galette/lib/Galette/Controllers/Crud/MembersController.php

   1 <?php
   2
   3 /* vim: set expandtab tabstop=4 shiftwidth=4 softtabstop=4: */
   4
   5 /**
   6  * Galette members controller
   7  *
   8  * PHP version 5
   9  *
  10  * Copyright © 2019-2023 The Galette Team
  11  *
  12  * This file is part of Galette (http://galette.tuxfamily.org).
  13  *
  14  * Galette is free software: you can redistribute it and/or modify
  15  * it under the terms of the GNU General Public License as published by
  16  * the Free Software Foundation, either version 3 of the License, or
  17  * (at your option) any later version.
  18  *
  19  * Galette is distributed in the hope that it will be useful,
  20  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  21  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  22  *  GNU General Public License for more details.
  23  *
  24  * You should have received a copy of the GNU General Public License
  25  * along with Galette. If not, see <http://www.gnu.org/licenses/>.
  26  *
  27  * @category  Controllers
  28  * @package   Galette
  29  *
  30  * @author    Johan Cwiklinski <johan@x-tnd.be>
  31  * @copyright 2019-2023 The Galette Team
  32  * @license   http://www.gnu.org/licenses/gpl-3.0.html GPL License 3.0 or (at your option) any later version
  33  * @link      http://galette.tuxfamily.org
  34  * @since     Available since 0.9.4dev - 2019-12-02
  35  */
  36
  37 namespace Galette\Controllers\Crud;
  38
  39 use Galette\Controllers\CrudController;
  40 use Galette\DynamicFields\Boolean;
  41 use Galette\Features\BatchList;
  42 use Slim\Psr7\Request;
  43 use Slim\Psr7\Response;
  44 use Galette\Core\GaletteMail;
  45 use Galette\Core\Gaptcha;
  46 use Galette\Entity\Adherent;
  47 use Galette\Entity\Contribution;
  48 use Galette\Entity\ContributionsTypes;
  49 use Galette\Entity\DynamicFieldsHandle;
  50 use Galette\Entity\Group;
  51 use Galette\Entity\Status;
  52 use Galette\Entity\FieldsConfig;
  53 use Galette\Entity\Social;
  54 use Galette\Filters\AdvancedMembersList;
  55 use Galette\Filters\MembersList;
  56 use Galette\Repository\Groups;
  57 use Galette\Repository\Members;
  58 use Galette\Repository\PaymentTypes;
  59 use Galette\Repository\Titles;
  60 use Analog\Analog;
  61
  62 /**
  63  * Galette members controller
  64  *
  65  * @category  Controllers
  66  * @name      GaletteController
  67  * @package   Galette
  68  * @author    Johan Cwiklinski <johan@x-tnd.be>
  69  * @copyright 2019-2023 The Galette Team
  70  * @license   http://www.gnu.org/licenses/gpl-3.0.html GPL License 3.0 or (at your option) any later version
  71  * @link      http://galette.tuxfamily.org
  72  * @since     Available since 0.9.4dev - 2019-12-02
  73  */
  74
  75 class MembersController extends CrudController
  76 {
  77     use BatchList;
  78
  79     /** @var bool */
  80     private $is_self_membership = false;
  81
  82     // CRUD - Create
  83
  84     /**
  85      * Add page
  86      *
  87      * @param Request  $request  PSR Request
  88      * @param Response $response PSR Response
  89      *
  90      * @return Response
  91      */
  92     public function add(Request $request, Response $response): Response
  93     {
  94         return $this->edit($request, $response, null, 'add');
  95     }
  96
  97     /**
  98      * Add child page
  99      *
 100      * @param Request  $request  PSR Request
 101      * @param Response $response PSR Response
 102      *
 103      * @return Response
 104      */
 105     public function addChild(Request $request, Response $response): Response
 106     {
 107         return $this->edit($request, $response, null, 'addchild');
 108     }
 109
 110     /**
 111      * Self subscription page
 112      *
 113      * @param Request  $request  PSR Request
 114      * @param Response $response PSR Response
 115      *
 116      * @return Response
 117      */
 118     public function selfSubscribe(Request $request, Response $response): Response
 119     {
 120         if (!$this->preferences->pref_bool_selfsubscribe || $this->login->isLogged()) {
 121             return $response
 122                 ->withStatus(301)
 123                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
 124         }
 125
 126         if ($this->session->member !== null) {
 127             $member = $this->session->member;
 128             $this->session->member = null;
 129         } else {
 130             $member = new Adherent($this->zdb);
 131             $member->enableDep('dynamics');
 132         }
 133
 134         //mark as self membership
 135         $member->setSelfMembership();
 136
 137         // flagging required fields
 138         $fc = $this->fields_config;
 139         $form_elements = $fc->getFormElements($this->login, true, true);
 140
 141         // members
 142         $m = new Members();
 143         $members = $m->getDropdownMembers(
 144             $this->zdb,
 145             $this->login,
 146             $member->hasParent() ? $member->parent->id : null
 147         );
 148
 149         $params = [
 150             'members' => [
 151                 'filters'   => $m->getFilters(),
 152                 'count'     => $m->getCount()
 153             ]
 154         ];
 155
 156         if (count($members)) {
 157             $params['members']['list'] = $members;
 158         }
 159
 160         $gaptcha = new Gaptcha($this->i18n);
 161         $this->session->gaptcha = $gaptcha;
 162
 163         $titles = new Titles($this->zdb);
 164
 165         // display page
 166         $this->view->render(
 167             $response,
 168             'pages/member_form.html.twig',
 169             array(
 170                 'page_title'        => _T("Subscription"),
 171                 'parent_tpl'        => 'public_page.html.twig',
 172                 'member'            => $member,
 173                 'self_adh'          => true,
 174                 'autocomplete'      => true,
 175                 'osocials'          => new Social($this->zdb),
 176                 // pseudo random int
 177                 'time'              => time(),
 178                 'titles_list'       => $titles->getList(),
 179                 'fieldsets'         => $form_elements['fieldsets'],
 180                 'hidden_elements'   => $form_elements['hiddens'],
 181                 //self_adh specific
 182                 'gaptcha'           => $gaptcha
 183             ) + $params
 184         );
 185         return $response;
 186     }
 187
 188     /**
 189      * Add action
 190      *
 191      * @param Request  $request  PSR Request
 192      * @param Response $response PSR Response
 193      *
 194      * @return Response
 195      */
 196     public function doAdd(Request $request, Response $response): Response
 197     {
 198         return $this->store($request, $response);
 199     }
 200
 201     /**
 202      * Self subscription add action
 203      *
 204      * @param Request  $request  PSR Request
 205      * @param Response $response PSR Response
 206      *
 207      * @return Response
 208      */
 209     public function doSelfSubscribe(Request $request, Response $response): Response
 210     {
 211         $this->setSelfMembership();
 212         return $this->doAdd($request, $response);
 213     }
 214
 215
 216     /**
 217      * Duplicate action
 218      *
 219      * @param Request  $request  PSR Request
 220      * @param Response $response PSR Response
 221      * @param integer  $id_adh   Member ID to duplicate
 222      *
 223      * @return Response
 224      */
 225     public function duplicate(Request $request, Response $response, int $id_adh): Response
 226     {
 227         $adh = new Adherent($this->zdb, $id_adh, ['dynamics' => true, 'parent' => true]);
 228         $adh->setDuplicate();
 229
 230         //store entity in session
 231         $this->session->member = $adh;
 232
 233         return $response
 234             ->withStatus(301)
 235             ->withHeader('Location', $this->routeparser->urlFor('addMember'));
 236     }
 237
 238     // /CRUD - Create
 239     // CRUD - Read
 240
 241     /**
 242      * Display member card
 243      *
 244      * @param Request  $request  PSR Request
 245      * @param Response $response PSR Response
 246      * @param integer  $id       Member ID
 247      *
 248      * @return Response
 249      */
 250     public function show(Request $request, Response $response, int $id): Response
 251     {
 252         $member = new Adherent($this->zdb);
 253         $member
 254             ->enableAllDeps()
 255             ->load($id);
 256
 257         if (!$member->canShow($this->login)) {
 258             $this->flash->addMessage(
 259                 'error_detected',
 260                 _T("You do not have permission for requested URL.")
 261             );
 262
 263             return $response
 264                 ->withStatus(301)
 265                 ->withHeader(
 266                     'Location',
 267                     $this->routeparser->urlFor('me')
 268                 );
 269         }
 270
 271         if ($member->id == null) {
 272             //member does not exist!
 273             $this->flash->addMessage(
 274                 'error_detected',
 275                 str_replace('%id', $id, _T("No member #%id."))
 276             );
 277
 278             return $response
 279                 ->withHeader(
 280                     'Location',
 281                     $this->routeparser->urlFor('slash')
 282                 );
 283         }
 284
 285         // flagging fields visibility
 286         $fc = $this->fields_config;
 287         $display_elements = $fc->getDisplayElements($this->login);
 288
 289         // display page
 290         $this->view->render(
 291             $response,
 292             'pages/member_show.html.twig',
 293             array(
 294                 'page_title'        => _T("Member Profile"),
 295                 'member'            => $member,
 296                 'pref_lang'         => $this->i18n->getNameFromId($member->language),
 297                 'pref_card_self'    => $this->preferences->pref_card_self,
 298                 'groups'            => Groups::getSimpleList(),
 299                 'time'              => time(),
 300                 'display_elements'  => $display_elements,
 301                 'osocials'          => new Social($this->zdb),
 302                 'navigate'          => $this->handleNavigationLinks($member->id)
 303             )
 304         );
 305         return $response;
 306     }
 307
 308     /**
 309      * Own card show
 310      *
 311      * @param Request  $request  PSR Request
 312      * @param Response $response PSR Response
 313      *
 314      * @return Response
 315      */
 316     public function showMe(Request $request, Response $response): Response
 317     {
 318         if ($this->login->isSuperAdmin()) {
 319             return $response
 320                 ->withStatus(301)
 321                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
 322         }
 323         return $this->show($request, $response, $this->login->id);
 324     }
 325
 326     /**
 327      * Public pages (trombinoscope, public list)
 328      *
 329      * @param Request        $request  PSR Request
 330      * @param Response       $response PSR Response
 331      * @param string         $option   One of 'page' or 'order'
 332      * @param string|integer $value    Value of the option
 333      * @param string         $type     List type (either list or trombi)
 334      *
 335      * @return Response
 336      */
 337     public function publicList(
 338         Request $request,
 339         Response $response,
 340         $option = null,
 341         $value = null,
 342         $type = null
 343     ): Response {
 344         $varname = 'public_filter_' . $type;
 345         if (isset($this->session->$varname)) {
 346             $filters = $this->session->$varname;
 347         } else {
 348             $filters = new MembersList();
 349         }
 350
 351         if ($option !== null) {
 352             switch ($option) {
 353                 case 'page':
 354                     $filters->current_page = (int)$value;
 355                     break;
 356                 case 'order':
 357                     $filters->orderby = $value;
 358                     break;
 359             }
 360         }
 361
 362         $m = new Members($filters);
 363         $members = $m->getPublicList($type === 'trombi');
 364
 365         $this->session->$varname = $filters;
 366
 367         //assign pagination variables to the template and add pagination links
 368         $filters->setViewPagination($this->routeparser, $this->view, false);
 369
 370         // display page
 371         $this->view->render(
 372             $response,
 373             ($type === 'list' ? 'pages/members_public_list' : 'pages/members_public_gallery') . '.html.twig',
 374             array(
 375                 'page_title'    => ($type === 'list' ? _T("Members list") : _T('Trombinoscope')),
 376                 'additionnal_html_class'    => ($type === 'list' ? '' : 'trombinoscope'),
 377                 'type'          => $type,
 378                 'members'       => $members,
 379                 'nb_members'    => $m->getCount(),
 380                 'filters'       => $filters,
 381                 // pseudo random int
 382                 'time'              => time(),
 383             )
 384         );
 385         return $response;
 386     }
 387
 388     /**
 389      * Public pages (trombinoscope, public list)
 390      *
 391      * @param Request  $request  PSR Request
 392      * @param Response $response PSR Response
 393      * @param string   $type     Type
 394      *
 395      * @return Response
 396      */
 397     public function filterPublicList(Request $request, Response $response, string $type): Response
 398     {
 399         $post = $request->getParsedBody();
 400
 401         $varname = 'public_filter_' . $type;
 402         if (isset($this->session->$varname)) {
 403             $filters = $this->session->$varname;
 404         } else {
 405             $filters = new MembersList();
 406         }
 407
 408         //reintialize filters
 409         if (isset($post['clear_filter'])) {
 410             $filters->reinit();
 411         } else {
 412             //number of rows to show
 413             if (isset($post['nbshow'])) {
 414                 $filters->show = (int)$post['nbshow'];
 415             }
 416         }
 417
 418         $this->session->$varname = $filters;
 419
 420         return $response
 421             ->withStatus(301)
 422             ->withHeader('Location', $this->routeparser->urlFor('publicList', ['type' => $type]));
 423     }
 424
 425     /**
 426      * Members list
 427      *
 428      * @param Request        $request  PSR Request
 429      * @param Response       $response PSR Response
 430      * @param string         $option   One of 'page' or 'order'
 431      * @param string|integer $value    Value of the option
 432      *
 433      * @return Response
 434      */
 435     public function list(Request $request, Response $response, $option = null, $value = null): Response
 436     {
 437         if (isset($this->session->filter_members)) {
 438             $filters = $this->session->filter_members;
 439         } else {
 440             $filters = new MembersList();
 441         }
 442
 443         if ($option !== null) {
 444             switch ($option) {
 445                 case 'page':
 446                     $filters->current_page = (int)$value;
 447                     break;
 448                 case 'order':
 449                     $filters->orderby = $value;
 450                     break;
 451             }
 452         }
 453
 454         $members = new Members($filters);
 455
 456         $members_list = array();
 457         if ($this->login->isAdmin() || $this->login->isStaff()) {
 458             $members_list = $members->getMembersList(true);
 459         } else {
 460             $members_list = $members->getManagedMembersList(true);
 461         }
 462
 463         $groups = new Groups($this->zdb, $this->login);
 464         $groups_list = $groups->getList();
 465
 466         //assign pagination variables to the template and add pagination links
 467         $filters->setViewPagination($this->routeparser, $this->view, false);
 468         $filters->setViewCommonsFilters($this->preferences, $this->view);
 469
 470         $this->session->filter_members = $filters;
 471
 472         // display page
 473         $this->view->render(
 474             $response,
 475             'pages/members_list.html.twig',
 476             array(
 477                 'page_title'            => _T("Members management"),
 478                 'require_mass'          => true,
 479                 'members'               => $members_list,
 480                 'filter_groups_options' => $groups_list,
 481                 'nb_members'            => $members->getCount(),
 482                 'filters'               => $filters,
 483                 'adv_filters'           => $filters instanceof AdvancedMembersList,
 484                 'galette_list'          => $this->lists_config->getDisplayElements($this->login)
 485             )
 486         );
 487         return $response;
 488     }
 489
 490     /**
 491      * Members filtering
 492      *
 493      * @param Request  $request  PSR Request
 494      * @param Response $response PSR Response
 495      *
 496      * @return Response
 497      */
 498     public function filter(Request $request, Response $response): Response
 499     {
 500         $post = $request->getParsedBody();
 501         $filters = $this->session->filter_members ?? new MembersList();
 502
 503         //reinitialize filters
 504         if (isset($post['clear_filter'])) {
 505             $filters = new MembersList();
 506         } elseif (isset($post['clear_adv_filter'])) {
 507             $this->session->filter_members = null;
 508             unset($this->session->filter_members);
 509
 510             return $response
 511                 ->withStatus(301)
 512                 ->withHeader('Location', $this->routeparser->urlFor('advanced-search'));
 513         } elseif (isset($post['adv_criteria'])) {
 514             return $response
 515                 ->withStatus(301)
 516                 ->withHeader('Location', $this->routeparser->urlFor('advanced-search'));
 517         } else {
 518             //string to filter
 519             if (isset($post['filter_str'])) { //filter search string
 520                 $filters->filter_str = stripslashes(
 521                     htmlspecialchars($post['filter_str'], ENT_QUOTES)
 522                 );
 523             }
 524             //field to filter
 525             if (isset($post['field_filter'])) {
 526                 if (is_numeric($post['field_filter'])) {
 527                     $filters->field_filter = $post['field_filter'];
 528                 }
 529             }
 530             //membership to filter
 531             if (isset($post['membership_filter'])) {
 532                 if (is_numeric($post['membership_filter'])) {
 533                     $filters->membership_filter
 534                         = $post['membership_filter'];
 535                 }
 536             }
 537             //account status to filter
 538             if (isset($post['filter_account'])) {
 539                 if (is_numeric($post['filter_account'])) {
 540                     $filters->filter_account = $post['filter_account'];
 541                 }
 542             }
 543             //email filter
 544             if (isset($post['email_filter'])) {
 545                 $filters->email_filter = (int)$post['email_filter'];
 546             }
 547             //group filter
 548             if (
 549                 isset($post['group_filter'])
 550                 && $post['group_filter'] > 0
 551             ) {
 552                 $filters->group_filter = (int)$post['group_filter'];
 553             }
 554             //number of rows to show
 555             if (isset($post['nbshow'])) {
 556                 $filters->show = (int)$post['nbshow'];
 557             }
 558
 559             if (isset($post['advanced_filtering'])) {
 560                 if (!$filters instanceof AdvancedMembersList) {
 561                     $filters = new AdvancedMembersList($filters);
 562                 }
 563                 //Advanced filters
 564                 $filters->reinit();
 565                 unset($post['advanced_filtering']);
 566                 $freed = false;
 567                 foreach ($post as $k => $v) {
 568                     if (strpos($k, 'free_', 0) === 0) {
 569                         if (!$freed) {
 570                             $i = 0;
 571                             foreach ($post['free_field'] as $f) {
 572                                 if (
 573                                     trim($f) !== ''
 574                                     && trim($post['free_text'][$i]) !== ''
 575                                 ) {
 576                                     $fs_search = htmlspecialchars($post['free_text'][$i], ENT_QUOTES);
 577                                     $log_op
 578                                         = (int)$post['free_logical_operator'][$i];
 579                                     $qry_op
 580                                         = (int)$post['free_query_operator'][$i];
 581                                     $type = (int)$post['free_type'][$i];
 582                                     $fs = array(
 583                                         'idx'       => $i,
 584                                         'field'     => $f,
 585                                         'type'      => $type,
 586                                         'search'    => $fs_search,
 587                                         'log_op'    => $log_op,
 588                                         'qry_op'    => $qry_op
 589                                     );
 590                                     $filters->free_search = $fs;
 591                                 }
 592                                 $i++;
 593                             }
 594                             $freed = true;
 595                         }
 596                     } elseif ($k == 'groups_search') {
 597                         $i = 0;
 598                         $filters->groups_search_log_op = (int)$post['groups_logical_operator'];
 599                         foreach ($post['groups_search'] as $g) {
 600                             if (trim($g) !== '') {
 601                                 $gs = array(
 602                                     'idx'       => $i,
 603                                     'group'     => $g
 604                                 );
 605                                 $filters->groups_search = $gs;
 606                             }
 607                             $i++;
 608                         }
 609                     } else {
 610                         switch ($k) {
 611                             case 'contrib_min_amount':
 612                             case 'contrib_max_amount':
 613                                 if (trim($v) !== '') {
 614                                     $v = (float)$v;
 615                                 } else {
 616                                     $v = null;
 617                                 }
 618                                 break;
 619                         }
 620                         $filters->$k = $v;
 621                     }
 622                 }
 623             }
 624         }
 625
 626         if (isset($post['savesearch'])) {
 627             return $response
 628                 ->withStatus(301)
 629                 ->withHeader(
 630                     'Location',
 631                     $this->routeparser->urlFor(
 632                         'saveSearch',
 633                         $post
 634                     )
 635                 );
 636         }
 637
 638         $this->session->filter_members = $filters;
 639
 640         return $response
 641             ->withStatus(301)
 642             ->withHeader('Location', $this->routeparser->urlFor('members'));
 643     }
 644
 645     /**
 646      * Advanced search page
 647      *
 648      * @param Request  $request  PSR Request
 649      * @param Response $response PSR Response
 650      *
 651      * @return Response
 652      */
 653     public function advancedSearch(Request $request, Response $response): Response
 654     {
 655         if (isset($this->session->filter_members)) {
 656             $filters = $this->session->filter_members;
 657             if (!$filters instanceof AdvancedMembersList) {
 658                 $filters = new AdvancedMembersList($filters);
 659             }
 660         } else {
 661             $filters = new AdvancedMembersList();
 662         }
 663
 664         $groups = new Groups($this->zdb, $this->login);
 665         $groups_list = $groups->getList();
 666
 667         //we want only visible fields
 668         $fields = $this->members_fields;
 669         $fc = $this->fields_config;
 670         $fc->filterVisible($this->login, $fields);
 671
 672         //add status label search
 673         if ($pos = array_search(Status::PK, array_keys($fields))) {
 674             $fields = array_slice($fields, 0, $pos, true) +
 675                 ['status_label'  => ['label' => _T('Status label')]] +
 676                 array_slice($fields, $pos, count($fields) - 1, true);
 677         }
 678
 679         //dynamic fields
 680         $member = new Adherent($this->zdb);
 681         $member
 682             ->disableAllDeps()
 683             ->enableDep('dynamics')
 684             ->loadFromLoginOrMail($this->login->login);
 685         $adh_dynamics = new DynamicFieldsHandle($this->zdb, $this->login, $member);
 686
 687         $contrib = new Contribution($this->zdb, $this->login);
 688         $contrib_dynamics = new DynamicFieldsHandle($this->zdb, $this->login, $contrib);
 689
 690         //Status
 691         $statuts = new Status($this->zdb);
 692
 693         //Contributions types
 694         $ct = new ContributionsTypes($this->zdb);
 695
 696         //Payment types
 697         $ptypes = new PaymentTypes(
 698             $this->zdb,
 699             $this->preferences,
 700             $this->login
 701         );
 702         $ptlist = $ptypes->getList();
 703
 704         $filters->setViewCommonsFilters($this->preferences, $this->view);
 705
 706         $social = new Social($this->zdb);
 707         $types = $member->getMemberRegisteredTypes();
 708         $social_types = [];
 709         foreach ($types as $type) {
 710             $social_types[$type] = $social->getSystemType($type);
 711         }
 712
 713         // display page
 714         $this->view->render(
 715             $response,
 716             'pages/advanced_search.html.twig',
 717             array(
 718                 'page_title'            => _T("Advanced search"),
 719                 'filter_groups_options' => $groups_list,
 720                 'search_fields'         => $fields,
 721                 'adh_dynamics'          => $adh_dynamics->getSearchFields(),
 722                 'contrib_dynamics'      => $contrib_dynamics->getSearchFields(),
 723                 'adh_socials'           => $social_types,
 724                 'statuts'               => $statuts->getList(),
 725                 'contributions_types'   => $ct->getList(),
 726                 'filters'               => $filters,
 727                 'payments_types'        => $ptlist
 728             )
 729         );
 730         return $response;
 731     }
 732
 733     /**
 734      * Members list for ajax
 735      *
 736      * @param Request        $request  PSR Request
 737      * @param Response       $response PSR Response
 738      * @param string|null    $option   One of 'page' or 'order'
 739      * @param string|integer $value    Value of the option
 740      *
 741      * @return Response
 742      */
 743     public function ajaxList(Request $request, Response $response, string $option = null, $value = null): Response
 744     {
 745         $post = $request->getParsedBody();
 746
 747         $filters = $this->session->ajax_members_filters ?? new MembersList();
 748
 749         if ($option == 'page') {
 750             $filters->current_page = (int)$value;
 751         }
 752
 753         //numbers of rows to display
 754         if (isset($post['nbshow']) && is_numeric($post['nbshow'])) {
 755             $filters->show = (int)$post['nbshow'];
 756         }
 757
 758         $members = new Members($filters);
 759         if (!$this->login->isAdmin() && !$this->login->isStaff()) {
 760             if ($this->login->isGroupManager()) {
 761                 $members_list = $members->getManagedMembersList(true);
 762             } else {
 763                 Analog::log(
 764                     str_replace(
 765                         ['%id', '%login'],
 766                         [$this->login->id, $this->login->login],
 767                         'Trying to list group members without access from #%id (%login)'
 768                     ),
 769                     Analog::ERROR
 770                 );
 771                 throw new \Exception('Access denied.');
 772             }
 773         } else {
 774             $members_list = $members->getMembersList(true);
 775         }
 776
 777         //assign pagination variables to the template and add pagination links
 778         $filters->setViewPagination($this->routeparser, $this->view, false);
 779
 780         $this->session->ajax_members_filters = $filters;
 781
 782         $selected_members = null;
 783         $unreachables_members = null;
 784         if (!isset($post['from'])) {
 785             $mailing = $this->session->mailing;
 786             if (!isset($post['members'])) {
 787                 $selected_members = $mailing->recipients;
 788                 $unreachables_members = $mailing->unreachables;
 789             } else {
 790                 $m = new Members();
 791                 $selected_members = $m->getArrayList($post['members']);
 792                 if (isset($post['unreachables']) && is_array($post['unreachables'])) {
 793                     $unreachables_members = $m->getArrayList($post['unreachables']);
 794                 }
 795             }
 796         } else {
 797             switch ($post['from']) {
 798                 case 'groups':
 799                     if (!isset($post['gid'])) {
 800                         Analog::log(
 801                             'Trying to list group members with no group id provided',
 802                             Analog::ERROR
 803                         );
 804                         throw new \Exception('A group id is required.');
 805                     }
 806                     if (!isset($post['members'])) {
 807                         $group = new Group((int)$post['gid']);
 808                         $selected_members = array();
 809                         if (!isset($post['mode']) || $post['mode'] == 'members') {
 810                             $selected_members = $group->getMembers();
 811                         } elseif ($post['mode'] == 'managers') {
 812                             $selected_members = $group->getManagers();
 813                         } else {
 814                             Analog::log(
 815                                 'Trying to list group members with unknown mode',
 816                                 Analog::ERROR
 817                             );
 818                             throw new \Exception('Unknown mode.');
 819                         }
 820                     } else {
 821                         $m = new Members();
 822                         $selected_members = $m->getArrayList($post['members']);
 823                         if (isset($post['unreachables']) && is_array($post['unreachables'])) {
 824                             $unreachables_members = $m->getArrayList($post['unreachables']);
 825                         }
 826                     }
 827                     break;
 828                 case 'attach':
 829                     if (!isset($post['id_adh'])) {
 830                         throw new \RuntimeException(
 831                             'Current selected member must be excluded while attaching!'
 832                         );
 833                     }
 834                     break;
 835             }
 836         }
 837
 838         $params = [
 839             'filters'               => $filters,
 840             'members_list'          => $members_list,
 841             'selected_members'      => $selected_members,
 842             'unreachables_members'  => $unreachables_members
 843         ];
 844
 845         if (isset($post['multiple'])) {
 846             $params['multiple'] = true;
 847         }
 848
 849         if (isset($post['gid'])) {
 850             $params['the_id'] = (int)$post['gid'];
 851         }
 852
 853         if (isset($post['id_adh'])) {
 854             $params['excluded'] = (int)$post['id_adh'];
 855         }
 856
 857         // display page
 858         $this->view->render(
 859             $response,
 860             'elements/ajax_members.html.twig',
 861             $params
 862         );
 863         return $response;
 864     }
 865
 866     /**
 867      * Batch actions handler
 868      *
 869      * @param Request  $request  PSR Request
 870      * @param Response $response PSR Response
 871      *
 872      * @return Response
 873      */
 874     public function handleBatch(Request $request, Response $response): Response
 875     {
 876         $post = $request->getParsedBody();
 877
 878         if (isset($post['entries_sel'])) {
 879             if (isset($this->session->filter_members)) {
 880                 $filters = $this->session->filter_members;
 881             } else {
 882                 $filters = new MembersList();
 883             }
 884
 885             $filters->selected = $post['entries_sel'];
 886             $this->session->filter_members = $filters;
 887
 888             if (isset($post['cards'])) {
 889                 return $response
 890                     ->withStatus(301)
 891                     ->withHeader('Location', $this->routeparser->urlFor('pdf-members-cards'));
 892             }
 893
 894             if (isset($post['labels'])) {
 895                 return $response
 896                     ->withStatus(301)
 897                     ->withHeader('Location', $this->routeparser->urlFor('pdf-members-labels'));
 898             }
 899
 900             if (isset($post['sendmail'])) {
 901                 return $response
 902                     ->withStatus(301)
 903                     ->withHeader('Location', $this->routeparser->urlFor('mailing') . '?mailing_new=new');
 904             }
 905
 906             if (isset($post['attendance_sheet'])) {
 907                 return $response
 908                     ->withStatus(301)
 909                     ->withHeader('Location', $this->routeparser->urlFor('attendance_sheet_details'));
 910             }
 911
 912             if (isset($post['csv'])) {
 913                 return $response
 914                     ->withStatus(301)
 915                     ->withHeader('Location', $this->routeparser->urlFor('csv-memberslist'));
 916             }
 917
 918             if (isset($post['delete'])) {
 919                 return $response
 920                     ->withStatus(301)
 921                     ->withHeader('Location', $this->routeparser->urlFor('removeMembers'));
 922             }
 923
 924             if (isset($post['masschange'])) {
 925                 return $response
 926                     ->withStatus(301)
 927                     ->withHeader('Location', $this->routeparser->urlFor('masschangeMembers'));
 928             }
 929
 930             if (isset($post['masscontributions'])) {
 931                 return $response
 932                     ->withStatus(301)
 933                     ->withHeader('Location', $this->routeparser->urlFor('massAddContributionsChooseType'));
 934             }
 935
 936             throw new \RuntimeException('Does not know what to batch :(');
 937         } else {
 938             $this->flash->addMessage(
 939                 'error_detected',
 940                 _T("No member was selected, please check at least one name.")
 941             );
 942
 943             return $response
 944                 ->withStatus(301)
 945                 ->withHeader('Location', $this->routeparser->urlFor('members'));
 946         }
 947     }
 948
 949     // /CRUD - Read
 950     // CRUD - Update
 951
 952     /**
 953      * Edit page
 954      *
 955      * @param Request  $request  PSR Request
 956      * @param Response $response PSR Response
 957      * @param integer  $id       Member id/array of members id
 958      * @param string   $action   null or 'add'
 959      *
 960      * @return Response
 961      */
 962     public function edit(
 963         Request $request,
 964         Response $response,
 965         int $id = null,
 966         string $action = 'edit'
 967     ): Response {
 968         //instantiate member object
 969         $member = new Adherent($this->zdb);
 970
 971         if ($this->session->member !== null) {
 972             //retrieve from session, in add or edit
 973             $member = $this->session->member;
 974             $this->session->member = null;
 975             $id = $member->id;
 976         }
 977         $member->enableAllDeps();
 978
 979         if ($id !== null) {
 980             //load requested member
 981             $member->load($id);
 982             $can = $member->canEdit($this->login);
 983         } else {
 984             $can = $member->canCreate($this->login);
 985         }
 986
 987         if (!$can) {
 988             $this->flash->addMessage(
 989                 'error_detected',
 990                 _T("You do not have permission for requested URL.")
 991             );
 992
 993             return $response
 994                 ->withHeader(
 995                     'Location',
 996                     $this->routeparser->urlFor('me')
 997                 );
 998         }
 999
1000         //if adding a child, force parent here
1001         if ($action === 'addchild') {
1002             $member->setParent((int)$this->login->id);
1003         }
1004
1005         // flagging required fields
1006         $fc = $this->fields_config;
1007
1008         // password required if we create a new member
1009         if ($id !== null) {
1010             $fc->setNotRequired('mdp_adh');
1011         }
1012
1013         //handle requirements for parent fields
1014         $parent_fields = $member->getParentFields();
1015         $tpl_parent_fields = []; //for JS when detaching
1016         foreach ($parent_fields as $field) {
1017             if ($fc->isRequired($field)) {
1018                 $tpl_parent_fields[] = $field;
1019                 if ($member->hasParent()) {
1020                     $fc->setNotRequired($field);
1021                 }
1022             }
1023         }
1024
1025         // flagging required fields invisible to members
1026         if ($this->login->isAdmin() || $this->login->isStaff()) {
1027             $fc->setNotRequired('activite_adh');
1028             $fc->setNotRequired('id_statut');
1029         }
1030
1031         // template variable declaration
1032         $title = _T("Member Profile");
1033         if ($member->id != '') {
1034             $title .= ' (' . _T("modification") . ')';
1035         } else {
1036             $title .= ' (' . _T("creation") . ')';
1037         }
1038
1039         //Status
1040         $statuts = new Status($this->zdb);
1041         //Titles
1042         $titles = new Titles($this->zdb);
1043
1044         //Groups
1045         $groups = new Groups($this->zdb, $this->login);
1046         $groups_list = $groups->getSimpleList(true);
1047
1048         $form_elements = $fc->getFormElements(
1049             $this->login,
1050             $id === null
1051         );
1052
1053         // members
1054         $m = new Members();
1055         $pid = null;
1056         if ($member->hasParent()) {
1057             $pid = ($member->parent instanceof Adherent ? $member->parent->id : $member->parent);
1058         }
1059         $members = $m->getDropdownMembers(
1060             $this->zdb,
1061             $this->login,
1062             $pid
1063         );
1064
1065         $route_params['members'] = [
1066             'filters'   => $m->getFilters(),
1067             'count'     => $m->getCount()
1068         ];
1069
1070         if (count($members)) {
1071             $route_params['members']['list'] = $members;
1072         }
1073
1074         if ($action === 'edit') {
1075             $route_params['navigate'] = $this->handleNavigationLinks($member->id);
1076         }
1077
1078         // display page
1079         $this->view->render(
1080             $response,
1081             'pages/member_form.html.twig',
1082             array(
1083                 'parent_tpl'        => 'page.html.twig',
1084                 'autocomplete'      => true,
1085                 'page_title'        => $title,
1086                 'member'            => $member,
1087                 'self_adh'          => false,
1088                 // pseudo random int
1089                 'time'              => time(),
1090                 'titles_list'       => $titles->getList(),
1091                 'statuts'           => $statuts->getList(),
1092                 'groups'            => $groups_list,
1093                 'fieldsets'         => $form_elements['fieldsets'],
1094                 'hidden_elements'   => $form_elements['hiddens'],
1095                 'parent_fields'     => $tpl_parent_fields,
1096                 'addchild'          => ($action === 'addchild'),
1097                 'osocials'          => new Social($this->zdb)
1098             ) + $route_params
1099         );
1100         return $response;
1101     }
1102
1103     /**
1104      * Edit action
1105      *
1106      * @param Request  $request  PSR Request
1107      * @param Response $response PSR Response
1108      * @param integer  $id       Member id
1109      *
1110      * @return Response
1111      */
1112     public function doEdit(Request $request, Response $response, int $id): Response
1113     {
1114         return $this->store($request, $response);
1115     }
1116
1117     /**
1118      * Massive change page
1119      *
1120      * @param Request  $request  PSR Request
1121      * @param Response $response PSR Response
1122      *
1123      * @return Response
1124      */
1125     public function massChange(Request $request, Response $response): Response
1126     {
1127         $filters = $this->session->filter_members;
1128
1129         $data = [
1130             'id'            => $filters->selected,
1131             'redirect_uri'  => $this->routeparser->urlFor('members')
1132         ];
1133
1134         $fc = $this->fields_config;
1135         $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1136
1137         //dynamic fields
1138         $member = new Adherent($this->zdb);
1139         $member->disableAllDeps()->enableDep('dynamics');
1140
1141         //Status
1142         $statuts = new Status($this->zdb);
1143         //Titles
1144         $titles = new Titles($this->zdb);
1145
1146         // display page
1147         $this->view->render(
1148             $response,
1149             'modals/mass_change_members.html.twig',
1150             array(
1151                 'mode'          => ($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest') ? 'ajax' : '',
1152                 'page_title'    => str_replace(
1153                     '%count',
1154                     count($data['id']),
1155                     _T('Mass change %count members')
1156                 ),
1157                 'form_url'      => $this->routeparser->urlFor('masschangeMembersReview'),
1158                 'cancel_uri'    => $this->routeparser->urlFor('members'),
1159                 'data'          => $data,
1160                 'member'        => $member,
1161                 'fieldsets'     => $form_elements['fieldsets'],
1162                 'titles_list'   => $titles->getList(),
1163                 'statuts'       => $statuts->getList(),
1164                 'require_mass'  => true
1165             )
1166         );
1167         return $response;
1168     }
1169
1170     /**
1171      * Massive changes validation page
1172      *
1173      * @param Request  $request  PSR Request
1174      * @param Response $response PSR Response
1175      *
1176      * @return Response
1177      */
1178     public function validateMassChange(Request $request, Response $response): Response
1179     {
1180         $post = $request->getParsedBody();
1181         $changes = [];
1182
1183         if (!isset($post['confirm'])) {
1184             $this->flash->addMessage(
1185                 'error_detected',
1186                 _T("Mass changes has not been confirmed!")
1187             );
1188         } else {
1189             //we want only visibles fields
1190             $fc = $this->fields_config;
1191             $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1192
1193             foreach ($form_elements['fieldsets'] as $form_element) {
1194                 foreach ($form_element->elements as $field) {
1195                     if (
1196                         isset($post['mass_' . $field->field_id])
1197                         && (isset($post[$field->field_id]) || $field->type === FieldsConfig::TYPE_BOOL)
1198                     ) {
1199                         $changes[$field->field_id] = [
1200                             'label' => $field->label,
1201                             'value' => $post[$field->field_id] ?? 0
1202                         ];
1203                     }
1204                 }
1205             }
1206
1207             //handle dynamic fields
1208             $member = new Adherent($this->zdb);
1209             $member
1210                 ->enableAllDeps()
1211                 ->setDependencies(
1212                     $this->preferences,
1213                     $this->members_fields,
1214                     $this->history
1215                 );
1216             $dynamic_fields = $member->getDynamicFields()->getFields();
1217             foreach ($dynamic_fields as $field) {
1218                 $mass_id = 'mass_info_field_' . $field->getId();
1219                 $field_id = 'info_field_' . $field->getId() . '_1';
1220                 if (
1221                     isset($post[$mass_id])
1222                     && (isset($post[$field_id]) || $field instanceof Boolean)
1223                 ) {
1224                     $changes[$field_id] = [
1225                         'label' => $field->getName(),
1226                         'value' => $post[$field_id] ?? 0
1227                     ];
1228                 }
1229             }
1230         }
1231
1232         $filters = $this->session->filter_members;
1233         $data = [
1234             'id'            => $filters->selected,
1235             'redirect_uri'  => $this->routeparser->urlFor('members')
1236         ];
1237
1238         //Status
1239         $statuts = new Status($this->zdb);
1240         //Titles
1241         $titles = new Titles($this->zdb);
1242
1243         // display page
1244         $this->view->render(
1245             $response,
1246             'modals/mass_change_members.html.twig',
1247             array(
1248                 'mode'          => ($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest') ? 'ajax' : '',
1249                 'page_title'    => str_replace(
1250                     '%count',
1251                     count($data['id']),
1252                     _T('Review mass change %count members')
1253                 ),
1254                 'form_url'      => $this->routeparser->urlFor('massstoremembers'),
1255                 'cancel_uri'    => $this->routeparser->urlFor('members'),
1256                 'data'          => $data,
1257                 'titles_list'   => $titles->getList(),
1258                 'statuts'       => $statuts->getList(),
1259                 'changes'       => $changes
1260             )
1261         );
1262         return $response;
1263     }
1264
1265     /**
1266      * Do massive changes
1267      *
1268      * @param Request  $request  PSR Request
1269      * @param Response $response PSR Response
1270      *
1271      * @return Response
1272      */
1273     public function doMassChange(Request $request, Response $response): Response
1274     {
1275         $post = $request->getParsedBody();
1276         $redirect_url = $post['redirect_uri'];
1277         $error_detected = [];
1278         $mass = 0;
1279         $dynamic_fields = null;
1280
1281         unset($post['redirect_uri']);
1282         if (!isset($post['confirm'])) {
1283             $error_detected[] = _T("Mass changes has not been confirmed!");
1284         } else {
1285             unset($post['confirm']);
1286             $ids = $post['id'];
1287             unset($post['id']);
1288
1289             $fc = $this->fields_config;
1290             $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1291             $disabled = $this->members_fields;
1292             foreach (array_keys($post) as $key) {
1293                 $found = false;
1294                 foreach ($form_elements['fieldsets'] as $fieldset) {
1295                     if (isset($fieldset->elements[$key])) {
1296                         $found = true;
1297                         break;
1298                     }
1299                 }
1300
1301                 if (!$found) {
1302                     //try on dynamic fields
1303                     if ($dynamic_fields === null) {
1304                         //handle dynamic fields
1305                         $member = new Adherent($this->zdb);
1306                         $member
1307                             ->enableAllDeps()
1308                             ->setDependencies(
1309                                 $this->preferences,
1310                                 $this->members_fields,
1311                                 $this->history
1312                             );
1313                         $dynamic_fields = $member->getDynamicFields()->getFields();
1314                     }
1315                     foreach ($dynamic_fields as $field) {
1316                         $field_id = 'info_field_' . $field->getId() . '_1';
1317                         if ($key == $field_id) {
1318                             $found = true;
1319                             break;
1320                         }
1321                     }
1322                 }
1323
1324                 if (!$found) {
1325                     Analog::log(
1326                         'Permission issue mass editing field ' . $key,
1327                         Analog::WARNING
1328                     );
1329                     unset($post[$key]);
1330                 } else {
1331                     unset($disabled[$key]);
1332                 }
1333             }
1334
1335             if (!count($post)) {
1336                 $error_detected[] = _T("Nothing to do!");
1337             } else {
1338                 foreach ($ids as $id) {
1339                     $is_manager = !$this->login->isAdmin()
1340                         && !$this->login->isStaff()
1341                         && $this->login->isGroupManager();
1342                     $member = new Adherent($this->zdb);
1343                     $member->disableAllDeps();
1344                     if ($is_manager) {
1345                         $member->enableDep('groups');
1346                     }
1347                     $member->load((int)$id);
1348                     $member->setDependencies(
1349                         $this->preferences,
1350                         $this->members_fields,
1351                         $this->history
1352                     );
1353                     if (!$member->canEdit($this->login)) {
1354                         continue;
1355                     }
1356
1357                     $valid = $member->check($post, [], $disabled);
1358                     if ($valid === true) {
1359                         $done = $member->store();
1360                         if (!$done) {
1361                             $error_detected[] = _T("An error occurred while storing the member.");
1362                         } else {
1363                             ++$mass;
1364                         }
1365                     } else {
1366                         $error_detected = array_merge($error_detected, $valid);
1367                     }
1368                 }
1369             }
1370         }
1371
1372         if ($mass == 0 && !count($error_detected)) {
1373             $error_detected[] = _T('Something went wront during mass edition!');
1374         } else {
1375             $this->flash->addMessage(
1376                 'success_detected',
1377                 str_replace(
1378                     '%count',
1379                     $mass,
1380                     _T('%count members has been changed successfully!')
1381                 )
1382             );
1383         }
1384
1385         if (count($error_detected) > 0) {
1386             foreach ($error_detected as $error) {
1387                 $this->flash->addMessage(
1388                     'error_detected',
1389                     $error
1390                 );
1391             }
1392         }
1393
1394         if (!($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest')) {
1395             return $response
1396                 ->withStatus(301)
1397                 ->withHeader('Location', $redirect_url);
1398         } else {
1399             return $this->withJson(
1400                 $response,
1401                 [
1402                     'success' => count($error_detected) === 0
1403                 ]
1404             );
1405         }
1406     }
1407
1408     /**
1409      * Store
1410      *
1411      * @param Request  $request  PSR Request
1412      * @param Response $response PSR Response
1413      *
1414      * @return Response
1415      */
1416     public function store(Request $request, Response $response): Response
1417     {
1418         if (!$this->preferences->pref_bool_selfsubscribe && !$this->login->isLogged()) {
1419             return $response
1420                 ->withStatus(301)
1421                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
1422         }
1423
1424         $post = $request->getParsedBody();
1425         $member = new Adherent($this->zdb);
1426         $member
1427             ->enableAllDeps()
1428             ->setDependencies(
1429                 $this->preferences,
1430                 $this->members_fields,
1431                 $this->history
1432             );
1433
1434         $success_detected = [];
1435         $warning_detected = [];
1436         $error_detected = [];
1437
1438         if ($this->isSelfMembership() && !isset($post[Adherent::PK])) {
1439             //mark as self membership
1440             $member->setSelfMembership();
1441
1442             //check captcha
1443             $gaptcha = $this->session->gaptcha;
1444             if (!$gaptcha->check($post['gaptcha'])) {
1445                 $error_detected[] = _T('Invalid captcha');
1446             }
1447         }
1448
1449         // new or edit
1450         if (isset($post['id_adh'])) {
1451             $member->load((int)$post['id_adh']);
1452             if (!$member->canEdit($this->login)) {
1453                 //redirection should have been done before. Just throw an Exception.
1454                 throw new \RuntimeException(
1455                     str_replace(
1456                         '%id',
1457                         $member->id,
1458                         'No right to store member #%id'
1459                     )
1460                 );
1461             }
1462         } else {
1463             if ($member->id != '') {
1464                 $member->load($this->login->id);
1465             }
1466         }
1467
1468         // flagging required fields
1469         $fc = $this->fields_config;
1470
1471         // password required if we create a new member but not from self subscription
1472         if ($member->id != '' || $this->isSelfMembership()) {
1473             $fc->setNotRequired('mdp_adh');
1474         }
1475
1476         if (
1477             $member->hasParent() && !isset($post['detach_parent'])
1478             || isset($post['parent_id']) && !empty($post['parent_id'])
1479         ) {
1480             $parent_fields = $member->getParentFields();
1481             foreach ($parent_fields as $field) {
1482                 if ($fc->isRequired($field)) {
1483                     $fc->setNotRequired($field);
1484                 }
1485             }
1486         }
1487
1488         // flagging required fields invisible to members
1489         if ($this->login->isAdmin() || $this->login->isStaff()) {
1490             $fc->setNotRequired('activite_adh');
1491             $fc->setNotRequired('id_statut');
1492         }
1493
1494         $form_elements = $fc->getFormElements(
1495             $this->login,
1496             $member->id == '',
1497             $this->isSelfMembership()
1498         );
1499         $fieldsets     = $form_elements['fieldsets'];
1500         $required      = array();
1501         $disabled      = array();
1502
1503         foreach ($fieldsets as $category) {
1504             foreach ($category->elements as $field) {
1505                 if ($field->required == true) {
1506                     $required[$field->field_id] = true;
1507                 }
1508                 if ($field->disabled == true) {
1509                     $disabled[$field->field_id] = true;
1510                 } elseif (!isset($post[$field->field_id])) {
1511                     switch ($field->field_id) {
1512                         //unchecked booleans are not sent from form
1513                         case 'bool_admin_adh':
1514                         case 'bool_exempt_adh':
1515                         case 'bool_display_info':
1516                             $post[$field->field_id] = 0;
1517                             break;
1518                     }
1519                 }
1520             }
1521         }
1522
1523         $real_requireds = array_diff(array_keys($required), array_keys($disabled));
1524
1525         // send email to member
1526         if ($this->isSelfMembership() || isset($post['mail_confirm']) && $post['mail_confirm'] == '1') {
1527             $member->setSendmail(); //flag to send creation email
1528         }
1529
1530         // Validation
1531         $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1532         if (!count($real_requireds) || isset($post[array_shift($real_requireds)])) {
1533             // regular fields
1534             $valid = $member->check($post, $required, $disabled);
1535             if ($valid !== true) {
1536                 $error_detected = array_merge($error_detected, $valid);
1537             }
1538
1539             if (count($error_detected) == 0) {
1540                 //all goes well, we can proceed
1541
1542                 $new = false;
1543                 if ($member->id == '') {
1544                     $new = true;
1545                 }
1546
1547                 $store = $member->store();
1548                 if ($store === true) {
1549                     //member has been stored :)
1550                     if ($new) {
1551                         if ($this->isSelfMembership()) {
1552                             $success_detected[] = _T("Your account has been created!");
1553                             if (
1554                                 $this->preferences->pref_mail_method > GaletteMail::METHOD_DISABLED
1555                                 && $member->getEmail() != ''
1556                             ) {
1557                                 $success_detected[] = _T("An email has been sent to you, check your inbox.");
1558                             }
1559                         } else {
1560                             $success_detected[] = _T("New member has been successfully added.");
1561                         }
1562                     } else {
1563                         $success_detected[] = _T("Member account has been modified.");
1564                     }
1565
1566                     if ($this->login->isGroupManager()) {
1567                         //add/remove user from groups
1568                         $groups_adh = $post['groups_adh'] ?? null;
1569                         $add_groups = Groups::addMemberToGroups(
1570                             $member,
1571                             $groups_adh
1572                         );
1573
1574                         if ($add_groups === false) {
1575                             $error_detected[] = _T("An error occurred adding member to its groups.");
1576                         }
1577                     }
1578                     if ($this->login->isSuperAdmin() || $this->login->isAdmin() || $this->login->isStaff()) {
1579                         //add/remove manager from groups
1580                         $managed_groups_adh = $post['groups_managed_adh'] ?? null;
1581                         $add_groups = Groups::addMemberToGroups(
1582                             $member,
1583                             $managed_groups_adh,
1584                             true
1585                         );
1586                         $member->loadGroups();
1587
1588                         if ($add_groups === false) {
1589                             $error_detected[] = _T("An error occurred adding member to its groups as manager.");
1590                         }
1591                     }
1592                 } else {
1593                     //something went wrong :'(
1594                     $error_detected[] = _T("An error occurred while storing the member.");
1595                 }
1596             }
1597
1598             if (count($error_detected) === 0) {
1599                 $files_res = $member->handleFiles($_FILES);
1600                 if (is_array($files_res)) {
1601                     $error_detected = array_merge($error_detected, $files_res);
1602                 }
1603
1604                 if (isset($post['del_photo'])) {
1605                     if (!$member->picture->delete($member->id)) {
1606                         $error_detected[] = _T("Delete failed");
1607                         $str_adh = $member->id . ' (' . $member->sname . ' ' . ')';
1608                         Analog::log(
1609                             'Unable to delete picture for member ' . $str_adh,
1610                             Analog::ERROR
1611                         );
1612                     }
1613                 }
1614             }
1615
1616             if (count($error_detected) > 0) {
1617                 foreach ($error_detected as $error) {
1618                     if (strpos($error, '%member_url_') !== false) {
1619                         preg_match('/%member_url_(\d+)/', $error, $matches);
1620                         $url = $this->routeparser->urlFor('member', ['id' => $matches[1]]);
1621                         $error = str_replace(
1622                             '%member_url_' . $matches[1],
1623                             $url,
1624                             $error
1625                         );
1626                     }
1627                     $this->flash->addMessage(
1628                         'error_detected',
1629                         $error
1630                     );
1631                 }
1632             }
1633
1634             if (count($warning_detected) > 0) {
1635                 foreach ($warning_detected as $warning) {
1636                     $this->flash->addMessage(
1637                         'warning_detected',
1638                         $warning
1639                     );
1640                 }
1641             }
1642             if (count($success_detected) > 0) {
1643                 foreach ($success_detected as $success) {
1644                     $this->flash->addMessage(
1645                         'success_detected',
1646                         $success
1647                     );
1648                 }
1649             }
1650
1651             if (count($error_detected) === 0) {
1652                 if ($this->isSelfMembership()) {
1653                     $redirect_url = $this->routeparser->urlFor('login');
1654                 } elseif (
1655                     isset($post['redirect_on_create'])
1656                     && $post['redirect_on_create'] > Adherent::AFTER_ADD_DEFAULT
1657                 ) {
1658                     switch ($post['redirect_on_create']) {
1659                         case Adherent::AFTER_ADD_TRANS:
1660                             $redirect_url = $this->routeparser->urlFor('addTransaction');
1661                             break;
1662                         case Adherent::AFTER_ADD_NEW:
1663                             $redirect_url = $this->routeparser->urlFor('addMember');
1664                             break;
1665                         case Adherent::AFTER_ADD_SHOW:
1666                             $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1667                             break;
1668                         case Adherent::AFTER_ADD_LIST:
1669                             $redirect_url = $this->routeparser->urlFor('members');
1670                             break;
1671                         case Adherent::AFTER_ADD_HOME:
1672                             $redirect_url = $this->routeparser->urlFor('slash');
1673                             break;
1674                     }
1675                 } elseif (!isset($post['id_adh']) && !$member->isDueFree()) {
1676                     $redirect_url = $this->routeparser->urlFor(
1677                         'addContribution',
1678                         ['type' => 'fee']
1679                     ) . '?id_adh=' . $member->id;
1680                 } else {
1681                     $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1682                 }
1683             } else {
1684                 //store entity in session
1685                 $this->session->member = $member;
1686
1687                 if ($this->isSelfMembership()) {
1688                     $redirect_url = $this->routeparser->urlFor('subscribe');
1689                 } else {
1690                     if ($member->id) {
1691                         $redirect_url = $this->routeparser->urlFor(
1692                             'editMember',
1693                             ['id'    => $member->id]
1694                         );
1695                     } else {
1696                         $redirect_url = $this->routeparser->urlFor((isset($post['addchild']) ? 'addMemberChild' : 'addMember'));
1697                     }
1698                 }
1699             }
1700         }
1701
1702         return $response
1703             ->withStatus(301)
1704             ->withHeader('Location', $redirect_url);
1705     }
1706
1707
1708     // /CRUD - Update
1709     // CRUD - Delete
1710
1711     /**
1712      * Get redirection URI
1713      *
1714      * @param array $args Route arguments
1715      *
1716      * @return string
1717      */
1718     public function redirectUri(array $args)
1719     {
1720         return $this->routeparser->urlFor('members');
1721     }
1722
1723     /**
1724      * Get form URI
1725      *
1726      * @param array $args Route arguments
1727      *
1728      * @return string
1729      */
1730     public function formUri(array $args)
1731     {
1732         return $this->routeparser->urlFor(
1733             'doRemoveMember',
1734             $args
1735         );
1736     }
1737
1738     /**
1739      * Get confirmation removal page title
1740      *
1741      * @param array $args Route arguments
1742      *
1743      * @return string
1744      */
1745     public function confirmRemoveTitle(array $args)
1746     {
1747         if (isset($args['id_adh']) || isset($args['id'])) {
1748             //one member removal
1749             $id_adh = $args['id_adh'] ?? $args['id'];
1750             $adh = new Adherent($this->zdb, (int)$id_adh);
1751             return sprintf(
1752                 _T('Remove member %1$s'),
1753                 $adh->sfullname
1754             );
1755         } else {
1756             //batch members removal
1757             $filters = $this->session->filter_members;
1758             return str_replace(
1759                 '%count',
1760                 count($filters->selected),
1761                 _T('You are about to remove %count members.')
1762             );
1763         }
1764     }
1765
1766     /**
1767      * Remove object
1768      *
1769      * @param array $args Route arguments
1770      * @param array $post POST values
1771      *
1772      * @return bool
1773      */
1774     protected function doDelete(array $args, array $post)
1775     {
1776         if (isset($this->session->filter_members)) {
1777             $filters = $this->session->filter_members;
1778         } else {
1779             $filters = new MembersList();
1780         }
1781         $members = new Members($filters);
1782
1783         if (!is_array($post['id'])) {
1784             $ids = (array)$post['id'];
1785         } else {
1786             $ids = $post['id'];
1787         }
1788
1789         return $members->removeMembers($ids);
1790     }
1791
1792     // CRUD - Delete
1793
1794     /**
1795      * Set self memebrship flag
1796      *
1797      * @return MembersController
1798      */
1799     private function setSelfMembership(): MembersController
1800     {
1801         $this->is_self_membership = true;
1802         return $this;
1803     }
1804
1805     /**
1806      * Is self membership?
1807      *
1808      * @return bool
1809      */
1810     private function isSelfMembership(): bool
1811     {
1812         return $this->is_self_membership;
1813     }
1814
1815     /**
1816      * Handle navigation links
1817      *
1818      * @param int $id_adh Current member ID
1819      *
1820      * @return array
1821      */
1822     private function handleNavigationLinks(int $id_adh): array
1823     {
1824         $navigate = array();
1825
1826         if (isset($this->session->filter_members)) {
1827             $filters = $this->session->filter_members;
1828         } else {
1829             $filters = new MembersList();
1830         }
1831         //we must navigate between all members
1832         $filters->show = 0;
1833
1834         if (
1835             $this->login->isAdmin()
1836             || $this->login->isStaff()
1837             || $this->login->isGroupManager()
1838         ) {
1839             $m = new Members($filters);
1840
1841             $ids = array();
1842             $fields = [Adherent::PK, 'nom_adh', 'prenom_adh'];
1843             if ($this->login->isAdmin() || $this->login->isStaff()) {
1844                 $ids = $m->getMembersList(false, $fields);
1845             } else {
1846                 $ids = $m->getManagedMembersList(false, $fields);
1847             }
1848
1849             $ids = $ids->toArray();
1850             foreach ($ids as $k => $m) {
1851                 if ($m['id_adh'] == $id_adh) {
1852                     $navigate = array(
1853                         'cur'  => $m['id_adh'],
1854                         'count' => $filters->counter,
1855                         'pos' => $k + 1
1856                     );
1857                     if ($k > 0) {
1858                         $navigate['prev'] = $ids[$k - 1]['id_adh'];
1859                     }
1860                     if ($k < count($ids) - 1) {
1861                         $navigate['next'] = $ids[$k + 1]['id_adh'];
1862                     }
1863                     break;
1864                 }
1865             }
1866         }
1867
1868         return $navigate;
1869     }
1870
1871     /**
1872      * Get filter name in session
1873      *
1874      * @param array|null $args Route arguments
1875      *
1876      * @return string
1877      */
1878     public function getFilterName(array $args = null): string
1879     {
1880         return 'filter_members';
1881     }
1882 }