Lines 31-38
use Koha::Reviews;
Link Here
|
31 |
|
31 |
|
32 |
my $query = CGI->new; |
32 |
my $query = CGI->new; |
33 |
my $biblionumber = $query->param('biblionumber'); |
33 |
my $biblionumber = $query->param('biblionumber'); |
34 |
my $review = $query->param('review'); # if defined submit |
34 |
my $review = $query->param('review'); # if defined submit |
35 |
my $reviewid = $query->param('reviewid'); # if defined edit |
35 |
my $reviewid = $query->param('reviewid'); # if defined edit |
36 |
my ( $template, $borrowernumber, $cookie ) = get_template_and_user( |
36 |
my ( $template, $borrowernumber, $cookie ) = get_template_and_user( |
37 |
{ |
37 |
{ |
38 |
template_name => 'opac-review.tt', |
38 |
template_name => 'opac-review.tt', |
Lines 47-93
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
Link Here
|
47 |
my ( $clean, @errors, $savedreview, $affectedreview ); |
47 |
my ( $clean, @errors, $savedreview, $affectedreview ); |
48 |
|
48 |
|
49 |
my $submitting = ( defined $review && $review ne q{} ) ? 1 : 0; |
49 |
my $submitting = ( defined $review && $review ne q{} ) ? 1 : 0; |
50 |
my $editing = ( defined $reviewid ) ? 1: 0; |
50 |
my $editing = ( defined $reviewid ) ? 1 : 0; |
51 |
|
51 |
|
52 |
my $biblio = GetBiblioData($biblionumber); |
52 |
my $biblio = GetBiblioData($biblionumber); |
53 |
|
53 |
|
54 |
if( !$biblio ) { |
54 |
if ( !$biblio ) { |
55 |
push @errors, { nobiblio => 1 }; |
55 |
push @errors, { nobiblio => 1 }; |
56 |
} elsif( $reviewid ) { # edit existing one, check on creator |
56 |
} |
57 |
$savedreview = Koha::Reviews->search({ reviewid => $reviewid, borrowernumber => $borrowernumber })->next; |
57 |
elsif ($reviewid) { # edit existing one, check on creator |
58 |
if (!$savedreview) { push @errors, { unauthorized => 1 } }; |
58 |
$savedreview = Koha::Reviews->search( |
59 |
} else { # this check prevents adding multiple comments |
59 |
{ reviewid => $reviewid, borrowernumber => $borrowernumber } )->next; |
60 |
# FIXME biblionumber, borrowernumber should be a unique key of reviews |
60 |
if ( !$savedreview ) { push @errors, { unauthorized => 1 } } |
61 |
$savedreview = Koha::Reviews->search({ biblionumber => $biblionumber, borrowernumber => $borrowernumber })->next; |
61 |
} |
62 |
$review = $savedreview? $savedreview->review: $review; |
62 |
else { # this check prevents adding multiple comments |
|
|
63 |
# FIXME biblionumber, borrowernumber should be a unique key of reviews |
64 |
$savedreview = Koha::Reviews->search( |
65 |
{ biblionumber => $biblionumber, borrowernumber => $borrowernumber } ) |
66 |
->next; |
67 |
$review = $savedreview ? $savedreview->review : $review; |
63 |
} |
68 |
} |
64 |
|
69 |
|
65 |
if( !@errors && $submitting ) { |
70 |
if ( !@errors && $submitting ) { |
66 |
if ($review !~ /\S/xsm) { |
71 |
if ( $review !~ /\S/xsm ) { |
67 |
push @errors, {empty=>1}; |
72 |
push @errors, { empty => 1 }; |
68 |
} else { |
73 |
} |
|
|
74 |
else { |
69 |
$clean = C4::Scrubber->new('comment')->scrub($review); |
75 |
$clean = C4::Scrubber->new('comment')->scrub($review); |
70 |
if ($clean !~ /\S/xsm) { |
76 |
if ( $clean !~ /\S/xsm ) { |
71 |
push @errors, {scrubbed_all=>1}; |
77 |
push @errors, { scrubbed_all => 1 }; |
72 |
} else { |
78 |
} |
73 |
if ($clean ne $review) { |
79 |
else { |
74 |
push @errors, {scrubbed=>$clean}; |
80 |
if ( $clean ne $review ) { |
|
|
81 |
push @errors, { scrubbed => $clean }; |
75 |
} |
82 |
} |
76 |
my $js_ok_review = $clean; |
83 |
my $js_ok_review = $clean; |
77 |
$js_ok_review =~ s/"/"/gx; # probably redundant w/ TMPL ESCAPE=JS |
84 |
$js_ok_review =~ |
78 |
$template->param(clean_review=>$js_ok_review); |
85 |
s/"/"/gx; # probably redundant w/ TMPL ESCAPE=JS |
|
|
86 |
$template->param( clean_review => $js_ok_review ); |
79 |
if ($editing) { |
87 |
if ($editing) { |
80 |
my $updatedreview = $savedreview->set( |
88 |
my $updatedreview = $savedreview->set( |
81 |
{ |
89 |
{ |
82 |
review => $clean, |
90 |
review => $clean, |
83 |
approved => 0, |
91 |
approved => 0, |
84 |
datereviewed => dt_from_string |
92 |
datereviewed => dt_from_string |
85 |
} |
93 |
} |
86 |
)->store; |
94 |
)->store; |
87 |
$affectedreview = $updatedreview; |
95 |
$affectedreview = $updatedreview; |
88 |
} else { |
96 |
} |
|
|
97 |
else { |
89 |
my $newreview = Koha::Review->new( |
98 |
my $newreview = Koha::Review->new( |
90 |
{ biblionumber => $biblionumber, |
99 |
{ |
|
|
100 |
biblionumber => $biblionumber, |
91 |
borrowernumber => $borrowernumber, |
101 |
borrowernumber => $borrowernumber, |
92 |
review => $clean, |
102 |
review => $clean, |
93 |
} |
103 |
} |
Lines 96-114
if( !@errors && $submitting ) {
Link Here
|
96 |
$affectedreview = $newreview; |
106 |
$affectedreview = $newreview; |
97 |
} |
107 |
} |
98 |
if ($reviewid) { |
108 |
if ($reviewid) { |
99 |
$affectedreview->SendReviewAlert({ |
109 |
$affectedreview->SendReviewAlert( |
100 |
'borrowernumber' => $borrowernumber, |
110 |
{ |
101 |
'reviewid' => $reviewid, |
111 |
'borrowernumber' => $borrowernumber, |
102 |
'biblionumber' => $biblionumber |
112 |
'reviewid' => $reviewid, |
103 |
}); |
113 |
'biblionumber' => $biblionumber |
|
|
114 |
} |
115 |
); |
104 |
} |
116 |
} |
105 |
|
117 |
|
106 |
if (@errors = 0){ $template->param(WINDOW_CLOSE=>1); } |
118 |
if ( @errors = 0 ) { $template->param( WINDOW_CLOSE => 1 ); } |
107 |
} |
119 |
} |
108 |
} |
120 |
} |
109 |
} |
121 |
} |
110 |
(@errors ) and $template->param( ERRORS=>\@errors); |
122 |
(@errors) and $template->param( ERRORS => \@errors ); |
111 |
($cgi_debug) and $template->param(cgi_debug=>1 ); |
123 |
($cgi_debug) and $template->param( cgi_debug => 1 ); |
112 |
$review = $clean; |
124 |
$review = $clean; |
113 |
if ($savedreview) { $review ||= $savedreview->review; } |
125 |
if ($savedreview) { $review ||= $savedreview->review; } |
114 |
$template->param( |
126 |
$template->param( |
115 |
- |
|
|