464 lines
20 KiB
PHP
464 lines
20 KiB
PHP
<?php
|
||
|
||
use ProcessMaker\Model\Process as ProcessModel;
|
||
use ProcessMaker\Validation\ValidationUploadedFiles;
|
||
use ProcessMaker\Core\System;
|
||
use Illuminate\Support\Facades\Log;
|
||
|
||
//validate the data post
|
||
if (!isset($_SESSION['USER_LOGGED'])) {
|
||
if(!strpos($_SERVER['REQUEST_URI'], 'gmail')) {
|
||
$responseObject = new stdclass();
|
||
$responseObject->error = G::LoadTranslation('ID_LOGIN_AGAIN');
|
||
$responseObject->success = true;
|
||
$responseObject->lostSession = true;
|
||
print G::json_encode( $responseObject );
|
||
die();
|
||
} else {
|
||
G::SendTemporalMessage('ID_LOGIN_AGAIN', 'warning', 'labels');
|
||
die('<script type="text/javascript">
|
||
try
|
||
{
|
||
var olink = document.location.href;
|
||
if(olink.search("gmail") != -1){
|
||
var data = olink.split("?");
|
||
var odata = data[1].split("&");
|
||
var appUid = odata[1].split("=");
|
||
var proUid = odata[0].split("=");
|
||
|
||
var dataToSend = {
|
||
"action": "credentials",
|
||
"operation": "refreshPmSession",
|
||
"type": "processCall",
|
||
"funParams": [
|
||
appUid[1],
|
||
proUid[1]
|
||
],
|
||
"expectReturn": false
|
||
};
|
||
var x = parent.postMessage(JSON.stringify(dataToSend), "*");
|
||
if (x == undefined){
|
||
x = parent.parent.postMessage(JSON.stringify(dataToSend), "*");
|
||
}
|
||
}else{
|
||
prnt = parent.parent;
|
||
top.location = top.location;
|
||
}
|
||
}
|
||
catch (err)
|
||
{
|
||
parent.location = parent.location;
|
||
}
|
||
</script>');
|
||
}
|
||
}
|
||
|
||
/**
|
||
* To do: The following evaluation must be moved after saving the data (so as not to lose the data entered in the form).
|
||
* It only remains because it is an old behavior, which must be defined by "Product Owner".
|
||
* @see workflow/engine/methods/services/ActionsByEmailDataFormPost.php
|
||
*/
|
||
$validator = ValidationUploadedFiles::getValidationUploadedFiles()->runRulesForFileEmpty();
|
||
if ($validator->fails()) {
|
||
G::SendMessageText($validator->getMessage(), "ERROR");
|
||
$url = explode("sys" . config("system.workspace"), $_SERVER['HTTP_REFERER']);
|
||
G::header("location: " . "/sys" . config("system.workspace") . $url[1]);
|
||
die();
|
||
}
|
||
|
||
try {
|
||
if ($_GET['APP_UID'] !== $_SESSION['APPLICATION']) {
|
||
$urlReferer = empty($_SERVER['HTTP_REFERER']) ? '../cases/casesListExtJsRedirector' : $_SERVER['HTTP_REFERER'];
|
||
throw new Exception(G::LoadTranslation('ID_INVALID_APPLICATION_ID_MSG', ['<a href=\'' . $urlReferer . '\'>{1}</a>', G::LoadTranslation('ID_REOPEN')]));
|
||
}
|
||
|
||
$arrayVariableDocumentToDelete = [];
|
||
|
||
//If no variables are submitted and the $_POST variable is empty
|
||
if (!isset($_POST['form'])) {
|
||
$_POST['form'] = array();
|
||
}
|
||
|
||
if (array_key_exists('__VARIABLE_DOCUMENT_DELETE__', $_POST['form'])) {
|
||
if (is_array($_POST['form']['__VARIABLE_DOCUMENT_DELETE__']) && !empty($_POST['form']['__VARIABLE_DOCUMENT_DELETE__'])) {
|
||
$arrayVariableDocumentToDelete = $_POST['form']['__VARIABLE_DOCUMENT_DELETE__'];
|
||
}
|
||
|
||
unset($_POST['form']['__VARIABLE_DOCUMENT_DELETE__']);
|
||
}
|
||
|
||
/*
|
||
* PMDynaform
|
||
* DYN_VERSION is 1: classic Dynaform,
|
||
* DYN_VERSION is 2: responsive form, Pmdynaform.
|
||
*/
|
||
$dynaForm = DynaformPeer::retrieveByPK($_GET["UID"]);
|
||
|
||
$swpmdynaform = !is_null($dynaForm) && $dynaForm->getDynVersion() == 2;
|
||
|
||
if ($swpmdynaform) {
|
||
$pmdynaform = $_POST["form"];
|
||
}
|
||
|
||
$oForm = new Form( $_SESSION["PROCESS"] . "/" . $_GET["UID"], PATH_DYNAFORM );
|
||
$oForm->validatePost();
|
||
|
||
//Load the variables
|
||
$oCase = new Cases();
|
||
$oCase->thisIsTheCurrentUser( $_SESSION["APPLICATION"], $_SESSION["INDEX"], $_SESSION["USER_LOGGED"], "REDIRECT", "casesListExtJs" );
|
||
$Fields = $oCase->loadCase( $_SESSION["APPLICATION"] );
|
||
|
||
if (!ProcessModel::isActive($Fields['PRO_UID'], 'PRO_UID')) {
|
||
$G_PUBLISH = new Publisher();
|
||
$G_PUBLISH->AddContent('xmlform', 'xmlform', 'login/showMessage', '', [
|
||
'MESSAGE' => G::LoadTranslation('ID_CASE_NOT_ALLOW_TO_BE_CREATED_DUE_TO_THE_PROCESS_IS_INACTIVE')
|
||
]);
|
||
G::RenderPage('publish', 'blank');
|
||
exit();
|
||
}
|
||
|
||
// Capture the original case data (before any modifications)
|
||
$originalCaseData = $Fields['APP_DATA']; // this is the data that came from the DB
|
||
|
||
if ($swpmdynaform) {
|
||
$dataFields = $Fields["APP_DATA"];
|
||
$dataFields["CURRENT_DYNAFORM"] = $_GET['UID'];
|
||
|
||
$oPmDynaform = new PmDynaform($dataFields);
|
||
$pmdynaform = $oPmDynaform->validatePost($pmdynaform);
|
||
|
||
// get the keys of the fields defined on the form
|
||
$keysDefinedOnForm = array_keys($pmdynaform);
|
||
|
||
$Fields["APP_DATA"] = array_merge( $Fields["APP_DATA"], $pmdynaform );
|
||
}
|
||
|
||
$Fields["APP_DATA"] = array_merge( $Fields["APP_DATA"], G::getSystemConstants() );
|
||
$Fields["APP_DATA"] = array_merge( $Fields["APP_DATA"], $_POST["form"] );
|
||
|
||
#here we must verify if is a debug session
|
||
$trigger_debug_session = isset($_SESSION['TRIGGER_DEBUG']['ISSET']) ? $_SESSION['TRIGGER_DEBUG']['ISSET'] : null; #here we must verify if is a debugg session
|
||
|
||
#trigger debug routines...
|
||
|
||
//cleaning debug variables
|
||
$_SESSION['TRIGGER_DEBUG']['ERRORS'] = Array ();
|
||
$_SESSION['TRIGGER_DEBUG']['DATA'] = Array ();
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_NAMES'] = Array ();
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_VALUES'] = Array ();
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_EXECUTION_TIME'] = [];
|
||
|
||
$triggers = $oCase->loadTriggers( $_SESSION['TASK'], 'DYNAFORM', $_GET['UID'], 'AFTER' );
|
||
|
||
$_SESSION['TRIGGER_DEBUG']['NUM_TRIGGERS'] = count( $triggers );
|
||
$_SESSION['TRIGGER_DEBUG']['TIME'] = G::toUpper(G::loadTranslation('ID_AFTER'));
|
||
if ($_SESSION['TRIGGER_DEBUG']['NUM_TRIGGERS'] != 0) {
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_NAMES'] = array_column($triggers, 'TRI_TITLE');
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_VALUES'] = $triggers;
|
||
$oProcess = new Process();
|
||
$oProcessFieds = $oProcess->Load( $_SESSION['PROCESS'] );
|
||
|
||
//trigger debug routines...
|
||
if (isset( $oProcessFieds['PRO_DEBUG'] ) && $oProcessFieds['PRO_DEBUG']) {
|
||
$trigger_debug_session = true;
|
||
}
|
||
}
|
||
|
||
if ($_SESSION['TRIGGER_DEBUG']['NUM_TRIGGERS'] != 0) {
|
||
//Execute after triggers - Start
|
||
$Fields['APP_DATA'] = $oCase->ExecuteTriggers( $_SESSION['TASK'], 'DYNAFORM', $_GET['UID'], 'AFTER', $Fields['APP_DATA'] );
|
||
//Execute after triggers - End
|
||
|
||
$_SESSION['TRIGGER_DEBUG']['TRIGGERS_EXECUTION_TIME'] = $oCase->arrayTriggerExecutionTime;
|
||
}
|
||
|
||
//save data in PM Tables if necessary
|
||
$newValues = array ();
|
||
foreach ($_POST['form'] as $sField => $sAux) {
|
||
if (isset( $oForm->fields[$sField]->pmconnection ) && isset( $oForm->fields[$sField]->pmfield )) {
|
||
if (($oForm->fields[$sField]->pmconnection != '') && ($oForm->fields[$sField]->pmfield != '')) {
|
||
if (isset( $oForm->fields[$oForm->fields[$sField]->pmconnection] )) {
|
||
require_once PATH_CORE . 'classes' . PATH_SEP . 'model' . PATH_SEP . 'AdditionalTables.php';
|
||
$oAdditionalTables = new AdditionalTables();
|
||
try {
|
||
$aData = $oAdditionalTables->load( $oForm->fields[$oForm->fields[$sField]->pmconnection]->pmtable, true );
|
||
} catch (Exception $oError) {
|
||
$aData = array ('FIELDS' => array ()
|
||
);
|
||
}
|
||
$aKeys = array ();
|
||
$aAux = explode( '|', $oForm->fields[$oForm->fields[$sField]->pmconnection]->keys );
|
||
$i = 0;
|
||
$aValues = array ();
|
||
if ($aData == "" || count($aData['FIELDS']) < 1) {
|
||
$message = G::LoadTranslation( 'ID_PMTABLE_NOT_FOUNDED_SAVED_DATA' );
|
||
G::SendMessageText( $message, "WARNING" );
|
||
$aRow = false;
|
||
} else {
|
||
foreach ($aData['FIELDS'] as $aField) {
|
||
if ($aField['FLD_KEY'] == '1') {
|
||
$aKeys[$aField['FLD_NAME']] = (isset( $aAux[$i] ) ? G::replaceDataField( $aAux[$i], $Fields['APP_DATA'] ) : '');
|
||
$i ++;
|
||
}
|
||
if ($aField['FLD_NAME'] == $oForm->fields[$sField]->pmfield) {
|
||
$aValues[$aField['FLD_NAME']] = $Fields['APP_DATA'][$sField];
|
||
} else {
|
||
$aValues[$aField['FLD_NAME']] = '';
|
||
}
|
||
}
|
||
try {
|
||
$aRow = $oAdditionalTables->getDataTable( $oForm->fields[$oForm->fields[$sField]->pmconnection]->pmtable, $aKeys );
|
||
} catch (Exception $oError) {
|
||
$aRow = false;
|
||
}
|
||
}
|
||
|
||
if ($aRow) {
|
||
foreach ($aValues as $sKey => $sValue) {
|
||
if ($sKey != $oForm->fields[$sField]->pmfield) {
|
||
$aValues[$sKey] = $aRow[$sKey];
|
||
}
|
||
}
|
||
try {
|
||
$oAdditionalTables->updateDataInTable( $oForm->fields[$oForm->fields[$sField]->pmconnection]->pmtable, $aValues );
|
||
} catch (Exception $oError) {
|
||
//Nothing
|
||
}
|
||
} else {
|
||
try {
|
||
// assembling the field list in order to save the data ina new record of a pm table
|
||
if (empty( $newValues )) {
|
||
$newValues = $aValues;
|
||
} else {
|
||
foreach ($aValues as $aValueKey => $aValueCont) {
|
||
if (trim( $newValues[$aValueKey] ) == '') {
|
||
$newValues[$aValueKey] = $aValueCont;
|
||
}
|
||
}
|
||
}
|
||
//$oAdditionalTables->saveDataInTable ( $oForm->fields [$oForm->fields [$sField]->pmconnection]->pmtable, $aValues );
|
||
} catch (Exception $oError) {
|
||
//Nothing
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
//save data
|
||
$aData = array ();
|
||
$aData['APP_NUMBER'] = $Fields['APP_NUMBER'];
|
||
//$aData['APP_PROC_STATUS'] = $Fields['APP_PROC_STATUS'];
|
||
$aData['APP_DATA'] = $Fields['APP_DATA'];
|
||
$aData['DEL_INDEX'] = $_SESSION['INDEX'];
|
||
$aData['TAS_UID'] = $_SESSION['TASK'];
|
||
$aData['CURRENT_DYNAFORM'] = $_GET['UID'];
|
||
$aData['USER_UID'] = $_SESSION['USER_LOGGED'];
|
||
//$aData['APP_STATUS'] = $Fields['APP_STATUS'];
|
||
$aData['PRO_UID'] = $_SESSION['PROCESS'];
|
||
|
||
if ($swpmdynaform) {
|
||
$aData['APP_DATA'] = array_merge($pmdynaform,$aData['APP_DATA']);
|
||
$_POST["DynaformRequiredFields"] = '[]';
|
||
}
|
||
|
||
$oCase->updateCase( $_SESSION['APPLICATION'], $aData );
|
||
|
||
// saving the data ina pm table in case that is a new record
|
||
if (! empty( $newValues )) {
|
||
|
||
$id = key( $newValues );
|
||
$newValues[$id] = $aData['APP_DATA'][$id];
|
||
foreach ($aKeys as $key => $value) {
|
||
if (!isset($newValues[$key]) || $newValues[$key] == '') {
|
||
$G_PUBLISH = new Publisher();
|
||
$aMessage = array ();
|
||
$aMessage['MESSAGE'] = G::LoadTranslation('ID_FILL_PRIMARY_KEYS') . ' ('. $key . ') ';
|
||
$G_PUBLISH->AddContent( 'xmlform', 'xmlform', 'login/showMessage', '', $aMessage );
|
||
G::RenderPage( 'publish', 'blank' );
|
||
die();
|
||
}
|
||
}
|
||
$idPmtable = isset($oForm->fields[$id]->pmconnection->pmtable) && $oForm->fields[$id]->pmconnection->pmtable != '' ? $oForm->fields[$id]->pmconnection->pmtable : $oForm->fields[$id]->owner->tree->children[0]->attributes['pmtable'];
|
||
|
||
if (!($oAdditionalTables->updateDataInTable($idPmtable, $newValues ))) {
|
||
//<--This is to know if it is a new registry on the PM Table
|
||
$oAdditionalTables->saveDataInTable($idPmtable, $newValues );
|
||
}
|
||
}
|
||
|
||
// Prepare data to send to external system
|
||
|
||
// Get the form data with values from the case
|
||
$first = $originalCaseData; // original case data is the first array
|
||
$second = $Fields['APP_DATA']; // array of fields with all modifications (form + triggers)
|
||
|
||
// get keys
|
||
$keysFirst = array_keys($first);
|
||
|
||
// compute keys
|
||
$bothKeys = array_values(array_intersect($keysFirst, $keysDefinedOnForm));
|
||
$firstOnly = array_values(array_diff($keysFirst, $keysDefinedOnForm));
|
||
$secondOnly = array_values(array_diff($keysDefinedOnForm, $keysFirst));
|
||
|
||
// compute items
|
||
$bothItems = array_intersect_key($first, array_flip($bothKeys));
|
||
$secondItems = array_intersect_key($second, array_flip($secondOnly));
|
||
|
||
// build "both" with both values (first and second)
|
||
$formWithValues = [];
|
||
foreach ($bothKeys as $k) {
|
||
$formWithValues[$k] = [
|
||
'old' => $first[$k],
|
||
'new' => $second[$k],
|
||
];
|
||
}
|
||
foreach ($secondOnly as $k) {
|
||
$formWithValues[$k] = [
|
||
'old' => null,
|
||
'new' => $second[$k],
|
||
];
|
||
}
|
||
// now $formWithValues has the new and old values of the fields defined in the form);
|
||
|
||
// Build the payload
|
||
$payload = [
|
||
'app_uid' => $_SESSION['APPLICATION'], // APP_UID
|
||
'dyn_uid' => $_GET['UID'], // DYN_UID (form UID)
|
||
'process_uid' => $_SESSION['PROCESS'], // PRO_UID
|
||
'case_number' => $Fields['APP_NUMBER'], // optional
|
||
'fields' => $formWithValues, // only fields defined in the form, with old and new values
|
||
'modified_case' => $Fields['APP_DATA'], // after all field‑mapping logic
|
||
'user_uid' => $_SESSION['USER_LOGGED'], // USER_UID
|
||
'task_uid' => $_SESSION['TASK'], // TAS_UID
|
||
];
|
||
|
||
send_case_data_to_external($payload);
|
||
|
||
//Save files
|
||
if (isset( $_FILES["form"]["name"] ) && count( $_FILES["form"]["name"] ) > 0) {
|
||
$oInputDocument = new \ProcessMaker\BusinessModel\Cases\InputDocument();
|
||
$oInputDocument->uploadFileCase($_FILES, $oCase, $aData, $_SESSION["USER_LOGGED"], $_SESSION["APPLICATION"], $_SESSION["INDEX"]);
|
||
}
|
||
|
||
//Delete MultipleFile
|
||
if (!empty($arrayVariableDocumentToDelete)) {
|
||
$case = new \ProcessMaker\BusinessModel\Cases();
|
||
|
||
$case->deleteMultipleFile($_SESSION['APPLICATION'], $arrayVariableDocumentToDelete);
|
||
}
|
||
|
||
//Go to the next step
|
||
$aNextStep = $oCase->getNextStep( $_SESSION['PROCESS'], $_SESSION['APPLICATION'], $_SESSION['INDEX'], $_SESSION['STEP_POSITION'] );
|
||
if (isset( $_GET['_REFRESH_'] )) {
|
||
G::header( 'location: ' . $_SERVER['HTTP_REFERER'] );
|
||
die();
|
||
}
|
||
|
||
$_SESSION['STEP_POSITION'] = $aNextStep['POSITION'];
|
||
$_SESSION['BREAKSTEP']['NEXT_STEP'] = $aNextStep['PAGE'];
|
||
$debuggerAvailable = true;
|
||
|
||
if (isset( $_SESSION['current_ux'] ) && $_SESSION['current_ux'] == 'SIMPLIFIED') {
|
||
$debuggerAvailable = false;
|
||
}
|
||
|
||
if ($trigger_debug_session && $debuggerAvailable) {
|
||
$_SESSION['TRIGGER_DEBUG']['BREAKPAGE'] = $aNextStep['PAGE'];
|
||
$aNextStep['PAGE'] = $aNextStep['PAGE'] . '&breakpoint=triggerdebug';
|
||
}
|
||
|
||
$oForm->validatePost();
|
||
//$oJSON = new Services_JSON();
|
||
$_POST['__notValidateThisFields__'] = (isset( $_POST['__notValidateThisFields__'] ) && $_POST['__notValidateThisFields__'] != '') ? $_POST['__notValidateThisFields__'] : $_POST['DynaformRequiredFields'];
|
||
if ($missing_req_values = $oForm->validateRequiredFields( $_POST['form'], Bootstrap::json_decode( stripslashes( $_POST['__notValidateThisFields__'] ) ) )) {
|
||
$fieldsRequired = Bootstrap::json_decode(str_replace(array("%27", "%39"), array("\"", "'"), $_POST["DynaformRequiredFields"]));
|
||
|
||
foreach ($fieldsRequired as $key1 => $value1) {
|
||
foreach ($missing_req_values as $key2 => $value2) {
|
||
if ($value1->name == $value2) {
|
||
$missing_req_values[$key2] = $value1->label;
|
||
}
|
||
}
|
||
}
|
||
|
||
/*hotfix notValidateThisFields */
|
||
$validate = false;
|
||
$string = serialize($missing_req_values);
|
||
if(!is_array($_POST['__notValidateThisFields__'])) {
|
||
$notValidateThisFields = explode("," ,$_POST['__notValidateThisFields__']);
|
||
} else {
|
||
$notValidateThisFields = $_POST['__notValidateThisFields__'];
|
||
}
|
||
|
||
foreach($notValidateThisFields as $val) {
|
||
if(strpos($val,"]")) {
|
||
$gridField = substr($val,strrpos($val,"["),strlen($val));
|
||
$gridField = preg_replace("/[^a-zA-Z0-9_-]+/", "", $gridField);
|
||
$pattern = "/".$gridField."/i";
|
||
} else {
|
||
$pattern = "/".$val."/i";
|
||
}
|
||
preg_match($pattern, $string, $matches, PREG_OFFSET_CAPTURE);
|
||
if(sizeof($matches)) {
|
||
$validate = true;
|
||
}
|
||
}
|
||
|
||
if(!$validate && !sizeof($matches)) {
|
||
$_POST['next_step'] = $aNextStep;
|
||
$_POST['previous_step'] = $oCase->getPreviousStep( $_SESSION['PROCESS'], $_SESSION['APPLICATION'], $_SESSION['INDEX'], $_SESSION['STEP_POSITION'] );
|
||
$_POST['req_val'] = $missing_req_values;
|
||
global $G_PUBLISH;
|
||
$G_PUBLISH = new Publisher();
|
||
$G_PUBLISH->AddContent( 'view', 'cases/missRequiredFields' );
|
||
G::RenderPage( 'publish', 'blank' );
|
||
exit( 0 );
|
||
}
|
||
/*end hotfix notValidateThisFields */
|
||
}
|
||
|
||
G::header( 'location: ' . $aNextStep['PAGE'] );
|
||
|
||
} catch (Exception $e) {
|
||
$G_PUBLISH = new Publisher();
|
||
$aMessage = array ();
|
||
$aMessage['MESSAGE'] = $e->getMessage();
|
||
$G_PUBLISH->AddContent( 'xmlform', 'xmlform', 'login/showMessage', '', $aMessage );
|
||
G::RenderPage( 'publish', 'blank' );
|
||
die();
|
||
}
|
||
|
||
|
||
function send_case_data_to_external( $payload ) {
|
||
// send case data to external system
|
||
$appUid = $_SESSION['APPLICATION'];
|
||
$systemConfig = System::getSystemConfiguration('', '', config("system.workspace"));
|
||
$caseDataHost = isset($systemConfig['case_data_host']) ? $systemConfig['case_data_host']: null;
|
||
|
||
if (empty($caseDataHost)) {
|
||
// If no external endpoint is configured, just return
|
||
return;
|
||
}
|
||
$message = '['.$appUid.'] Send case data to external service: '. $caseDataHost;
|
||
Log::info( $message );
|
||
|
||
// Send it to the external endpoint
|
||
$client = new \GuzzleHttp\Client();
|
||
try {
|
||
$response = $client->post($caseDataHost.'/api/'.SYS_SYS.'/receive_case', [
|
||
'json' => $payload,
|
||
'timeout' => 15, //15 s timeout
|
||
]);
|
||
|
||
// Optional: log the response
|
||
$log = json_decode((string)$response->getBody(), true);
|
||
$message = "[".$appUid.'] External API response: ' . $log['status'] . ' - ' . $log['message'];
|
||
Log::info( $message);
|
||
} catch (\Exception $ex) {
|
||
// If the external call fails you can decide whether to abort or just log
|
||
$message = '['.$appUid.'] Could not notify external service: ' . $ex->getMessage();
|
||
Log::error( $message );
|
||
}
|
||
} |