bill-plans-del.php

<?php
/*
 *********************************************************************************************************
 * daloRADIUS - RADIUS Web Platform
 * Copyright (C) 2007 - Liran Tal <liran@enginx.com> All Rights Reserved.
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 *
 *********************************************************************************************************
 *
 * Authors:    Liran Tal <liran@enginx.com>
 *             Filippo Maria Del Prete <filippo.delprete@gmail.com>
 *             Filippo Lauria <filippo.lauria@iit.cnr.it>
 *
 *********************************************************************************************************
 */
 
    include("library/checklogin.php");
    $operator = $_SESSION['operator_user'];

    include('library/check_operator_perm.php');
    include_once('library/config_read.php');
    
    // init logging variables
    $logAction = "";
    $logDebugSQL = "";
    $log = "visited page: ";

    include('library/opendb.php');

    $valid_planNames = array();
    
    $sql = sprintf("SELECT DISTINCT(planName) FROM %s ORDER BY planName ASC",
                   $configValues['CONFIG_DB_TBL_DALOBILLINGPLANS']);
    $res = $dbSocket->query($sql);
    $logDebugSQL .= "$sql;\n";
    
    while ($row = $res->fetchrow()) {
        if (!in_array($row[0], $valid_planNames)) {
            $valid_planNames[] = $row[0];
        }
    }
    
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        if (array_key_exists('csrf_token', $_POST) && isset($_POST['csrf_token']) && dalo_check_csrf_token($_POST['csrf_token'])) {
            if (array_key_exists('planName', $_POST) && !empty($_POST['planName'])) {
                $planName = array();
            
                $tmparr = (!is_array($_POST['planName'])) ? array( $_POST['planName'] ) : $_POST['planName'];
                
                foreach ($tmparr as $tmp_name) {
                    $tmp_name = trim($tmp_name);
                    if (!in_array($tmp_name, $valid_planNames)) {
                        continue;
                    }
                
                    $tmp_name = $dbSocket->escapeSimple($tmp_name);
                    if (!in_array($tmp_name, $planName)) {
                        $planName[] = $tmp_name;
                    }
                }
                
                if (count($planName) > 0) {
                
                    
                    $tables = array(
                                        "planName" => $configValues['CONFIG_DB_TBL_DALOBILLINGPLANS'],
                                        "plan_name" => $configValues['CONFIG_DB_TBL_DALOBILLINGPLANSPROFILES'],
                                   );
                                   
                    $format = "DELETE FROM %s WHERE %s IN ('%s')";
                    foreach ($tables as $field => $table) {
                        $sql = sprintf($format, $table, $field, implode("', '", $planName));
                        $count = $dbSocket->query($sql);
                        $logDebugSQL .= "$sql;\n";
                    }
                    
                    $successMsg = sprintf("Deleted %d plan(s)", intval($count));
                    $logAction .= "$successMsg on page: ";
                
                } else {
                    $failureMsg = "Empty or invalid plan name(s)";
                    $logAction .= sprintf("Failed deleting plan(s) [%s] on page: ", $failureMsg);
                }
            } else {
                // invalid
                $failureMsg = "Empty or invalid plan name(s)";
                $logAction .= sprintf("Failed deleting plan(s) [%s] on page: ", $failureMsg);
            }
                
        } else {
            // csrf
            $failureMsg = "CSRF token error";
            $logAction .= "$failureMsg on page: ";
        }
    } else {
        // !POST
        $planName = (array_key_exists('planName', $_REQUEST) && !empty(str_replace("%", "", trim($_REQUEST['planName']))))
                     ? str_replace("%", "", trim($_REQUEST['planName'])) : "";
        
        if (empty($planName) || !in_array($planName, $valid_planNames)) {
            $planName = "";
        }
    }

    include('library/closedb.php');

    include_once("lang/main.php");
    include("library/layout.php");

    // print HTML prologue
    $title = t('Intro','billplansdel.php');
    $help = t('helpPage','billplansdel');
    
    print_html_prologue($title, $langCode);

    include("menu-bill-plans.php");
    
    if (!empty($planName) && !is_array($planName)) {
        $title .= " :: " . htmlspecialchars($planName, ENT_QUOTES, 'UTF-8');
    }
    
    echo '<div id="contentnorightbar">';
    print_title_and_help($title, $help);

    include_once('include/management/actionMessages.php');

    if (!isset($successMsg)) {

        $input_descriptors1 = array();

        $input_descriptors1[] = array(
                                    'name' => 'planName[]',
                                    'id' => 'planName',
                                    'type' => 'select',
                                    'caption' => t('all','PlanName'),
                                    'options' => $valid_planNames,
                                    'multiple' => true,
                                    'size' => 5,
                                    'selected_value' => $planName
                                 );
                                 
        $input_descriptors1[] = array(
                                        "name" => "csrf_token",
                                        "type" => "hidden",
                                        "value" => dalo_csrf_token(),
                                     );

        $input_descriptors1[] = array(
                                        'type' => 'submit',
                                        'name' => 'submit',
                                        'value' => t('buttons','apply')
                                     );

        $fieldset1_descriptor = array(
                                        "title" => t('title','PlanRemoval'),
                                        "disabled" => (count($valid_planNames) == 0)
                                     );

        open_form();
        
        open_fieldset($fieldset1_descriptor);

        foreach ($input_descriptors1 as $input_descriptor) {
            print_form_component($input_descriptor);
        }
        
        close_fieldset();
        
        close_form();

    }

    print_back_to_previous_page();

    include('include/config/logging.php');
    print_footer_and_html_epilogue();
?>