Bug 20434: Update UNIMARC framework - auth (PUB)
[koha.git] / opac / opac-suggestions.pl
1 #!/usr/bin/perl
2
3 # This file is part of Koha.
4 #
5 # Koha is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU General Public License as published by
7 # the Free Software Foundation; either version 3 of the License, or
8 # (at your option) any later version.
9 #
10 # Koha is distributed in the hope that it will be useful, but
11 # WITHOUT ANY WARRANTY; without even the implied warranty of
12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 # GNU General Public License for more details.
14 #
15 # You should have received a copy of the GNU General Public License
16 # along with Koha; if not, see <http://www.gnu.org/licenses>.
17
18 use Modern::Perl;
19
20
21 use CGI qw ( -utf8 );
22 use Encode qw( encode );
23 use C4::Auth;    # get_template_and_user
24 use C4::Members;
25 use C4::Koha;
26 use C4::Output;
27 use C4::Suggestions;
28 use C4::Koha;
29 use C4::Scrubber;
30
31 use Koha::AuthorisedValues;
32 use Koha::Libraries;
33 use Koha::Patrons;
34
35 use Koha::DateUtils qw( dt_from_string );
36
37 my $input           = new CGI;
38 my $op              = $input->param('op');
39 my $suggestion      = $input->Vars;
40 my $negcaptcha      = $input->param('negcap');
41 my $suggested_by_anyone = $input->param('suggested_by_anyone') || 0;
42
43 # If a spambot accidentally populates the 'negcap' field in the sugesstions form, then silently skip and return.
44 if ($negcaptcha ) {
45     print $input->redirect("/cgi-bin/koha/opac-suggestions.pl");
46     exit;
47 } else {
48     # don't pass 'negcap' column to DB, else DBI::Class will error
49     # DBIx::Class::Row::store_column(): No such column 'negcap' on Koha::Schema::Result::Suggestion at  Koha/C4/Suggestions.pm
50     delete $suggestion->{negcap};
51 }
52
53 #If suggestions are turned off we redirect to 404 error. This will also redirect guest suggestions
54 if ( ! C4::Context->preference('suggestion') ) {
55     print $input->redirect("/cgi-bin/koha/errors/404.pl");
56     exit;
57 }
58
59 delete $suggestion->{$_} foreach qw<op suggested_by_anyone>;
60 $op = 'else' unless $op;
61
62 my ( $template, $borrowernumber, $cookie, @messages );
63 my $deleted = $input->param('deleted');
64 my $submitted = $input->param('submitted');
65
66 if ( C4::Context->preference("AnonSuggestions") or ( C4::Context->preference("OPACViewOthersSuggestions") and $op eq 'else' ) ) {
67     ( $template, $borrowernumber, $cookie ) = get_template_and_user(
68         {
69             template_name   => "opac-suggestions.tt",
70             query           => $input,
71             type            => "opac",
72             authnotrequired => ( C4::Context->preference("OpacPublic") ? 1 : 0 ),
73         }
74     );
75 }
76 else {
77     ( $template, $borrowernumber, $cookie ) = get_template_and_user(
78         {
79             template_name   => "opac-suggestions.tt",
80             query           => $input,
81             type            => "opac",
82             authnotrequired => 0,
83         }
84     );
85 }
86
87 if ( $op eq 'else' ) {
88     if ( C4::Context->preference("OPACViewOthersSuggestions") ) {
89         if ( $borrowernumber ) {
90             # A logged in user is able to see suggestions from others
91             $suggestion->{suggestedby} = $suggested_by_anyone
92                 ? undef
93                 : $borrowernumber;
94         }
95         else {
96             # Non logged in user is able to see all suggestions
97             $suggestion->{suggestedby} = undef;
98         }
99     }
100     else {
101         if ( $borrowernumber ) {
102             $suggestion->{suggestedby} = $borrowernumber;
103         }
104         else {
105             $suggestion->{suggestedby} = -1;
106         }
107     }
108 } else {
109     if ( $borrowernumber ) {
110         $suggestion->{suggestedby} = $borrowernumber;
111     }
112     else {
113         $suggestion->{suggestedby} = C4::Context->preference("AnonymousPatron");
114     }
115 }
116
117 my $patrons_pending_suggestions_count = 0;
118 if ( $borrowernumber && C4::Context->preference("MaxOpenSuggestions") ne '' ) {
119     $patrons_pending_suggestions_count = scalar @{ SearchSuggestion( { suggestedby => $borrowernumber, STATUS => 'ASKED' } ) } ;
120 }
121
122 my $suggestions_loop = &SearchSuggestion($suggestion);
123 if ( $op eq "add_confirm" ) {
124     if ( C4::Context->preference("MaxOpenSuggestions") ne '' && $patrons_pending_suggestions_count >= C4::Context->preference("MaxOpenSuggestions") ) #only check limit for signed in borrowers
125     {
126         push @messages, { type => 'error', code => 'too_many' };
127     }
128     elsif ( @$suggestions_loop >= 1 ) {
129
130         #some suggestion are answering the request Donot Add
131         for my $suggestion (@$suggestions_loop) {
132             push @messages,
133               {
134                 type => 'error',
135                 code => 'already_exists',
136                 id   => $suggestion->{suggestionid}
137               };
138             last;
139         }
140     }
141     else {
142         my $scrubber = C4::Scrubber->new();
143         foreach my $suggest ( keys %$suggestion ) {
144
145             # Don't know why the encode is needed for Perl v5.10 here
146             $suggestion->{$suggest} = Encode::encode( "utf8",
147                 $scrubber->scrub( $suggestion->{$suggest} ) );
148         }
149         $suggestion->{suggesteddate} = dt_from_string;
150         $suggestion->{branchcode} = $input->param('branchcode') || C4::Context->userenv->{"branch"};
151
152         &NewSuggestion($suggestion);
153         $patrons_pending_suggestions_count++;
154
155         # delete empty fields, to avoid filter in "SearchSuggestion"
156         foreach my $field ( qw( title author publishercode copyrightdate place collectiontitle isbn STATUS ) ) {
157             delete $suggestion->{$field}; #clear search filters (except borrower related) to show all suggestions after placing a new one
158         }
159         $suggestions_loop = &SearchSuggestion($suggestion);
160
161         push @messages, { type => 'info', code => 'success_on_inserted' };
162
163     }
164     $op = 'else';
165 }
166
167 if ( $op eq "delete_confirm" ) {
168     my @delete_field = $input->multi_param("delete_field");
169     foreach my $delete_field (@delete_field) {
170         &DelSuggestion( $borrowernumber, $delete_field );
171     }
172     $op = 'else';
173     print $input->redirect("/cgi-bin/koha/opac-suggestions.pl?op=else");
174     exit;
175 }
176
177 map{
178     my $s = $_;
179     my $library = Koha::Libraries->find($s->{branchcodesuggestedby});
180     $library ? $s->{branchcodesuggestedby} = $library->branchname : ()
181 } @$suggestions_loop;
182
183 foreach my $suggestion(@$suggestions_loop) {
184     if($suggestion->{'suggestedby'} == $borrowernumber) {
185         $suggestion->{'showcheckbox'} = $borrowernumber;
186     } else {
187         $suggestion->{'showcheckbox'} = 0;
188     }
189     if($suggestion->{'patronreason'}){
190         my $av = Koha::AuthorisedValues->search({ category => 'OPAC_SUG', authorised_value => $suggestion->{patronreason} });
191         $suggestion->{'patronreason'} = $av->count ? $av->next->opac_description : '';
192     }
193 }
194
195 my $patron_reason_loop = GetAuthorisedValues("OPAC_SUG");
196
197 # Is the person allowed to choose their branch
198 if ( C4::Context->preference("AllowPurchaseSuggestionBranchChoice") ) {
199     my $branchcode = $input->param('branchcode') || q{};
200
201     if ( !$branchcode
202         && C4::Context->userenv
203         && C4::Context->userenv->{branch} )
204     {
205         $branchcode = C4::Context->userenv->{branch};
206     }
207
208     $template->param( branchcode => $branchcode );
209 }
210
211 my @mandatoryfields;
212 {
213     last unless ($op eq 'add');
214     my $fldsreq_sp = C4::Context->preference("OPACSuggestionMandatoryFields") || 'title';
215     @mandatoryfields = sort split(/\s*\,\s*/, $fldsreq_sp);
216     foreach (@mandatoryfields) {
217         $template->param( $_."_required" => 1);
218     }
219 }
220
221 $template->param(
222     %$suggestion,
223     suggestions_loop      => $suggestions_loop,
224     patron_reason_loop    => $patron_reason_loop,
225     "op_$op"              => 1,
226     $op                   => 1,
227     messages              => \@messages,
228     suggestionsview       => 1,
229     suggested_by_anyone   => $suggested_by_anyone,
230     patrons_pending_suggestions_count => $patrons_pending_suggestions_count,
231 );
232
233 output_html_with_http_headers $input, $cookie, $template->output, undef, { force_no_caching => 1 };
234