galette/lib/Galette/Controllers/Crud/MembersController.php

   1 <?php
   2
   3 /* vim: set expandtab tabstop=4 shiftwidth=4 softtabstop=4: */
   4
   5 /**
   6  * Galette members controller
   7  *
   8  * PHP version 5
   9  *
  10  * Copyright © 2019-2023 The Galette Team
  11  *
  12  * This file is part of Galette (http://galette.tuxfamily.org).
  13  *
  14  * Galette is free software: you can redistribute it and/or modify
  15  * it under the terms of the GNU General Public License as published by
  16  * the Free Software Foundation, either version 3 of the License, or
  17  * (at your option) any later version.
  18  *
  19  * Galette is distributed in the hope that it will be useful,
  20  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  21  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  22  *  GNU General Public License for more details.
  23  *
  24  * You should have received a copy of the GNU General Public License
  25  * along with Galette. If not, see <http://www.gnu.org/licenses/>.
  26  *
  27  * @category  Controllers
  28  * @package   Galette
  29  *
  30  * @author    Johan Cwiklinski <johan@x-tnd.be>
  31  * @copyright 2019-2023 The Galette Team
  32  * @license   http://www.gnu.org/licenses/gpl-3.0.html GPL License 3.0 or (at your option) any later version
  33  * @link      http://galette.tuxfamily.org
  34  * @since     Available since 0.9.4dev - 2019-12-02
  35  */
  36
  37 namespace Galette\Controllers\Crud;
  38
  39 use Galette\Controllers\CrudController;
  40 use Galette\DynamicFields\Boolean;
  41 use Galette\Features\BatchList;
  42 use Slim\Psr7\Request;
  43 use Slim\Psr7\Response;
  44 use Galette\Core\GaletteMail;
  45 use Galette\Core\Gaptcha;
  46 use Galette\Entity\Adherent;
  47 use Galette\Entity\Contribution;
  48 use Galette\Entity\ContributionsTypes;
  49 use Galette\Entity\DynamicFieldsHandle;
  50 use Galette\Entity\Group;
  51 use Galette\Entity\Status;
  52 use Galette\Entity\FieldsConfig;
  53 use Galette\Entity\Social;
  54 use Galette\Filters\AdvancedMembersList;
  55 use Galette\Filters\MembersList;
  56 use Galette\Repository\Groups;
  57 use Galette\Repository\Members;
  58 use Galette\Repository\PaymentTypes;
  59 use Galette\Repository\Titles;
  60 use Analog\Analog;
  61
  62 /**
  63  * Galette members controller
  64  *
  65  * @category  Controllers
  66  * @name      GaletteController
  67  * @package   Galette
  68  * @author    Johan Cwiklinski <johan@x-tnd.be>
  69  * @copyright 2019-2023 The Galette Team
  70  * @license   http://www.gnu.org/licenses/gpl-3.0.html GPL License 3.0 or (at your option) any later version
  71  * @link      http://galette.tuxfamily.org
  72  * @since     Available since 0.9.4dev - 2019-12-02
  73  */
  74
  75 class MembersController extends CrudController
  76 {
  77     use BatchList;
  78
  79     /** @var bool */
  80     private $is_self_membership = false;
  81
  82     // CRUD - Create
  83
  84     /**
  85      * Add page
  86      *
  87      * @param Request  $request  PSR Request
  88      * @param Response $response PSR Response
  89      *
  90      * @return Response
  91      */
  92     public function add(Request $request, Response $response): Response
  93     {
  94         return $this->edit($request, $response, null, 'add');
  95     }
  96
  97     /**
  98      * Add child page
  99      *
 100      * @param Request  $request  PSR Request
 101      * @param Response $response PSR Response
 102      *
 103      * @return Response
 104      */
 105     public function addChild(Request $request, Response $response): Response
 106     {
 107         return $this->edit($request, $response, null, 'addchild');
 108     }
 109
 110     /**
 111      * Self subscription page
 112      *
 113      * @param Request  $request  PSR Request
 114      * @param Response $response PSR Response
 115      *
 116      * @return Response
 117      */
 118     public function selfSubscribe(Request $request, Response $response): Response
 119     {
 120         if (!$this->preferences->pref_bool_selfsubscribe || $this->login->isLogged()) {
 121             return $response
 122                 ->withStatus(301)
 123                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
 124         }
 125
 126         if ($this->session->member !== null) {
 127             $member = $this->session->member;
 128             $this->session->member = null;
 129         } else {
 130             $member = new Adherent($this->zdb);
 131             $member->enableDep('dynamics');
 132         }
 133
 134         //mark as self membership
 135         $member->setSelfMembership();
 136
 137         // flagging required fields
 138         $fc = $this->fields_config;
 139         $form_elements = $fc->getFormElements($this->login, true, true);
 140
 141         // members
 142         $m = new Members();
 143         $members = $m->getDropdownMembers(
 144             $this->zdb,
 145             $this->login,
 146             $member->hasParent() ? $member->parent->id : null
 147         );
 148
 149         $params = [
 150             'members' => [
 151                 'filters'   => $m->getFilters(),
 152                 'count'     => $m->getCount()
 153             ]
 154         ];
 155
 156         if (count($members)) {
 157             $params['members']['list'] = $members;
 158         }
 159
 160         $gaptcha = new Gaptcha($this->i18n);
 161         $this->session->gaptcha = $gaptcha;
 162
 163         $titles = new Titles($this->zdb);
 164
 165         // display page
 166         $this->view->render(
 167             $response,
 168             'pages/member_form.html.twig',
 169             array(
 170                 'page_title'        => _T("Subscription"),
 171                 'parent_tpl'        => 'public_page.html.twig',
 172                 'member'            => $member,
 173                 'self_adh'          => true,
 174                 'autocomplete'      => true,
 175                 'osocials'          => new Social($this->zdb),
 176                 // pseudo random int
 177                 'time'              => time(),
 178                 'titles_list'       => $titles->getList(),
 179                 'fieldsets'         => $form_elements['fieldsets'],
 180                 'hidden_elements'   => $form_elements['hiddens'],
 181                 //self_adh specific
 182                 'gaptcha'           => $gaptcha
 183             ) + $params
 184         );
 185         return $response;
 186     }
 187
 188     /**
 189      * Add action
 190      *
 191      * @param Request  $request  PSR Request
 192      * @param Response $response PSR Response
 193      *
 194      * @return Response
 195      */
 196     public function doAdd(Request $request, Response $response): Response
 197     {
 198         return $this->store($request, $response);
 199     }
 200
 201     /**
 202      * Self subscription add action
 203      *
 204      * @param Request  $request  PSR Request
 205      * @param Response $response PSR Response
 206      *
 207      * @return Response
 208      */
 209     public function doSelfSubscribe(Request $request, Response $response): Response
 210     {
 211         $this->setSelfMembership();
 212         return $this->doAdd($request, $response);
 213     }
 214
 215
 216     /**
 217      * Duplicate action
 218      *
 219      * @param Request  $request  PSR Request
 220      * @param Response $response PSR Response
 221      * @param integer  $id_adh   Member ID to duplicate
 222      *
 223      * @return Response
 224      */
 225     public function duplicate(Request $request, Response $response, int $id_adh): Response
 226     {
 227         $adh = new Adherent($this->zdb, $id_adh, ['dynamics' => true, 'parent' => true]);
 228         $adh->setDuplicate();
 229
 230         //store entity in session
 231         $this->session->member = $adh;
 232
 233         return $response
 234             ->withStatus(301)
 235             ->withHeader('Location', $this->routeparser->urlFor('addMember'));
 236     }
 237
 238     // /CRUD - Create
 239     // CRUD - Read
 240
 241     /**
 242      * Display member card
 243      *
 244      * @param Request  $request  PSR Request
 245      * @param Response $response PSR Response
 246      * @param integer  $id       Member ID
 247      *
 248      * @return Response
 249      */
 250     public function show(Request $request, Response $response, int $id): Response
 251     {
 252         $member = new Adherent($this->zdb);
 253         $member
 254             ->enableAllDeps()
 255             ->load($id);
 256
 257         if (!$member->canShow($this->login)) {
 258             $this->flash->addMessage(
 259                 'error_detected',
 260                 _T("You do not have permission for requested URL.")
 261             );
 262
 263             return $response
 264                 ->withStatus(301)
 265                 ->withHeader(
 266                     'Location',
 267                     $this->routeparser->urlFor('me')
 268                 );
 269         }
 270
 271         if ($member->id == null) {
 272             //member does not exist!
 273             $this->flash->addMessage(
 274                 'error_detected',
 275                 str_replace('%id', $id, _T("No member #%id."))
 276             );
 277
 278             return $response
 279                 ->withHeader(
 280                     'Location',
 281                     $this->routeparser->urlFor('slash')
 282                 );
 283         }
 284
 285         // flagging fields visibility
 286         $fc = $this->fields_config;
 287         $display_elements = $fc->getDisplayElements($this->login);
 288
 289         // display page
 290         $this->view->render(
 291             $response,
 292             'pages/member_show.html.twig',
 293             array(
 294                 'page_title'        => _T("Member Profile"),
 295                 'member'            => $member,
 296                 'pref_lang'         => $this->i18n->getNameFromId($member->language),
 297                 'pref_card_self'    => $this->preferences->pref_card_self,
 298                 'groups'            => Groups::getSimpleList(),
 299                 'time'              => time(),
 300                 'display_elements'  => $display_elements,
 301                 'osocials'          => new Social($this->zdb),
 302                 'navigate'          => $this->handleNavigationLinks($member->id)
 303             )
 304         );
 305         return $response;
 306     }
 307
 308     /**
 309      * Own card show
 310      *
 311      * @param Request  $request  PSR Request
 312      * @param Response $response PSR Response
 313      *
 314      * @return Response
 315      */
 316     public function showMe(Request $request, Response $response): Response
 317     {
 318         if ($this->login->isSuperAdmin()) {
 319             return $response
 320                 ->withStatus(301)
 321                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
 322         }
 323         return $this->show($request, $response, $this->login->id);
 324     }
 325
 326     /**
 327      * Public pages (trombinoscope, public list)
 328      *
 329      * @param Request        $request  PSR Request
 330      * @param Response       $response PSR Response
 331      * @param string         $option   One of 'page' or 'order'
 332      * @param string|integer $value    Value of the option
 333      * @param string         $type     List type (either list or trombi)
 334      *
 335      * @return Response
 336      */
 337     public function publicList(
 338         Request $request,
 339         Response $response,
 340         $option = null,
 341         $value = null,
 342         $type = null
 343     ): Response {
 344         $varname = $this->getFilterName(['prefix' => 'public', 'suffix' => $type]);
 345         if (isset($this->session->$varname)) {
 346             $filters = $this->session->$varname;
 347         } else {
 348             $filters = new MembersList();
 349         }
 350
 351         if ($option !== null) {
 352             switch ($option) {
 353                 case 'page':
 354                     $filters->current_page = (int)$value;
 355                     break;
 356                 case 'order':
 357                     $filters->orderby = $value;
 358                     break;
 359             }
 360         }
 361
 362         $m = new Members($filters);
 363         $members = $m->getPublicList($type === 'trombi');
 364
 365         $this->session->$varname = $filters;
 366
 367         //assign pagination variables to the template and add pagination links
 368         $filters->setViewPagination($this->routeparser, $this->view, false);
 369
 370         // display page
 371         $this->view->render(
 372             $response,
 373             ($type === 'list' ? 'pages/members_public_list' : 'pages/members_public_gallery') . '.html.twig',
 374             array(
 375                 'page_title'    => ($type === 'list' ? _T("Members list") : _T('Trombinoscope')),
 376                 'additionnal_html_class'    => ($type === 'list' ? '' : 'trombinoscope'),
 377                 'type'          => $type,
 378                 'members'       => $members,
 379                 'nb_members'    => $m->getCount(),
 380                 'filters'       => $filters,
 381                 // pseudo random int
 382                 'time'              => time(),
 383             )
 384         );
 385         return $response;
 386     }
 387
 388     /**
 389      * Public pages (trombinoscope, public list)
 390      *
 391      * @param Request  $request  PSR Request
 392      * @param Response $response PSR Response
 393      * @param string   $type     Type
 394      *
 395      * @return Response
 396      */
 397     public function filterPublicList(Request $request, Response $response, string $type): Response
 398     {
 399         $post = $request->getParsedBody();
 400
 401         $varname = $this->getFilterName(['prefix' => 'public', 'suffix' => $type]);
 402         if (isset($this->session->$varname)) {
 403             $filters = $this->session->$varname;
 404         } else {
 405             $filters = new MembersList();
 406         }
 407
 408         //reintialize filters
 409         if (isset($post['clear_filter'])) {
 410             $filters->reinit();
 411         } else {
 412             //number of rows to show
 413             if (isset($post['nbshow'])) {
 414                 $filters->show = (int)$post['nbshow'];
 415             }
 416         }
 417
 418         $this->session->$varname = $filters;
 419
 420         return $response
 421             ->withStatus(301)
 422             ->withHeader('Location', $this->routeparser->urlFor('publicList', ['type' => $type]));
 423     }
 424
 425     /**
 426      * Members list
 427      *
 428      * @param Request        $request  PSR Request
 429      * @param Response       $response PSR Response
 430      * @param string         $option   One of 'page' or 'order'
 431      * @param string|integer $value    Value of the option
 432      *
 433      * @return Response
 434      */
 435     public function list(Request $request, Response $response, $option = null, $value = null): Response
 436     {
 437         if (isset($this->session->{$this->getFilterName()})) {
 438             $filters = $this->session->{$this->getFilterName()};
 439         } else {
 440             $filters = new MembersList();
 441         }
 442
 443         if ($option !== null) {
 444             switch ($option) {
 445                 case 'page':
 446                     $filters->current_page = (int)$value;
 447                     break;
 448                 case 'order':
 449                     $filters->orderby = $value;
 450                     break;
 451             }
 452         }
 453
 454         $members = new Members($filters);
 455
 456         $members_list = array();
 457         if ($this->login->isAdmin() || $this->login->isStaff()) {
 458             $members_list = $members->getMembersList(true);
 459         } else {
 460             $members_list = $members->getManagedMembersList(true);
 461         }
 462
 463         $groups = new Groups($this->zdb, $this->login);
 464         $groups_list = $groups->getList();
 465
 466         //assign pagination variables to the template and add pagination links
 467         $filters->setViewPagination($this->routeparser, $this->view, false);
 468         $filters->setViewCommonsFilters($this->preferences, $this->view);
 469
 470         $this->session->{$this->getFilterName()} = $filters;
 471
 472         // display page
 473         $this->view->render(
 474             $response,
 475             'pages/members_list.html.twig',
 476             array(
 477                 'page_title'            => _T("Members management"),
 478                 'require_mass'          => true,
 479                 'members'               => $members_list,
 480                 'filter_groups_options' => $groups_list,
 481                 'nb_members'            => $members->getCount(),
 482                 'filters'               => $filters,
 483                 'adv_filters'           => $filters instanceof AdvancedMembersList,
 484                 'galette_list'          => $this->lists_config->getDisplayElements($this->login)
 485             )
 486         );
 487         return $response;
 488     }
 489
 490     /**
 491      * Members filtering
 492      *
 493      * @param Request  $request  PSR Request
 494      * @param Response $response PSR Response
 495      *
 496      * @return Response
 497      */
 498     public function filter(Request $request, Response $response): Response
 499     {
 500         $post = $request->getParsedBody();
 501         $filters = $this->session->{$this->getFilterName()} ?? new MembersList();
 502
 503         //reinitialize filters
 504         if (isset($post['clear_filter'])) {
 505             $filters = new MembersList();
 506         } elseif (isset($post['clear_adv_filter'])) {
 507             $this->session->{$this->getFilterName()} = null;
 508             unset($this->session->{$this->getFilterName()});
 509
 510             return $response
 511                 ->withStatus(301)
 512                 ->withHeader('Location', $this->routeparser->urlFor('advanced-search'));
 513         } elseif (isset($post['adv_criteria'])) {
 514             return $response
 515                 ->withStatus(301)
 516                 ->withHeader('Location', $this->routeparser->urlFor('advanced-search'));
 517         } else {
 518             //string to filter
 519             if (isset($post['filter_str'])) { //filter search string
 520                 $filters->filter_str = stripslashes(
 521                     htmlspecialchars($post['filter_str'], ENT_QUOTES)
 522                 );
 523             }
 524             //field to filter
 525             if (isset($post['field_filter'])) {
 526                 if (is_numeric($post['field_filter'])) {
 527                     $filters->field_filter = $post['field_filter'];
 528                 }
 529             }
 530             //membership to filter
 531             if (isset($post['membership_filter'])) {
 532                 if (is_numeric($post['membership_filter'])) {
 533                     $filters->membership_filter
 534                         = $post['membership_filter'];
 535                 }
 536             }
 537             //account status to filter
 538             if (isset($post['filter_account'])) {
 539                 if (is_numeric($post['filter_account'])) {
 540                     $filters->filter_account = $post['filter_account'];
 541                 }
 542             }
 543             //email filter
 544             if (isset($post['email_filter'])) {
 545                 $filters->email_filter = (int)$post['email_filter'];
 546             }
 547             //group filter
 548             if (
 549                 isset($post['group_filter'])
 550                 && $post['group_filter'] > 0
 551             ) {
 552                 $filters->group_filter = (int)$post['group_filter'];
 553             }
 554             //number of rows to show
 555             if (isset($post['nbshow'])) {
 556                 $filters->show = (int)$post['nbshow'];
 557             }
 558
 559             if (isset($post['advanced_filtering'])) {
 560                 if (!$filters instanceof AdvancedMembersList) {
 561                     $filters = new AdvancedMembersList($filters);
 562                 }
 563                 //Advanced filters
 564                 $filters->reinit();
 565                 unset($post['advanced_filtering']);
 566                 $freed = false;
 567                 foreach ($post as $k => $v) {
 568                     if (strpos($k, 'free_', 0) === 0) {
 569                         if (!$freed) {
 570                             $i = 0;
 571                             foreach ($post['free_field'] as $f) {
 572                                 if (
 573                                     trim($f) !== ''
 574                                     && trim($post['free_text'][$i]) !== ''
 575                                 ) {
 576                                     $fs_search = htmlspecialchars($post['free_text'][$i], ENT_QUOTES);
 577                                     $log_op
 578                                         = (int)$post['free_logical_operator'][$i];
 579                                     $qry_op
 580                                         = (int)$post['free_query_operator'][$i];
 581                                     $type = (int)$post['free_type'][$i];
 582                                     $fs = array(
 583                                         'idx'       => $i,
 584                                         'field'     => $f,
 585                                         'type'      => $type,
 586                                         'search'    => $fs_search,
 587                                         'log_op'    => $log_op,
 588                                         'qry_op'    => $qry_op
 589                                     );
 590                                     $filters->free_search = $fs;
 591                                 }
 592                                 $i++;
 593                             }
 594                             $freed = true;
 595                         }
 596                     } elseif ($k == 'groups_search') {
 597                         $i = 0;
 598                         $filters->groups_search_log_op = (int)$post['groups_logical_operator'];
 599                         foreach ($post['groups_search'] as $g) {
 600                             if (trim($g) !== '') {
 601                                 $gs = array(
 602                                     'idx'       => $i,
 603                                     'group'     => $g
 604                                 );
 605                                 $filters->groups_search = $gs;
 606                             }
 607                             $i++;
 608                         }
 609                     } else {
 610                         switch ($k) {
 611                             case 'contrib_min_amount':
 612                             case 'contrib_max_amount':
 613                                 if (trim($v) !== '') {
 614                                     $v = (float)$v;
 615                                 } else {
 616                                     $v = null;
 617                                 }
 618                                 break;
 619                         }
 620                         $filters->$k = $v;
 621                     }
 622                 }
 623             }
 624         }
 625
 626         if (isset($post['savesearch'])) {
 627             return $response
 628                 ->withStatus(301)
 629                 ->withHeader(
 630                     'Location',
 631                     $this->routeparser->urlFor(
 632                         'saveSearch',
 633                         $post
 634                     )
 635                 );
 636         }
 637
 638         $this->session->{$this->getFilterName()} = $filters;
 639
 640         return $response
 641             ->withStatus(301)
 642             ->withHeader('Location', $this->routeparser->urlFor('members'));
 643     }
 644
 645     /**
 646      * Advanced search page
 647      *
 648      * @param Request  $request  PSR Request
 649      * @param Response $response PSR Response
 650      *
 651      * @return Response
 652      */
 653     public function advancedSearch(Request $request, Response $response): Response
 654     {
 655         if (isset($this->session->{$this->getFilterName()})) {
 656             $filters = $this->session->{$this->getFilterName()};
 657             if (!$filters instanceof AdvancedMembersList) {
 658                 $filters = new AdvancedMembersList($filters);
 659             }
 660         } else {
 661             $filters = new AdvancedMembersList();
 662         }
 663
 664         $groups = new Groups($this->zdb, $this->login);
 665         $groups_list = $groups->getList();
 666
 667         //we want only visible fields
 668         $fields = $this->members_fields;
 669         $fc = $this->fields_config;
 670         $fc->filterVisible($this->login, $fields);
 671
 672         //dynamic fields
 673         $member = new Adherent($this->zdb);
 674         $member
 675             ->disableAllDeps()
 676             ->enableDep('dynamics')
 677             ->loadFromLoginOrMail($this->login->login);
 678         $adh_dynamics = new DynamicFieldsHandle($this->zdb, $this->login, $member);
 679
 680         $contrib = new Contribution($this->zdb, $this->login);
 681         $contrib_dynamics = new DynamicFieldsHandle($this->zdb, $this->login, $contrib);
 682
 683         //Status
 684         $statuts = new Status($this->zdb);
 685
 686         //Contributions types
 687         $ct = new ContributionsTypes($this->zdb);
 688
 689         //Payment types
 690         $ptypes = new PaymentTypes(
 691             $this->zdb,
 692             $this->preferences,
 693             $this->login
 694         );
 695         $ptlist = $ptypes->getList();
 696
 697         $filters->setViewCommonsFilters($this->preferences, $this->view);
 698
 699         $social = new Social($this->zdb);
 700         $types = $member->getMemberRegisteredTypes();
 701         $social_types = [];
 702         foreach ($types as $type) {
 703             $social_types[$type] = $social->getSystemType($type);
 704         }
 705
 706         // display page
 707         $this->view->render(
 708             $response,
 709             'pages/advanced_search.html.twig',
 710             array(
 711                 'page_title'            => _T("Advanced search"),
 712                 'filter_groups_options' => $groups_list,
 713                 'search_fields'         => $fields,
 714                 'adh_dynamics'          => $adh_dynamics->getSearchFields(),
 715                 'contrib_dynamics'      => $contrib_dynamics->getSearchFields(),
 716                 'adh_socials'           => $social_types,
 717                 'statuts'               => $statuts->getList(),
 718                 'contributions_types'   => $ct->getList(),
 719                 'filters'               => $filters,
 720                 'payments_types'        => $ptlist
 721             )
 722         );
 723         return $response;
 724     }
 725
 726     /**
 727      * Members list for ajax
 728      *
 729      * @param Request        $request  PSR Request
 730      * @param Response       $response PSR Response
 731      * @param string|null    $option   One of 'page' or 'order'
 732      * @param string|integer $value    Value of the option
 733      *
 734      * @return Response
 735      */
 736     public function ajaxList(Request $request, Response $response, string $option = null, $value = null): Response
 737     {
 738         $post = $request->getParsedBody();
 739
 740         $filters = $this->session->{$this->getFilterName(['prefix' => 'ajax'])} ?? new MembersList();
 741
 742         if ($option == 'page') {
 743             $filters->current_page = (int)$value;
 744         }
 745
 746         //numbers of rows to display
 747         if (isset($post['nbshow']) && is_numeric($post['nbshow'])) {
 748             $filters->show = (int)$post['nbshow'];
 749         }
 750
 751         $members = new Members($filters);
 752         if (!$this->login->isAdmin() && !$this->login->isStaff()) {
 753             if ($this->login->isGroupManager()) {
 754                 $members_list = $members->getManagedMembersList(true);
 755             } else {
 756                 Analog::log(
 757                     str_replace(
 758                         ['%id', '%login'],
 759                         [$this->login->id, $this->login->login],
 760                         'Trying to list group members without access from #%id (%login)'
 761                     ),
 762                     Analog::ERROR
 763                 );
 764                 throw new \Exception('Access denied.');
 765             }
 766         } else {
 767             $members_list = $members->getMembersList(true);
 768         }
 769
 770         //assign pagination variables to the template and add pagination links
 771         $filters->setViewPagination($this->routeparser, $this->view, false);
 772
 773         $this->session->{$this->getFilterName(['prefix' => 'ajax'])} = $filters;
 774
 775         $selected_members = null;
 776         $unreachables_members = null;
 777         if (!isset($post['from'])) {
 778             $mailing = $this->session->mailing;
 779             if (!isset($post['members'])) {
 780                 $selected_members = $mailing->recipients;
 781                 $unreachables_members = $mailing->unreachables;
 782             } else {
 783                 $m = new Members();
 784                 $selected_members = $m->getArrayList($post['members']);
 785                 if (isset($post['unreachables']) && is_array($post['unreachables'])) {
 786                     $unreachables_members = $m->getArrayList($post['unreachables']);
 787                 }
 788             }
 789         } else {
 790             switch ($post['from']) {
 791                 case 'groups':
 792                     if (!isset($post['gid'])) {
 793                         Analog::log(
 794                             'Trying to list group members with no group id provided',
 795                             Analog::ERROR
 796                         );
 797                         throw new \Exception('A group id is required.');
 798                     }
 799                     if (!isset($post['members'])) {
 800                         $group = new Group((int)$post['gid']);
 801                         $selected_members = array();
 802                         if (!isset($post['mode']) || $post['mode'] == 'members') {
 803                             $selected_members = $group->getMembers();
 804                         } elseif ($post['mode'] == 'managers') {
 805                             $selected_members = $group->getManagers();
 806                         } else {
 807                             Analog::log(
 808                                 'Trying to list group members with unknown mode',
 809                                 Analog::ERROR
 810                             );
 811                             throw new \Exception('Unknown mode.');
 812                         }
 813                     } else {
 814                         $m = new Members();
 815                         $selected_members = $m->getArrayList($post['members']);
 816                         if (isset($post['unreachables']) && is_array($post['unreachables'])) {
 817                             $unreachables_members = $m->getArrayList($post['unreachables']);
 818                         }
 819                     }
 820                     break;
 821                 case 'attach':
 822                     if (!isset($post['id_adh'])) {
 823                         throw new \RuntimeException(
 824                             'Current selected member must be excluded while attaching!'
 825                         );
 826                     }
 827                     break;
 828             }
 829         }
 830
 831         $params = [
 832             'filters'               => $filters,
 833             'members_list'          => $members_list,
 834             'selected_members'      => $selected_members,
 835             'unreachables_members'  => $unreachables_members
 836         ];
 837
 838         if (isset($post['multiple'])) {
 839             $params['multiple'] = true;
 840         }
 841
 842         if (isset($post['gid'])) {
 843             $params['the_id'] = (int)$post['gid'];
 844         }
 845
 846         if (isset($post['id_adh'])) {
 847             $params['excluded'] = (int)$post['id_adh'];
 848         }
 849
 850         // display page
 851         $this->view->render(
 852             $response,
 853             'elements/ajax_members.html.twig',
 854             $params
 855         );
 856         return $response;
 857     }
 858
 859     /**
 860      * Batch actions handler
 861      *
 862      * @param Request  $request  PSR Request
 863      * @param Response $response PSR Response
 864      *
 865      * @return Response
 866      */
 867     public function handleBatch(Request $request, Response $response): Response
 868     {
 869         $post = $request->getParsedBody();
 870
 871         if (isset($post['entries_sel'])) {
 872             if (isset($this->session->{$this->getFilterName()})) {
 873                 $filters = $this->session->{$this->getFilterName()};
 874             } else {
 875                 $filters = new MembersList();
 876             }
 877
 878             $filters->selected = $post['entries_sel'];
 879             $knowns = [
 880                 'cards' => 'pdf-members-cards',
 881                 'labels' => 'pdf-members-labels',
 882                 'sendmail' => 'mailing',
 883                 'attendance_sheet' => 'attendance_sheet_details',
 884                 'csv' => 'csv-memberslist',
 885                 'delete' => 'removeMembers',
 886                 'masschange' => 'masschangeMembers',
 887                 'masscontributions' => 'massAddContributionsChooseType'
 888             ];
 889
 890             foreach ($knowns as $known => $redirect_url) {
 891                 if (isset($post[$known])) {
 892                     $this->session->{$this->getFilterName(['suffix' => $known])} = $filters;
 893                     $redirect_url = $this->routeparser->urlFor($redirect_url);
 894                     if ($known === 'sendmail') {
 895                         $redirect_url .= '?mailing_new=new';
 896                     }
 897                     return $response
 898                         ->withStatus(301)
 899                         ->withHeader('Location', $redirect_url);
 900                 }
 901             }
 902
 903             throw new \RuntimeException('Does not know what to batch :(');
 904         } else {
 905             $this->flash->addMessage(
 906                 'error_detected',
 907                 _T("No member was selected, please check at least one name.")
 908             );
 909
 910             return $response
 911                 ->withStatus(301)
 912                 ->withHeader('Location', $this->routeparser->urlFor('members'));
 913         }
 914     }
 915
 916     // /CRUD - Read
 917     // CRUD - Update
 918
 919     /**
 920      * Edit page
 921      *
 922      * @param Request  $request  PSR Request
 923      * @param Response $response PSR Response
 924      * @param ?integer $id       Member id/array of members id
 925      * @param string   $action   null or 'add'
 926      *
 927      * @return Response
 928      */
 929     public function edit(
 930         Request $request,
 931         Response $response,
 932         int $id = null,
 933         string $action = 'edit'
 934     ): Response {
 935         //instantiate member object
 936         $member = new Adherent($this->zdb);
 937
 938         if ($this->session->member !== null) {
 939             //retrieve from session, in add or edit
 940             $member = $this->session->member;
 941             $this->session->member = null;
 942             $id = $member->id;
 943         }
 944         $member->enableAllDeps();
 945
 946         if ($id !== null) {
 947             //load requested member
 948             $member->load($id);
 949             $can = $member->canEdit($this->login);
 950         } else {
 951             $can = $member->canCreate($this->login);
 952         }
 953
 954         if (!$can) {
 955             $this->flash->addMessage(
 956                 'error_detected',
 957                 _T("You do not have permission for requested URL.")
 958             );
 959
 960             return $response
 961                 ->withHeader(
 962                     'Location',
 963                     $this->routeparser->urlFor('me')
 964                 );
 965         }
 966
 967         //if adding a child, force parent here
 968         if ($action === 'addchild') {
 969             $member->setParent((int)$this->login->id);
 970         }
 971
 972         // flagging required fields
 973         $fc = $this->fields_config;
 974
 975         // password required if we create a new member
 976         if ($id !== null) {
 977             $fc->setNotRequired('mdp_adh');
 978         }
 979
 980         //handle requirements for parent fields
 981         $parent_fields = $member->getParentFields();
 982         $tpl_parent_fields = []; //for JS when detaching
 983         foreach ($parent_fields as $field) {
 984             if ($fc->isRequired($field)) {
 985                 $tpl_parent_fields[] = $field;
 986                 if ($member->hasParent()) {
 987                     $fc->setNotRequired($field);
 988                 }
 989             }
 990         }
 991
 992         // flagging required fields invisible to members
 993         if ($this->login->isAdmin() || $this->login->isStaff()) {
 994             $fc->setNotRequired('activite_adh');
 995             $fc->setNotRequired('id_statut');
 996         }
 997
 998         // template variable declaration
 999         $title = _T("Member Profile");
1000         if ($member->id != '') {
1001             $title .= ' (' . _T("modification") . ')';
1002         } else {
1003             $title .= ' (' . _T("creation") . ')';
1004         }
1005
1006         //Status
1007         $statuts = new Status($this->zdb);
1008         //Titles
1009         $titles = new Titles($this->zdb);
1010
1011         //Groups
1012         $groups = new Groups($this->zdb, $this->login);
1013         $groups_list = $groups->getSimpleList(true);
1014
1015         $form_elements = $fc->getFormElements(
1016             $this->login,
1017             $id === null
1018         );
1019
1020         // members
1021         $m = new Members();
1022         $pid = null;
1023         if ($member->hasParent()) {
1024             $pid = ($member->parent instanceof Adherent ? $member->parent->id : $member->parent);
1025         }
1026         $members = $m->getDropdownMembers(
1027             $this->zdb,
1028             $this->login,
1029             $pid
1030         );
1031
1032         $route_params['members'] = [
1033             'filters'   => $m->getFilters(),
1034             'count'     => $m->getCount()
1035         ];
1036
1037         if (count($members)) {
1038             $route_params['members']['list'] = $members;
1039         }
1040
1041         if ($action === 'edit') {
1042             $route_params['navigate'] = $this->handleNavigationLinks($member->id);
1043         }
1044
1045         // display page
1046         $this->view->render(
1047             $response,
1048             'pages/member_form.html.twig',
1049             array(
1050                 'parent_tpl'        => 'page.html.twig',
1051                 'autocomplete'      => true,
1052                 'page_title'        => $title,
1053                 'member'            => $member,
1054                 'self_adh'          => false,
1055                 // pseudo random int
1056                 'time'              => time(),
1057                 'titles_list'       => $titles->getList(),
1058                 'statuts'           => $statuts->getList(),
1059                 'groups'            => $groups_list,
1060                 'fieldsets'         => $form_elements['fieldsets'],
1061                 'hidden_elements'   => $form_elements['hiddens'],
1062                 'parent_fields'     => $tpl_parent_fields,
1063                 'addchild'          => ($action === 'addchild'),
1064                 'osocials'          => new Social($this->zdb)
1065             ) + $route_params
1066         );
1067         return $response;
1068     }
1069
1070     /**
1071      * Edit action
1072      *
1073      * @param Request  $request  PSR Request
1074      * @param Response $response PSR Response
1075      * @param integer  $id       Member id
1076      *
1077      * @return Response
1078      */
1079     public function doEdit(Request $request, Response $response, int $id): Response
1080     {
1081         return $this->store($request, $response);
1082     }
1083
1084     /**
1085      * Massive change page
1086      *
1087      * @param Request  $request  PSR Request
1088      * @param Response $response PSR Response
1089      *
1090      * @return Response
1091      */
1092     public function massChange(Request $request, Response $response): Response
1093     {
1094         $filters = $this->session->{$this->getFilterName(['suffix' => 'masschange'])} ?? new MembersList();
1095
1096         $data = [
1097             'id'            => $filters->selected,
1098             'redirect_uri'  => $this->routeparser->urlFor('members')
1099         ];
1100
1101         $fc = $this->fields_config;
1102         $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1103
1104         //dynamic fields
1105         $member = new Adherent($this->zdb);
1106         $member->disableAllDeps()->enableDep('dynamics');
1107
1108         //Status
1109         $statuts = new Status($this->zdb);
1110         //Titles
1111         $titles = new Titles($this->zdb);
1112
1113         // display page
1114         $this->view->render(
1115             $response,
1116             'modals/mass_change_members.html.twig',
1117             array(
1118                 'mode'          => ($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest') ? 'ajax' : '',
1119                 'page_title'    => str_replace(
1120                     '%count',
1121                     count($data['id']),
1122                     _T('Mass change %count members')
1123                 ),
1124                 'form_url'      => $this->routeparser->urlFor('masschangeMembersReview'),
1125                 'cancel_uri'    => $this->routeparser->urlFor('members'),
1126                 'data'          => $data,
1127                 'member'        => $member,
1128                 'fieldsets'     => $form_elements['fieldsets'],
1129                 'titles_list'   => $titles->getList(),
1130                 'statuts'       => $statuts->getList(),
1131                 'require_mass'  => true
1132             )
1133         );
1134         return $response;
1135     }
1136
1137     /**
1138      * Massive changes validation page
1139      *
1140      * @param Request  $request  PSR Request
1141      * @param Response $response PSR Response
1142      *
1143      * @return Response
1144      */
1145     public function validateMassChange(Request $request, Response $response): Response
1146     {
1147         $post = $request->getParsedBody();
1148         $changes = [];
1149
1150         if (!isset($post['confirm'])) {
1151             $this->flash->addMessage(
1152                 'error_detected',
1153                 _T("Mass changes has not been confirmed!")
1154             );
1155         } else {
1156             //we want only visibles fields
1157             $fc = $this->fields_config;
1158             $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1159
1160             foreach ($form_elements['fieldsets'] as $form_element) {
1161                 foreach ($form_element->elements as $field) {
1162                     if (
1163                         isset($post['mass_' . $field->field_id])
1164                         && (isset($post[$field->field_id]) || $field->type === FieldsConfig::TYPE_BOOL)
1165                     ) {
1166                         $changes[$field->field_id] = [
1167                             'label' => $field->label,
1168                             'value' => $post[$field->field_id] ?? 0
1169                         ];
1170                     }
1171                 }
1172             }
1173
1174             //handle dynamic fields
1175             $member = new Adherent($this->zdb);
1176             $member
1177                 ->enableAllDeps()
1178                 ->setDependencies(
1179                     $this->preferences,
1180                     $this->members_fields,
1181                     $this->history
1182                 );
1183             $dynamic_fields = $member->getDynamicFields()->getFields();
1184             foreach ($dynamic_fields as $field) {
1185                 $mass_id = 'mass_info_field_' . $field->getId();
1186                 $field_id = 'info_field_' . $field->getId() . '_1';
1187                 if (
1188                     isset($post[$mass_id])
1189                     && (isset($post[$field_id]) || $field instanceof Boolean)
1190                 ) {
1191                     $changes[$field_id] = [
1192                         'label' => $field->getName(),
1193                         'value' => $post[$field_id] ?? 0
1194                     ];
1195                 }
1196             }
1197         }
1198
1199         $filters = $this->session->{$this->getFilterName(['suffix' => 'masschange'])};
1200         $data = [
1201             'id'            => $filters->selected,
1202             'redirect_uri'  => $this->routeparser->urlFor('members')
1203         ];
1204
1205         //Status
1206         $statuts = new Status($this->zdb);
1207         //Titles
1208         $titles = new Titles($this->zdb);
1209
1210         // display page
1211         $this->view->render(
1212             $response,
1213             'modals/mass_change_members.html.twig',
1214             array(
1215                 'mode'          => ($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest') ? 'ajax' : '',
1216                 'page_title'    => str_replace(
1217                     '%count',
1218                     count($data['id']),
1219                     _T('Review mass change %count members')
1220                 ),
1221                 'form_url'      => $this->routeparser->urlFor('massstoremembers'),
1222                 'cancel_uri'    => $this->routeparser->urlFor('members'),
1223                 'data'          => $data,
1224                 'titles_list'   => $titles->getList(),
1225                 'statuts'       => $statuts->getList(),
1226                 'changes'       => $changes
1227             )
1228         );
1229         return $response;
1230     }
1231
1232     /**
1233      * Do massive changes
1234      *
1235      * @param Request  $request  PSR Request
1236      * @param Response $response PSR Response
1237      *
1238      * @return Response
1239      */
1240     public function doMassChange(Request $request, Response $response): Response
1241     {
1242         $post = $request->getParsedBody();
1243         $redirect_url = $post['redirect_uri'];
1244         $error_detected = [];
1245         $mass = 0;
1246         $dynamic_fields = null;
1247
1248         unset($post['redirect_uri']);
1249         if (!isset($post['confirm'])) {
1250             $error_detected[] = _T("Mass changes has not been confirmed!");
1251         } else {
1252             unset($post['confirm']);
1253             $ids = $post['id'];
1254             unset($post['id']);
1255
1256             $fc = $this->fields_config;
1257             $form_elements = $fc->getMassiveFormElements($this->members_fields, $this->login);
1258             $disabled = $this->members_fields;
1259             foreach (array_keys($post) as $key) {
1260                 $found = false;
1261                 foreach ($form_elements['fieldsets'] as $fieldset) {
1262                     if (isset($fieldset->elements[$key])) {
1263                         $found = true;
1264                         break;
1265                     }
1266                 }
1267
1268                 if (!$found) {
1269                     //try on dynamic fields
1270                     if ($dynamic_fields === null) {
1271                         //handle dynamic fields
1272                         $member = new Adherent($this->zdb);
1273                         $member
1274                             ->enableAllDeps()
1275                             ->setDependencies(
1276                                 $this->preferences,
1277                                 $this->members_fields,
1278                                 $this->history
1279                             );
1280                         $dynamic_fields = $member->getDynamicFields()->getFields();
1281                     }
1282                     foreach ($dynamic_fields as $field) {
1283                         $field_id = 'info_field_' . $field->getId() . '_1';
1284                         if ($key == $field_id) {
1285                             $found = true;
1286                             break;
1287                         }
1288                     }
1289                 }
1290
1291                 if (!$found) {
1292                     Analog::log(
1293                         'Permission issue mass editing field ' . $key,
1294                         Analog::WARNING
1295                     );
1296                     unset($post[$key]);
1297                 } else {
1298                     unset($disabled[$key]);
1299                 }
1300             }
1301
1302             if (!count($post)) {
1303                 $error_detected[] = _T("Nothing to do!");
1304             } else {
1305                 foreach ($ids as $id) {
1306                     $is_manager = !$this->login->isAdmin()
1307                         && !$this->login->isStaff()
1308                         && $this->login->isGroupManager();
1309                     $member = new Adherent($this->zdb);
1310                     $member->disableAllDeps();
1311                     if ($is_manager) {
1312                         $member->enableDep('groups');
1313                     }
1314                     $member->load((int)$id);
1315                     $member->setDependencies(
1316                         $this->preferences,
1317                         $this->members_fields,
1318                         $this->history
1319                     );
1320                     if (!$member->canEdit($this->login)) {
1321                         continue;
1322                     }
1323
1324                     $valid = $member->check($post, [], $disabled);
1325                     if ($valid === true) {
1326                         $done = $member->store();
1327                         if (!$done) {
1328                             $error_detected[] = _T("An error occurred while storing the member.");
1329                         } else {
1330                             ++$mass;
1331                         }
1332                     } else {
1333                         $error_detected = array_merge($error_detected, $valid);
1334                     }
1335                 }
1336             }
1337         }
1338
1339         if ($mass == 0 && !count($error_detected)) {
1340             $error_detected[] = _T('Something went wront during mass edition!');
1341         } else {
1342             $this->flash->addMessage(
1343                 'success_detected',
1344                 str_replace(
1345                     '%count',
1346                     $mass,
1347                     _T('%count members has been changed successfully!')
1348                 )
1349             );
1350         }
1351
1352         if (count($error_detected) > 0) {
1353             foreach ($error_detected as $error) {
1354                 $this->flash->addMessage(
1355                     'error_detected',
1356                     $error
1357                 );
1358             }
1359         }
1360
1361         if (!($request->getHeaderLine('X-Requested-With') === 'XMLHttpRequest')) {
1362             return $response
1363                 ->withStatus(301)
1364                 ->withHeader('Location', $redirect_url);
1365         } else {
1366             return $this->withJson(
1367                 $response,
1368                 [
1369                     'success' => count($error_detected) === 0
1370                 ]
1371             );
1372         }
1373     }
1374
1375     /**
1376      * Store
1377      *
1378      * @param Request  $request  PSR Request
1379      * @param Response $response PSR Response
1380      *
1381      * @return Response
1382      */
1383     public function store(Request $request, Response $response): Response
1384     {
1385         if (!$this->preferences->pref_bool_selfsubscribe && !$this->login->isLogged()) {
1386             return $response
1387                 ->withStatus(301)
1388                 ->withHeader('Location', $this->routeparser->urlFor('slash'));
1389         }
1390
1391         $post = $request->getParsedBody();
1392         $member = new Adherent($this->zdb);
1393         $member
1394             ->enableAllDeps()
1395             ->setDependencies(
1396                 $this->preferences,
1397                 $this->members_fields,
1398                 $this->history
1399             );
1400
1401         $success_detected = [];
1402         $error_detected = [];
1403
1404         if ($this->isSelfMembership() && !isset($post[Adherent::PK])) {
1405             //mark as self membership
1406             $member->setSelfMembership();
1407
1408             //check captcha
1409             $gaptcha = $this->session->gaptcha;
1410             if (!$gaptcha->check($post['gaptcha'])) {
1411                 $error_detected[] = _T('Invalid captcha');
1412             }
1413         }
1414
1415         // new or edit
1416         if (isset($post['id_adh'])) {
1417             $member->load((int)$post['id_adh']);
1418             if (!$member->canEdit($this->login)) {
1419                 //redirection should have been done before. Just throw an Exception.
1420                 throw new \RuntimeException(
1421                     str_replace(
1422                         '%id',
1423                         $member->id,
1424                         'No right to store member #%id'
1425                     )
1426                 );
1427             }
1428         } else {
1429             if ($member->id != '') {
1430                 $member->load($this->login->id);
1431             }
1432         }
1433
1434         // flagging required fields
1435         $fc = $this->fields_config;
1436
1437         // password required if we create a new member but not from self subscription
1438         if ($member->id != '' || $this->isSelfMembership()) {
1439             $fc->setNotRequired('mdp_adh');
1440         }
1441
1442         if (
1443             $member->hasParent() && !isset($post['detach_parent'])
1444             || isset($post['parent_id']) && !empty($post['parent_id'])
1445         ) {
1446             $parent_fields = $member->getParentFields();
1447             foreach ($parent_fields as $field) {
1448                 if ($fc->isRequired($field)) {
1449                     $fc->setNotRequired($field);
1450                 }
1451             }
1452         }
1453
1454         // flagging required fields invisible to members
1455         if ($this->login->isAdmin() || $this->login->isStaff()) {
1456             $fc->setNotRequired('activite_adh');
1457             $fc->setNotRequired('id_statut');
1458         }
1459
1460         $form_elements = $fc->getFormElements(
1461             $this->login,
1462             $member->id == '',
1463             $this->isSelfMembership()
1464         );
1465         $fieldsets     = $form_elements['fieldsets'];
1466         $required      = array();
1467         $disabled      = array();
1468
1469         foreach ($fieldsets as $category) {
1470             foreach ($category->elements as $field) {
1471                 if ($field->required == true) {
1472                     $required[$field->field_id] = true;
1473                 }
1474                 if ($field->disabled == true) {
1475                     $disabled[$field->field_id] = true;
1476                 } elseif (!isset($post[$field->field_id])) {
1477                     switch ($field->field_id) {
1478                         //unchecked booleans are not sent from form
1479                         case 'bool_admin_adh':
1480                         case 'bool_exempt_adh':
1481                         case 'bool_display_info':
1482                             $post[$field->field_id] = 0;
1483                             break;
1484                     }
1485                 }
1486             }
1487         }
1488
1489         $real_requireds = array_diff(array_keys($required), array_keys($disabled));
1490
1491         // send email to member
1492         if ($this->isSelfMembership() || isset($post['mail_confirm']) && $post['mail_confirm'] == '1') {
1493             $member->setSendmail(); //flag to send creation email
1494         }
1495
1496         // Validation
1497         $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1498         if (!count($real_requireds) || isset($post[array_shift($real_requireds)])) {
1499             // regular fields
1500             $valid = $member->check($post, $required, $disabled);
1501             if ($valid !== true) {
1502                 $error_detected = array_merge($error_detected, $valid);
1503             }
1504
1505             if (count($error_detected) == 0) {
1506                 //all goes well, we can proceed
1507
1508                 $new = false;
1509                 if ($member->id == '') {
1510                     $new = true;
1511                 }
1512
1513                 $store = $member->store();
1514                 if ($store === true) {
1515                     //member has been stored :)
1516                     if ($new) {
1517                         if ($this->isSelfMembership()) {
1518                             $success_detected[] = _T("Your account has been created!");
1519                             if (
1520                                 $this->preferences->pref_mail_method > GaletteMail::METHOD_DISABLED
1521                                 && $member->getEmail() != ''
1522                             ) {
1523                                 $success_detected[] = _T("An email has been sent to you, check your inbox.");
1524                             }
1525                         } else {
1526                             $success_detected[] = _T("New member has been successfully added.");
1527                         }
1528                     } else {
1529                         $success_detected[] = _T("Member account has been modified.");
1530                     }
1531
1532                     if ($this->login->isGroupManager()) {
1533                         //add/remove user from groups
1534                         $groups_adh = $post['groups_adh'] ?? null;
1535                         $add_groups = Groups::addMemberToGroups(
1536                             $member,
1537                             $groups_adh
1538                         );
1539
1540                         if ($add_groups === false) {
1541                             $error_detected[] = _T("An error occurred adding member to its groups.");
1542                         }
1543                     }
1544                     if ($this->login->isSuperAdmin() || $this->login->isAdmin() || $this->login->isStaff()) {
1545                         //add/remove manager from groups
1546                         $managed_groups_adh = $post['groups_managed_adh'] ?? null;
1547                         $add_groups = Groups::addMemberToGroups(
1548                             $member,
1549                             $managed_groups_adh,
1550                             true
1551                         );
1552                         $member->loadGroups();
1553
1554                         if ($add_groups === false) {
1555                             $error_detected[] = _T("An error occurred adding member to its groups as manager.");
1556                         }
1557                     }
1558                 } else {
1559                     //something went wrong :'(
1560                     $error_detected[] = _T("An error occurred while storing the member.");
1561                 }
1562             }
1563
1564             if (count($error_detected) === 0) {
1565                 $cropping = null;
1566                 if ($this->preferences->pref_force_picture_ratio == 1) {
1567                     $cropping = [];
1568                     $cropping['ratio'] = isset($this->preferences->pref_member_picture_ratio) ? $this->preferences->pref_member_picture_ratio : 'square_ratio';
1569                     $cropping['focus'] = isset($post['crop_focus']) ? $post['crop_focus'] : 'center';
1570                 }
1571                 $files_res = $member->handleFiles($_FILES, $cropping);
1572                 if (is_array($files_res)) {
1573                     $error_detected = array_merge($error_detected, $files_res);
1574                 }
1575
1576                 if (isset($post['del_photo'])) {
1577                     if (!$member->picture->delete($member->id)) {
1578                         $error_detected[] = _T("Delete failed");
1579                         $str_adh = $member->id . ' (' . $member->sname . ' ' . ')';
1580                         Analog::log(
1581                             'Unable to delete picture for member ' . $str_adh,
1582                             Analog::ERROR
1583                         );
1584                     }
1585                 }
1586             }
1587
1588             if (count($error_detected) > 0) {
1589                 foreach ($error_detected as $error) {
1590                     if (strpos($error, '%member_url_') !== false) {
1591                         preg_match('/%member_url_(\d+)/', $error, $matches);
1592                         $url = $this->routeparser->urlFor('member', ['id' => $matches[1]]);
1593                         $error = str_replace(
1594                             '%member_url_' . $matches[1],
1595                             $url,
1596                             $error
1597                         );
1598                     }
1599                     $this->flash->addMessage(
1600                         'error_detected',
1601                         $error
1602                     );
1603                 }
1604             }
1605
1606             if (count($success_detected) > 0) {
1607                 foreach ($success_detected as $success) {
1608                     $this->flash->addMessage(
1609                         'success_detected',
1610                         $success
1611                     );
1612                 }
1613             }
1614
1615             if (count($error_detected) === 0) {
1616                 if ($this->isSelfMembership()) {
1617                     $redirect_url = $this->routeparser->urlFor('login');
1618                 } elseif (
1619                     isset($post['redirect_on_create'])
1620                     && $post['redirect_on_create'] > Adherent::AFTER_ADD_DEFAULT
1621                 ) {
1622                     switch ($post['redirect_on_create']) {
1623                         case Adherent::AFTER_ADD_TRANS:
1624                             $redirect_url = $this->routeparser->urlFor('addTransaction');
1625                             break;
1626                         case Adherent::AFTER_ADD_NEW:
1627                             $redirect_url = $this->routeparser->urlFor('addMember');
1628                             break;
1629                         case Adherent::AFTER_ADD_SHOW:
1630                             $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1631                             break;
1632                         case Adherent::AFTER_ADD_LIST:
1633                             $redirect_url = $this->routeparser->urlFor('members');
1634                             break;
1635                         case Adherent::AFTER_ADD_HOME:
1636                             $redirect_url = $this->routeparser->urlFor('slash');
1637                             break;
1638                     }
1639                 } elseif (!isset($post['id_adh']) && !$member->isDueFree()) {
1640                     $redirect_url = $this->routeparser->urlFor(
1641                         'addContribution',
1642                         ['type' => 'fee']
1643                     ) . '?id_adh=' . $member->id;
1644                 } else {
1645                     $redirect_url = $this->routeparser->urlFor('member', ['id' => $member->id]);
1646                 }
1647             } else {
1648                 //store entity in session
1649                 $this->session->member = $member;
1650
1651                 if ($this->isSelfMembership()) {
1652                     $redirect_url = $this->routeparser->urlFor('subscribe');
1653                 } else {
1654                     if ($member->id) {
1655                         $redirect_url = $this->routeparser->urlFor(
1656                             'editMember',
1657                             ['id'    => $member->id]
1658                         );
1659                     } else {
1660                         $redirect_url = $this->routeparser->urlFor((isset($post['addchild']) ? 'addMemberChild' : 'addMember'));
1661                     }
1662                 }
1663             }
1664         }
1665
1666         return $response
1667             ->withStatus(301)
1668             ->withHeader('Location', $redirect_url);
1669     }
1670
1671
1672     // /CRUD - Update
1673     // CRUD - Delete
1674
1675     /**
1676      * Get redirection URI
1677      *
1678      * @param array $args Route arguments
1679      *
1680      * @return string
1681      */
1682     public function redirectUri(array $args)
1683     {
1684         return $this->routeparser->urlFor('members');
1685     }
1686
1687     /**
1688      * Get form URI
1689      *
1690      * @param array $args Route arguments
1691      *
1692      * @return string
1693      */
1694     public function formUri(array $args)
1695     {
1696         return $this->routeparser->urlFor(
1697             'doRemoveMember',
1698             $args
1699         );
1700     }
1701
1702     /**
1703      * Get confirmation removal page title
1704      *
1705      * @param array $args Route arguments
1706      *
1707      * @return string
1708      */
1709     public function confirmRemoveTitle(array $args)
1710     {
1711         if (isset($args['id_adh']) || isset($args['id'])) {
1712             //one member removal
1713             $id_adh = $args['id_adh'] ?? $args['id'];
1714             $adh = new Adherent($this->zdb, (int)$id_adh);
1715             return sprintf(
1716                 _T('Remove member %1$s'),
1717                 $adh->sfullname
1718             );
1719         } else {
1720             //batch members removal
1721             $filters = $this->session->{$this->getFilterName(['suffix' => 'delete'])};
1722             $this->session->{$this->getFilterName(['suffix' => 'delete'])} = $filters;
1723             return str_replace(
1724                 '%count',
1725                 count($filters->selected),
1726                 _T('You are about to remove %count members.')
1727             );
1728         }
1729     }
1730
1731     /**
1732      * Remove object
1733      *
1734      * @param array $args Route arguments
1735      * @param array $post POST values
1736      *
1737      * @return bool
1738      */
1739     protected function doDelete(array $args, array $post)
1740     {
1741         if (isset($this->session->{$this->getFilterName(['suffix' => 'delete'])})) {
1742             $filters = $this->session->{$this->getFilterName(['suffix' => 'delete'])};
1743         } else {
1744             $filters = new MembersList();
1745         }
1746         $members = new Members($filters);
1747
1748         if (!is_array($post['id'])) {
1749             $ids = (array)$post['id'];
1750         } else {
1751             $ids = $post['id'];
1752         }
1753
1754         return $members->removeMembers($ids);
1755     }
1756
1757     // CRUD - Delete
1758
1759     /**
1760      * Set self memebrship flag
1761      *
1762      * @return MembersController
1763      */
1764     private function setSelfMembership(): MembersController
1765     {
1766         $this->is_self_membership = true;
1767         return $this;
1768     }
1769
1770     /**
1771      * Is self membership?
1772      *
1773      * @return bool
1774      */
1775     private function isSelfMembership(): bool
1776     {
1777         return $this->is_self_membership;
1778     }
1779
1780     /**
1781      * Handle navigation links
1782      *
1783      * @param int $id_adh Current member ID
1784      *
1785      * @return array
1786      */
1787     private function handleNavigationLinks(int $id_adh): array
1788     {
1789         $navigate = array();
1790
1791         if (isset($this->session->{$this->getFilterName()})) {
1792             $filters = $this->session->{$this->getFilterName()};
1793         } else {
1794             $filters = new MembersList();
1795         }
1796         //we must navigate between all members
1797         $filters->show = 0;
1798
1799         if (
1800             $this->login->isAdmin()
1801             || $this->login->isStaff()
1802             || $this->login->isGroupManager()
1803         ) {
1804             $m = new Members($filters);
1805
1806             $ids = array();
1807             $fields = [Adherent::PK, 'nom_adh', 'prenom_adh'];
1808             if ($this->login->isAdmin() || $this->login->isStaff()) {
1809                 $ids = $m->getMembersList(false, $fields);
1810             } else {
1811                 $ids = $m->getManagedMembersList(false, $fields);
1812             }
1813
1814             $ids = $ids->toArray();
1815             foreach ($ids as $k => $m) {
1816                 if ($m['id_adh'] == $id_adh) {
1817                     $navigate = array(
1818                         'cur'  => $m['id_adh'],
1819                         'count' => $filters->counter,
1820                         'pos' => $k + 1
1821                     );
1822                     if ($k > 0) {
1823                         $navigate['prev'] = $ids[$k - 1]['id_adh'];
1824                     }
1825                     if ($k < count($ids) - 1) {
1826                         $navigate['next'] = $ids[$k + 1]['id_adh'];
1827                     }
1828                     break;
1829                 }
1830             }
1831         }
1832
1833         return $navigate;
1834     }
1835
1836     /**
1837      * Get filter name in session
1838      *
1839      * @param array|null $args Route arguments
1840      *
1841      * @return string
1842      */
1843     public function getFilterName(array $args = null): string
1844     {
1845         $filter_name = 'filter_members';
1846
1847         if (isset($args['prefix'])) {
1848             $filter_name = $args['prefix'] . '_' . $filter_name;
1849         }
1850
1851         if (isset($args['suffix'])) {
1852             $filter_name .= '_' . $args['suffix'];
1853         }
1854
1855         return $filter_name;
1856     }
1857 }