40'@phan-var-force int $error';
41'@phan-var-force string $action';
42'@phan-var-force ?string $pagekey';
43'@phan-var-force string $elementtype';
44'@phan-var-force string $value';
49$pagekeyforredirect = isset($pagekey) ? $pagekey : $elementtype;
56$extrasize =
GETPOST(
'size',
'intcomma');
57$type =
GETPOST(
'type',
'alphanohtml');
58$param =
GETPOST(
'param',
'alphanohtml');
59$css =
GETPOST(
'css',
'alphanohtml');
60$cssview =
GETPOST(
'cssview',
'alphanohtml');
61$csslist =
GETPOST(
'csslist',
'alphanohtml');
62$confirm =
GETPOST(
'confirm',
'alpha');
64if ($type ==
'double' && strpos($extrasize,
',') ===
false) {
70if ($type ==
'datetime') {
73if ($type ==
'select') {
78$listofreservedwords = array(
79 'ADD',
'ALL',
'ALTER',
'ANALYZE',
'AND',
'AS',
'ASENSITIVE',
'BEFORE',
'BETWEEN',
'BINARY',
'BLOB',
'BOTH',
'CALL',
'CASCADE',
'CASE',
'CHANGE',
'CHAR',
'CHARACTER',
'CHECK',
'COLLATE',
'COLUMN',
'CONDITION',
'CONSTRAINT',
'CONTINUE',
'CONVERT',
'CREATE',
'CROSS',
'CURRENT_DATE',
'CURRENT_TIME',
'CURRENT_TIMESTAMP',
'CURRENT_USER',
80 'CURSOR',
'DATABASE',
'DATABASES',
'DAY_HOUR',
'DAY_MICROSECOND',
'DAY_MINUTE',
'DAY_SECOND',
'DECIMAL',
'DECLARE',
'DEFAULT',
'DELAYED',
'DELETE',
'DESC',
'DESCRIBE',
'DETERMINISTIC',
'DISTINCT',
'DISTINCTROW',
'DOUBLE',
'DROP',
'DUAL',
81 'EACH',
'ELSE',
'ELSEIF',
'ENCLOSED',
'ESCAPED',
'EXISTS',
'EXPLAIN',
'FALSE',
'FETCH',
'FLOAT',
'FLOAT4',
'FLOAT8',
'FORCE',
'FOREIGN',
'FULLTEXT',
'GRANT',
'GROUP',
'HAVING',
'HIGH_PRIORITY',
'HOUR_MICROSECOND',
'HOUR_MINUTE',
'HOUR_SECOND',
82 'IGNORE',
'IGNORE_SERVER_IDS',
'INDEX',
'INFILE',
'INNER',
'INOUT',
'INSENSITIVE',
'INSERT',
'INT',
'INTEGER',
'INTERVAL',
'INTO',
'ITERATE',
83 'KEYS',
'KEYWORD',
'LEAD',
'LEADING',
'LEAVE',
'LEFT',
'LIKE',
'LIMIT',
'LINES',
'LOCALTIME',
'LOCALTIMESTAMP',
'LONGBLOB',
'LONGTEXT',
'MASTER_SSL_VERIFY_SERVER_CERT',
'MATCH',
'MEDIUMBLOB',
'MEDIUMINT',
'MEDIUMTEXT',
'MIDDLEINT',
'MINUTE_MICROSECOND',
'MINUTE_SECOND',
'MODIFIES',
'NATURAL',
'NOT',
'NO_WRITE_TO_BINLOG',
'NUMERIC',
84 'OFFSET',
'ON',
'OPTION',
'OPTIONALLY',
'OUTER',
'OUTFILE',
'OVER',
85 'PARTITION',
'POSITION',
'PRECISION',
'PRIMARY',
'PROCEDURE',
'PURGE',
'RANGE',
'READS',
'READ_WRITE',
'REAL',
'REFERENCES',
'REGEXP',
'RELEASE',
'RENAME',
'REPEAT',
'REQUIRE',
'RESTRICT',
'RETURN',
'REVOKE',
'RIGHT',
'RLIKE',
86 'SCHEMAS',
'SECOND_MICROSECOND',
'SENSITIVE',
'SEPARATOR',
'SIGNAL',
'SMALLINT',
'SPATIAL',
'SPECIFIC',
'SQLEXCEPTION',
'SQLSTATE',
'SQLWARNING',
'SQL_BIG_RESULT',
'SQL_CALC_FOUND_ROWS',
'SQL_SMALL_RESULT',
'SSL',
'STARTING',
'STRAIGHT_JOIN',
87 'TABLE',
'TERMINATED',
'TINYBLOB',
'TINYINT',
'TINYTEXT',
'TRAILING',
'TRIGGER',
'UNDO',
'UNIQUE',
'UNSIGNED',
'UPDATE',
'USAGE',
'USING',
'UTC_DATE',
'UTC_TIME',
'UTC_TIMESTAMP',
'VALUES',
'VARBINARY',
'VARCHAR',
'VARYING',
88 'WHEN',
'WHERE',
'WHILE',
'WRITE',
'XOR',
'YEAR_MONTH',
'ZEROFILL'
92if ($action ==
'add') {
93 if (
GETPOST(
"button") != $langs->trans(
"Cancel")) {
97 $langs->load(
"errors");
98 $mesgs[] = $langs->trans(
"ErrorFieldRequired", $langs->transnoentitiesnoconv(
"Type"));
101 if ($type ==
'varchar' && $extrasize <= 0) {
103 $langs->load(
"errors");
104 $mesgs[] = $langs->trans(
"ErrorFieldRequired", $langs->transnoentitiesnoconv(
"Size"));
107 if ($type ==
'varchar' && $extrasize > $maxsizestring) {
109 $langs->load(
"errors");
110 $mesgs[] = $langs->trans(
"ErrorSizeTooLongForVarcharType", $maxsizestring);
113 if ($type ==
'int' && $extrasize > $maxsizeint) {
115 $langs->load(
"errors");
116 $mesgs[] = $langs->trans(
"ErrorSizeTooLongForIntType", $maxsizeint);
119 if ($type ==
'stars' && ($extrasize < 1 || $extrasize > 10)) {
121 $langs->load(
"errors");
122 $mesgs[] = $langs->trans(
"ErrorSizeForStarsType");
125 if ($type ==
'select' && !$param) {
127 $langs->load(
"errors");
128 $mesgs[] = $langs->trans(
"ErrorNoValueForSelectType");
131 if ($type ==
'sellist' && !$param) {
133 $langs->load(
"errors");
134 $mesgs[] = $langs->trans(
"ErrorNoValueForSelectListType");
137 if ($type ==
'checkbox' && !$param) {
139 $langs->load(
"errors");
140 $mesgs[] = $langs->trans(
"ErrorNoValueForCheckBoxType");
143 if ($type ==
'link' && !$param) {
145 $langs->load(
"errors");
146 $mesgs[] = $langs->trans(
"ErrorNoValueForLinkType");
149 if ($type ==
'radio' && !$param) {
151 $langs->load(
"errors");
152 $mesgs[] = $langs->trans(
"ErrorNoValueForRadioType");
155 if ((($type ==
'radio') || ($type ==
'checkbox')) && $param) {
157 $parameters = $param;
158 $parameters_array = explode(
"\r\n", $parameters);
159 foreach ($parameters_array as $param_ligne) {
160 if (!empty($param_ligne)) {
162 if (preg_match_all(
'/,/', $param_ligne, $matches)) {
163 if (count($matches[0]) > 1) {
165 $langs->load(
"errors");
166 $mesgs[] = $langs->trans(
"ErrorBadFormatValueList", $param_ligne);
171 $langs->load(
"errors");
172 $mesgs[] = $langs->trans(
"ErrorBadFormatValueList", $param_ligne);
180 if (strlen(
GETPOST(
'attrname',
'aZ09')) < 3) {
182 $langs->load(
"errors");
183 $mesgs[] = $langs->trans(
"ErrorValueLength", $langs->transnoentitiesnoconv(
"AttributeCode"), 3);
190 if (in_array(strtoupper(
GETPOST(
'attrname',
'aZ09')), $listofreservedwords)) {
192 $langs->load(
"errors");
193 $mesgs[] = $langs->trans(
"ErrorReservedKeyword",
GETPOST(
'attrname',
'aZ09'));
200 if (GETPOSTISSET(
"attrname") && preg_match(
"/^[a-z0-9_]+$/",
GETPOST(
'attrname',
'aZ09')) && !is_numeric(
GETPOST(
'attrname',
'aZ09'))) {
202 $default_value =
GETPOST(
'default_value',
'alpha');
203 $parameters = $param;
204 $parameters_array = explode(
"\r\n", $parameters);
207 if ($type ==
'sellist' || $type ==
'chkbxlst') {
208 foreach ($parameters_array as $param_ligne) {
209 $params[
'options'] = array($parameters =>
null);
213 foreach ($parameters_array as $param_ligne) {
214 if (strpos($param_ligne,
',') !==
false) {
215 list($key, $value) = explode(
',', $param_ligne);
216 if (!array_key_exists(
'options', $params)) {
217 $params[
'options'] = array();
223 $params[
'options'][$key] = $value;
228 $visibility =
GETPOST(
'list',
'alpha');
229 if (in_array($type, [
'separate',
'point',
'linestrg',
'polygon'])) {
233 $result = $extrafields->addExtraField(
240 (
GETPOST(
'unique',
'alpha') ? 1 : 0),
241 (
GETPOST(
'required',
'alpha') ? 1 : 0),
244 (
GETPOST(
'alwayseditable',
'alpha') ? 1 : 0),
248 GETPOST(
'computed_value',
'alpha'),
249 (
GETPOST(
'entitycurrentorall',
'alpha') ? 0 :
''),
252 (
GETPOST(
'totalizable',
'alpha') ? 1 : 0),
254 array(
'css' => $css,
'cssview' => $cssview,
'csslist' => $csslist),
256 (
GETPOST(
'emptyonclone',
'alpha') ? 1 : 0),
257 (
GETPOST(
'showintooltip',
'int') ? 1 : 0),
262 header(
"Location: ".$_SERVER[
"PHP_SELF"].(empty($pagekeyforredirect) ?
'' :
'?elementtype='.urlencode($pagekeyforredirect)));
266 $mesg = $extrafields->error;
267 $mesgs = array_merge($mesgs, $extrafields->errors);
272 $langs->load(
"errors");
273 $mesg = $langs->trans(
"ErrorFieldCanNotContainSpecialNorUpperCharacters", $langs->transnoentities(
"AttributeCode"));
284if ($action ==
'update') {
285 if (
GETPOST(
"button") != $langs->trans(
"Cancel")) {
289 $langs->load(
"errors");
290 $mesgs[] = $langs->trans(
"ErrorFieldRequired", $langs->transnoentitiesnoconv(
"Type"));
293 if ($type ==
'varchar' && $extrasize <= 0) {
295 $langs->load(
"errors");
296 $mesgs[] = $langs->trans(
"ErrorFieldRequired", $langs->transnoentitiesnoconv(
"Size"));
299 if ($type ==
'varchar' && $extrasize > $maxsizestring) {
301 $langs->load(
"errors");
302 $mesgs[] = $langs->trans(
"ErrorSizeTooLongForVarcharType", $maxsizestring);
305 if ($type ==
'int' && $extrasize > $maxsizeint) {
307 $langs->load(
"errors");
308 $mesgs[] = $langs->trans(
"ErrorSizeTooLongForIntType", $maxsizeint);
311 if ($type ==
'select' && !$param) {
313 $langs->load(
"errors");
314 $mesgs[] = $langs->trans(
"ErrorNoValueForSelectType");
317 if ($type ==
'sellist' && !$param) {
319 $langs->load(
"errors");
320 $mesgs[] = $langs->trans(
"ErrorNoValueForSelectListType");
323 if ($type ==
'stars' && ($extrasize < 1 || $extrasize > 10)) {
325 $langs->load(
"errors");
326 $mesgs[] = $langs->trans(
"ErrorSizeForStarsType");
329 if ($type ==
'checkbox' && !$param) {
331 $langs->load(
"errors");
332 $mesgs[] = $langs->trans(
"ErrorNoValueForCheckBoxType");
335 if ($type ==
'radio' && !$param) {
337 $langs->load(
"errors");
338 $mesgs[] = $langs->trans(
"ErrorNoValueForRadioType");
341 if ((($type ==
'radio') || ($type ==
'checkbox')) && $param) {
343 $parameters = $param;
344 $parameters_array = explode(
"\r\n", $parameters);
345 foreach ($parameters_array as $param_ligne) {
346 if (!empty($param_ligne)) {
347 if (preg_match_all(
'/,/', $param_ligne, $matches)) {
348 if (count($matches[0]) > 1) {
350 $langs->load(
"errors");
351 $mesgs[] = $langs->trans(
"ErrorBadFormatValueList", $param_ligne);
356 $langs->load(
"errors");
357 $mesgs[] = $langs->trans(
"ErrorBadFormatValueList", $param_ligne);
367 $langs->load(
"errors");
368 $mesgs[] = $langs->trans(
"ErrorValueLength", $langs->transnoentitiesnoconv(
"AttributeCode"), 3);
375 if (in_array(strtoupper(
GETPOST(
'attrname',
'aZ09')), $listofreservedwords) && !
getDolGlobalString(
'MAIN_DISABLE_EXTRAFIELDS_CHECK_FOR_UPDATE')) {
377 $langs->load(
"errors");
378 $mesgs[] = $langs->trans(
"ErrorReservedKeyword",
GETPOST(
'attrname',
'aZ09'));
384 if (GETPOSTISSET(
"attrname") && preg_match(
"/^\w[a-zA-Z0-9-_]*$/",
GETPOST(
'attrname',
'aZ09')) && !is_numeric(
GETPOST(
'attrname',
'aZ09'))) {
387 $parameters = $param;
388 $parameters_array = explode(
"\r\n", $parameters);
391 if ($type ==
'sellist' || $type ==
'chkbxlst') {
392 foreach ($parameters_array as $param_ligne) {
393 $params[
'options'] = array($parameters =>
null);
397 foreach ($parameters_array as $param_ligne) {
398 $tmp = explode(
',', $param_ligne);
400 if (!empty($tmp[1])) {
403 if (!array_key_exists(
'options', $params)) {
404 $params[
'options'] = array();
406 $params[
'options'][$key] = $value;
413 $visibility =
GETPOST(
'list',
'alpha');
414 if (in_array($type, [
'separate',
'point',
'linestrg',
'polygon'])) {
419 $computedvalue =
GETPOST(
'computed_value',
'nohtml');
421 $result = $extrafields->update(
427 (
GETPOST(
'unique',
'alpha') ? 1 : 0),
428 (
GETPOST(
'required',
'alpha') ? 1 : 0),
431 (
GETPOST(
'alwayseditable',
'alpha') ? 1 : 0),
435 GETPOST(
'default_value',
'alpha'),
437 (
GETPOST(
'entitycurrentorall',
'alpha') ? 0 :
''),
440 (
GETPOST(
'totalizable',
'alpha') ? 1 : 0),
442 array(
'css' => $css,
'cssview' => $cssview,
'csslist' => $csslist),
444 (
GETPOST(
'emptyonclone',
'alpha') ? 1 : 0),
445 (
GETPOST(
'showintooltip',
'int') ? 1 : 0),
450 header(
"Location: ".$_SERVER[
"PHP_SELF"].(empty($pagekeyforredirect) ?
'' :
'?elementtype='.urlencode($pagekeyforredirect)));
454 $mesg = $extrafields->error;
455 $mesgs = array_merge($mesgs, $extrafields->errors);
460 $langs->load(
"errors");
461 $mesg = $langs->trans(
"ErrorFieldCanNotContainSpecialCharacters", $langs->transnoentities(
"AttributeCode"));
471if ($action ==
'confirm_delete' && $confirm ==
"yes") {
472 if (GETPOSTISSET(
"attrname") && preg_match(
"/^\w[a-zA-Z0-9-_]*$/",
GETPOST(
"attrname",
'aZ09'))) {
473 $attributekey =
GETPOST(
'attrname',
'aZ09');
475 $result = $extrafields->delete($attributekey, $elementtype);
477 setEventMessages($langs->trans(
"ExtrafieldsDeleted", $attributekey),
null,
'mesgs');
479 header(
"Location: ".$_SERVER[
"PHP_SELF"].(empty($pagekeyforredirect) ?
'' :
'?elementtype='.urlencode($pagekeyforredirect)));
482 $mesg = $extrafields->error;
483 $mesgs = array_merge($mesgs, $extrafields->errors);
487 $langs->load(
"errors");
488 $mesg = $langs->trans(
"ErrorFieldCanNotContainSpecialCharacters", $langs->transnoentities(
"AttributeCode"));
493if ($action ==
'encrypt') {
495 $extrafields->fetch_name_optionals_label($elementtype);
496 $attributekey =
GETPOST(
'attrname',
'aZ09');
498 if (!empty($extrafields->attributes[$elementtype][
'type'][$attributekey]) && $extrafields->attributes[$elementtype][
'type'][$attributekey] ==
'password') {
499 if (!empty($extrafields->attributes[$elementtype][
'param'][$attributekey][
'options'])) {
500 if (array_key_exists(
'dolcrypt', $extrafields->attributes[$elementtype][
'param'][$attributekey][
'options'])) {
503 if (!empty($arrayofelement[
'table_element'])) {
504 if ($extrafields->attributes[$elementtype][
'entityid'][$attributekey] ==
$conf->entity || empty($extrafields->attributes[$elementtype][
'entityid'][$attributekey])) {
505 dol_syslog(
"Loop on each extafields of table ".$arrayofelement[
'table_element']);
507 $sql =
"SELECT te.rowid, te.".$db->sanitize($attributekey);
508 $sql .=
" FROM ".MAIN_DB_PREFIX.$db->sanitize($arrayofelement[
'table_element']).
" as t, ".MAIN_DB_PREFIX.$db->sanitize($arrayofelement[
'table_element']).
'_extrafields as te';
509 $sql .=
" WHERE te.fk_object = t.rowid";
510 $sql .=
" AND te.".$db->sanitize($attributekey).
" NOT LIKE 'dolcrypt:%'";
511 $sql .=
" AND te.".$db->sanitize($attributekey).
" IS NOT NULL";
512 $sql .=
" AND te.".$db->sanitize($attributekey).
" <> ''";
513 if ($extrafields->attributes[$elementtype][
'entityid'][$attributekey] ==
$conf->entity) {
514 $sql .=
" AND t.entity = ".getEntity($arrayofelement[
'element'], 0);
519 $resql =
$db->query($sql);
521 $num_rows =
$db->num_rows($resql);
523 while ($i < $num_rows) {
524 $objtmp =
$db->fetch_object($resql);
525 $id = $objtmp->rowid;
526 $pass = $objtmp->$attributekey;
530 $sqlupdate =
"UPDATE ".MAIN_DB_PREFIX.$db->sanitize($arrayofelement[
'table_element']).
'_extrafields';
531 $sqlupdate .=
" SET ".$db->sanitize($attributekey).
" = '".
$db->escape($newpassword).
"'";
532 $sqlupdate .=
" WHERE rowid = ".((int)
$id);
534 $resupdate =
$db->query($sqlupdate);
548 if ($nbupdatedone > 0) {
549 setEventMessages($langs->trans(
"PasswordFieldEncrypted", $nbupdatedone),
null,
'mesgs');
551 setEventMessages($langs->trans(
"PasswordFieldEncrypted", $nbupdatedone),
null,
'warnings');
$id
Support class for third parties, contacts, members, users or resources.
getElementProperties($elementType)
Get an array with properties of an element.
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0, $nodefault=0)
Return value of a param into GET or POST supervariable.
GETPOSTINT($paramname, $method=0, $nodefault=0)
Return the value of a $_GET or $_POST supervariable, converted into integer.
getDolGlobalString($key, $default='')
Return a Dolibarr global constant string value.
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
setEventMessages($mesg, $mesgs, $style='mesgs', $messagekey='', $noduplicate=0, $attop=0)
Set event messages in dol_events session object.
dolEncrypt($chain, $key='', $ciphering='', $forceseed='', $obfuscationmode='dolcrypt')
Encode a string with a symmetric encryption.