Warning: chmod(): Operation not permitted in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[0] in function chmod in /var/www/hopeinstoughton_www/wp-content/plugins/simple-universal-google-analytics/main.php on line 8
[1] in function include_once in /var/www/hopeinstoughton_www/wp-settings.php on line 560
[2] in function require_once in /var/www/hopeinstoughton_www/wp-config.php on line 85
[3] in function require_once in /var/www/hopeinstoughton_www/wp-load.php on line 50
[4] in function require_once in /var/www/hopeinstoughton_www/wp-blog-header.php on line 13
[5] in function require in /var/www/hopeinstoughton_www/index.php on line 17

<?php

class Admin extends Controller {

	function __construct() {
		global $VARIABLE;
		$this->auth = self::loadModel('authentication_model');
		$this->view = self::loadView('member_view');
		$this->view_admin = self::loadView('admin_view');
		$VARIABLE['default_right'] = '';
	}

	public function login() {
		global $isPost;
		self::LoadPlugin('class.webform');
		$webform = new webform('');
		$f = $webform->AddField_Hidden('bounce');
		
		$f = $webform->AddField_Text('user', 'Username', 1);
		$f->SetWidth(210);
		$f = $webform->AddField_Text('pass', 'Password', 1);
		$f->SetWidth(210);
		$f->SetType(TEXTTYPE_PASSWORD);

		$error = $webform->database_load();
		if (!$error && $isPost) {
			$webform->database_save();
			$user = $webform->DATA['user'];
			$password = $webform->DATA['pass'];
			self::LoadPlugin('class.password');
			$n = $this->auth->isValid($user, $password);
			if ($n) {
				$this->auth->LoginAsUser($user);
				$bounce = $webform->DATA['bounce'];
				self::Redirect($bounce);
			}
		}
		$body = $this->view->render_login($webform);
		self::DisplayPage('Member Area', $body);
	}

	// are we logged in - redirect if not
	private function _CheckAuthorized() {
		global $THIS_URL;
		$id = isset($_SESSION['scpid']) ? $_SESSION['scpid'] : '';
		if ($id != '') return;
		$bounce = urlencode($THIS_URL);
		self::Redirect("/admin/login?bounce=$bounce");
	}
	
	public function logout() {
		$this->auth->Logout();
		$bounce = isset($_GET['bounce']) ? $_GET['bounce'] : '';
		if ($bounce == '') $bounce = '/';
		self::Redirect($bounce);
	}

	/////////////////////////////////////////////////////////////////////////
	// display all stock groups
	public function stock_group($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_stock_group();
		} else {
			$n = intval($n);
			return self::_edit_stock_group($n);
		}
	}
	
	public function stock_group_delete($n = '') {
		global $DATABASE;
		self::_CheckAuthorized();
		if ($n != '') {
			$n = intval($n);
			$DATABASE->Query("delete from dt_group where dg_id=%d", $n, '', 0);
		}
		self::redirect('/admin/stock_group');
	}
	
	private function _edit_stock_group($n) {
		global $isPost, $VARIABLE;
		$webform = new webform('');
		$webform->AddField_hidden('dg_id');
		
		$f = $webform->AddField_Text('dg_desc', '&Description', 1);
		$f->SetWidth(400);
		// show on homepage
		$f = $webform->AddField_checkbox('dg_view', '&Show on Homepage?');
		
		$errors = $webform->Database_Load('select dg_id,dg_desc,dg_view from dt_group where dg_id=%d', $n, 'dt_group');
		$recnum = !empty($webform->DATA['__existing']) ? intval($webform->DATA['dg_id']) : 0 ;
		if (!$errors && $isPost) {
			if (!$recnum) $VARIABLE['dg_id'] = ip_GetRandomID('dt_group', 'dg_id');
			$webform->Database_save();
			self::Redirect('/admin/stock_group/');
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_stockgroup_edit($webform, $recnum);
		$title = ($recnum) ? $webform->DATA['dg_desc'] : 'New Stock Group';
		return self::DisplayPage($title, $body);
	}
	
	private function _select_stock_group() {
		global $isPost, $VARIABLE;
	// display all stock groups
		$operation = isset($_POST['s']) ? strtolower(trim($_POST['s'])) : '';

		$title_model = self::LoadModel('title_model');
		$webform = new webform('');
		$f = $webform->addField_List('id', 'Stock &Groups', 0);
		$f->SetHeight(9);
		$f->SetWidth(480);
		$f->SetList($title_model->GetList_StockGroup());
		
		$f = $webform->addField_DisplayOnly('default', 'Default Group');
		
		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
			if ($operation == 'set default group') {
				$title_model->SetDefaultGroup($webform->DATA['id']);
				self::redirect('/admin/stock_group');
			} else {
				$item = quote_Param_AsNumber('id');
				self::redirect('/admin/stock_group/' . $item);
			}
		}
		$VARIABLE['default'] = $title_model->GetDefaultGroup(1);
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_stock_group($webform);
		return self::DisplayPage('Stock Groups', $body);
	}
	
	/////////////////////////////////////////////////////////////////////////
	public function author($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_author();
		} else {
			$n = intval($n);
			return self::_edit_author($n);
		}
	}
	private function _select_author() {
		global $isPost, $VARIABLE;

		$search_model = self::loadModel('search_model');
		$title_model = self::LoadModel('title_model');
		$webform = new webform('');
		$f = $webform->addField_List('id', 'Authors', 0);
		$f->SetHeight(18);
		$f->SetWidth(480);
		$f->SetList($search_model->GetAuthorList(0));

		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
				$item = quote_Param_AsNumber('id');
				self::redirect('/admin/author/' . $item);
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_authors($webform);
		return self::DisplayPage('Authors', $body);
	}

	private function _edit_author($n) {
		global $isPost, $VARIABLE;
		$webform = new webform('');
		$webform->AddField_hidden('ba_id');

		$f = $webform->AddField_Text('ba_name', '&Name', 1);
		$f->SetWidth(400);
		
		$errors = $webform->Database_Load('select ba_id,ba_name from dt_author where ba_id=%d', $n, 'dt_author');
		$recnum = !empty($webform->DATA['__existing']) ? intval($webform->DATA['ba_id']) : 0 ;
		if (!$errors && $isPost) {
			if (!$recnum) $VARIABLE['ba_id'] = ip_GetRandomID('dt_author', 'ba_id');
			$webform->Database_save();
			self::Redirect('/admin/author/');
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_author_edit($webform, $recnum);
		$title = ($recnum) ? $webform->DATA['ba_name'] : 'New Author';
		return self::DisplayPage($title, $body);
	}

	public function author_delete($n = '') {
		global $DATABASE;
		self::_CheckAuthorized();
		if ($n != '') {
			$n = intval($n);
			$DATABASE->Query("delete from dt_author where ba_id=%d", $n, '', 0);
		}
		self::redirect('/admin/author');
	}

	/////////////////////////////////////////////////////////////////////////
	public function location($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_location();
		} else {
			$n = intval($n);
			return self::_edit_location($n);
		}
	}

	private function _select_location() {
		global $isPost, $VARIABLE;

		$stocktake_model = self::loadModel('stocktake_model');
		$title_model = self::LoadModel('title_model');
		$webform = new webform('');
		$f = $webform->addField_List('id', 'Locations', 0);
		$f->SetHeight(18);
		$f->SetWidth(480);
		$f->SetList($stocktake_model->GenerateLocationList(0));

		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
				$item = quote_Param_AsNumber('id');
				self::redirect('/admin/location/' . $item);
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_locations($webform);
		return self::DisplayPage('Locations', $body);
	}

	private function _edit_location($n) {
		global $isPost, $VARIABLE;
		$webform = new webform('');
		$webform->AddField_hidden('dl_id');

		$f = $webform->AddField_Text('dl_desc', '&Name of Location', 1);
		$f->SetWidth(400);
		$f = $webform->AddField_Text('dl_barcode', '&Barcode', 0);
		$f->SetWidth(150);
		$f = $webform->AddField_Checkbox('dl_external', 'Stored away from the bookshelf?');
		
		$errors = $webform->Database_Load('select dl_id,dl_desc,dl_barcode,dl_external from dt_location where dl_id=%d', $n, 'dt_location');
		$recnum = !empty($webform->DATA['__existing']) ? intval($webform->DATA['dl_id']) : 0 ;
		if (!$errors && $isPost) {
			if (!$recnum) $VARIABLE['dl_id'] = ip_GetRandomID('dt_location', 'dl_id');
			$webform->Database_save();
			self::Redirect('/admin/location/');
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_location_edit($webform, $recnum);
		$title = ($recnum) ? $webform->DATA['dl_desc'] : 'New Location';
		return self::DisplayPage($title, $body);
	}

	public function location_delete($n = '') {
		global $DATABASE;
		self::_CheckAuthorized();
		if ($n != '') {
			$n = intval($n);
			$DATABASE->Query("delete from dt_location where dl_id=%d", $n, '', 0);
		}
		self::redirect('/admin/location');
	}
	/////////////////////////////////////////////////////////////////////////
	public function title($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_title();
		} else {
			$n = intval($n);
			return self::_edit_title($n);		// http://books.hopeinstoughton.org/book.php?id=8192376&pg=2
		}
	}
	
	private function _select_title() {
		global $isPost, $VARIABLE;

		$title_model = self::LoadModel('title_model');
		$webform = new webform('');
		$f = $webform->addField_List('id', 'Title', 0);
		$f->SetHeight(18);
		$f->SetWidth(480);
		$f->SetList($title_model->CreateTitlelist());

		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
				$item = quote_Param_AsNumber('id');
				self::redirect('/admin/title/' . $item);
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_titles($webform);
		return self::DisplayPage('Titles', $body);
	}
	
	private function _edit_title($n) {
	
		$search_model = self::loadModel('search_model');
		$authorlist = $search_model->GetAuthorList(1);
		$thumb_model = self::LoadModel('thumbnail_model');
	
		$title_model = self::LoadModel('title_model');
		$x = $title_model->EditTitle($n, $authorlist, $thumb_model);
		if (is_numeric($x)) {
			self::Redirect('/admin/title/' . $x);
		}
		list($webform, $data, $footer) = $x;
		$recnum = !empty($webform->DATA['__existing']) ? intval($webform->DATA['bt_id']) : 0 ;
		
		$template = $this->loadView('main_view');
		$thumbnail = $template->render_thumbnail($n, $data);
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_title_edit($webform, $recnum, $thumbnail, $footer['body']);
		$title = ($recnum) ? $webform->DATA['bt_title'] : 'New Title';
		return self::DisplayPage($title, $body);

	}

	public function title_delete($n = '') {
		global $DATABASE;
		self::_CheckAuthorized();
		if ($n != '') {
			$n = intval($n);
			$DATABASE->Query("delete from dt_title where bt_id=%d", $n, '', 0);
		}
		self::redirect('/admin/title');
	}

	public function image_delete($n = '') {
		global $DATABASE;
		self::_CheckAuthorized();
		if ($n != '') {
			$thumb_model = self::LoadModel('thumbnail_model');
			$thumb_model->RemoveImage($n);
		}
		self::redirect('/admin/title/'. $n);
	}

	/////////////////////////////////////////////////////////////////////////
	public function member($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_member();
		} else {
			$n = intval($n);
			return self::_edit_member($n);
		}
	}

	private function _select_member() {
		global $isPost, $VARIABLE;

		$user_model = self::LoadModel('user_model');
		$webform = new webform('');
		$f = $webform->addField_List('id', 'Member List', 0);
		$f->SetHeight(18);
		$f->SetWidth(480);
		$f->SetList($user_model->GenerateUserList(1));

		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
				$item = quote_Param_AsNumber('id');
				self::redirect('/admin/member/' . $item);
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_members($webform);
		return self::DisplayPage('Members', $body);
	}
	
	private function _edit_member($n) {
		global $isPost, $VARIABLE;
		$webform = new webform('');
		$webform->AddField_hidden('bm_id');

		$f = $webform->AddField_Text('bm_surname', '&Surname', 1);
		$f->SetWidth(400);
		$f = $webform->AddField_Text('bm_firstname', '&Firstname', 1);
		$f->SetWidth(400);
		$f = $webform->AddField_TextArea('bm_address', '&Address');
		$f->SetHeight(70);
		$f->SetWidth(400);
		$f = $webform->AddField_Text('bm_town', '&Town');
		$f->SetWidth(400);
		$f = $webform->AddField_List('bm_state', 'State');
		$f->SetWidth(400);
		$f->SetList(GetStatelist());
		$f = $webform->AddField_Text('bm_zip', 'Zip');
		$f->SetWidth(100);
		$f = $webform->AddField_Text('bm_phone', '&Phone');
		$f->SetWidth(400);
		$f = $webform->AddField_Text('bm_cell', '&Cellphone');
		$f->SetWidth(400);
		$f = $webform->AddField_Text('bm_email', '&email');
		$f->SetWidth(400);
		
		$errors = $webform->Database_Load('select * from dt_member where bm_id=%d', $n, 'dt_member');
		$recnum = !empty($webform->DATA['__existing']) ? intval($webform->DATA['bm_id']) : 0 ;
		if (!$errors && $isPost) {
			if (!$recnum) $VARIABLE['bm_id'] = ip_GetRandomID('dt_member', 'bt_id');
			$webform->Database_save();
			self::Redirect('/admin/member/');
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_member_edit($webform, $recnum);
		$title = ($recnum) ? ip_AsMember($webform->DATA) : 'New Member';
		return self::DisplayPage($title, $body);
	}

	/////////////////////////////////////////////////////////////////////////
	public function stock($n = '') {
		global $isPost, $VARIABLE;
		self::_CheckAuthorized();
		self::LoadPlugin('class.webform');
		if ($n == '') {
			return self::_select_stock();
		} else {
			return self::_edit_stock($n);
		}
	}

	private function _select_stock() {
		global $isPost, $VARIABLE;
		$stocktake_model = self::LoadModel('stocktake_model');

		$webform = new webform('');
		$f = $webform->addField_List('id', 'Stock', 0);
		$f->SetHeight(18);
		$f->SetWidth(480);
		$f->SetList($stocktake_model->GenerateBarcodeList());

		$error = $webform->database_load('');
		if (!$error && $isPost) {
			$webform->database_Save();
				$item = quote_Param_AsString('id');
				self::redirect('/admin/stock/' . $item);
		}
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_stocks($webform);
		return self::DisplayPage('Stock', $body);
	}
	
	private function _edit_stock($barcode) {
		global $isPost, $VARIABLE;
		$webform = new webform('');
		
		$stocktake_model = self::LoadModel('stocktake_model');
		$title_model = self::LoadModel('title_model');

		$f = $webform->AddField_DisplayOnly('ds_barcode', 'Barcode');
		$f = $webform->AddField_hidden('ds_barcode');
		$f = $webform->AddField_DisplayOnly('__title', 'Title');
		$f = $webform->AddField_List('ds_group', 'Stock Group');
		$f->SetList($title_model->GetList_StockGroup());

		$f = $webform->AddField_List('ds_location', 'Normal Location');
		$f->SetList($stocktake_model->GenerateLocationList());

		$f = $webform->AddField_Text('ds_cost', '&Cost');
		$f->SetWidth(60);
		$f = $webform->AddField_Text('ds_wear', '&Wear');	// number of times it has gone out -- usage damages the book, and so devalues it
		$f->SetWidth(60);

//		$stockgroups = ip_retrieveStockGroups();
//	$stocklocations = ip_retrieveStockLocations();
		$error = $webform->database_load("select * from dt_stock where ds_barcode=%s", $barcode, 'dt_stock');
		
		if (!$error && $isPost) {
			$webform->Database_save();
			DbErr($DATABASE);
			self::Redirect('/admin/stock/');
		}

	// include transaction history, newest to oldest
		$trans = $stocktake_model->GetTransactionHistory($barcode, $webform->DATA, $flags);
		
		$VARIABLE['__title'] = $stocktake_model->LookupTitle($webform->DATA['ds_title']);
		$this->view_admin = self::loadView('admin_view');
		$body = $this->view_admin->render_stock_edit($webform, $barcode, $trans, $flags);
		return self::DisplayPage('Stock', $body);
	}
	
	public function stock_writeoff($barcode = '') {
		if ($barcode != '') {
			$stocktake_model = self::LoadModel('stocktake_model');
			$stocktake_model->writeoff_item($barcode);
		}
		self::redirect('/admin/stock/' . $barcode);
	}

	/////////////////////////////////////////////////////////////////////////

}