dolibarr/htdocs/public/ticket/create_ticket.php

<?php
/* Copyright (C) 2013-2016    Jean-François FERRY <hello@librethic.io>
 * Copyright (C) 2016         Christophe Battarel <christophe@altairis.fr>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

/**
 *       \file       htdocs/public/ticket/create_ticket.php
 *       \ingroup    ticket
 *       \brief      Display public form to add new ticket
 */

if (!defined('NOREQUIREUSER'))  define('NOREQUIREUSER', '1');
if (!defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL', '1');
if (!defined('NOREQUIREMENU'))  define('NOREQUIREMENU', '1');
if (!defined('NOREQUIREHTML'))  define('NOREQUIREHTML', '1');
if (!defined('NOLOGIN'))        define("NOLOGIN", 1); // This means this output page does not require to be logged.
if (!defined('NOCSRFCHECK'))    define("NOCSRFCHECK", 1); // We accept to go on this page from external web site.
if (!defined('NOIPCHECK'))		define('NOIPCHECK', '1'); // Do not check IP defined into conf $dolibarr_main_restrict_ip

require '../../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/ticket/class/actions_ticket.class.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/html.formticket.class.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/ticket.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/security.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/payments.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/extrafields.class.php';
require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php';

// Load translation files required by the page
$langs->loadLangs(array('companies', 'other', 'mails', 'ticket'));

// Get parameters
$id = GETPOST('id', 'int');
$msg_id = GETPOST('msg_id', 'int');

$action = GETPOST('action', 'alpha');

$object = new Ticket($db);
$extrafields = new ExtraFields($db);

$extrafields->fetch_name_optionals_label($object->table_element);


/*
 * Actions
 */

// Add file in email form
if (GETPOST('addfile', 'alpha') && !GETPOST('add', 'alpha')) {
    ////$res = $object->fetch('','',GETPOST('track_id'));
    ////if($res > 0)
    ////{
    include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';

    // Set tmp directory TODO Use a dedicated directory for temp mails files
    $vardir = $conf->ticket->dir_output;
    $upload_dir_tmp = $vardir.'/temp/'.session_id();
    if (!dol_is_dir($upload_dir_tmp)) {
        dol_mkdir($upload_dir_tmp);
    }

    dol_add_file_process($upload_dir_tmp, 0, 0, 'addedfile', '', null, '', 0);
    $action = 'create_ticket';
    ////}
}

// Remove file
if (GETPOST('removedfile', 'alpha') && !GETPOST('add', 'alpha')) {
    include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';

    // Set tmp directory
    $vardir = $conf->ticket->dir_output.'/';
    $upload_dir_tmp = $vardir.'/temp/'.session_id();

    // TODO Delete only files that was uploaded from email form
    dol_remove_file_process($_POST['removedfile'], 0, 0);
    $action = 'create_ticket';
}
if ($action == 'create_ticket' && GETPOST('add', 'alpha')) {
    $error = 0;
    $origin_email = GETPOST('email', 'alpha');
    if (empty($origin_email)) {
        $error++;
        array_push($object->errors, $langs->trans("ErrorFieldRequired", $langs->transnoentities("Email")));
        $action = '';
    } else {
        // Search company saved with email
        $searched_companies = $object->searchSocidByEmail($origin_email, '0');

        // Chercher un contact existant avec cette adresse email
        // Le premier contact trouvé est utilisé pour déterminer le contact suivi
        $contacts = $object->searchContactByEmail($origin_email);

        // Option to require email exists to create ticket
        if (!empty($conf->global->TICKET_EMAIL_MUST_EXISTS) && !$contacts[0]->socid) {
            $error++;
            array_push($object->errors, $langs->trans("ErrorEmailMustExistToCreateTicket"));
            $action = '';
        }
    }

    if (!GETPOST("subject", "none")) {
        $error++;
        array_push($object->errors, $langs->trans("ErrorFieldRequired", $langs->transnoentities("Subject")));
        $action = '';
    } elseif (!GETPOST("message", "none")) {
        $error++;
        array_push($object->errors, $langs->trans("ErrorFieldRequired", $langs->transnoentities("message")));
        $action = '';
    }

    // Check email address
    if (!isValidEmail($origin_email)) {
        $error++;
        array_push($object->errors, $langs->trans("ErrorBadEmailAddress", $langs->transnoentities("email")));
        $action = '';
    }

    if (!$error) {
        $object->db->begin();

        $object->track_id = generate_random_id(16);

        $object->subject = GETPOST("subject", "none");
        $object->message = GETPOST("message", "none");
        $object->origin_email = $origin_email;

        $object->type_code = GETPOST("type_code", 'aZ09');
        $object->category_code = GETPOST("category_code", 'aZ09');
        $object->severity_code = GETPOST("severity_code", 'aZ09');
        if (is_array($searched_companies)) {
            $object->fk_soc = $searched_companies[0]->id;
        }

        if (is_array($contacts) and count($contacts) > 0) {
            $object->fk_soc = $contacts[0]->socid;
            $usertoassign = $contacts[0]->id;
        }

        $ret = $extrafields->setOptionalsFromPost(null, $object);

        // Generate new ref
        $object->ref = $object->getDefaultRef();
        if (!is_object($user)) {
            $user = new User($db);
        }

        $object->context['disableticketemail'] = 1; // Disable emails sent by ticket trigger when creation is done from this page, emails are already sent later

        $id = $object->create($user);
        if ($id <= 0) {
            $error++;
            $errors = ($object->error ? array($object->error) : $object->errors);
            array_push($object->errors, $object->error ? array($object->error) : $object->errors);
            $action = 'create_ticket';
        }

        if (!$error && $id > 0) {
            if ($usertoassign > 0) {
                $object->add_contact($usertoassign, "SUPPORTCLI", 'external', 0);
            }
        }

        if (!$error)
        {
        	$object->db->commit();
        	$action = "infos_success";
        } else {
	    	$object->db->rollback();
	    	setEventMessages($object->error, $object->errors, 'errors');
	    	$action = 'create_ticket';
	    }

	    if (!$error)
	    {
            $res = $object->fetch($id);
            if ($res) {
                // Create form object
                include_once DOL_DOCUMENT_ROOT.'/core/class/html.formmail.class.php';
                include_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
                $formmail = new FormMail($db);

                // Init to avoid errors
                $filepath = array();
                $filename = array();
                $mimetype = array();

                $attachedfiles = $formmail->get_attached_files();
                $filepath = $attachedfiles['paths'];
                $filename = $attachedfiles['names'];
                $mimetype = $attachedfiles['mimes'];

                // Send email to customer

                $subject = '['.$conf->global->MAIN_INFO_SOCIETE_NOM.'] '.$langs->transnoentities('TicketNewEmailSubject', $object->ref, $object->track_id);
                $message .= ($conf->global->TICKET_MESSAGE_MAIL_NEW ? $conf->global->TICKET_MESSAGE_MAIL_NEW : $langs->transnoentities('TicketNewEmailBody'))."\n\n";
                $message .= $langs->transnoentities('TicketNewEmailBodyInfosTicket')."\n";

                $url_public_ticket = ($conf->global->TICKET_URL_PUBLIC_INTERFACE ? $conf->global->TICKET_URL_PUBLIC_INTERFACE.'/' : dol_buildpath('/public/ticket/view.php', 2)).'?track_id='.$object->track_id;
                $infos_new_ticket = $langs->transnoentities('TicketNewEmailBodyInfosTrackId', '<a href="'.$url_public_ticket.'">'.$object->track_id.'</a>')."\n";
                $infos_new_ticket .= $langs->transnoentities('TicketNewEmailBodyInfosTrackUrl')."\n\n";

                $message .= dol_nl2br($infos_new_ticket);
                $message .= $conf->global->TICKET_MESSAGE_MAIL_SIGNATURE ? $conf->global->TICKET_MESSAGE_MAIL_SIGNATURE : $langs->transnoentities('TicketMessageMailSignatureText');

                $sendto = GETPOST('email', 'alpha');

                $from = $conf->global->MAIN_INFO_SOCIETE_NOM.'<'.$conf->global->TICKET_NOTIFICATION_EMAIL_FROM.'>';
                $replyto = $from;
				$sendtocc = '';
				$deliveryreceipt = 0;

                $message = dol_nl2br($message);

                if (!empty($conf->global->TICKET_DISABLE_MAIL_AUTOCOPY_TO)) {
                    $old_MAIN_MAIL_AUTOCOPY_TO = $conf->global->MAIN_MAIL_AUTOCOPY_TO;
                    $conf->global->MAIN_MAIL_AUTOCOPY_TO = '';
                }
                include_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
                $mailfile = new CMailFile($subject, $sendto, $from, $message, $filepath, $mimetype, $filename, $sendtocc, '', $deliveryreceipt, -1);
                if ($mailfile->error || $mailfile->errors) {
                    setEventMessages($mailfile->error, $mailfile->errors, 'errors');
                } else {
                    $result = $mailfile->sendfile();
                }
                if (!empty($conf->global->TICKET_DISABLE_MAIL_AUTOCOPY_TO)) {
                    $conf->global->MAIN_MAIL_AUTOCOPY_TO = $old_MAIN_MAIL_AUTOCOPY_TO;
                }


                // Send email to TICKET_NOTIFICATION_EMAIL_TO

                $sendto = $conf->global->TICKET_NOTIFICATION_EMAIL_TO;

                if ($sendto)
                {
	                $subject = '['.$conf->global->MAIN_INFO_SOCIETE_NOM.'] '.$langs->transnoentities('TicketNewEmailSubjectAdmin', $object->ref, $object->track_id);
	                $message_admin = $langs->transnoentities('TicketNewEmailBodyAdmin', $object->track_id)."\n\n";
	                $message_admin .= '<ul><li>'.$langs->trans('Title').' : '.$object->subject.'</li>';
	                $message_admin .= '<li>'.$langs->trans('Type').' : '.$object->type_label.'</li>';
	                $message_admin .= '<li>'.$langs->trans('Category').' : '.$object->category_label.'</li>';
	                $message_admin .= '<li>'.$langs->trans('Severity').' : '.$object->severity_label.'</li>';
	                $message_admin .= '<li>'.$langs->trans('From').' : '.$object->origin_email.'</li>';

	                if (is_array($extrafields->attributes[$object->table_element]['label']))
	                {
	                	foreach ($extrafields->attributes[$object->table_element]['label'] as $key => $val)
	                	{
	                		$enabled = 1;
	                		if ($qualified && isset($extrafields->attributes[$object->table_element]['list'][$key]))
	                		{
	                			$enabled = dol_eval($extrafields->attributes[$object->table_element]['list'][$key], 1);
	                		}
	                		$perms = 1;
	                		if ($perms && isset($extrafields->attributes[$object->table_element]['perms'][$key]))
	                		{
	                			$perms = dol_eval($extrafields->attributes[$object->table_element]['perms'][$key], 1);
	                		}

	                		$qualified = true;
	                		if (empty($enabled) || $enabled == 2) $qualified = false;
	                		if (empty($perms)) $qualified = false;
	                		if ($qualified) $message_admin .= '<li>'.$langs->trans($key).' : '.$value.'</li>';
	                	}
	                }

	                $message_admin .= '</ul>';
	                $message_admin .= '<p>'.$langs->trans('Message').' : <br>'.$object->message.'</p>';
	                $message_admin .= '<p><a href="'.dol_buildpath('/ticket/card.php', 2).'?track_id='.$object->track_id.'">'.$langs->trans('SeeThisTicketIntomanagementInterface').'</a></p>';

	                $from = $conf->global->MAIN_INFO_SOCIETE_NOM.'<'.$conf->global->TICKET_NOTIFICATION_EMAIL_FROM.'>';
	                $replyto = $from;

	                $message_admin = dol_nl2br($message_admin);

	                if (!empty($conf->global->TICKET_DISABLE_MAIL_AUTOCOPY_TO)) {
	                    $old_MAIN_MAIL_AUTOCOPY_TO = $conf->global->MAIN_MAIL_AUTOCOPY_TO;
	                    $conf->global->MAIN_MAIL_AUTOCOPY_TO = '';
	                }
	                include_once DOL_DOCUMENT_ROOT.'/core/class/CMailFile.class.php';
	                $mailfile = new CMailFile($subject, $sendto, $from, $message_admin, $filepath, $mimetype, $filename, $sendtocc, '', $deliveryreceipt, -1);
	                if ($mailfile->error || $mailfile->errors) {
                        setEventMessages($mailfile->error, $mailfile->errors, 'errors');
                    } else {
	                    $result = $mailfile->sendfile();
	                }
	                if (!empty($conf->global->TICKET_DISABLE_MAIL_AUTOCOPY_TO)) {
	                    $conf->global->MAIN_MAIL_AUTOCOPY_TO = $old_MAIN_MAIL_AUTOCOPY_TO;
	                }
                }
            }

            // Copy files into ticket directory
            $destdir = $conf->ticket->dir_output.'/'.$object->ref;
            if (!dol_is_dir($destdir)) {
            	dol_mkdir($destdir);
            }
            foreach ($filename as $i => $val) {
            	dol_move($filepath[$i], $destdir.'/'.$filename[$i], 0, 1);
            	$formmail->remove_attached_files($i);
            }

            //setEventMessages($langs->trans('YourTicketSuccessfullySaved'), null, 'mesgs');

            // Make a redirect to avoid to have ticket submitted twice if we make back
            setEventMessages($langs->trans('MesgInfosPublicTicketCreatedWithTrackId', '<strong>'.$object->track_id.'</strong>', '<strong>'.$object->ref.'</strong>'), null, 'warnings');
            setEventMessages($langs->trans('PleaseRememberThisId'), null, 'warnings');
            header("Location: index.php");
			exit;
        }
    } else {
        setEventMessages($object->error, $object->errors, 'errors');
    }
}



/*
 * View
 */

$form = new Form($db);
$formticket = new FormTicket($db);

if (!$conf->global->TICKET_ENABLE_PUBLIC_INTERFACE)
{
    print '<div class="error">'.$langs->trans('TicketPublicInterfaceForbidden').'</div>';
    $db->close();
    exit();
}

$arrayofjs = array();
$arrayofcss = array('/opensurvey/css/style.css', '/ticket/css/styles.css.php');

llxHeaderTicket($langs->trans("CreateTicket"), "", 0, 0, $arrayofjs, $arrayofcss);


print '<div style="width:60%; margin: 0 auto;" class="ticketpublicarea">';

if ($action != "infos_success") {
    $formticket->withfromsocid = isset($socid) ? $socid : $user->socid;
    $formticket->withtitletopic = 1;
    $formticket->withcompany = 0;
    $formticket->withusercreate = 1;
    $formticket->fk_user_create = 0;
    $formticket->withemail = 1;
    $formticket->ispublic = 1;
    $formticket->withfile = 2;
    $formticket->action = 'create_ticket';

    $formticket->param = array('returnurl' => $_SERVER['PHP_SELF'].($conf->entity > 1 ? '?entity='.$conf->entity : ''));

    print load_fiche_titre($langs->trans('NewTicket'), '', '', 0, 0, 'marginleftonly');

    if (empty($conf->global->TICKET_NOTIFICATION_EMAIL_FROM)) {
    	$langs->load("errors");
    	print '<div class="error">';
    	print $langs->trans("ErrorFieldRequired", $langs->transnoentities("TicketEmailNotificationFrom")).'<br>';
    	print $langs->trans("ErrorModuleSetupNotComplete", $langs->transnoentities("Ticket"));
    	print '<div>';
    }
    else {
	    print '<div class="info marginleftonly marginrightonly">'.$langs->trans('TicketPublicInfoCreateTicket').'</div>';
    	$formticket->showForm();
    }
}

print '</div>';

// End of page
htmlPrintOnlinePaymentFooter($mysoc, $langs, 1, $suffix, $object);

llxFooter('', 'public');

$db->close();