webinterface.git

modules/handles/include/handles.php     1) <?php
modules/handles/include/handles.php     2) /*
modules/handles/include/handles.php     3) This file belongs to the Webinterface of schokokeks.org Hosting
modules/handles/include/handles.php     4) 

modules/handles/include/handles.php     5) Written 2008-2018 by schokokeks.org Hosting, namely

modules/handles/include/handles.php     6)   Bernd Wurst <bernd@schokokeks.org>
modules/handles/include/handles.php     7)   Hanno Böck <hanno@schokokeks.org>
modules/handles/include/handles.php     8) 
modules/handles/include/handles.php     9) To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.
modules/handles/include/handles.php    10) 
modules/handles/include/handles.php    11) You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see 
modules/handles/include/handles.php    12) http://creativecommons.org/publicdomain/zero/1.0/
modules/handles/include/handles.php    13) 
modules/handles/include/handles.php    14) Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.
modules/handles/include/handles.php    15) */
modules/handles/include/handles.php    16) 
modules/handles/include/handles.php    17) require_once('inc/debug.php');
modules/handles/include/handles.php    18) require_role(array(ROLE_CUSTOMER));

modules/contacts/include/contacts.php  19) require_once('class/domain.php');

modules/handles/include/handles.php    20) 

modules/contacts/include/contacts.php  21) require_once('contactapi.php');

modules/contacts/include/contacts.php  22) 

modules/handles/include/handles.php    23) /*

modules/contacts/include/contacts.php  24) Todo:

modules/contacts/include/contacts.php  25)     - Ausgabe-Funktion abstrahieren
modules/contacts/include/contacts.php  26)     - Telefonnummern bei Ausgabe durch filter_input_general schieben

modules/contacts/include/contacts.php  27)     - Domaininhaber festlegen    

modules/handles/include/handles.php    28) */
modules/handles/include/handles.php    29) 
modules/handles/include/handles.php    30) 

modules/contacts/include/contacts.php  31) function new_contact() {
modules/contacts/include/contacts.php  32)     return array("id" => NULL,
modules/contacts/include/contacts.php  33)         "state" => NULL,
modules/contacts/include/contacts.php  34)         "lastchange" => time(),
modules/contacts/include/contacts.php  35)         "nic_handle" => NULL,
modules/contacts/include/contacts.php  36)         "nic_id" => NULL,
modules/contacts/include/contacts.php  37)         "company" => NULL,
modules/contacts/include/contacts.php  38)         "name" => NULL,
modules/contacts/include/contacts.php  39)         "address" => NULL,
modules/contacts/include/contacts.php  40)         "zip" => NULL,
modules/contacts/include/contacts.php  41)         "city" => NULL,
modules/contacts/include/contacts.php  42)         "country" => "DE",
modules/contacts/include/contacts.php  43)         "phone" => NULL,
modules/contacts/include/contacts.php  44)         "mobile" => NULL,
modules/contacts/include/contacts.php  45)         "fax" => NULL,
modules/contacts/include/contacts.php  46)         "email" => NULL,
modules/contacts/include/contacts.php  47)         "pgp_id" => NULL,
modules/contacts/include/contacts.php  48)         "pgp_key" => NULL,
modules/contacts/include/contacts.php  49)         "customer" => $_SESSION['customerinfo']['customerno']);
modules/contacts/include/contacts.php  50) }
modules/contacts/include/contacts.php  51) 
modules/contacts/include/contacts.php  52) 
modules/contacts/include/contacts.php  53) function get_contact($id)
modules/contacts/include/contacts.php  54) {
modules/contacts/include/contacts.php  55)     $args = array(
modules/contacts/include/contacts.php  56)         "cid" => (int) $_SESSION['customerinfo']['customerno'],
modules/contacts/include/contacts.php  57)         "id" => (int) $id);
modules/contacts/include/contacts.php  58)     $result = db_query("SELECT id, state, lastchange, nic_id, nic_handle, company, name, address, zip, city, country, phone, mobile, fax, email, pgp_id, pgp_key FROM kundendaten.contacts WHERE id=:id AND customer=:cid", $args);
modules/contacts/include/contacts.php  59)     if ($result->rowCount() == 0) {
modules/contacts/include/contacts.php  60)         system_failure("Kontakt nicht gefunden oder gehört nicht diesem Kunden");
modules/contacts/include/contacts.php  61)     }

modules/contacts/include/contacts.php  62)     $contact = $result->fetch();

modules/contacts/include/contacts.php  63)     return $contact;
modules/contacts/include/contacts.php  64) }
modules/contacts/include/contacts.php  65) 

modules/contacts/include/contacts.php  66) function get_contacts() {

modules/handles/include/handles.php    67)     $cid = (int) $_SESSION['customerinfo']['customerno'];

modules/contacts/include/contacts.php  68)     $result = db_query("SELECT id, state, lastchange, nic_id, nic_handle, company, name, address, zip, city, country, phone, mobile, fax, email, pgp_id, pgp_key FROM kundendaten.contacts WHERE (state<>'deleted' OR state IS NULL) AND customer=? ORDER BY COALESCE(company, name)", array($cid));

modules/handles/include/handles.php    69)     $ret = array();

modules/contacts/include/contacts.php  70)     while ($contact = $result->fetch()) {
modules/contacts/include/contacts.php  71)         $ret[$contact['id']] = $contact;

modules/handles/include/handles.php    72)     }
modules/handles/include/handles.php    73)     DEBUG($ret);
modules/handles/include/handles.php    74)     return $ret;
modules/handles/include/handles.php    75) }
modules/handles/include/handles.php    76) 

modules/contacts/include/contacts.php  77) 

modules/contacts/include/contacts.php  78) function is_domainholder($contactid) {
modules/contacts/include/contacts.php  79)     $contactid = (int) $contactid;
modules/contacts/include/contacts.php  80)     $result = db_query("SELECT id FROM kundendaten.domains WHERE owner=? OR admin_c=?", array($contactid, $contactid));
modules/contacts/include/contacts.php  81)     if ($result->rowCount() > 0) {
modules/contacts/include/contacts.php  82)         return true;
modules/contacts/include/contacts.php  83)     }
modules/contacts/include/contacts.php  84)     return false;
modules/contacts/include/contacts.php  85) }
modules/contacts/include/contacts.php  86) 

modules/contacts/include/contacts.php  87) function possible_domainholders() {
modules/contacts/include/contacts.php  88)     $allcontacts = get_contacts();
modules/contacts/include/contacts.php  89)     $ret = array();
modules/contacts/include/contacts.php  90)     foreach ($allcontacts as $id => $c) {

modules/contacts/include/contacts.php  91)         if (possible_domainholder($c)) {

modules/contacts/include/contacts.php  92)             $ret[$id] = $c;
modules/contacts/include/contacts.php  93)         }
modules/contacts/include/contacts.php  94)     }
modules/contacts/include/contacts.php  95)     return $ret;
modules/contacts/include/contacts.php  96) }
modules/contacts/include/contacts.php  97) 

modules/contacts/include/contacts.php  98) function possible_domainholder($c)
modules/contacts/include/contacts.php  99) {
modules/contacts/include/contacts.php 100)     if ($c['name'] && $c['address'] && $c['zip'] && $c['city'] && $c['country'] && $c['phone'] && $c['email']) {
modules/contacts/include/contacts.php 101)         return true;
modules/contacts/include/contacts.php 102)     }
modules/contacts/include/contacts.php 103)     return false;
modules/contacts/include/contacts.php 104) }

modules/contacts/include/contacts.php 105) 

modules/contacts/include/contacts.php 106) function have_mailaddress($email) 
modules/contacts/include/contacts.php 107) {
modules/contacts/include/contacts.php 108)     $cid = (int) $_SESSION['customerinfo']['customerno'];
modules/contacts/include/contacts.php 109)     $result = db_query("SELECT id FROM kundendaten.contacts WHERE customer=? AND email=?", array($cid, $email));
modules/contacts/include/contacts.php 110)     if ($result->rowCount() > 0) {
modules/contacts/include/contacts.php 111)         return true;
modules/contacts/include/contacts.php 112)     }
modules/contacts/include/contacts.php 113)     return false;
modules/contacts/include/contacts.php 114) }
modules/contacts/include/contacts.php 115) 

modules/handles/include/handles.php   116) 

modules/contacts/include/contacts.php 117) function possible_kundenkontakt($c) {
modules/contacts/include/contacts.php 118)     if ($c['name'] && $c['email']) {
modules/contacts/include/contacts.php 119)         return true;
modules/contacts/include/contacts.php 120)     }
modules/contacts/include/contacts.php 121) }
modules/contacts/include/contacts.php 122) 
modules/contacts/include/contacts.php 123) 
modules/contacts/include/contacts.php 124) function set_kundenkontakt($typ, $id) {
modules/contacts/include/contacts.php 125)     if (! $id) {
modules/contacts/include/contacts.php 126)         $id = NULL;
modules/contacts/include/contacts.php 127)     } else {
modules/contacts/include/contacts.php 128)         $id = (int) $id;
modules/contacts/include/contacts.php 129)     }
modules/contacts/include/contacts.php 130)     $args = array(
modules/contacts/include/contacts.php 131)         "kunde" => (int) $_SESSION['customerinfo']['customerno'],
modules/contacts/include/contacts.php 132)         "contact" => $id
modules/contacts/include/contacts.php 133)         );
modules/contacts/include/contacts.php 134)     $field = NULL;
modules/contacts/include/contacts.php 135)     if ($typ == 'kunde') {
modules/contacts/include/contacts.php 136)         $field = 'contact_kunde';
modules/contacts/include/contacts.php 137)     } elseif ($typ == 'extern') {
modules/contacts/include/contacts.php 138)         $field = 'contact_extern';
modules/contacts/include/contacts.php 139)     } elseif ($typ == 'rechnung') {
modules/contacts/include/contacts.php 140)         $field = 'contact_rechnung';
modules/contacts/include/contacts.php 141)     } else {
modules/contacts/include/contacts.php 142)         system_failure("Falscher Typ!");
modules/contacts/include/contacts.php 143)     }
modules/contacts/include/contacts.php 144)     db_query("UPDATE kundendaten.kunden SET ".$field."=:contact WHERE id=:kunde", $args);
modules/contacts/include/contacts.php 145) }
modules/contacts/include/contacts.php 146) 

modules/contacts/include/contacts.php 147) function get_kundenkontakte() {

modules/handles/include/handles.php   148)     $cid = (int) $_SESSION['customerinfo']['customerno'];

modules/contacts/include/contacts.php 149)     $result = db_query("SELECT contact_kunde, contact_extern, contact_rechnung FROM kundendaten.kunden WHERE id=?", array($cid));

modules/handles/include/handles.php   150)     $res = $result->fetch();

modules/contacts/include/contacts.php 151)     $ret = array("kunde" => $res['contact_kunde'],
modules/contacts/include/contacts.php 152)                  "extern" => $res['contact_extern'],
modules/contacts/include/contacts.php 153)                  "rechnung" => $res['contact_rechnung']);

modules/handles/include/handles.php   154)     return $ret;
modules/handles/include/handles.php   155) }
modules/handles/include/handles.php   156) 

modules/contacts/include/contacts.php 157) function save_emailaddress($id, $email) 
modules/contacts/include/contacts.php 158) {

modules/contacts/include/contacts.php 159)     // Speichert eine E-Mail-Adresse direkt, z.B. wenn diese schonmal geprüft wurde

modules/contacts/include/contacts.php 160)     $args = array("cid" => (int) $_SESSION['customerinfo']['customerno'],
modules/contacts/include/contacts.php 161)         "id" => (int) $id,
modules/contacts/include/contacts.php 162)         "email" => $email);
modules/contacts/include/contacts.php 163)     db_query("UPDATE kundendaten.contacts SET email=:email WHERE id=:id AND customer=:cid", $args);    

modules/contacts/include/contacts.php 164) }
modules/contacts/include/contacts.php 165) 
modules/contacts/include/contacts.php 166) function save_contact($c)
modules/contacts/include/contacts.php 167) {

modules/contacts/include/contacts.php 168)     if ($c['nic_id']) {
modules/contacts/include/contacts.php 169)         if (! possible_domainholder($c)) {
modules/contacts/include/contacts.php 170)             system_failure("Sie haben ein Feld geleert, das für die Eigenschaft als Domaininhaber erhalten bleiben muss. Ihre Änderungen wurden nicht gespeichert.");
modules/contacts/include/contacts.php 171)         }
modules/contacts/include/contacts.php 172)     }

modules/contacts/include/contacts.php 173)     for ($i=0;array_key_exists($i, $c);$i++) {
modules/contacts/include/contacts.php 174)         unset($c[$i]);
modules/contacts/include/contacts.php 175)     }
modules/contacts/include/contacts.php 176)     unset($c['state']);
modules/contacts/include/contacts.php 177)     unset($c['lastchange']);
modules/contacts/include/contacts.php 178)     unset($c['email']);
modules/contacts/include/contacts.php 179)     $c['customer'] = (int) $_SESSION['customerinfo']['customerno'];
modules/contacts/include/contacts.php 180)     if ($c['id']) {
modules/contacts/include/contacts.php 181)         // Kontakt bestaht schon, Update

modules/contacts/include/contacts.php 182)         db_query("UPDATE kundendaten.contacts SET nic_id=:nic_id, nic_handle=:nic_handle, company=:company, name=:name, address=:address, zip=:zip, city=:city, country=:country, phone=:phone, mobile=:mobile, fax=:fax, pgp_id=:pgp_id, pgp_key=:pgp_key WHERE id=:id AND customer=:customer", $c);

modules/contacts/include/contacts.php 183)     } else {
modules/contacts/include/contacts.php 184)         unset($c['id']);
modules/contacts/include/contacts.php 185)         // Neu anlegen

modules/contacts/include/contacts.php 186)         db_query("INSERT INTO kundendaten.contacts (nic_id, nic_handle, customer, company, name, address, zip, city, country, phone, mobile, fax, pgp_id, pgp_key) VALUES (:nic_id, :nic_handle, :customer, :company, :name, :address, :zip, :city, :country, :phone, :mobile, :fax, :pgp_id, :pgp_key)", $c);

modules/contacts/include/contacts.php 187)         $c['id'] = db_insert_id();
modules/contacts/include/contacts.php 188)     }
modules/contacts/include/contacts.php 189)     return $c['id'];
modules/contacts/include/contacts.php 190) }
modules/contacts/include/contacts.php 191) 
modules/contacts/include/contacts.php 192) 
modules/contacts/include/contacts.php 193) function send_emailchange_token($id, $email)
modules/contacts/include/contacts.php 194) {
modules/contacts/include/contacts.php 195)     if (! check_emailaddr($email)) {
modules/contacts/include/contacts.php 196)         system_falure("Die E-Mail-Adresse scheint nicht gültig zu sein.");
modules/contacts/include/contacts.php 197)     }
modules/contacts/include/contacts.php 198)     $args = array("id" => (int) $id,
modules/contacts/include/contacts.php 199)         "email" => $email,
modules/contacts/include/contacts.php 200)         "token" => random_string(20));
modules/contacts/include/contacts.php 201) 
modules/contacts/include/contacts.php 202)     db_query("INSERT INTO kundendaten.mailaddress_token (token, expire, contact, email) VALUES (:token, NOW() + INTERVAL 1 DAY, :id, :email)" , $args);
modules/contacts/include/contacts.php 203)     DEBUG('Token erzeugt: '.print_r($args, true));
modules/contacts/include/contacts.php 204)     $message = 'Diese E-Mail-Adresse wurde angegeben als möglicher Domaininhaber oder Kundenkontakt bei schokokeks.org Hosting.
modules/contacts/include/contacts.php 205) 
modules/contacts/include/contacts.php 206) Bitte bestätigen Sie mit einem Klick auf den nachfolgenden Link, dass diese E-Mail-Adresse funktioniert und verwendet werden soll:
modules/contacts/include/contacts.php 207) 
modules/contacts/include/contacts.php 208)     '.config('webinterface_url').'/verify'.$args['token'].'
modules/contacts/include/contacts.php 209) 
modules/contacts/include/contacts.php 210) Wenn Sie diesen Link nicht innerhalb von 24 Stunden abrufen, wird Ihre Adresse gelöscht und nicht verwendet.
modules/contacts/include/contacts.php 211) Sollten Sie mit der Verwendung Ihrer E-Mail-Adresse nicht einverstanden sein, so ignorieren Sie daher bitte diese Nachricht oder teilen Sie uns dies mit.
modules/contacts/include/contacts.php 212) 
modules/contacts/include/contacts.php 213) -- 
modules/contacts/include/contacts.php 214) schokokeks.org GbR, Bernd Wurst, Johannes Böck
modules/contacts/include/contacts.php 215) Köchersberg 32, 71540 Murrhardt
modules/contacts/include/contacts.php 216) 
modules/contacts/include/contacts.php 217) https://schokokeks.org
modules/contacts/include/contacts.php 218) ';
modules/contacts/include/contacts.php 219)     # send welcome message
modules/contacts/include/contacts.php 220)     mail($email, '=?UTF-8?Q?Best=C3=A4tigung_Ihrer_E-Mail-Adresse?=', $message, "X-schokokeks-org-message: verify\nFrom: ".config('company_name').' <'.config('adminmail').">\nMIME-Version: 1.0\nContent-Type: text/plain; charset=UTF-8\n");
modules/contacts/include/contacts.php 221)  
modules/contacts/include/contacts.php 222) }

modules/handles/include/handles.php   223) 

modules/contacts/include/contacts.php 224) function update_pending($contactid) {
modules/contacts/include/contacts.php 225)     $contactid = (int) $contactid;
modules/contacts/include/contacts.php 226)     $result = db_query("SELECT email FROM kundendaten.mailaddress_token WHERE contact=?", array($contactid));

modules/handles/include/handles.php   227)     if ($result->rowCount() == 0) {
modules/handles/include/handles.php   228)         return NULL;
modules/handles/include/handles.php   229)     }
modules/handles/include/handles.php   230)     $res = $result->fetch();
modules/handles/include/handles.php   231)     return $res['email'];
modules/handles/include/handles.php   232) }
modules/handles/include/handles.php   233) 
modules/handles/include/handles.php   234) 
modules/handles/include/handles.php   235) 

modules/contacts/include/contacts.php 236) function delete_contact($id) {
modules/contacts/include/contacts.php 237)     $c = get_contact($id);

modules/contacts/include/contacts.php 238)     $kundenkontakte = get_kundenkontakte();
modules/contacts/include/contacts.php 239)     if ($id == $kundenkontakte['kunde']) {
modules/contacts/include/contacts.php 240)         system_failure("Die Stamm-Adresse kann nicht gelöscht werden, bitte erst eine andere Adresse als Stamm-Adresse festlegen!");
modules/contacts/include/contacts.php 241)     }
modules/contacts/include/contacts.php 242)     if ($id == $kundenkontakte['rechnung']) {
modules/contacts/include/contacts.php 243)         set_kundenkontakt('rechnung', NULL);
modules/contacts/include/contacts.php 244)     }
modules/contacts/include/contacts.php 245)     if ($id == $kundenkontakte['extern']) {
modules/contacts/include/contacts.php 246)         set_kundenkontakt('extern', NULL);
modules/contacts/include/contacts.php 247)     }

modules/contacts/include/contacts.php 248)     if ($c['nic_id']) {
modules/contacts/include/contacts.php 249)         // Lösche bei der Registry
modules/contacts/include/contacts.php 250)         $c['state'] = 'deleted';
modules/contacts/include/contacts.php 251)         upload_contact($c);
modules/contacts/include/contacts.php 252)     }
modules/contacts/include/contacts.php 253)     db_query("UPDATE kundendaten.contacts SET state='deleted' WHERE id=?", array($c['id']));
modules/contacts/include/contacts.php 254) }
modules/contacts/include/contacts.php 255) 

modules/contacts/include/contacts.php 256) 
modules/contacts/include/contacts.php 257) function domainlist_by_contact($c) {
modules/contacts/include/contacts.php 258)     $result = db_query("SELECT id FROM kundendaten.domains WHERE owner=? OR admin_c=?", array($c['id'], $c['id']));
modules/contacts/include/contacts.php 259)     $ret = array();
modules/contacts/include/contacts.php 260)     while ($domain = $result->fetch()) {
modules/contacts/include/contacts.php 261)         $ret[] = new Domain( (int) $domain['id'] );
modules/contacts/include/contacts.php 262)     }
modules/contacts/include/contacts.php 263)     return $ret;
modules/contacts/include/contacts.php 264) }
modules/contacts/include/contacts.php 265) 
modules/contacts/include/contacts.php 266) 

modules/contacts/include/contacts.php 267) function contact_as_string($contact)

modules/contacts/include/contacts.php 268) {
modules/contacts/include/contacts.php 269)     $adresse = nl2br("\n".filter_input_general($contact['address'])."\n".filter_input_general($contact['country']).'-'.filter_input_general($contact['zip']).' '.filter_input_general($contact['city']));
modules/contacts/include/contacts.php 270)     if (! $contact['city']) {
modules/contacts/include/contacts.php 271)         $adresse = '';
modules/contacts/include/contacts.php 272)     }
modules/contacts/include/contacts.php 273)     $name = filter_input_general($contact['name']);
modules/contacts/include/contacts.php 274)     if ($contact['company']) {
modules/contacts/include/contacts.php 275)         $name = filter_input_general($contact['company'])."<br />".filter_input_general($contact['name']);
modules/contacts/include/contacts.php 276)     }
modules/contacts/include/contacts.php 277)     $email = filter_input_general($contact['email']);
modules/contacts/include/contacts.php 278)     $new_email = update_pending($contact['id']);
modules/contacts/include/contacts.php 279)     if ($new_email) {
modules/contacts/include/contacts.php 280)         $email = "<strike>$email</strike><br/>".filter_input_general($new_email).footnote('Die E-Mail-Adresse wurde noch nicht bestätigt');
modules/contacts/include/contacts.php 281)     }
modules/contacts/include/contacts.php 282)     $email = implode("<br>\n", array_filter(array($email, filter_input_general($contact['phone']), filter_input_general($contact['fax']), filter_input_general($contact['mobile']))));
modules/contacts/include/contacts.php 283)  
modules/contacts/include/contacts.php 284) 

modules/contacts/include/contacts.php 285)     $contact_string = "<p class=\"contact-id\">#{$contact['id']}</p><p class=\"contact-address\"><strong>$name</strong>$adresse</p><p class=\"contact-contact\">$email</p>";
modules/contacts/include/contacts.php 286)     return $contact_string;
modules/contacts/include/contacts.php 287) }
modules/contacts/include/contacts.php 288) 
modules/contacts/include/contacts.php 289) function display_contact($contact, $additional_html='', $cssclass='')
modules/contacts/include/contacts.php 290) {
modules/contacts/include/contacts.php 291)     $html = contact_as_string($contact);
modules/contacts/include/contacts.php 292)     $contact_string = "<div class=\"contact {$cssclass}\" id=\"contact-{$contact['id']}\">{$html}{$additional_html}</div>";