function editComment_POST(Web $w)
{
$p = $w->pathMatch("taskid", "comm_id");
$task = $w->Task->getTask($p['taskid']);
// convert any HTML to entities for display
$_REQUEST['comment'] = htmlspecialchars($_REQUEST['comment']);
// get the relevant comment
$comm = $w->Task->getComment($p['comm_id']);
// if comment exists, update it. if not, create it.
if ($comm) {
$comm->fill($_REQUEST);
$comm->update();
$commsg = "Comment updated.";
} else {
$comm = new TaskComment($w);
$comm->fill($_REQUEST);
$comm->obj_table = $task->getDbTableName();
$comm->obj_id = $p['taskid'];
$comm->insert();
$commsg = "Comment created.";
}
// add to context for notifications post listener
$w->ctx("TaskComment", $comm);
$w->ctx("TaskEvent", "task_comments");
// return
$w->msg($commsg, "/task/edit/" . $p['taskid'] . "#timelog");
}
function updatetask_POST(Web &$w)
{
$p = $w->pathMatch("id");
// task is to get updated so gather relevant data
$task = $w->Task->getTask($p['id']);
$taskdata = $w->Task->getTaskData($p['id']);
// if task exists, first gather changes for display in comments
if ($task) {
// if no due date, make 1 month from now
$dt_due = $w->request('dt_due');
if (empty($dt_due)) {
$_POST['dt_due'] = $w->Task->getNextMonth();
}
// convert dates to d/m/y for display. if assignee changes, get name of new assignee
$comments = "";
foreach ($_POST as $name => $value) {
if (startsWith($name, "dt_")) {
list($d, $m, $y) = preg_split('/\\//', $value);
$value = Date("U", strtotime($y . "-" . $m . "-" . $d));
}
if ($name != "FLOW_SID" && $task->{$name} && $value != $task->{$name}) {
if (startsWith($name, "dt_")) {
$value = Date("d/m/Y", $value);
}
if ($name == "assignee_id") {
$value = $w->Task->getUserById($value);
}
$comments .= $name . " updated to: " . $value . "\n";
}
}
// update the task
$_POST['dt_assigned'] = Date('c');
$task->fill($_POST);
// if task has a 'closed' status, set flag so task no longer appear in dashboard count or task list
if ($task->getisTaskClosed()) {
$task->is_closed = 1;
$task->dt_completed = date("d/m/Y");
} else {
$task->is_closed = 0;
}
$task->update();
// if we have comments, add them
if (!empty($comments)) {
$comm = new TaskComment($w);
$comm->fill($_POST);
$comm->obj_table = $task->getDbTableName();
$comm->obj_id = $task->id;
$comm->comment = $comments;
$comm->insert();
// add to context for notifications post listener
$w->ctx("TaskComment", $comm);
$w->ctx("TaskEvent", "task_details");
}
}
// if there is task data, update it also
// if there is current no task data, but relevant input in the REQUEST object, create the task data
if ($taskdata) {
foreach ($taskdata as $td) {
$arr = array("value" => $w->request($td->key));
$td->fill($arr);
$td->update();
unset($arr);
}
} else {
foreach ($_POST as $name => $value) {
// This is broken plus what is this?
// if (($name != "FLOW_SID") && ($name != "task_id") && ($name !== CSRF::getTokenID())) {
// $tdata = new TaskData($w);
// $arr = array("task_id"=>$task->id,"key"=>$name,"value"=>$value);
// $tdata->fill($arr);
// $tdata->insert();
// unset($arr);
// }
}
}
// return
$w->msg("Task: " . $task->title . " updated.", "/task/edit/" . $task->id . "?tab=1");
}
