Bug 15128 - Add ability to limit patrons open purchase suggestions
[koha.git] / opac / opac-suggestions.pl
1 #!/usr/bin/perl
2
3 # This file is part of Koha.
4 #
5 # Koha is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU General Public License as published by
7 # the Free Software Foundation; either version 3 of the License, or
8 # (at your option) any later version.
9 #
10 # Koha is distributed in the hope that it will be useful, but
11 # WITHOUT ANY WARRANTY; without even the implied warranty of
12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 # GNU General Public License for more details.
14 #
15 # You should have received a copy of the GNU General Public License
16 # along with Koha; if not, see <http://www.gnu.org/licenses>.
17
18 use strict;
19 use warnings;
20
21 use CGI qw ( -utf8 );
22 use Encode qw( encode );
23 use C4::Auth;    # get_template_and_user
24 use C4::Members;
25 use C4::Branch;
26 use C4::Koha;
27 use C4::Output;
28 use C4::Suggestions;
29 use C4::Koha;
30 use C4::Scrubber;
31 use Koha::Libraries;
32
33 use Koha::DateUtils qw( dt_from_string );
34
35 my $input           = new CGI;
36 my $op              = $input->param('op');
37 my $suggestion      = $input->Vars;
38 my $negcaptcha      = $input->param('negcap');
39 my $suggested_by_anyone = $input->param('suggested_by_anyone') || 0;
40
41 # If a spambot accidentally populates the 'negcap' field in the sugesstions form, then silently skip and return.
42 if ($negcaptcha ) {
43     print $input->redirect("/cgi-bin/koha/opac-suggestions.pl");
44     exit;
45 } else {
46     # don't pass 'negcap' column to DB, else DBI::Class will error
47     # DBIx::Class::Row::store_column(): No such column 'negcap' on Koha::Schema::Result::Suggestion at  Koha/C4/Suggestions.pm
48     delete $suggestion->{negcap};
49 }
50
51 #If suggestions are turned off we redirect to 404 error. This will also redirect guest suggestions
52 if ( ! C4::Context->preference('suggestion') ) {
53     print $input->redirect("/cgi-bin/koha/errors/404.pl");
54     exit;
55 }
56
57 delete $suggestion->{$_} foreach qw<op suggested_by_anyone>;
58 $op = 'else' unless $op;
59
60 my ( $template, $borrowernumber, $cookie, @messages );
61 my $deleted = $input->param('deleted');
62 my $submitted = $input->param('submitted');
63
64 if ( C4::Context->preference("AnonSuggestions") or ( C4::Context->preference("OPACViewOthersSuggestions") and $op eq 'else' ) ) {
65     ( $template, $borrowernumber, $cookie ) = get_template_and_user(
66         {
67             template_name   => "opac-suggestions.tt",
68             query           => $input,
69             type            => "opac",
70             authnotrequired => ( C4::Context->preference("OpacPublic") ? 1 : 0 ),
71         }
72     );
73 }
74 else {
75     ( $template, $borrowernumber, $cookie ) = get_template_and_user(
76         {
77             template_name   => "opac-suggestions.tt",
78             query           => $input,
79             type            => "opac",
80             authnotrequired => 0,
81         }
82     );
83 }
84
85 if ( $op eq 'else' ) {
86     if ( C4::Context->preference("OPACViewOthersSuggestions") ) {
87         if ( $borrowernumber ) {
88             # A logged in user is able to see suggestions from others
89             $suggestion->{suggestedby} = $suggested_by_anyone
90                 ? undef
91                 : $borrowernumber;
92         }
93         else {
94             # Non logged in user is able to see all suggestions
95             $suggestion->{suggestedby} = undef;
96         }
97     }
98     else {
99         if ( $borrowernumber ) {
100             $suggestion->{suggestedby} = $borrowernumber;
101         }
102         else {
103             $suggestion->{suggestedby} = -1;
104         }
105     }
106 } else {
107     if ( $borrowernumber ) {
108         $suggestion->{suggestedby} = $borrowernumber;
109     }
110     else {
111         $suggestion->{suggestedby} = C4::Context->preference("AnonymousPatron");
112     }
113 }
114
115 my $suggestions_loop =
116   &SearchSuggestion( $suggestion);
117 if ( $op eq "add_confirm" ) {
118         my $count_own_suggestions = $borrowernumber ?  &SearchSuggestion( { suggestedby => $borrowernumber}) : 0;
119     if( @$count_own_suggestions >= C4::Context->preference("MaxOpenSuggestions") ){
120         push @messages, { type => 'error', code => 'too_many'};
121     }
122         elsif (@$suggestions_loop>=1){
123                 #some suggestion are answering the request Donot Add
124         for my $suggestion ( @$suggestions_loop ) {
125             push @messages, { type => 'error', code => 'already_exists', id => $suggestion->{suggestionid} };
126             last;
127         }
128         }
129         else {
130                 my $scrubber = C4::Scrubber->new();
131                 foreach my $suggest (keys %$suggestion){
132             # Don't know why the encode is needed for Perl v5.10 here
133             $suggestion->{$suggest} = Encode::encode("utf8", $scrubber->scrub($suggestion->{$suggest}) );
134                 }
135         $suggestion->{suggesteddate} = dt_from_string;
136         $suggestion->{branchcode} = $input->param('branchcode') || C4::Context->userenv->{"branch"};
137
138                 &NewSuggestion($suggestion);
139                 # empty fields, to avoid filter in "SearchSuggestion"
140                 $$suggestion{$_}='' foreach qw<title author publishercode copyrightdate place collectiontitle isbn STATUS>;
141                 $suggestions_loop =
142                    &SearchSuggestion( $suggestion );
143         push @messages, { type => 'info', code => 'success_on_inserted' };
144         }
145     $op = 'else';
146 }
147
148 if ( $op eq "delete_confirm" ) {
149     my @delete_field = $input->multi_param("delete_field");
150     foreach my $delete_field (@delete_field) {
151         &DelSuggestion( $borrowernumber, $delete_field );
152     }
153     $op = 'else';
154     print $input->redirect("/cgi-bin/koha/opac-suggestions.pl?op=else");
155     exit;
156 }
157
158 map{
159     my $s = $_;
160     my $library = Koha::Libraries->find($s->{branchcodesuggestedby});
161     $library ? $s->{branchcodesuggestedby} = $library->branchname : ()
162 } @$suggestions_loop;
163
164 my $own_suggestions_count = 0;
165 foreach my $suggestion(@$suggestions_loop) {
166     if($suggestion->{'suggestedby'} == $borrowernumber) {
167         $suggestion->{'showcheckbox'} = $borrowernumber;
168         if ( $suggestion->{'STATUS'} eq 'ASKED' ) {
169             $own_suggestions_count++;
170         }
171     } else {
172         $suggestion->{'showcheckbox'} = 0;
173     }
174     if($suggestion->{'patronreason'}){
175         $suggestion->{'patronreason'} = GetKohaAuthorisedValueLib("OPAC_SUG",$suggestion->{'patronreason'},1);
176     }
177 }
178
179 my $patron_reason_loop = GetAuthorisedValues("OPAC_SUG");
180
181 # Is the person allowed to choose their branch
182 if ( C4::Context->preference("AllowPurchaseSuggestionBranchChoice") ) {
183     my ( $borr ) = GetMemberDetails( $borrowernumber );
184
185 # pass the pickup branch along....
186     my $userbranch = '';
187     if (C4::Context->userenv && C4::Context->userenv->{'branch'}) {
188         $userbranch = C4::Context->userenv->{'branch'};
189     }
190     my $branchcode = $input->param('branchcode') || $borr->{'branchcode'} || $userbranch || '' ;
191
192 # make branch selection options...
193     my $branchloop = GetBranchesLoop($branchcode);
194     $template->param( branchloop => $branchloop );
195 }
196
197 $template->param(
198         %$suggestion,
199     suggestions_loop => $suggestions_loop,
200     patron_reason_loop => $patron_reason_loop,
201     "op_$op"         => 1,
202     $op => 1,
203     messages => \@messages,
204     suggestionsview => 1,
205     suggested_by_anyone => $suggested_by_anyone,
206     own_suggestions_count => $own_suggestions_count,
207 );
208
209 output_html_with_http_headers $input, $cookie, $template->output;
210