From f93fbcb9caad76ee6c024c794aed030857970b4c Mon Sep 17 00:00:00 2001
From: robbat2 <robbat2>
Date: Wed, 7 May 2003 19:57:20 +0000
Subject: [PATCH] Updated ver

---
 insert.php => addedit.php |  4 ++--
 gui/array.lib.php         | 10 +++++-----
 gui/html.lib.php          | 14 ++++++++-----
 gui/login.inc.php         | 17 ++++++++++++++--
 header.inc.php            |  6 ++++--
 index.php                 |  3 +--
 kiosk.php                 | 33 +++++++++++++++++-------------
 lib/MySQL.php             | 18 ++++++++++-------
 lib/Obj/Actions.php       |  6 +++---
 lib/Obj/CheckOuts.php     | 42 +++++++++++++++++++--------------------
 lib/Obj/Objects.php       |  8 +++++++-
 lib/Obj/Transactions.php  | 12 +++++------
 lib/Obj/Users.php         |  7 ++++++-
 lib/admin.lib.php         | 10 +++++++++-
 validate.php              | 16 +++++++++++++++
 15 files changed, 134 insertions(+), 72 deletions(-)
 rename insert.php => addedit.php (61%)
 create mode 100644 validate.php

diff --git a/insert.php b/addedit.php
similarity index 61%
rename from insert.php
rename to addedit.php
index 734052d..e78f1e7 100644
--- a/insert.php
+++ b/addedit.php
@@ -1,6 +1,6 @@
 <?php
-/* $Id: insert.php,v 1.3 2003/04/29 20:47:53 robbat2 Exp $ */
-/* $Source: /code/convert/cvsroot/infrastructure/rats/Attic/insert.php,v $ */
+/* $Id: addedit.php,v 1.1 2003/05/07 19:57:20 robbat2 Exp $ */
+/* $Source: /code/convert/cvsroot/infrastructure/rats/addedit.php,v $ */
 
 include './header.inc.php';
 
diff --git a/gui/array.lib.php b/gui/array.lib.php
index 42aee60..577e922 100644
--- a/gui/array.lib.php
+++ b/gui/array.lib.php
@@ -1,16 +1,16 @@
 <?php 
   //foo
 function 
-v($n)
+v($n,$default=null)
 {
     $data = getData();
     if (isset($data[$n])) {
         $v = $data[$n];
-    } else {
-        $v = null;
-    }
-    if ($v == 'on') {
+        if ($v == 'on') {
         $v = true;
+        }
+    } else {
+        $v = $default;
     }
     return $v;
 }
diff --git a/gui/html.lib.php b/gui/html.lib.php
index 251e1bd..47bcfe3 100644
--- a/gui/html.lib.php
+++ b/gui/html.lib.php
@@ -302,13 +302,17 @@ function
 }
 
 function
-html_simpleselect($name,
-    $data)
+selectinput($name,
+    $data,$default='')
 {
   //format is 'value' => 'text'
-  $activevalue = v($name);
-  $innerdata = "";
-  foreach($data as $value  => $text) {
+  if($default == '') {
+      $activevalue = v($name);
+  } else {
+      $activevalue = $default;
+  }
+  $innerdata = '';
+  foreach($data as $value => $text) {
     $innerdata .= 
       htmlElm('option',
           array('value'  => $value, 'selected' =>($activevalue == $value ? 'selected' : '')),
diff --git a/gui/login.inc.php b/gui/login.inc.php
index dbfa5cd..99878b6 100644
--- a/gui/login.inc.php
+++ b/gui/login.inc.php
@@ -1,8 +1,8 @@
 <?php
-/* $Id: login.inc.php,v 1.3 2003/05/06 21:53:15 robbat2 Exp $ */
+/* $Id: login.inc.php,v 1.4 2003/05/07 19:57:20 robbat2 Exp $ */
 /* $Source: /code/convert/cvsroot/infrastructure/rats/gui/login.inc.php,v $ */
 ?>
-<form action="main.php" method="POST" class="title">
+<form action="validate.php" method="POST" class="title">
 <table class="title">
 <tr><td>
 <label for="username">Username</label>
@@ -24,6 +24,18 @@
 ?>
 </td>
 </tr>
+
+<tr>
+<td>
+<label for="mode">Mode</label>
+</td>
+<td>
+<?php
+echo selectinput('mode',array('normal'=>'Normal','kiosk'=>'Kiosk'),'normal');
+?>
+</td>
+</tr>
+
 <tr>
 <td colspan="2">
 <?php
@@ -31,6 +43,7 @@
 ?>
 </td>
 </tr>
+
 </table>
 </form>
 <?php
diff --git a/header.inc.php b/header.inc.php
index 2071299..7dacbc4 100644
--- a/header.inc.php
+++ b/header.inc.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: header.inc.php,v 1.7 2003/04/29 20:47:53 robbat2 Exp $ */
+/* $Id: header.inc.php,v 1.8 2003/05/07 19:57:20 robbat2 Exp $ */
 error_reporting(E_ALL);
 include 'include.php';
 include './gui/header.inc.php';
@@ -13,11 +13,13 @@
     $uservalid = admin_validate();
     if(!$uservalid) {
         //possible hack or invalid password
-        header('Location: http://'.$_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF'])."/".'index.php'.'?loginerror=1');
+        //header('Location: http://'.$_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF'])."/".'index.php'.'?loginerror=1');
+        httpredirect('index.php','?loginerror=1');
         //echo 'REDIRECT';
         exit;
     }
     $validationskipped = FALSE;
+    
 }
 
 ?>
diff --git a/index.php b/index.php
index 900a278..3d0244e 100644
--- a/index.php
+++ b/index.php
@@ -1,12 +1,11 @@
 <?php
-/* $Id: index.php,v 1.8 2003/03/13 11:53:45 robbat2 Exp $ */
+/* $Id: index.php,v 1.9 2003/05/07 19:57:20 robbat2 Exp $ */
 /* vim: set ft=php expandtab shiftwidth=4 softtabstop=4 tabstop=4: */
 
 $skipvalidate = TRUE;
 
 include 'header.inc.php';
 include 'gui/title.inc.php';
-
 include 'gui/login.inc.php';
 
 if(isset($_GET['loginerror']) && $_GET['loginerror']) {
diff --git a/kiosk.php b/kiosk.php
index e8bd4a3..150a04e 100644
--- a/kiosk.php
+++ b/kiosk.php
@@ -1,15 +1,14 @@
 <?php
-/* $Id: kiosk.php,v 1.2 2003/03/13 09:38:32 robbat2 Exp $ */
+/* $Id: kiosk.php,v 1.3 2003/05/07 19:57:20 robbat2 Exp $ */
 /* vim: set ft=php expandtab shiftwidth=4 softtabstop=4 tabstop=4: */
 //find -xtype f -name '*php' |grep -v index |grep -v DObj |xargs -l1 echo include
 
-include 'include.php';
+include('header.inc.php');
 
 /* $t = new Transactions();
    $t->add(100,'Actions','1','1');
    $t->add(101,'Users','2','2');
    $s = $t->generateSQL(); 
-
    echo $s;
  */
 if(isset($_POST['text'])) {
@@ -19,10 +18,12 @@
     if($m == 'checkin') {
         foreach($arr as $line) {
             $line = trim($line);
-            if(isObject($line)) {
-                $_CheckOuts->checkin($line);
-            } else {
-                echo 'Invalid barcode: '.$line.'<br />';
+            if($line != '') {
+                if(isObject($line)) {
+                    $_CheckOuts->checkin($line);
+                } else {
+                    echo 'Invalid barcode: "'.$line.'"<br />';
+                }
             }
         }
     } else if($m == 'checkout') {
@@ -30,10 +31,12 @@
         if(isUser($user)) {
             foreach($arr as $line) {
                 $line = trim($line);
-                if(isObject($line)) {
-                    $_CheckOuts->checkout($user,$line);
-                } else {
-                    echo 'Invalid barcode: '.$line.'<br />';
+                if($line != '') {
+                    if(isObject($line)) {
+                        $_CheckOuts->checkout($user,$line);
+                    } else {
+                        echo 'Invalid barcode: "'.$line.'"<br />';
+                    }
                 }
             }
         } else {
@@ -43,9 +46,9 @@
 
 }
 
+echo html_a('logout.php','Logout','leftnavitem','target="_top"')."\n";
 ?>
-<html>
-<form action="index.php" method="post">
+<form action="kiosk.php" method="POST">
 <select name="mode">
 <option value="checkout">CheckOut</option>
 <option value="checkin">CheckIn</option>
@@ -54,4 +57,6 @@
 </textarea><br />
 <input type="submit" name="submit_run" value="Run!" />
 </form>
-</html>
+<?php
+include 'footer.inc.php';
+?>
diff --git a/lib/MySQL.php b/lib/MySQL.php
index 2db84ba..3c905b7 100644
--- a/lib/MySQL.php
+++ b/lib/MySQL.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: MySQL.php,v 1.10 2003/05/01 22:20:32 robbat2 Exp $ */
+/* $Id: MySQL.php,v 1.11 2003/05/07 19:57:20 robbat2 Exp $ */
 
 //var $mysql_conn;
 
@@ -82,9 +82,9 @@ function execute() {
     }
 
     function checkerror() {
-        //if(mysql_errno() != 0) {
-        //    die(mysql_error());
-        //}
+        if(mysql_errno() != 0) {
+            die(mysql_error());
+        }
     }
 
     function getNumRows() {
@@ -94,7 +94,7 @@ function getNumRows() {
         return $num;
     }
     function _getNumRows() {
-        $num = mysql_num_rows($this->getResult());
+        $num = @mysql_num_rows($this->getResult());
         $this->checkerror();
         return $num;
     }
@@ -219,7 +219,7 @@ function MySQL_escape($str) {
     return mysql_real_escape_string($str);
 }
 
-function MySQL_arrayToSequence($arr,$brackets = TRUE) {
+function MySQL_arrayToSequence($arr,$brackets = TRUE, $escape = TRUE) {
     $size = count($arr);
     $s = '';
     if($size > 0) {
@@ -227,7 +227,11 @@ function MySQL_arrayToSequence($arr,$brackets = TRUE) {
             $s .= '('; 
         }
         for($i = 0; $i < $size; $i++) {
-            $s .= MySQL_quote($arr[$i]);
+            if($escape) {
+                $s .= MySQL_quote($arr[$i]);
+            } else {
+                $s .= $arr[$i];
+            }
             if($i+1 < $size) {
                 $s .= ',';
             }
diff --git a/lib/Obj/Actions.php b/lib/Obj/Actions.php
index a9dc5d3..a9867ef 100644
--- a/lib/Obj/Actions.php
+++ b/lib/Obj/Actions.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: Actions.php,v 1.6 2003/04/29 20:47:53 robbat2 Exp $ */
+/* $Id: Actions.php,v 1.7 2003/05/07 19:57:20 robbat2 Exp $ */
 /**
  * \brief Action handling system
  *
@@ -11,9 +11,9 @@ function Actions() {
     function getID_code($str) {
         global $MySQL_singleton_abort;
         MySQL_buildonemanykey('ActionCode',$str);
-        $query = 'SELECT ActionID,GenericTable FROM Actions WHERE ActionCode = '.MySQL_quote($str);
+        $query = 'SELECT ActionID FROM Actions WHERE ActionCode = '.MySQL_quote($str);
         $val = MySQL_singleton($query);
-        if($val == $MySQL_singleton_abort) {
+        if($val != $MySQL_singleton_abort) {
             return $val;
         } else {
             die ('Unknown Action Code');
diff --git a/lib/Obj/CheckOuts.php b/lib/Obj/CheckOuts.php
index f3e1630..a58b4e4 100644
--- a/lib/Obj/CheckOuts.php
+++ b/lib/Obj/CheckOuts.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: CheckOuts.php,v 1.6 2003/04/24 00:07:52 robbat2 Exp $ */
+/* $Id: CheckOuts.php,v 1.7 2003/05/07 19:57:20 robbat2 Exp $ */
 /**
  * \brief Object CheckOuts
  *
@@ -10,10 +10,11 @@ function CheckOuts() {
     }
 
     function checkin($barcode) {
+        global $MySQL_singleton_abort;
         $query = 'SELECT CheckOutID FROM CheckOuts LEFT JOIN Objects USING (ObjectID) WHERE ObjectBarcode = '.MySQL_quote($barcode);
         global $_MySQL_trans, $_Transactions;
         $coid = MySQL_singleton($query);
-        if($coid == -1) {
+        if($coid == $MySQL_singleton_abort) {
             echo('Item is not checked out');
         } else {
             $_MySQL_trans->start();
@@ -25,43 +26,42 @@ function checkin($barcode) {
     }
 
     function checkout($usercode,$barcode) {
+        global $MySQL_singleton_abort;
         global $_MySQL_trans, $_Transactions;
         $bad = false;
         $oid = MySQL_singleton( 'SELECT ObjectID FROM Objects WHERE ObjectBarcode = '.MySQL_quote($barcode));
-        if($oid == -1) {
+        if($oid == $MySQL_singleton_abort) {
             echo('Item unknown');
             $bad = true;
         }
-        $oid = MySQL_quote($oid);
         $uid = MySQL_singleton( 'SELECT UserID FROM Users WHERE UserBarcode = '.MySQL_quote($usercode));
-        if($uid == -1) {
+        if($uid == $MySQL_singleton_abort) {
             echo('User unknown');
             $bad = true;
         }
-        $coid = MySQL_singleton('SELECT CheckOutID FROM CheckOuts WHERE ObjectID='.$oid);
-        if($coid != 0) {
-            echo('Item is already out, checkin first');
+        $coid = MySQL_singleton('SELECT CheckOutID FROM CheckOuts WHERE ObjectID='.MySQL_quote($oid));
+        if($coid != $MySQL_singleton_abort) {
+            echo('Item is already out, checkin first ('.$coid.')');
             $bad = true;
         }
-        $uid = MySQL_quote($uid);
         if(!$bad) {
             $_MySQL_trans->start();
             //$_MySQL_trans->run("SELECT @duration := ObjectTypeLoanDuration FROM Objects LEFT JOIN ObjectTypes USING (ObjectTypeID) WHERE ObjectID=".$oid);
             //$_MySQL_trans->run("SELECT @year:=EXTRACT(YEAR FROM @duration), @month:=EXTRACT(MONTH FROM @duration), @day:=EXTRACT(DAY FROM @duration), @hour:=EXTRACT(HOUR FROM @duration), @minute:=EXTRACT(MINUTE FROM @duration), @second:=EXTRACT(SECOND FROM @duration)");
             //$_MySQL_trans->run("SELECT @duration:=CONCAT(@year*365+@month*30+@day,SUBSTRING(@duration,LOCATE(' ',@duration)))");
            // $_MySQL_trans->run("SELECT @duedate:=DATE_ADD(NOW(),INTERVAL @duration DAY_SECOND);");
-            
-            $_MySQL_trans->run('SELECT @duedate:=(((((((NOW() + INTERVAL
-                                                EXTRACT(YEAR FROM ObjectTypeLoanDuration) YEAR) + INTERVAL
-                                            EXTRACT(MONTH FROM ObjectTypeLoanDuration) MONTH) + INTERVAL
-                                        EXTRACT(DAY FROM ObjectTypeLoanDuration) DAY) + INTERVAL
-                                    EXTRACT(HOUR FROM ObjectTypeLoanDuration) HOUR) + INTERVAL
-                                EXTRACT(MINUTE FROM ObjectTypeLoanDuration) MINUTE) + INTERVAL
-                            EXTRACT(SECOND FROM ObjectTypeLoanDuration) SECOND)) FROM Objects
-                    LEFT JOIN ObjectTypes USING (ObjectTypeID) WHERE
-                    ObjectID='.MySQL_quote($oid).';');
-            
-            $_MySQL_trans->run('INSERT CheckOuts (UserID,ObjectID,CheckOutDueDate) VALUES '.MySQL_arrayToSequence(array($uid,$oid,'@duedate')));
+
+           $query1 = 'SELECT @duedate:=(((((((NOW() + INTERVAL EXTRACT(YEAR FROM
+           ObjectTypeLoanDuration) YEAR) + INTERVAL EXTRACT(MONTH FROM
+           ObjectTypeLoanDuration) MONTH) + INTERVAL EXTRACT(DAY FROM
+           ObjectTypeLoanDuration) DAY) + INTERVAL EXTRACT(HOUR FROM
+           ObjectTypeLoanDuration) HOUR) + INTERVAL EXTRACT(MINUTE FROM
+           ObjectTypeLoanDuration) MINUTE) + INTERVAL EXTRACT(SECOND FROM
+           ObjectTypeLoanDuration) SECOND)) FROM Objects LEFT JOIN ObjectTypes
+           USING (ObjectTypeID) WHERE ObjectID='.MySQL_quote($oid).';';
+           $query2 = 'INSERT CheckOuts (UserID,ObjectID,CheckOutDueDate) VALUES '.MySQL_arrayToSequence(array(MySQL_quote($uid),MySQL_quote($oid),'@duedate'),TRUE,FALSE);
+            $_MySQL_trans->run($query1);
+            $_MySQL_trans->run($query2);
             $_MySQL_trans->run($_Transactions->singleton(0,'aC','LAST_INSERT_ID()'));
             $_MySQL_trans->execute();
             echo('Item now checked out');
diff --git a/lib/Obj/Objects.php b/lib/Obj/Objects.php
index 64a3cb3..2971641 100644
--- a/lib/Obj/Objects.php
+++ b/lib/Obj/Objects.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: Objects.php,v 1.3 2002/12/12 13:39:42 robbat2 Exp $ */
+/* $Id: Objects.php,v 1.4 2003/05/07 19:57:20 robbat2 Exp $ */
 /**
  * \brief Object handling system
  *
@@ -9,6 +9,12 @@ class Objects {
     function Objects($newbarcode = -1) {
         $this->barcode = $newbarcode;
     }
+    function exists($barcode) {
+        global $MySQL_singleton_abort;
+        $query = 'SELECT ObjectID FROM Objects WHERE ObjectBarcode='.MySQL_quote($barcode);
+        $val = MySQL_singleton($query);
+        return $val != $MySQL_singleton_abort;
+    }
 }
 
 /* vim: set ft=php expandtab shiftwidth=4 softtabstop=4 tabstop=4: */
diff --git a/lib/Obj/Transactions.php b/lib/Obj/Transactions.php
index 3268484..1ad868d 100644
--- a/lib/Obj/Transactions.php
+++ b/lib/Obj/Transactions.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: Transactions.php,v 1.5 2002/12/12 22:55:31 robbat2 Exp $ */
+/* $Id: Transactions.php,v 1.6 2003/05/07 19:57:20 robbat2 Exp $ */
 /**
  * \brief Transactions logging system
  *
@@ -24,20 +24,20 @@ function restart() {
 
     function add($UserID,$ActionCode,$GenericID) {
         global $_Actions;
-        $arr = $_Actions->lookup($ActionCode);
+        $arr = $_Actions->getID_code($ActionCode);
         $ActionID = $arr[0];
         $GenericTable = $arr[1];
-        $this->addcomplex($UserID,MySQL_quote($GenericTable),$GenericID,$ActionID);
+        $this->addcomplex($UserID,$GenericID,$ActionID);
     }
-    function addcomplex($UserID,$GenericTable,$GenericID,$ActionID) {
-        $tmp = array($UserID,$GenericTable,$GenericID,$ActionID);
+    function addcomplex($UserID,$GenericID,$ActionID) {
+        $tmp = array($UserID,$GenericID,$ActionID);
         $this->actionbuffer->addLast($tmp);
     }
     function generateSQL() {
         $size = $this->actionbuffer->getSize();
         $query = '';
         if($size > 0) {
-            $query = 'INSERT INTO Transactions (UserID,GenericTable,GenericID,ActionID) VALUES ';
+            $query = 'INSERT INTO Transactions (UserID,GenericID,ActionID) VALUES ';
             for($i = 0; $i < $size; $i++) {
                 $data = $this->actionbuffer->removeFirst();
                 $query .= MySQL_arrayToSequence($data);
diff --git a/lib/Obj/Users.php b/lib/Obj/Users.php
index 6790288..c10a7f5 100644
--- a/lib/Obj/Users.php
+++ b/lib/Obj/Users.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: Users.php,v 1.4 2003/04/29 20:47:53 robbat2 Exp $ */
+/* $Id: Users.php,v 1.5 2003/05/07 19:57:20 robbat2 Exp $ */
 /**
  * \brief User handling system
  *
@@ -19,6 +19,11 @@ function getID_barcode($barcode) {
         $query = 'SELECT UserID FROM Users WHERE '.MySQL_buildonemanykey('UserBarcode',$barcode);
         return MySQL_singleton($query);
     }
+    function exists($barcode) {
+        global $MySQL_singleton_abort;
+        $val = getID_barcode($barcode);
+        return $val != $MySQL_singleton_abort;
+    }
     function getID_login_password($login,$password) {
         $query = 'SELECT UserID FROM Users WHERE '.MySQL_buildonemanykey('UserLogin',$login).' AND '.MySQL_buildonemanykey('UserPassword',$password);
         return MySQL_singleton($query);
diff --git a/lib/admin.lib.php b/lib/admin.lib.php
index 9ae5da6..d9029de 100644
--- a/lib/admin.lib.php
+++ b/lib/admin.lib.php
@@ -1,5 +1,5 @@
 <?php
-/* $Id: admin.lib.php,v 1.11 2003/05/07 11:23:09 robbat2 Exp $ */
+/* $Id: admin.lib.php,v 1.12 2003/05/07 19:57:20 robbat2 Exp $ */
 /* $Source: /code/convert/cvsroot/infrastructure/rats/lib/admin.lib.php,v $ */
 
 global $sessionLoaded, $sessionInfo, $sessionDebug;
@@ -155,5 +155,13 @@ function admin_getpermissionstable($userid,$table) {
     return $_GroupActionMapping->getGroupActionTable($groups,$table);
 }
 
+function httpredirect($page='',$opts='',$host='') {
+    if($host == '') {
+        $host = $_SERVER['HTTP_HOST'].dirname($_SERVER['PHP_SELF']).'/';
+    }
+    header('Location: http://'.$host.$page.$opts);
+    exit;
+}
+
 /* vim: set ft=php expandtab shiftwidth=4 softtabstop=4 tabstop=4: */
 ?>
diff --git a/validate.php b/validate.php
new file mode 100644
index 0000000..a0e4037
--- /dev/null
+++ b/validate.php
@@ -0,0 +1,16 @@
+<?php
+// validate login
+// either display error
+// or good results
+$frames = TRUE;
+include 'header.inc.php';
+if(isset($uservalid) && $uservalid && isset($validationskipped) && !$validationskipped) {
+    $mode = v('mode','normal');
+    if($mode == 'kiosk') {
+        httpredirect('kiosk.php');
+    } else {
+        httpredirect('main.php');
+    }
+}
+include 'footer.inc.php';
+?>