object_id]);
$r = db_fetch_row($t);
$f = $r[0]==''?$sf->object_id:$r[0];
$l = $r[1];
if($r[2] != 1){ //-- not readonly
$s = 'SELECT sob_all_id AS id, sob_all_label AS label, sob_all_validate AS validate FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = ? '; //-- get Objects
$t = nuRunQuery($s, [$f]);
while($r = db_fetch_object($t)){
$a[$r->id] = $r->validate;
$L[$r->id] = $r->label;
}
for($i = 0 ; $i < count($sf->rows) ; $i++){
for($I = 1 ; $I < count($sf->fields) ; $I++){
$fld = $sf->fields[$I];
$val = $a[$fld];
$label = '' . $L[$fld] . '';
$notDeleted = $sf->deleted[$i] == 0;
$slabel = $l == '' ? '' : "($l)";
$noz = $i + 1;
if($val == 1){ //-- no blanks
if($sf->rows[$i][$I] == '' and $notDeleted){
if($d == 0){
nuDisplayError("$label " . nuTranslate('cannot be left blank'));
}else{
//nuDisplayError("$label on row $noz " . nuTranslate('cannot be left blank') . " $slabel");
nuDisplayError("$label ".nuTranslate('on row'). " " .$noz. " " . nuTranslate('cannot be left blank') . " $slabel");
}
}
}
if($val == 2){ //-- no duplicates
$dupe = nuDuplicate($sf, $i, $I);
if($dupe and $notDeleted){
if($d == 0){
//nuDisplayError("$label has a duplicate");
nuDisplayError("$label " . nuTranslate('has a duplicate'));
}else{
//nuDisplayError("$label on row $noz has a duplicate $slabel");
nuDisplayError("$label ".nuTranslate('on row'). " " .$noz. " ". nuTranslate('has a duplicate') . " $slabel");
}
}
}
}
}
}
}
}
function nuCheckAccessLevel($data){
$u = $_POST['nuHash']['USER_GROUP_ID'];
$f = $data->object_id;
$a = $data->action;
if($u == ''){ //-- globeadmin
return;
}
$s = "SELECT * FROM zzzzsys_access_form WHERE slf_zzzzsys_access_id = ? AND slf_zzzzsys_form_id = ?";
$t = nuRunQuery($s, [$u, $f]);
$r = db_fetch_object($t);
if($a == 'save' and $r->slf_save_button != 1){
nuDisplayError("Save is disabled for this Access Level");
}
if($a == 'delete' and $r->slf_delete_button != 1){
nuDisplayError("Delete is disabled for this Access Level");
}
}
function nuDuplicate($S, $R, $F){
$f = $S->fields[$F];
$i = $S->rows[$R][0];
$v = $S->rows[$R][$F];
$sql = "SELECT $S->primary_key FROM $S->table WHERE $f = ? AND $S->primary_key != ? ";
$t = nuRunQuery($sql, [$v, $i]);
$r = db_num_rows($t);
return $r > 0;
}
function nuUpdateDatabase(){
if($_SESSION['nubuilder_session_data']['IsDemo']){
nuDisplayError('Not available in the Demo...');
return;
}
nuValidateSubforms();
$nudata = $_POST['nuHash']['nuFORMdata'];
$nuMainID = $_POST['nuHash']['record_id'];
$form_type = nuGetFormProperties($_POST['nuHash']['form_id'])->sfo_type;
$nuDelAll = $_POST['nuHash']['deleteAll'];
$nuMainTable = $nudata[0]->table;
$EFid = $nudata[0]->object_id;
$cts = nuGetJSONData('clientTableSchema');
$user = $_POST['nuHash']['USER_ID'];
for($d = 0 ; $d < count($nudata) ; $d++){
$sf = $nudata[$d];
$action = $sf->action;
$rows = $sf->rows;
$edited = $sf->edited;
$deleted = $sf->deleted;
$fields = $sf->fields;
$table = $sf->table;
$pk = $sf->primary_key;
$fk = $sf->foreign_key;
$fv = $_POST['nuHash']['record_id'];
$auto = nuAutoNumbers($sf->object_id);
if(is_array($cts[$table]['names'])){
$CTSTN = $cts[$table]['names'];
}else{
$CTSTN = array();
}
$log = in_array($table . '_nulog', $CTSTN);
for($r = 0 ; $r < count($rows) ; $r++){
if(nuEditedRow($edited[$r])){
$F = array();
$I = array();
$V = array();
$edit = $edited[$r];
$row = $rows[$r];
$pv = $row[0];
$nv = nuID();
if($pv == '-1'){
$nv = nuBuildPrimaryKey($table, $pk);
$id = "'$nv'";
if($d == 0){$nuMainID = $nv;}
}else{
$id = "'$pv'";
if($d == 0){$nuMainID = $pv;}
}
$V = []; //-- primary key id
$I = [];
if($nv != 'autoid'){
$V[] = $id; //-- primary key id
$I[] = $pk;
}
if($fk == ''){
$rec_id = $id;
}else{
$V[] = "'$nuMainID'";
$I[] = "`$fk`";
}
for($R = 1 ; $R < count($row) ; $R++){
$isAN = in_array($fields[$R], $auto);
if($edit[$R] == 1 or $isAN){ //-- has been edited
if($cts[$table] == ''){ //-- not valid table name
if($form_type == 'launch'){
nuDisplayError("Launch Forms Cannot Be Saved");
}else{
nuDisplayError("$table is not a valid table name for a Subform");
}
return;
}
$idx = array_search($fields[$R], $CTSTN);
if($idx !== false){ //-- valid field names
if($isAN){
$v = nuAutoNumber($sf->object_id, $fields[$R], $row[$R]);
}else{
$v = $row[$R];
}
$fld = $fields[$R];
$type = $cts[$table]['types'][$idx]; //-- date types: null if empty
if (in_array($type, array('date','datetime','timestamp','year')) && $v == '') {
$V[] = "null";
$F[] = "`$fld` = null";
} else
{
$add = addslashes($v);
$V[] = "'$add'";
$F[] = "`$fld` = '$add'";
}
$I[] = "`$fld`";
}
// if(in_array($fields[$R], $CTSTN)){ //-- valid field names
//
// if($isAN){
// $v = nuAutoNumber($sf->object_id, $fields[$R], $row[$R]);
// }else{
// $v = $row[$R];
// }
//
// $add = addslashes($v);
// $fld = $fields[$R];
// $V[] = "'$add'";
// $I[] = "`$fld`";
// $F[] = "`$fld` = '$add'";
//
// }
}
}
if($log){
$jd = new stdClass;
$jd->added = Array('user' => $user, 'time' => time());
$je = addslashes(json_encode($jd));
$V[] = "'$je'";
$I[] = "`$table"."_nulog`";
}
$fs = implode(', ', $F); //-- for update statement
$vs = ' VALUES (' . implode(', ', $V) . ')';
$is = ' (' . implode(', ', $I) . ')';
if($action == 'save'){
if($pv == '-1'){
if($deleted[$r] == '0'){
$sql = "INSERT INTO $table $is $vs;";
$S[] = $sql;
}
}else{
$sql = "UPDATE $table SET $fs WHERE `$pk` = '$pv';";
$S[] = $sql;
if($log){
$sql = "SELECT $table" . "_nulog FROM $table WHERE `$pk` = '$pv';";
$logt = nuRunQuery($sql);
$logr = db_fetch_row($logt);
$jd = json_decode($logr[0]);
if(gettype($jd) == 'object'){
$jd->edited = Array('user' => $user, 'time' => time());
}else{
$jd = new stdClass;
$jd->added = Array('user' => 'unknown', 'time' => 0);
$jd->edited = Array('user' => $user, 'time' => time());
}
$je = addslashes(json_encode($jd));
$sql = "UPDATE $table SET $table" . "_nulog = '$je' WHERE `$pk` = '$pv';";
$S[] = $sql;
}
}
}
}
}
for($i = 0 ; $i < count($deleted) ; $i++){
$id = $rows[$i][0];
if($action == 'delete' || $deleted[$i] == '1'){
if($id != '-1'){
$sql = "DELETE FROM $table WHERE `$pk` = '$id';";
$S[] = $sql;
}
}
}
}
if($nuDelAll == 'Yes'){
nuEval($EFid . '_BD');
$S = array_reverse($S); //-- delete children first
}else{
nuEval($EFid . '_BS');
}
if(count($_POST['nuErrors']) > 0){return;}
if($S != null){
for($i = 0 ; $i < count($S) ; $i++){
$sql = $S[$i];
$insert = "INSERT INTO $nuMainTable";
$length = strlen($insert);
nuRunQuery($sql);
if(substr($sql, 0, $length) == $insert and $nuMainID == 'autoid'){
$t = nuRunQuery('SELECT LAST_INSERT_ID()');
$nuMainID = db_fetch_row($t)[0];
}
}
}
nuChangeHashVariable('RECORD_ID', $nuMainID);
if($nuDelAll == 'Yes'){
nuEval($EFid . '_AD');
}else{
nuEval($EFid . '_AS');
}
$_POST['nuAfterEvent'] = true;
return $_POST['nuHash']['RECORD_ID'];
}
function nuBuildPrimaryKey($t, $p){
$autopk = db_is_auto_id($t, $p);
if($autopk){
$v = 'autoid';
}else{
$v = nuID();
}
return $v;
}
function nuEditedRow($e){
$t = 0;
for($i = 0 ; $i < count($e) ; $i++){
$t = $t + $e[$i];
}
return $t > 0; //-- something has been edited
}
function nuDeleteRow($r, $p){
nuRunQuery("DELETE FROM `$r->sfo_table` WHERE `$r->sfo_primary_key` = ? ", array($p));
}
function nuInsertRow($r, $p){
$T = nuRunQuery("SELECT COUNT(*) FROM `$r->sfo_table` WHERE `$r->sfo_primary_key` = ? ", array($p));
$R = db_fetch_row($T);
if($R[0] == 0){
nuRunQuery("INSERT INTO `$r->sfo_table` (`$r->sfo_primary_key`) VALUES (?) ", array($p));
}
}
function nuUpdateRow($r, $p, $row, $FK){
if($row['fk'] != ''){ //-- (if == it's not the parent record add foreign key)
$row['f'][] = $row['ff'];
$row['v'][] = $FK;
}
$set = array();
$columns = db_field_names($r->sfo_table);
$objects = nuEditObjects($r->zzzzsys_form_id);
$q = array();
for($i = 0 ; $i < count($row['f']) ; $i++){
if(array_search($row['f'][$i], $columns) !== false){
$set[] = $row['f'][$i] . ' = ? ';
$q[] = nuFormatValue($row, $i);
}
}
if(count($set) > 0){
$q[] = $p;
$s = "UPDATE `$r->sfo_table` SET " . implode(', ', $set) . " WHERE `$r->sfo_primary_key` = ? ";
nuRunQuery($s, $q);
}
}
function nuEditObjects($id){
$a = array();
$s = "SELECT sob_all_id FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = '$id' ORDER BY sob_all_order";
$t = nuRunQuery($s);
while($r = db_fetch_object($t)){
$a[] = $r->sob_all_id;
}
return $a;
}
function nuAutoNumber($form_id, $field_id, $value){
$s = "SELECT * FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = ? AND sob_all_id = ? ";
$t = nuRunQuery($s, array($form_id, $field_id));
$r = db_fetch_object($t);
$input = $r->sob_all_type == 'input';
$auto = $r->sob_input_type == 'nuAutoNumber';
$newno = nuHasNewRecordID() || nuHasNoRecordID();
if($input and $auto and $newno){
return nuUpdateCounter($r->zzzzsys_object_id);
}
return $value;
}
function nuUpdateCounter($id){
$n = nuID();
$sql = "SELECT * FROM zzzzsys_object WHERE zzzzsys_object_id = '$id'";
for($i = 0 ; $i < 10 ; $i++){
nuRunQuery("UPDATE zzzzsys_object SET sob_input_javascript = '$n' WHERE zzzzsys_object_id = '$id' AND sob_input_javascript = ''");
$t = nuRunQuery($sql);
$r = db_fetch_object($t);
$c = $r->sob_input_count + 1;
$a = $r->sob_input_javascript;
if($a == $n){
nuRunQuery("UPDATE zzzzsys_object SET sob_input_javascript = '', sob_input_count = '$c' WHERE zzzzsys_object_id = '$id'");
return $c;
}
}
nuDisplayError('Could not get AutoNumber');
return -1;
}
function nuAutoNumbers($form_id){
$s = "
SELECT sob_all_id
FROM zzzzsys_object
WHERE sob_all_zzzzsys_form_id = ?
AND sob_all_type = 'input'
AND sob_input_type = 'nuAutoNumber'
";
$t = nuRunQuery($s, array($form_id));
$a = [];
while($r = db_fetch_object($t)){
$a[] = $r->sob_all_id;
}
return $a;
}
function nuFormatValue($row, $i){
$form_id = $row['fm'];
$field = $row['f'][$i];
$s = "SELECT * FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = ? AND sob_all_id = ? ";
$t = nuRunQuery($s, array($form_id, $field));
$r = db_fetch_object($t);
if($r->sob_all_type == 'select' and $r->sob_select_multiple == '1' and $row['v'][$i] != ''){
return json_encode($row['v'][$i]);
}else if($r->sob_all_type == 'input' and $r->sob_input_type == 'nuAutoNumber'){
if(nuHasNewRecordID()){
return nuUpdateCounter($r->zzzzsys_object_id);
}
}else{
return $row['v'][$i];
}
}
function nuHasNoRecordID(){
return $_POST['nuHash']['RECORD_ID'] == -1;
}
function nuHasNewRecordID(){
return $_POST['nuHash']['PREVIOUS_RECORD_ID'] != $_POST['nuHash']['RECORD_ID'];
}
function nuChangeHashVariable($h, $v){
$_POST['nuHash'][$h] = $v;
}
function nuReturnNewRecord($i = -1){
$_POST['nuHash']['RECORD_ID'] = $i;
}
function nuDisplayError($m){
$_POST['nuErrors'][] = $m;
}
function nuCheckAccess($f, $r = ''){
if(in_array($f, $_POST['forms'])){
return 1;
}else{
if($r == '' or $r == '-1' or in_array($r, array_merge($_POST['reports'], $_POST['procedures']))){
return 2;
}else{
nuDisplayError("Access Denied..");
return 3;
}
nuDisplayError("Access Denied..");
return 4;
}
}
function nuSubformObject($id){
if($id == ''){
$id = 'nuBuilder4EditForm';
}
$sfs = $_POST['nuHash']['nuFORMdata'];
for($i = 0 ; $i < count($sfs) ; $i++){
if($sfs[$i]->id == $id){
return $sfs[$i];
}
}
return false;
}
function nuCloneForm(){
return;
//nudebug(nuhash());
$f = nuHash()['CLONED_RECORD_ID'];
$TT = nuTT();
$s = "CREATE TABLE p$TT SELECT * FROM zzzzsys_php WHERE zzzzsys_php_id LIKE CONCAT(?,'%') ";
$t = nuRunQuery($s, [$f]);
$s = "CREATE TABLE o$TT SELECT * FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = ? ";
$t = nuRunQuery($s, [$f]);
$s = "
CREATE TABLE e$TT
SELECT *
FROM zzzzsys_event
WHERE sev_zzzzsys_object_id IN(SELECT zzzzsys_object_id FROM o$TT)
";
$t = nuRunQuery($s);
$s = "SELECT * FROM o$TT";
$t = nuRunQuery($s);
while($r = db_fetch_object($t)){
$was = $r->zzzzsys_object_id;
$is = nuID();
$s = "UPDATE o$t SET zzzzsys_object_id = ? WHERE zzzzsys_object_id = ?";
nuUpdateEvent($t, $is);
}
}
function nuUpdateEvent($t, $o){
$s = "
UPDATE e$t
SET sev_zzzzsys_object_id = ?, zzzzsys_event_id = ?
WHERE zzzzsys_event_id = ?
";
$t = nuRunQuery("SELECT * FROM e$t");
while($r = db_fetch_row($r)){
$i = nuID();
nuRunQuery($s, [$o, $i, $r->zzzzsys_event_id]);
}
}
function nuDeleteForm($f){
$s = "DELETE FROM zzzzsys_browse WHERE sbr_zzzzsys_form_id = ? ";
$t = nuRunQuery($s, [$f]);
$s = "DELETE FROM zzzzsys_tab WHERE syt_zzzzsys_form_id = ? ";
$t = nuRunQuery($s, [$f]);
$s = "DELETE FROM zzzzsys_php WHERE zzzzsys_php_id LIKE CONCAT(?, '_') ";
$t = nuRunQuery($s, [$f]);
$s = "DELETE FROM zzzzsys_object WHERE sob_all_type = 'run' AND sob_run_zzzzsys_form_id = ? ";
$t = nuRunQuery($s, [$f]);
$s = "SELECT * FROM zzzzsys_object WHERE sob_all_zzzzsys_form_id = ? ";
$t = nuRunQuery($s);
while($r = db_fetch_object($t)){
$i = $r->zzzzsys_object;
$s = "DELETE FROM zzzzsys_event WHERE sev_zzzzsys_object_id = ? ";
$t = nuRunQuery($s, [$i]);
$s = "DELETE FROM zzzzsys_php WHERE zzzzsys_php_id LIKE CONCAT(?, '_')";
$t = nuRunQuery($s, [$i]);
}
$s = "DELETE FROM zzzzsys_object WHERE sob_all_type = 'run' AND sob_run_zzzzsys_form_id = ? ";
$t = nuRunQuery($s, [$f]);
}
function nuGetFile(){
$f = $_POST['nuSTATE']['fileCode'];
$s = "SELECT * FROM zzzzsys_file WHERE sfi_code = ? ";
$t = nuRunQuery($s, [$f]);
$r = db_fetch_object($t);
return $r->sfi_json;
}
function nuLogout(){
$i = $_SESSION['nubuilder_session_data']['SESSION_ID'];
$s = "DELETE FROM zzzzsys_session WHERE zzzzsys_session_id = ? ";
nuRunQuery($s, [$i]);
}
?>