eid']);

                $paid = intval($res->fetchOneCell());
                $nbs  = Post::v('nb', array());

                foreach ($nbs as $id => $nb) {
                    $nb = max(intval($nb), 0);
                    XDB::execute("REPLACE INTO groupex.evenements_participants
                                        VALUES ({?}, {?}, {?}, {?}, {?}, {?})",
                                  $evt['eid'], $member['uid'], $id, $nb, '', $id == 1 ? $paid : 0);
                }

                $res = XDB::query("SELECT COUNT(uid) AS cnt, SUM(nb) AS nb
                                     FROM groupex.evenements_participants
                                    WHERE uid = {?} AND eid = {?}
                                 GROUP BY uid",
                                            $member['uid'], $evt['eid']);
                $u = $res->fetchOneAssoc();
                $u = $u['cnt'] ? $u['nb'] : null;
                subscribe_lists_event($u, $member['uid'], $evt);
            }

            $evt = get_event_detail($eid, $item_id);
        }

        $page->assign_by_ref('evt', $evt);
        $page->assign('tout', is_null($item_id));

        if (count($evt['moments'])) {
            $page->assign('moments', $evt['moments']);
        }

        $page->assign('alphabet', array());
        if ($evt['paiement_id']) {
            $infos = User::getBulkUsersWithUIDs(
                            XDB::fetchAllAssoc('SELECT  t.uid, t.montant
                                                  FROM  ' . $globals->money->mpay_tprefix . 'transactions AS t
                                             LEFT JOIN  groupex.evenements_participants AS ep ON(ep.uid = t.uid AND ep.eid = {?})
                                                 WHERE  t.ref = {?} AND ep.uid IS NULL',
                                               $evt['eid'], $evt['paiement_id']),
                            'uid', 'user');
            $page->assign('oublis', count($infos));
            $page->assign('oubliinscription', $infos);
        }

        $absents = User::getBulkUsersFromDB('SELECT  p.uid
                                               FROM  groupex.evenements_participants AS p
                                          LEFT JOIN  groupex.evenements_participants AS p2 ON (p2.uid = p.uid
                                                                                               AND p2.eid = p.eid
                                                                                               AND p2.nb != 0)
                                              WHERE  p.eid = {?} AND p2.eid IS NULL
                                           GROUP BY  p.uid', $evt['eid']);

        $ofs   = Env::i('offset');
        $tot   = (Env::v('initiale') ? $tot : $nb_tot);
        $nbp   = ceil($tot / NB_PER_PAGE);
        if ($nbp > 1) {
            $links = array();
            if ($ofs) {
                $links['précédent'] = $ofs - 1;
            }
            for ($i = 1 ; $i <= $nbp; $i++) {
                $links[(string)$i] = $i - 1;
            }
            if ($ofs < $nbp) {
                $links['suivant'] = $ofs+1;
            }
            $page->assign('links', $links);
        }

        $page->assign('absents', $absents);
        $page->assign('participants',
                      get_event_participants($evt, $item_id, UserFilter::sortByName(),
                                             NB_PER_PAGE, $ofs * NB_PER_PAGE));
    }
}

// vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
?>