projekt kivitendo

<?

require_once "DB.php";

class myDB extends DB {

 var $db = false;

 var $rc = false;

 var $showErr = false; // Browserausgabe

 var $debug = false; // 1 = SQL-Ausgabe, 2 = zusätzlich Ergebnis

 var $log = true;  // Alle Abfragen mitloggen

 var $errfile = "tmp/lxcrm.err";

 var $logfile = "tmp/lxcrm.log";

 var $lfh = false;

	function dbFehler($sql,$err) {

		$efh=fopen($this->errfile,"a");

		fputs($efh,date("Y-m-d H:i:s ->"));

		fputs($efh,$sql."\n");

		fputs($efh,$err."\n");

		fputs($efh,print_r($this->rc,true));

		fputs($efh,"\n");

		fclose($efh);

		if ($this->showErr)

			echo "</td></tr></table><font color='red'>$sql : $err</font><br>";

	}

	function showDebug($sql) {

		echo $sql."<br>";

		if ($this->debug==2) {

			echo "<pre>";

			print_r($this->rc);

			echo "</pre>";

		};

	}

	function writeLog($txt) {

		if ($this->lfh===false)

			$this->lfh=fopen($this->logfile,"a");

		fputs($this->lfh,date("Y-m-d H:i:s ->"));

		fputs($this->lfh,$txt."\n");

		fputs($this->lfh,print_r($this->rc,true));

		fputs($this->lfh,"\n");

	}

	function closeLogfile() {

		fclose($this->lfh);

	}

	function myDB($host,$user,$pwd,$db,$port,$showErr=false) {

		$dsn = array(

                    'phptype'  => 'pgsql',

                    'username' => $user,

                    'password' => $pwd,

                    'hostspec' => $host,

                    'database' => $db,

                    'port'     => $port

                );

		$this->showErr=$showErr;

		$this->db=DB::connect($dsn);

		if (!$this->db || DB::isError($this->db)) {

			if ($this->log) $this->writeLog("Connect $dns");

			$this->dbFehler("Connect ".print_r($dsn,true),$this->db->getMessage()); 

			die ($this->db->getMessage());

		}

		if ($this->log) $this->writeLog("Connect: ok ");

		return $this->db;

	}

	function query($sql) {

		$this->rc=@$this->db->query($sql);

		if ($this->debug) $this->showDebug($sql);

		if ($this->log) $this->writeLog($sql);

		if(DB::isError($this->rc)) {

			$this->dbFehler($sql,$this->rc->getMessage());

			$this->rollback();

			return false;

		} else {

			return $this->rc;

		}

	}

	function begin() {

		$this->query("BEGIN");

	}

	function commit() {

		$this->query("COMMIT");

	}

	function rollback() {

		$this->query("ROLLBACK");

	}

	function getAll($sql) {

		$this->rc=$this->db->getAll($sql,DB_FETCHMODE_ASSOC);

		if ($this->debug) $this->showDebug($sql);

		if ($this->log) $this->writeLog($sql);

		if(DB::isError($this->rc)) {

			$this->dbFehler($sql,$this->rc->getMessage());

			return false;

		} else {

			return $this->rc;

		}

	}

	function saveData($txt) {

		if (get_magic_quotes_gpc()) { 	

			return $txt;

		} else {

			return DB::quoteSmart($string); 

		}

	}

	function chkcol($tbl) {

        // gibt es die Spalte import schon?

                $rc=$this->db->query("select import from $tbl limit 1");

                if(DB::isError($rc)) {

                        $rc=$this->db->query("alter table $tbl add column import int4");

                        if(DB::isError($rc)) { return false; }

                        else { return true; }

		} else { return true; };

	}

}

?>

require_once "db.php";

	"notes1" => "Beschreibung",

	"partsgroup2" => "3.Warengruppenbezeichnung",

	"partsgroup3" => "4.Warengruppenbezeichnung",

	"partsgroup4" => "5.Warengruppenbezeichnung",

// ist es ein g?ltiger ERP-Benutzer? Er mu? mindestens 1 x angemeldet gewesen sein.

function anmelden() {

        ini_set("gc_maxlifetime","3600");

        $tmp = @file_get_contents("../config/authentication.pl");

        preg_match("/'db'[ ]*=> '(.+)'/",$tmp,$hits);

        $dbname=$hits[1];

        preg_match("/'password'[ ]*=> '(.+)'/",$tmp,$hits);

        $dbpasswd=$hits[1];

        preg_match("/'user'[ ]*=> '(.+)'/",$tmp,$hits);

        $dbuser=$hits[1];

        preg_match("/'host'[ ]*=> '(.+)'/",$tmp,$hits);

        $dbhost=($hits[1])?$hits[1]:"localhost";

        preg_match("/'port'[ ]*=> '(.+)'/",$tmp,$hits);

        $dbport=($hits[1])?$hits[1]:"5432";

        preg_match("/^[ ]*\$self->\{cookie_name\}[ ]*=[ ]*'(.+)'/",$tmp,$hits);

        $cookiename=$hits[1];

        if (!$cookiename) $cookiename='lx_office_erp_session_id';

        $cookie=$_COOKIE[$cookiename];

        if (!$cookie) header("location: ups.html");

        $auth=authuser($dbhost,$dbport,$dbuser,$dbpasswd,$dbname,$cookie);

        if (!$auth) { return false; };

        $_SESSION["sessid"]=$cookie;

        $_SESSION["cookie"]=$cookiename;

        $_SESSION["employee"]=$auth["login"];

        $_SESSION["mansel"]=$auth["dbname"];

        $_SESSION["dbname"]=$auth["dbname"];

        $_SESSION["dbhost"]=(!$auth["dbhost"])?"localhost":$auth["dbhost"];

        $_SESSION["dbport"]=(!$auth["dbport"])?"5432":$auth["dbport"];

        $_SESSION["dbuser"]=$auth["dbuser"];

        $_SESSION["dbpasswd"]=$auth["dbpasswd"];

        $_SESSION["db"]=new myDB($_SESSION["dbhost"],$_SESSION["dbuser"],$_SESSION["dbpasswd"],$_SESSION["dbname"],$_SESSION["dbport"],$showErr);

        $_SESSION["authcookie"]=$authcookie;

        $sql="select * from employee where login='".$auth["login"]."'";

        $rs=$_SESSION["db"]->getAll($sql);

        if(!$rs) {

                return false;

        } else {

                if ($rs) {

                        $tmp=$rs[0];

                        $_SESSION["termbegin"]=(($tmp["termbegin"]>=0)?$tmp["termbegin"]:8);

                        $_SESSION["termend"]=($tmp["termend"])?$tmp["termend"]:19;

                        $_SESSION["Pre"]=$tmp["pre"];

                        $_SESSION["interv"]=($tmp["interv"]>0)?$tmp["interv"]:60;

                        $_SESSION["loginCRM"]=$tmp["id"];

                        $_SESSION["lang"]=$tmp["countrycode"]; //"de";

                        $_SESSION["kdview"]=$tmp["kdview"];

                        $sql="select * from defaults";

                        $rs=$_SESSION["db"]->getAll($sql);

                        $_SESSION["ERPver"]=$rs[0]["version"];

                        return true;

                } else {

                        return false;

                }

        }

}

function authuser($dbhost,$dbport,$dbuser,$dbpasswd,$dbname,$cookie) {

        $db=new myDB($dbhost,$dbuser,$dbpasswd,$dbname,$dbport,true);

        $sql="select sc.session_id,u.id from auth.session_content sc left join auth.user u on ";

        $sql.="u.login=sc.sess_value left join auth.session s on s.id=sc.session_id ";

        $sql.="where session_id = '$cookie' and sc.sess_key='login'";// order by s.mtime desc";

        $rs=$db->getAll($sql,"authuser_1");

        if (!$rs) return false;

        $stmp="";

        if (count($rs)>1) {

                header("location:../login.pl?action=logout");

                /*foreach($rs as $row) {

                        $stmp.=$row["session_id"].",";

                }

                $sql1="delete from session where id in (".substr($stmp,-1).")";

                $sql2="delete from session_content where session_id in (".substr($stmp,-1).")";

                $db->query($sql1,"authuser_A");

                $db->query($sql2,"authuser_B");

                $sql3="insert into session ";*/

        }

        $sql="select * from auth.user_config where user_id=".$rs[0]["id"];

        $rs1=$db->getAll($sql,"authuser_2");

        $auth=array();

        $keys=array("login","dbname","dbpasswd","dbhost","dbport","dbuser");

        foreach ($rs1 as $row) {

                if (in_array($row["cfg_key"],$keys)) {

                        $auth[$row["cfg_key"]]=$row["cfg_value"];

                }

        }

        $sql="update auth.session set mtime = '".date("Y-M-d H:i:s.100001")."' where id = '".$rs[0]["session_id"]."'";

        $db->query($sql,"authuser_3");

        return $auth;

function ende($nr) {

	echo "Abbruch: $nr<br>";

	echo "Fehlende oder falsche Daten.";

	exit(1);

}

print_r($_SESSION);

if (!$_SESSION["db"]) {

	$conffile="../config/authentication.pl";

	if (!is_file($conffile)) {

		ende(4);

	}

}

if (!anmelden()) ende(5);

$db=$_SESSION["db"]; //new myDB($login);

	echo "Bei vorhandenen Artikelnummern (in der db), kann entweder ein Update auf den Preis (und Text) durchgef&uuml;hrt werden oder der Artikel mit anderer Artikelnummer eingef&uuml;gt werden.<br><br>";

$TextUpd = $_POST["TextUpd"];

//if (!chkUsr($login))

//	ende(4);

/* ??? */

//if (!file_exists("../users/$login.conf")) 

//	ende(3);

	ende(3);

//$_test["shop"]="n";

//$_test["wgtrenner"]="!";

<input type="hidden" name="MAX_FILE_SIZE" value="20000000">

<tr><td><input type="submit" name="ok" value="Hilfe"></td><td></td></tr>

		<input type="radio" name="trenner" value="#9" checked>Tabulator

<tr><td>Textupdate</td><td><input type="checkbox" name="TextUpd" value="1">ja</td></tr>

<tr><td>Warengruppen<br>verbinder</td><td><input type="text" name="wgtrenner" value="!" size="3"></td></tr>

<tr><td>Shopartikel</td><td><input type="radio" name="shop" value="t">ja <input type="radio" name="shop" value="n" checked>nein</td></tr>

<tr><td>Art</td><td><input type="Radio" name="ware" value="W" checked>Ware &nbsp; 

		    <input type="Radio" name="ware" value="G">gemischt (Spalte 'art' vorhanden)</td></tr>

	<input type="radio" name="bugrufix" value="0">nie<br>

	<input type="radio" name="bugrufix" value="1" checked>f&uuml;r alle Artikel verwenden

function chkPartNumberUpd($db,$sellprice,$partnumber,$descript,$note,$check,$shop='n'){

		$sql="update parts set sellprice = $sellprice, shop='$shop'";

		if ($descript) $sql.=",description='$descript',notes='$note'"; 

		$sql.=" where partnumber = '$partnumber'";

	$shop=$maske["shop"];

	$wgtrenner=$maske["wgtrenner"];

	$UpdText=($maske["TextUpd"]=="1")?true:false;

			if (substr($fld,0,10)=="partsgroup") {

			} else if ($fld=="notes" || $fld=="notes1" ) {

				$note2show=true;

	if ($note2show) show( $show, "<td>notes</td>\n");

	$posdescript=0;

	$posnotes=0;

	$posnotes1=0;

		if ($infld[$j]=="description") $posdescript=$j;

		if ($infld[$j]=="notes") $posnotes=$j;

		if ($infld[$j]=="notes1") $posnotes1=$j;

	/*if ($insert) {

		$sql="update parts set shop = 'n' where partnumber like '______'";

		$rc=$db->query($sql);

		//echo $sql; print_r($rc); echo "<br>";

		if (!$rc) {

			echo "Fehler: Artikel nicht aus dem Shop genommen";

		}

	};*/

	while ( ($zeile=fgetcsv($f,120000,$trenner)) != FALSE) {

			if ($UpdText) {

				$description=$zeile[$posdescript];

				$note=$zeile[$posnotes];

				$note1=$zeile[$posnotes1];

				$note=mb_convert_encoding($note,"ISO-8859-15","ISO-8859-15");

                        	$note=preg_replace('/""[^ ]/','"',$note);

                        	$note=" \n".addslashes($note);

				$note1=mb_convert_encoding($note1,"ISO-8859-15","ISO-8859-15");

                        	$note1=preg_replace('/""[^ ]/','"',$note1);

                        	$note.=" \n".addslashes($note1);

				$rc=chkPartNumberUpd($db,$sellprice,$partnumber,$description,$note,$check);

			} else {

				$rc=chkPartNumberUpd($db,$sellprice,$partnumber,false,false,$check);

			}

		$pg_name_val=array();

		$note_val="";

		$model="";

		$hersteller="";

			if (substr($key,0,10) == "partsgroup") {

				if (strlen($key)==10) { $pgnr=0; } 

				else { $pgnr=substr($key,-1); }

				$pg_name_val[$pgnr]=$data;

			} else 	if ($key == "lastcost" || 

				$data=mb_convert_encoding($data,"ISO-8859-15","ISO-8859-15");

				$data=preg_replace('/""[^ ]/','"',$data);

				$data=mb_convert_encoding($data,"ISO-8859-15","ISO-8859-15");

				$data=preg_replace('/""[^ ]/','"',$data);

				$notesval=addslashes($data);

				$i++;

				continue;

			} else if ($key == "notes1") {

				$data=mb_convert_encoding($data,"ISO-8859-15","ISO-8859-15");

				$data=preg_replace('/""[^ ]/','"',$data);

				$notesval.=" \n".addslashes($data);

				$i++;

				continue;

				//$key="notes";

			/*} else if ($key == "makemodel") {

				$data=mb_convert_encoding($data,"ISO-8859-15","ISO-8859-15");

				$hersteller=addslashes($data);

				$i++;

				continue;

			} else if ($key == "model") {

				$data=mb_convert_encoding($data,"ISO-8859-15","ISO-8859-15");

				$model=addslashes($data);

				$i++;

				continue;*/

				//echo "!$data!";

			} 

			}	

		//Mehrere Warengruppennamen werden mit einem Trennzeichen zu einen Namen zusammengef?rt.

			foreach($pg_name_val as $pg) {

				if ($pg>"") $pgname.=$pg.$wgtrenner;

			};

			unset($pg_name_val);

			if ($pgname and $pgname <> "!") {

				$pgname=substr($pgname,0,-1);

				$ID = getPartsgroupId($db, $pgname, $insert);

				show( $show, "<td>".htmlentities($pgname).":$ID</td>\n");

			} else {

				show( $show,"<td>NULL</td>\n");

			}

		}

		if ($note2show) {

			if ($notesval) {

				$keys.="notes,";

				$vals.="'$notesval',";

				if (strlen($notesval)>255) {

					show( $show, "<td>".substr($notesval,0,25)." . . . ".htmlentities(substr($notesval,-25))."</td>\n");

				} else {

					show( $show, "<td>$notesval</td>\n");

				}

		//Automatisch Bilder mit einbinden 

		//Die Bilder m?ssen manuell hier (bilder/) her kopiert werden.

		//Names des Bildes: "bilder/" + Artikelnummer in Grossbuchstaben + ".jpg"

		//$bild="bilder/".strtoupper($bild).".jpg";

		//$sql.=$keys."image,shop,weight,import)";

		//$sql.="$vals'$bild','$shop',3,".time().")";	

		//ohne Bilder

		$sql.=$keys."shop,weight,import)";

		$sql.="$vals'$shop',3,".time().")";	

		$pgname="";