Merge branch 'master' of bitbucket.org:colosa/processmaker into CONSOLIDATED

workflow/engine/bin/tasks/cliMafe.php

@@ -40,6 +40,10 @@ CLI::taskRun('run_create_translation');
 
 function run_create_translation($args, $opts)
 {
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
+    $opts = $filter->xssFilterHard($opts);
+    $args = $filter->xssFilterHard($args);
     $rootDir = realpath(__DIR__."/../../../../");
     $app = new Maveriks\WebApplication();
     $app->setRootDir($rootDir);
@@ -53,7 +57,6 @@ function run_create_translation($args, $opts)
     foreach ($workspaces as $workspace) {
         try {
             echo "Updating labels for workspace " . pakeColor::colorize($workspace->name, "INFO") . "\n";
-            $app->loadEnvironment($workspace->name, $loadConstants);
             $translation->generateTransaltionMafe($lang);
         } catch (Exception $e) {
             echo "Errors upgrading labels for workspace " . CLI::info($workspace->name) . ": " . CLI::error($e->getMessage()) . "\n";

workflow/engine/bin/tasks/cliWorkspaces.php

@@ -228,6 +228,10 @@ function run_info($args, $opts) {
 }
 
 function run_workspace_upgrade($args, $opts) {
+  G::LoadSystem('inputfilter');
+  $filter = new InputFilter();
+  $opts = $filter->xssFilterHard($opts);
+  $args = $filter->xssFilterHard($args);
   $workspaces = get_workspaces_from_args($args);
   $first = true;
   $lang = array_key_exists("lang", $opts) ? $opts['lang'] : 'en';
@@ -242,6 +246,10 @@ function run_workspace_upgrade($args, $opts) {
 }
 
 function run_translation_upgrade($args, $opts) {
+  G::LoadSystem('inputfilter');
+  $filter = new InputFilter();
+  $opts = $filter->xssFilterHard($opts);
+  $args = $filter->xssFilterHard($args);
   $workspaces = get_workspaces_from_args($args);
   $first = true;
   foreach ($workspaces as $workspace) {
@@ -256,6 +264,10 @@ function run_translation_upgrade($args, $opts) {
 }
 
 function run_cacheview_upgrade($args, $opts) {
+  G::LoadSystem('inputfilter');
+  $filter = new InputFilter();
+  $opts = $filter->xssFilterHard($opts);
+  $args = $filter->xssFilterHard($args);
   $workspaces = get_workspaces_from_args($args);
   $lang = array_key_exists("lang", $opts) ? $opts['lang'] : 'en';
   foreach ($workspaces as $workspace) {
@@ -304,6 +316,10 @@ function run_migrate_new_cases_lists($args, $opts) {
 }
 
 function database_upgrade($command, $args) {
+  G::LoadSystem('inputfilter');
+  $filter = new InputFilter();
+  $command = $filter->xssFilterHard($command);
+  $args = $filter->xssFilterHard($args);
   $workspaces = get_workspaces_from_args($args);
   $checkOnly = (strcmp($command, "check") == 0);
   foreach ($workspaces as $workspace) {
@@ -587,6 +603,10 @@ function runStructureDirectories($command, $args) {
 
 function run_database_generate_self_service_by_value($args, $opts)
 {
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
+    $opts = $filter->xssFilterHard($opts);
+    $args = $filter->xssFilterHard($args);
     try {
         $arrayWorkspace = get_workspaces_from_args($args);
 

workflow/engine/classes/class.Upgrade.php

@@ -33,6 +33,8 @@ class Upgrade
 
     public function install()
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
         //echo "Starting core installation...\n";
         $start = microtime(1);
         $filename = $this->addon->getDownloadFilename();
@@ -42,7 +44,9 @@ class Upgrade
         //printf("Time to open archive: %f\n", microtime(1) - $time);
         $time = microtime(1);
         $extractDir = dirname($this->addon->getDownloadFilename()) . "/extract";
+        $extractDir = $filter->xssFilterHard($extractDir);
         $backupDir = dirname($this->addon->getDownloadFilename()) . "/backup";
+        $backupDir = $filter->xssFilterHard($backupDir);
         if (file_exists($extractDir)) {
             G::rm_dir($extractDir);
         }
@@ -85,6 +89,7 @@ class Upgrade
         $checksumTime = 0;
         foreach ($checksums as $filename => $checksum) {
             if (is_dir("$extractDir/$filename")) {
+                $filename = $filter->xssFilterHard($filename);
                 print $filename;
                 continue;
             }

workflow/engine/classes/class.actionsByEmail.php

@@ -0,0 +1,238 @@
+<?php
+
+
+class actionsByEmailClass extends PMPlugin
+{
+    public function __construct()
+    {
+    }
+
+    public function setup()
+    {
+        
+    }
+
+    public function getFieldsForPageSetup()
+    {
+        return array();
+    }
+
+    public function updateFieldsForPageSetup()
+    {
+    }
+
+    public function sendActionsByEmail($data)
+    {
+        try {
+            // Validations
+            if (!is_object($data)) {
+                throw new Exception('The parameter $data is null.');
+            }
+
+            if (!isset($data->TAS_UID)) {
+                throw new Exception('The parameter $data->TAS_UID is null.');
+            }
+
+            if (!isset($data->APP_UID)) {
+                throw new Exception('The parameter $data->APP_UID is null.');
+            }
+
+            if (!isset($data->DEL_INDEX)) {
+                throw new Exception('The parameter $data->DEL_INDEX is null.');
+            }
+
+            if ($data->TAS_UID == '') {
+                throw new Exception('The parameter $data->TAS_UID is empty.');
+            }
+
+            if ($data->APP_UID == '') {
+                throw new Exception('The parameter $data->APP_UID is empty.');
+            }
+
+            if ($data->DEL_INDEX == '') {
+                throw new Exception('The parameter $data->DEL_INDEX is empty.');
+            }
+
+            G::LoadClass('pmFunctions');
+
+            $emailSetup = getEmailConfiguration();
+
+            if (!empty($emailSetup)) {
+                require_once 'classes/model/AbeConfiguration.php';
+                G::LoadClass('case');
+
+                $cases = new Cases();
+                $caseFields = $cases->loadCase($data->APP_UID);
+                $criteria = new Criteria();
+                $criteria->add(AbeConfigurationPeer::PRO_UID, $caseFields['PRO_UID']);
+                $criteria->add(AbeConfigurationPeer::TAS_UID, $data->TAS_UID);
+                $result = AbeConfigurationPeer::doSelectRS($criteria);
+                $result->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+                $result->next();
+                if ($configuration = $result->getRow()) {
+                    $configuration['ABE_EMAIL_FIELD'] = str_replace('@@', '', $configuration['ABE_EMAIL_FIELD']);
+                    if ($configuration['ABE_EMAIL_FIELD'] != '' && isset($caseFields['APP_DATA'][$configuration['ABE_EMAIL_FIELD']])) {
+                        $email = trim($caseFields['APP_DATA'][$configuration['ABE_EMAIL_FIELD']]);
+                    } else {
+                        require_once 'classes/model/Users.php';
+
+                        $userInstance = new Users();
+                        $userInfo     = $userInstance->getAllInformation($data->USR_UID);
+                        $email        = $userInfo['mail'];
+                    }
+
+                    if ($email != '') {
+                        $subject = $caseFields['APP_TITLE'];
+
+                        // Create
+                        require_once 'classes/model/AbeRequests.php';
+
+                        $abeRequest = array();
+                        $abeRequest['ABE_REQ_UID']      = '';
+                        $abeRequest['ABE_UID']          = $configuration['ABE_UID'];
+                        $abeRequest['APP_UID']          = $data->APP_UID;
+                        $abeRequest['DEL_INDEX']        = $data->DEL_INDEX;
+                        $abeRequest['ABE_REQ_SENT_TO']  = $email;
+                        $abeRequest['ABE_REQ_SUBJECT']  = $subject;
+                        $abeRequest['ABE_REQ_BODY']     = '';
+                        $abeRequest['ABE_REQ_ANSWERED'] = 0;
+                        $abeRequest['ABE_REQ_STATUS']   = 'PENDING';
+
+                        try {
+                            $abeRequestsInstance = new AbeRequests();
+                            $abeRequest['ABE_REQ_UID'] = $abeRequestsInstance->createOrUpdate($abeRequest);
+                        } catch (Exception $error) {
+                            throw $error;
+                        }
+
+                        if ($configuration['ABE_TYPE'] != '') {
+                            // Email
+                            $_SESSION['CURRENT_DYN_UID'] = $configuration['DYN_UID'];
+
+                            $scriptCode = '';
+//                            foreach ($dynaform->fields as $fieldName => $field) {
+//                                if ($field->type == 'submit') {
+//                                    unset($dynaform->fields[$fieldName]);
+//                                }
+//                            }
+
+                            $__ABE__ = '';
+                            $link = (G::is_https() ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . '/sys' . SYS_SYS . '/' . SYS_LANG . '/' . SYS_SKIN . '/services/ActionsByEmail';
+
+                            switch ($configuration['ABE_TYPE']) {
+                                case 'LINK':
+                                    // $__ABE__ .= $dynaform->render(PATH_FEATURES . 'actionsByEmail/xmlform.html', $scriptCode) . '<br />';
+                                    $__ABE__ .= '<a href="' . $link . 'dataForm?APP_UID=' . G::encrypt($data->APP_UID, URL_KEY) . '&DEL_INDEX=' . G::encrypt($data->DEL_INDEX, URL_KEY) . '&DYN_UID=' . G::encrypt($configuration['DYN_UID'], URL_KEY) . '&ABER=' . G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY) . '" target="_blank">Please complete this form</a>';
+                                    break;
+                                // coment
+                                case 'FIELD':
+                                        $variableService = new \ProcessMaker\Services\Api\Project\Variable();
+                                        $variables = $variableService->doGetVariables($caseFields['PRO_UID']);
+                                        $field = new stdClass();
+                                        $field->label = 'Test';
+                                        $field->type = 'dropdown';
+                                        $field->options = array();
+                                        $actionField = str_replace('@@', '', $configuration['ABE_ACTION_FIELD']);
+                                        foreach ($variables as $variable) {
+                                            if ($variable['var_name'] == $actionField) {
+                                                $field->label = $variable['var_name'];
+                                                $field->type = 'dropdown';
+                                                $values = json_decode($variable['var_accepted_values']);
+                                                foreach ($values as $value) {
+                                                    $field->options[$value->keyValue] = $value->value;
+                                                }
+                                            }
+                                        }
+
+                                        $__ABE__ .= '<strong>' . $field->label . '</strong><br /><table align="left" border="0"><tr>';
+                                        
+                                        switch ($field->type) {
+                                            case 'dropdown':
+                                            case 'radiogroup':
+                                                $index = 1;
+                                                $__ABE__.='<br /><td><table align="left" cellpadding="2"><tr>';
+                                                foreach ($field->options as $optValue => $optName) {
+                                                    $__ABE__ .= '<td align="center"><a style="text-decoration: none; color: #000; background-color: #E5E5E5; ';
+                                                    $__ABE__ .= 'filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#EFEFEF, endColorstr=#BCBCBC); ';
+                                                    $__ABE__ .= 'background-image: -webkit-gradient(linear, left top, left bottom, from(#EFEFEF), #BCBCBC); ';
+                                                    $__ABE__ .= 'background-image: -webkit-linear-gradient(top, #EFEFEF, #BCBCBC); ';
+                                                    $__ABE__ .= 'background-image: -moz-linear-gradient(top, #EFEFEF, #BCBCBC); background-image: -ms-linear-gradient(top, #EFEFEF, #BCBCBC); ';
+                                                    $__ABE__ .= 'background-image: -o-linear-gradient(top, #EFEFEF, #BCBCBC); border: 1px solid #AAAAAA; ';
+                                                    $__ABE__ .= 'border-radius: 4px; -moz-border-radius: 4px; -webkit-border-radius: 4px; box-shadow: 0 1px 2px rgba(0, 0, 0, 0.2); ';
+                                                    $__ABE__ .= 'font-family: Arial,serif; font-size: 9pt; font-weight: 400; line-height: 14px; margin: 2px 0; padding: 2px 7px; ';
+                                                    $__ABE__ .= 'text-decoration: none; text-transform: capitalize;" href="' .urldecode(urlencode($link)). '?ACTION='.G::encrypt('processABE', URL_KEY).'&APP_UID=';
+                                                    $__ABE__ .= G::encrypt($data->APP_UID, URL_KEY) . '&DEL_INDEX=' . G::encrypt($data->DEL_INDEX, URL_KEY);
+                                                    $__ABE__ .= '&FIELD=' . G::encrypt($actionField, URL_KEY) . '&VALUE=' . G::encrypt($optValue, URL_KEY);
+                                                    $__ABE__ .= '&ABER=' . G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY) . '" target="_blank" >' . $optName;
+                                                    $__ABE__ .= '</a></td>' . (($index % 5 == 0) ? '</tr><tr>' : '  ');
+                                                    $index++;
+                                                }
+
+                                                $__ABE__.='</tr></table></td>';
+                                                break;
+                                            case 'yesno':
+                                                $__ABE__ .= '<td align="center"><a href="' . $link . 'dataField?APP_UID=' . urlencode(G::encrypt($data->APP_UID, URL_KEY)) . '&DEL_INDEX=' . urlencode(G::encrypt($data->DEL_INDEX, URL_KEY)). '&FIELD=' . urlencode(G::encrypt($actionField, URL_KEY)) . '&VALUE=' . urlencode(G::encrypt(1, URL_KEY)) . '&ABER=' . urlencode(G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY)) . '" target="_blank">' . G::LoadTranslation('ID_YES_VALUE') . '</a></td>';
+                                                $__ABE__ .= '<td align="center"><a href="' . $link . 'dataField?APP_UID=' . urlencode(G::encrypt($data->APP_UID, URL_KEY)) . '&DEL_INDEX=' . urlencode(G::encrypt($data->DEL_INDEX, URL_KEY)) . '&FIELD=' . urlencode(G::encrypt($actionField, URL_KEY)) . '&VALUE=' . urlencode(G::encrypt(0, URL_KEY)) . '&ABER=' . urlencode(G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY)) . '" target="_blank">' . G::LoadTranslation('ID_NO_VALUE') . '</a></td>';
+                                                break;
+                                            case 'checkbox':
+                                                $__ABE__ .= '<td align="center"><a href="' . $link . 'dataField?APP_UID=' . G::encrypt($data->APP_UID, URL_KEY) . '&DEL_INDEX=' . G::encrypt($data->DEL_INDEX, URL_KEY) . '&FIELD=' . G::encrypt($actionField, URL_KEY) . '&VALUE=' . G::encrypt($field->value, URL_KEY) . '&ABER=' . G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY) . '" target="_blank">Check</a></td>';
+                                                $__ABE__ .= '<td align="center"><a href="' . $link . 'dataField?APP_UID=' . G::encrypt($data->APP_UID, URL_KEY) . '&DEL_INDEX=' . G::encrypt($data->DEL_INDEX, URL_KEY) . '&FIELD=' . G::encrypt($actionField, URL_KEY) . '&VALUE=' . G::encrypt($field->value, URL_KEY) . '&ABER=' . G::encrypt($abeRequest['ABE_REQ_UID'], URL_KEY) . '" target="_blank">Uncheck</a></td>';
+                                                break;
+                                        }
+                                        $__ABE__ .= '</tr></table>';
+                                    break;
+                            }
+
+                            $__ABE__ = preg_replace('/\<img src=\"\/js\/maborak\/core\/images\/(.+?)\>/', '' , $__ABE__);
+                            $__ABE__ = preg_replace('/\<input\b[^>]*\/>/', '' , $__ABE__);
+                            $__ABE__ = preg_replace('/<select\b[^>]*>(.*?)<\/select>/is', "", $__ABE__);
+                            $__ABE__ = preg_replace('/align=\"center\"/', '' , $__ABE__);
+                            $__ABE__ = preg_replace('/class="tableGrid_view" /', 'class="tableGrid_view" width="100%" ', $__ABE__);
+                            $caseFields['APP_DATA']['__ABE__'] = $__ABE__;
+
+                            G::LoadClass("Users");
+
+                            $user = new Users();
+                            $userDetails = $user->loadDetails($data->USR_UID);
+                            $emailFrom = $userDetails["USR_EMAIL"];
+
+                            G::LoadClass('wsBase');
+
+                            $wsBaseInstance = new wsBase();
+                            $result = $wsBaseInstance->sendMessage($data->APP_UID,
+                                                                   $emailFrom,
+                                                                   $email,
+                                                                   '',
+                                                                   '',
+                                                                   $subject,
+                                                                   $configuration['ABE_TEMPLATE'],
+                                                                   $caseFields['APP_DATA'],
+                                                                   '');
+                            $abeRequest['ABE_REQ_STATUS'] = ($result->status_code == 0 ? 'SENT' : 'ERROR');
+
+                            $body = '';
+                            $messageSent = executeQuery('SELECT `APP_MSG_BODY` FROM `APP_MESSAGE` ORDER BY `APP_MSG_SEND_DATE` DESC LIMIT 1');
+
+                            if (!empty($messageSent) && is_array($messageSent)) {
+                                $body = $messageSent[1]['APP_MSG_BODY'];
+                            }
+
+                            $abeRequest['ABE_REQ_BODY'] = $body;
+
+                            // Update 
+                            try {
+                                $abeRequestsInstance = new AbeRequests();
+                                $abeRequestsInstance->createOrUpdate($abeRequest);
+                            } catch (Exception $error) {
+                                throw $error;
+                            }
+                        }
+                    }
+                }
+            }
+        } catch (Exception $error) {
+            throw $error;
+        }
+    }
+}
+

workflow/engine/classes/class.actionsByEmailUtils.php

@@ -0,0 +1,84 @@
+<?php
+
+function postNote($httpData)
+{
+    //extract(getExtJSParams());
+    $appUid = (isset($httpData->appUid))? $httpData->appUid : '';
+
+    $usrUid = (isset($httpData->usrUid))? $httpData->usrUid : '' ;
+
+    require_once ( "classes/model/AppNotes.php" );
+
+    $appNotes = new AppNotes();
+    $noteContent = addslashes($httpData->noteText);
+
+    $result = $appNotes->postNewNote($appUid, $usrUid, $noteContent, false);
+    //return true;
+
+    //die();
+    //send the response to client
+    @ini_set('implicit_flush', 1);
+    ob_start();
+    //echo G::json_encode($result);
+    @ob_flush();
+    @flush();
+    @ob_end_flush();
+    ob_implicit_flush(1);
+    //return true;
+    //send notification in background
+    $noteRecipientsList = array();
+    G::LoadClass('case');
+    $oCase = new Cases();
+
+    $p = $oCase->getUsersParticipatedInCase($appUid);
+
+    foreach ($p['array'] as $key => $userParticipated) {
+        $noteRecipientsList[] = $key;
+    }
+
+    $noteRecipients = implode(",", $noteRecipientsList);
+
+    $appNotes->sendNoteNotification($appUid, $usrUid, $noteContent, $noteRecipients);
+
+}
+
+function loadAbeRequest($AbeRequestsUid)
+{
+    require_once 'classes/model/AbeRequests.php';
+
+    $criteria = new Criteria();
+    $criteria->add(AbeRequestsPeer::ABE_REQ_UID, $AbeRequestsUid);
+    $resultRequests = AbeRequestsPeer::doSelectRS($criteria);
+    $resultRequests->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+    $resultRequests->next();
+    $abeRequests = $resultRequests->getRow();
+
+    return $abeRequests;
+}
+
+function loadAbeConfiguration($AbeConfigurationUid)
+{
+    require_once 'classes/model/AbeConfiguration.php';
+
+    $criteria = new Criteria();
+    $criteria->add(AbeConfigurationPeer::ABE_UID, $AbeConfigurationUid);
+    $result = AbeConfigurationPeer::doSelectRS($criteria);
+    $result->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+    $result->next();
+    $abeConfiguration = $result->getRow();
+
+    return $abeConfiguration;
+}
+
+function uploadAbeRequest($data)
+{
+    require_once 'classes/model/AbeRequests.php';
+
+    try {
+        $abeRequestsInstance = new AbeRequests();
+        $abeRequestsInstance->createOrUpdate($data);
+    } catch (Exception $error) {
+        throw $error;
+    }
+}
+

workflow/engine/classes/class.case.php

@@ -1065,7 +1065,7 @@ class Cases
               $Fields['DEL_INDEX'] = 1;
             }
             $inbox = new ListInbox();
-            $inbox->update($Fields);            
+            $inbox->update($Fields);
             /*----------------------------------********---------------------------------*/
 
             //Return
@@ -1175,7 +1175,26 @@ class Cases
             if ($this->appSolr != null) {
                 $this->appSolr->deleteApplicationSearchIndex($sAppUid);
             }
+            /*----------------------------------********---------------------------------*/
+            $criteria = new Criteria();
+            $criteria->addSelectColumn( ListInboxPeer::USR_UID );
+            $criteria->add( ListInboxPeer::APP_UID, $sAppUid, Criteria::EQUAL );
+            $dataset = ApplicationPeer::doSelectRS($criteria);
+            $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+            while($dataset->next()) {
+                $aRow = $dataset->getRow();
+                $users = new Users();
+                $users->refreshTotal($aRow['USR_UID'], 'remove', 'draft');
+                $users->refreshTotal($aRow['USR_UID'], 'remove', 'participated');
+            }
 
+            $oCriteria = new Criteria('workflow');
+            $oCriteria->add(ListInboxPeer::APP_UID, $sAppUid);
+            ListInboxPeer::doDelete($oCriteria);
+            $oCriteria = new Criteria('workflow');
+            $oCriteria->add(ListParticipatedLastPeer::APP_UID, $sAppUid);
+            ListParticipatedLastPeer::doDelete($oCriteria);
+            /*----------------------------------********---------------------------------*/
             return $result;
         } catch (exception $e) {
             throw ($e);
@@ -1237,6 +1256,12 @@ class Cases
             $appAssignSelfServiceValue = new AppAssignSelfServiceValue();
 
             $appAssignSelfServiceValue->remove($sAppUid, $iDelIndex);
+            /*----------------------------------********---------------------------------*/
+            $aFields = $oAppDel->toArray(BasePeer::TYPE_FIELDNAME);
+            $aFields['APP_STATUS'] = 'TO_DO';
+            $inbox = new ListInbox();
+            $inbox->update($aFields, true);
+            /*----------------------------------********---------------------------------*/
         } catch (exception $e) {
             throw ($e);
         }
@@ -1905,11 +1930,11 @@ class Cases
             $c->add(AppDelegationPeer::APP_UID, $sAppUid);
             $c->add(AppDelegationPeer::DEL_INDEX, $iDelIndex);
             $rowObj = AppDelegationPeer::doSelect($c);
-            G::LoadClass('dates');
-            $oDates = new dates();
+            $user = '';
             foreach ($rowObj as $appDel) {
                 $appDel->setDelThreadStatus('CLOSED');
                 $appDel->setDelFinishDate('now');
+                $user = $appDel->getUsrUid();
                 if ($appDel->Validate()) {
                     $appDel->Save();
                 } else {
@@ -1926,7 +1951,7 @@ class Cases
             $data['DEL_THREAD_STATUS'] = 'CLOSED';
             $data['APP_UID']   = $sAppUid;
             $data['DEL_INDEX'] = $iDelIndex;
-            $data['USR_UID']   = $appDel->getUsrUid();
+            $data['USR_UID']   = $user;
             $listParticipatedLast = new ListParticipatedLast();
             $listParticipatedLast->refresh($data);
             /*----------------------------------********---------------------------------*/
@@ -1981,7 +2006,7 @@ class Cases
      * @return Fields
      */
 
-    public function startCase($sTasUid, $sUsrUid, $isSubprocess = false)
+    public function startCase($sTasUid, $sUsrUid, $isSubprocess = false, $dataPreviusApplication = array())
     {
         if ($sTasUid != '') {
             try {
@@ -2045,11 +2070,12 @@ class Cases
                 $Fields['USR_UID'] = $sUsrUid;
                 $Fields['DEL_INDEX'] = $iDelIndex;
                 $Fields['APP_STATUS'] = 'TO_DO';
+                $Fields['DEL_DELEGATE_DATE'] = $Fields['APP_INIT_DATE'];
                 if(!$isSubprocess){
                     $Fields['APP_STATUS'] = 'DRAFT';
                 }
                 $inbox = new ListInbox();
-                $inbox->newRow($Fields, $sUsrUid);
+                $inbox->newRow($Fields, $sUsrUid, $isSubprocess, $dataPreviusApplication);
                 /*----------------------------------********---------------------------------*/
             } catch (exception $e) {
                 throw ($e);
@@ -4041,8 +4067,9 @@ class Cases
         $this->getExecuteTriggerProcess($sApplicationUID, "UNPAUSE");
 
         /*----------------------------------********---------------------------------*/
+        $aData = array_merge($aFieldsDel, $aData);
         $oListPaused = new ListPaused();
-        $oListPaused->remove($sApplicationUID, $iDelegation, true);
+        $oListPaused->remove($sApplicationUID, $iDelegation, $aData);
         /*----------------------------------********---------------------------------*/
     }
 
@@ -4254,6 +4281,38 @@ class Cases
             $this->appSolr->updateApplicationSearchIndex($sApplicationUID);
         }
 
+        /*----------------------------------********---------------------------------*/
+        $oCriteria = new Criteria('workflow');
+        $oCriteria->add(ListParticipatedLastPeer::APP_UID, $aData['APP_UID']);
+        $oCriteria->add(ListParticipatedLastPeer::USR_UID, $sUserUID);
+        $oCriteria->add(ListParticipatedLastPeer::DEL_INDEX, $iDelegation);
+        ListParticipatedLastPeer::doDelete($oCriteria);
+        $users = new Users();
+        $users->refreshTotal($sUserUID, 'remove', 'participated');
+
+        $aFieldsDel = array_merge($aData, $aFieldsDel);
+        $aFieldsDel['USR_UID'] = $newUserUID;
+        $inbox = new ListInbox();
+        $inbox->newRow($aFieldsDel, $sUserUID);
+
+        //Update - WHERE
+        $criteriaWhere = new Criteria("workflow");
+        $criteriaWhere->add(ListInboxPeer::APP_UID, $aFieldsDel["APP_UID"], Criteria::EQUAL);
+        $criteriaWhere->add(ListInboxPeer::USR_UID, $aFieldsDel['USR_UID'], Criteria::EQUAL);
+        $criteriaWhere->add(ListInboxPeer::DEL_INDEX, $aFieldsDel['DEL_INDEX'], Criteria::EQUAL);
+        //Update - SET
+        $criteriaSet = new Criteria("workflow");
+        $criteriaSet->add(ListInboxPeer::DEL_INDEX, $aData['DEL_INDEX']);
+        BasePeer::doUpdate($criteriaWhere, $criteriaSet, Propel::getConnection("workflow"));
+
+        $users = new Users();
+        if ($aFields['APP_STATUS'] == 'DRAFT') {
+            $users->refreshTotal($sUserUID, 'remove', 'draft');
+        } else if ($iDelegation == 2) {
+            $users->refreshTotal($sUserUID, 'add', 'draft');
+            $users->refreshTotal($sUserUID, 'remove', 'inbox');
+        }
+        /*----------------------------------********---------------------------------*/
         $this->getExecuteTriggerProcess($sApplicationUID, 'REASSIGNED');
         return true;
     }
@@ -6646,7 +6705,6 @@ class Cases
             }
         }
 
-        require_once 'classes/model/Users.php';
         $c = new Criteria('workflow');
         $c->addSelectColumn(UsersPeer::USR_UID);
         $c->addSelectColumn(UsersPeer::USR_USERNAME);

workflow/engine/classes/class.derivation.php

@@ -748,14 +748,13 @@ class Derivation
             //SETS THE APP_PROC_CODE
             //if (isset($nextDel['TAS_DEF_PROC_CODE']))
             //$appFields['APP_PROC_CODE'] = $nextDel['TAS_DEF_PROC_CODE'];
-
             /*----------------------------------********---------------------------------*/
             if (!empty($iNewDelIndex) && empty($aSP)) {
                 $oAppDel = AppDelegationPeer::retrieveByPK( $appFields['APP_UID'], $iNewDelIndex );
                 $aFields = $oAppDel->toArray( BasePeer::TYPE_FIELDNAME );
                 $aFields['APP_STATUS'] = $currentDelegation['APP_STATUS'];
                 $inbox = new ListInbox();
-                $inbox->newRow($aFields, $nextDel['USR_UID']);
+                $inbox->newRow($aFields, $appFields['CURRENT_USER_UID'], false, array(), ($nextDel['TAS_ASSIGN_TYPE'] == 'SELF_SERVICE' ? true : false));
             }
             /*----------------------------------********---------------------------------*/
             unset( $aSP );
@@ -863,7 +862,7 @@ class Derivation
         if (isset( $aSP )) {
             //Create the new case in the sub-process
             // set the initial date to null the time its created
-            $aNewCase = $this->case->startCase( $aSP['TAS_UID'], $aSP['USR_UID'], true );
+            $aNewCase = $this->case->startCase( $aSP['TAS_UID'], $aSP['USR_UID'], true, $appFields);
             //Copy case variables to sub-process case
             $aFields = unserialize( $aSP['SP_VARIABLES_OUT'] );
             $aNewFields = array ();

workflow/engine/classes/class.pluginRegistry.php

@@ -489,8 +489,11 @@ class PMPluginRegistry
         if (! file_exists( PATH_PLUGINS . $pluginFile )) {
             throw (new Exception( "File \"$pluginFile\" doesn't exist" ));
         }
-
-        require_once (PATH_PLUGINS . $pluginFile);
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $path = PATH_PLUGINS . $pluginFile;
+        //$path = $filter->validateInput($path, 'path');
+        require_once ($path);
         $details = $this->getPluginDetails( $pluginFile );
 
         $this->installPlugin( $details->sNamespace );
@@ -509,7 +512,11 @@ class PMPluginRegistry
         }
 
         ///////
-        require_once (PATH_PLUGINS . $pluginFile);
+        $path = PATH_PLUGINS . $pluginFile;
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $path = $filter->validateInput($path, 'path');
+        require_once ($path);
 
         foreach ($this->_aPluginDetails as $namespace => $detail) {
             if ($namespace == $sNamespace) {

workflow/engine/classes/class.pmDynaform.php

@@ -11,24 +11,27 @@ class pmDynaform
 {
 
     public static $instance = null;
-    public $dyn_uid = null;
+    public $fields = null;
     public $record = null;
-    public $app_data = null;
     public $credentials = null;
-    public $items = array();
     public $data = array();
-    public $variables = array();
-    public $arrayFieldRequired = array();
 
-    public function __construct($dyn_uid, $app_data = array())
+    public function __construct($fields)
     {
-        $this->dyn_uid = $dyn_uid;
-        $this->app_data = $app_data;
+        $this->fields = $fields;
         $this->getDynaform();
         $this->getCredentials();
-        if (isset($app_data["APPLICATION"])) {
+        if (isset($this->fields["APP_UID"])) {
+            //current
             $cases = new \ProcessMaker\BusinessModel\Cases();
-            $this->data = $cases->getCaseVariables($app_data["APPLICATION"]);
+            $this->data = $cases->getCaseVariables($this->fields["APP_UID"]);
+        } else {
+            //history
+            $this->fields["APP_UID"] = null;
+            if (isset($this->fields["APP_DATA"]))
+                $this->data = $this->fields["APP_DATA"];
+            if (isset($this->data["DYN_CONTENT_HISTORY"]))
+                $this->record["DYN_CONTENT"] = $this->data["DYN_CONTENT_HISTORY"];
         }
     }
 
@@ -42,7 +45,7 @@ class pmDynaform
         $a->addSelectColumn(DynaformPeer::DYN_CONTENT);
         $a->addSelectColumn(DynaformPeer::PRO_UID);
         $a->addSelectColumn(DynaformPeer::DYN_UID);
-        $a->add(DynaformPeer::DYN_UID, $this->dyn_uid, Criteria::EQUAL);
+        $a->add(DynaformPeer::DYN_UID, $this->fields["CURRENT_DYNAFORM"], Criteria::EQUAL);
         $ds = ProcessPeer::doSelectRS($a);
         $ds->setFetchmode(ResultSet::FETCHMODE_ASSOC);
         $ds->next();
@@ -197,40 +200,28 @@ class pmDynaform
         return $this->record != null && $this->record["DYN_VERSION"] == 2 ? true : false;
     }
 
-    public function printView($pm_run_outside_main_app, $application)
+    public function printView()
     {
         ob_clean();
         $json = G::json_decode($this->record["DYN_CONTENT"]);
         $this->jsonr($json);
-
-        $a = $this->clientToken();
-        $clientToken = array(
-            "accessToken" => $a["access_token"],
-            "expiresIn" => $a["expires_in"],
-            "tokenType" => $a["token_type"],
-            "scope" => $a["scope"],
-            "refreshToken" => $a["refresh_token"],
-            "clientId" => $a["client_id"],
-            "clientSecret" => $a["client_secret"]
-        );
-
         $javascrip = "" .
                 "<script type='text/javascript'>\n" .
                 "var jsondata = " . G::json_encode($json) . ";\n" .
-                "var pm_run_outside_main_app = '" . $pm_run_outside_main_app . "';\n" .
-                "var dyn_uid = '" . $this->dyn_uid . "';\n" .
+                "var pm_run_outside_main_app = null;\n" .
+                "var dyn_uid = '" . $this->fields["CURRENT_DYNAFORM"] . "';\n" .
                 "var __DynaformName__ = '" . $this->record["PRO_UID"] . "_" . $this->record["DYN_UID"] . "';\n" .
-                "var app_uid = '" . $application . "';\n" .
-                "var prj_uid = '" . $this->app_data["PROCESS"] . "';\n" .
+                "var app_uid = '" . $this->fields["APP_UID"] . "';\n" .
+                "var prj_uid = '" . $this->fields["PRO_UID"] . "';\n" .
                 "var step_mode = null;\n" .
-                "var workspace = '" . $this->app_data["SYS_SYS"] . "';\n" .
-                "var credentials = " . G::json_encode($clientToken) . ";\n" .
+                "var workspace = '" . SYS_SYS . "';\n" .
+                "var credentials = " . G::json_encode($this->credentials) . ";\n" .
                 "var filePost = null;\n" .
                 "var fieldsRequired = null;\n" .
                 "var triggerDebug = null;\n" .
                 "$(window).load(function () {\n" .
                 "    var data = jsondata;\n" .
-                "    data.items[0].mode = 'view';\n" .
+                "    data.items[0].mode = 'disabled';\n" .
                 "    window.project = new PMDynaform.core.Project({\n" .
                 "        data: data,\n" .
                 "        keys: {\n" .
@@ -250,49 +241,55 @@ class pmDynaform
 
         $file = file_get_contents(PATH_HOME . 'public_html/lib/pmdynaform/build/pmdynaform.html');
         $file = str_replace("{javascript}", $javascrip, $file);
-
         echo $file;
+        echo "<pre>";
+        //echo print_r($this->fields, true);
+//        echo print_r($this->data, true);
+        echo "</pre>";
         exit();
     }
 
-    public function printEdit($pm_run_outside_main_app, $application, $headData, $step_mode = 'EDIT')
+    public function printEdit()
     {
         ob_clean();
         $json = G::json_decode($this->record["DYN_CONTENT"]);
         $this->jsonr($json);
+        if (!isset($this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["PREVIOUS_STEP"])) {
+            $this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["PREVIOUS_STEP"] = "";
+        }
         $title = "<table width='100%' align='center'>\n" .
                 "    <tr class='userGroupTitle'>\n" .
-                "        <td width='100%' align='center'>" . $headData["CASE"] . " #: " . $headData["APP_NUMBER"] . "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;" . $headData["TITLE"] . ": " . $headData["APP_TITLE"] . "</td>\n" .
+                "        <td width='100%' align='center'>" . G::LoadTranslation('ID_CASE') . " #: " . $this->fields["APP_NUMBER"] . "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;" . G::LoadTranslation('ID_TITLE') . ": " . $this->fields["APP_TITLE"] . "</td>\n" .
                 "    </tr>\n" .
                 "</table>\n";
         $javascrip = "" .
                 "<script type='text/javascript'>\n" .
                 "var jsondata = " . G::json_encode($json) . ";\n" .
-                "var pm_run_outside_main_app = '" . $pm_run_outside_main_app . "';\n" .
-                "var dyn_uid = '" . $this->dyn_uid . "';\n" .
+                "var pm_run_outside_main_app = '" . $this->fields["PM_RUN_OUTSIDE_MAIN_APP"] . "';\n" .
+                "var dyn_uid = '" . $this->fields["CURRENT_DYNAFORM"] . "';\n" .
                 "var __DynaformName__ = '" . $this->record["PRO_UID"] . "_" . $this->record["DYN_UID"] . "';\n" .
-                "var app_uid = '" . $application . "';\n" .
-                "var prj_uid = '" . $this->app_data["PROCESS"] . "';\n" .
-                "var step_mode = '" . $step_mode . "';\n" .
-                "var workspace = '" . $this->app_data["SYS_SYS"] . "';\n" .
+                "var app_uid = '" . $this->fields["APP_UID"] . "';\n" .
+                "var prj_uid = '" . $this->fields["PRO_UID"] . "';\n" .
+                "var step_mode = '" . $this->fields["STEP_MODE"] . "';\n" .
+                "var workspace = '" . SYS_SYS . "';\n" .
                 "var credentials = " . G::json_encode($this->credentials) . ";\n" .
                 "var filePost = null;\n" .
                 "var fieldsRequired = null;\n" .
-                "var triggerDebug = " . ($this->app_data["TRIGGER_DEBUG"] === 1 ? "true" : "false") . ";\n" .
+                "var triggerDebug = " . ($this->fields["TRIGGER_DEBUG"] === 1 ? "true" : "false") . ";\n" .
                 "</script>\n" .
                 "<script type='text/javascript' src='/jscore/cases/core/cases_Step.js'></script>\n" .
                 "<script type='text/javascript' src='/jscore/cases/core/pmDynaform.js'></script>\n" .
-                ($this->app_data["PRO_SHOW_MESSAGE"] === 1 ? '' : $title ) .
+                ($this->fields["PRO_SHOW_MESSAGE"] === 1 ? '' : $title ) .
                 "<div style='width:100%;padding:0px 10px 0px 10px;margin:15px 0px 0px 0px;'>\n" .
                 "    <img src='/images/bulletButtonLeft.gif' style='float:left;'>&nbsp;\n" .
-                "    <a id='dyn_backward' href='' style='float:left;'>\n" .
+                "    <a id='dyn_backward' href='" . $this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["PREVIOUS_STEP"] . "' style='float:left;font-size:12px;line-height:1;margin:0px 0px 1px 5px;'>\n" .
+                "    " . $this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["PREVIOUS_STEP_LABEL"] . "" .
                 "    </a>\n" .
                 "    <img src='/images/bulletButton.gif' style='float:right;'>&nbsp;\n" .
-                "    <a id='dyn_forward' href='' style='float:right;font-size:12px;line-height:1;margin:0px 5px 1px 0px;'>\n" .
-                "        Next Step\n" .
+                "    <a id='dyn_forward' href='" . $this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["NEXT_STEP"] . "' style='float:right;font-size:12px;line-height:1;margin:0px 5px 1px 0px;'>\n" .
+                "    " . $this->fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["NEXT_STEP_LABEL"] . "" .
                 "    </a>\n" .
                 "</div>";
-
         $file = file_get_contents(PATH_HOME . 'public_html/lib/pmdynaform/build/pmdynaform.html');
         $file = str_replace("{javascript}", $javascrip, $file);
         echo $file;
@@ -308,7 +305,7 @@ class pmDynaform
                 "<script type='text/javascript'>\n" .
                 "var jsondata = " . G::json_encode($json) . ";\n" .
                 "var pm_run_outside_main_app = null;\n" .
-                "var dyn_uid = '" . $this->dyn_uid . "';\n" .
+                "var dyn_uid = '" . $this->fields["CURRENT_DYNAFORM"] . "';\n" .
                 "var __DynaformName__ = null;\n" .
                 "var app_uid = null;\n" .
                 "var prj_uid = '" . $this->record["PRO_UID"] . "';\n" .
@@ -316,7 +313,7 @@ class pmDynaform
                 "var workspace = '" . SYS_SYS . "';\n" .
                 "var credentials = " . G::json_encode($this->credentials) . ";\n" .
                 "var filePost = '" . $filename . "';\n" .
-                "var fieldsRequired = " . G::json_encode($this->arrayFieldRequired) . ";\n" .
+                "var fieldsRequired = " . G::json_encode(array()) . ";\n" .
                 "var triggerDebug = null;\n" .
                 "</script>\n" .
                 "<script type='text/javascript' src='/jscore/cases/core/pmDynaform.js'></script>\n" .
@@ -329,7 +326,6 @@ class pmDynaform
 
         $file = file_get_contents(PATH_HOME . 'public_html/lib/pmdynaform/build/pmdynaform.html');
         $file = str_replace("{javascript}", $javascrip, $file);
-
         echo $file;
         exit();
     }

workflow/engine/classes/class.pmTable.php

@@ -135,7 +135,7 @@ class PmTable
      * @param string $dbsUid corresponding to DBS_UID key
      * @return string contains resolved DBS_UID
      */
-    public function resolveDbSource ($dbsUid)
+    public static function resolveDbSource($dbsUid)
     {
         switch ($dbsUid) {
             case 'workflow':

workflow/engine/classes/class.processMap.php

@@ -2356,7 +2356,11 @@ class processMap
               $G_PUBLISH->AddContent('propeltable', 'paged-table', '/cases/cases_Scheduler_List', $oCriteria, array('CONFIRM' => G::LoadTranslation('ID_MSG_CONFIRM_DELETE_CASE_SCHEDULER')));
               G::RenderPage('publish');
               //return true; */
+            G::LoadSystem('inputfilter');
+            $filter = new InputFilter();
             $schedulerPath = SYS_URI . "cases/cases_Scheduler_List";
+            $schedulerPath = $filter->xssFilterHard($schedulerPath);
+            $sProcessUID = $filter->xssFilterHard($sProcessUID);
             $html = "<iframe  WIDTH=820 HEIGHT=530 FRAMEBORDER=0 src='" . $schedulerPath . '?PRO_UID=' . $sProcessUID . "'></iframe>";
             echo $html;
         } catch (Exception $oError) {

workflow/engine/classes/class.propelTable.php

@@ -338,18 +338,18 @@ class propelTable
             if (($this->style[$r]['showInTable'] != '0') && (! (in_array( $this->fields[$r]['Name'], $this->masterdetail )))) {
                 //if (($this->style[$r]['showInTable'] != '0' ))
                 $this->tpl->newBlock( "headers" );
-                $sortOrder = (((isset( $this->aOrder[$this->fields[$r]['Name']] )) && ($this->aOrder[$this->fields[$r]['Name']] === 'ASC')) ? 'DESC' : 'ASC');
-                $sortOrder = (((isset( $this->aOrder[$this->fields[$r]['Name']] )) && ($this->aOrder[$this->fields[$r]['Name']] === 'DESC')) ? '' : $sortOrder);
+
+                $sortDir = "ASC";
+
+                if (isset($this->aOrder[$this->fields[$r]["Name"]])) {
+                    $sortDir = ($this->aOrder[$this->fields[$r]["Name"]] == "ASC")? "DESC" : "ASC";
+                }
 
                 if ($this->style[$r]['titleVisibility'] != '0') {
-                    $this->style[$r]['href'] = $this->ownerPage . '?order=' . ($sortOrder !== '' ? (G::createUID( '', $this->fields[$r]['Name'] ) . '=' . $sortOrder) : '') . '&page=' . $this->currentPage;
-                    if ($this->sortable == '0') {
-                        $this->style[$r]['onsort'] = $this->id . '.doSort("' . G::createUID( '', $this->fields[$r]['Name'] ) . '" , ""); return false;';;
-                    } else {
-                        $this->style[$r]['onsort'] = $this->id . '.doSort("' . G::createUID( '', $this->fields[$r]['Name'] ) . '" , "' . $sortOrder . '"); return false;';
-                    }
+                    $this->style[$r]["href"] = "javascript:;";
+                    $this->style[$r]["onsort"] = $this->id . ".doSort(\"" . G::createUID("", $this->fields[$r]["Name"]) . "\", \"" . (($this->sortable == "0")? "" : $sortDir) . "\"); return false;";
                 } else {
-                    $this->style[$r]['href'] = '#';
+                    $this->style[$r]["href"] = "javascript:;";
                     $this->style[$r]['onsort'] = 'return false;';
                 }
                 if (isset( $this->style[$r]['href'] )) {
@@ -378,10 +378,14 @@ class propelTable
                     $this->tpl->assign( "align", 'text-align:' . $this->style[$r]['titleAlign'] . ';' );
                 }
                 if ($this->style[$r]['titleVisibility'] != '0') {
-                    $sortOrder = (((isset( $this->aOrder[$this->fields[$r]['Name']] )) && ($this->aOrder[$this->fields[$r]['Name']] === 'ASC')) ? '<img src="/images/arrow-up.gif">' : '');
-                    $sortOrder = (((isset( $this->aOrder[$this->fields[$r]['Name']] )) && ($this->aOrder[$this->fields[$r]['Name']] === 'DESC')) ? '<img src="/images/arrow-down.gif">' : $sortOrder);
-                    $this->tpl->assign( "header", $this->fields[$r]['Label'] . $sortOrder );
-                    $this->tpl->assign( 'displaySeparator', (($this->colCount == 0) || (! isset( $this->fields[$r]['Label'] )) || ($this->fields[$r]['Label'] === '')) ? 'display:none;' : '' );
+                    $sortDirImg = "";
+
+                    if (isset($this->aOrder[$this->fields[$r]["Name"]])) {
+                        $sortDirImg = ($this->aOrder[$this->fields[$r]["Name"]] == "ASC")? "<img src=\"/images/arrow-up.gif\" />" : "<img src=\"/images/arrow-down.gif\" />";
+                    }
+
+                    $this->tpl->assign("header", $this->fields[$r]["Label"] . $sortDirImg);
+                    $this->tpl->assign("displaySeparator", ($this->colCount == 0 || !isset($this->fields[$r]["Label"]) || $this->fields[$r]["Label"] == "")? "display: none;" : "");
                 } else {
                     $this->tpl->assign( 'displaySeparator', 'display:none;' );
                 }
@@ -555,7 +559,13 @@ class propelTable
      * @return string
      */
     public function renderTable ($block = '', $fields = '')
-    {
+    { 
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $fields = $filter->xssFilterHard($fields);
+        $this->orderBy = $filter->xssFilterHard($this->orderBy);
+        $this->currentPage = $filter->xssFilterHard($this->currentPage);
+        
         //Render Title
         $thereisnotitle = true;
         foreach ($this->fields as $r => $rval) {
@@ -599,6 +609,11 @@ class propelTable
             $this->tpl->assign( 'pagedTable_Name', $this->name );
             $this->tpl->assign( 'pagedTable_Height', $this->xmlForm->height );
             $this->tpl->assign( "title", $this->title );
+            
+            $this->xmlForm->home = $filter->xssFilterHard($this->xmlForm->home);
+            $this->filterForm = $filter->xssFilterHard($this->filterForm);
+            $this->menu = $filter->xssFilterHard($this->menu);
+            
             if (file_exists( $this->xmlForm->home . $this->filterForm . '.xml' )) {
                 $filterForm = new filterForm( $this->filterForm, $this->xmlForm->home );
                 if ($this->menu === '') {
@@ -753,29 +768,30 @@ class propelTable
                     }
                 }
             }
+
+            $strjsCurrentOrder = $this->id . ".currentOrder = '" . addslashes($this->orderBy) . "';";
+
             $this->tpl->assign( '_ROOT.gridRows', '=' . $gridRows ); //number of rows in the current page
             $this->tpl->newBlock( 'rowTag' );
             $this->tpl->assign( 'rowId', 'insertAtLast' );
             if ($this->currentPage > 1) {
-                $firstUrl = $this->ownerPage . '?order=' . $this->orderBy . '&page=1';
-                $firstAjax = $this->id . ".doGoToPage(1);return false;";
                 $prevpage = $this->currentPage - 1;
-                $prevUrl = $this->ownerPage . '?order=' . $this->orderBy . '&page=' . $prevpage;
-                $prevAjax = $this->id . ".doGoToPage(" . $prevpage . ");return false;";
-                $first = "<a href=\"" . htmlentities( $firstUrl, ENT_QUOTES, 'utf-8' ) . "\" onclick=\"" . $firstAjax . "\" class='firstPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
-                $prev = "<a href=\"" . htmlentities( $prevUrl, ENT_QUOTES, 'utf-8' ) . "\"  onclick=\"" . $prevAjax . "\" class='previousPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
+
+                $firstAjax = $strjsCurrentOrder . $this->id . ".doGoToPage(1); return false;";
+                $prevAjax  = $strjsCurrentOrder . $this->id . ".doGoToPage(" . $prevpage . "); return false;";
+                $first = "<a href=\"javascript:;\" onclick=\"" . $firstAjax . "\" class=\"firstPage\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
+                $prev  = "<a href=\"javascript:;\" onclick=\"" . $prevAjax . "\" class=\"previousPage\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
             } else {
                 $first = "<a class='noFirstPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
                 $prev = "<a class='noPreviousPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
             }
             if ($this->currentPage < $this->totPages) {
-                $lastUrl = $this->ownerPage . '?order=' . $this->orderBy . '&page=' . $this->totPages;
-                $lastAjax = $this->id . ".doGoToPage(" . $this->totPages . ");return false;";
                 $nextpage = $this->currentPage + 1;
-                $nextUrl = $this->ownerPage . '?order=' . $this->orderBy . '&page=' . $nextpage;
-                $nextAjax = $this->id . ".doGoToPage(" . $nextpage . ");return false;";
-                $next = "<a href=\"" . htmlentities( $nextUrl, ENT_QUOTES, 'utf-8' ) . "\" onclick=\"" . $nextAjax . "\" class='nextPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
-                $last = "<a href=\"" . htmlentities( $lastUrl, ENT_QUOTES, 'utf-8' ) . "\" onclick=\"" . $lastAjax . "\" class='lastPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
+
+                $nextAjax = $strjsCurrentOrder . $this->id . ".doGoToPage(" . $nextpage . "); return false;";
+                $lastAjax = $strjsCurrentOrder . $this->id . ".doGoToPage(" . $this->totPages . "); return false;";
+                $next = "<a href=\"javascript:;\" onclick=\"" . $nextAjax . "\" class=\"nextPage\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
+                $last = "<a href=\"javascript:;\" onclick=\"" . $lastAjax . "\" class=\"lastPage\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
             } else {
                 $next = "<a class='noNextPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
                 $last = "<a class='noLastPage'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</a>";
@@ -783,9 +799,10 @@ class propelTable
             $pagesEnum = '';
             for ($r = 1; $r <= $this->totPages; $r ++) {
                 if (($r >= ($this->currentPage - 5)) && ($r <= ($this->currentPage + 5))) {
-                    $pageAjax = $this->id . ".doGoToPage(" . $r . ");return false;";
+                    $pageAjax = $strjsCurrentOrder . $this->id . ".doGoToPage(" . $r . "); return false;";
+
                     if ($r != $this->currentPage) {
-                        $pagesEnum .= "&nbsp;<a href=\"" . htmlentities( $this->ownerPage . '?order=' . $this->orderBy . '&page=' . $r, ENT_QUOTES, 'utf-8' ) . "\" onclick=\"" . $pageAjax . "\">" . $r . "</a>";
+                        $pagesEnum .= "&nbsp;<a href=\"javascript:;\" onclick=\"" . $pageAjax . "\">" . $r . "</a>";
                     } else {
                         $pagesEnum .= "&nbsp;<a>" . $r . "</a>";
                     }
@@ -833,6 +850,12 @@ class propelTable
                 }
                 $this->tpl->assign( "pagesEnum", $pagesEnum );
             }
+            
+            $this->name = $filter->xssFilterHard($this->name);
+            $this->orderBy = $filter->xssFilterHard($this->orderBy);
+            $this->currentPage = $filter->xssFilterHard($this->currentPage);
+            $this->id = $filter->xssFilterHard($this->id);
+            
             ?>
 
             <script language='JavaScript'>

workflow/engine/classes/class.system.php

@@ -183,7 +183,10 @@ class System
         /* For distros with the lsb_release, this returns a one-line description of
         * the distro name, such as "CentOS release 5.3 (Final)" or "Ubuntu 10.10"
         */
-        $distro = exec( "lsb_release -d -s 2> /dev/null" );
+        $distro = '';
+        if (file_exists("/dev/")){ //Windows does not have this folder 
+          $distro = exec( "lsb_release -d -s 2> /dev/null" );          
+        }
 
         /* For distros without lsb_release, we look for *release (such as
         * redhat-release, gentoo-release, SuSE-release, etc) or *version (such as

workflow/engine/classes/class.webdav.php

@@ -398,13 +398,18 @@ class ProcessMakerWebDav extends HTTP_WebDAV_Server
      */
     public function GET(&$options)
     {
-        $paths = $this->paths;
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $options = $filter->xssFilterHard($options);
+        $paths = $filter->xssFilterHard($this->paths);
 
         $pathClasses = PATH_DB . SYS_SYS . PATH_SEP . 'classes' . PATH_SEP;
         if (count($paths) > 0 && $paths[0] == 'classes' && is_dir($pathClasses)) {
             $fsFile = $pathClasses . $paths[1];
+            $fsFile = $filter->xssFilterHard($fsFile);
             if (count($paths) == 2 && file_exists($fsFile)) {
                 $content = file_get_contents($fsFile);
+                $content = $filter->xssFilterHard($content);
                 print $content;
                 header("Content-Type: " . mime_content_type($fsFile));
                 header("Last-Modified: " . date("D, j M Y H:m:s ", file_mtime($fsFile)) . "GMT");
@@ -418,8 +423,10 @@ class ProcessMakerWebDav extends HTTP_WebDAV_Server
             if (count($paths) == 4 && $paths[2] == 'xmlforms') {
                 $pathXmlform = $pathProcesses . 'xmlForms' . PATH_SEP . $paths[1] . PATH_SEP;
                 $fsFile = $pathXmlform . $paths[3];
+                $fsFile = $filter->xssFilterHard($fsFile);
                 if (count($paths) == 4 && file_exists($fsFile)) {
                     $content = file_get_contents($fsFile);
+                    $content = $filter->xssFilterHard($content);
                     print $content;
                     header("Content-Type: " . mime_content_type($fsFile));
                     header("Last-Modified: " . date("D, j M Y H:m:s ", file_mtime($fsFile)) . "GMT");
@@ -431,8 +438,10 @@ class ProcessMakerWebDav extends HTTP_WebDAV_Server
             if (count($paths) == 4 && $paths[2] == 'mailTemplates') {
                 $pathTemplates = $pathProcesses . 'mailTemplates' . PATH_SEP . $paths[1] . PATH_SEP;
                 $fsFile = $pathTemplates . $paths[3];
+                $fsFile = $filter->xssFilterHard($fsFile);
                 if (count($paths) == 4 && file_exists($fsFile)) {
                     $content = file_get_contents($fsFile);
+                    $content = $filter->xssFilterHard($content);
                     print $content;
                     header("Content-Type: " . mime_content_type($fsFile));
                     header("Last-Modified: " . date("D, j M Y H:m:s ", file_mtime($fsFile)) . "GMT");
@@ -444,8 +453,10 @@ class ProcessMakerWebDav extends HTTP_WebDAV_Server
             if (count($paths) == 4 && $paths[2] == 'public_html') {
                 $pathPublic = $pathProcesses . 'public' . PATH_SEP . $paths[1] . PATH_SEP;
                 $fsFile = $pathPublic . $paths[3];
+                $fsFile = $filter->xssFilterHard($fsFile);
                 if (count($paths) == 4 && file_exists($fsFile)) {
                     $content = file_get_contents($fsFile);
+                    $content = $filter->xssFilterHard($content);
                     print $content;
                     header("Content-Type: " . mime_content_type($fsFile));
                     header("Last-Modified: " . date("D, j M Y H:m:s ", file_mtime($fsFile)) . "GMT");
@@ -967,11 +978,15 @@ class ProcessMakerWebDav extends HTTP_WebDAV_Server
      */
     public function checkLock($path)
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $path = $filter->validateInput($path, 'nosql');
         $result = false;
 
         $query = "SELECT owner, token, expires, exclusivelock
               FROM locks
-            WHERE path = '$path' ";
+            WHERE path = '%s' ";
+        $query = $filter->preventSqlInjection($query, array($path));
         $res = mysql_query($query);
 
         if ($res) {

workflow/engine/classes/class.wsTools.php

@@ -1842,12 +1842,14 @@ class workspaceTools
             throw $e;
         }
     }
+
     /**
      * Migrate all cases to New list
      *
      * return all LIST TABLES with data
      */
-    public function migrateList ($workSpace){
+    public function migrateList ($workSpace)
+    {
         $this->initPropel(true);
         $appCache = new AppCacheView();
         G::LoadClass("case");
@@ -1877,7 +1879,7 @@ class workspaceTools
         $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);
         //Insert new data LIST_COMPLETED
         while ($rsCriteria->next()) {
-              $row = $rsCriteria->getRow();             
+              $row = $rsCriteria->getRow();
               $listCompleted = new ListCompleted();
               $listCompleted->remove($row["APP_UID"]);
               $listCompleted->setDeleted(false);
@@ -1887,32 +1889,39 @@ class workspaceTools
         
         //Select data TO_DO OR DRAFT
         $inbCriteria = $appCache->getSelAllColumns();
-        $inbCriteria->add(AppCacheViewPeer::APP_STATUS, "CANCELLED", CRITERIA::NOT_EQUAL);
         $rsCriteria = AppCacheViewPeer::doSelectRS($inbCriteria);
         $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+
         //Insert new data LIST_INBOX
         while ($rsCriteria->next()) {
-              $row = $rsCriteria->getRow();
-              if($row["DEL_THREAD_STATUS"] == 'OPEN'){
-                  $listInbox = new ListInbox();
-                  $listInbox->remove($row["APP_UID"],$row["DEL_INDEX"]);
-                  $listInbox->setDeleted(false);
-                  $listInbox->create($row);
-              } else {
-                 // create participated List when the thread is CLOSED
-                 $listParticipatedHistory = new ListParticipatedHistory();
-                 $listParticipatedHistory->remove($row['APP_UID'],$row['DEL_INDEX']);
-                 $listParticipatedHistory = new ListParticipatedHistory();
-                 $listParticipatedHistory->create($row);
-                 $listParticipatedLast = new ListParticipatedLast();
-                 $listParticipatedLast->remove($row['APP_UID'], $row['USR_UID']);
-                 $listParticipatedLast = new ListParticipatedLast();
-                 $listParticipatedLast->create($row);        
-                 $listParticipatedLast = new ListParticipatedLast();
-                 $listParticipatedLast->refresh($row);
-              }
+            $row = $rsCriteria->getRow();
+            $isSelfService = ($row['USR_UID'] == '') ? true : false;
+            if($row["DEL_THREAD_STATUS"] == 'OPEN'){
+                $row["DEL_PREVIOUS_USR_UID"] = $row["PREVIOUS_USR_UID"];
+                $listInbox = new ListInbox();
+                $listInbox->remove($row["APP_UID"],$row["DEL_INDEX"]);
+                $listInbox->setDeleted(false);
+                $listInbox->create($row, $isSelfService);
+            } else {
+                // create participated List when the thread is CLOSED
+                $listParticipatedHistory = new ListParticipatedHistory();
+                $listParticipatedHistory->remove($row['APP_UID'], $row['DEL_INDEX']);
+                $listParticipatedHistory = new ListParticipatedHistory();
+                $listParticipatedHistory->create($row);
+
+                $oCriteria = new Criteria('workflow');
+                $oCriteria->add(ListParticipatedLastPeer::APP_UID, $row['APP_UID']);
+                $oCriteria->add(ListParticipatedLastPeer::USR_UID, $row['USR_UID']);
+                ListParticipatedLastPeer::doDelete($oCriteria);
+
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->create($row);
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->refresh($row);
+            }
               
         }
+
         CLI::logging("> Completed table LIST_INBOX\n");
         //With this List is populated the LIST_PARTICIPATED_HISTORY and LIST_PARTICIPATED_LAST
         CLI::logging("> Completed table LIST_PARTICIPATED_HISTORY\n");
@@ -1922,7 +1931,7 @@ class workspaceTools
         $myiCriteria = $appCache->getSelAllColumns();
         $myiCriteria->add(AppCacheViewPeer::DEL_INDEX, "1", CRITERIA::EQUAL);
         $rsCriteria = AppCacheViewPeer::doSelectRS($myiCriteria);
-        $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);        
+        $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);
         //Insert new data LIST_MY_INBOX
         while ($rsCriteria->next()) {
               $row = $rsCriteria->getRow();             
@@ -1939,7 +1948,13 @@ class workspaceTools
         $delaycriteria->addSelectColumn(AppDelayPeer::PRO_UID);
         $delaycriteria->addSelectColumn(AppDelayPeer::APP_DEL_INDEX);
         $delaycriteria->addSelectColumn(AppCacheViewPeer::APP_NUMBER);
-        $delaycriteria->addJoin( AppCacheViewPeer::APP_UID, AppDelayPeer::APP_UID, Criteria::INNER_JOIN );
+        $delaycriteria->addSelectColumn(AppCacheViewPeer::USR_UID);
+        $delaycriteria->addSelectColumn(AppCacheViewPeer::APP_STATUS);
+        $delaycriteria->addSelectColumn(AppCacheViewPeer::TAS_UID);
+
+        $delaycriteria->addJoin( AppCacheViewPeer::APP_UID, AppDelayPeer::APP_UID . ' AND ' . AppCacheViewPeer::DEL_INDEX . ' = ' . AppDelayPeer::APP_DEL_INDEX, Criteria::INNER_JOIN );
+        $delaycriteria->add(AppDelayPeer::APP_DISABLE_ACTION_USER, "0", CRITERIA::EQUAL);
+        $delaycriteria->add(AppDelayPeer::APP_TYPE, "PAUSE", CRITERIA::EQUAL);
         $rsCriteria = AppDelayPeer::doSelectRS($delaycriteria);
         $rsCriteria->setFetchmode(ResultSet::FETCHMODE_ASSOC);
         //Insert new data LIST_PAUSED
@@ -1948,7 +1963,6 @@ class workspaceTools
               $data = $row;
               $data["DEL_INDEX"] = $row["APP_DEL_INDEX"];
               $listPaused = new ListPaused();
-              $listPaused->remove($data["APP_UID"],$data["DEL_INDEX"]);
               $listPaused->setDeleted(false);
               $listPaused->create($data);
         }
@@ -1965,14 +1979,48 @@ class workspaceTools
         $del->doDeleteAll(); 
         while ($rsCriteria->next()) {
             $row = $rsCriteria->getRow();
-            $listUnassigned = new ListUnassigned();            
+            $listUnassigned = new ListUnassigned();
             $unaUid = $listUnassigned->generateData($row["APP_UID"],$row["PREVIOUS_USR_UID"]); 
         }        
         CLI::logging("> Completed table LIST_UNASSIGNED\n");
         CLI::logging("> Completed table LIST_UNASSIGNED_GROUP\n");
+
+        // ADD LISTS COUNTS
+        $aTypes = array(
+            'to_do',
+            'draft',
+            'cancelled',
+            'sent',
+            'paused',
+            'completed',
+            'selfservice'
+        );
+
+        $users = new Users();
+        $criteria = new Criteria();
+        $criteria->addSelectColumn(UsersPeer::USR_UID);
+        $dataset = UsersPeer::doSelectRS($criteria);
+        $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+        while($dataset->next()) {
+            $aRow = $dataset->getRow();
+            $oAppCache = new AppCacheView();
+            $aCount = $oAppCache->getAllCounters( $aTypes, $aRow['USR_UID'] );
+            $newData = array(
+                'USR_UID'                   => $aRow['USR_UID'],
+                'USR_TOTAL_INBOX'           => $aCount['to_do'],
+                'USR_TOTAL_DRAFT'           => $aCount['draft'],
+                'USR_TOTAL_CANCELLED'       => $aCount['cancelled'],
+                'USR_TOTAL_PARTICIPATED'    => $aCount['sent'],
+                'USR_TOTAL_PAUSED'          => $aCount['paused'],
+                'USR_TOTAL_COMPLETED'       => $aCount['completed'],
+                'USR_TOTAL_UNASSIGNED'      => $aCount['selfservice']
+            );
+            $users->update($newData);
+        }
         $this->listFirstExecution('insert');
         return true;
-    } 
+    }
+
     /**
      * This function checks if List tables are going to migrated 
      *

workflow/engine/classes/model/AbeConfiguration.php

@@ -0,0 +1,97 @@
+<?php
+require_once 'classes/model/om/BaseAbeConfiguration.php';
+
+
+/**
+ * Skeleton subclass for representing a row from the 'ABE_CONFIGURATION' table.
+ *
+ *
+ *
+ * You should add additional methods to this class to meet the
+ * application requirements.  This class will only be generated as
+ * long as it does not already exist in the output directory.
+ *
+ * @package    classes.model
+ */
+class AbeConfiguration extends BaseAbeConfiguration
+{
+
+    private $filterThisFields = array('ABE_UID', 'PRO_UID', 'TAS_UID', 'ABE_TYPE',
+                                      'ABE_TEMPLATE', 'ABE_DYN_TYPE', 'DYN_UID','ABE_EMAIL_FIELD',
+                                      'ABE_ACTION_FIELD', 'ABE_CASE_NOTE_IN_RESPONSE', 'ABE_CREATE_DATE','ABE_UPDATE_DATE');
+
+    public function load($abeUid)
+    {
+        try {
+            $abeConfigurationInstance = AbeConfigurationPeer::retrieveByPK($abeUid);
+            $fields = $abeConfigurationInstance->toArray(BasePeer::TYPE_FIELDNAME);
+
+            return $fields;
+        } catch (Exception $error) {
+            throw $error;
+        }
+    }
+
+    public function createOrUpdate($data)
+    {
+        foreach ($data as $field => $value) {
+            if (!in_array($field, $this->filterThisFields)) {
+                unset($data[$field]);
+            }
+        }
+
+        $connection = Propel::getConnection(AbeConfigurationPeer::DATABASE_NAME);
+
+        try {
+            if (!isset($data['ABE_UID'])) {
+                $data['ABE_UID'] = '';
+            }
+
+            if ($data['ABE_UID'] == '') {
+                $data['ABE_UID'] = G::generateUniqueID();
+                $data['ABE_CREATE_DATE'] = date('Y-m-d H:i:s');
+                $abeConfigurationInstance = new AbeConfiguration();
+            } else {
+                $abeConfigurationInstance = AbeConfigurationPeer::retrieveByPK($data['ABE_UID']);
+            }
+
+            $data['ABE_UPDATE_DATE'] = date('Y-m-d H:i:s');
+            $abeConfigurationInstance->fromArray($data, BasePeer::TYPE_FIELDNAME);
+
+            if ($abeConfigurationInstance->validate()) {
+                $connection->begin();
+                $result = $abeConfigurationInstance->save();
+                $connection->commit();
+
+                return $data['ABE_UID'];
+            } else {
+                $message = '';
+                $validationFailures = $abeConfigurationInstance->getValidationFailures();
+
+                foreach ($validationFailures as $validationFailure) {
+                    $message .= $validationFailure->getMessage() . '. ';
+                }
+
+                throw (new Exception('Error trying to update: ' . $message));
+            }
+        } catch (Exception $error) {
+            $connection->rollback();
+
+            throw $error;
+        }
+    }
+
+    public function deleteByTasUid($tasUid)
+    {
+        try {
+            $criteria = new Criteria('workflow');
+            $criteria->add(AbeConfigurationPeer::TAS_UID, $tasUid);
+            AbeConfigurationPeer::doDelete($criteria);
+        } catch (Exception $error) {
+            throw $error;
+        }
+    }
+}
+
+// AbeConfiguration
+

workflow/engine/classes/model/AbeConfigurationPeer.php

@@ -0,0 +1,25 @@
+<?php
+// include base peer class
+require_once 'classes/model/om/BaseAbeConfigurationPeer.php';
+
+// include object class
+include_once 'classes/model/AbeConfiguration.php';
+
+
+/**
+* Skeleton subclass for performing query and update operations on the 'ABE_CONFIGURATION' table.
+*
+*
+*
+* You should add additional methods to this class to meet the
+* application requirements.  This class will only be generated as
+* long as it does not already exist in the output directory.
+*
+* @package    classes.model
+*/
+class AbeConfigurationPeer extends BaseAbeConfigurationPeer
+{
+}
+
+// AbeConfigurationPeer
+

workflow/engine/classes/model/AbeRequests.php

@@ -0,0 +1,87 @@
+<?php
+require_once 'classes/model/om/BaseAbeRequests.php';
+
+
+/**
+ * Skeleton subclass for representing a row from the 'ABE_REQUESTS' table.
+ *
+ *
+ *
+ * You should add additional methods to this class to meet the
+ * application requirements.  This class will only be generated as
+ * long as it does not already exist in the output directory.
+ *
+ * @package    classes.model
+ */
+class AbeRequests extends BaseAbeRequests
+{
+    private $filterThisFields = array('ABE_REQ_UID', 'ABE_UID', 'APP_UID', 'DEL_INDEX',
+                                      'ABE_REQ_SENT_TO', 'ABE_REQ_SUBJECT', 'ABE_REQ_BODY',
+                                      'ABE_REQ_DATE', 'ABE_REQ_STATUS', 'ABE_REQ_ANSWERED');
+
+    public function load($abeRequestUid)
+    {
+        try {
+            $abeRequestInstance = AbeRequestsPeer::retrieveByPK($abeRequestUid);
+            $fields = $abeRequestInstance->toArray(BasePeer::TYPE_FIELDNAME);
+
+            return $fields;
+        } catch (Exception $error) {
+            throw $error;
+        }
+    }
+
+    public function createOrUpdate($data)
+    {
+        $additionalFields = array();
+
+        foreach ($data as $field => $value) {
+            if (!in_array($field, $this->filterThisFields)) {
+                $additionalFields[$field] = $value;
+                unset($data[$field]);
+            }
+        }
+
+        $connection = Propel::getConnection(AbeRequestsPeer::DATABASE_NAME);
+
+        try {
+            if (!isset($data['ABE_REQ_UID'])) {
+                $data['ABE_REQ_UID'] = '';
+            }
+
+            if ($data['ABE_REQ_UID'] == '') {
+                $data['ABE_REQ_UID'] = G::generateUniqueID();
+                $data['ABE_REQ_DATE'] = date('Y-m-d H:i:s');
+                $AbeRequestsInstance = new AbeRequests();
+            } else {
+                $AbeRequestsInstance = AbeRequestsPeer::retrieveByPK($data['ABE_REQ_UID']);
+            }
+
+            $AbeRequestsInstance->fromArray($data, BasePeer::TYPE_FIELDNAME);
+
+            if ($AbeRequestsInstance->validate()) {
+                $connection->begin();
+                $result = $AbeRequestsInstance->save();
+                $connection->commit();
+
+                return $data['ABE_REQ_UID'];
+            } else {
+                $message = '';
+                $validationFailures = $AbeRequestsInstance->getValidationFailures();
+
+                foreach ($validationFailures as $validationFailure) {
+                    $message .= $validationFailure->getMessage() . '. ';
+                }
+
+                throw(new Exception('Error trying to update: ' . $message));
+            }
+        } catch (Exception $error) {
+            $connection->rollback();
+
+            throw $error;
+        }
+    }
+}
+
+// AbeRequests
+

workflow/engine/classes/model/AbeRequestsPeer.php

@@ -0,0 +1,24 @@
+<?php
+// include base peer class
+require_once 'classes/model/om/BaseAbeRequestsPeer.php';
+
+// include object class
+include_once 'classes/model/AbeRequests.php';
+
+/**
+* Skeleton subclass for performing query and update operations on the 'ABE_REQUESTS' table.
+*
+*
+*
+* You should add additional methods to this class to meet the
+* application requirements.  This class will only be generated as
+* long as it does not already exist in the output directory.
+*
+* @package    classes.model
+*/
+class AbeRequestsPeer extends BaseAbeRequestsPeer
+{
+}
+
+// AbeRequestsPeer
+

workflow/engine/classes/model/AbeResponses.php

@@ -0,0 +1,88 @@
+<?php
+require_once 'classes/model/om/BaseAbeResponses.php';
+
+
+/**
+ * Skeleton subclass for representing a row from the 'ABE_RESPONSES' table.
+ *
+ *
+ *
+ * You should add additional methods to this class to meet the
+ * application requirements.  This class will only be generated as
+ * long as it does not already exist in the output directory.
+ *
+ * @package    classes.model
+ */
+class AbeResponses extends BaseAbeResponses
+{
+
+    private $filterThisFields = array('ABE_RES_UID', 'ABE_REQ_UID', 'ABE_RES_CLIENT_IP', 'ABE_RES_DATA',
+                                      'ABE_RES_DATE', 'ABE_RES_STATUS', 'ABE_RES_MESSAGE');
+
+    public function load($abeResponsesUid)
+    {
+        try {
+            $abeResponsesInstance = AbeResponsesPeer::retrieveByPK($abeResponsesUid);
+            $fields = $abeResponsesInstance->toArray(BasePeer::TYPE_FIELDNAME);
+
+            return $fields;
+        } catch (Exception $error) {
+            throw $error;
+        }
+    }
+
+    public function createOrUpdate($data)
+    {
+        $additionalFields = array();
+
+        foreach ($data as $field => $value) {
+            if (!in_array($field, $this->filterThisFields)) {
+                $additionalFields[$field] = $value;
+                unset($data[$field]);
+            }
+        }
+
+        $connection = Propel::getConnection(AbeResponsesPeer::DATABASE_NAME);
+
+        try {
+            if (!isset($data['ABE_RES_UID'])) {
+                $data['ABE_RES_UID'] = '';
+            }
+
+            if ($data['ABE_RES_UID'] == '') {
+                $data['ABE_RES_UID'] = G::generateUniqueID();
+                $data['ABE_RES_DATE'] = date('Y-m-d H:i:s');
+                $AbeResponsesInstance = new AbeResponses();
+            } else {
+                $AbeResponsesInstance = AbeResponsesPeer::retrieveByPK($data['ABE_RES_UID']);
+            }
+
+            //$data['ABE_RES_UPDATE'] = date('Y-m-d H:i:s');
+            $AbeResponsesInstance->fromArray($data, BasePeer::TYPE_FIELDNAME);
+
+            if ($AbeResponsesInstance->validate()) {
+                $connection->begin();
+                $result = $AbeResponsesInstance->save();
+                $connection->commit();
+
+                return $data['ABE_RES_UID'];
+            } else {
+                $message = '';
+                $validationFailures = $AbeResponsesInstance->getValidationFailures();
+
+                foreach ($validationFailures as $validationFailure) {
+                    $message .= $validationFailure->getMessage() . '. ';
+                }
+
+                throw(new Exception('Error trying to update: ' . $message));
+            }
+        } catch (Exception $error) {
+            $connection->rollback();
+
+            throw $error;
+        }
+    }
+}
+
+// AbeResponses
+

workflow/engine/classes/model/AbeResponsesPeer.php

@@ -0,0 +1,25 @@
+<?php
+// include base peer class
+require_once 'classes/model/om/BaseAbeResponsesPeer.php';
+
+// include object class
+include_once 'classes/model/AbeResponses.php';
+
+/**
+* Skeleton subclass for performing query and update operations on the 'ABE_RESPONSES' table.
+*
+*
+*
+* You should add additional methods to this class to meet the
+* application requirements.  This class will only be generated as
+* long as it does not already exist in the output directory.
+*
+* @package    classes.model
+*/
+
+class AbeResponsesPeer extends BaseAbeResponsesPeer
+{
+}
+
+// AbeResponsesPeer
+

workflow/engine/classes/model/AdditionalTables.php

@@ -1,4 +1,4 @@
-<?php
+<?php
 
 /**
  * AdditionalTables.php
@@ -445,19 +445,23 @@ class AdditionalTables extends BaseAdditionalTables
             $oCriteriaCount = clone $oCriteria;
             eval('$count = ' . $sClassPeerName . '::doCount($oCriteria);');
         }
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();        
+        $sClassPeerName = $filter->validateInput($sClassPeerName);
 
         if (isset($_POST['sort'])) {
+            $_POST['sort'] = $filter->validateInput($_POST['sort']);
             if ($_POST['dir'] == 'ASC') {
                 if ($keyOrderUppercase) {
-                    eval('$oCriteria->addAscendingOrderByColumn("' . $_POST['sort'] . '");');
+                    eval('$oCriteria->addAscendingOrderByColumn("' . $sort . '");');
                 } else {
-                    eval('$oCriteria->addAscendingOrderByColumn(' . $sClassPeerName . '::' . $_POST['sort'] . ');');
+                    eval('$oCriteria->addAscendingOrderByColumn(' . $sClassPeerName . '::' . $sort . ');');
                 }
             } else {
                 if ($keyOrderUppercase) {
-                    eval('$oCriteria->addDescendingOrderByColumn("' . $_POST['sort'] . '");');
+                    eval('$oCriteria->addDescendingOrderByColumn("' . $sort . '");');
                 } else {
-                    eval('$oCriteria->addDescendingOrderByColumn(' . $sClassPeerName . '::' . $_POST['sort'] . ');');
+                    eval('$oCriteria->addDescendingOrderByColumn(' . $sClassPeerName . '::' . $sort . ');');
                 }
             }
         }

workflow/engine/classes/model/AddonsManager.php

@@ -132,7 +132,11 @@ class AddonsManager extends BaseAddonsManager
 
         $oPluginRegistry = &PMPluginRegistry::getSingleton();
 
-        require_once (PATH_PLUGINS . $this->getAddonName() . ".php");
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $requiredPath = PATH_PLUGINS . $this->getAddonName() . ".php";
+        $requiredPath = $filter->validateInput($requiredPath, 'path');
+        require_once ($requiredPath);
 
         if ($enable) {
             //$oDetails = $oPluginRegistry->getPluginDetails($this->getAddonName());

workflow/engine/classes/model/AppDelegation.php

@@ -174,7 +174,20 @@ class AppDelegation extends BaseAppDelegation
             $data->DEL_INDEX = $delIndex;
             $data->USR_UID = $sUsrUid;
             $oPluginRegistry = &PMPluginRegistry::getSingleton();
-            $oPluginRegistry->executeTriggers( PM_CREATE_NEW_DELEGATION, $data );
+            $oPluginRegistry->executeTriggers(PM_CREATE_NEW_DELEGATION, $data);
+
+            /*----------------------------------********---------------------------------*/
+            // this section evaluates the actions by email trigger execution please 
+            // modify this section carefully, the if evaluation checks if the license has been 
+            // activated in order to send the mail according to the configuration table
+            if (PMLicensedFeatures
+                ::getSingleton()
+                ->verifyfeature('zLhSk5TeEQrNFI2RXFEVktyUGpnczV1WEJNWVp6cjYxbTU3R29mVXVZNWhZQT0=')) {
+                G::LoadClass('actionsByEmail');
+                $actionsByEmail = new actionsByEmailClass();
+                $actionsByEmail->sendActionsByEmail($data);
+            }
+            /*----------------------------------********---------------------------------*/
         }
 
         return $delIndex;

workflow/engine/classes/model/Department.php

@@ -460,6 +460,10 @@ class Department extends BaseDepartment
                     $node['DEP_MANAGER_LASTNAME'] = '';
                 }
 
+                $criteria = new \Criteria();
+                $criteria->add(UsersPeer::DEP_UID, $node['DEP_UID'], \Criteria::EQUAL );
+                $node['DEP_MEMBERS'] = UsersPeer::doCount($criteria);
+
                 $criteriaCount = new Criteria( 'workflow' );
                 $criteriaCount->clearSelectColumns();
                 $criteriaCount->addSelectColumn( 'COUNT(*)' );

workflow/engine/classes/model/ElementTaskRelation.php

@@ -0,0 +1,5 @@
+<?php
+class ElementTaskRelation extends BaseElementTaskRelation
+{
+}
+

workflow/engine/classes/model/ElementTaskRelationPeer.php

@@ -0,0 +1,5 @@
+<?php
+class ElementTaskRelationPeer extends BaseElementTaskRelationPeer
+{
+}
+

workflow/engine/classes/model/ListCanceled.php

@@ -103,6 +103,10 @@ class ListCanceled extends BaseListCanceled {
         $oListInbox = new ListInbox();
         $oListInbox->removeAll($data['APP_UID']);
 
+        $users = new Users();
+        $users->refreshTotal($data['USR_UID'], 'removed', 'inbox');
+        $users->refreshTotal($data['USR_UID'], 'add', 'canceled');
+
         $con = Propel::getConnection( ListCanceledPeer::DATABASE_NAME );
         try {
             $this->fromArray( $data, BasePeer::TYPE_FIELDNAME );

workflow/engine/classes/model/ListCompleted.php

@@ -94,6 +94,14 @@ class ListCompleted extends BaseListCompleted
         $criteriaSet->add(ListParticipatedLastPeer::APP_STATUS, 'COMPLETED');
         BasePeer::doUpdate($criteriaWhere, $criteriaSet, Propel::getConnection("workflow"));
 
+        $users = new Users();
+        $users->refreshTotal($data['USR_UID'], 'add', 'completed');
+        if ($data['DEL_PREVIOUS'] != 0) {
+            $users->refreshTotal($data['USR_UID'], 'remove', 'inbox');
+        } else {
+            $users->refreshTotal($data['USR_UID'], 'remove', 'draft');
+        }
+
         $con = Propel::getConnection( ListCompletedPeer::DATABASE_NAME );
         try {
             $this->fromArray( $data, BasePeer::TYPE_FIELDNAME );

workflow/engine/classes/model/ListInbox.php

@@ -23,7 +23,7 @@ class ListInbox extends BaseListInbox
      * @return type
      *
      */
-    public function create($data)
+    public function create($data, $isSelfService = false)
     {
         $con = Propel::getConnection( ListInboxPeer::DATABASE_NAME );
         try {
@@ -48,12 +48,38 @@ class ListInbox extends BaseListInbox
             $listMyInbox->refresh($data);
 
             // remove and create participated last
-            $listParticipatedLast = new ListParticipatedLast();
-            $listParticipatedLast->remove($data['APP_UID'], $data['USR_UID']);
-            $listParticipatedLast = new ListParticipatedLast();
-            $listParticipatedLast->create($data);        
-            $listParticipatedLast = new ListParticipatedLast();
-            $listParticipatedLast->refresh($data);
+            if (!$isSelfService) {
+                $oCriteria = new Criteria('workflow');
+                $oCriteria->add(ListParticipatedLastPeer::APP_UID, $data['APP_UID']);
+                $oCriteria->add(ListParticipatedLastPeer::USR_UID, $data['USR_UID']);
+                $exit = ListParticipatedLastPeer::doCount($oCriteria);
+                if ($exit) {
+                    $oCriteria = new Criteria('workflow');
+                    $oCriteria->add(ListParticipatedLastPeer::APP_UID, $data['APP_UID']);
+                    $oCriteria->add(ListParticipatedLastPeer::USR_UID, $data['USR_UID']);
+                    ListParticipatedLastPeer::doDelete($oCriteria);
+                    $users = new Users();
+                    $users->refreshTotal($data['USR_UID'], 'removed', 'participated');
+                }
+
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->create($data);
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->refresh($data);
+            } else {
+                $data['USR_UID'] = $data['DEL_PREVIOUS_USR_UID'];
+                $data['DEL_CURRENT_USR_LASTNAME'] = '';
+                $data['DEL_CURRENT_USR_USERNAME'] = '';
+                $data['DEL_CURRENT_USR_FIRSTNAME'] = '';
+
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->refresh($data, $isSelfService);
+                $data['USR_UID'] = 'SELF_SERVICES';
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->create($data);
+                $listParticipatedLast = new ListParticipatedLast();
+                $listParticipatedLast->refresh($data, $isSelfService);
+            }
 
             return $result;
         } catch(Exception $e) {
@@ -69,8 +95,31 @@ class ListInbox extends BaseListInbox
      * @return type
      * @throws type
      */
-    public function update($data)
+    public function update($data, $isSelfService = false)
     {
+        if ($isSelfService) {
+            $users = new Users();
+            $users->refreshTotal($data['USR_UID'], 'add', 'inbox');
+
+            $listParticipatedLast = new ListParticipatedLast();
+            $listParticipatedLast->remove($data['APP_UID'], $data['USR_UID']);
+
+            //Update - WHERE
+            $criteriaWhere = new Criteria("workflow");
+            $criteriaWhere->add(ListParticipatedLastPeer::APP_UID, $data["APP_UID"], Criteria::EQUAL);
+            $criteriaWhere->add(ListParticipatedLastPeer::USR_UID, 'SELF_SERVICES', Criteria::EQUAL);
+            $criteriaWhere->add(ListParticipatedLastPeer::DEL_INDEX, $data["DEL_INDEX"], Criteria::EQUAL);
+
+            //Update - SET
+            $criteriaSet = new Criteria("workflow");
+            $criteriaSet->add(ListParticipatedLastPeer::USR_UID, $data['USR_UID']);
+            BasePeer::doUpdate($criteriaWhere, $criteriaSet, Propel::getConnection("workflow"));
+
+            $listParticipatedLast = new ListParticipatedLast();
+            $listParticipatedLast->refresh($data);
+            $users = new Users();
+            $users->refreshTotal($data['USR_UID'], 'add', 'participated');
+        }
         $con = Propel::getConnection( ListInboxPeer::DATABASE_NAME );
         try {
             $con->begin();
@@ -141,7 +190,7 @@ class ListInbox extends BaseListInbox
         }
     }
 
-    public function newRow ($data, $delPreviusUsrUid)
+    public function newRow ($data, $delPreviusUsrUid, $isInitSubprocess = false, $dataPreviusApplication = array(), $isSelfService = false)
     {
         $data['DEL_PREVIOUS_USR_UID'] = $delPreviusUsrUid;
         if (isset($data['DEL_TASK_DUE_DATE'])) {
@@ -211,7 +260,53 @@ class ListInbox extends BaseListInbox
             $data['DEL_PREVIOUS_USR_LASTNAME']  = $aRow['USR_LASTNAME'];
         }
 
-        self::create($data);
+        $users = new Users();
+        $criteria = new Criteria();
+        $criteria->addSelectColumn(SubApplicationPeer::DEL_INDEX_PARENT);
+        $criteria->add( SubApplicationPeer::APP_PARENT, $data['APP_UID'], Criteria::EQUAL );
+        $dataset = SubApplicationPeer::doSelectRS($criteria);
+        $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+        if ($dataset->next()) {
+            $aSub = $dataset->getRow();
+            if ($aSub['DEL_INDEX_PARENT'] == $data['DEL_PREVIOUS'] && !$isSelfService) {
+                $users->refreshTotal($data['USR_UID'], 'add', 'inbox');
+                self::create($data, $isSelfService);
+                return 1;
+            }
+        }
+
+        if (!$isInitSubprocess) {
+            if ($data['APP_STATUS'] == 'DRAFT') {
+                $users->refreshTotal($data['USR_UID'], 'add', 'draft');
+            } else {
+                $oRow = ApplicationPeer::retrieveByPK($data['APP_UID']);
+                $aFields = $oRow->toArray( BasePeer::TYPE_FIELDNAME );
+                if ($data['DEL_INDEX'] == 2 || $aFields['APP_STATUS'] == 'DRAFT') {
+                    $criteria = new Criteria();
+                    $criteria->addSelectColumn(SubApplicationPeer::APP_UID);
+                    $criteria->add( SubApplicationPeer::APP_UID, $data['APP_UID'], Criteria::EQUAL );
+                    $dataset = SubApplicationPeer::doSelectRS($criteria);
+                    if ($dataset->next()) {
+                        $users->refreshTotal($delPreviusUsrUid, 'remove', 'inbox');
+                    } else {
+                        $users->refreshTotal($delPreviusUsrUid, 'remove', 'draft');
+                    }
+                } else {
+                    $users->refreshTotal($delPreviusUsrUid, 'remove', 'inbox');
+                }
+                if (!$isSelfService) {
+                    $users->refreshTotal($data['USR_UID'], 'add', 'inbox');
+                }
+            }
+        } else {
+            $users->refreshTotal($data['USR_UID'], 'add', 'inbox');
+            if ($dataPreviusApplication['APP_STATUS'] == 'DRAFT') {
+                $users->refreshTotal($dataPreviusApplication['CURRENT_USER_UID'], 'remove', 'draft');
+            } else {
+                $users->refreshTotal($dataPreviusApplication['CURRENT_USER_UID'], 'remove', 'inbox');
+            }
+        }
+        self::create($data, $isSelfService);
     }
 
     public function loadFilters (&$criteria, $filters)
@@ -283,6 +378,11 @@ class ListInbox extends BaseListInbox
     {
         $criteria = new Criteria();
         $criteria->add( ListInboxPeer::USR_UID, $usr_uid, Criteria::EQUAL );
+        if ($filters['action'] == 'draft') {
+            $criteria->add( ListInboxPeer::APP_STATUS, 'DRAFT', Criteria::EQUAL );
+        } else {
+            $criteria->add( ListInboxPeer::APP_STATUS, 'TO_DO', Criteria::EQUAL );
+        }
         self::loadFilters($criteria, $filters);
         $total = ListInboxPeer::doCount( $criteria );
         return (int)$total;

workflow/engine/classes/model/ListMyInbox.php

@@ -123,6 +123,7 @@ class ListMyInbox extends BaseListMyInbox
 
         if ($data['DEL_INDEX'] == 1 && $data['APP_STATUS'] == 'TO_DO') {
             $data['APP_CREATE_DATE'] = $data['APP_UPDATE_DATE'];
+            $this->remove($data['APP_UID'], $data['USR_UID']);
             $this->create($data);
         } else {
             unset($data['USR_UID']);

workflow/engine/classes/model/ListParticipatedLast.php

@@ -26,19 +26,6 @@ class ListParticipatedLast extends BaseListParticipatedLast
      */
     public function create($data)
     { 
-        $criteria = new Criteria();
-        $criteria->addSelectColumn(UsersPeer::USR_USERNAME);
-        $criteria->addSelectColumn(UsersPeer::USR_FIRSTNAME);
-        $criteria->addSelectColumn(UsersPeer::USR_LASTNAME);
-        $criteria->add( UsersPeer::USR_UID, $data['USR_UID'], Criteria::EQUAL );
-        $dataset = UsersPeer::doSelectRS($criteria);
-        $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
-        $dataset->next();
-        $aRow = $dataset->getRow();
-        $data['DEL_CURRENT_USR_USERNAME']  = $aRow['USR_USERNAME'];
-        $data['DEL_CURRENT_USR_FIRSTNAME'] = $aRow['USR_FIRSTNAME'];
-        $data['DEL_CURRENT_USR_LASTNAME']  = $aRow['USR_LASTNAME'];
-
         $criteria = new Criteria();
         $criteria->addSelectColumn(ApplicationPeer::APP_STATUS);
         $criteria->add( ApplicationPeer::APP_UID, $data['APP_UID'], Criteria::EQUAL );
@@ -48,6 +35,24 @@ class ListParticipatedLast extends BaseListParticipatedLast
         $aRow = $dataset->getRow();
         $data['APP_STATUS']  = $aRow['APP_STATUS'];
 
+        if ($data['USR_UID'] != 'SELF_SERVICES') {
+            $criteria = new Criteria();
+            $criteria->addSelectColumn(UsersPeer::USR_USERNAME);
+            $criteria->addSelectColumn(UsersPeer::USR_FIRSTNAME);
+            $criteria->addSelectColumn(UsersPeer::USR_LASTNAME);
+            $criteria->add( UsersPeer::USR_UID, $data['USR_UID'], Criteria::EQUAL );
+            $dataset = UsersPeer::doSelectRS($criteria);
+            $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+            $dataset->next();
+            $aRow = $dataset->getRow();
+            $data['DEL_CURRENT_USR_USERNAME']  = $aRow['USR_USERNAME'];
+            $data['DEL_CURRENT_USR_FIRSTNAME'] = $aRow['USR_FIRSTNAME'];
+            $data['DEL_CURRENT_USR_LASTNAME']  = $aRow['USR_LASTNAME'];
+
+            $users = new Users();
+            $users->refreshTotal($data['USR_UID'], 'add', 'participated');
+        }
+
         $con = Propel::getConnection( ListParticipatedLastPeer::DATABASE_NAME );
         try {
             $this->fromArray( $data, BasePeer::TYPE_FIELDNAME );
@@ -102,24 +107,32 @@ class ListParticipatedLast extends BaseListParticipatedLast
      * @throws type
      *
      */
-    public function refresh ($data)
+    public function refresh ($data, $isSelfService = false)
     {   
         $data['APP_STATUS'] = (empty($data['APP_STATUS'])) ? 'TO_DO' : $data['APP_STATUS'];
-        $criteria = new Criteria();
-        $criteria->addSelectColumn(UsersPeer::USR_USERNAME);
-        $criteria->addSelectColumn(UsersPeer::USR_FIRSTNAME);
-        $criteria->addSelectColumn(UsersPeer::USR_LASTNAME);
-        $criteria->add( UsersPeer::USR_UID, $data['USR_UID'], Criteria::EQUAL );
-        $dataset = UsersPeer::doSelectRS($criteria);
-        $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
-        $dataset->next();
-        $aRow = $dataset->getRow();
-        
-        $data['DEL_CURRENT_USR_UID'] = $data['USR_UID'];
-        $data['DEL_CURRENT_USR_USERNAME']  = $aRow['USR_USERNAME'];
-        $data['DEL_CURRENT_USR_FIRSTNAME'] = $aRow['USR_FIRSTNAME'];
-        $data['DEL_CURRENT_USR_LASTNAME']  = $aRow['USR_LASTNAME']; 
-        $this->update($data);        
+        if (!$isSelfService) {
+            $criteria = new Criteria();
+            $criteria->addSelectColumn(UsersPeer::USR_USERNAME);
+            $criteria->addSelectColumn(UsersPeer::USR_FIRSTNAME);
+            $criteria->addSelectColumn(UsersPeer::USR_LASTNAME);
+            $criteria->add( UsersPeer::USR_UID, $data['USR_UID'], Criteria::EQUAL );
+            $dataset = UsersPeer::doSelectRS($criteria);
+            $dataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);
+            $dataset->next();
+            $aRow = $dataset->getRow();
+
+            //Update - WHERE
+            $criteriaWhere = new Criteria("workflow");
+            $criteriaWhere->add(ListParticipatedLastPeer::APP_UID, $data["APP_UID"], Criteria::EQUAL);
+            //Update - SET
+            $criteriaSet = new Criteria("workflow");
+            $criteriaSet->add(ListParticipatedLastPeer::DEL_CURRENT_USR_USERNAME, $aRow['USR_USERNAME']);
+            $criteriaSet->add(ListParticipatedLastPeer::DEL_CURRENT_USR_FIRSTNAME, $aRow['USR_FIRSTNAME']);
+            $criteriaSet->add(ListParticipatedLastPeer::DEL_CURRENT_USR_LASTNAME, $aRow['USR_LASTNAME']);
+            BasePeer::doUpdate($criteriaWhere, $criteriaSet, Propel::getConnection("workflow"));
+
+        }
+        $this->update($data);
         
     }
     /**
@@ -130,8 +143,13 @@ class ListParticipatedLast extends BaseListParticipatedLast
      * @throws type
      *
      */
-    public function remove ($app_uid, $usr_uid)
+    public function remove ($app_uid, $usr_uid, $del_index)
     {
+        $existField = ListParticipatedLastPeer::retrieveByPK($app_uid, $usr_uid, $del_index);
+        if (! is_null( $existField )) {
+            $users = new Users();
+            $users->refreshTotal($usr_uid, 'removed', 'participated');
+        }
         $con = Propel::getConnection( ListParticipatedLastPeer::DATABASE_NAME );
         try {
             $this->setAppUid($app_uid);

workflow/engine/classes/model/ListPaused.php

@@ -118,6 +118,14 @@ class ListPaused extends BaseListPaused {
         $oListInbox = new ListInbox();
         $oListInbox->remove($data['APP_UID'], $data['DEL_INDEX']);
 
+        $users = new Users();
+        if ($data['APP_STATUS'] == 'DRAFT') {
+            $users->refreshTotal($data['USR_UID'], 'removed', 'draft');
+        } else {
+            $users->refreshTotal($data['USR_UID'], 'removed', 'inbox');
+        }
+        $users->refreshTotal($data['USR_UID'], 'add', 'paused');
+
         $con = Propel::getConnection( ListPausedPeer::DATABASE_NAME );
         try {
             $this->fromArray( $data, BasePeer::TYPE_FIELDNAME );
@@ -172,8 +180,20 @@ class ListPaused extends BaseListPaused {
      * @throws type
      *
      */
-    public function remove ($app_uid, $del_index)
+    public function remove ($app_uid, $del_index, $data_inbox)
     {
+        $users = new Users();
+        $users->refreshTotal($data_inbox['USR_UID'], 'removed', 'paused');
+
+        $oRow = ApplicationPeer::retrieveByPK($app_uid);
+        $aFields = $oRow->toArray( BasePeer::TYPE_FIELDNAME );
+        $data_inbox['APP_STATUS'] = $aFields['APP_STATUS'];
+        if ($data_inbox['APP_STATUS'] == 'TO_DO') {
+            $users->refreshTotal($data_inbox['USR_UID'], 'add', 'inbox');
+        }
+        $listInbox = new ListInbox();
+        $listInbox->newRow($data_inbox, $data_inbox['USR_UID']);
+
         $con = Propel::getConnection( ListPausedPeer::DATABASE_NAME );
         try {
             $this->setAppUid($app_uid);

workflow/engine/classes/model/MessageEventTaskRelation.php

@@ -1,5 +0,0 @@
-<?php
-class MessageEventTaskRelation extends BaseMessageEventTaskRelation
-{
-}
-

workflow/engine/classes/model/MessageEventTaskRelationPeer.php

@@ -1,5 +0,0 @@
-<?php
-class MessageEventTaskRelationPeer extends BaseMessageEventTaskRelationPeer
-{
-}
-

workflow/engine/classes/model/map/AbeConfigurationMapBuilder.php

@@ -0,0 +1,94 @@
+<?php
+
+require_once 'propel/map/MapBuilder.php';
+include_once 'creole/CreoleTypes.php';
+
+
+/**
+ * This class adds structure of 'ABE_CONFIGURATION' table to 'workflow' DatabaseMap object.
+ *
+ *
+ *
+ * These statically-built map classes are used by Propel to do runtime db structure discovery.
+ * For example, the createSelectSql() method checks the type of a given column used in an
+ * ORDER BY clause to know whether it needs to apply SQL to make the ORDER BY case-insensitive
+ * (i.e. if it's a text column type).
+ *
+ * @package    workflow.classes.model.map
+ */
+class AbeConfigurationMapBuilder
+{
+
+    /**
+     * The (dot-path) name of this class
+     */
+    const CLASS_NAME = 'classes.model.map.AbeConfigurationMapBuilder';
+
+    /**
+     * The database map.
+     */
+    private $dbMap;
+
+    /**
+     * Tells us if this DatabaseMapBuilder is built so that we
+     * don't have to re-build it every time.
+     *
+     * @return     boolean true if this DatabaseMapBuilder is built, false otherwise.
+     */
+    public function isBuilt()
+    {
+        return ($this->dbMap !== null);
+    }
+
+    /**
+     * Gets the databasemap this map builder built.
+     *
+     * @return     the databasemap
+     */
+    public function getDatabaseMap()
+    {
+        return $this->dbMap;
+    }
+
+    /**
+     * The doBuild() method builds the DatabaseMap
+     *
+     * @return     void
+     * @throws     PropelException
+     */
+    public function doBuild()
+    {
+        $this->dbMap = Propel::getDatabaseMap('workflow');
+
+        $tMap = $this->dbMap->addTable('ABE_CONFIGURATION');
+        $tMap->setPhpName('AbeConfiguration');
+
+        $tMap->setUseIdGenerator(false);
+
+        $tMap->addPrimaryKey('ABE_UID', 'AbeUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('PRO_UID', 'ProUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('TAS_UID', 'TasUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ABE_TYPE', 'AbeType', 'string', CreoleTypes::VARCHAR, true, 10);
+
+        $tMap->addColumn('ABE_TEMPLATE', 'AbeTemplate', 'string', CreoleTypes::VARCHAR, true, 100);
+
+        $tMap->addColumn('ABE_DYN_TYPE', 'AbeDynType', 'string', CreoleTypes::VARCHAR, true, 10);
+
+        $tMap->addColumn('DYN_UID', 'DynUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ABE_EMAIL_FIELD', 'AbeEmailField', 'string', CreoleTypes::VARCHAR, true, 255);
+
+        $tMap->addColumn('ABE_ACTION_FIELD', 'AbeActionField', 'string', CreoleTypes::VARCHAR, false, 255);
+
+        $tMap->addColumn('ABE_CASE_NOTE_IN_RESPONSE', 'AbeCaseNoteInResponse', 'int', CreoleTypes::INTEGER, false, null);
+
+        $tMap->addColumn('ABE_CREATE_DATE', 'AbeCreateDate', 'int', CreoleTypes::TIMESTAMP, true, null);
+
+        $tMap->addColumn('ABE_UPDATE_DATE', 'AbeUpdateDate', 'int', CreoleTypes::TIMESTAMP, false, null);
+
+    } // doBuild()
+
+} // AbeConfigurationMapBuilder

workflow/engine/classes/model/map/AbeRequestsMapBuilder.php

@@ -0,0 +1,90 @@
+<?php
+
+require_once 'propel/map/MapBuilder.php';
+include_once 'creole/CreoleTypes.php';
+
+
+/**
+ * This class adds structure of 'ABE_REQUESTS' table to 'workflow' DatabaseMap object.
+ *
+ *
+ *
+ * These statically-built map classes are used by Propel to do runtime db structure discovery.
+ * For example, the createSelectSql() method checks the type of a given column used in an
+ * ORDER BY clause to know whether it needs to apply SQL to make the ORDER BY case-insensitive
+ * (i.e. if it's a text column type).
+ *
+ * @package    workflow.classes.model.map
+ */
+class AbeRequestsMapBuilder
+{
+
+    /**
+     * The (dot-path) name of this class
+     */
+    const CLASS_NAME = 'classes.model.map.AbeRequestsMapBuilder';
+
+    /**
+     * The database map.
+     */
+    private $dbMap;
+
+    /**
+     * Tells us if this DatabaseMapBuilder is built so that we
+     * don't have to re-build it every time.
+     *
+     * @return     boolean true if this DatabaseMapBuilder is built, false otherwise.
+     */
+    public function isBuilt()
+    {
+        return ($this->dbMap !== null);
+    }
+
+    /**
+     * Gets the databasemap this map builder built.
+     *
+     * @return     the databasemap
+     */
+    public function getDatabaseMap()
+    {
+        return $this->dbMap;
+    }
+
+    /**
+     * The doBuild() method builds the DatabaseMap
+     *
+     * @return     void
+     * @throws     PropelException
+     */
+    public function doBuild()
+    {
+        $this->dbMap = Propel::getDatabaseMap('workflow');
+
+        $tMap = $this->dbMap->addTable('ABE_REQUESTS');
+        $tMap->setPhpName('AbeRequests');
+
+        $tMap->setUseIdGenerator(false);
+
+        $tMap->addPrimaryKey('ABE_REQ_UID', 'AbeReqUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ABE_UID', 'AbeUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('APP_UID', 'AppUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('DEL_INDEX', 'DelIndex', 'int', CreoleTypes::INTEGER, true, null);
+
+        $tMap->addColumn('ABE_REQ_SENT_TO', 'AbeReqSentTo', 'string', CreoleTypes::VARCHAR, true, 100);
+
+        $tMap->addColumn('ABE_REQ_SUBJECT', 'AbeReqSubject', 'string', CreoleTypes::VARCHAR, true, 150);
+
+        $tMap->addColumn('ABE_REQ_BODY', 'AbeReqBody', 'string', CreoleTypes::LONGVARCHAR, true, null);
+
+        $tMap->addColumn('ABE_REQ_DATE', 'AbeReqDate', 'int', CreoleTypes::TIMESTAMP, true, null);
+
+        $tMap->addColumn('ABE_REQ_STATUS', 'AbeReqStatus', 'string', CreoleTypes::VARCHAR, false, 10);
+
+        $tMap->addColumn('ABE_REQ_ANSWERED', 'AbeReqAnswered', 'int', CreoleTypes::TINYINT, true, null);
+
+    } // doBuild()
+
+} // AbeRequestsMapBuilder

workflow/engine/classes/model/map/AbeResponsesMapBuilder.php

@@ -0,0 +1,84 @@
+<?php
+
+require_once 'propel/map/MapBuilder.php';
+include_once 'creole/CreoleTypes.php';
+
+
+/**
+ * This class adds structure of 'ABE_RESPONSES' table to 'workflow' DatabaseMap object.
+ *
+ *
+ *
+ * These statically-built map classes are used by Propel to do runtime db structure discovery.
+ * For example, the createSelectSql() method checks the type of a given column used in an
+ * ORDER BY clause to know whether it needs to apply SQL to make the ORDER BY case-insensitive
+ * (i.e. if it's a text column type).
+ *
+ * @package    workflow.classes.model.map
+ */
+class AbeResponsesMapBuilder
+{
+
+    /**
+     * The (dot-path) name of this class
+     */
+    const CLASS_NAME = 'classes.model.map.AbeResponsesMapBuilder';
+
+    /**
+     * The database map.
+     */
+    private $dbMap;
+
+    /**
+     * Tells us if this DatabaseMapBuilder is built so that we
+     * don't have to re-build it every time.
+     *
+     * @return     boolean true if this DatabaseMapBuilder is built, false otherwise.
+     */
+    public function isBuilt()
+    {
+        return ($this->dbMap !== null);
+    }
+
+    /**
+     * Gets the databasemap this map builder built.
+     *
+     * @return     the databasemap
+     */
+    public function getDatabaseMap()
+    {
+        return $this->dbMap;
+    }
+
+    /**
+     * The doBuild() method builds the DatabaseMap
+     *
+     * @return     void
+     * @throws     PropelException
+     */
+    public function doBuild()
+    {
+        $this->dbMap = Propel::getDatabaseMap('workflow');
+
+        $tMap = $this->dbMap->addTable('ABE_RESPONSES');
+        $tMap->setPhpName('AbeResponses');
+
+        $tMap->setUseIdGenerator(false);
+
+        $tMap->addPrimaryKey('ABE_RES_UID', 'AbeResUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ABE_REQ_UID', 'AbeReqUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ABE_RES_CLIENT_IP', 'AbeResClientIp', 'string', CreoleTypes::VARCHAR, true, 20);
+
+        $tMap->addColumn('ABE_RES_DATA', 'AbeResData', 'string', CreoleTypes::LONGVARCHAR, true, null);
+
+        $tMap->addColumn('ABE_RES_DATE', 'AbeResDate', 'int', CreoleTypes::TIMESTAMP, true, null);
+
+        $tMap->addColumn('ABE_RES_STATUS', 'AbeResStatus', 'string', CreoleTypes::VARCHAR, true, 10);
+
+        $tMap->addColumn('ABE_RES_MESSAGE', 'AbeResMessage', 'string', CreoleTypes::VARCHAR, false, 255);
+
+    } // doBuild()
+
+} // AbeResponsesMapBuilder

workflow/engine/classes/model/map/ElementTaskRelationMapBuilder.php

@@ -5,7 +5,7 @@ include_once 'creole/CreoleTypes.php';
 
 
 /**
- * This class adds structure of 'MESSAGE_EVENT_TASK_RELATION' table to 'workflow' DatabaseMap object.
+ * This class adds structure of 'ELEMENT_TASK_RELATION' table to 'workflow' DatabaseMap object.
  *
  *
  *
@@ -16,13 +16,13 @@ include_once 'creole/CreoleTypes.php';
  *
  * @package    workflow.classes.model.map
  */
-class MessageEventTaskRelationMapBuilder
+class ElementTaskRelationMapBuilder
 {
 
     /**
      * The (dot-path) name of this class
      */
-    const CLASS_NAME = 'classes.model.map.MessageEventTaskRelationMapBuilder';
+    const CLASS_NAME = 'classes.model.map.ElementTaskRelationMapBuilder';
 
     /**
      * The database map.
@@ -60,19 +60,21 @@ class MessageEventTaskRelationMapBuilder
     {
         $this->dbMap = Propel::getDatabaseMap('workflow');
 
-        $tMap = $this->dbMap->addTable('MESSAGE_EVENT_TASK_RELATION');
-        $tMap->setPhpName('MessageEventTaskRelation');
+        $tMap = $this->dbMap->addTable('ELEMENT_TASK_RELATION');
+        $tMap->setPhpName('ElementTaskRelation');
 
         $tMap->setUseIdGenerator(false);
 
-        $tMap->addPrimaryKey('MSGETR_UID', 'MsgetrUid', 'string', CreoleTypes::VARCHAR, true, 32);
+        $tMap->addPrimaryKey('ETR_UID', 'EtrUid', 'string', CreoleTypes::VARCHAR, true, 32);
 
         $tMap->addColumn('PRJ_UID', 'PrjUid', 'string', CreoleTypes::VARCHAR, true, 32);
 
-        $tMap->addColumn('EVN_UID', 'EvnUid', 'string', CreoleTypes::VARCHAR, true, 32);
+        $tMap->addColumn('ELEMENT_UID', 'ElementUid', 'string', CreoleTypes::VARCHAR, true, 32);
+
+        $tMap->addColumn('ELEMENT_TYPE', 'ElementType', 'string', CreoleTypes::VARCHAR, true, 50);
 
         $tMap->addColumn('TAS_UID', 'TasUid', 'string', CreoleTypes::VARCHAR, true, 32);
 
     } // doBuild()
 
-} // MessageEventTaskRelationMapBuilder
+} // ElementTaskRelationMapBuilder

workflow/engine/classes/model/map/ListParticipatedLastMapBuilder.php

@@ -69,7 +69,7 @@ class ListParticipatedLastMapBuilder
 
         $tMap->addPrimaryKey('USR_UID', 'UsrUid', 'string', CreoleTypes::VARCHAR, true, 32);
 
-        $tMap->addColumn('DEL_INDEX', 'DelIndex', 'int', CreoleTypes::INTEGER, true, null);
+        $tMap->addPrimaryKey('DEL_INDEX', 'DelIndex', 'int', CreoleTypes::INTEGER, true, null);
 
         $tMap->addColumn('TAS_UID', 'TasUid', 'string', CreoleTypes::VARCHAR, true, 32);
 

workflow/engine/classes/model/om/BaseAbeConfigurationPeer.php

@@ -0,0 +1,622 @@
+<?php
+
+require_once 'propel/util/BasePeer.php';
+// The object class -- needed for instanceof checks in this class.
+// actual class may be a subclass -- as returned by AbeConfigurationPeer::getOMClass()
+include_once 'classes/model/AbeConfiguration.php';
+
+/**
+ * Base static class for performing query and update operations on the 'ABE_CONFIGURATION' table.
+ *
+ * 
+ *
+ * @package    workflow.classes.model.om
+ */
+abstract class BaseAbeConfigurationPeer
+{
+
+    /** the default database name for this class */
+    const DATABASE_NAME = 'workflow';
+
+    /** the table name for this class */
+    const TABLE_NAME = 'ABE_CONFIGURATION';
+
+    /** A class that can be returned by this peer. */
+    const CLASS_DEFAULT = 'classes.model.AbeConfiguration';
+
+    /** The total number of columns. */
+    const NUM_COLUMNS = 12;
+
+    /** The number of lazy-loaded columns. */
+    const NUM_LAZY_LOAD_COLUMNS = 0;
+
+
+    /** the column name for the ABE_UID field */
+    const ABE_UID = 'ABE_CONFIGURATION.ABE_UID';
+
+    /** the column name for the PRO_UID field */
+    const PRO_UID = 'ABE_CONFIGURATION.PRO_UID';
+
+    /** the column name for the TAS_UID field */
+    const TAS_UID = 'ABE_CONFIGURATION.TAS_UID';
+
+    /** the column name for the ABE_TYPE field */
+    const ABE_TYPE = 'ABE_CONFIGURATION.ABE_TYPE';
+
+    /** the column name for the ABE_TEMPLATE field */
+    const ABE_TEMPLATE = 'ABE_CONFIGURATION.ABE_TEMPLATE';
+
+    /** the column name for the ABE_DYN_TYPE field */
+    const ABE_DYN_TYPE = 'ABE_CONFIGURATION.ABE_DYN_TYPE';
+
+    /** the column name for the DYN_UID field */
+    const DYN_UID = 'ABE_CONFIGURATION.DYN_UID';
+
+    /** the column name for the ABE_EMAIL_FIELD field */
+    const ABE_EMAIL_FIELD = 'ABE_CONFIGURATION.ABE_EMAIL_FIELD';
+
+    /** the column name for the ABE_ACTION_FIELD field */
+    const ABE_ACTION_FIELD = 'ABE_CONFIGURATION.ABE_ACTION_FIELD';
+
+    /** the column name for the ABE_CASE_NOTE_IN_RESPONSE field */
+    const ABE_CASE_NOTE_IN_RESPONSE = 'ABE_CONFIGURATION.ABE_CASE_NOTE_IN_RESPONSE';
+
+    /** the column name for the ABE_CREATE_DATE field */
+    const ABE_CREATE_DATE = 'ABE_CONFIGURATION.ABE_CREATE_DATE';
+
+    /** the column name for the ABE_UPDATE_DATE field */
+    const ABE_UPDATE_DATE = 'ABE_CONFIGURATION.ABE_UPDATE_DATE';
+
+    /** The PHP to DB Name Mapping */
+    private static $phpNameMap = null;
+
+
+    /**
+     * holds an array of fieldnames
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[self::TYPE_PHPNAME][0] = 'Id'
+     */
+    private static $fieldNames = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeUid', 'ProUid', 'TasUid', 'AbeType', 'AbeTemplate', 'AbeDynType', 'DynUid', 'AbeEmailField', 'AbeActionField', 'AbeCaseNoteInResponse', 'AbeCreateDate', 'AbeUpdateDate', ),
+        BasePeer::TYPE_COLNAME => array (AbeConfigurationPeer::ABE_UID, AbeConfigurationPeer::PRO_UID, AbeConfigurationPeer::TAS_UID, AbeConfigurationPeer::ABE_TYPE, AbeConfigurationPeer::ABE_TEMPLATE, AbeConfigurationPeer::ABE_DYN_TYPE, AbeConfigurationPeer::DYN_UID, AbeConfigurationPeer::ABE_EMAIL_FIELD, AbeConfigurationPeer::ABE_ACTION_FIELD, AbeConfigurationPeer::ABE_CASE_NOTE_IN_RESPONSE, AbeConfigurationPeer::ABE_CREATE_DATE, AbeConfigurationPeer::ABE_UPDATE_DATE, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_UID', 'PRO_UID', 'TAS_UID', 'ABE_TYPE', 'ABE_TEMPLATE', 'ABE_DYN_TYPE', 'DYN_UID', 'ABE_EMAIL_FIELD', 'ABE_ACTION_FIELD', 'ABE_CASE_NOTE_IN_RESPONSE', 'ABE_CREATE_DATE', 'ABE_UPDATE_DATE', ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, )
+    );
+
+    /**
+     * holds an array of keys for quick access to the fieldnames array
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[BasePeer::TYPE_PHPNAME]['Id'] = 0
+     */
+    private static $fieldKeys = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeUid' => 0, 'ProUid' => 1, 'TasUid' => 2, 'AbeType' => 3, 'AbeTemplate' => 4, 'AbeDynType' => 5, 'DynUid' => 6, 'AbeEmailField' => 7, 'AbeActionField' => 8, 'AbeCaseNoteInResponse' => 9, 'AbeCreateDate' => 10, 'AbeUpdateDate' => 11, ),
+        BasePeer::TYPE_COLNAME => array (AbeConfigurationPeer::ABE_UID => 0, AbeConfigurationPeer::PRO_UID => 1, AbeConfigurationPeer::TAS_UID => 2, AbeConfigurationPeer::ABE_TYPE => 3, AbeConfigurationPeer::ABE_TEMPLATE => 4, AbeConfigurationPeer::ABE_DYN_TYPE => 5, AbeConfigurationPeer::DYN_UID => 6, AbeConfigurationPeer::ABE_EMAIL_FIELD => 7, AbeConfigurationPeer::ABE_ACTION_FIELD => 8, AbeConfigurationPeer::ABE_CASE_NOTE_IN_RESPONSE => 9, AbeConfigurationPeer::ABE_CREATE_DATE => 10, AbeConfigurationPeer::ABE_UPDATE_DATE => 11, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_UID' => 0, 'PRO_UID' => 1, 'TAS_UID' => 2, 'ABE_TYPE' => 3, 'ABE_TEMPLATE' => 4, 'ABE_DYN_TYPE' => 5, 'DYN_UID' => 6, 'ABE_EMAIL_FIELD' => 7, 'ABE_ACTION_FIELD' => 8, 'ABE_CASE_NOTE_IN_RESPONSE' => 9, 'ABE_CREATE_DATE' => 10, 'ABE_UPDATE_DATE' => 11, ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, )
+    );
+
+    /**
+     * @return     MapBuilder the map builder for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getMapBuilder()
+    {
+        include_once 'classes/model/map/AbeConfigurationMapBuilder.php';
+        return BasePeer::getMapBuilder('classes.model.map.AbeConfigurationMapBuilder');
+    }
+    /**
+     * Gets a map (hash) of PHP names to DB column names.
+     *
+     * @return     array The PHP to DB name map for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @deprecated Use the getFieldNames() and translateFieldName() methods instead of this.
+     */
+    public static function getPhpNameMap()
+    {
+        if (self::$phpNameMap === null) {
+            $map = AbeConfigurationPeer::getTableMap();
+            $columns = $map->getColumns();
+            $nameMap = array();
+            foreach ($columns as $column) {
+                $nameMap[$column->getPhpName()] = $column->getColumnName();
+            }
+            self::$phpNameMap = $nameMap;
+        }
+        return self::$phpNameMap;
+    }
+    /**
+     * Translates a fieldname to another type
+     *
+     * @param      string $name field name
+     * @param      string $fromType One of the class type constants TYPE_PHPNAME,
+     *                         TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @param      string $toType   One of the class type constants
+     * @return     string translated name of the field.
+     */
+    static public function translateFieldName($name, $fromType, $toType)
+    {
+        $toNames = self::getFieldNames($toType);
+        $key = isset(self::$fieldKeys[$fromType][$name]) ? self::$fieldKeys[$fromType][$name] : null;
+        if ($key === null) {
+            throw new PropelException("'$name' could not be found in the field names of type '$fromType'. These are: " . print_r(self::$fieldKeys[$fromType], true));
+        }
+        return $toNames[$key];
+    }
+
+    /**
+     * Returns an array of of field names.
+     *
+     * @param      string $type The type of fieldnames to return:
+     *                      One of the class type constants TYPE_PHPNAME,
+     *                      TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     array A list of field names
+     */
+
+    static public function getFieldNames($type = BasePeer::TYPE_PHPNAME)
+    {
+        if (!array_key_exists($type, self::$fieldNames)) {
+            throw new PropelException('Method getFieldNames() expects the parameter $type to be one of the class constants TYPE_PHPNAME, TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM. ' . $type . ' was given.');
+        }
+        return self::$fieldNames[$type];
+    }
+
+    /**
+     * Convenience method which changes table.column to alias.column.
+     *
+     * Using this method you can maintain SQL abstraction while using column aliases.
+     * <code>
+     *      $c->addAlias("alias1", TablePeer::TABLE_NAME);
+     *      $c->addJoin(TablePeer::alias("alias1", TablePeer::PRIMARY_KEY_COLUMN), TablePeer::PRIMARY_KEY_COLUMN);
+     * </code>
+     * @param      string $alias The alias for the current table.
+     * @param      string $column The column name for current table. (i.e. AbeConfigurationPeer::COLUMN_NAME).
+     * @return     string
+     */
+    public static function alias($alias, $column)
+    {
+        return str_replace(AbeConfigurationPeer::TABLE_NAME.'.', $alias.'.', $column);
+    }
+
+    /**
+     * Add all the columns needed to create a new object.
+     *
+     * Note: any columns that were marked with lazyLoad="true" in the
+     * XML schema will not be added to the select list and only loaded
+     * on demand.
+     *
+     * @param      criteria object containing the columns to add.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function addSelectColumns(Criteria $criteria)
+    {
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_UID);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::PRO_UID);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::TAS_UID);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_TYPE);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_TEMPLATE);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_DYN_TYPE);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::DYN_UID);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_EMAIL_FIELD);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_ACTION_FIELD);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_CASE_NOTE_IN_RESPONSE);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_CREATE_DATE);
+
+        $criteria->addSelectColumn(AbeConfigurationPeer::ABE_UPDATE_DATE);
+
+    }
+
+    const COUNT = 'COUNT(ABE_CONFIGURATION.ABE_UID)';
+    const COUNT_DISTINCT = 'COUNT(DISTINCT ABE_CONFIGURATION.ABE_UID)';
+
+    /**
+     * Returns the number of rows matching criteria.
+     *
+     * @param      Criteria $criteria
+     * @param      boolean $distinct Whether to select only distinct columns (You can also set DISTINCT modifier in Criteria).
+     * @param      Connection $con
+     * @return     int Number of matching rows.
+     */
+    public static function doCount(Criteria $criteria, $distinct = false, $con = null)
+    {
+        // we're going to modify criteria, so copy it first
+        $criteria = clone $criteria;
+
+        // clear out anything that might confuse the ORDER BY clause
+        $criteria->clearSelectColumns()->clearOrderByColumns();
+        if ($distinct || in_array(Criteria::DISTINCT, $criteria->getSelectModifiers())) {
+            $criteria->addSelectColumn(AbeConfigurationPeer::COUNT_DISTINCT);
+        } else {
+            $criteria->addSelectColumn(AbeConfigurationPeer::COUNT);
+        }
+
+        // just in case we're grouping: add those columns to the select statement
+        foreach ($criteria->getGroupByColumns() as $column) {
+            $criteria->addSelectColumn($column);
+        }
+
+        $rs = AbeConfigurationPeer::doSelectRS($criteria, $con);
+        if ($rs->next()) {
+            return $rs->getInt(1);
+        } else {
+            // no rows returned; we infer that means 0 matches.
+            return 0;
+        }
+    }
+    /**
+     * Method to select one object from the DB.
+     *
+     * @param      Criteria $criteria object used to create the SELECT statement.
+     * @param      Connection $con
+     * @return     AbeConfiguration
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelectOne(Criteria $criteria, $con = null)
+    {
+        $critcopy = clone $criteria;
+        $critcopy->setLimit(1);
+        $objects = AbeConfigurationPeer::doSelect($critcopy, $con);
+        if ($objects) {
+            return $objects[0];
+        }
+        return null;
+    }
+    /**
+     * Method to do selects.
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con
+     * @return     array Array of selected Objects
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelect(Criteria $criteria, $con = null)
+    {
+        return AbeConfigurationPeer::populateObjects(AbeConfigurationPeer::doSelectRS($criteria, $con));
+    }
+    /**
+     * Prepares the Criteria object and uses the parent doSelect()
+     * method to get a ResultSet.
+     *
+     * Use this method directly if you want to just get the resultset
+     * (instead of an array of objects).
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @return     ResultSet The resultset object with numerically-indexed fields.
+     * @see        BasePeer::doSelect()
+     */
+    public static function doSelectRS(Criteria $criteria, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if (!$criteria->getSelectColumns()) {
+            $criteria = clone $criteria;
+            AbeConfigurationPeer::addSelectColumns($criteria);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        // BasePeer returns a Creole ResultSet, set to return
+        // rows indexed numerically.
+        return BasePeer::doSelect($criteria, $con);
+    }
+    /**
+     * The returned array will contain objects of the default type or
+     * objects that inherit from the default.
+     *
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function populateObjects(ResultSet $rs)
+    {
+        $results = array();
+
+        // set the class once to avoid overhead in the loop
+        $cls = AbeConfigurationPeer::getOMClass();
+        $cls = Propel::import($cls);
+        // populate the object(s)
+        while ($rs->next()) {
+
+            $obj = new $cls();
+            $obj->hydrate($rs);
+            $results[] = $obj;
+
+        }
+        return $results;
+    }
+    /**
+     * Returns the TableMap related to this peer.
+     * This method is not needed for general use but a specific application could have a need.
+     * @return     TableMap
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getTableMap()
+    {
+        return Propel::getDatabaseMap(self::DATABASE_NAME)->getTable(self::TABLE_NAME);
+    }
+
+    /**
+     * The class that the Peer will make instances of.
+     *
+     * This uses a dot-path notation which is tranalted into a path
+     * relative to a location on the PHP include_path.
+     * (e.g. path.to.MyClass -> 'path/to/MyClass.php')
+     *
+     * @return     string path.to.ClassName
+     */
+    public static function getOMClass()
+    {
+        return AbeConfigurationPeer::CLASS_DEFAULT;
+    }
+
+    /**
+     * Method perform an INSERT on the database, given a AbeConfiguration or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeConfiguration object containing data that is used to create the INSERT statement.
+     * @param      Connection $con the connection to use
+     * @return     mixed The new primary key.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doInsert($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } else {
+            $criteria = $values->buildCriteria(); // build Criteria from AbeConfiguration object
+        }
+
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table (I guess, conceivably)
+            $con->begin();
+            $pk = BasePeer::doInsert($criteria, $con);
+            $con->commit();
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+
+        return $pk;
+    }
+
+    /**
+     * Method perform an UPDATE on the database, given a AbeConfiguration or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeConfiguration object containing data create the UPDATE statement.
+     * @param      Connection $con The connection to use (specify Connection exert more control over transactions).
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doUpdate($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $selectCriteria = new Criteria(self::DATABASE_NAME);
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+
+            $comparison = $criteria->getComparison(AbeConfigurationPeer::ABE_UID);
+            $selectCriteria->add(AbeConfigurationPeer::ABE_UID, $criteria->remove(AbeConfigurationPeer::ABE_UID), $comparison);
+
+        } else {
+            $criteria = $values->buildCriteria(); // gets full criteria
+            $selectCriteria = $values->buildPkeyCriteria(); // gets criteria w/ primary key(s)
+        }
+
+        // set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        return BasePeer::doUpdate($selectCriteria, $criteria, $con);
+    }
+
+    /**
+     * Method to DELETE all rows from the ABE_CONFIGURATION table.
+     *
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     */
+    public static function doDeleteAll($con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+        $affectedRows = 0; // initialize var to track total num of affected rows
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+            $affectedRows += BasePeer::doDeleteAll(AbeConfigurationPeer::TABLE_NAME, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Method perform a DELETE on the database, given a AbeConfiguration or Criteria object OR a primary key value.
+     *
+     * @param      mixed $values Criteria or AbeConfiguration object or primary key or array of primary keys
+     *              which is used to create the DELETE statement
+     * @param      Connection $con the connection to use
+     * @return     int  The number of affected rows (if supported by underlying database driver).
+     *             This includes CASCADE-related rows
+     *              if supported by native driver or if emulated using Propel.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+    */
+    public static function doDelete($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(AbeConfigurationPeer::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } elseif ($values instanceof AbeConfiguration) {
+
+            $criteria = $values->buildPkeyCriteria();
+        } else {
+            // it must be the primary key
+            $criteria = new Criteria(self::DATABASE_NAME);
+            $criteria->add(AbeConfigurationPeer::ABE_UID, (array) $values, Criteria::IN);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        $affectedRows = 0; // initialize var to track total num of affected rows
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+
+            $affectedRows += BasePeer::doDelete($criteria, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Validates all modified columns of given AbeConfiguration object.
+     * If parameter $columns is either a single column name or an array of column names
+     * than only those columns are validated.
+     *
+     * NOTICE: This does not apply to primary or foreign keys for now.
+     *
+     * @param      AbeConfiguration $obj The object to validate.
+     * @param      mixed $cols Column name or array of column names.
+     *
+     * @return     mixed TRUE if all columns are valid or the error message of the first invalid column.
+     */
+    public static function doValidate(AbeConfiguration $obj, $cols = null)
+    {
+        $columns = array();
+
+        if ($cols) {
+            $dbMap = Propel::getDatabaseMap(AbeConfigurationPeer::DATABASE_NAME);
+            $tableMap = $dbMap->getTable(AbeConfigurationPeer::TABLE_NAME);
+
+            if (! is_array($cols)) {
+                $cols = array($cols);
+            }
+
+            foreach ($cols as $colName) {
+                if ($tableMap->containsColumn($colName)) {
+                    $get = 'get' . $tableMap->getColumn($colName)->getPhpName();
+                    $columns[$colName] = $obj->$get();
+                }
+            }
+        } else {
+
+        }
+
+        return BasePeer::doValidate(AbeConfigurationPeer::DATABASE_NAME, AbeConfigurationPeer::TABLE_NAME, $columns);
+    }
+
+    /**
+     * Retrieve a single object by pkey.
+     *
+     * @param      mixed $pk the primary key.
+     * @param      Connection $con the connection to use
+     * @return     AbeConfiguration
+     */
+    public static function retrieveByPK($pk, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $criteria = new Criteria(AbeConfigurationPeer::DATABASE_NAME);
+
+        $criteria->add(AbeConfigurationPeer::ABE_UID, $pk);
+
+
+        $v = AbeConfigurationPeer::doSelect($criteria, $con);
+
+        return !empty($v) > 0 ? $v[0] : null;
+    }
+
+    /**
+     * Retrieve multiple objects by pkey.
+     *
+     * @param      array $pks List of primary keys
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function retrieveByPKs($pks, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $objs = null;
+        if (empty($pks)) {
+            $objs = array();
+        } else {
+            $criteria = new Criteria();
+            $criteria->add(AbeConfigurationPeer::ABE_UID, $pks, Criteria::IN);
+            $objs = AbeConfigurationPeer::doSelect($criteria, $con);
+        }
+        return $objs;
+    }
+}
+
+
+// static code to register the map builder for this Peer with the main Propel class
+if (Propel::isInit()) {
+    // the MapBuilder classes register themselves with Propel during initialization
+    // so we need to load them here.
+    try {
+        BaseAbeConfigurationPeer::getMapBuilder();
+    } catch (Exception $e) {
+        Propel::log('Could not initialize Peer: ' . $e->getMessage(), Propel::LOG_ERR);
+    }
+} else {
+    // even if Propel is not yet initialized, the map builder class can be registered
+    // now and then it will be loaded when Propel initializes.
+    require_once 'classes/model/map/AbeConfigurationMapBuilder.php';
+    Propel::registerMapBuilder('classes.model.map.AbeConfigurationMapBuilder');
+}
+

workflow/engine/classes/model/om/BaseAbeRequestsPeer.php

@@ -0,0 +1,612 @@
+<?php
+
+require_once 'propel/util/BasePeer.php';
+// The object class -- needed for instanceof checks in this class.
+// actual class may be a subclass -- as returned by AbeRequestsPeer::getOMClass()
+include_once 'classes/model/AbeRequests.php';
+
+/**
+ * Base static class for performing query and update operations on the 'ABE_REQUESTS' table.
+ *
+ * 
+ *
+ * @package    workflow.classes.model.om
+ */
+abstract class BaseAbeRequestsPeer
+{
+
+    /** the default database name for this class */
+    const DATABASE_NAME = 'workflow';
+
+    /** the table name for this class */
+    const TABLE_NAME = 'ABE_REQUESTS';
+
+    /** A class that can be returned by this peer. */
+    const CLASS_DEFAULT = 'classes.model.AbeRequests';
+
+    /** The total number of columns. */
+    const NUM_COLUMNS = 10;
+
+    /** The number of lazy-loaded columns. */
+    const NUM_LAZY_LOAD_COLUMNS = 0;
+
+
+    /** the column name for the ABE_REQ_UID field */
+    const ABE_REQ_UID = 'ABE_REQUESTS.ABE_REQ_UID';
+
+    /** the column name for the ABE_UID field */
+    const ABE_UID = 'ABE_REQUESTS.ABE_UID';
+
+    /** the column name for the APP_UID field */
+    const APP_UID = 'ABE_REQUESTS.APP_UID';
+
+    /** the column name for the DEL_INDEX field */
+    const DEL_INDEX = 'ABE_REQUESTS.DEL_INDEX';
+
+    /** the column name for the ABE_REQ_SENT_TO field */
+    const ABE_REQ_SENT_TO = 'ABE_REQUESTS.ABE_REQ_SENT_TO';
+
+    /** the column name for the ABE_REQ_SUBJECT field */
+    const ABE_REQ_SUBJECT = 'ABE_REQUESTS.ABE_REQ_SUBJECT';
+
+    /** the column name for the ABE_REQ_BODY field */
+    const ABE_REQ_BODY = 'ABE_REQUESTS.ABE_REQ_BODY';
+
+    /** the column name for the ABE_REQ_DATE field */
+    const ABE_REQ_DATE = 'ABE_REQUESTS.ABE_REQ_DATE';
+
+    /** the column name for the ABE_REQ_STATUS field */
+    const ABE_REQ_STATUS = 'ABE_REQUESTS.ABE_REQ_STATUS';
+
+    /** the column name for the ABE_REQ_ANSWERED field */
+    const ABE_REQ_ANSWERED = 'ABE_REQUESTS.ABE_REQ_ANSWERED';
+
+    /** The PHP to DB Name Mapping */
+    private static $phpNameMap = null;
+
+
+    /**
+     * holds an array of fieldnames
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[self::TYPE_PHPNAME][0] = 'Id'
+     */
+    private static $fieldNames = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeReqUid', 'AbeUid', 'AppUid', 'DelIndex', 'AbeReqSentTo', 'AbeReqSubject', 'AbeReqBody', 'AbeReqDate', 'AbeReqStatus', 'AbeReqAnswered', ),
+        BasePeer::TYPE_COLNAME => array (AbeRequestsPeer::ABE_REQ_UID, AbeRequestsPeer::ABE_UID, AbeRequestsPeer::APP_UID, AbeRequestsPeer::DEL_INDEX, AbeRequestsPeer::ABE_REQ_SENT_TO, AbeRequestsPeer::ABE_REQ_SUBJECT, AbeRequestsPeer::ABE_REQ_BODY, AbeRequestsPeer::ABE_REQ_DATE, AbeRequestsPeer::ABE_REQ_STATUS, AbeRequestsPeer::ABE_REQ_ANSWERED, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_REQ_UID', 'ABE_UID', 'APP_UID', 'DEL_INDEX', 'ABE_REQ_SENT_TO', 'ABE_REQ_SUBJECT', 'ABE_REQ_BODY', 'ABE_REQ_DATE', 'ABE_REQ_STATUS', 'ABE_REQ_ANSWERED', ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, 7, 8, 9, )
+    );
+
+    /**
+     * holds an array of keys for quick access to the fieldnames array
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[BasePeer::TYPE_PHPNAME]['Id'] = 0
+     */
+    private static $fieldKeys = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeReqUid' => 0, 'AbeUid' => 1, 'AppUid' => 2, 'DelIndex' => 3, 'AbeReqSentTo' => 4, 'AbeReqSubject' => 5, 'AbeReqBody' => 6, 'AbeReqDate' => 7, 'AbeReqStatus' => 8, 'AbeReqAnswered' => 9, ),
+        BasePeer::TYPE_COLNAME => array (AbeRequestsPeer::ABE_REQ_UID => 0, AbeRequestsPeer::ABE_UID => 1, AbeRequestsPeer::APP_UID => 2, AbeRequestsPeer::DEL_INDEX => 3, AbeRequestsPeer::ABE_REQ_SENT_TO => 4, AbeRequestsPeer::ABE_REQ_SUBJECT => 5, AbeRequestsPeer::ABE_REQ_BODY => 6, AbeRequestsPeer::ABE_REQ_DATE => 7, AbeRequestsPeer::ABE_REQ_STATUS => 8, AbeRequestsPeer::ABE_REQ_ANSWERED => 9, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_REQ_UID' => 0, 'ABE_UID' => 1, 'APP_UID' => 2, 'DEL_INDEX' => 3, 'ABE_REQ_SENT_TO' => 4, 'ABE_REQ_SUBJECT' => 5, 'ABE_REQ_BODY' => 6, 'ABE_REQ_DATE' => 7, 'ABE_REQ_STATUS' => 8, 'ABE_REQ_ANSWERED' => 9, ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, 7, 8, 9, )
+    );
+
+    /**
+     * @return     MapBuilder the map builder for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getMapBuilder()
+    {
+        include_once 'classes/model/map/AbeRequestsMapBuilder.php';
+        return BasePeer::getMapBuilder('classes.model.map.AbeRequestsMapBuilder');
+    }
+    /**
+     * Gets a map (hash) of PHP names to DB column names.
+     *
+     * @return     array The PHP to DB name map for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @deprecated Use the getFieldNames() and translateFieldName() methods instead of this.
+     */
+    public static function getPhpNameMap()
+    {
+        if (self::$phpNameMap === null) {
+            $map = AbeRequestsPeer::getTableMap();
+            $columns = $map->getColumns();
+            $nameMap = array();
+            foreach ($columns as $column) {
+                $nameMap[$column->getPhpName()] = $column->getColumnName();
+            }
+            self::$phpNameMap = $nameMap;
+        }
+        return self::$phpNameMap;
+    }
+    /**
+     * Translates a fieldname to another type
+     *
+     * @param      string $name field name
+     * @param      string $fromType One of the class type constants TYPE_PHPNAME,
+     *                         TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @param      string $toType   One of the class type constants
+     * @return     string translated name of the field.
+     */
+    static public function translateFieldName($name, $fromType, $toType)
+    {
+        $toNames = self::getFieldNames($toType);
+        $key = isset(self::$fieldKeys[$fromType][$name]) ? self::$fieldKeys[$fromType][$name] : null;
+        if ($key === null) {
+            throw new PropelException("'$name' could not be found in the field names of type '$fromType'. These are: " . print_r(self::$fieldKeys[$fromType], true));
+        }
+        return $toNames[$key];
+    }
+
+    /**
+     * Returns an array of of field names.
+     *
+     * @param      string $type The type of fieldnames to return:
+     *                      One of the class type constants TYPE_PHPNAME,
+     *                      TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     array A list of field names
+     */
+
+    static public function getFieldNames($type = BasePeer::TYPE_PHPNAME)
+    {
+        if (!array_key_exists($type, self::$fieldNames)) {
+            throw new PropelException('Method getFieldNames() expects the parameter $type to be one of the class constants TYPE_PHPNAME, TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM. ' . $type . ' was given.');
+        }
+        return self::$fieldNames[$type];
+    }
+
+    /**
+     * Convenience method which changes table.column to alias.column.
+     *
+     * Using this method you can maintain SQL abstraction while using column aliases.
+     * <code>
+     *      $c->addAlias("alias1", TablePeer::TABLE_NAME);
+     *      $c->addJoin(TablePeer::alias("alias1", TablePeer::PRIMARY_KEY_COLUMN), TablePeer::PRIMARY_KEY_COLUMN);
+     * </code>
+     * @param      string $alias The alias for the current table.
+     * @param      string $column The column name for current table. (i.e. AbeRequestsPeer::COLUMN_NAME).
+     * @return     string
+     */
+    public static function alias($alias, $column)
+    {
+        return str_replace(AbeRequestsPeer::TABLE_NAME.'.', $alias.'.', $column);
+    }
+
+    /**
+     * Add all the columns needed to create a new object.
+     *
+     * Note: any columns that were marked with lazyLoad="true" in the
+     * XML schema will not be added to the select list and only loaded
+     * on demand.
+     *
+     * @param      criteria object containing the columns to add.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function addSelectColumns(Criteria $criteria)
+    {
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_UID);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_UID);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::APP_UID);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::DEL_INDEX);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_SENT_TO);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_SUBJECT);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_BODY);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_DATE);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_STATUS);
+
+        $criteria->addSelectColumn(AbeRequestsPeer::ABE_REQ_ANSWERED);
+
+    }
+
+    const COUNT = 'COUNT(ABE_REQUESTS.ABE_REQ_UID)';
+    const COUNT_DISTINCT = 'COUNT(DISTINCT ABE_REQUESTS.ABE_REQ_UID)';
+
+    /**
+     * Returns the number of rows matching criteria.
+     *
+     * @param      Criteria $criteria
+     * @param      boolean $distinct Whether to select only distinct columns (You can also set DISTINCT modifier in Criteria).
+     * @param      Connection $con
+     * @return     int Number of matching rows.
+     */
+    public static function doCount(Criteria $criteria, $distinct = false, $con = null)
+    {
+        // we're going to modify criteria, so copy it first
+        $criteria = clone $criteria;
+
+        // clear out anything that might confuse the ORDER BY clause
+        $criteria->clearSelectColumns()->clearOrderByColumns();
+        if ($distinct || in_array(Criteria::DISTINCT, $criteria->getSelectModifiers())) {
+            $criteria->addSelectColumn(AbeRequestsPeer::COUNT_DISTINCT);
+        } else {
+            $criteria->addSelectColumn(AbeRequestsPeer::COUNT);
+        }
+
+        // just in case we're grouping: add those columns to the select statement
+        foreach ($criteria->getGroupByColumns() as $column) {
+            $criteria->addSelectColumn($column);
+        }
+
+        $rs = AbeRequestsPeer::doSelectRS($criteria, $con);
+        if ($rs->next()) {
+            return $rs->getInt(1);
+        } else {
+            // no rows returned; we infer that means 0 matches.
+            return 0;
+        }
+    }
+    /**
+     * Method to select one object from the DB.
+     *
+     * @param      Criteria $criteria object used to create the SELECT statement.
+     * @param      Connection $con
+     * @return     AbeRequests
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelectOne(Criteria $criteria, $con = null)
+    {
+        $critcopy = clone $criteria;
+        $critcopy->setLimit(1);
+        $objects = AbeRequestsPeer::doSelect($critcopy, $con);
+        if ($objects) {
+            return $objects[0];
+        }
+        return null;
+    }
+    /**
+     * Method to do selects.
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con
+     * @return     array Array of selected Objects
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelect(Criteria $criteria, $con = null)
+    {
+        return AbeRequestsPeer::populateObjects(AbeRequestsPeer::doSelectRS($criteria, $con));
+    }
+    /**
+     * Prepares the Criteria object and uses the parent doSelect()
+     * method to get a ResultSet.
+     *
+     * Use this method directly if you want to just get the resultset
+     * (instead of an array of objects).
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @return     ResultSet The resultset object with numerically-indexed fields.
+     * @see        BasePeer::doSelect()
+     */
+    public static function doSelectRS(Criteria $criteria, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if (!$criteria->getSelectColumns()) {
+            $criteria = clone $criteria;
+            AbeRequestsPeer::addSelectColumns($criteria);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        // BasePeer returns a Creole ResultSet, set to return
+        // rows indexed numerically.
+        return BasePeer::doSelect($criteria, $con);
+    }
+    /**
+     * The returned array will contain objects of the default type or
+     * objects that inherit from the default.
+     *
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function populateObjects(ResultSet $rs)
+    {
+        $results = array();
+
+        // set the class once to avoid overhead in the loop
+        $cls = AbeRequestsPeer::getOMClass();
+        $cls = Propel::import($cls);
+        // populate the object(s)
+        while ($rs->next()) {
+
+            $obj = new $cls();
+            $obj->hydrate($rs);
+            $results[] = $obj;
+
+        }
+        return $results;
+    }
+    /**
+     * Returns the TableMap related to this peer.
+     * This method is not needed for general use but a specific application could have a need.
+     * @return     TableMap
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getTableMap()
+    {
+        return Propel::getDatabaseMap(self::DATABASE_NAME)->getTable(self::TABLE_NAME);
+    }
+
+    /**
+     * The class that the Peer will make instances of.
+     *
+     * This uses a dot-path notation which is tranalted into a path
+     * relative to a location on the PHP include_path.
+     * (e.g. path.to.MyClass -> 'path/to/MyClass.php')
+     *
+     * @return     string path.to.ClassName
+     */
+    public static function getOMClass()
+    {
+        return AbeRequestsPeer::CLASS_DEFAULT;
+    }
+
+    /**
+     * Method perform an INSERT on the database, given a AbeRequests or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeRequests object containing data that is used to create the INSERT statement.
+     * @param      Connection $con the connection to use
+     * @return     mixed The new primary key.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doInsert($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } else {
+            $criteria = $values->buildCriteria(); // build Criteria from AbeRequests object
+        }
+
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table (I guess, conceivably)
+            $con->begin();
+            $pk = BasePeer::doInsert($criteria, $con);
+            $con->commit();
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+
+        return $pk;
+    }
+
+    /**
+     * Method perform an UPDATE on the database, given a AbeRequests or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeRequests object containing data create the UPDATE statement.
+     * @param      Connection $con The connection to use (specify Connection exert more control over transactions).
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doUpdate($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $selectCriteria = new Criteria(self::DATABASE_NAME);
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+
+            $comparison = $criteria->getComparison(AbeRequestsPeer::ABE_REQ_UID);
+            $selectCriteria->add(AbeRequestsPeer::ABE_REQ_UID, $criteria->remove(AbeRequestsPeer::ABE_REQ_UID), $comparison);
+
+        } else {
+            $criteria = $values->buildCriteria(); // gets full criteria
+            $selectCriteria = $values->buildPkeyCriteria(); // gets criteria w/ primary key(s)
+        }
+
+        // set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        return BasePeer::doUpdate($selectCriteria, $criteria, $con);
+    }
+
+    /**
+     * Method to DELETE all rows from the ABE_REQUESTS table.
+     *
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     */
+    public static function doDeleteAll($con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+        $affectedRows = 0; // initialize var to track total num of affected rows
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+            $affectedRows += BasePeer::doDeleteAll(AbeRequestsPeer::TABLE_NAME, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Method perform a DELETE on the database, given a AbeRequests or Criteria object OR a primary key value.
+     *
+     * @param      mixed $values Criteria or AbeRequests object or primary key or array of primary keys
+     *              which is used to create the DELETE statement
+     * @param      Connection $con the connection to use
+     * @return     int  The number of affected rows (if supported by underlying database driver).
+     *             This includes CASCADE-related rows
+     *              if supported by native driver or if emulated using Propel.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+    */
+    public static function doDelete($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(AbeRequestsPeer::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } elseif ($values instanceof AbeRequests) {
+
+            $criteria = $values->buildPkeyCriteria();
+        } else {
+            // it must be the primary key
+            $criteria = new Criteria(self::DATABASE_NAME);
+            $criteria->add(AbeRequestsPeer::ABE_REQ_UID, (array) $values, Criteria::IN);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        $affectedRows = 0; // initialize var to track total num of affected rows
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+
+            $affectedRows += BasePeer::doDelete($criteria, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Validates all modified columns of given AbeRequests object.
+     * If parameter $columns is either a single column name or an array of column names
+     * than only those columns are validated.
+     *
+     * NOTICE: This does not apply to primary or foreign keys for now.
+     *
+     * @param      AbeRequests $obj The object to validate.
+     * @param      mixed $cols Column name or array of column names.
+     *
+     * @return     mixed TRUE if all columns are valid or the error message of the first invalid column.
+     */
+    public static function doValidate(AbeRequests $obj, $cols = null)
+    {
+        $columns = array();
+
+        if ($cols) {
+            $dbMap = Propel::getDatabaseMap(AbeRequestsPeer::DATABASE_NAME);
+            $tableMap = $dbMap->getTable(AbeRequestsPeer::TABLE_NAME);
+
+            if (! is_array($cols)) {
+                $cols = array($cols);
+            }
+
+            foreach ($cols as $colName) {
+                if ($tableMap->containsColumn($colName)) {
+                    $get = 'get' . $tableMap->getColumn($colName)->getPhpName();
+                    $columns[$colName] = $obj->$get();
+                }
+            }
+        } else {
+
+        }
+
+        return BasePeer::doValidate(AbeRequestsPeer::DATABASE_NAME, AbeRequestsPeer::TABLE_NAME, $columns);
+    }
+
+    /**
+     * Retrieve a single object by pkey.
+     *
+     * @param      mixed $pk the primary key.
+     * @param      Connection $con the connection to use
+     * @return     AbeRequests
+     */
+    public static function retrieveByPK($pk, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $criteria = new Criteria(AbeRequestsPeer::DATABASE_NAME);
+
+        $criteria->add(AbeRequestsPeer::ABE_REQ_UID, $pk);
+
+
+        $v = AbeRequestsPeer::doSelect($criteria, $con);
+
+        return !empty($v) > 0 ? $v[0] : null;
+    }
+
+    /**
+     * Retrieve multiple objects by pkey.
+     *
+     * @param      array $pks List of primary keys
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function retrieveByPKs($pks, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $objs = null;
+        if (empty($pks)) {
+            $objs = array();
+        } else {
+            $criteria = new Criteria();
+            $criteria->add(AbeRequestsPeer::ABE_REQ_UID, $pks, Criteria::IN);
+            $objs = AbeRequestsPeer::doSelect($criteria, $con);
+        }
+        return $objs;
+    }
+}
+
+
+// static code to register the map builder for this Peer with the main Propel class
+if (Propel::isInit()) {
+    // the MapBuilder classes register themselves with Propel during initialization
+    // so we need to load them here.
+    try {
+        BaseAbeRequestsPeer::getMapBuilder();
+    } catch (Exception $e) {
+        Propel::log('Could not initialize Peer: ' . $e->getMessage(), Propel::LOG_ERR);
+    }
+} else {
+    // even if Propel is not yet initialized, the map builder class can be registered
+    // now and then it will be loaded when Propel initializes.
+    require_once 'classes/model/map/AbeRequestsMapBuilder.php';
+    Propel::registerMapBuilder('classes.model.map.AbeRequestsMapBuilder');
+}
+

workflow/engine/classes/model/om/BaseAbeResponses.php

@@ -0,0 +1,886 @@
+<?php
+
+require_once 'propel/om/BaseObject.php';
+
+require_once 'propel/om/Persistent.php';
+
+
+include_once 'propel/util/Criteria.php';
+
+include_once 'classes/model/AbeResponsesPeer.php';
+
+/**
+ * Base class that represents a row from the 'ABE_RESPONSES' table.
+ *
+ * 
+ *
+ * @package    workflow.classes.model.om
+ */
+abstract class BaseAbeResponses extends BaseObject implements Persistent
+{
+
+    /**
+     * The Peer class.
+     * Instance provides a convenient way of calling static methods on a class
+     * that calling code may not be able to identify.
+     * @var        AbeResponsesPeer
+    */
+    protected static $peer;
+
+    /**
+     * The value for the abe_res_uid field.
+     * @var        string
+     */
+    protected $abe_res_uid = '';
+
+    /**
+     * The value for the abe_req_uid field.
+     * @var        string
+     */
+    protected $abe_req_uid = '';
+
+    /**
+     * The value for the abe_res_client_ip field.
+     * @var        string
+     */
+    protected $abe_res_client_ip = '';
+
+    /**
+     * The value for the abe_res_data field.
+     * @var        string
+     */
+    protected $abe_res_data;
+
+    /**
+     * The value for the abe_res_date field.
+     * @var        int
+     */
+    protected $abe_res_date;
+
+    /**
+     * The value for the abe_res_status field.
+     * @var        string
+     */
+    protected $abe_res_status = '';
+
+    /**
+     * The value for the abe_res_message field.
+     * @var        string
+     */
+    protected $abe_res_message = '';
+
+    /**
+     * Flag to prevent endless save loop, if this object is referenced
+     * by another object which falls in this transaction.
+     * @var        boolean
+     */
+    protected $alreadyInSave = false;
+
+    /**
+     * Flag to prevent endless validation loop, if this object is referenced
+     * by another object which falls in this transaction.
+     * @var        boolean
+     */
+    protected $alreadyInValidation = false;
+
+    /**
+     * Get the [abe_res_uid] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeResUid()
+    {
+
+        return $this->abe_res_uid;
+    }
+
+    /**
+     * Get the [abe_req_uid] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeReqUid()
+    {
+
+        return $this->abe_req_uid;
+    }
+
+    /**
+     * Get the [abe_res_client_ip] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeResClientIp()
+    {
+
+        return $this->abe_res_client_ip;
+    }
+
+    /**
+     * Get the [abe_res_data] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeResData()
+    {
+
+        return $this->abe_res_data;
+    }
+
+    /**
+     * Get the [optionally formatted] [abe_res_date] column value.
+     * 
+     * @param      string $format The date/time format string (either date()-style or strftime()-style).
+     *                          If format is NULL, then the integer unix timestamp will be returned.
+     * @return     mixed Formatted date/time value as string or integer unix timestamp (if format is NULL).
+     * @throws     PropelException - if unable to convert the date/time to timestamp.
+     */
+    public function getAbeResDate($format = 'Y-m-d H:i:s')
+    {
+
+        if ($this->abe_res_date === null || $this->abe_res_date === '') {
+            return null;
+        } elseif (!is_int($this->abe_res_date)) {
+            // a non-timestamp value was set externally, so we convert it
+            $ts = strtotime($this->abe_res_date);
+            if ($ts === -1 || $ts === false) {
+                throw new PropelException("Unable to parse value of [abe_res_date] as date/time value: " .
+                    var_export($this->abe_res_date, true));
+            }
+        } else {
+            $ts = $this->abe_res_date;
+        }
+        if ($format === null) {
+            return $ts;
+        } elseif (strpos($format, '%') !== false) {
+            return strftime($format, $ts);
+        } else {
+            return date($format, $ts);
+        }
+    }
+
+    /**
+     * Get the [abe_res_status] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeResStatus()
+    {
+
+        return $this->abe_res_status;
+    }
+
+    /**
+     * Get the [abe_res_message] column value.
+     * 
+     * @return     string
+     */
+    public function getAbeResMessage()
+    {
+
+        return $this->abe_res_message;
+    }
+
+    /**
+     * Set the value of [abe_res_uid] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeResUid($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_res_uid !== $v || $v === '') {
+            $this->abe_res_uid = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_UID;
+        }
+
+    } // setAbeResUid()
+
+    /**
+     * Set the value of [abe_req_uid] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeReqUid($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_req_uid !== $v || $v === '') {
+            $this->abe_req_uid = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_REQ_UID;
+        }
+
+    } // setAbeReqUid()
+
+    /**
+     * Set the value of [abe_res_client_ip] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeResClientIp($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_res_client_ip !== $v || $v === '') {
+            $this->abe_res_client_ip = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_CLIENT_IP;
+        }
+
+    } // setAbeResClientIp()
+
+    /**
+     * Set the value of [abe_res_data] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeResData($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_res_data !== $v) {
+            $this->abe_res_data = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_DATA;
+        }
+
+    } // setAbeResData()
+
+    /**
+     * Set the value of [abe_res_date] column.
+     * 
+     * @param      int $v new value
+     * @return     void
+     */
+    public function setAbeResDate($v)
+    {
+
+        if ($v !== null && !is_int($v)) {
+            $ts = strtotime($v);
+            //Date/time accepts null values
+            if ($v == '') {
+                $ts = null;
+            }
+            if ($ts === -1 || $ts === false) {
+                throw new PropelException("Unable to parse date/time value for [abe_res_date] from input: " .
+                    var_export($v, true));
+            }
+        } else {
+            $ts = $v;
+        }
+        if ($this->abe_res_date !== $ts) {
+            $this->abe_res_date = $ts;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_DATE;
+        }
+
+    } // setAbeResDate()
+
+    /**
+     * Set the value of [abe_res_status] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeResStatus($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_res_status !== $v || $v === '') {
+            $this->abe_res_status = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_STATUS;
+        }
+
+    } // setAbeResStatus()
+
+    /**
+     * Set the value of [abe_res_message] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setAbeResMessage($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->abe_res_message !== $v || $v === '') {
+            $this->abe_res_message = $v;
+            $this->modifiedColumns[] = AbeResponsesPeer::ABE_RES_MESSAGE;
+        }
+
+    } // setAbeResMessage()
+
+    /**
+     * Hydrates (populates) the object variables with values from the database resultset.
+     *
+     * An offset (1-based "start column") is specified so that objects can be hydrated
+     * with a subset of the columns in the resultset rows.  This is needed, for example,
+     * for results of JOIN queries where the resultset row includes columns from two or
+     * more tables.
+     *
+     * @param      ResultSet $rs The ResultSet class with cursor advanced to desired record pos.
+     * @param      int $startcol 1-based offset column which indicates which restultset column to start with.
+     * @return     int next starting column
+     * @throws     PropelException  - Any caught Exception will be rewrapped as a PropelException.
+     */
+    public function hydrate(ResultSet $rs, $startcol = 1)
+    {
+        try {
+
+            $this->abe_res_uid = $rs->getString($startcol + 0);
+
+            $this->abe_req_uid = $rs->getString($startcol + 1);
+
+            $this->abe_res_client_ip = $rs->getString($startcol + 2);
+
+            $this->abe_res_data = $rs->getString($startcol + 3);
+
+            $this->abe_res_date = $rs->getTimestamp($startcol + 4, null);
+
+            $this->abe_res_status = $rs->getString($startcol + 5);
+
+            $this->abe_res_message = $rs->getString($startcol + 6);
+
+            $this->resetModified();
+
+            $this->setNew(false);
+
+            // FIXME - using NUM_COLUMNS may be clearer.
+            return $startcol + 7; // 7 = AbeResponsesPeer::NUM_COLUMNS - AbeResponsesPeer::NUM_LAZY_LOAD_COLUMNS).
+
+        } catch (Exception $e) {
+            throw new PropelException("Error populating AbeResponses object", $e);
+        }
+    }
+
+    /**
+     * Removes this object from datastore and sets delete attribute.
+     *
+     * @param      Connection $con
+     * @return     void
+     * @throws     PropelException
+     * @see        BaseObject::setDeleted()
+     * @see        BaseObject::isDeleted()
+     */
+    public function delete($con = null)
+    {
+        if ($this->isDeleted()) {
+            throw new PropelException("This object has already been deleted.");
+        }
+
+        if ($con === null) {
+            $con = Propel::getConnection(AbeResponsesPeer::DATABASE_NAME);
+        }
+
+        try {
+            $con->begin();
+            AbeResponsesPeer::doDelete($this, $con);
+            $this->setDeleted(true);
+            $con->commit();
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Stores the object in the database.  If the object is new,
+     * it inserts it; otherwise an update is performed.  This method
+     * wraps the doSave() worker method in a transaction.
+     *
+     * @param      Connection $con
+     * @return     int The number of rows affected by this insert/update
+     * @throws     PropelException
+     * @see        doSave()
+     */
+    public function save($con = null)
+    {
+        if ($this->isDeleted()) {
+            throw new PropelException("You cannot save an object that has been deleted.");
+        }
+
+        if ($con === null) {
+            $con = Propel::getConnection(AbeResponsesPeer::DATABASE_NAME);
+        }
+
+        try {
+            $con->begin();
+            $affectedRows = $this->doSave($con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Stores the object in the database.
+     *
+     * If the object is new, it inserts it; otherwise an update is performed.
+     * All related objects are also updated in this method.
+     *
+     * @param      Connection $con
+     * @return     int The number of rows affected by this insert/update and any referring
+     * @throws     PropelException
+     * @see        save()
+     */
+    protected function doSave($con)
+    {
+        $affectedRows = 0; // initialize var to track total num of affected rows
+        if (!$this->alreadyInSave) {
+            $this->alreadyInSave = true;
+
+
+            // If this object has been modified, then save it to the database.
+            if ($this->isModified()) {
+                if ($this->isNew()) {
+                    $pk = AbeResponsesPeer::doInsert($this, $con);
+                    $affectedRows += 1; // we are assuming that there is only 1 row per doInsert() which
+                                         // should always be true here (even though technically
+                                         // BasePeer::doInsert() can insert multiple rows).
+
+                    $this->setNew(false);
+                } else {
+                    $affectedRows += AbeResponsesPeer::doUpdate($this, $con);
+                }
+                $this->resetModified(); // [HL] After being saved an object is no longer 'modified'
+            }
+
+            $this->alreadyInSave = false;
+        }
+        return $affectedRows;
+    } // doSave()
+
+    /**
+     * Array of ValidationFailed objects.
+     * @var        array ValidationFailed[]
+     */
+    protected $validationFailures = array();
+
+    /**
+     * Gets any ValidationFailed objects that resulted from last call to validate().
+     *
+     *
+     * @return     array ValidationFailed[]
+     * @see        validate()
+     */
+    public function getValidationFailures()
+    {
+        return $this->validationFailures;
+    }
+
+    /**
+     * Validates the objects modified field values and all objects related to this table.
+     *
+     * If $columns is either a column name or an array of column names
+     * only those columns are validated.
+     *
+     * @param      mixed $columns Column name or an array of column names.
+     * @return     boolean Whether all columns pass validation.
+     * @see        doValidate()
+     * @see        getValidationFailures()
+     */
+    public function validate($columns = null)
+    {
+        $res = $this->doValidate($columns);
+        if ($res === true) {
+            $this->validationFailures = array();
+            return true;
+        } else {
+            $this->validationFailures = $res;
+            return false;
+        }
+    }
+
+    /**
+     * This function performs the validation work for complex object models.
+     *
+     * In addition to checking the current object, all related objects will
+     * also be validated.  If all pass then <code>true</code> is returned; otherwise
+     * an aggreagated array of ValidationFailed objects will be returned.
+     *
+     * @param      array $columns Array of column names to validate.
+     * @return     mixed <code>true</code> if all validations pass; 
+                   array of <code>ValidationFailed</code> objects otherwise.
+     */
+    protected function doValidate($columns = null)
+    {
+        if (!$this->alreadyInValidation) {
+            $this->alreadyInValidation = true;
+            $retval = null;
+
+            $failureMap = array();
+
+
+            if (($retval = AbeResponsesPeer::doValidate($this, $columns)) !== true) {
+                $failureMap = array_merge($failureMap, $retval);
+            }
+
+
+
+            $this->alreadyInValidation = false;
+        }
+
+        return (!empty($failureMap) ? $failureMap : true);
+    }
+
+    /**
+     * Retrieves a field from the object by name passed in as a string.
+     *
+     * @param      string $name name
+     * @param      string $type The type of fieldname the $name is of:
+     *                     one of the class type constants TYPE_PHPNAME,
+     *                     TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     mixed Value of field.
+     */
+    public function getByName($name, $type = BasePeer::TYPE_PHPNAME)
+    {
+        $pos = AbeResponsesPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
+        return $this->getByPosition($pos);
+    }
+
+    /**
+     * Retrieves a field from the object by Position as specified in the xml schema.
+     * Zero-based.
+     *
+     * @param      int $pos position in xml schema
+     * @return     mixed Value of field at $pos
+     */
+    public function getByPosition($pos)
+    {
+        switch($pos) {
+            case 0:
+                return $this->getAbeResUid();
+                break;
+            case 1:
+                return $this->getAbeReqUid();
+                break;
+            case 2:
+                return $this->getAbeResClientIp();
+                break;
+            case 3:
+                return $this->getAbeResData();
+                break;
+            case 4:
+                return $this->getAbeResDate();
+                break;
+            case 5:
+                return $this->getAbeResStatus();
+                break;
+            case 6:
+                return $this->getAbeResMessage();
+                break;
+            default:
+                return null;
+                break;
+        } // switch()
+    }
+
+    /**
+     * Exports the object as an array.
+     *
+     * You can specify the key type of the array by passing one of the class
+     * type constants.
+     *
+     * @param      string $keyType One of the class type constants TYPE_PHPNAME,
+     *                        TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     an associative array containing the field names (as keys) and field values
+     */
+    public function toArray($keyType = BasePeer::TYPE_PHPNAME)
+    {
+        $keys = AbeResponsesPeer::getFieldNames($keyType);
+        $result = array(
+            $keys[0] => $this->getAbeResUid(),
+            $keys[1] => $this->getAbeReqUid(),
+            $keys[2] => $this->getAbeResClientIp(),
+            $keys[3] => $this->getAbeResData(),
+            $keys[4] => $this->getAbeResDate(),
+            $keys[5] => $this->getAbeResStatus(),
+            $keys[6] => $this->getAbeResMessage(),
+        );
+        return $result;
+    }
+
+    /**
+     * Sets a field from the object by name passed in as a string.
+     *
+     * @param      string $name peer name
+     * @param      mixed $value field value
+     * @param      string $type The type of fieldname the $name is of:
+     *                     one of the class type constants TYPE_PHPNAME,
+     *                     TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     void
+     */
+    public function setByName($name, $value, $type = BasePeer::TYPE_PHPNAME)
+    {
+        $pos = AbeResponsesPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
+        return $this->setByPosition($pos, $value);
+    }
+
+    /**
+     * Sets a field from the object by Position as specified in the xml schema.
+     * Zero-based.
+     *
+     * @param      int $pos position in xml schema
+     * @param      mixed $value field value
+     * @return     void
+     */
+    public function setByPosition($pos, $value)
+    {
+        switch($pos) {
+            case 0:
+                $this->setAbeResUid($value);
+                break;
+            case 1:
+                $this->setAbeReqUid($value);
+                break;
+            case 2:
+                $this->setAbeResClientIp($value);
+                break;
+            case 3:
+                $this->setAbeResData($value);
+                break;
+            case 4:
+                $this->setAbeResDate($value);
+                break;
+            case 5:
+                $this->setAbeResStatus($value);
+                break;
+            case 6:
+                $this->setAbeResMessage($value);
+                break;
+        } // switch()
+    }
+
+    /**
+     * Populates the object using an array.
+     *
+     * This is particularly useful when populating an object from one of the
+     * request arrays (e.g. $_POST).  This method goes through the column
+     * names, checking to see whether a matching key exists in populated
+     * array. If so the setByName() method is called for that column.
+     *
+     * You can specify the key type of the array by additionally passing one
+     * of the class type constants TYPE_PHPNAME, TYPE_COLNAME, TYPE_FIELDNAME,
+     * TYPE_NUM. The default key type is the column's phpname (e.g. 'authorId')
+     *
+     * @param      array  $arr     An array to populate the object from.
+     * @param      string $keyType The type of keys the array uses.
+     * @return     void
+     */
+    public function fromArray($arr, $keyType = BasePeer::TYPE_PHPNAME)
+    {
+        $keys = AbeResponsesPeer::getFieldNames($keyType);
+
+        if (array_key_exists($keys[0], $arr)) {
+            $this->setAbeResUid($arr[$keys[0]]);
+        }
+
+        if (array_key_exists($keys[1], $arr)) {
+            $this->setAbeReqUid($arr[$keys[1]]);
+        }
+
+        if (array_key_exists($keys[2], $arr)) {
+            $this->setAbeResClientIp($arr[$keys[2]]);
+        }
+
+        if (array_key_exists($keys[3], $arr)) {
+            $this->setAbeResData($arr[$keys[3]]);
+        }
+
+        if (array_key_exists($keys[4], $arr)) {
+            $this->setAbeResDate($arr[$keys[4]]);
+        }
+
+        if (array_key_exists($keys[5], $arr)) {
+            $this->setAbeResStatus($arr[$keys[5]]);
+        }
+
+        if (array_key_exists($keys[6], $arr)) {
+            $this->setAbeResMessage($arr[$keys[6]]);
+        }
+
+    }
+
+    /**
+     * Build a Criteria object containing the values of all modified columns in this object.
+     *
+     * @return     Criteria The Criteria object containing all modified values.
+     */
+    public function buildCriteria()
+    {
+        $criteria = new Criteria(AbeResponsesPeer::DATABASE_NAME);
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_UID)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_UID, $this->abe_res_uid);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_REQ_UID)) {
+            $criteria->add(AbeResponsesPeer::ABE_REQ_UID, $this->abe_req_uid);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_CLIENT_IP)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_CLIENT_IP, $this->abe_res_client_ip);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_DATA)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_DATA, $this->abe_res_data);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_DATE)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_DATE, $this->abe_res_date);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_STATUS)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_STATUS, $this->abe_res_status);
+        }
+
+        if ($this->isColumnModified(AbeResponsesPeer::ABE_RES_MESSAGE)) {
+            $criteria->add(AbeResponsesPeer::ABE_RES_MESSAGE, $this->abe_res_message);
+        }
+
+
+        return $criteria;
+    }
+
+    /**
+     * Builds a Criteria object containing the primary key for this object.
+     *
+     * Unlike buildCriteria() this method includes the primary key values regardless
+     * of whether or not they have been modified.
+     *
+     * @return     Criteria The Criteria object containing value(s) for primary key(s).
+     */
+    public function buildPkeyCriteria()
+    {
+        $criteria = new Criteria(AbeResponsesPeer::DATABASE_NAME);
+
+        $criteria->add(AbeResponsesPeer::ABE_RES_UID, $this->abe_res_uid);
+
+        return $criteria;
+    }
+
+    /**
+     * Returns the primary key for this object (row).
+     * @return     string
+     */
+    public function getPrimaryKey()
+    {
+        return $this->getAbeResUid();
+    }
+
+    /**
+     * Generic method to set the primary key (abe_res_uid column).
+     *
+     * @param      string $key Primary key.
+     * @return     void
+     */
+    public function setPrimaryKey($key)
+    {
+        $this->setAbeResUid($key);
+    }
+
+    /**
+     * Sets contents of passed object to values from current object.
+     *
+     * If desired, this method can also make copies of all associated (fkey referrers)
+     * objects.
+     *
+     * @param      object $copyObj An object of AbeResponses (or compatible) type.
+     * @param      boolean $deepCopy Whether to also copy all rows that refer (by fkey) to the current row.
+     * @throws     PropelException
+     */
+    public function copyInto($copyObj, $deepCopy = false)
+    {
+
+        $copyObj->setAbeReqUid($this->abe_req_uid);
+
+        $copyObj->setAbeResClientIp($this->abe_res_client_ip);
+
+        $copyObj->setAbeResData($this->abe_res_data);
+
+        $copyObj->setAbeResDate($this->abe_res_date);
+
+        $copyObj->setAbeResStatus($this->abe_res_status);
+
+        $copyObj->setAbeResMessage($this->abe_res_message);
+
+
+        $copyObj->setNew(true);
+
+        $copyObj->setAbeResUid(''); // this is a pkey column, so set to default value
+
+    }
+
+    /**
+     * Makes a copy of this object that will be inserted as a new row in table when saved.
+     * It creates a new object filling in the simple attributes, but skipping any primary
+     * keys that are defined for the table.
+     *
+     * If desired, this method can also make copies of all associated (fkey referrers)
+     * objects.
+     *
+     * @param      boolean $deepCopy Whether to also copy all rows that refer (by fkey) to the current row.
+     * @return     AbeResponses Clone of current object.
+     * @throws     PropelException
+     */
+    public function copy($deepCopy = false)
+    {
+        // we use get_class(), because this might be a subclass
+        $clazz = get_class($this);
+        $copyObj = new $clazz();
+        $this->copyInto($copyObj, $deepCopy);
+        return $copyObj;
+    }
+
+    /**
+     * Returns a peer instance associated with this om.
+     *
+     * Since Peer classes are not to have any instance attributes, this method returns the
+     * same instance for all member of this class. The method could therefore
+     * be static, but this would prevent one from overriding the behavior.
+     *
+     * @return     AbeResponsesPeer
+     */
+    public function getPeer()
+    {
+        if (self::$peer === null) {
+            self::$peer = new AbeResponsesPeer();
+        }
+        return self::$peer;
+    }
+}
+

workflow/engine/classes/model/om/BaseAbeResponsesPeer.php

@@ -0,0 +1,597 @@
+<?php
+
+require_once 'propel/util/BasePeer.php';
+// The object class -- needed for instanceof checks in this class.
+// actual class may be a subclass -- as returned by AbeResponsesPeer::getOMClass()
+include_once 'classes/model/AbeResponses.php';
+
+/**
+ * Base static class for performing query and update operations on the 'ABE_RESPONSES' table.
+ *
+ * 
+ *
+ * @package    workflow.classes.model.om
+ */
+abstract class BaseAbeResponsesPeer
+{
+
+    /** the default database name for this class */
+    const DATABASE_NAME = 'workflow';
+
+    /** the table name for this class */
+    const TABLE_NAME = 'ABE_RESPONSES';
+
+    /** A class that can be returned by this peer. */
+    const CLASS_DEFAULT = 'classes.model.AbeResponses';
+
+    /** The total number of columns. */
+    const NUM_COLUMNS = 7;
+
+    /** The number of lazy-loaded columns. */
+    const NUM_LAZY_LOAD_COLUMNS = 0;
+
+
+    /** the column name for the ABE_RES_UID field */
+    const ABE_RES_UID = 'ABE_RESPONSES.ABE_RES_UID';
+
+    /** the column name for the ABE_REQ_UID field */
+    const ABE_REQ_UID = 'ABE_RESPONSES.ABE_REQ_UID';
+
+    /** the column name for the ABE_RES_CLIENT_IP field */
+    const ABE_RES_CLIENT_IP = 'ABE_RESPONSES.ABE_RES_CLIENT_IP';
+
+    /** the column name for the ABE_RES_DATA field */
+    const ABE_RES_DATA = 'ABE_RESPONSES.ABE_RES_DATA';
+
+    /** the column name for the ABE_RES_DATE field */
+    const ABE_RES_DATE = 'ABE_RESPONSES.ABE_RES_DATE';
+
+    /** the column name for the ABE_RES_STATUS field */
+    const ABE_RES_STATUS = 'ABE_RESPONSES.ABE_RES_STATUS';
+
+    /** the column name for the ABE_RES_MESSAGE field */
+    const ABE_RES_MESSAGE = 'ABE_RESPONSES.ABE_RES_MESSAGE';
+
+    /** The PHP to DB Name Mapping */
+    private static $phpNameMap = null;
+
+
+    /**
+     * holds an array of fieldnames
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[self::TYPE_PHPNAME][0] = 'Id'
+     */
+    private static $fieldNames = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeResUid', 'AbeReqUid', 'AbeResClientIp', 'AbeResData', 'AbeResDate', 'AbeResStatus', 'AbeResMessage', ),
+        BasePeer::TYPE_COLNAME => array (AbeResponsesPeer::ABE_RES_UID, AbeResponsesPeer::ABE_REQ_UID, AbeResponsesPeer::ABE_RES_CLIENT_IP, AbeResponsesPeer::ABE_RES_DATA, AbeResponsesPeer::ABE_RES_DATE, AbeResponsesPeer::ABE_RES_STATUS, AbeResponsesPeer::ABE_RES_MESSAGE, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_RES_UID', 'ABE_REQ_UID', 'ABE_RES_CLIENT_IP', 'ABE_RES_DATA', 'ABE_RES_DATE', 'ABE_RES_STATUS', 'ABE_RES_MESSAGE', ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, )
+    );
+
+    /**
+     * holds an array of keys for quick access to the fieldnames array
+     *
+     * first dimension keys are the type constants
+     * e.g. self::$fieldNames[BasePeer::TYPE_PHPNAME]['Id'] = 0
+     */
+    private static $fieldKeys = array (
+        BasePeer::TYPE_PHPNAME => array ('AbeResUid' => 0, 'AbeReqUid' => 1, 'AbeResClientIp' => 2, 'AbeResData' => 3, 'AbeResDate' => 4, 'AbeResStatus' => 5, 'AbeResMessage' => 6, ),
+        BasePeer::TYPE_COLNAME => array (AbeResponsesPeer::ABE_RES_UID => 0, AbeResponsesPeer::ABE_REQ_UID => 1, AbeResponsesPeer::ABE_RES_CLIENT_IP => 2, AbeResponsesPeer::ABE_RES_DATA => 3, AbeResponsesPeer::ABE_RES_DATE => 4, AbeResponsesPeer::ABE_RES_STATUS => 5, AbeResponsesPeer::ABE_RES_MESSAGE => 6, ),
+        BasePeer::TYPE_FIELDNAME => array ('ABE_RES_UID' => 0, 'ABE_REQ_UID' => 1, 'ABE_RES_CLIENT_IP' => 2, 'ABE_RES_DATA' => 3, 'ABE_RES_DATE' => 4, 'ABE_RES_STATUS' => 5, 'ABE_RES_MESSAGE' => 6, ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, 5, 6, )
+    );
+
+    /**
+     * @return     MapBuilder the map builder for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getMapBuilder()
+    {
+        include_once 'classes/model/map/AbeResponsesMapBuilder.php';
+        return BasePeer::getMapBuilder('classes.model.map.AbeResponsesMapBuilder');
+    }
+    /**
+     * Gets a map (hash) of PHP names to DB column names.
+     *
+     * @return     array The PHP to DB name map for this peer
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @deprecated Use the getFieldNames() and translateFieldName() methods instead of this.
+     */
+    public static function getPhpNameMap()
+    {
+        if (self::$phpNameMap === null) {
+            $map = AbeResponsesPeer::getTableMap();
+            $columns = $map->getColumns();
+            $nameMap = array();
+            foreach ($columns as $column) {
+                $nameMap[$column->getPhpName()] = $column->getColumnName();
+            }
+            self::$phpNameMap = $nameMap;
+        }
+        return self::$phpNameMap;
+    }
+    /**
+     * Translates a fieldname to another type
+     *
+     * @param      string $name field name
+     * @param      string $fromType One of the class type constants TYPE_PHPNAME,
+     *                         TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @param      string $toType   One of the class type constants
+     * @return     string translated name of the field.
+     */
+    static public function translateFieldName($name, $fromType, $toType)
+    {
+        $toNames = self::getFieldNames($toType);
+        $key = isset(self::$fieldKeys[$fromType][$name]) ? self::$fieldKeys[$fromType][$name] : null;
+        if ($key === null) {
+            throw new PropelException("'$name' could not be found in the field names of type '$fromType'. These are: " . print_r(self::$fieldKeys[$fromType], true));
+        }
+        return $toNames[$key];
+    }
+
+    /**
+     * Returns an array of of field names.
+     *
+     * @param      string $type The type of fieldnames to return:
+     *                      One of the class type constants TYPE_PHPNAME,
+     *                      TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM
+     * @return     array A list of field names
+     */
+
+    static public function getFieldNames($type = BasePeer::TYPE_PHPNAME)
+    {
+        if (!array_key_exists($type, self::$fieldNames)) {
+            throw new PropelException('Method getFieldNames() expects the parameter $type to be one of the class constants TYPE_PHPNAME, TYPE_COLNAME, TYPE_FIELDNAME, TYPE_NUM. ' . $type . ' was given.');
+        }
+        return self::$fieldNames[$type];
+    }
+
+    /**
+     * Convenience method which changes table.column to alias.column.
+     *
+     * Using this method you can maintain SQL abstraction while using column aliases.
+     * <code>
+     *      $c->addAlias("alias1", TablePeer::TABLE_NAME);
+     *      $c->addJoin(TablePeer::alias("alias1", TablePeer::PRIMARY_KEY_COLUMN), TablePeer::PRIMARY_KEY_COLUMN);
+     * </code>
+     * @param      string $alias The alias for the current table.
+     * @param      string $column The column name for current table. (i.e. AbeResponsesPeer::COLUMN_NAME).
+     * @return     string
+     */
+    public static function alias($alias, $column)
+    {
+        return str_replace(AbeResponsesPeer::TABLE_NAME.'.', $alias.'.', $column);
+    }
+
+    /**
+     * Add all the columns needed to create a new object.
+     *
+     * Note: any columns that were marked with lazyLoad="true" in the
+     * XML schema will not be added to the select list and only loaded
+     * on demand.
+     *
+     * @param      criteria object containing the columns to add.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function addSelectColumns(Criteria $criteria)
+    {
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_UID);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_REQ_UID);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_CLIENT_IP);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_DATA);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_DATE);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_STATUS);
+
+        $criteria->addSelectColumn(AbeResponsesPeer::ABE_RES_MESSAGE);
+
+    }
+
+    const COUNT = 'COUNT(ABE_RESPONSES.ABE_RES_UID)';
+    const COUNT_DISTINCT = 'COUNT(DISTINCT ABE_RESPONSES.ABE_RES_UID)';
+
+    /**
+     * Returns the number of rows matching criteria.
+     *
+     * @param      Criteria $criteria
+     * @param      boolean $distinct Whether to select only distinct columns (You can also set DISTINCT modifier in Criteria).
+     * @param      Connection $con
+     * @return     int Number of matching rows.
+     */
+    public static function doCount(Criteria $criteria, $distinct = false, $con = null)
+    {
+        // we're going to modify criteria, so copy it first
+        $criteria = clone $criteria;
+
+        // clear out anything that might confuse the ORDER BY clause
+        $criteria->clearSelectColumns()->clearOrderByColumns();
+        if ($distinct || in_array(Criteria::DISTINCT, $criteria->getSelectModifiers())) {
+            $criteria->addSelectColumn(AbeResponsesPeer::COUNT_DISTINCT);
+        } else {
+            $criteria->addSelectColumn(AbeResponsesPeer::COUNT);
+        }
+
+        // just in case we're grouping: add those columns to the select statement
+        foreach ($criteria->getGroupByColumns() as $column) {
+            $criteria->addSelectColumn($column);
+        }
+
+        $rs = AbeResponsesPeer::doSelectRS($criteria, $con);
+        if ($rs->next()) {
+            return $rs->getInt(1);
+        } else {
+            // no rows returned; we infer that means 0 matches.
+            return 0;
+        }
+    }
+    /**
+     * Method to select one object from the DB.
+     *
+     * @param      Criteria $criteria object used to create the SELECT statement.
+     * @param      Connection $con
+     * @return     AbeResponses
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelectOne(Criteria $criteria, $con = null)
+    {
+        $critcopy = clone $criteria;
+        $critcopy->setLimit(1);
+        $objects = AbeResponsesPeer::doSelect($critcopy, $con);
+        if ($objects) {
+            return $objects[0];
+        }
+        return null;
+    }
+    /**
+     * Method to do selects.
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con
+     * @return     array Array of selected Objects
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doSelect(Criteria $criteria, $con = null)
+    {
+        return AbeResponsesPeer::populateObjects(AbeResponsesPeer::doSelectRS($criteria, $con));
+    }
+    /**
+     * Prepares the Criteria object and uses the parent doSelect()
+     * method to get a ResultSet.
+     *
+     * Use this method directly if you want to just get the resultset
+     * (instead of an array of objects).
+     *
+     * @param      Criteria $criteria The Criteria object used to build the SELECT statement.
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     * @return     ResultSet The resultset object with numerically-indexed fields.
+     * @see        BasePeer::doSelect()
+     */
+    public static function doSelectRS(Criteria $criteria, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if (!$criteria->getSelectColumns()) {
+            $criteria = clone $criteria;
+            AbeResponsesPeer::addSelectColumns($criteria);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        // BasePeer returns a Creole ResultSet, set to return
+        // rows indexed numerically.
+        return BasePeer::doSelect($criteria, $con);
+    }
+    /**
+     * The returned array will contain objects of the default type or
+     * objects that inherit from the default.
+     *
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function populateObjects(ResultSet $rs)
+    {
+        $results = array();
+
+        // set the class once to avoid overhead in the loop
+        $cls = AbeResponsesPeer::getOMClass();
+        $cls = Propel::import($cls);
+        // populate the object(s)
+        while ($rs->next()) {
+
+            $obj = new $cls();
+            $obj->hydrate($rs);
+            $results[] = $obj;
+
+        }
+        return $results;
+    }
+    /**
+     * Returns the TableMap related to this peer.
+     * This method is not needed for general use but a specific application could have a need.
+     * @return     TableMap
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function getTableMap()
+    {
+        return Propel::getDatabaseMap(self::DATABASE_NAME)->getTable(self::TABLE_NAME);
+    }
+
+    /**
+     * The class that the Peer will make instances of.
+     *
+     * This uses a dot-path notation which is tranalted into a path
+     * relative to a location on the PHP include_path.
+     * (e.g. path.to.MyClass -> 'path/to/MyClass.php')
+     *
+     * @return     string path.to.ClassName
+     */
+    public static function getOMClass()
+    {
+        return AbeResponsesPeer::CLASS_DEFAULT;
+    }
+
+    /**
+     * Method perform an INSERT on the database, given a AbeResponses or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeResponses object containing data that is used to create the INSERT statement.
+     * @param      Connection $con the connection to use
+     * @return     mixed The new primary key.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doInsert($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } else {
+            $criteria = $values->buildCriteria(); // build Criteria from AbeResponses object
+        }
+
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table (I guess, conceivably)
+            $con->begin();
+            $pk = BasePeer::doInsert($criteria, $con);
+            $con->commit();
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+
+        return $pk;
+    }
+
+    /**
+     * Method perform an UPDATE on the database, given a AbeResponses or Criteria object.
+     *
+     * @param      mixed $values Criteria or AbeResponses object containing data create the UPDATE statement.
+     * @param      Connection $con The connection to use (specify Connection exert more control over transactions).
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function doUpdate($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $selectCriteria = new Criteria(self::DATABASE_NAME);
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+
+            $comparison = $criteria->getComparison(AbeResponsesPeer::ABE_RES_UID);
+            $selectCriteria->add(AbeResponsesPeer::ABE_RES_UID, $criteria->remove(AbeResponsesPeer::ABE_RES_UID), $comparison);
+
+        } else {
+            $criteria = $values->buildCriteria(); // gets full criteria
+            $selectCriteria = $values->buildPkeyCriteria(); // gets criteria w/ primary key(s)
+        }
+
+        // set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        return BasePeer::doUpdate($selectCriteria, $criteria, $con);
+    }
+
+    /**
+     * Method to DELETE all rows from the ABE_RESPONSES table.
+     *
+     * @return     int The number of affected rows (if supported by underlying database driver).
+     */
+    public static function doDeleteAll($con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+        $affectedRows = 0; // initialize var to track total num of affected rows
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+            $affectedRows += BasePeer::doDeleteAll(AbeResponsesPeer::TABLE_NAME, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Method perform a DELETE on the database, given a AbeResponses or Criteria object OR a primary key value.
+     *
+     * @param      mixed $values Criteria or AbeResponses object or primary key or array of primary keys
+     *              which is used to create the DELETE statement
+     * @param      Connection $con the connection to use
+     * @return     int  The number of affected rows (if supported by underlying database driver).
+     *             This includes CASCADE-related rows
+     *              if supported by native driver or if emulated using Propel.
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+    */
+    public static function doDelete($values, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(AbeResponsesPeer::DATABASE_NAME);
+        }
+
+        if ($values instanceof Criteria) {
+            $criteria = clone $values; // rename for clarity
+        } elseif ($values instanceof AbeResponses) {
+
+            $criteria = $values->buildPkeyCriteria();
+        } else {
+            // it must be the primary key
+            $criteria = new Criteria(self::DATABASE_NAME);
+            $criteria->add(AbeResponsesPeer::ABE_RES_UID, (array) $values, Criteria::IN);
+        }
+
+        // Set the correct dbName
+        $criteria->setDbName(self::DATABASE_NAME);
+
+        $affectedRows = 0; // initialize var to track total num of affected rows
+
+        try {
+            // use transaction because $criteria could contain info
+            // for more than one table or we could emulating ON DELETE CASCADE, etc.
+            $con->begin();
+
+            $affectedRows += BasePeer::doDelete($criteria, $con);
+            $con->commit();
+            return $affectedRows;
+        } catch (PropelException $e) {
+            $con->rollback();
+            throw $e;
+        }
+    }
+
+    /**
+     * Validates all modified columns of given AbeResponses object.
+     * If parameter $columns is either a single column name or an array of column names
+     * than only those columns are validated.
+     *
+     * NOTICE: This does not apply to primary or foreign keys for now.
+     *
+     * @param      AbeResponses $obj The object to validate.
+     * @param      mixed $cols Column name or array of column names.
+     *
+     * @return     mixed TRUE if all columns are valid or the error message of the first invalid column.
+     */
+    public static function doValidate(AbeResponses $obj, $cols = null)
+    {
+        $columns = array();
+
+        if ($cols) {
+            $dbMap = Propel::getDatabaseMap(AbeResponsesPeer::DATABASE_NAME);
+            $tableMap = $dbMap->getTable(AbeResponsesPeer::TABLE_NAME);
+
+            if (! is_array($cols)) {
+                $cols = array($cols);
+            }
+
+            foreach ($cols as $colName) {
+                if ($tableMap->containsColumn($colName)) {
+                    $get = 'get' . $tableMap->getColumn($colName)->getPhpName();
+                    $columns[$colName] = $obj->$get();
+                }
+            }
+        } else {
+
+        }
+
+        return BasePeer::doValidate(AbeResponsesPeer::DATABASE_NAME, AbeResponsesPeer::TABLE_NAME, $columns);
+    }
+
+    /**
+     * Retrieve a single object by pkey.
+     *
+     * @param      mixed $pk the primary key.
+     * @param      Connection $con the connection to use
+     * @return     AbeResponses
+     */
+    public static function retrieveByPK($pk, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $criteria = new Criteria(AbeResponsesPeer::DATABASE_NAME);
+
+        $criteria->add(AbeResponsesPeer::ABE_RES_UID, $pk);
+
+
+        $v = AbeResponsesPeer::doSelect($criteria, $con);
+
+        return !empty($v) > 0 ? $v[0] : null;
+    }
+
+    /**
+     * Retrieve multiple objects by pkey.
+     *
+     * @param      array $pks List of primary keys
+     * @param      Connection $con the connection to use
+     * @throws     PropelException Any exceptions caught during processing will be
+     *       rethrown wrapped into a PropelException.
+     */
+    public static function retrieveByPKs($pks, $con = null)
+    {
+        if ($con === null) {
+            $con = Propel::getConnection(self::DATABASE_NAME);
+        }
+
+        $objs = null;
+        if (empty($pks)) {
+            $objs = array();
+        } else {
+            $criteria = new Criteria();
+            $criteria->add(AbeResponsesPeer::ABE_RES_UID, $pks, Criteria::IN);
+            $objs = AbeResponsesPeer::doSelect($criteria, $con);
+        }
+        return $objs;
+    }
+}
+
+
+// static code to register the map builder for this Peer with the main Propel class
+if (Propel::isInit()) {
+    // the MapBuilder classes register themselves with Propel during initialization
+    // so we need to load them here.
+    try {
+        BaseAbeResponsesPeer::getMapBuilder();
+    } catch (Exception $e) {
+        Propel::log('Could not initialize Peer: ' . $e->getMessage(), Propel::LOG_ERR);
+    }
+} else {
+    // even if Propel is not yet initialized, the map builder class can be registered
+    // now and then it will be loaded when Propel initializes.
+    require_once 'classes/model/map/AbeResponsesMapBuilder.php';
+    Propel::registerMapBuilder('classes.model.map.AbeResponsesMapBuilder');
+}
+

workflow/engine/classes/model/om/BaseElementTaskRelation.php

@@ -7,31 +7,31 @@ require_once 'propel/om/Persistent.php';
 
 include_once 'propel/util/Criteria.php';
 
-include_once 'classes/model/MessageEventTaskRelationPeer.php';
+include_once 'classes/model/ElementTaskRelationPeer.php';
 
 /**
- * Base class that represents a row from the 'MESSAGE_EVENT_TASK_RELATION' table.
+ * Base class that represents a row from the 'ELEMENT_TASK_RELATION' table.
  *
  * 
  *
  * @package    workflow.classes.model.om
  */
-abstract class BaseMessageEventTaskRelation extends BaseObject implements Persistent
+abstract class BaseElementTaskRelation extends BaseObject implements Persistent
 {
 
     /**
      * The Peer class.
      * Instance provides a convenient way of calling static methods on a class
      * that calling code may not be able to identify.
-     * @var        MessageEventTaskRelationPeer
+     * @var        ElementTaskRelationPeer
     */
     protected static $peer;
 
     /**
-     * The value for the msgetr_uid field.
+     * The value for the etr_uid field.
      * @var        string
      */
-    protected $msgetr_uid;
+    protected $etr_uid;
 
     /**
      * The value for the prj_uid field.
@@ -40,10 +40,16 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     protected $prj_uid;
 
     /**
-     * The value for the evn_uid field.
+     * The value for the element_uid field.
      * @var        string
      */
-    protected $evn_uid;
+    protected $element_uid;
+
+    /**
+     * The value for the element_type field.
+     * @var        string
+     */
+    protected $element_type = '';
 
     /**
      * The value for the tas_uid field.
@@ -66,14 +72,14 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     protected $alreadyInValidation = false;
 
     /**
-     * Get the [msgetr_uid] column value.
+     * Get the [etr_uid] column value.
      * 
      * @return     string
      */
-    public function getMsgetrUid()
+    public function getEtrUid()
     {
 
-        return $this->msgetr_uid;
+        return $this->etr_uid;
     }
 
     /**
@@ -88,14 +94,25 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     }
 
     /**
-     * Get the [evn_uid] column value.
+     * Get the [element_uid] column value.
      * 
      * @return     string
      */
-    public function getEvnUid()
+    public function getElementUid()
     {
 
-        return $this->evn_uid;
+        return $this->element_uid;
+    }
+
+    /**
+     * Get the [element_type] column value.
+     * 
+     * @return     string
+     */
+    public function getElementType()
+    {
+
+        return $this->element_type;
     }
 
     /**
@@ -110,12 +127,12 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     }
 
     /**
-     * Set the value of [msgetr_uid] column.
+     * Set the value of [etr_uid] column.
      * 
      * @param      string $v new value
      * @return     void
      */
-    public function setMsgetrUid($v)
+    public function setEtrUid($v)
     {
 
         // Since the native PHP type for this column is string,
@@ -124,12 +141,12 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
             $v = (string) $v;
         }
 
-        if ($this->msgetr_uid !== $v) {
-            $this->msgetr_uid = $v;
-            $this->modifiedColumns[] = MessageEventTaskRelationPeer::MSGETR_UID;
+        if ($this->etr_uid !== $v) {
+            $this->etr_uid = $v;
+            $this->modifiedColumns[] = ElementTaskRelationPeer::ETR_UID;
         }
 
-    } // setMsgetrUid()
+    } // setEtrUid()
 
     /**
      * Set the value of [prj_uid] column.
@@ -148,18 +165,18 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
 
         if ($this->prj_uid !== $v) {
             $this->prj_uid = $v;
-            $this->modifiedColumns[] = MessageEventTaskRelationPeer::PRJ_UID;
+            $this->modifiedColumns[] = ElementTaskRelationPeer::PRJ_UID;
         }
 
     } // setPrjUid()
 
     /**
-     * Set the value of [evn_uid] column.
+     * Set the value of [element_uid] column.
      * 
      * @param      string $v new value
      * @return     void
      */
-    public function setEvnUid($v)
+    public function setElementUid($v)
     {
 
         // Since the native PHP type for this column is string,
@@ -168,12 +185,34 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
             $v = (string) $v;
         }
 
-        if ($this->evn_uid !== $v) {
-            $this->evn_uid = $v;
-            $this->modifiedColumns[] = MessageEventTaskRelationPeer::EVN_UID;
+        if ($this->element_uid !== $v) {
+            $this->element_uid = $v;
+            $this->modifiedColumns[] = ElementTaskRelationPeer::ELEMENT_UID;
         }
 
-    } // setEvnUid()
+    } // setElementUid()
+
+    /**
+     * Set the value of [element_type] column.
+     * 
+     * @param      string $v new value
+     * @return     void
+     */
+    public function setElementType($v)
+    {
+
+        // Since the native PHP type for this column is string,
+        // we will cast the input to a string (if it is not).
+        if ($v !== null && !is_string($v)) {
+            $v = (string) $v;
+        }
+
+        if ($this->element_type !== $v || $v === '') {
+            $this->element_type = $v;
+            $this->modifiedColumns[] = ElementTaskRelationPeer::ELEMENT_TYPE;
+        }
+
+    } // setElementType()
 
     /**
      * Set the value of [tas_uid] column.
@@ -192,7 +231,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
 
         if ($this->tas_uid !== $v) {
             $this->tas_uid = $v;
-            $this->modifiedColumns[] = MessageEventTaskRelationPeer::TAS_UID;
+            $this->modifiedColumns[] = ElementTaskRelationPeer::TAS_UID;
         }
 
     } // setTasUid()
@@ -214,23 +253,25 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     {
         try {
 
-            $this->msgetr_uid = $rs->getString($startcol + 0);
+            $this->etr_uid = $rs->getString($startcol + 0);
 
             $this->prj_uid = $rs->getString($startcol + 1);
 
-            $this->evn_uid = $rs->getString($startcol + 2);
+            $this->element_uid = $rs->getString($startcol + 2);
 
-            $this->tas_uid = $rs->getString($startcol + 3);
+            $this->element_type = $rs->getString($startcol + 3);
+
+            $this->tas_uid = $rs->getString($startcol + 4);
 
             $this->resetModified();
 
             $this->setNew(false);
 
             // FIXME - using NUM_COLUMNS may be clearer.
-            return $startcol + 4; // 4 = MessageEventTaskRelationPeer::NUM_COLUMNS - MessageEventTaskRelationPeer::NUM_LAZY_LOAD_COLUMNS).
+            return $startcol + 5; // 5 = ElementTaskRelationPeer::NUM_COLUMNS - ElementTaskRelationPeer::NUM_LAZY_LOAD_COLUMNS).
 
         } catch (Exception $e) {
-            throw new PropelException("Error populating MessageEventTaskRelation object", $e);
+            throw new PropelException("Error populating ElementTaskRelation object", $e);
         }
     }
 
@@ -250,12 +291,12 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
         }
 
         if ($con === null) {
-            $con = Propel::getConnection(MessageEventTaskRelationPeer::DATABASE_NAME);
+            $con = Propel::getConnection(ElementTaskRelationPeer::DATABASE_NAME);
         }
 
         try {
             $con->begin();
-            MessageEventTaskRelationPeer::doDelete($this, $con);
+            ElementTaskRelationPeer::doDelete($this, $con);
             $this->setDeleted(true);
             $con->commit();
         } catch (PropelException $e) {
@@ -281,7 +322,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
         }
 
         if ($con === null) {
-            $con = Propel::getConnection(MessageEventTaskRelationPeer::DATABASE_NAME);
+            $con = Propel::getConnection(ElementTaskRelationPeer::DATABASE_NAME);
         }
 
         try {
@@ -316,14 +357,14 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
             // If this object has been modified, then save it to the database.
             if ($this->isModified()) {
                 if ($this->isNew()) {
-                    $pk = MessageEventTaskRelationPeer::doInsert($this, $con);
+                    $pk = ElementTaskRelationPeer::doInsert($this, $con);
                     $affectedRows += 1; // we are assuming that there is only 1 row per doInsert() which
                                          // should always be true here (even though technically
                                          // BasePeer::doInsert() can insert multiple rows).
 
                     $this->setNew(false);
                 } else {
-                    $affectedRows += MessageEventTaskRelationPeer::doUpdate($this, $con);
+                    $affectedRows += ElementTaskRelationPeer::doUpdate($this, $con);
                 }
                 $this->resetModified(); // [HL] After being saved an object is no longer 'modified'
             }
@@ -394,7 +435,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
             $failureMap = array();
 
 
-            if (($retval = MessageEventTaskRelationPeer::doValidate($this, $columns)) !== true) {
+            if (($retval = ElementTaskRelationPeer::doValidate($this, $columns)) !== true) {
                 $failureMap = array_merge($failureMap, $retval);
             }
 
@@ -417,7 +458,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function getByName($name, $type = BasePeer::TYPE_PHPNAME)
     {
-        $pos = MessageEventTaskRelationPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
+        $pos = ElementTaskRelationPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
         return $this->getByPosition($pos);
     }
 
@@ -432,15 +473,18 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     {
         switch($pos) {
             case 0:
-                return $this->getMsgetrUid();
+                return $this->getEtrUid();
                 break;
             case 1:
                 return $this->getPrjUid();
                 break;
             case 2:
-                return $this->getEvnUid();
+                return $this->getElementUid();
                 break;
             case 3:
+                return $this->getElementType();
+                break;
+            case 4:
                 return $this->getTasUid();
                 break;
             default:
@@ -461,12 +505,13 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function toArray($keyType = BasePeer::TYPE_PHPNAME)
     {
-        $keys = MessageEventTaskRelationPeer::getFieldNames($keyType);
+        $keys = ElementTaskRelationPeer::getFieldNames($keyType);
         $result = array(
-            $keys[0] => $this->getMsgetrUid(),
+            $keys[0] => $this->getEtrUid(),
             $keys[1] => $this->getPrjUid(),
-            $keys[2] => $this->getEvnUid(),
-            $keys[3] => $this->getTasUid(),
+            $keys[2] => $this->getElementUid(),
+            $keys[3] => $this->getElementType(),
+            $keys[4] => $this->getTasUid(),
         );
         return $result;
     }
@@ -483,7 +528,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function setByName($name, $value, $type = BasePeer::TYPE_PHPNAME)
     {
-        $pos = MessageEventTaskRelationPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
+        $pos = ElementTaskRelationPeer::translateFieldName($name, $type, BasePeer::TYPE_NUM);
         return $this->setByPosition($pos, $value);
     }
 
@@ -499,15 +544,18 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
     {
         switch($pos) {
             case 0:
-                $this->setMsgetrUid($value);
+                $this->setEtrUid($value);
                 break;
             case 1:
                 $this->setPrjUid($value);
                 break;
             case 2:
-                $this->setEvnUid($value);
+                $this->setElementUid($value);
                 break;
             case 3:
+                $this->setElementType($value);
+                break;
+            case 4:
                 $this->setTasUid($value);
                 break;
         } // switch()
@@ -531,10 +579,10 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function fromArray($arr, $keyType = BasePeer::TYPE_PHPNAME)
     {
-        $keys = MessageEventTaskRelationPeer::getFieldNames($keyType);
+        $keys = ElementTaskRelationPeer::getFieldNames($keyType);
 
         if (array_key_exists($keys[0], $arr)) {
-            $this->setMsgetrUid($arr[$keys[0]]);
+            $this->setEtrUid($arr[$keys[0]]);
         }
 
         if (array_key_exists($keys[1], $arr)) {
@@ -542,11 +590,15 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
         }
 
         if (array_key_exists($keys[2], $arr)) {
-            $this->setEvnUid($arr[$keys[2]]);
+            $this->setElementUid($arr[$keys[2]]);
         }
 
         if (array_key_exists($keys[3], $arr)) {
-            $this->setTasUid($arr[$keys[3]]);
+            $this->setElementType($arr[$keys[3]]);
+        }
+
+        if (array_key_exists($keys[4], $arr)) {
+            $this->setTasUid($arr[$keys[4]]);
         }
 
     }
@@ -558,22 +610,26 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function buildCriteria()
     {
-        $criteria = new Criteria(MessageEventTaskRelationPeer::DATABASE_NAME);
+        $criteria = new Criteria(ElementTaskRelationPeer::DATABASE_NAME);
 
-        if ($this->isColumnModified(MessageEventTaskRelationPeer::MSGETR_UID)) {
-            $criteria->add(MessageEventTaskRelationPeer::MSGETR_UID, $this->msgetr_uid);
+        if ($this->isColumnModified(ElementTaskRelationPeer::ETR_UID)) {
+            $criteria->add(ElementTaskRelationPeer::ETR_UID, $this->etr_uid);
         }
 
-        if ($this->isColumnModified(MessageEventTaskRelationPeer::PRJ_UID)) {
-            $criteria->add(MessageEventTaskRelationPeer::PRJ_UID, $this->prj_uid);
+        if ($this->isColumnModified(ElementTaskRelationPeer::PRJ_UID)) {
+            $criteria->add(ElementTaskRelationPeer::PRJ_UID, $this->prj_uid);
         }
 
-        if ($this->isColumnModified(MessageEventTaskRelationPeer::EVN_UID)) {
-            $criteria->add(MessageEventTaskRelationPeer::EVN_UID, $this->evn_uid);
+        if ($this->isColumnModified(ElementTaskRelationPeer::ELEMENT_UID)) {
+            $criteria->add(ElementTaskRelationPeer::ELEMENT_UID, $this->element_uid);
         }
 
-        if ($this->isColumnModified(MessageEventTaskRelationPeer::TAS_UID)) {
-            $criteria->add(MessageEventTaskRelationPeer::TAS_UID, $this->tas_uid);
+        if ($this->isColumnModified(ElementTaskRelationPeer::ELEMENT_TYPE)) {
+            $criteria->add(ElementTaskRelationPeer::ELEMENT_TYPE, $this->element_type);
+        }
+
+        if ($this->isColumnModified(ElementTaskRelationPeer::TAS_UID)) {
+            $criteria->add(ElementTaskRelationPeer::TAS_UID, $this->tas_uid);
         }
 
 
@@ -590,9 +646,9 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function buildPkeyCriteria()
     {
-        $criteria = new Criteria(MessageEventTaskRelationPeer::DATABASE_NAME);
+        $criteria = new Criteria(ElementTaskRelationPeer::DATABASE_NAME);
 
-        $criteria->add(MessageEventTaskRelationPeer::MSGETR_UID, $this->msgetr_uid);
+        $criteria->add(ElementTaskRelationPeer::ETR_UID, $this->etr_uid);
 
         return $criteria;
     }
@@ -603,18 +659,18 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      */
     public function getPrimaryKey()
     {
-        return $this->getMsgetrUid();
+        return $this->getEtrUid();
     }
 
     /**
-     * Generic method to set the primary key (msgetr_uid column).
+     * Generic method to set the primary key (etr_uid column).
      *
      * @param      string $key Primary key.
      * @return     void
      */
     public function setPrimaryKey($key)
     {
-        $this->setMsgetrUid($key);
+        $this->setEtrUid($key);
     }
 
     /**
@@ -623,7 +679,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      * If desired, this method can also make copies of all associated (fkey referrers)
      * objects.
      *
-     * @param      object $copyObj An object of MessageEventTaskRelation (or compatible) type.
+     * @param      object $copyObj An object of ElementTaskRelation (or compatible) type.
      * @param      boolean $deepCopy Whether to also copy all rows that refer (by fkey) to the current row.
      * @throws     PropelException
      */
@@ -632,14 +688,16 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
 
         $copyObj->setPrjUid($this->prj_uid);
 
-        $copyObj->setEvnUid($this->evn_uid);
+        $copyObj->setElementUid($this->element_uid);
+
+        $copyObj->setElementType($this->element_type);
 
         $copyObj->setTasUid($this->tas_uid);
 
 
         $copyObj->setNew(true);
 
-        $copyObj->setMsgetrUid(NULL); // this is a pkey column, so set to default value
+        $copyObj->setEtrUid(NULL); // this is a pkey column, so set to default value
 
     }
 
@@ -652,7 +710,7 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      * objects.
      *
      * @param      boolean $deepCopy Whether to also copy all rows that refer (by fkey) to the current row.
-     * @return     MessageEventTaskRelation Clone of current object.
+     * @return     ElementTaskRelation Clone of current object.
      * @throws     PropelException
      */
     public function copy($deepCopy = false)
@@ -671,12 +729,12 @@ abstract class BaseMessageEventTaskRelation extends BaseObject implements Persis
      * same instance for all member of this class. The method could therefore
      * be static, but this would prevent one from overriding the behavior.
      *
-     * @return     MessageEventTaskRelationPeer
+     * @return     ElementTaskRelationPeer
      */
     public function getPeer()
     {
         if (self::$peer === null) {
-            self::$peer = new MessageEventTaskRelationPeer();
+            self::$peer = new ElementTaskRelationPeer();
         }
         return self::$peer;
     }

workflow/engine/classes/model/om/BaseElementTaskRelationPeer.php

@@ -2,46 +2,49 @@
 
 require_once 'propel/util/BasePeer.php';
 // The object class -- needed for instanceof checks in this class.
-// actual class may be a subclass -- as returned by MessageEventTaskRelationPeer::getOMClass()
-include_once 'classes/model/MessageEventTaskRelation.php';
+// actual class may be a subclass -- as returned by ElementTaskRelationPeer::getOMClass()
+include_once 'classes/model/ElementTaskRelation.php';
 
 /**
- * Base static class for performing query and update operations on the 'MESSAGE_EVENT_TASK_RELATION' table.
+ * Base static class for performing query and update operations on the 'ELEMENT_TASK_RELATION' table.
  *
  * 
  *
  * @package    workflow.classes.model.om
  */
-abstract class BaseMessageEventTaskRelationPeer
+abstract class BaseElementTaskRelationPeer
 {
 
     /** the default database name for this class */
     const DATABASE_NAME = 'workflow';
 
     /** the table name for this class */
-    const TABLE_NAME = 'MESSAGE_EVENT_TASK_RELATION';
+    const TABLE_NAME = 'ELEMENT_TASK_RELATION';
 
     /** A class that can be returned by this peer. */
-    const CLASS_DEFAULT = 'classes.model.MessageEventTaskRelation';
+    const CLASS_DEFAULT = 'classes.model.ElementTaskRelation';
 
     /** The total number of columns. */
-    const NUM_COLUMNS = 4;
+    const NUM_COLUMNS = 5;
 
     /** The number of lazy-loaded columns. */
     const NUM_LAZY_LOAD_COLUMNS = 0;
 
 
-    /** the column name for the MSGETR_UID field */
-    const MSGETR_UID = 'MESSAGE_EVENT_TASK_RELATION.MSGETR_UID';
+    /** the column name for the ETR_UID field */
+    const ETR_UID = 'ELEMENT_TASK_RELATION.ETR_UID';
 
     /** the column name for the PRJ_UID field */
-    const PRJ_UID = 'MESSAGE_EVENT_TASK_RELATION.PRJ_UID';
+    const PRJ_UID = 'ELEMENT_TASK_RELATION.PRJ_UID';
 
-    /** the column name for the EVN_UID field */
-    const EVN_UID = 'MESSAGE_EVENT_TASK_RELATION.EVN_UID';
+    /** the column name for the ELEMENT_UID field */
+    const ELEMENT_UID = 'ELEMENT_TASK_RELATION.ELEMENT_UID';
+
+    /** the column name for the ELEMENT_TYPE field */
+    const ELEMENT_TYPE = 'ELEMENT_TASK_RELATION.ELEMENT_TYPE';
 
     /** the column name for the TAS_UID field */
-    const TAS_UID = 'MESSAGE_EVENT_TASK_RELATION.TAS_UID';
+    const TAS_UID = 'ELEMENT_TASK_RELATION.TAS_UID';
 
     /** The PHP to DB Name Mapping */
     private static $phpNameMap = null;
@@ -54,10 +57,10 @@ abstract class BaseMessageEventTaskRelationPeer
      * e.g. self::$fieldNames[self::TYPE_PHPNAME][0] = 'Id'
      */
     private static $fieldNames = array (
-        BasePeer::TYPE_PHPNAME => array ('MsgetrUid', 'PrjUid', 'EvnUid', 'TasUid', ),
-        BasePeer::TYPE_COLNAME => array (MessageEventTaskRelationPeer::MSGETR_UID, MessageEventTaskRelationPeer::PRJ_UID, MessageEventTaskRelationPeer::EVN_UID, MessageEventTaskRelationPeer::TAS_UID, ),
-        BasePeer::TYPE_FIELDNAME => array ('MSGETR_UID', 'PRJ_UID', 'EVN_UID', 'TAS_UID', ),
-        BasePeer::TYPE_NUM => array (0, 1, 2, 3, )
+        BasePeer::TYPE_PHPNAME => array ('EtrUid', 'PrjUid', 'ElementUid', 'ElementType', 'TasUid', ),
+        BasePeer::TYPE_COLNAME => array (ElementTaskRelationPeer::ETR_UID, ElementTaskRelationPeer::PRJ_UID, ElementTaskRelationPeer::ELEMENT_UID, ElementTaskRelationPeer::ELEMENT_TYPE, ElementTaskRelationPeer::TAS_UID, ),
+        BasePeer::TYPE_FIELDNAME => array ('ETR_UID', 'PRJ_UID', 'ELEMENT_UID', 'ELEMENT_TYPE', 'TAS_UID', ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, )
     );
 
     /**
@@ -67,10 +70,10 @@ abstract class BaseMessageEventTaskRelationPeer
      * e.g. self::$fieldNames[BasePeer::TYPE_PHPNAME]['Id'] = 0
      */
     private static $fieldKeys = array (
-        BasePeer::TYPE_PHPNAME => array ('MsgetrUid' => 0, 'PrjUid' => 1, 'EvnUid' => 2, 'TasUid' => 3, ),
-        BasePeer::TYPE_COLNAME => array (MessageEventTaskRelationPeer::MSGETR_UID => 0, MessageEventTaskRelationPeer::PRJ_UID => 1, MessageEventTaskRelationPeer::EVN_UID => 2, MessageEventTaskRelationPeer::TAS_UID => 3, ),
-        BasePeer::TYPE_FIELDNAME => array ('MSGETR_UID' => 0, 'PRJ_UID' => 1, 'EVN_UID' => 2, 'TAS_UID' => 3, ),
-        BasePeer::TYPE_NUM => array (0, 1, 2, 3, )
+        BasePeer::TYPE_PHPNAME => array ('EtrUid' => 0, 'PrjUid' => 1, 'ElementUid' => 2, 'ElementType' => 3, 'TasUid' => 4, ),
+        BasePeer::TYPE_COLNAME => array (ElementTaskRelationPeer::ETR_UID => 0, ElementTaskRelationPeer::PRJ_UID => 1, ElementTaskRelationPeer::ELEMENT_UID => 2, ElementTaskRelationPeer::ELEMENT_TYPE => 3, ElementTaskRelationPeer::TAS_UID => 4, ),
+        BasePeer::TYPE_FIELDNAME => array ('ETR_UID' => 0, 'PRJ_UID' => 1, 'ELEMENT_UID' => 2, 'ELEMENT_TYPE' => 3, 'TAS_UID' => 4, ),
+        BasePeer::TYPE_NUM => array (0, 1, 2, 3, 4, )
     );
 
     /**
@@ -80,8 +83,8 @@ abstract class BaseMessageEventTaskRelationPeer
      */
     public static function getMapBuilder()
     {
-        include_once 'classes/model/map/MessageEventTaskRelationMapBuilder.php';
-        return BasePeer::getMapBuilder('classes.model.map.MessageEventTaskRelationMapBuilder');
+        include_once 'classes/model/map/ElementTaskRelationMapBuilder.php';
+        return BasePeer::getMapBuilder('classes.model.map.ElementTaskRelationMapBuilder');
     }
     /**
      * Gets a map (hash) of PHP names to DB column names.
@@ -94,7 +97,7 @@ abstract class BaseMessageEventTaskRelationPeer
     public static function getPhpNameMap()
     {
         if (self::$phpNameMap === null) {
-            $map = MessageEventTaskRelationPeer::getTableMap();
+            $map = ElementTaskRelationPeer::getTableMap();
             $columns = $map->getColumns();
             $nameMap = array();
             foreach ($columns as $column) {
@@ -149,12 +152,12 @@ abstract class BaseMessageEventTaskRelationPeer
      *      $c->addJoin(TablePeer::alias("alias1", TablePeer::PRIMARY_KEY_COLUMN), TablePeer::PRIMARY_KEY_COLUMN);
      * </code>
      * @param      string $alias The alias for the current table.
-     * @param      string $column The column name for current table. (i.e. MessageEventTaskRelationPeer::COLUMN_NAME).
+     * @param      string $column The column name for current table. (i.e. ElementTaskRelationPeer::COLUMN_NAME).
      * @return     string
      */
     public static function alias($alias, $column)
     {
-        return str_replace(MessageEventTaskRelationPeer::TABLE_NAME.'.', $alias.'.', $column);
+        return str_replace(ElementTaskRelationPeer::TABLE_NAME.'.', $alias.'.', $column);
     }
 
     /**
@@ -171,18 +174,20 @@ abstract class BaseMessageEventTaskRelationPeer
     public static function addSelectColumns(Criteria $criteria)
     {
 
-        $criteria->addSelectColumn(MessageEventTaskRelationPeer::MSGETR_UID);
+        $criteria->addSelectColumn(ElementTaskRelationPeer::ETR_UID);
 
-        $criteria->addSelectColumn(MessageEventTaskRelationPeer::PRJ_UID);
+        $criteria->addSelectColumn(ElementTaskRelationPeer::PRJ_UID);
 
-        $criteria->addSelectColumn(MessageEventTaskRelationPeer::EVN_UID);
+        $criteria->addSelectColumn(ElementTaskRelationPeer::ELEMENT_UID);
 
-        $criteria->addSelectColumn(MessageEventTaskRelationPeer::TAS_UID);
+        $criteria->addSelectColumn(ElementTaskRelationPeer::ELEMENT_TYPE);
+
+        $criteria->addSelectColumn(ElementTaskRelationPeer::TAS_UID);
 
     }
 
-    const COUNT = 'COUNT(MESSAGE_EVENT_TASK_RELATION.MSGETR_UID)';
-    const COUNT_DISTINCT = 'COUNT(DISTINCT MESSAGE_EVENT_TASK_RELATION.MSGETR_UID)';
+    const COUNT = 'COUNT(ELEMENT_TASK_RELATION.ETR_UID)';
+    const COUNT_DISTINCT = 'COUNT(DISTINCT ELEMENT_TASK_RELATION.ETR_UID)';
 
     /**
      * Returns the number of rows matching criteria.
@@ -200,9 +205,9 @@ abstract class BaseMessageEventTaskRelationPeer
         // clear out anything that might confuse the ORDER BY clause
         $criteria->clearSelectColumns()->clearOrderByColumns();
         if ($distinct || in_array(Criteria::DISTINCT, $criteria->getSelectModifiers())) {
-            $criteria->addSelectColumn(MessageEventTaskRelationPeer::COUNT_DISTINCT);
+            $criteria->addSelectColumn(ElementTaskRelationPeer::COUNT_DISTINCT);
         } else {
-            $criteria->addSelectColumn(MessageEventTaskRelationPeer::COUNT);
+            $criteria->addSelectColumn(ElementTaskRelationPeer::COUNT);
         }
 
         // just in case we're grouping: add those columns to the select statement
@@ -210,7 +215,7 @@ abstract class BaseMessageEventTaskRelationPeer
             $criteria->addSelectColumn($column);
         }
 
-        $rs = MessageEventTaskRelationPeer::doSelectRS($criteria, $con);
+        $rs = ElementTaskRelationPeer::doSelectRS($criteria, $con);
         if ($rs->next()) {
             return $rs->getInt(1);
         } else {
@@ -223,7 +228,7 @@ abstract class BaseMessageEventTaskRelationPeer
      *
      * @param      Criteria $criteria object used to create the SELECT statement.
      * @param      Connection $con
-     * @return     MessageEventTaskRelation
+     * @return     ElementTaskRelation
      * @throws     PropelException Any exceptions caught during processing will be
      *       rethrown wrapped into a PropelException.
      */
@@ -231,7 +236,7 @@ abstract class BaseMessageEventTaskRelationPeer
     {
         $critcopy = clone $criteria;
         $critcopy->setLimit(1);
-        $objects = MessageEventTaskRelationPeer::doSelect($critcopy, $con);
+        $objects = ElementTaskRelationPeer::doSelect($critcopy, $con);
         if ($objects) {
             return $objects[0];
         }
@@ -248,7 +253,7 @@ abstract class BaseMessageEventTaskRelationPeer
      */
     public static function doSelect(Criteria $criteria, $con = null)
     {
-        return MessageEventTaskRelationPeer::populateObjects(MessageEventTaskRelationPeer::doSelectRS($criteria, $con));
+        return ElementTaskRelationPeer::populateObjects(ElementTaskRelationPeer::doSelectRS($criteria, $con));
     }
     /**
      * Prepares the Criteria object and uses the parent doSelect()
@@ -272,7 +277,7 @@ abstract class BaseMessageEventTaskRelationPeer
 
         if (!$criteria->getSelectColumns()) {
             $criteria = clone $criteria;
-            MessageEventTaskRelationPeer::addSelectColumns($criteria);
+            ElementTaskRelationPeer::addSelectColumns($criteria);
         }
 
         // Set the correct dbName
@@ -294,7 +299,7 @@ abstract class BaseMessageEventTaskRelationPeer
         $results = array();
 
         // set the class once to avoid overhead in the loop
-        $cls = MessageEventTaskRelationPeer::getOMClass();
+        $cls = ElementTaskRelationPeer::getOMClass();
         $cls = Propel::import($cls);
         // populate the object(s)
         while ($rs->next()) {
@@ -329,13 +334,13 @@ abstract class BaseMessageEventTaskRelationPeer
      */
     public static function getOMClass()
     {
-        return MessageEventTaskRelationPeer::CLASS_DEFAULT;
+        return ElementTaskRelationPeer::CLASS_DEFAULT;
     }
 
     /**
-     * Method perform an INSERT on the database, given a MessageEventTaskRelation or Criteria object.
+     * Method perform an INSERT on the database, given a ElementTaskRelation or Criteria object.
      *
-     * @param      mixed $values Criteria or MessageEventTaskRelation object containing data that is used to create the INSERT statement.
+     * @param      mixed $values Criteria or ElementTaskRelation object containing data that is used to create the INSERT statement.
      * @param      Connection $con the connection to use
      * @return     mixed The new primary key.
      * @throws     PropelException Any exceptions caught during processing will be
@@ -350,7 +355,7 @@ abstract class BaseMessageEventTaskRelationPeer
         if ($values instanceof Criteria) {
             $criteria = clone $values; // rename for clarity
         } else {
-            $criteria = $values->buildCriteria(); // build Criteria from MessageEventTaskRelation object
+            $criteria = $values->buildCriteria(); // build Criteria from ElementTaskRelation object
         }
 
 
@@ -372,9 +377,9 @@ abstract class BaseMessageEventTaskRelationPeer
     }
 
     /**
-     * Method perform an UPDATE on the database, given a MessageEventTaskRelation or Criteria object.
+     * Method perform an UPDATE on the database, given a ElementTaskRelation or Criteria object.
      *
-     * @param      mixed $values Criteria or MessageEventTaskRelation object containing data create the UPDATE statement.
+     * @param      mixed $values Criteria or ElementTaskRelation object containing data create the UPDATE statement.
      * @param      Connection $con The connection to use (specify Connection exert more control over transactions).
      * @return     int The number of affected rows (if supported by underlying database driver).
      * @throws     PropelException Any exceptions caught during processing will be
@@ -391,8 +396,8 @@ abstract class BaseMessageEventTaskRelationPeer
         if ($values instanceof Criteria) {
             $criteria = clone $values; // rename for clarity
 
-            $comparison = $criteria->getComparison(MessageEventTaskRelationPeer::MSGETR_UID);
-            $selectCriteria->add(MessageEventTaskRelationPeer::MSGETR_UID, $criteria->remove(MessageEventTaskRelationPeer::MSGETR_UID), $comparison);
+            $comparison = $criteria->getComparison(ElementTaskRelationPeer::ETR_UID);
+            $selectCriteria->add(ElementTaskRelationPeer::ETR_UID, $criteria->remove(ElementTaskRelationPeer::ETR_UID), $comparison);
 
         } else {
             $criteria = $values->buildCriteria(); // gets full criteria
@@ -406,7 +411,7 @@ abstract class BaseMessageEventTaskRelationPeer
     }
 
     /**
-     * Method to DELETE all rows from the MESSAGE_EVENT_TASK_RELATION table.
+     * Method to DELETE all rows from the ELEMENT_TASK_RELATION table.
      *
      * @return     int The number of affected rows (if supported by underlying database driver).
      */
@@ -420,7 +425,7 @@ abstract class BaseMessageEventTaskRelationPeer
             // use transaction because $criteria could contain info
             // for more than one table or we could emulating ON DELETE CASCADE, etc.
             $con->begin();
-            $affectedRows += BasePeer::doDeleteAll(MessageEventTaskRelationPeer::TABLE_NAME, $con);
+            $affectedRows += BasePeer::doDeleteAll(ElementTaskRelationPeer::TABLE_NAME, $con);
             $con->commit();
             return $affectedRows;
         } catch (PropelException $e) {
@@ -430,9 +435,9 @@ abstract class BaseMessageEventTaskRelationPeer
     }
 
     /**
-     * Method perform a DELETE on the database, given a MessageEventTaskRelation or Criteria object OR a primary key value.
+     * Method perform a DELETE on the database, given a ElementTaskRelation or Criteria object OR a primary key value.
      *
-     * @param      mixed $values Criteria or MessageEventTaskRelation object or primary key or array of primary keys
+     * @param      mixed $values Criteria or ElementTaskRelation object or primary key or array of primary keys
      *              which is used to create the DELETE statement
      * @param      Connection $con the connection to use
      * @return     int  The number of affected rows (if supported by underlying database driver).
@@ -444,18 +449,18 @@ abstract class BaseMessageEventTaskRelationPeer
     public static function doDelete($values, $con = null)
     {
         if ($con === null) {
-            $con = Propel::getConnection(MessageEventTaskRelationPeer::DATABASE_NAME);
+            $con = Propel::getConnection(ElementTaskRelationPeer::DATABASE_NAME);
         }
 
         if ($values instanceof Criteria) {
             $criteria = clone $values; // rename for clarity
-        } elseif ($values instanceof MessageEventTaskRelation) {
+        } elseif ($values instanceof ElementTaskRelation) {
 
             $criteria = $values->buildPkeyCriteria();
         } else {
             // it must be the primary key
             $criteria = new Criteria(self::DATABASE_NAME);
-            $criteria->add(MessageEventTaskRelationPeer::MSGETR_UID, (array) $values, Criteria::IN);
+            $criteria->add(ElementTaskRelationPeer::ETR_UID, (array) $values, Criteria::IN);
         }
 
         // Set the correct dbName
@@ -478,24 +483,24 @@ abstract class BaseMessageEventTaskRelationPeer
     }
 
     /**
-     * Validates all modified columns of given MessageEventTaskRelation object.
+     * Validates all modified columns of given ElementTaskRelation object.
      * If parameter $columns is either a single column name or an array of column names
      * than only those columns are validated.
      *
      * NOTICE: This does not apply to primary or foreign keys for now.
      *
-     * @param      MessageEventTaskRelation $obj The object to validate.
+     * @param      ElementTaskRelation $obj The object to validate.
      * @param      mixed $cols Column name or array of column names.
      *
      * @return     mixed TRUE if all columns are valid or the error message of the first invalid column.
      */
-    public static function doValidate(MessageEventTaskRelation $obj, $cols = null)
+    public static function doValidate(ElementTaskRelation $obj, $cols = null)
     {
         $columns = array();
 
         if ($cols) {
-            $dbMap = Propel::getDatabaseMap(MessageEventTaskRelationPeer::DATABASE_NAME);
-            $tableMap = $dbMap->getTable(MessageEventTaskRelationPeer::TABLE_NAME);
+            $dbMap = Propel::getDatabaseMap(ElementTaskRelationPeer::DATABASE_NAME);
+            $tableMap = $dbMap->getTable(ElementTaskRelationPeer::TABLE_NAME);
 
             if (! is_array($cols)) {
                 $cols = array($cols);
@@ -511,7 +516,7 @@ abstract class BaseMessageEventTaskRelationPeer
 
         }
 
-        return BasePeer::doValidate(MessageEventTaskRelationPeer::DATABASE_NAME, MessageEventTaskRelationPeer::TABLE_NAME, $columns);
+        return BasePeer::doValidate(ElementTaskRelationPeer::DATABASE_NAME, ElementTaskRelationPeer::TABLE_NAME, $columns);
     }
 
     /**
@@ -519,7 +524,7 @@ abstract class BaseMessageEventTaskRelationPeer
      *
      * @param      mixed $pk the primary key.
      * @param      Connection $con the connection to use
-     * @return     MessageEventTaskRelation
+     * @return     ElementTaskRelation
      */
     public static function retrieveByPK($pk, $con = null)
     {
@@ -527,12 +532,12 @@ abstract class BaseMessageEventTaskRelationPeer
             $con = Propel::getConnection(self::DATABASE_NAME);
         }
 
-        $criteria = new Criteria(MessageEventTaskRelationPeer::DATABASE_NAME);
+        $criteria = new Criteria(ElementTaskRelationPeer::DATABASE_NAME);
 
-        $criteria->add(MessageEventTaskRelationPeer::MSGETR_UID, $pk);
+        $criteria->add(ElementTaskRelationPeer::ETR_UID, $pk);
 
 
-        $v = MessageEventTaskRelationPeer::doSelect($criteria, $con);
+        $v = ElementTaskRelationPeer::doSelect($criteria, $con);
 
         return !empty($v) > 0 ? $v[0] : null;
     }
@@ -556,8 +561,8 @@ abstract class BaseMessageEventTaskRelationPeer
             $objs = array();
         } else {
             $criteria = new Criteria();
-            $criteria->add(MessageEventTaskRelationPeer::MSGETR_UID, $pks, Criteria::IN);
-            $objs = MessageEventTaskRelationPeer::doSelect($criteria, $con);
+            $criteria->add(ElementTaskRelationPeer::ETR_UID, $pks, Criteria::IN);
+            $objs = ElementTaskRelationPeer::doSelect($criteria, $con);
         }
         return $objs;
     }
@@ -569,14 +574,14 @@ if (Propel::isInit()) {
     // the MapBuilder classes register themselves with Propel during initialization
     // so we need to load them here.
     try {
-        BaseMessageEventTaskRelationPeer::getMapBuilder();
+        BaseElementTaskRelationPeer::getMapBuilder();
     } catch (Exception $e) {
         Propel::log('Could not initialize Peer: ' . $e->getMessage(), Propel::LOG_ERR);
     }
 } else {
     // even if Propel is not yet initialized, the map builder class can be registered
     // now and then it will be loaded when Propel initializes.
-    require_once 'classes/model/map/MessageEventTaskRelationMapBuilder.php';
-    Propel::registerMapBuilder('classes.model.map.MessageEventTaskRelationMapBuilder');
+    require_once 'classes/model/map/ElementTaskRelationMapBuilder.php';
+    Propel::registerMapBuilder('classes.model.map.ElementTaskRelationMapBuilder');
 }
 

workflow/engine/classes/model/om/BaseListParticipatedLast.php

@@ -1686,6 +1686,7 @@ abstract class BaseListParticipatedLast extends BaseObject implements Persistent
 
         $criteria->add(ListParticipatedLastPeer::APP_UID, $this->app_uid);
         $criteria->add(ListParticipatedLastPeer::USR_UID, $this->usr_uid);
+        $criteria->add(ListParticipatedLastPeer::DEL_INDEX, $this->del_index);
 
         return $criteria;
     }
@@ -1703,6 +1704,8 @@ abstract class BaseListParticipatedLast extends BaseObject implements Persistent
 
         $pks[1] = $this->getUsrUid();
 
+        $pks[2] = $this->getDelIndex();
+
         return $pks;
     }
 
@@ -1719,6 +1722,8 @@ abstract class BaseListParticipatedLast extends BaseObject implements Persistent
 
         $this->setUsrUid($keys[1]);
 
+        $this->setDelIndex($keys[2]);
+
     }
 
     /**
@@ -1734,8 +1739,6 @@ abstract class BaseListParticipatedLast extends BaseObject implements Persistent
     public function copyInto($copyObj, $deepCopy = false)
     {
 
-        $copyObj->setDelIndex($this->del_index);
-
         $copyObj->setTasUid($this->tas_uid);
 
         $copyObj->setProUid($this->pro_uid);
@@ -1781,6 +1784,8 @@ abstract class BaseListParticipatedLast extends BaseObject implements Persistent
 
         $copyObj->setUsrUid(''); // this is a pkey column, so set to default value
 
+        $copyObj->setDelIndex('0'); // this is a pkey column, so set to default value
+
     }
 
     /**

workflow/engine/classes/model/om/BaseListParticipatedLastPeer.php

@@ -487,6 +487,9 @@ abstract class BaseListParticipatedLastPeer
             $comparison = $criteria->getComparison(ListParticipatedLastPeer::USR_UID);
             $selectCriteria->add(ListParticipatedLastPeer::USR_UID, $criteria->remove(ListParticipatedLastPeer::USR_UID), $comparison);
 
+            $comparison = $criteria->getComparison(ListParticipatedLastPeer::DEL_INDEX);
+            $selectCriteria->add(ListParticipatedLastPeer::DEL_INDEX, $criteria->remove(ListParticipatedLastPeer::DEL_INDEX), $comparison);
+
         } else {
             $criteria = $values->buildCriteria(); // gets full criteria
             $selectCriteria = $values->buildPkeyCriteria(); // gets criteria w/ primary key(s)
@@ -560,10 +563,12 @@ abstract class BaseListParticipatedLastPeer
 
                 $vals[0][] = $value[0];
                 $vals[1][] = $value[1];
+                $vals[2][] = $value[2];
             }
 
             $criteria->add(ListParticipatedLastPeer::APP_UID, $vals[0], Criteria::IN);
             $criteria->add(ListParticipatedLastPeer::USR_UID, $vals[1], Criteria::IN);
+            $criteria->add(ListParticipatedLastPeer::DEL_INDEX, $vals[2], Criteria::IN);
         }
 
         // Set the correct dbName
@@ -626,10 +631,11 @@ abstract class BaseListParticipatedLastPeer
      * Retrieve object using using composite pkey values.
      * @param string $app_uid
        * @param string $usr_uid
+       * @param int $del_index
         * @param      Connection $con
      * @return     ListParticipatedLast
      */
-    public static function retrieveByPK($app_uid, $usr_uid, $con = null)
+    public static function retrieveByPK($app_uid, $usr_uid, $del_index, $con = null)
     {
         if ($con === null) {
             $con = Propel::getConnection(self::DATABASE_NAME);
@@ -637,6 +643,7 @@ abstract class BaseListParticipatedLastPeer
         $criteria = new Criteria();
         $criteria->add(ListParticipatedLastPeer::APP_UID, $app_uid);
         $criteria->add(ListParticipatedLastPeer::USR_UID, $usr_uid);
+        $criteria->add(ListParticipatedLastPeer::DEL_INDEX, $del_index);
         $v = ListParticipatedLastPeer::doSelect($criteria, $con);
 
         return !empty($v) ? $v[0] : null;

workflow/engine/classes/model/om/BaseMessageApplication.php

@@ -61,7 +61,7 @@ abstract class BaseMessageApplication extends BaseObject implements Persistent
      * The value for the msgapp_variables field.
      * @var        string
      */
-    protected $msgapp_variables = '';
+    protected $msgapp_variables;
 
     /**
      * The value for the msgapp_correlation field.
@@ -378,7 +378,7 @@ abstract class BaseMessageApplication extends BaseObject implements Persistent
             $v = (string) $v;
         }
 
-        if ($this->msgapp_variables !== $v || $v === '') {
+        if ($this->msgapp_variables !== $v) {
             $this->msgapp_variables = $v;
             $this->modifiedColumns[] = MessageApplicationPeer::MSGAPP_VARIABLES;
         }

workflow/engine/classes/model/om/BaseMessageEventDefinition.php

@@ -61,7 +61,7 @@ abstract class BaseMessageEventDefinition extends BaseObject implements Persiste
      * The value for the msged_variables field.
      * @var        string
      */
-    protected $msged_variables = '';
+    protected $msged_variables;
 
     /**
      * The value for the msged_correlation field.
@@ -285,7 +285,7 @@ abstract class BaseMessageEventDefinition extends BaseObject implements Persiste
             $v = (string) $v;
         }
 
-        if ($this->msged_variables !== $v || $v === '') {
+        if ($this->msged_variables !== $v) {
             $this->msged_variables = $v;
             $this->modifiedColumns[] = MessageEventDefinitionPeer::MSGED_VARIABLES;
         }

workflow/engine/classes/triggers/api/class.zimbraApi.php

@@ -803,6 +803,9 @@ class Zimbra
     protected function message($message)
     {
         if ($this->debug) {
+            G::LoadSystem('inputfilter');
+            $filter = new InputFilter();
+            $message = $filter->xssFilterHard($message);
             echo $message;
         }
     }
@@ -823,6 +826,9 @@ class Zimbra
      */
     protected function soapRequest($body, $header = false, $connecting = false)
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        
         if (!$connecting && !$this->_connected) {
             throw new Exception('zimbra.class: soapRequest called without a connection to Zimbra server');
         }
@@ -842,7 +848,9 @@ class Zimbra
 
         curl_setopt($this->_curl, CURLOPT_POSTFIELDS, $soap_message);
 
-        if (!($response = curl_exec($this->_curl))) {
+        $this->_curl = $filter->xssFilterHard($this->_curl,"url");
+        $response = curl_exec($this->_curl);
+        if (!$response) {
             $this->error = 'ERROR: curl_exec - (' . curl_errno($this->_curl) . ') ' . curl_error($this->_curl);
             return false;
         } elseif (strpos($response, '<soap:Body><soap:Fault>') !== false) {

workflow/engine/config/schema.xml

@@ -4043,7 +4043,7 @@
         </vendor>
         <column name="APP_UID" type="VARCHAR" size="32" required="true" primaryKey="true" default=""/>
         <column name="USR_UID" type="VARCHAR" size="32" required="true" primaryKey="true" default=""/>
-        <column name="DEL_INDEX" type="INTEGER" required="true" default="0"/>
+        <column name="DEL_INDEX" type="INTEGER" required="true" primaryKey="true" default=""/>
         <column name="TAS_UID" type="VARCHAR" size="32" required="true" default=""/>
         <column name="PRO_UID" type="VARCHAR" size="32" required="true" default=""/>
         <column name="APP_NUMBER" type="INTEGER" required="true" default="0"/>
@@ -4445,25 +4445,6 @@
         <column name="EVN_UID_CATCH" type="VARCHAR" size="32" required="true" />
     </table>
 
-    <table name="MESSAGE_EVENT_TASK_RELATION">
-        <vendor type="mysql">
-            <parameter name="Name" value="MESSAGE_EVENT_TASK_RELATION" />
-            <parameter name="Engine" value="InnoDB" />
-            <parameter name="Version" value="10" />
-            <parameter name="Row_format" value="Dynamic" />
-            <parameter name="Data_free" value="0" />
-            <parameter name="Auto_increment" value="" />
-            <parameter name="Check_time" value="" />
-            <parameter name="Collation" value="utf8_general_ci" />
-            <parameter name="Checksum" value="" />
-            <parameter name="Create_options" value="" />
-        </vendor>
-        <column name="MSGETR_UID" type="VARCHAR" size="32" required="true" primaryKey="true" />
-        <column name="PRJ_UID"    type="VARCHAR" size="32" required="true" />
-        <column name="EVN_UID"    type="VARCHAR" size="32" required="true" />
-        <column name="TAS_UID"    type="VARCHAR" size="32" required="true" />
-    </table>
-
     <table name="MESSAGE_APPLICATION">
         <vendor type="mysql">
             <parameter name="Name" value="MESSAGE_APPLICATION" />
@@ -4491,5 +4472,348 @@
             <rule name="validValues" value="READ|UNREAD" message="Please enter a valid value for MSGAPP_STATUS" />
         </validator>
     </table>
+    <table name="ELEMENT_TASK_RELATION">
+        <vendor type="mysql">
+            <parameter name="Name" value="ELEMENT_TASK_RELATION" />
+            <parameter name="Engine" value="InnoDB" />
+            <parameter name="Version" value="10" />
+            <parameter name="Row_format" value="Dynamic" />
+            <parameter name="Data_free" value="0" />
+            <parameter name="Auto_increment" value="" />
+            <parameter name="Check_time" value="" />
+            <parameter name="Collation" value="utf8_general_ci" />
+            <parameter name="Checksum" value="" />
+            <parameter name="Create_options" value="" />
+        </vendor>
+        <column name="ETR_UID"      type="VARCHAR" size="32" required="true" primaryKey="true" />
+        <column name="PRJ_UID"      type="VARCHAR" size="32" required="true" />
+        <column name="ELEMENT_UID"  type="VARCHAR" size="32" required="true" />
+        <column name="ELEMENT_TYPE" type="VARCHAR" size="50" required="true" default=""/>
+        <column name="TAS_UID"      type="VARCHAR" size="32" required="true" />
+    </table>
+    <table name="ABE_CONFIGURATION">
+    <vendor type="mysql">
+      <parameter name="Name" value="ABE_CONFIGURATION"/>
+      <parameter name="Engine" value="MyISAM"/>
+      <parameter name="Version" value="10"/>
+      <parameter name="Row_format" value="Dynamic"/>
+      <parameter name="Auto_increment" value=""/>
+      <parameter name="Collation" value="utf8_general_ci"/>
+      <parameter name="Create_options" value=""/>
+      <parameter name="Comment" value="The plugin table for actionsByEmail"/>
+    </vendor>
+    <column name="ABE_UID" type="VARCHAR" size="32" required="true" primaryKey="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value="PRI"/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="PRO_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="PRO_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="TAS_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="TAS_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_TYPE" type="VARCHAR" size="10" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_TYPE"/>
+        <parameter name="Type" value="varchar(10)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_TEMPLATE" type="VARCHAR" size="100" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_TEMPLATE"/>
+        <parameter name="Type" value="varchar(100)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_DYN_TYPE" type="VARCHAR" size="10" required="true" default="NORMAL">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_DYN_TYPE"/>
+        <parameter name="Type" value="varchar(10)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value="NORMAL"/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="DYN_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="DYN_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_EMAIL_FIELD" type="VARCHAR" size="255" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_ACTION_FIELD"/>
+        <parameter name="Type" value="varchar(255)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_ACTION_FIELD" type="VARCHAR" size="255" required="false" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_ACTION_FIELD"/>
+        <parameter name="Type" value="varchar(255)"/>
+        <parameter name="Null" value="YES"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_CASE_NOTE_IN_RESPONSE" type="INTEGER" required="false" default="0">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_CASE_NOTE_IN_RESPONSE"/>
+        <parameter name="Type" value="int(1)"/>
+        <parameter name="Null" value="YES"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value="0"/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_CREATE_DATE" type="TIMESTAMP" required="true">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_CREATE_DATE"/>
+        <parameter name="Type" value="datetime"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_UPDATE_DATE" type="TIMESTAMP" required="false">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_CREATE_UPDATE"/>
+        <parameter name="Type" value="datetime"/>
+        <parameter name="Null" value="YES"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+  </table>
+
+  <table name="ABE_REQUESTS">
+    <vendor type="mysql">
+      <parameter name="Name" value="ABE_REQUESTS"/>
+      <parameter name="Engine" value="MyISAM"/>
+      <parameter name="Version" value="10"/>
+      <parameter name="Row_format" value="Dynamic"/>
+      <parameter name="Auto_increment" value=""/>
+      <parameter name="Collation" value="utf8_general_ci"/>
+      <parameter name="Create_options" value=""/>
+      <parameter name="Comment" value="The plugin table for actionsByEmail"/>
+    </vendor>
+    <column name="ABE_REQ_UID" type="VARCHAR" size="32" required="true" primaryKey="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value="PRI"/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="APP_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="APP_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="DEL_INDEX" type="INTEGER" required="true" default="0">
+      <vendor type="mysql">
+        <parameter name="Field" value="DEL_INDEX"/>
+        <parameter name="Type" value="int(11)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value="0"/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_SENT_TO" type="VARCHAR" size="100" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_SENT_TO"/>
+        <parameter name="Type" value="varchar(100)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_SUBJECT" type="VARCHAR" size="150" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_SUBJECT"/>
+        <parameter name="Type" value="varchar(150)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_BODY" type="LONGVARCHAR" required="true">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_BODY"/>
+        <parameter name="Type" value="MEDIUMTEXT"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_DATE" type="TIMESTAMP" required="true">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_DATE"/>
+        <parameter name="Type" value="datetime"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_STATUS" type="VARCHAR" size="10" required="false" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_STATUS"/>
+        <parameter name="Type" value="varchar(10)"/>
+        <parameter name="Null" value="YES"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_ANSWERED" type="TINYINT" required="true" default="0">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_ANSWERED"/>
+        <parameter name="Type" value="TINYINT"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value="0"/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+  </table>
+
+  <table name="ABE_RESPONSES">
+    <vendor type="mysql">
+      <parameter name="Name" value="ABE_RESPONSES"/>
+      <parameter name="Engine" value="MyISAM"/>
+      <parameter name="Version" value="10"/>
+      <parameter name="Row_format" value="Dynamic"/>
+      <parameter name="Auto_increment" value=""/>
+      <parameter name="Collation" value="utf8_general_ci"/>
+      <parameter name="Create_options" value=""/>
+      <parameter name="Comment" value="The plugin table for actionsByEmail"/>
+    </vendor>
+    <column name="ABE_RES_UID" type="VARCHAR" size="32" required="true" primaryKey="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value="PRI"/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_REQ_UID" type="VARCHAR" size="32" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_REQ_UID"/>
+        <parameter name="Type" value="varchar(32)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_RES_CLIENT_IP" type="VARCHAR" size="20" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_CLIENT_IP"/>
+        <parameter name="Type" value="varchar(20)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_RES_DATA" type="LONGVARCHAR" required="true">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_DATA"/>
+        <parameter name="Type" value="text"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value="0"/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_RES_DATE" type="TIMESTAMP" required="true">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_DATE"/>
+        <parameter name="Type" value="datetime"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_RES_STATUS" type="VARCHAR" size="10" required="true" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_STATUS"/>
+        <parameter name="Type" value="varchar(10)"/>
+        <parameter name="Null" value="NO"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+    <column name="ABE_RES_MESSAGE" type="VARCHAR" size="255" required="false" default="">
+      <vendor type="mysql">
+        <parameter name="Field" value="ABE_RES_MESSAGE"/>
+        <parameter name="Type" value="varchar(255)"/>
+        <parameter name="Null" value="YES"/>
+        <parameter name="Key" value=""/>
+        <parameter name="Default" value=""/>
+        <parameter name="Extra" value=""/>
+      </vendor>
+    </column>
+  </table>
 </database>
 

workflow/engine/controllers/adminProxy.php

@@ -1009,6 +1009,12 @@ class adminProxy extends HttpProxyController
     public function uploadImage()
     {
         //!dataSystem
+        
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $_SERVER["REQUEST_URI"] = $filter->xssFilterHard($_SERVER["REQUEST_URI"]);
+        $_FILES = $filter->xssFilterHard($_FILES);
+        
         $ainfoSite = explode("/", $_SERVER["REQUEST_URI"]);
         $dir       = PATH_DATA."sites".PATH_SEP.str_replace("sys","",$ainfoSite[1]).PATH_SEP."files/logos";
         global $_FILES;
@@ -1035,8 +1041,10 @@ class adminProxy extends HttpProxyController
 
         $uploaded = 0;
         $failed   = 0;
+        
+        $files_img_type = $filter->xssFilterHard($_FILES['img']['type']);
 
-        if (in_array($_FILES['img']['type'], $allowedType)) {
+        if (in_array($files_img_type, $allowedType)) {
              // max upload file is 500 KB
             if ($_FILES['img']['size'] <= 500000) {
                 $formf     = $_FILES['img'];
@@ -1055,7 +1063,7 @@ class adminProxy extends HttpProxyController
                         $arrayInfo = getimagesize($dir . '/' . 'tmp' . $fileName);
                         $typeMime  = $arrayInfo[2];
                     }
-                    if ($typeMime == $allowedTypeArray['index' . base64_encode($_FILES['img']['type'])]) {
+                    if ($typeMime == $allowedTypeArray['index' . base64_encode($files_img_type)]) {
                         $error = false;
                         try {
                             list($imageWidth, $imageHeight, $imageType) = @getimagesize($dir . '/' . 'tmp' . $fileName);
@@ -1075,10 +1083,10 @@ class adminProxy extends HttpProxyController
             } else {
                 $failed = "2";
             }
-        } elseif ($_FILES['img']['type'] != '') {
+        } elseif ($files_img_type != '') {
             $failed = "1";
         }
-        echo '{success: true, failed: ' . $failed . ', uploaded: ' . $uploaded . ', type: "' . $_FILES['img']['type'] . '"}';
+        echo '{success: true, failed: ' . $failed . ', uploaded: ' . $uploaded . ', type: "' . $files_img_type . '"}';
         exit();
     }
 

workflow/engine/controllers/installer.php

@@ -38,7 +38,7 @@ class Installer extends Controller
 
     public function index ($httpData)
     {
-        if ((strtoupper(substr(PHP_OS, 0, 3)) == 'WIN') && (file_exists($this->path_shared . 'partner.info'))){
+        if ((strtoupper(substr(PHP_OS, 0, 3)) == 'WIN') && (file_exists($this->path_shared . 'partner.info'))) {
             $this->includeExtJS( 'installer/stopInstall');
             $this->setView( 'installer/mainStopInstall' );
             G::RenderPage( 'publish', 'extJs' );
@@ -433,6 +433,9 @@ class Installer extends Controller
      */
     public function mysqlQuery ($sql)
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $sql = $filter->preventSqlInjection($sql, Array());
         $this->installLog( $sql );
         $query = @mysql_query( $sql, $this->link );
         if (! $query) {
@@ -450,6 +453,9 @@ class Installer extends Controller
      */
     public function mssqlQuery ($sql)
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
+        $sql = $filter->preventSqlInjection($sql, Array());
         $this->installLog( $sql );
         $query = @mssql_query( $sql, $this->link );
         if (! $query) {
@@ -587,9 +593,13 @@ class Installer extends Controller
      */
     public function setGrantPrivilegesMySQL ($psUser, $psPassword, $psDatabase, $host)
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
         $host = ($host == 'localhost' || $host == '127.0.0.1' ? 'localhost' : '%');
 
-        $sql = sprintf( "GRANT ALL PRIVILEGES ON `%s`.* TO %s@'%s' IDENTIFIED BY '%s' WITH GRANT OPTION", $psDatabase, $psUser, $host, $psPassword );
+        $query = "GRANT ALL PRIVILEGES ON `%s`.* TO %s@'%s' IDENTIFIED BY '%s' WITH GRANT OPTION";
+        $sql = sprintf( $query, $psDatabase, $psUser, $host, $psPassword );
+        $sql = $filter->preventSqlInjection($query, array($psDatabase, $psUser, $host, $psPassword ));
         $query = @mysql_query( $sql, $this->link );
 
         if (! $query) {
@@ -776,11 +786,12 @@ class Installer extends Controller
 
             $this->mysqlFileQuery( PATH_RBAC_HOME . 'engine/data/mysql/schema.sql' );
             $this->mysqlFileQuery( PATH_RBAC_HOME . 'engine/data/mysql/insert.sql' );
-
+            
             $query = sprintf( "USE %s;", $wf_workpace );
             $this->mysqlQuery( $query );
             $this->mysqlFileQuery( PATH_HOME . 'engine/data/mysql/schema.sql' );
             $this->mysqlFileQuery( PATH_HOME . 'engine/data/mysql/insert.sql' );
+            
 
             if (defined('PARTNER_FLAG') || isset($_REQUEST['PARTNER_FLAG'])) {
                 $this->setPartner();
@@ -1200,25 +1211,39 @@ class Installer extends Controller
 
     public function checkDatabases ()
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
         $this->setResponseType( 'json' );
         $info = new stdclass();
 
         if ($_REQUEST['db_engine'] == 'mysql') {
             $link = @mysql_connect( $_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'] );
-            $dataset = @mysql_query( "show databases like '" . $_REQUEST['wfDatabase'] . "'", $link );
+            $_REQUEST['wfDatabase'] = $filter->validateInput($_REQUEST['wfDatabase'], 'nosql');
+            $query = "show databases like '%s' ";
+            $query = $filter->preventSqlInjection( $query, array($_REQUEST['wfDatabase']) );
+            $dataset = @mysql_query( $query, $link );
             $info->wfDatabaseExists = (@mysql_num_rows( $dataset ) > 0);
         } else if ($_REQUEST['db_engine'] == 'mssql') {
             $link = @mssql_connect( $_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'] );
-            $dataset = @mssql_query( "select * from sys.databases where name = '" . $_REQUEST['wfDatabase'] . "'", $link );
+            $_REQUEST['wfDatabase'] = $filter->validateInput($_REQUEST['wfDatabase'], 'nosql');
+            $query = "select * from sys.databases where name = '%s' ";
+            $query = $filter->preventSqlInjection( $query, array($_REQUEST['wfDatabase']) );
+            $dataset = @mssql_query( $query , $link );
             $info->wfDatabaseExists = (@mssql_num_rows( $dataset ) > 0);
         } else if ($_REQUEST['db_engine'] == 'sqlsrv') {
             $arguments = array("UID" => $_REQUEST['db_username'], "PWD" => $_REQUEST['db_password']);
             $link = @sqlsrv_connect( $_REQUEST['db_hostname'], $arguments);
-            $dataset = @sqlsrv_query( $link, "select * from sys.databases where name = '" . $_REQUEST['wfDatabase'] . "'");
+            $_REQUEST['wfDatabase'] = $filter->validateInput($_REQUEST['wfDatabase'], 'nosql');
+            $query = "select * from sys.databases where name = '%s' ";
+            $query = $filter->preventSqlInjection( $query, array($_REQUEST['wfDatabase']) );
+            $dataset = @sqlsrv_query( $link, $query );
             $info->wfDatabaseExists = (@sqlsrv_num_rows( $dataset ) > 0);
         } else {
             $link = @mssql_connect( $_REQUEST['db_hostname'], $_REQUEST['db_username'], $_REQUEST['db_password'] );
-            $dataset = @mssql_query( "select * from sys.databases where name = '" . $_REQUEST['wfDatabase'] . "'", $link );
+            $_REQUEST['wfDatabase'] = $filter->validateInput($_REQUEST['wfDatabase'], 'nosql');
+            $query = "select * from sys.databases where name = '%s' ";
+            $query = $filter->preventSqlInjection( $query, array($_REQUEST['wfDatabase']) );
+            $dataset = @mssql_query( $query , $link );
             $info->wfDatabaseExists = (@mssql_num_rows( $dataset ) > 0);
         }
 
@@ -1233,6 +1258,8 @@ class Installer extends Controller
 
     private function testMySQLconnection ()
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
         $info = new StdClass();
         $info->result = false;
         $info->message = '';
@@ -1256,7 +1283,11 @@ class Installer extends Controller
             $info->message .= G::LoadTranslation('ID_MYSQL_CREDENTIALS_WRONG');
             return $info;
         }
-        $res = @mysql_query( "SELECT * FROM `information_schema`.`USER_PRIVILEGES` where (GRANTEE = \"'$db_username'@'$db_hostname'\" OR GRANTEE = \"'$db_username'@'%'\") ", $link );
+        $db_username = $filter->validateInput($db_username, 'nosql');
+        $db_hostname = $filter->validateInput($db_hostname, 'nosql');
+        $query = "SELECT * FROM `information_schema`.`USER_PRIVILEGES` where (GRANTEE = \"'%s'@'%s'\" OR GRANTEE = \"'%s'@'%'\") ";
+        $query = $filter->preventSqlInjection($query, array($db_username, $db_hostname, $db_username));
+        $res = @mysql_query( $query, $link );
         $row = @mysql_fetch_array( $res );
         $hasSuper = is_array( $row );
         @mysql_free_result( $res );

workflow/engine/data/mysql/schema.sql

@@ -2300,7 +2300,7 @@ CREATE TABLE `LIST_PARTICIPATED_LAST`
 	`DEL_DUE_DATE` DATETIME,
 	`DEL_PRIORITY` VARCHAR(32) default '3' NOT NULL,
 	`DEL_THREAD_STATUS` VARCHAR(32) default 'OPEN' NOT NULL,
-	PRIMARY KEY (`APP_UID`,`USR_UID`)
+	PRIMARY KEY (`APP_UID`,`USR_UID`,`DEL_INDEX`)
 )ENGINE=InnoDB  DEFAULT CHARSET='utf8' COMMENT='Participated last list';
 #-----------------------------------------------------------------------------
 #-- LIST_COMPLETED
@@ -2577,21 +2577,6 @@ CREATE TABLE `MESSAGE_EVENT_RELATION`
 	PRIMARY KEY (`MSGER_UID`)
 )ENGINE=InnoDB  DEFAULT CHARSET='utf8';
 #-----------------------------------------------------------------------------
-#-- MESSAGE_EVENT_TASK_RELATION
-#-----------------------------------------------------------------------------
-
-DROP TABLE IF EXISTS `MESSAGE_EVENT_TASK_RELATION`;
-
-
-CREATE TABLE `MESSAGE_EVENT_TASK_RELATION`
-(
-	`MSGETR_UID` VARCHAR(32)  NOT NULL,
-	`PRJ_UID` VARCHAR(32)  NOT NULL,
-	`EVN_UID` VARCHAR(32)  NOT NULL,
-	`TAS_UID` VARCHAR(32)  NOT NULL,
-	PRIMARY KEY (`MSGETR_UID`)
-)ENGINE=InnoDB  DEFAULT CHARSET='utf8';
-#-----------------------------------------------------------------------------
 #-- MESSAGE_APPLICATION
 #-----------------------------------------------------------------------------
 
@@ -2612,5 +2597,83 @@ CREATE TABLE `MESSAGE_APPLICATION`
 	`MSGAPP_STATUS` VARCHAR(25) default 'UNREAD' NOT NULL,
 	PRIMARY KEY (`MSGAPP_UID`)
 )ENGINE=InnoDB  DEFAULT CHARSET='utf8';
+#-----------------------------------------------------------------------------
+#-- ELEMENT_TASK_RELATION
+#-----------------------------------------------------------------------------
+
+DROP TABLE IF EXISTS `ELEMENT_TASK_RELATION`;
+
+
+CREATE TABLE `ELEMENT_TASK_RELATION`
+(
+	`ETR_UID` VARCHAR(32)  NOT NULL,
+	`PRJ_UID` VARCHAR(32)  NOT NULL,
+	`ELEMENT_UID` VARCHAR(32)  NOT NULL,
+	`ELEMENT_TYPE` VARCHAR(50) default '' NOT NULL,
+	`TAS_UID` VARCHAR(32)  NOT NULL,
+	PRIMARY KEY (`ETR_UID`)
+)ENGINE=InnoDB  DEFAULT CHARSET='utf8';
+#-----------------------------------------------------------------------------
+#-- ABE_CONFIGURATION
+#-----------------------------------------------------------------------------
+
+DROP TABLE IF EXISTS `ABE_CONFIGURATION`;
+
+
+CREATE TABLE `ABE_CONFIGURATION`
+(
+	`ABE_UID` VARCHAR(32) default '' NOT NULL,
+	`PRO_UID` VARCHAR(32) default '' NOT NULL,
+	`TAS_UID` VARCHAR(32) default '' NOT NULL,
+	`ABE_TYPE` VARCHAR(10) default '' NOT NULL,
+	`ABE_TEMPLATE` VARCHAR(100) default '' NOT NULL,
+	`ABE_DYN_TYPE` VARCHAR(10) default 'NORMAL' NOT NULL,
+	`DYN_UID` VARCHAR(32) default '' NOT NULL,
+	`ABE_EMAIL_FIELD` VARCHAR(255) default '' NOT NULL,
+	`ABE_ACTION_FIELD` VARCHAR(255) default '',
+	`ABE_CASE_NOTE_IN_RESPONSE` INTEGER default 0,
+	`ABE_CREATE_DATE` DATETIME  NOT NULL,
+	`ABE_UPDATE_DATE` DATETIME,
+	PRIMARY KEY (`ABE_UID`)
+)ENGINE=InnoDB  DEFAULT CHARSET='utf8' COMMENT='The plugin table for actionsByEmail';
+#-----------------------------------------------------------------------------
+#-- ABE_REQUESTS
+#-----------------------------------------------------------------------------
+
+DROP TABLE IF EXISTS `ABE_REQUESTS`;
+
+
+CREATE TABLE `ABE_REQUESTS`
+(
+	`ABE_REQ_UID` VARCHAR(32) default '' NOT NULL,
+	`ABE_UID` VARCHAR(32) default '' NOT NULL,
+	`APP_UID` VARCHAR(32) default '' NOT NULL,
+	`DEL_INDEX` INTEGER default 0 NOT NULL,
+	`ABE_REQ_SENT_TO` VARCHAR(100) default '' NOT NULL,
+	`ABE_REQ_SUBJECT` VARCHAR(150) default '' NOT NULL,
+	`ABE_REQ_BODY` MEDIUMTEXT  NOT NULL,
+	`ABE_REQ_DATE` DATETIME  NOT NULL,
+	`ABE_REQ_STATUS` VARCHAR(10) default '',
+	`ABE_REQ_ANSWERED` TINYINT default 0 NOT NULL,
+	PRIMARY KEY (`ABE_REQ_UID`)
+)ENGINE=InnoDB  DEFAULT CHARSET='utf8' COMMENT='The plugin table for actionsByEmail';
+#-----------------------------------------------------------------------------
+#-- ABE_RESPONSES
+#-----------------------------------------------------------------------------
+
+DROP TABLE IF EXISTS `ABE_RESPONSES`;
+
+
+CREATE TABLE `ABE_RESPONSES`
+(
+	`ABE_RES_UID` VARCHAR(32) default '' NOT NULL,
+	`ABE_REQ_UID` VARCHAR(32) default '' NOT NULL,
+	`ABE_RES_CLIENT_IP` VARCHAR(20) default '' NOT NULL,
+	`ABE_RES_DATA` MEDIUMTEXT  NOT NULL,
+	`ABE_RES_DATE` DATETIME  NOT NULL,
+	`ABE_RES_STATUS` VARCHAR(10) default '' NOT NULL,
+	`ABE_RES_MESSAGE` VARCHAR(255) default '',
+	PRIMARY KEY (`ABE_RES_UID`)
+)ENGINE=InnoDB  DEFAULT CHARSET='utf8' COMMENT='The plugin table for actionsByEmail';
 # This restores the fkey checks, after having unset them earlier
 SET FOREIGN_KEY_CHECKS = 1;

workflow/engine/includes/inc.JSForms.php

@@ -23,12 +23,19 @@
  * 
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
 global $HTTP_SESSION_VARS;
 global $G_FORM;
+$HTTP_SESSION_VARS = $filter->xssFilterHard($HTTP_SESSION_VARS);
+$HTTP_GET_VARS = $filter->xssFilterHard($HTTP_GET_VARS);
+$_GET = $filter->xssFilterHard($_GET);
+
 $path = '';
 $showFieldAjax = 'showFieldAjax.php';
 
 $serverAjax = G::encryptLink($path.$showFieldAjax);
+$serverAjax = $filter->xssFilterHard($serverAjax);
 
 ?>
 <script language="JavaScript">
@@ -40,10 +47,14 @@ function RefreshDependentFields(ObjectName, Fields, InitValue) {
   global $HTTP_GET_VARS;
   if ($HTTP_SESSION_VARS['CURRENT_APPLICATION'] == '') $HTTP_SESSION_VARS['CURRENT_APPLICATION'] = '0';
   	$appid = $HTTP_SESSION_VARS['CURRENT_APPLICATION'];
-  	if ($HTTP_GET_VARS['dynaform'] != '')
+  	if ($HTTP_GET_VARS['dynaform'] != ''){
   	  $Dynaform = '&__dynaform__=' . $HTTP_GET_VARS['dynaform'];
-  	if ($HTTP_GET_VARS['filename'] != '')
+  	  $Dynaform = $filter->xssFilterHard($Dynaform);
+  	}
+  	if ($HTTP_GET_VARS['filename'] != ''){
   	  $Dynaform = '&__filename__=' . $HTTP_GET_VARS['filename'];
+  	  $Dynaform = $filter->xssFilterHard($Dynaform);
+  	}
 
 ?>
 

workflow/engine/js/cases/core/pmDynaform.js

@@ -5,7 +5,7 @@ function ajax_post(action, form, method, callback, asynchronous) {
     };
 }
 function dynaFormChanged(frm) {
-    return true;
+    return false;
 }
 $(window).load(function () {
     if (pm_run_outside_main_app === 'true') {
@@ -30,23 +30,10 @@ $(window).load(function () {
         token: credentials,
         submitRest: false
     });
-
-    var type = document.createElement("input");
-    type.type = "hidden";
-    type.name = "TYPE";
-    type.value = "ASSIGN_TASK";
-    var uid = document.createElement("input");
-    uid.type = "hidden";
-    uid.name = "UID";
-    uid.value = dyn_uid;
-    var position = document.createElement("input");
-    position.type = "hidden";
-    position.name = "POSITION";
-    position.value = "10000";
-    var action = document.createElement("input");
-    action.type = "hidden";
-    action.name = "ACTION";
-    action.value = "ASSIGN";
+    var dyn_content_history = document.createElement("input");
+    dyn_content_history.type = "hidden";
+    dyn_content_history.name = "form[DYN_CONTENT_HISTORY]";
+    dyn_content_history.value = JSON.stringify(jsondata);
     var dynaformname = document.createElement("input");
     dynaformname.type = "hidden";
     dynaformname.name = "__DynaformName__";
@@ -63,10 +50,7 @@ $(window).load(function () {
     form.action = filePost ? filePost : "cases_SaveData?UID=" + dyn_uid + "&APP_UID=" + app_uid;
     form.method = "post";
     form.enctype = "multipart/form-data";
-    form.appendChild(type);
-    form.appendChild(uid);
-    form.appendChild(position);
-    form.appendChild(action);
+    form.appendChild(dyn_content_history);
     form.appendChild(dynaformname);
     form.appendChild(appuid);
     form.appendChild(arrayRequired);

workflow/engine/methods/appFolder/appFolderAjax.php

@@ -1,4 +1,9 @@
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_GET = $filter->xssFilterHard($_GET);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
 if (! isset ($_SESSION ['USER_LOGGED'])) {
     $res ['success'] = false;
     $res ['error'] = G::LoadTranslation('ID_LOGIN_AGAIN');

workflow/engine/methods/cases/ajaxListener.php

@@ -33,6 +33,12 @@
 //require_once 'classes/model/AppDelay.php';
 //require_once 'classes/model/Process.php';
 //require_once 'classes/model/Task.php';
+
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_POST = $filter->xssFilterHard($_POST);
+
 if(isset($_REQUEST['action']) && $_REQUEST['action'] == "verifySession" ) {
     if (!isset($_SESSION['USER_LOGGED'])) {
         $response = new stdclass();
@@ -852,11 +858,11 @@ class Ajax
         $Fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["NEXT_STEP"] = "#";
         $Fields["APP_DATA"]["__DYNAFORM_OPTIONS"]["NEXT_ACTION"] = "return false;";
         G::LoadClass('pmDynaform');
-        $a = new pmDynaform($_REQUEST['DYN_UID'], $Fields['APP_DATA']);
+        $FieldsPmDynaform["PRO_UID"] = $_SESSION['PROCESS'];
+        $FieldsPmDynaform["CURRENT_DYNAFORM"] = $_REQUEST['DYN_UID'];
+        $a = new pmDynaform($FieldsPmDynaform);
         if ($a->isResponsive()) {
-            $a->app_data["PROCESS"] = $_SESSION['PROCESS'];
-            $a->app_data["SYS_SYS"] = SYS_SYS;
-            $a->printView((!isset($_SESSION["PM_RUN_OUTSIDE_MAIN_APP"])) ? "true" : "false", $_SESSION['APPLICATION']);
+            $a->printView();
         } else {
             $G_PUBLISH->AddContent("dynaform", "xmlform", $_SESSION["PROCESS"] . "/" . $_POST["DYN_UID"], "", $Fields["APP_DATA"], "", "", "view");
         }

workflow/engine/methods/cases/caseMessageHistory_Ajax.php

@@ -21,6 +21,10 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
 
 $arrayToTranslation = array(
     "TRIGGER"    => G::LoadTranslation("ID_TRIGGER_DB"),
@@ -31,11 +35,11 @@ $actionAjax = isset( $_REQUEST['actionAjax'] ) ? $_REQUEST['actionAjax'] : null;
 
 if ($actionAjax == 'messageHistoryGridList_JXP') {
 
-    if (!isset($_REQUEST['start'])) {
+    if (!isset($_REQUEST['start']) || $_REQUEST['start'] =='') {
         $_REQUEST['start'] = 0;
     }
 
-    if (!isset($_REQUEST['limit'])) {
+    if (!isset($_REQUEST['limit']) || $_REQUEST['limit'] =='') {
         $_REQUEST['limit'] = 20;
     }
 

workflow/engine/methods/cases/casesHistoryDynaformPage_Ajax.php

@@ -21,6 +21,13 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+ 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET);
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_SESSION = $filter->xssFilterHard($_SESSION); 
 
 $actionAjax = isset( $_REQUEST['actionAjax'] ) ? $_REQUEST['actionAjax'] : null;
 
@@ -383,11 +390,12 @@ if ($actionAjax == 'dynaformChangeLogViewHistory') {
     $Fields['APP_DATA']['__DYNAFORM_OPTIONS']['NEXT_STEP'] = '#';
     $Fields['APP_DATA']['__DYNAFORM_OPTIONS']['NEXT_ACTION'] = 'return false;';
     G::LoadClass('pmDynaform');
-    $a = new pmDynaform($_GET['DYN_UID'], $Fields['APP_DATA']);
+    $FieldsPmDynaform = $Fields;
+    $FieldsPmDynaform["PRO_UID"] = $_SESSION['PROCESS'];
+    $FieldsPmDynaform["CURRENT_DYNAFORM"] = $_GET['DYN_UID'];
+    $a = new pmDynaform($FieldsPmDynaform);
     if ($a->isResponsive()) {
-        $a->app_data["PROCESS"] = $_SESSION['PROCESS'];
-        $a->app_data["SYS_SYS"] = SYS_SYS;
-        $a->printView((!isset($_SESSION["PM_RUN_OUTSIDE_MAIN_APP"])) ? "true" : "false", $_SESSION['APPLICATION']);
+        $a->printView();
     } else {
         $G_PUBLISH->AddContent('dynaform', 'xmlform', $_SESSION['PROCESS'] . '/' . $_POST['DYN_UID'], '', $Fields['APP_DATA'], '', '', 'view');
     }
@@ -474,9 +482,11 @@ if ($actionAjax == 'historyDynaformGridPreview') {
     $_SESSION['CURRENT_DYN_UID'] = $_POST['DYN_UID'];
     $_SESSION['DYN_UID_PRINT'] = $_POST['DYN_UID'];
     G::LoadClass('pmDynaform');
-    $a = new pmDynaform($_GET['DYN_UID'], $Fields['APP_DATA']);
+    $FieldsPmDynaform = $Fields;
+    $FieldsPmDynaform["CURRENT_DYNAFORM"] = $_GET['DYN_UID'];
+    $a = new pmDynaform($FieldsPmDynaform);
     if ($a->isResponsive()) {
-        $a->printView((!isset($_SESSION["PM_RUN_OUTSIDE_MAIN_APP"])) ? "true" : "false", $_SESSION['APPLICATION']);
+        $a->printView();
     } else {
         $G_PUBLISH->AddContent('dynaform', 'xmlform', $_SESSION['PROCESS'] . '/' . $_POST['DYN_UID'], '', $Fields['APP_DATA'], '', '', 'view');
     }

workflow/engine/methods/cases/casesListExtJs.php

@@ -213,7 +213,6 @@ $menuPerms = $menuPerms . ($RBAC->userCanAccess( 'PM_REASSIGNCASE' ) == 1) ? 'R'
 $oHeadPublisher->assign( '___p34315105', $menuPerms ); // user menu permissions
 G::LoadClass( 'configuration' );
 $c = new Configurations();
-
 //$oHeadPublisher->addExtJsScript('cases/caseUtils', true);
 $oHeadPublisher->addExtJsScript( 'app/main', true );
 $oHeadPublisher->addExtJsScript( 'cases/casesList', false ); //adding a javascript file .js

workflow/engine/methods/cases/casesList_Ajax.php

@@ -40,6 +40,12 @@ require_once ("classes/model/AdditionalTables.php");
 require_once ("classes/model/AppDelay.php");*/
 G::LoadClass( 'case' );
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_SESSION = $filter->xssFilterHard($_SESSION); 
+
 $actionAjax = isset( $_REQUEST['actionAjax'] ) ? $_REQUEST['actionAjax'] : null;
 
 function filterUserListArray($users = array(), $filter = '')
@@ -216,6 +222,7 @@ if ($actionAjax == "getUsersToReassign") {
     G::LoadClass( 'tasks' );
     $task = new Task();
     $tasks = $task->load($_SESSION['TASK']);
+    $result = new stdclass();
     $result->data = $case->getUsersToReassign( $_SESSION['TASK'], $_SESSION['USER_LOGGED'], $tasks['PRO_UID'] );
     print G::json_encode( $result );
 }
@@ -240,6 +247,7 @@ if ($actionAjax == 'reassignCase') {
         //print_r($caseData);
         $data['APP_NUMBER'] = $caseData['APP_NUMBER'];
         $data['USER'] = $userData['USR_LASTNAME'] . ' ' . $userData['USR_FIRSTNAME']; //TODO change with the farmated username from environment conf
+        $result = new stdclass();
         $result->status = 0;
         $result->msg = G::LoadTranslation( 'ID_REASSIGNMENT_SUCCESS', SYS_LANG, $data );
     } catch (Exception $e) {

workflow/engine/methods/cases/casesStartPage_Ajax.php

@@ -1,4 +1,9 @@
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_SESSION = $filter->xssFilterHard($_SESSION);
 if (!isset($_SESSION['USER_LOGGED'])) {
     $res = new stdclass();
     $res->message = G::LoadTranslation('ID_LOGIN_AGAIN');
@@ -215,6 +220,11 @@ function lookinginforContentProcess ($sproUid)
 function startCase ()
 {
     G::LoadClass( 'case' );
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
+    $_POST = $filter->xssFilterHard($_POST);
+    $_REQUEST = $filter->xssFilterHard($_REQUEST);
+    $_SESSION = $filter->xssFilterHard($_SESSION);
 
     /* GET , POST & $_SESSION Vars */
     /* unset any variable, because we are starting a new case */
@@ -241,6 +251,7 @@ function startCase ()
         lookinginforContentProcess( $_POST['processId'] );
 
         $aData = $oCase->startCase( $_REQUEST['taskId'], $_SESSION['USER_LOGGED'] );
+        $aData = $filter->xssFilterHard($aData);
 
         $_SESSION['APPLICATION'] = $aData['APPLICATION'];
         $_SESSION['INDEX'] = $aData['INDEX'];

workflow/engine/methods/cases/casesStreamingFile.php

@@ -24,8 +24,8 @@ if ($actionAjax == "streaming") {
 
     $file = \G::getPathFromFileUID($oAppDocument->Fields['APP_UID'], $sAppDocUid);
 
-    $realPath  = PATH_DOCUMENT .  $app_uid . '/' . $file[0] . $file[1] . '_' . $iDocVersion . '.' . $ext;
-    $realPath1 = PATH_DOCUMENT . $app_uid . '/' . $file[0] . $file[1] . '.' . $ext;
+    $realPath  = PATH_DOCUMENT . G::getPathFromUID($app_uid) . '/' . $file[0] . $file[1] . '_' . $iDocVersion . '.' . $ext;
+    $realPath1 = PATH_DOCUMENT . G::getPathFromUID($app_uid) . '/' . $file[0] . $file[1] . '.' . $ext;
 
     if (file_exists( $realPath )) {
         $finfo    = finfo_open(FILEINFO_MIME_TYPE);

workflow/engine/methods/cases/cases_Ajax.php

@@ -1,4 +1,11 @@
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET);
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_SESSION = $filter->xssFilterHard($_SESSION);
+
 if (!isset($_SESSION['USER_LOGGED'])) {
     $response = new stdclass();
     $response->message = G::LoadTranslation('ID_LOGIN_AGAIN');
@@ -243,12 +250,16 @@ switch (($_POST['action']) ? $_POST['action'] : $_REQUEST['action']) {
         G::RenderPage( 'publish', 'raw' );
         break;
     case 'showUsers':
+        $_POST['TAS_ASSIGN_TYPE'] = $filter->xssFilterHard($_POST['TAS_ASSIGN_TYPE']);
         switch ($_POST['TAS_ASSIGN_TYPE']) {
             // switch verify $_POST['TAS_ASSIGN_TYPE']
             case 'BALANCED':
+                $_POST['USR_UID'] = $filter->xssFilterHard($_POST['USR_UID']);
                 G::LoadClass( 'user' );
                 $oUser = new User( new DBConnection() );
                 $oUser->load( $_POST['USR_UID'] );
+                $oUser->Fields['USR_FIRSTNAME'] = $filter->xssFilterHard($oUser->Fields['USR_FIRSTNAME']);
+                $oUser->Fields['USR_LASTNAME'] = $filter->xssFilterHard($oUser->Fields['USR_LASTNAME']);
                 echo $oUser->Fields['USR_FIRSTNAME'] . ' ' . $oUser->Fields['USR_LASTNAME'] . '<input type="hidden" name="form[TASKS][1][USR_UID]" id="form[TASKS][1][USR_UID]" value="' . $_POST['USR_UID'] . '">';
                 break;
             case 'MANUAL':
@@ -300,6 +311,8 @@ switch (($_POST['action']) ? $_POST['action'] : $_REQUEST['action']) {
                 echo $sAux;
                 break;
             case 'EVALUATE':
+                $_POST['TAS_ASSIGN_VARIABLE'] = $filter->xssFilterHard($_POST['TAS_ASSIGN_VARIABLE']);
+                $_SESSION['APPLICATION'] = $filter->xssFilterHard($_SESSION['APPLICATION']);
                 G::LoadClass( 'application' );
                 $oApplication = new Application( new DBConnection() );
                 $oApplication->load( $_SESSION['APPLICATION'] );
@@ -315,7 +328,8 @@ switch (($_POST['action']) ? $_POST['action'] : $_REQUEST['action']) {
                     $oUser->load( $sUser );
                     echo $oUser->Fields['USR_FIRSTNAME'] . ' ' . $oUser->Fields['USR_LASTNAME'] . '<input type="hidden" name="form[TASKS][1][USR_UID]" id="form[TASKS][1][USR_UID]" value="' . $sUser . '">';
                 } else {
-                    echo '<strong>Error: </strong>' . $_POST['TAS_ASSIGN_VARIABLE'] . ' ' . G::LoadTranslation( 'ID_EMPTY' );
+                    $ID_EMPTY = $filter->xssFilterHard(G::LoadTranslation( 'ID_EMPTY' ));
+                    echo '<strong>Error: </strong>' . $_POST['TAS_ASSIGN_VARIABLE'] . ' ' . $ID_EMPTY;
                     echo '<input type="hidden" name="_ERROR_" id="_ERROR_" value="">';
                 }
                 break;
@@ -447,6 +461,9 @@ switch (($_POST['action']) ? $_POST['action'] : $_REQUEST['action']) {
         $cases->reassignCase( $_SESSION['APPLICATION'], $_SESSION['INDEX'], $_SESSION['USER_LOGGED'], $_POST['USR_UID'], $_POST['THETYPE'] );
         break;
     case 'toRevisePanel':
+        $_POST['APP_UID'] = $filter->xssFilterHard($_POST['APP_UID']);
+        $_POST['DEL_INDEX'] = $filter->xssFilterHard($_POST['DEL_INDEX']);
+
         $_GET['APP_UID'] = $_POST['APP_UID'];
         $_GET['DEL_INDEX'] = $_POST['DEL_INDEX'];
         $G_PUBLISH = new Publisher();

workflow/engine/methods/cases/cases_Step.php

@@ -130,7 +130,13 @@ if (isset( $oProcessFieds['PRO_DEBUG'] ) && $oProcessFieds['PRO_DEBUG']) {
 }
 
 //cleaning debug variables
-if (! isset( $_GET['breakpoint'] )) {
+$flagExecuteBeforeTriggers = !isset($_GET["breakpoint"]);
+
+if (isset($_GET["TYPE"]) && $_GET["TYPE"] == "OUTPUT_DOCUMENT" && isset($_GET["ACTION"]) && $_GET["ACTION"] != "GENERATE") {
+    $flagExecuteBeforeTriggers = false;
+}
+
+if ($flagExecuteBeforeTriggers) {
     if (isset( $_SESSION['TRIGGER_DEBUG']['info'] )) {
         unset( $_SESSION['TRIGGER_DEBUG']['info'] );
     }
@@ -269,11 +275,14 @@ try {
             $_SESSION['CURRENT_DYN_UID'] = $_GET['UID'];
 
             G::LoadClass('pmDynaform');
-            $a = new pmDynaform($_GET['UID'], $Fields['APP_DATA']);
+            $FieldsPmDynaform = $Fields;
+            $FieldsPmDynaform["PM_RUN_OUTSIDE_MAIN_APP"] = (!isset($_SESSION["PM_RUN_OUTSIDE_MAIN_APP"])) ? "true" : "false";
+            $FieldsPmDynaform["STEP_MODE"] = $oStep->getStepMode();
+            $FieldsPmDynaform["PRO_SHOW_MESSAGE"] = $noShowTitle;
+            $FieldsPmDynaform["TRIGGER_DEBUG"] = $_SESSION['TRIGGER_DEBUG']['ISSET'];
+            $a = new pmDynaform($FieldsPmDynaform);
             if ($a->isResponsive()) {
-                $a->app_data["PRO_SHOW_MESSAGE"] = $noShowTitle;
-                $a->app_data["TRIGGER_DEBUG"] = $_SESSION['TRIGGER_DEBUG']['ISSET'];
-                $a->printEdit((!isset($_SESSION["PM_RUN_OUTSIDE_MAIN_APP"])) ? "true" : "false", $_SESSION['APPLICATION'], $array, $oStep->getStepMode());
+                $a->printEdit();
             } else {
                 $G_PUBLISH->AddContent('dynaform', 'xmlform', $_SESSION['PROCESS'] . '/' . $_GET['UID'], '', $Fields['APP_DATA'], 'cases_SaveData?UID=' . $_GET['UID'] . '&APP_UID=' . $_SESSION['APPLICATION'], '', (strtolower($oStep->getStepMode()) != 'edit' ? strtolower($oStep->getStepMode()) : ''));
             }

workflow/engine/methods/cases/cases_StepToRevise.php

@@ -23,6 +23,9 @@
  */
 //  die("first");
 /* Permissions */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET,"url");
 switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
     case - 2:
         G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_SYSTEM', 'error', 'labels' );
@@ -35,8 +38,9 @@ switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
         die();
         break;
 }
-
+$_SESSION = $filter->xssFilterHard($_SESSION,"url");
 if ((int) $_SESSION['INDEX'] < 1) {
+    $_SERVER['HTTP_REFERER'] = $filter->xssFilterHard($_SERVER['HTTP_REFERER']);
     G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_PAGE', 'error', 'labels' );
     G::header( 'location: ' . $_SERVER['HTTP_REFERER'] );
     die();

workflow/engine/methods/cases/cases_StepToReviseInputs.php

@@ -23,6 +23,9 @@
  */
 //die("second");
 /* Permissions */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET,"url");
 switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
     case - 2:
         G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_SYSTEM', 'error', 'labels' );
@@ -35,8 +38,9 @@ switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
         die();
         break;
 }
-
+$_SESSION = $filter->xssFilterHard($_SESSION,"url");
 if ((int) $_SESSION['INDEX'] < 1) {
+    $_SERVER['HTTP_REFERER'] = $filter->xssFilterHard($_SERVER['HTTP_REFERER']);
     G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_PAGE', 'error', 'labels' );
     G::header( 'location: ' . $_SERVER['HTTP_REFERER'] );
     die();

workflow/engine/methods/cases/cases_StepToReviseOutputs.php

@@ -23,6 +23,9 @@
  */
 
 /* Permissions */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET,"url");
 switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
     case - 2:
         G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_SYSTEM', 'error', 'labels' );
@@ -35,7 +38,7 @@ switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
         die();
         break;
 }
-
+$_SESSION = $filter->xssFilterHard($_SESSION,"url");
 /* Includes */
 G::LoadClass( 'case' );
 

workflow/engine/methods/cases/cases_ToReviseOutputDocView.php

@@ -23,6 +23,9 @@
  */
 
 /* Permissions */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET,"url");
 switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
     case - 2:
         G::SendTemporalMessage( 'ID_USER_HAVENT_RIGHTS_SYSTEM', 'error', 'labels' );
@@ -35,7 +38,7 @@ switch ($RBAC->userCanAccess( 'PM_SUPERVISOR' )) {
         die();
         break;
 }
-
+$_SESSION = $filter->xssFilterHard($_SESSION,"url");
 /* Includes */
 G::LoadClass( 'case' );
 

workflow/engine/methods/cases/cases_generatePMTable.php

@@ -4,6 +4,9 @@
  * and open the template in the editor.
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
 require_once ("classes/model/AdditionalTables.php");
 require_once ("classes/model/Fields.php");
 // passing the parameters

workflow/engine/methods/cases/main_init.php

@@ -80,9 +80,49 @@ if ($oServerConf->isRtl( SYS_LANG )) {
     $regionTreePanel = 'west';
     $regionDebug = 'east';
 }
+
+$urlProxy = 'casesMenuLoader?action=getAllCounters&r=';
+/*----------------------------------********---------------------------------*/
+$urlProxy = '/api/1.0/' . SYS_SYS . '/system/counters-lists?r=';
+$clientId = 'x-pm-local-client';
+$client = getClientCredentials($clientId);
+$authCode = getAuthorizationCode($client);
+$debug = false; //System::isDebugMode();
+
+$loader = Maveriks\Util\ClassLoader::getInstance();
+$loader->add(PATH_TRUNK . 'vendor/bshaffer/oauth2-server-php/src/', "OAuth2");
+
+$request = array(
+    'grant_type' => 'authorization_code',
+    'code' => $authCode
+);
+$server = array(
+    'REQUEST_METHOD' => 'POST'
+);
+$headers = array(
+    "PHP_AUTH_USER" => $client['CLIENT_ID'],
+    "PHP_AUTH_PW" => $client['CLIENT_SECRET'],
+    "Content-Type" => "multipart/form-data;",
+    "Authorization" => "Basic " . base64_encode($client['CLIENT_ID'] . ":" . $client['CLIENT_SECRET'])
+);
+
+$request = new \OAuth2\Request(array(), $request, array(), array(), array(), $server, null, $headers);
+$oauthServer = new \ProcessMaker\Services\OAuth2\Server();
+$response = $oauthServer->postToken($request, true);
+
+$clientToken = $response->getParameters();
+$clientToken["client_id"] = $client['CLIENT_ID'];
+$clientToken["client_secret"] = $client['CLIENT_SECRET'];
+/*----------------------------------********---------------------------------*/
+
+
 $oHeadPublisher->assign( 'regionTreePanel', $regionTreePanel );
 $oHeadPublisher->assign( 'regionDebug', $regionDebug );
 $oHeadPublisher->assign( "defaultOption", $defaultOption ); //User menu permissions
+$oHeadPublisher->assign( 'urlProxy', $urlProxy ); //sending the urlProxy to make
+/*----------------------------------********---------------------------------*/
+$oHeadPublisher->assign( 'credentials', $clientToken );
+/*----------------------------------********---------------------------------*/
 $oHeadPublisher->assign( "_nodeId", isset( $confDefaultOption ) ? $confDefaultOption : "PM_USERS" ); //User menu permissions
 $oHeadPublisher->assign( "FORMATS", $conf->getFormats() );
 
@@ -90,3 +130,41 @@ $_SESSION["current_ux"] = "NORMAL";
 
 G::RenderPage( "publish", "extJs" );
 
+
+/*----------------------------------********---------------------------------*/
+function getClientCredentials($clientId)
+{
+    $oauthQuery = new ProcessMaker\Services\OAuth2\PmPdo(getDsn());
+    return $oauthQuery->getClientDetails($clientId);
+}
+
+function getDsn()
+{
+    list($host, $port) = strpos(DB_HOST, ':') !== false ? explode(':', DB_HOST) : array(DB_HOST, '');
+    $port = empty($port) ? '' : ";port=$port";
+    $dsn = DB_ADAPTER.':host='.$host.';dbname='.DB_NAME.$port;
+
+    return array('dsn' => $dsn, 'username' => DB_USER, 'password' => DB_PASS);
+}
+
+
+function getAuthorizationCode($client)
+{
+    \ProcessMaker\Services\OAuth2\Server::setDatabaseSource(getDsn());
+    \ProcessMaker\Services\OAuth2\Server::setPmClientId($client['CLIENT_ID']);
+
+    $oauthServer = new \ProcessMaker\Services\OAuth2\Server();
+    $userId = $_SESSION['USER_LOGGED'];
+    $authorize = true;
+    $_GET = array_merge($_GET, array(
+        'response_type' => 'code',
+        'client_id' => $client['CLIENT_ID'],
+        'scope' => implode(' ', $oauthServer->getScope())
+    ));
+
+    $response = $oauthServer->postAuthorize($authorize, $userId, true);
+    $code = substr($response->getHttpHeader('Location'), strpos($response->getHttpHeader('Location'), 'code=')+5, 40);
+
+    return $code;
+}
+/*----------------------------------********---------------------------------*/

workflow/engine/methods/cases/pmDynaform.php

@@ -2,5 +2,5 @@
 
 $DYN_UID = $_GET["dyn_uid"];
 G::LoadClass('pmDynaform');
-$a = new pmDynaform($DYN_UID);
+$a = new pmDynaform(array("CURRENT_DYNAFORM" => $DYN_UID));
 $a->printPmDynaform();

workflow/engine/methods/cases/proxyCasesList.php

@@ -1,4 +1,10 @@
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+$_SESSION['USER_LOGGED'] = $filter->xssFilterHard($_SESSION['USER_LOGGED']);
+
 if (!isset($_SESSION['USER_LOGGED'])) {
     $responseObject = new stdclass();
     $responseObject->error = G::LoadTranslation('ID_LOGIN_AGAIN');

workflow/engine/methods/cases/proxyPMTablesFieldList.php

@@ -502,6 +502,8 @@ function fieldReset($translation)
 
 function fieldComplete($translation)
 {
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
     global $action;
 
     $arrayField  = getDefaultFields($action, $translation);
@@ -509,10 +511,15 @@ function fieldComplete($translation)
 
     //Get values from JSON request
     $first  = G::json_decode((isset($_POST["first"]))?  $_POST["first"] :  G::json_encode(array()));
+    $first  = $filter->xssFilterHard($first);
     $second = G::json_decode((isset($_POST["second"]))? $_POST["second"] : G::json_encode(array()));
+    $second = $filter->xssFilterHard($second);
     $pmtable = (isset($_POST["pmtable"]))? $_POST["pmtable"] : "";
+    $pmtable = $filter->xssFilterHard($pmtable);
     $rowsperpage = (isset($_POST["rowsperpage"]))? $_POST["rowsperpage"] : $arrayConfig["rowsperpage"];
+    $rowsperpage = $filter->xssFilterHard($rowsperpage);
     $dateformat  = (isset($_POST["dateformat"]) && !empty($_POST["dateformat"]))? $_POST["dateformat"] : $arrayConfig["dateformat"];
+    $dateformat = $filter->xssFilterHard($dateformat);
 
     //Complete fields
     foreach ($first as $index1 => $value1) {
@@ -560,17 +567,24 @@ function fieldComplete($translation)
 
 function fieldLabelReset($translation)
 {
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
     global $action;
 
     $arrayField  = getDefaultFields($action, $translation);
     $arrayConfig = getDefaultConfig($action, $translation);
 
     //Get values from JSON request
-    $first  = G::json_decode((isset($_POST["first"]))?  $_POST["first"] :  G::json_encode(array()));
-    $second = G::json_decode((isset($_POST["second"]))? $_POST["second"] : G::json_encode(array()));
-    $pmtable = (isset($_POST["pmtable"]))? $_POST["pmtable"] : "";
+    $first       = G::json_decode((isset($_POST["first"]))?  $_POST["first"] :  G::json_encode(array()));
+    $first       = $filter->xssFilterHard($first);
+    $second      = G::json_decode((isset($_POST["second"]))? $_POST["second"] : G::json_encode(array()));
+    $second      = $filter->xssFilterHard($second);
+    $pmtable     = (isset($_POST["pmtable"]))? $_POST["pmtable"] : "";
+    $pmtable     = $filter->xssFilterHard($pmtable);
     $rowsperpage = (isset($_POST["rowsperpage"]))? $_POST["rowsperpage"] : $arrayConfig["rowsperpage"];
+    $rowsperpage = $filter->xssFilterHard($rowsperpage);
     $dateformat  = (isset($_POST["dateformat"]) && !empty($_POST["dateformat"]))? $_POST["dateformat"] : $arrayConfig["dateformat"];
+    $dateformat  = $filter->xssFilterHard($dateformat);
 
     //Reset label's fields
     foreach ($second as $index1 => $value1) {
@@ -592,6 +606,8 @@ function fieldLabelReset($translation)
 
 function fieldSave()
 {
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
     global $conf;
     global $action;
 
@@ -599,11 +615,15 @@ function fieldSave()
     $arrayConfig = getDefaultConfig($action, 0);
 
     //Get values from JSON request
-    $first  = G::json_decode((isset($_POST["first"]))?  $_POST["first"] :  G::json_encode(array()));
-    $second = G::json_decode((isset($_POST["second"]))? $_POST["second"] : G::json_encode(array()));
-    $pmtable = (isset($_POST["pmtable"]))? $_POST["pmtable"] : "";
+    $first       = G::json_decode((isset($_POST["first"]))?  $_POST["first"] :  G::json_encode(array()));
+    $first       = $filter->xssFilterHard($first);
+    $second      = G::json_decode((isset($_POST["second"]))? $_POST["second"] : G::json_encode(array()));
+    $pmtable     = (isset($_POST["pmtable"]))? $_POST["pmtable"] : "";
+    $pmtable     = $filter->xssFilterHard($pmtable);
     $rowsperpage = (isset($_POST["rowsperpage"]))? $_POST["rowsperpage"] : $arrayConfig["rowsperpage"];
+    $rowsperpage = $filter->xssFilterHard($rowsperpage);
     $dateformat  = (isset($_POST["dateformat"]) && !empty($_POST["dateformat"]))? $_POST["dateformat"] : $arrayConfig["dateformat"];
+    $dateformat  = $filter->xssFilterHard($dateformat);
 
     //Adding the key fields to second array
     //Required fields for AppCacheView.php - addPMFieldsToCriteria()
@@ -744,6 +764,7 @@ function xgetFieldsFromPMTable($tabUid)
     $oCriteria->addSelectColumn ( FieldsPeer::FLD_INDEX );
     $oCriteria->add (FieldsPeer::ADD_TAB_UID, $tabUid , CRITERIA::EQUAL );
     $oCriteria->add (FieldsPeer::FLD_NAME, 'APP_UID' , CRITERIA::NOT_EQUAL );
+    $oCriteria->addAnd (FieldsPeer::FLD_NAME, 'APP_NUMBER' , CRITERIA::NOT_EQUAL );
     $oCriteria->addDescendingOrderByColumn('FLD_INDEX');
     $oDataset = FieldsPeer::doSelectRS($oCriteria);
     $oDataset->setFetchmode(ResultSet::FETCHMODE_ASSOC);

workflow/engine/methods/cases/proxyPMTablesList.php

@@ -1,12 +1,22 @@
 <?php
+
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_SESSION['USER_LOGGED'] = $filter->xssFilterHard($_SESSION['USER_LOGGED']);
+
 $callback = isset($_POST['callback']) ? $_POST['callback'] : 'stcCallback1001';
-$dir    = isset($_POST['dir'])    ? $_POST['dir']    : 'DESC';
-$sort   = isset($_POST['sort'])   ? $_POST['sort']   : '';
-$query  = isset($_POST['query']) ? $_POST['query'] : '';
+$callback = $filter->xssFilterHard($callback);
+$dir      = isset($_POST['dir'])    ? $_POST['dir']    : 'DESC';
+$dir      = $filter->xssFilterHard($dir);
+$sort     = isset($_POST['sort'])   ? $_POST['sort']   : '';
+$sort     = $filter->xssFilterHard($sort);
+$query    = isset($_POST['query']) ? $_POST['query'] : '';
+$query    = $filter->xssFilterHard($query);
 $option = '';
 
 if ( isset($_GET['t'] ) ) {
     $option = $_GET['t'];
+    $option = $filter->xssFilterHard($option);
 }
 
 try {

workflow/engine/methods/cases/proxyPMTablesSaveFields.php

@@ -5,12 +5,21 @@
  * and open the template in the editor.
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+
 $callback = isset($_POST['callback']) ? $_POST['callback'] : 'stcCallback1001';
+$callback = $filter->xssFilterHard($callback);
 $dir      = isset($_POST['dir'])    ? $_POST['dir']    : 'DESC';
+$dir      = $filter->xssFilterHard($dir);
 $sort     = isset($_POST['sort'])   ? $_POST['sort']   : '';
+$sort     = $filter->xssFilterHard($sort);
 $query    = isset($_POST['query'])  ? $_POST['query']  : '';
+$query    = $filter->xssFilterHard($query);
 $tabUid   = isset($_POST['table'])  ? $_POST['table']  : '';
+$tabUid   = $filter->xssFilterHard($tabUid);
 $action   = isset($_POST['action']) ? $_POST['action'] : 'todo';
+$action   = $filter->xssFilterHard($action);
 
 try {
     G::LoadClass("BasePeer" );

workflow/engine/methods/cases/proxyProcessList.php

@@ -1,4 +1,11 @@
 <?php
+
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_SESSION['USER_LOGGED'] = $filter->xssFilterHard($_SESSION['USER_LOGGED']);
+$_GET['t'] = $filter->xssFilterHard($_GET['t']);
+
 $callback = isset( $_POST['callback'] ) ? $_POST['callback'] : 'stcCallback1001';
 $dir = isset( $_POST['dir'] ) ? $_POST['dir'] : 'DESC';
 $sort = isset( $_POST['sort'] ) ? $_POST['sort'] : '';

workflow/engine/methods/controls/varsAjax.php

@@ -22,11 +22,19 @@
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  *
  */
+ 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+ 
 $_SERVER["QUERY_STRING"] = isset($_SERVER["QUERY_STRING"])?$_SERVER["QUERY_STRING"]:'';
 $_REQUEST["sProcess"] = isset($_REQUEST["sProcess"])?$_REQUEST["sProcess"]:'';
 $_REQUEST["sFieldName"] = isset($_REQUEST["sFieldName"])?$_REQUEST["sFieldName"]:'';
 $_REQUEST['sSymbol']= isset($_REQUEST["sSymbol"])?$_REQUEST["sSymbol"]:'';
 
+$_SERVER["QUERY_STRING"] = $filter->xssFilterHard($_SERVER["QUERY_STRING"]);
+
 $html = '<form action="uploader.php?'.$_SERVER["QUERY_STRING"].'&q=upload" onLoad="onLoad()" method="post" enctype="multipart/form-data" onsubmit="">';
 $html .= '<div id="d_variables">';
 $html .= '<table width="90%" align="center">';
@@ -40,24 +48,24 @@ $html .= '</tr>';
 
 $html .= '<tr>';
 $html .= '<td width="50%">';
-$html .= '<label for="type_label">'.G::LoadTranslation('ID_TINY_TYPE_VARIABLE').'</label>';
+$html .= '<label for="type_label">'.$filter->xssFilterHard(G::LoadTranslation('ID_TINY_TYPE_VARIABLE')).'</label>';
 $html .= '</td>';
 
 $html .= '<td width="25%">';
-$html .= '<label for="prefix_label">'.G::LoadTranslation('ID_PREFIX').'</label>';
+$html .= '<label for="prefix_label">'.$filter->xssFilterHard(G::LoadTranslation('ID_PREFIX')).'</label>';
 $html .= '</td>';
 
 $html .= '<td width="25%">';
-$html .= '<label for="variables_label">'.G::LoadTranslation( 'ID_SEARCH').'</label>';
+$html .= '<label for="variables_label">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_SEARCH')).'</label>';
 $html .= '</td>';
 $html .= '</tr>';
 
 $html .= '<tr>';
 $html .= '<td width="25%">';
 $html .= '<select name="type_variables" id="type_variables">';
-$html .= '<option value="all">'.G::LoadTranslation( 'ID_TINY_ALL_VARIABLES' ).'</option>';
-$html .= '<option value="system">'.G::LoadTranslation( 'ID_TINY_SYSTEM_VARIABLES' ).'</option>';
-$html .= '<option value="process">'.G::LoadTranslation( 'ID_TINY_PROCESS_VARIABLES' ).'</option>';
+$html .= '<option value="all">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_TINY_ALL_VARIABLES' )).'</option>';
+$html .= '<option value="system">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_TINY_SYSTEM_VARIABLES' )).'</option>';
+$html .= '<option value="process">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_TINY_PROCESS_VARIABLES' )).'</option>';
 $html .= '</select> &nbsp;&nbsp;&nbsp;&nbsp;';
 $html .= '</td>';
 
@@ -79,7 +87,7 @@ $html .= '<input type="text" id="search" size="15">';
 $html .= '</td>';
 $html .= '</tr>';
 $html .= '<tr>';
-$html .= '<tr><td><label for="prefix_label">'.G::LoadTranslation( 'ID_VARIABLES' ).'</label></td></tr>';
+$html .= '<tr><td><label for="prefix_label">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_VARIABLES' )).'</label></td></tr>';
 $html .= '<tr>';
 
 $html .= '<td colspan="3">';
@@ -114,19 +122,19 @@ $html .= '</div>';
 $html .= '<br>';
 $html .= '<table border="1" width="90%" align="center">';
 $html .= '<tr width="40%">';
-$html .= '<td>'.G::LoadTranslation('ID_RESULT').'</td>';
+$html .= '<td>'.$filter->xssFilterHard(G::LoadTranslation('ID_RESULT')).'</td>';
 $html .= '<td><span id="selectedVariableLabel">@@SYS_LANG</span></td>';
 $html .= '</tr>';
 $html .= '<tr width="60%">';
-$html .= '<td>'.G::LoadTranslation('ID_DESCRIPTION').'</td>';
-$html .= '<td><span id="desc_variables">'.G::LoadTranslation('ID_SYSTEM').'</span></td>';
+$html .= '<td>'.$filter->xssFilterHard(G::LoadTranslation('ID_DESCRIPTION')).'</td>';
+$html .= '<td><span id="desc_variables">'.$filter->xssFilterHard(G::LoadTranslation('ID_SYSTEM')).'</span></td>';
 $html .= '</tr>';
 $html .= '</table>';
 $html .= '</div>';
 $html .= '<br>';
 $html .= '<table width="90%" align="center">';
 $html .= '<tr><td>';
-$html .= '<label for="desc_prefix">*<span id="desc_prefix">' . G::LoadTranslation( 'ID_TO_STRING' ) . '</span></label>';
+$html .= '<label for="desc_prefix">*<span id="desc_prefix">'.$filter->xssFilterHard(G::LoadTranslation( 'ID_TO_STRING' )).'</span></label>';
 $html .= '</td></tr>';
 $html .= '</div>';
 
@@ -147,4 +155,4 @@ if (isset($_REQUEST['displayOption'])) {
 
 echo $html;
 
-G::RenderPage( 'publish', $display );
+G::RenderPage( 'publish', $display );

workflow/engine/methods/controls/varsAjaxByType.php

@@ -35,6 +35,10 @@
  */
 
 G::LoadClass( 'xmlfield_InputPM' );
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+
 $aFields = getDynaformsVars( $_POST['sProcess'], true, isset( $_POST['bIncMulSelFields'] ) ? $_POST['bIncMulSelFields'] : 0 );
 $aType = $_POST['type'];
 

workflow/engine/methods/dbConnections/dbConnectionsAjax.php

@@ -30,6 +30,11 @@
  * @Param  var action from POST request
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_SESSION = $filter->xssFilterHard($_SESSION);
+
 if (isset( $_POST['action'] ) || isset( $_POST['function'] )) {
     $action = (isset( $_POST['action'] )) ? $_POST['action'] : $_POST['function'];
 } else {

workflow/engine/methods/departments/departments_Ajax.php

@@ -23,6 +23,11 @@
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
+
 function LookForChildren ($parent, $level, $aDepUsers)
 {
     G::LoadClass( 'configuration' );
@@ -362,7 +367,7 @@ switch ($_POST['action']) {
         $dep_manager = $_POST['USR_UID'];
         $dep_uid = $_POST['DEP_UID'];
         $editDepartment['DEP_UID'] = $dep_uid;
-        $editDepartment['DEP_MANAGER'] = $dep_manager;
+        $editDepartment['DEP_MANAGER'] = (!isset($_POST['NO_DEP_MANAGER'])? $dep_manager : '');
         $oDept = new Department();
         $oDept->update( $editDepartment );
         $oDept->updateDepartmentManager( $dep_uid );

workflow/engine/methods/dynaforms/dynaforms_Editor.php

@@ -21,6 +21,12 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+ 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_GET = $filter->xssFilterHard($_GET);
+ 
 if (($RBAC_Response = $RBAC->userCanAccess( "PM_FACTORY" )) != 1) {
     return $RBAC_Response;
 }
@@ -38,6 +44,9 @@ $G_SUB_MENU = 'processes';
 $G_ID_MENU_SELECTED = 'PROCESSES';
 $G_ID_SUB_MENU_SELECTED = 'FIELDS';
 
+$_GET['PRO_UID'] = $filter->xssFilterHard($_GET['PRO_UID']);
+$_GET['DYN_UID'] = $filter->xssFilterHard($_GET['DYN_UID']);
+
 $PRO_UID = isset( $_GET['PRO_UID'] ) ? $_GET['PRO_UID'] : '0';
 $DYN_UID = (isset( $_GET['DYN_UID'] )) ? urldecode( $_GET['DYN_UID'] ) : '0';
 $_SESSION['PROCESS'] = $_GET['PRO_UID'];
@@ -50,6 +59,7 @@ if ($process->exists( $PRO_UID )) {
     $process->load( $PRO_UID );
 } else {
     //TODO
+    $PRO_UID = $filter->xssFilterHard($PRO_UID);
     print ("$PRO_UID doesn't exist, continue? yes") ;
 }
 

workflow/engine/methods/dynaforms/dynaforms_checkDependentFields.php

@@ -28,6 +28,10 @@
  * also the functionality of dependent fields in grids doesn't depends in this
  * file so this is somewhat expendable.
  */
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+
 function subDependencies ($k, &$G_FORM, &$aux, $grid = '')
 {
     $myDependentFields = '';

workflow/engine/methods/dynaforms/fieldsHandlerAjax.php

@@ -25,6 +25,9 @@
   * @Date Aug 26th, 2009
   */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
 $request = $_POST['request'];
 
 switch ($request) {
@@ -32,6 +35,7 @@ switch ($request) {
         if (isset( $_POST['items'] )) {
             $items = $_POST['items'];
             $tmpfilename = $_SESSION['Current_Dynafom']['Parameters']['FILE'];
+            $tmpfilename = $filter->xssFilterHard($tmpfilename);
             G::LoadSystem( 'dynaformhandler' );
 
             $o = new dynaFormHandler( PATH_DYNAFORM . "{$tmpfilename}.xml" );
@@ -53,6 +57,7 @@ switch ($request) {
         break;
     case 'saveHidden':
         $tmpfilename = $_SESSION['Current_Dynafom']['Parameters']['FILE'];
+        $tmpfilename = $filter->xssFilterHard($tmpfilename);
         G::LoadSystem( 'dynaformhandler' );
         $o = new dynaFormHandler( PATH_DYNAFORM . "{$tmpfilename}.xml" );
         $hidden_items = Array ();

workflow/engine/methods/dynaforms/test.php

@@ -51,8 +51,11 @@ for ($r = 1; $r < 10; $r ++) {
 	</select> <input type="submit" value="Send" />
 </form>
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
 $test = $_POST['form']['test'];
 if ($test) {
+    $test = $filter->xssFilterHard($test);
     foreach ($test as $t) {
         echo 'You selected ', $t, '<br />';
     }

workflow/engine/methods/install/r.php

@@ -1,3 +1,19 @@
+<?php 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+if(isset($_GET['srv'])) {
+    $_GET['srv'] = $filter->xssFilterHard($_GET['srv']);
+}
+if(isset($_GET['usr'])) {
+    $_GET['usr'] = $filter->xssFilterHard($_GET['usr']);
+}
+if(isset($_GET['pass'])) {
+    $_GET['pass'] = $filter->xssFilterHard($_GET['pass']);
+}
+if(isset($_GET['gen'])) {
+    $_GET['gen'] = $filter->xssFilterHard($_GET['gen']);
+}
+?>
 <form action="r">
 	Server: <input type="text" name="srv"
 		value="<?php echo isset($_GET['srv'])?$_GET['srv']:'';?>"> User: <input

workflow/engine/methods/outputdocs/outputdocs_Ajax.php

@@ -1,4 +1,7 @@
 <?php
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
 
 $action = isset( $_REQUEST['action'] ) ? $_REQUEST['action'] :'';
 
@@ -9,6 +12,7 @@ if ($action == '') {
 
 switch ($action) {
     case 'setTemplateFile':
+        $_FILES = $filter->xssFilterHard($_FILES);
         //print_r($_FILES);
         $_SESSION['outpudocs_tmpFile'] = PATH_DATA . $_FILES['templateFile']['name'];
         //    file_put_contents($_FILES['templateFile']['name'], file_get_contents($_FILES['templateFile']['tmp_name']));
@@ -21,6 +25,7 @@ switch ($action) {
         break;
 
     case 'getTemplateFile':
+        $_SESSION['outpudocs_tmpFile'] = $filter->xssFilterHard($_SESSION['outpudocs_tmpFile']);
         $aExtensions = array ("exe","com","dll","ocx","fon","ttf","doc","xls","mdb","rtf","bin","jpeg","jpg","jif","jfif","gif","tif","tiff","png","bmp","pdf","aac","mp3","mp3pro","vorbis","realaudio","vqf","wma","aiff","flac","wav","midi","mka","ogg","jpeg","ilbm","tar","zip","rar","arj","gzip","bzip2","afio","kgb","gz","asf","avi","mov","iff","ogg","ogm","mkv","3gp"
         );
         $sFileName = strtolower( $_SESSION['outpudocs_tmpFile'] );
@@ -28,11 +33,15 @@ switch ($action) {
         $searchPos = strpos( $strRev, '.' );
         $pos = (strlen( $sFileName ) - 1) - $searchPos;
         $sExtension = substr( $sFileName, $pos + 1, strlen( $sFileName ) );
-        if (! in_array( $sExtension, $aExtensions ))
-            echo $content = file_get_contents( $_SESSION['outpudocs_tmpFile'] );
+        if (! in_array( $sExtension, $aExtensions )) {
+            $content = file_get_contents( $_SESSION['outpudocs_tmpFile'] );
+            $content = $filter->xssFilterHard($content);
+            echo $content;
+        }
         break;
 
     case 'loadTemplateContent':
+        $_POST = $filter->xssFilterHard($_POST);
         require_once 'classes/model/OutputDocument.php';
         $ooutputDocument = new OutputDocument();
         if (isset( $_POST['OUT_DOC_UID'] )) {
@@ -43,6 +52,7 @@ switch ($action) {
         break;
 
     case 'lookForNameOutput':
+        $_POST = $filter->xssFilterHard($_POST);
         require_once ('classes/model/Content.php');
         require_once ("classes/model/OutputDocument.php");
 

workflow/engine/methods/processes/processes_Ajax.php

@@ -38,6 +38,13 @@ try {
       break;
       } */
     //$oJSON = new Services_JSON();
+    
+    G::LoadSystem('inputfilter');
+    $filter = new InputFilter();
+    $_GET = $filter->xssFilterHard($_GET);
+    $_POST = $filter->xssFilterHard($_POST);
+    $_REQUEST = $filter->xssFilterHard($_REQUEST);
+    //$_SESSION = $filter->xssFilterHard($_SESSION); 
 
     if (isset($_REQUEST['data'])) {
         if($_REQUEST['action']=="addText"||$_REQUEST['action']=="updateText") {
@@ -52,22 +59,22 @@ try {
         //$oData = $oJSON->decode( stripslashes( $_REQUEST['data'] ) );
         $sOutput = '';
         $sTask = '';
-        
+
         if(array_key_exists('pro_uid', $oDataAux) || array_key_exists('uid', $oDataAux) || array_key_exists('PRO_UID', $oDataAux) || array_key_exists('UID', $oDataAux)) {
             if(array_key_exists('pro_uid', $oDataAux) || array_key_exists('PRO_UID', $oDataAux)) {
                 if(array_key_exists('pro_uid', $oDataAux)) {
                     $proUid = $oDataAux['pro_uid'];
                 } else {
-                    $proUid = $oDataAux['PRO_UID'];    
+                    $proUid = $oDataAux['PRO_UID'];
                 }
             } else {
                 $proUid = $oDataAux['uid'];
                 $uidAux = $proUid;
             }
-            
+
             G::LoadClass('processes');
             $infoProcess = new Processes();
-            
+
             if(!$infoProcess->processExists($proUid)) {
                 $oSL = new SwimlanesElements();
                 if($oSL->swimlanesElementsExists($proUid)) {
@@ -83,11 +90,11 @@ try {
                     $rs->next();
                     $row = $rs->getRow();
                     $proUid = $row['PRO_UID'];
-                } 
+                }
             }
-            $resultProcess = $infoProcess->getProcessRow($proUid); 
+            $resultProcess = $infoProcess->getProcessRow($proUid);
         } else {
-            if(array_key_exists('PU_UID', $oDataAux)) {    
+            if(array_key_exists('PU_UID', $oDataAux)) {
                 $c = new Criteria('workflow');
                 $c->clearSelectColumns();
                 $c->addSelectColumn(ProcessUserPeer::PRO_UID);
@@ -98,14 +105,14 @@ try {
                 $oDataset->next();
                 $row = $oDataset->getRow();
                 $userSupervisor = $row['USR_UID'];
-                
+
                 G::LoadClass('processes');
                 $infoProcess = new Processes();
-                $resultProcess = $infoProcess->getProcessRow($row['PRO_UID']); 
+                $resultProcess = $infoProcess->getProcessRow($row['PRO_UID']);
             }
         }
     }
-    
+
     if(isset($_REQUEST['pro_uid']) && !empty($_REQUEST['pro_uid']) || isset($_REQUEST['PRO_UID']) && !empty($_REQUEST['PRO_UID'])) {
         if(isset($_REQUEST['pro_uid']) && !empty($_REQUEST['pro_uid'])) {
             $proUid = $_REQUEST['pro_uid'];
@@ -114,21 +121,27 @@ try {
         }
         G::LoadClass('processes');
         $infoProcess = new Processes();
-        $resultProcess = $infoProcess->getProcessRow($proUid);     
+        $resultProcess = $infoProcess->getProcessRow($proUid);
     }
 
     if(isset($proUid) && $proUid != "") {
-        $valuesProcess['PRO_UID'] = $proUid;
-        $valuesProcess['PRO_UPDATE_DATE'] = date("Y-m-d H:i:s");
-        G::LoadClass('processes');
+        G::LoadClass("processes");
+
         $infoProcess = new Processes();
-        $resultProcess = $infoProcess->updateProcessRow($valuesProcess);
-        $resultProcess = $infoProcess->getProcessRow($proUid);  
+
+        if (!in_array($_REQUEST["action"], array("load"))) {
+            $infoProcess->updateProcessRow(array(
+                "PRO_UID"         => $proUid,
+                "PRO_UPDATE_DATE" => date("Y-m-d H:i:s")
+            ));
+        }
+
+        $resultProcess = $infoProcess->getProcessRow($proUid);
     }
-    
+
     //G::LoadClass( 'processMap' );
     $oProcessMap = new processMap(new DBConnection());
-    
+
     switch ($_REQUEST['action']) {
         case 'load':
             $_SESSION['PROCESS'] = $oData->uid;
@@ -345,7 +358,7 @@ try {
             } else {
                 switch ($oData->type) {
                     case 0:
-                        $oData->type = 'SEQUENTIAL';                        
+                        $oData->type = 'SEQUENTIAL';
                         break;
                     case 1:
                         $oData->type = 'SELECT';
@@ -363,7 +376,7 @@ try {
                         $oData->type = 'SEC-JOIN';
                         break;
                     case 8:
-                        $oData->type = 'DISCRIMINATOR';                        
+                        $oData->type = 'DISCRIMINATOR';
                         break;
                 }
                 $oProcessMap->newPattern($oData->pro_uid, $oData->tas_uid, $oData->next_task, $oData->type);
@@ -384,7 +397,7 @@ try {
                         $taskNextInfo=$oTaskNextNewPattern->load($oData->next_task);
                         $titleNextTask=$taskNextInfo['TAS_TITLE'];
                     } else {
-                        $titleNextTask=G::LoadTranslation("ID_END_OF_PROCESS");
+                        $titleNextTask=G::LoadTranslation("ID_END_OF_PROCESS");
                     }
                     if ($titleNextTask=='') {
                         G::auditLog("DerivationRule",'PROCESS NAME : '.$titleProcess.' : '.$oData->pro_uid.' Routing rule : END OF PROCESS Task Name -> '.$titleTask.' : '.$oData->tas_uid);
@@ -735,6 +748,8 @@ try {
             // G::RenderPage( 'publish', 'blank' );
             break;
         case 'saveFile':
+            $_REQUEST['pro_uid'] = $filter->xssFilterHard($_REQUEST['pro_uid']);
+            $_REQUEST['filename'] = $filter->xssFilterHard($_REQUEST['filename']);
             global $G_PUBLISH;
             $G_PUBLISH = new Publisher();
             global $RBAC;
@@ -748,6 +763,7 @@ try {
 
                 $sDir = "";
                 if (isset($_REQUEST['MAIN_DIRECTORY'])) {
+                    $_REQUEST['MAIN_DIRECTORY'] = $filter->xssFilterHard($_REQUEST['MAIN_DIRECTORY']);
                     $sDir = $_REQUEST['MAIN_DIRECTORY'];
                 }
                 switch ($sDir) {
@@ -769,6 +785,7 @@ try {
                 $content = base64_decode($content);
                 fwrite($fp, $content);
                 fclose($fp);
+                $sDirectory = $filter->xssFilterHard($sDirectory);
                 echo 'saved: ' . $sDirectory;
             }
             break;
@@ -824,8 +841,10 @@ try {
             *
             */
         case 'getVariablePrefix':
+            $_REQUEST['prefix'] = $filter->xssFilterHard($_REQUEST['prefix']);
             $_REQUEST['prefix'] = $_REQUEST['prefix'] != null ? $_REQUEST['prefix'] : 'ID_TO_STRING';
-            echo G::LoadTranslation($_REQUEST['prefix']);
+            $prefix = $filter->xssFilterHard(G::LoadTranslation($_REQUEST['prefix']));
+            echo G::LoadTranslation($prefix);
             break;
             /**
             * return an array with all Variables of Grid type

workflow/engine/methods/processes/processes_Import_Bpmn.php

@@ -1,12 +1,17 @@
 <?php
 
 ini_set("max_execution_time", 0);
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_FILES = $filter->xssFilterHard($_FILES);
+$_SESSION['USER_LOGGED'] = $filter->xssFilterHard($_SESSION['USER_LOGGED']);
 
 if (isset($_FILES["PROCESS_FILENAME"]) &&
         pathinfo($_FILES["PROCESS_FILENAME"]["name"], PATHINFO_EXTENSION) == "bpmn"
 ) {
     try {
         $createMode = $_REQUEST["createMode"];
+        $createMode = $filter->xssFilterHard($createMode);
         $name = pathinfo($_FILES["PROCESS_FILENAME"]["name"], PATHINFO_FILENAME);
         $data = array(
             "type" => "bpmnProject",

workflow/engine/methods/processes/processes_checkProperties.php

@@ -45,7 +45,10 @@ if ($access != 1) {
     }
 }
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
 $form = $_POST['form'];
+$form = $filter->xssFilterHard($form);
 
 //$tasUid = $form['TASKS'];
 $tasUid = $form['TAS_PARENT'];

workflow/engine/methods/roles/data_rolesList.php

@@ -24,6 +24,9 @@
 
 require_once (PATH_RBAC . "model/RolesPeer.php");
 G::LoadClass( 'ArrayPeer' );
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
 
 isset( $_POST['textFilter'] ) ? $filter = $_POST['textFilter'] : $filter = '';
 

workflow/engine/methods/roles/data_rolesPermissions.php

@@ -22,6 +22,10 @@
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_GET = $filter->xssFilterHard($_GET);
+$_REQUEST = $filter->xssFilterHard($_REQUEST);
 $ROL_UID = $_GET['rUID'];
 $TYPE_DATA = $_GET["type"];
 

workflow/engine/methods/services/ActionsByEmail.php

@@ -0,0 +1,121 @@
+<?php
+/*----------------------------------********---------------------------------*/
+if (PMLicensedFeatures
+        ::getSingleton()
+        ->verifyfeature('zLhSk5TeEQrNFI2RXFEVktyUGpnczV1WEJNWVp6cjYxbTU3R29mVXVZNWhZQT0=')) {
+    // since all the request parameters using this script are encrypted 
+    // using the URL_KEY the probability of injecting any kind of code using
+    // this entry point are only possible knowing the aforementioned key.
+    switch (G::decrypt(urldecode(utf8_encode($_REQUEST['ACTION'])), URL_KEY)) {
+        case 'processABE' :
+            $G_PUBLISH = new Publisher();
+            try {
+                // Validations
+                if (!isset($_REQUEST['APP_UID'])) {
+                    $_REQUEST['APP_UID'] = '';
+                }
+
+                if (!isset($_REQUEST['DEL_INDEX'])) {
+                    $_REQUEST['DEL_INDEX'] = '';
+                }
+
+                if ($_REQUEST['APP_UID'] == '') {
+                    throw new Exception('The parameter APP_UID is empty.');
+                }
+
+                if ($_REQUEST['DEL_INDEX'] == '') {
+                    throw new Exception('The parameter DEL_INDEX is empty.');
+                }
+
+                $_REQUEST['APP_UID'] = G::decrypt(urldecode(utf8_encode($_REQUEST['APP_UID'])), URL_KEY);
+                $_REQUEST['DEL_INDEX'] = G::decrypt(urldecode(utf8_encode($_REQUEST['DEL_INDEX'])), URL_KEY);
+                $_REQUEST['FIELD'] = G::decrypt(urldecode(utf8_encode($_REQUEST['FIELD'])), URL_KEY);
+                $_REQUEST['VALUE'] = G::decrypt(urldecode(utf8_encode($_REQUEST['VALUE'])), URL_KEY);
+                $_REQUEST['ABER'] = G::decrypt(urldecode(utf8_encode($_REQUEST['ABER'])), URL_KEY);
+
+                G::LoadClass('case');
+
+                $cases = new Cases();
+                $caseFieldsABE = $cases->loadCase($_REQUEST['APP_UID'], $_REQUEST['DEL_INDEX']);
+
+                if (is_null($caseFieldsABE['DEL_FINISH_DATE'])) {
+                    $dataField = array();
+                    $dataField[$_REQUEST['FIELD']] = $_REQUEST['VALUE'];
+                    $caseFieldsABE ['APP_DATA'] = array_merge($caseFieldsABE ['APP_DATA'], $dataField);
+
+                    $dataResponses = array();
+                    $dataResponses['ABE_REQ_UID'] = $_REQUEST['ABER'];
+                    $dataResponses['ABE_RES_CLIENT_IP'] = $_SERVER['REMOTE_ADDR'];
+                    $dataResponses['ABE_RES_DATA'] = serialize($_REQUEST['VALUE']);
+                    $dataResponses['ABE_RES_STATUS'] = 'PENDING';
+                    $dataResponses['ABE_RES_MESSAGE'] = '';
+
+                    try {
+                        require_once 'classes/model/AbeResponses.php';
+                        $abeAbeResponsesInstance = new AbeResponses();
+                        $dataResponses['ABE_RES_UID'] = $abeAbeResponsesInstance->createOrUpdate($dataResponses);
+                    } catch (Exception $error) {
+                        throw $error;
+                    }
+
+                    $cases->updateCase($_REQUEST['APP_UID'], $caseFieldsABE);
+
+                    G::LoadClass('wsBase');
+
+                    $ws = new wsBase();
+
+                    $result = $ws->derivateCase($caseFieldsABE['CURRENT_USER_UID'], $_REQUEST['APP_UID'], $_REQUEST['DEL_INDEX'], true);
+                    $code = (is_array($result) ? $result['status_code'] : $result->status_code);
+
+                    if ($code != 0) {
+                        throw new Exception('An error occurred while the application was being processed.<br /><br />
+                                 Error code: ' . $result->status_code . '<br />
+                                 Error message: ' . $result->message . '<br /><br />');
+                    }
+
+                    // Update
+                    $dataResponses['ABE_RES_STATUS'] = ($code == 0 ? 'SENT' : 'ERROR');
+                    $dataResponses['ABE_RES_MESSAGE'] = ($code == 0 ? '-' : $result->message);
+
+                    try {
+                        $abeAbeResponsesInstance = new AbeResponses();
+                        $abeAbeResponsesInstance->createOrUpdate($dataResponses);
+                    } catch (Exception $error) {
+                        throw $error;
+                    }
+
+                    $message = '<strong>The answer has been submited. Thank you</strong>';
+
+                    //Save Cases Notes
+                    G::LoadClass('actionsByEmailUtils');
+
+                    $dataAbeRequests = loadAbeRequest($_REQUEST['ABER']);
+                    $dataAbeConfiguration = loadAbeConfiguration($dataAbeRequests['ABE_UID']);
+
+                    if ($dataAbeConfiguration['ABE_CASE_NOTE_IN_RESPONSE'] == 1) {
+                        $response = new stdclass();
+                        $response->usrUid = $caseFieldsABE['APP_DATA']['USER_LOGGED'];
+                        $response->appUid = $_REQUEST['APP_UID'];
+                        $response->noteText = "Check the information that was sent for the receiver: " . $dataAbeRequests['ABE_REQ_SENT_TO'];
+
+                        postNote($response);
+                    }
+
+                    $dataAbeRequests['ABE_REQ_ANSWERED'] = 1;
+                    $code == 0 ? uploadAbeRequest($dataAbeRequests) : '';
+                } else {
+                    $message = '<strong>The response has already been sent.</strong>';
+                }
+
+                $G_PUBLISH->AddContent('xmlform', 'xmlform', 'login/showInfo', '', array('MESSAGE' => $message));
+            } catch (Exception $error) {
+                $G_PUBLISH->AddContent('xmlform', 'xmlform', 'login/showMessage', '', array('MESSAGE' => $error->getMessage() . 'Please contact to your system administrator.'));
+            }
+
+            G::RenderPage('publish', 'blank');
+
+
+            break;
+    }
+}
+/*----------------------------------********---------------------------------*/

workflow/engine/methods/services/Rest/CURLMessage.php

@@ -122,7 +122,10 @@ abstract class CURLMessage
      */
     public function displayResponse ()
     {
+        G::LoadSystem('inputfilter');
+        $filter = new InputFilter();
         $error = curl_error( $this->ch );
+        $error = $filter->xssFilterHard($error);
         $result = array ('header' => '','body' => '','curl_error' => '','http_code' => '','last_url' => ''
         );
         if ($error != "") {
@@ -130,12 +133,15 @@ abstract class CURLMessage
             return $result;
         }
         $response = $this->output;
+        $response = $filter->xssFilterHard($response);
         $header_size = curl_getinfo( $this->ch, CURLINFO_HEADER_SIZE );
         $result['header'] = substr( $response, 0, $header_size );
         $result['body'] = substr( $response, $header_size );
         $result['http_code'] = curl_getinfo( $this->ch, CURLINFO_HTTP_CODE );
         $result['last_url'] = curl_getinfo( $this->ch, CURLINFO_EFFECTIVE_URL );
+        $result = $filter->xssFilterHard($result);
 
+        $this->type = $filter->xssFilterHard($this->type);
         echo $this->type . " Response: " . $response . "<BR>";
         foreach ($result as $index => $data) {
             if ($data != "") {

workflow/engine/methods/services/demoSoap.php

@@ -61,12 +61,17 @@ a.krumo-name {
 </style>
 <?php
 
+G::LoadSystem('inputfilter');
+$filter = new InputFilter();
+$_POST = $filter->xssFilterHard($_POST);
+$_SESSION = $filter->xssFilterHard($_SESSION);
 if (isset( $_POST["epr"] )) {
     $_SESSION['END_POINT'] = $_POST["epr"];
 }
 $endpoint = isset( $_SESSION['END_POINT'] ) ? $_SESSION['END_POINT'] : 'http://sugar.opensource.colosa.net/soap.php';
-
+$endpoint = $filter->xssFilterHard($endpoint);
 $sessionId = isset( $_SESSION['SESSION_ID'] ) ? $_SESSION['SESSION_ID'] : '';
+$sessionId = $filter->xssFilterHard($sessionId);
 ?>
 <form method="post" action="">