Bug 26265: (QA follow-up) Remove g option from regex, add few dirs
[koha.git] / members / paycollect.pl
1 #!/usr/bin/perl
2 # Copyright 2009,2010 PTFS Inc.
3 # Copyright 2011 PTFS-Europe Ltd
4 #
5 # This file is part of Koha.
6 #
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
11 #
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
16 #
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
19
20 use Modern::Perl;
21 use URI::Escape;
22 use CGI qw ( -utf8 );
23
24 use C4::Context;
25 use C4::Auth;
26 use C4::Output;
27 use C4::Members;
28 use C4::Accounts;
29 use C4::Koha;
30
31 use Koha::Patrons;
32 use Koha::Patron::Categories;
33 use Koha::AuthorisedValues;
34 use Koha::Account;
35 use Koha::Token;
36
37 my $input = CGI->new();
38
39 my $updatecharges_permissions = $input->param('writeoff_individual') ? 'writeoff' : 'remaining_permissions';
40 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
41     {   template_name   => 'members/paycollect.tt',
42         query           => $input,
43         type            => 'intranet',
44         authnotrequired => 0,
45         flagsrequired   => { borrowers => 'edit_borrowers', updatecharges => $updatecharges_permissions },
46         debug           => 1,
47     }
48 );
49
50 # get borrower details
51 my $borrowernumber = $input->param('borrowernumber');
52 my $logged_in_user = Koha::Patrons->find( $loggedinuser ) or die "Not logged in";
53 my $patron         = Koha::Patrons->find( $borrowernumber );
54 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
55
56 my $borrower       = $patron->unblessed;
57 my $category       = $patron->category;
58 my $user           = $input->remote_user;
59
60 my $branch    = C4::Context->userenv->{'branch'};
61 my $total_due = $patron->account->outstanding_debits->total_outstanding;
62
63 my $total_paid = $input->param('paid');
64
65 my $individual   = $input->param('pay_individual');
66 my $writeoff     = $input->param('writeoff_individual');
67 my $select_lines = $input->param('selected');
68 my $select       = $input->param('selected_accts');
69 my $payment_note = uri_unescape scalar $input->param('payment_note');
70 my $payment_type = scalar $input->param('payment_type');
71 my $type         = scalar $input->param('type') || 'payment',
72 my $accountlines_id;
73
74 if ( $individual || $writeoff ) {
75     if ($individual) {
76         $template->param( pay_individual => 1 );
77     } elsif ($writeoff) {
78         $template->param( writeoff_individual => 1 );
79     }
80     my $accounttype       = $input->param('accounttype');
81     $accountlines_id       = $input->param('accountlines_id');
82     my $amount            = $input->param('amount');
83     my $amountoutstanding = $input->param('amountoutstanding');
84     my $itemnumber  = $input->param('itemnumber');
85     my $description  = $input->param('description');
86     my $title        = $input->param('title');
87     $total_due = $amountoutstanding;
88     $template->param(
89         accounttype       => $accounttype,
90         accountlines_id    => $accountlines_id,
91         amount            => $amount,
92         amountoutstanding => $amountoutstanding,
93         title             => $title,
94         itemnumber        => $itemnumber,
95         individual_description => $description,
96         payment_note    => $payment_note,
97     );
98 } elsif ($select_lines) {
99     $total_due = $input->param('amt');
100     $template->param(
101         selected_accts => $select_lines,
102         amt            => $total_due,
103         selected_accts_notes => scalar $input->param('notes'),
104     );
105 }
106
107 if ( $total_paid and $total_paid ne '0.00' ) {
108     if ( $total_paid < 0 or $total_paid > $total_due ) {
109         $template->param(
110             error_over => 1,
111             total_due => $total_due
112         );
113     } else {
114         output_and_exit( $input, $cookie, $template,  'wrong_csrf_token' )
115             unless Koha::Token->new->check_csrf( {
116                 session_id => $input->cookie('CGISESSID'),
117                 token  => scalar $input->param('csrf_token'),
118             });
119
120         if ($individual) {
121             my $line = Koha::Account::Lines->find($accountlines_id);
122             Koha::Account->new( { patron_id => $borrowernumber } )->pay(
123                 {
124                     lines        => [$line],
125                     amount       => $total_paid,
126                     library_id   => $branch,
127                     note         => $payment_note,
128                     interface    => C4::Context->interface,
129                     payment_type => $payment_type,
130                 }
131             );
132             print $input->redirect(
133                 "/cgi-bin/koha/members/pay.pl?borrowernumber=$borrowernumber");
134         } else {
135             if ($select) {
136                 if ( $select =~ /^([\d,]*).*/ ) {
137                     $select = $1;    # ensure passing no junk
138                 }
139                 my @acc = split /,/, $select;
140                 my $note = $input->param('selected_accts_notes');
141
142                 my @lines = Koha::Account::Lines->search(
143                     {
144                         borrowernumber    => $borrowernumber,
145                         amountoutstanding => { '<>' => 0 },
146                         accountlines_id   => { 'IN' => \@acc },
147                     },
148                     { order_by => 'date' }
149                 );
150
151                 Koha::Account->new(
152                     {
153                         patron_id => $borrowernumber,
154                     }
155                   )->pay(
156                     {
157                         type         => $type,
158                         amount       => $total_paid,
159                         lines        => \@lines,
160                         note         => $note,
161                         interface    => C4::Context->interface,
162                         payment_type => $payment_type,
163                     }
164                   );
165             }
166             else {
167                 my $note = $input->param('selected_accts_notes');
168                 Koha::Account->new( { patron_id => $borrowernumber } )->pay(
169                     {
170                         amount       => $total_paid,
171                         note         => $note,
172                         payment_type => $payment_type,
173                         interface    => C4::Context->interface
174                     }
175                 );
176             }
177
178             print $input->redirect("/cgi-bin/koha/members/boraccount.pl?borrowernumber=$borrowernumber");
179         }
180     }
181 } else {
182     $total_paid = '0.00';    #TODO not right with pay_individual
183 }
184
185 $template->param(%$borrower);
186
187 if ( $input->param('error_over') ) {
188     $template->param( error_over => 1, total_due => scalar $input->param('amountoutstanding') );
189 }
190
191 $template->param(
192     type           => $type,
193     borrowernumber => $borrowernumber,    # some templates require global
194     patron        => $patron,
195     total         => $total_due,
196
197     csrf_token => Koha::Token->new->generate_csrf({ session_id => scalar $input->cookie('CGISESSID') }),
198 );
199
200 output_html_with_http_headers $input, $cookie, $template->output;