modules/axletter.php

   1 <?php
   2 /***************************************************************************
   3  *  Copyright (C) 2003-2010 Polytechnique.org                              *
   4  *  http://opensource.polytechnique.org/                                   *
   5  *                                                                         *
   6  *  This program is free software; you can redistribute it and/or modify   *
   7  *  it under the terms of the GNU General Public License as published by   *
   8  *  the Free Software Foundation; either version 2 of the License, or      *
   9  *  (at your option) any later version.                                    *
  10  *                                                                         *
  11  *  This program is distributed in the hope that it will be useful,        *
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of         *
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the          *
  14  *  GNU General Public License for more details.                           *
  15  *                                                                         *
  16  *  You should have received a copy of the GNU General Public License      *
  17  *  along with this program; if not, write to the Free Software            *
  18  *  Foundation, Inc.,                                                      *
  19  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA                *
  20  ***************************************************************************/
  21
  22 class AXLetterModule extends PLModule
  23 {
  24     function handlers()
  25     {
  26         return array(
  27             'ax'             => $this->make_hook('index',  AUTH_COOKIE),
  28             'ax/out'         => $this->make_hook('out',    AUTH_PUBLIC),
  29             'ax/show'        => $this->make_hook('show',   AUTH_COOKIE),
  30             'ax/edit'        => $this->make_hook('submit', AUTH_MDP),
  31             'ax/edit/cancel' => $this->make_hook('cancel', AUTH_MDP),
  32             'ax/edit/valid'  => $this->make_hook('valid',  AUTH_MDP),
  33             'admin/axletter' => $this->make_hook('admin',  AUTH_MDP, 'admin'),
  34         );
  35     }
  36
  37     function handler_out(&$page, $hash = null)
  38     {
  39         if (!$hash) {
  40             if (!S::logged()) {
  41                 return PL_DO_AUTH;
  42             } else {
  43                 return $this->handler_index($page, 'out');
  44             }
  45         }
  46         $this->load('axletter.inc.php');
  47         $page->changeTpl('axletter/unsubscribe.tpl');
  48         $page->assign('success', AXLetter::unsubscribe($hash, true));
  49     }
  50
  51     function handler_index(&$page, $action = null)
  52     {
  53         $this->load('axletter.inc.php');
  54
  55         $page->changeTpl('axletter/index.tpl');
  56         $page->setTitle('Envois de l\'AX');
  57
  58         switch ($action) {
  59           case 'in':  AXLetter::subscribe(); break;
  60           case 'out': AXLetter::unsubscribe(); break;
  61         }
  62
  63         $perm = AXLetter::hasPerms();
  64         if ($perm) {
  65             $res = XDB::query("SELECT * FROM axletter_ins");
  66             $page->assign('count', $res->numRows());
  67             $page->assign('new', AXLetter::awaiting());
  68         }
  69         $page->assign('axs', AXLetter::subscriptionState());
  70         $page->assign('ax_list', AXLetter::listSent());
  71         $page->assign('ax_rights', $perm);
  72     }
  73
  74     function handler_submit(&$page, $action = null)
  75     {
  76         $this->load('axletter.inc.php');
  77         if (!AXLetter::hasPerms()) {
  78             return PL_FORBIDDEN;
  79         }
  80
  81         $page->changeTpl('axletter/edit.tpl');
  82
  83         $saved      = Post::i('saved');
  84         $new        = false;
  85         $id         = Post::i('id');
  86         $short_name = trim(Post::v('short_name'));
  87         $subject    = trim(Post::v('subject'));
  88         $title      = trim(Post::v('title'));
  89         $body       = rtrim(Post::v('body'));
  90         $signature  = trim(Post::v('signature'));
  91         $promo_min  = Post::i('promo_min');
  92         $promo_max  = Post::i('promo_max');
  93         $subset_to  = preg_split("/[ ,;\:\n\r]+/", Post::v('subset_to'), -1, PREG_SPLIT_NO_EMPTY);
  94         $subset     = (count($subset_to) > 0);
  95         $subset_rm  = Post::b('subset_rm');
  96         $echeance   = Post::has('echeance_date') ?
  97               preg_replace('/^(\d\d\d\d)(\d\d)(\d\d)$/', '\1-\2-\3', Post::v('echeance_date')) . ' ' . Post::v('echeance_time')
  98             : Post::v('echeance');
  99         $echeance_date = Post::v('echeance_date');
 100         $echeance_time = Post::v('echeance_time');
 101
 102         if (!$id) {
 103             $res = XDB::query("SELECT * FROM axletter WHERE FIND_IN_SET('new', bits)");
 104             if ($res->numRows()) {
 105                 extract($res->fetchOneAssoc(), EXTR_OVERWRITE);
 106                 $subset_to = ($subset ? explode("\n", $subset) : null);
 107                 $subset = (count($subset_to) > 0);
 108                 $saved = true;
 109             } else  {
 110                 XDB::execute("INSERT INTO axletter SET id = NULL");
 111                 $id  = XDB::insertId();
 112             }
 113             if (!$echeance || $echeance == '0000-00-00 00:00:00') {
 114                 $saved = false;
 115                 $new   = true;
 116             }
 117         } elseif (Post::has('valid')) {
 118             S::assert_xsrf_token();
 119
 120             if (!$subject && $title) {
 121                 $subject = $title;
 122             }
 123             if (!$title && $subject) {
 124                 $title = $subject;
 125             }
 126             if (!$subject || !$title || !$body) {
 127                 $page->trigError("L'article doit avoir un sujet et un contenu");
 128                 Post::kill('valid');
 129             }
 130             if (($promo_min > $promo_max && $promo_max != 0)||
 131                 ($promo_min != 0 && ($promo_min <= 1900 || $promo_min >= 2020)) ||
 132                 ($promo_max != 0 && ($promo_max <= 1900 || $promo_max >= 2020)))
 133             {
 134                 $page->trigError("L'intervalle de promotions n'est pas valide");
 135                 Post::kill('valid');
 136             }
 137             if (empty($short_name)) {
 138                 $page->trigError("L'annonce doit avoir un nom raccourci pour simplifier la navigation dans les archives");
 139                 Post::kill('valid');
 140             } elseif (!preg_match('/^[a-z][-a-z0-9]*[a-z0-9]$/', $short_name)) {
 141                 $page->trigError("Le nom raccourci n'est pas valide, il doit comporter au moins 2 caractères et n'être composé "
 142                           . "que de chiffres, lettres et tirets");
 143                 Post::kill('valid');
 144             } elseif ($short_name != Post::v('old_short_name')) {
 145                 $res = XDB::query("SELECT id FROM axletter WHERE short_name = {?}", $short_name);
 146                 if ($res->numRows() && $res->fetchOneCell() != $id) {
 147                     $page->trigError("Le nom $short_name est déjà utilisé, merci d'en choisir un autre");
 148                     $short_name = Post::v('old_short_name');
 149                     if (empty($short_name)) {
 150                         Post::kill('valid');
 151                     }
 152                 }
 153             }
 154
 155             switch (@Post::v('valid')) {
 156               case 'Vérifier':
 157                 // Same as 'preview', but performs a test of all provided emails
 158                 if ($subset) {
 159                     require_once 'emails.inc.php';
 160                     $ids = ids_from_mails($subset_to);
 161                     $has_error = false;
 162                     foreach ($subset_to as $e) {
 163                         if (!array_key_exists($e, $ids)) {
 164                             if (!$has_error) {
 165                                 $page->trigError("Emails inconnus :");
 166                                 $has_error = true;
 167                             }
 168                             $page->trigError($e);
 169                         }
 170                     }
 171                 }
 172                 // XXX : no break here, since Vérifier is a subcase of Aperçu.
 173               case 'Aperçu':
 174                 $this->load('axletter.inc.php');
 175                 $al = new AXLetter(array($id, $short_name, $subject, $title, $body, $signature,
 176                                          $promo_min, $promo_max, $subset, $subset_rm, $echeance, 0, 'new'));
 177                 $al->toHtml($page, S::v('prenom'), S::v('nom'), S::v('femme'));
 178                 break;
 179
 180               case 'Confirmer':
 181                 XDB::execute("REPLACE INTO  axletter
 182                                        SET  id = {?}, short_name = {?}, subject = {?}, title = {?}, body = {?},
 183                                             signature = {?}, promo_min = {?}, promo_max = {?}, echeance = {?}, subset = {?}, subset_rm = {?}",
 184                              $id, $short_name, $subject, $title, $body, $signature, $promo_min, $promo_max, $echeance, $subset ? implode("\n", $subset_to) : null, $subset_rm);
 185                 if (!$saved) {
 186                     global $globals;
 187                     $mailer = new PlMailer();
 188                     $mailer->setFrom("support@" . $globals->mail->domain);
 189                     $mailer->setSubject("Un nouveau projet d'email de l'AX vient d'être proposé");
 190                     $mailer->setTxtBody("Un nouvel email vient d'être rédigé en prévision d'un envoi prochain. Vous pouvez "
 191                                       . "le modifier jusqu'à ce qu'il soit verrouillé pour l'envoi\n\n"
 192                                       . "Le sujet de l'email : $subject\n"
 193                                       . "L'échéance d'envoi est fixée à $echeance.\n"
 194                                       . "L'email pourra néanmoins partir avant cette échéance si un administrateur de "
 195                                       . "Polytechnique.org le valide.\n\n"
 196                                       . "Pour modifier, valider ou annuler l'email :\n"
 197                                       . "https://www.polytechnique.org/ax/edit\n"
 198                                       . "-- \n"
 199                                       . "Association Polytechnique.org\n");
 200                     $users = User::getBulkUsersWithUIDs(XDB::fetchColumn('SELECT  uid
 201                                                                             FROM  axletter_rights'));
 202                     foreach ($users as $user) {
 203                         $mailer->addTo($user);
 204                     }
 205                     $mailer->send();
 206                 }
 207                 $saved = true;
 208                 $echeance_date = null;
 209                 $echeance_time = null;
 210                 pl_redirect('ax');
 211                 break;
 212             }
 213         }
 214         $page->assign('id', $id);
 215         $page->assign('short_name', $short_name);
 216         $page->assign('subject', $subject);
 217         $page->assign('title', $title);
 218         $page->assign('body', $body);
 219         $page->assign('signature', $signature);
 220         $page->assign('promo_min', $promo_min);
 221         $page->assign('promo_max', $promo_max);
 222         $page->assign('subset_to', implode("\n", $subset_to));
 223         $page->assign('subset', $subset);
 224         $page->assign('subset_rm', $subset_rm);
 225         $page->assign('echeance', $echeance);
 226         $page->assign('echeance_date', $echeance_date);
 227         $page->assign('echeance_time', $echeance_time);
 228         $page->assign('saved', $saved);
 229         $page->assign('new', $new);
 230         $page->assign('is_xorg', S::admin());
 231
 232         if (!$saved) {
 233             $select = '';
 234             for ($i = 0 ; $i < 24 ; $i++) {
 235                 $stamp = sprintf('%02d:00:00', $i);
 236                 if ($stamp == $echeance_time) {
 237                     $sel = ' selected="selected"';
 238                 } else {
 239                     $sel = '';
 240                 }
 241                 $select .= "<option value=\"$stamp\"$sel>{$i}h</option>\n";
 242             }
 243             $page->assign('echeance_time', $select);
 244         }
 245     }
 246
 247     function handler_cancel(&$page, $force = null)
 248     {
 249         $this->load('axletter.inc.php');
 250         if (!AXLetter::hasPerms() || !S::has_xsrf_token()) {
 251             return PL_FORBIDDEN;
 252         }
 253
 254         $al = AXLetter::awaiting();
 255         if (!$al) {
 256             $page->kill("Aucune lettre en attente");
 257             return;
 258         }
 259         if (!$al->invalid()) {
 260             $page->kill("Une erreur est survenue lors de l'annulation de l'envoi");
 261             return;
 262         }
 263
 264         $page->killSuccess("L'envoi de l'annonce {$al->title()} est annulé.");
 265     }
 266
 267     function handler_valid(&$page, $force = null)
 268     {
 269         $this->load('axletter.inc.php');
 270         if (!AXLetter::hasPerms() || !S::has_xsrf_token()) {
 271             return PL_FORBIDDEN;
 272         }
 273
 274         $al = AXLetter::awaiting();
 275         if (!$al) {
 276             $page->kill("Aucune lettre en attente");
 277             return;
 278         }
 279         if (!$al->valid()) {
 280             $page->kill("Une erreur est survenue lors de la validation de l'envoi");
 281             return;
 282         }
 283
 284         $page->killSuccess("L'envoi de l'annonce aura lieu dans l'heure qui vient.");
 285     }
 286
 287     function handler_show(&$page, $nid = 'last')
 288     {
 289         $this->load('axletter.inc.php');
 290         $page->changeTpl('axletter/show.tpl');
 291
 292         try {
 293             $nl = new AXLetter($nid);
 294             $user =& S::user();
 295             if (Get::has('text')) {
 296                 $nl->toText($page, $user);
 297             } else {
 298                 $nl->toHtml($page, $user);
 299             }
 300             if (Post::has('send')) {
 301                 $nl->sendTo($user);
 302             }
 303         } catch (MailNotFound $e) {
 304             return PL_NOT_FOUND;
 305         }
 306     }
 307
 308     function handler_admin(&$page, $action = null, $uid = null)
 309     {
 310         $this->load('axletter.inc.php');
 311         if (Post::has('action')) {
 312             $action = Post::v('action');
 313             $uid    = Post::v('uid');
 314         }
 315         if ($uid) {
 316             S::assert_xsrf_token();
 317
 318             $uids   = preg_split('/ *[,;\: ] */', $uid);
 319             foreach ($uids as $uid) {
 320                 switch ($action) {
 321                   case 'add':
 322                     $res = AXLetter::grantPerms($uid);
 323                     break;
 324                   case 'del';
 325                     $res = AXLetter::revokePerms($uid);
 326                     break;
 327                 }
 328                 if (!$res) {
 329                     $page->trigError("Personne ne correspond à l'identifiant '$uid'");
 330                 }
 331             }
 332         }
 333
 334         $page->changeTpl('axletter/admin.tpl');
 335         $page->assign('admins', User::getBulkUsersWithUIDs(XDB::fetchColumn('SELECT  uid
 336                                                                                FROM  axletter_rights')));
 337
 338         $importer = new CSVImporter('axletter_ins');
 339         $importer->registerFunction('uid', 'email vers Id X.org', array($this, 'idFromMail'));
 340         $importer->forceValue('hash', array($this, 'createHash'));
 341         $importer->apply($page, "admin/axletter", array('uid', 'email', 'prenom', 'nom', 'promo', 'flag', 'hash'));
 342     }
 343
 344     function idFromMail($line, $key, $relation = null)
 345     {
 346         static $field;
 347         global $globals;
 348         if (!isset($field)) {
 349             $field = array('email', 'mail', 'login', 'bestalias', 'forlife', 'flag');
 350             foreach ($field as $fld) {
 351                 if (isset($line[$fld])) {
 352                     $field = $fld;
 353                     break;
 354                 }
 355             }
 356         }
 357         $uf = new UserFilter(new UFC_Email($line[$field]));
 358         $id = $uf->getUIDs();
 359         return count($id) == 1 ? $id[0] : 0;
 360     }
 361
 362     function createHash($line, $key, $relation)
 363     {
 364         $hash = implode(time(), $line) . rand();
 365         $hash = md5($hash);
 366         return $hash;
 367     }
 368 }
 369
 370 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
 371 ?>