webinterface.git

@@ -70,7 +70,7 @@ function invoice_items($id)

 function upcoming_items()

 {

   $c = (int) $_SESSION['customerinfo']['customerno'];

-  $result = db_query("SELECT anzahl, beschreibung, startdatum, enddatum, betrag, einheit, brutto, mwst FROM kundendaten.upcoming_items WHERE kunde=? ORDER BY startdatum ASC", array($c));

+  $result = db_query("SELECT quelle, id, anzahl, beschreibung, startdatum, enddatum, betrag, einheit, brutto, mwst FROM kundendaten.upcoming_items WHERE kunde=? ORDER BY startdatum ASC", array($c));

   $ret = array();

   while($line = $result->fetch())

 	  array_push($ret, $line);

@@ -290,4 +290,67 @@ function find_iban($blz, $kto)

 }

+function get_customerquota()

+{

+  $cid = (int) $_SESSION['customerinfo']['customerno'];

+  $result = db_query("SELECT quota FROM system.customerquota WHERE cid=:cid", array(":cid" => $cid));

+  $data = $result->fetch();

+  return $data["quota"];

+}

+

+function save_more_storage($items, $storage) {

+  $cid = (int) $_SESSION['customerinfo']['customerno'];

+  

+  $queries = array();  

+

+  if ($storage < 1024 || $storage > 10240) {

+    input_error('Speicherplatz nicht im erwarteten Bereich');

+  }

+  $oldcustomerquota = get_customerquota();

+  if ($oldcustomerquota > 20480) {

+    # Über 20 GB soll die Automatik nichts machen

+    system_failure("Ihr Speicherplatz kann über diese Funktion nicht weiter erhöht werden. Bitte wenden Sie sich an die Administratoren.");

+  }

+  $result = db_query("SELECT quota FROM system.customerquota WHERE lastchange > CURDATE()");

+  if ($result->rowcount() > 0) {

+    system_failure("Ihr Speicherplatz wurde heute bereits verändert. Sie können dies nur einmal am Tag machen.");

+  }

+

+  $queries[] = array("UPDATE system.customerquota SET quota=quota+:storage WHERE cid=:cid", array(":storage" => $storage, ":cid" => $cid));

+

+  foreach ($items as $data) {

+    if ($data['anzahl'] == 0) {

+      continue;

+    }

+    $data['kunde'] = $cid;

+    $data['notizen'] = 'Bestellt via Webinterface';

+    if (!isset($data['anzahl']) ||

+        !isset($data['beschreibung']) ||

+        !isset($data['datum']) ||

+        !array_key_exists('kuendigungsdatum', $data) ||

+        !isset($data['betrag']) ||

+        !isset($data['monate'])) {

+      DEBUG($data);

+      input_error("Ungültige Daten");

+      return;

+    }

+ 

+    $param = array();

+    foreach ($data as $k => $v) {

+      $param[':'.$k] = $v;

+    }

+

+    $queries[] = array("INSERT INTO kundendaten.leistungen (kunde,periodisch,beschreibung,datum,kuendigungsdatum,betrag,brutto,monate,anzahl,notizen) VALUES ".

+                       "(:kunde,1,:beschreibung,:datum,:kuendigungsdatum,:betrag,:brutto,:monate,:anzahl,:notizen)", $param);

+  }

+

+  if (count($queries) < 2) {

+    system_failure("irgendwas stimmt jetzt nicht");

+  }

+  

+  foreach ($queries as $q) {

+    db_query($q[0], $q[1]);

+  }

+}

+

 ?>

@@ -0,0 +1,8 @@

+$(function() {

+  $(".buttonset input[type=submit]").remove();

+  $(".buttonset").buttonset();

+  

+  $(".buttonset input").click( function() {

+    $(this).closest("form").submit();

+    });

+  });

@@ -0,0 +1,168 @@

+<?php

+/*

+This file belongs to the Webinterface of schokokeks.org Hosting

+

+Written 2008-2014 by schokokeks.org Hosting, namely

+  Bernd Wurst <bernd@schokokeks.org>

+  Hanno Böck <hanno@schokokeks.org>

+

+To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.

+

+You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see 

+http://creativecommons.org/publicdomain/zero/1.0/

+

+Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.

+*/

+

+require_once('session/start.php');

+require_once('inc/icons.php');

+require_once('inc/jquery.php');

+javascript('more_storage.js');

+

+require_once('invoice.php');

+

+require_role(ROLE_CUSTOMER);

+

+$_SESSION['more_storage_section'] = 'invoice_current';

+if (isset($_GET['section'])) {

+  $_SESSION['more_storage_section'] = $_GET['section'];

+}

+$section = $_SESSION['more_storage_section'];

+

+title('Zusätzlichen Speicherplatz buchen');

+

+$upcoming = upcoming_items();

+$hosting = NULL;

+foreach ($upcoming as $item) {

+  if ($item['quelle'] == 'hosting') {

+    $hosting = $item;

+    break;

+  }

+}

+if (!$hosting) {

+  system_failure("Die Abrechnung für das normale Hosting konnte nicht ermittelt werden. Daher können Sie diese Funktion leider nicht benutzen. Wenden Sie sich bitte an die Administratoren um mehr Speicherplatz zu bestellen.");

+}

+if ($hosting['brutto'] == 0) {

+  system_failure("Ihr Konto wird mit Nettopreisen abgerechnet. Bitte wenden Sie sich an den Support.");

+}

+

+$customerquota = get_customerquota();

+

+$count = 1024;

+if (isset($_POST['count']) && (int) $_POST['count'] > 0) {

+  $count = (int) $_POST['count'];

+}

+

+output("<p>Ihr aktuell zugeteilter Speicherplatz (ggf. inklusive Mitbenutzer) beträgt <strong>${customerquota} MB</strong>. Sie können weiteren Speicherplatz hinzubuchen.</p>");

+

+$checked = '';

+if ($count == 1024) {

+  $checked = 'checked="checked" ';

+}

+$form = '<p class="buttonset"><input '.$checked.'type="radio" name="count" value="1024" id="count-1" /><label for="count-1">Zusätzlich <strong>1 GB</strong>, insgesamt also '.($customerquota+1024).' MB</label>';

+if ($count == 2048) {

+  $checked = 'checked="checked" ';

+} else {

+  $checked = '';

+}

+$form .= '<input '.$checked.'type="radio" name="count" value="2048" id="count-2" /><label for="count-2">Zusätzlich <strong>2 GB</strong>, insgesamt also '.($customerquota+2048).' MB</label>';

+if ($count == 5120) {

+  $checked = 'checked="checked" ';

+} else {

+  $checked = '';

+}

+$form .= '<input '.$checked.'type="radio" name="count" value="5120" id="count-5" /><label for="count-5">Zusätzlich <strong>5 GB</strong>, insgesamt also '.($customerquota+5120).' MB</label>';

+

+$form .= '<input type="submit" value="Wählen" /></p>';

+output(html_form("more_storage_selection", "more_storage", "", $form));

+

+$new_item = $hosting;

+unset($new_item['quelle']);

+unset($new_item['id']);

+$gb = $count/1024;

+$new_item['beschreibung'] = 'Erweiterung Speicherplatz um '.$gb.' GB (Auftrag vom '.date('d.m.Y').')';

+$new_item['betrag'] = $gb;

+

+$startdate = $new_item['startdatum'];

+$diff = date_diff(date_create("now"), date_create($startdate), true);

+DEBUG('date_diff(now, '.$startdate.') => '.$diff->format('%y Year %m Month %d Day'));

+$months = $diff->format("%m");

+

+$stub_startdate = date_create($startdate);

+date_sub($stub_startdate, date_interval_create_from_date_string($months.' months'));

+$stub_enddate = date_create($startdate);

+date_sub($stub_enddate, date_interval_create_from_date_string('1 day'));

+

+$stub = $new_item;

+$stub['startdatum'] = date_format($stub_startdate, 'Y-m-d');

+$stub['enddatum'] = date_format($stub_enddate, 'Y-m-d');

+$stub['anzahl'] = $months;

+$stub['monate'] = $months;

+

+$items = array();

+$items[] = $stub;

+$items[] = $new_item;

+

+output('<p>Die Abrechnung erfolgt mit Ihrer nächsten turnusgemäßen Abrechnung und wird mit folgenden Rechnungsposten vorgemerkt.</p>');

+output('<table><tr><th>Anzahl</th><th>Beschreibung</th><th>Zeitraum</th><th>Einzelpreis</th><th>Gesamtbetrag</th></tr>');

+$counter = 0;

+foreach($items AS $item)

+{

+  $counter++;

+  if ($counter == 1 && ($item['anzahl'] > 0)) {

+    output("<tr><td colspan=\"5\" style=\"border: none;\"><em>Einmaliger Posten:</em></td></tr>");

+  }

+  elseif ($counter == 2) {

+    output("<tr><td colspan=\"5\" style=\"border: none;\"><em>Künftiger regelmäßiger Posten:</em></td></tr>");

+  }

+  if ($item['anzahl'] == 0) {

+    continue;

+  }

+	$desc = $item['startdatum'];

+	if ($item['enddatum'] != NULL)

+		$desc = $item['startdatum'].' - '.$item['enddatum'];

+	$epreis = $item['betrag'];

+	if ($item['brutto'] == 0)

+		$epreis = $epreis * (1 + ($item['mwst'] / 100));

+	$gesamt = round($epreis * $item['anzahl'], 2);

+	$epreis = round($epreis, 2);

+  $einheit = ($item['einheit'] ? $item['einheit'] : '');

+	output("<tr><td>{$item['anzahl']} {$einheit}</td>");

+  output("<td>{$item['beschreibung']}</td><td>{$desc}</td>");

+	output("<td>{$epreis} €</td><td>{$gesamt} €</td></tr>\n");

+}

+output('</table>');

+

+output('<p>Wir behalten uns vor, diese Rechnungsposten mit anderen sinngleichen Posten zusammen zu führen.</p>');

+

+$handle = bin2hex(random_bytes(10));

+

+$_SESSION['more_storage_handle'] = $handle;

+$_SESSION['more_storage_items'] = $items;

+$_SESSION['more_storage_count'] = $count;

+

+$form = '';

+

+if (have_module('systemuser')) {

+  include('modules/systemuser/include/useraccounts.php');

+  $useraccounts = list_useraccounts();

+

+  if (count($useraccounts) == 1) {

+    $form .= '<input type="hidden" name="more_storage_user" value="'.$useraccounts[0]['uid'].'" />';

+  } else {

+    $choices = array('' => 'Nicht zuweisen');

+    foreach ($useraccounts as $u) {

+      $choices[$u['uid']] = "Benutzer ${u['username']} vergrößern";

+    }

+    $form .= '<p>Wie soll der zusätzliche Speicherplatz verwendet werden?</p><p>'.html_select('more_storage_user', $choices, $_SESSION['userinfo']['uid']).'</p>';

+  }

+}

+

+$form .= '<p>

+<input type="hidden" name="more_storage_handle" value="'.$handle.'" />

+<input type="submit" value="Jetzt zahlungspflichtig bestellen" /><p>';

+

+

+output(html_form("more_storage", "more_storage_save", "action=more_storage", $form));

+

+?>

@@ -0,0 +1,109 @@

+<?php

+/*

+This file belongs to the Webinterface of schokokeks.org Hosting

+

+Written 2008-2014 by schokokeks.org Hosting, namely

+  Bernd Wurst <bernd@schokokeks.org>

+  Hanno Böck <hanno@schokokeks.org>

+

+To the extent possible under law, the author(s) have dedicated all copyright and related and neighboring rights to this software to the public domain worldwide. This software is distributed without any warranty.

+

+You should have received a copy of the CC0 Public Domain Dedication along with this software. If not, see 

+http://creativecommons.org/publicdomain/zero/1.0/

+

+Nevertheless, in case you use a significant part of this code, we ask (but not require, see the license) that you keep the authors' names in place and return your changes to the public. We would be especially happy if you tell us what you're going to do with this code.

+*/

+

+require_once('session/start.php');

+

+require_once('invoice.php');

+

+require_role(ROLE_CUSTOMER);

+

+$section = $_SESSION['more_storage_section'];

+

+title('Zusätzlichen Speicherplatz buchen');

+

+

+check_form_token('more_storage');

+

+$valid = false;

+if (isset($_POST['more_storage_handle']) && isset($_SESSION['more_storage_handle']) &&

+  $_POST['more_storage_handle'] == $_SESSION['more_storage_handle']) {

+  $valid = true;

+}

+if (!$valid) {

+  system_failure("Ungültige Session");

+}

+

+if (!isset($_SESSION['more_storage_items']) || !isset($_SESSION['more_storage_count'])) {

+  system_failure('Keine Daten');

+}

+

+$items = $_SESSION['more_storage_items'];

+$count = $_SESSION['more_storage_count'];

+

+if (count($items) < 2) {

+  system_failure("Ungültige Daten");

+}

+

+$stub = $items[0];

+if ($stub['anzahl'] == 0) {

+  $stub = NULL;

+}

+$regular = $items[1];

+

+$clean_items = array();

+

+if ($stub) {

+  $i = array();

+  $i['beschreibung'] = $stub['beschreibung'];

+  $i['datum'] = $stub['startdatum'];

+  $i['kuendigungsdatum'] = $stub['enddatum'];

+  $i['betrag'] = $stub['betrag'];

+  $i['brutto'] = $stub['brutto'];

+  $i['monate'] = $stub['anzahl'];

+  $i['anzahl'] = $stub['anzahl'];

+  $clean_items[] = $i;

+}

+

+$i = array();

+$i['beschreibung'] = $regular['beschreibung'];

+$i['datum'] = $regular['startdatum'];

+$i['kuendigungsdatum'] = NULL;

+$i['betrag'] = $regular['betrag'];

+$i['brutto'] = $regular['brutto'];

+$i['monate'] = $regular['anzahl'];

+$i['anzahl'] = $regular['anzahl'];

+$clean_items[] = $i;

+

+save_more_storage($clean_items, $count);

+

+if (have_module('systemuser')) {

+  require('modules/systemuser/include/useraccounts.php');

+  $useraccounts = list_useraccounts();

+  if (isset($_POST['more_storage_user'])) {

+    foreach ($useraccounts as $u) {

+      if ($u['uid'] == $_POST['more_storage_user']) {

+        $account = get_account_details($u['uid']);

+        $account['quota'] = $account['quota'] + $count;

+        set_account_details($account);

+      }

+    }

+  }

+  unset($_SESSION['more_storage_user']);

+}

+

+

+unset($_SESSION['more_storage_handle']);

+unset($_SESSION['more_storage_items']);

+unset($_SESSION['more_storage_count']);

+

+if (isset($_SESSION['more_storage_section'])) {

+  DEBUG('Weiterleitung zu: '.$prefix.'go/'.str_replace('_', '/', $_SESSION['more_storage_section']));

+  redirect($prefix.'go/'.str_replace('_', '/', $_SESSION['more_storage_section']));

+} else {

+  redirect($prefix.'go/invoice/current');

+}

+

+?>

@@ -74,6 +75,15 @@ else

     output("</td></tr>\n");

   }

   output("</table><p><sup>*</sup>) Die Werte für den verbrauchten Speicherplatz werden periodisch eingelesen und hier erst verspätet angezeigt!</p>");

+  $customerquota = get_customer_quota();

+  $freequota = $customerquota['max'] - $customerquota['assigned'];

+  if ($freequota > 10) { // Gewisse Unschärfe

+    output('<p class="warning"><b>Hinweis:</b><br/>Ihnen steht mehr Speicherplatz zur Verfügung als Ihren Benutzeraccounts zugewiesen ist. Sie können den Speicherplatz der einzelnen Benutzerkonten noch erhöhen.</p>');

+  } else {

+    if (have_module('invoice')) {

+      addnew('../invoice/more_storage?section=systemuser_account', 'Mehr Speicherplatz bestellen');

+    }

+  }

 }

@@ -45,7 +45,7 @@ function primary_useraccount()

 function available_shells()

 {

-  $result = db_query("SELECT path, name FROM system.shells WHERE usable=1");

+  $result = db_query("SELECT path, name FROM system.shells WHERE usable=?", array(1));

   $ret = array();

   while ($s = $result->fetch())

   {

@@ -27,6 +27,7 @@ $acc = get_account_details($_SESSION['userinfo']['uid'], $_SESSION['userinfo']['

 $usedquota = get_used_quota($acc['uid']);

 $quota = array();

 $multiserver = count($usedquota) > 1;

+$need_more_storage = false;

 foreach ($usedquota as $q)

 {

       $mailbar = '';

@@ -40,6 +41,9 @@ foreach ($usedquota as $q)

       }  

       $percent = round(( ($q["systemquota_used"]+$q["mailquota"]) / $q["systemquota"] ) * 100 );

+      if ($percent > 90) {

+        $need_more_storage = true;

+      }

       $color = ( $percent > 99 ? 'red' : ($percent > 80 ? "yellow" : "green" ));

       $width = 2 * min($percent, 100) - $mailwidth;

@@ -62,6 +66,9 @@ output("<h5>Stammdaten</h5>

 ");

 output("</div>\n");

 output("<h5>Speicherplatz</h5><div style=\"margin-left: 2em;\">{$quotastring}</div>");

+if (have_module('invoice') && $need_more_storage) {

+   addnew('../invoice/more_storage?section='.$section, 'Mehr Speicherplatz bestellen');

+}

 output("<p>Die Werte für den verbrauchten Speicherplatz werden periodisch eingelesen und hier verzögert angezeigt!</p>");