Elep

<?php
/*
 * Your installation or use of this SugarCRM file is subject to the applicable
 * terms available at
 * http://support.sugarcrm.com/Resources/Master_Subscription_Agreements/.
 * If you do not agree to all of the applicable terms or do not have the
 * authority to bind the entity as an authorized representative, then do not
 * install or use this SugarCRM file.
 *
 * Copyright (C) SugarCRM Inc. All rights reserved.
 */

use Sugarcrm\Sugarcrm\Security\InputValidation\InputValidation;

/*
ARGS:
 $_REQUEST['method']; : options: 'SaveRelationship','Save','DeleteRelationship','Delete'
 $_REQUEST['module']; : the module associated with this Bean instance (will be used to get the class name)
 $_REQUEST['record']; : the id of the Bean instance
// $_REQUEST['related_field']; : the field name on the Bean instance that contains the relationship
// $_REQUEST['related_record']; : the id of the related record
// $_REQUEST['related_']; : the
// $_REQUEST['return_url']; : the URL to redirect to
//$_REQUEST['return_type']; : when set the results of a report will be linked with the parent.
*/

require_once 'include/formbase.php';

$request = InputValidation::getService();
$refreshsubpanel = true;

if (isset($_REQUEST['return_type']) && $_REQUEST['return_type'] == 'report') {
    save_from_report(
        $_REQUEST['subpanel_id'], //report_id
        $_REQUEST['record'], //parent_id
        $_REQUEST['module'], //module_name
        $_REQUEST['subpanel_field_name'] //link attribute name
    );
} elseif (isset($_REQUEST['return_type']) && $_REQUEST['return_type'] == 'addtoprospectlist') {
    if (!empty($_REQUEST['prospect_list_id']) and !empty($_REQUEST['prospect_ids'])) {
        add_prospects_to_prospect_list(
            $_REQUEST['prospect_list_id'],
            $_REQUEST['prospect_ids']
        );
    } else {
        $parent = BeanFactory::getBean($_REQUEST['module'], $_REQUEST['record']);
        $parentModule = $request->getValidInputRequest('parent_module', 'Assert\Mvc\ModuleName');
        $parentType = $request->getValidInputRequest('parent_type');
        add_to_prospect_list(
            urldecode($_REQUEST['subpanel_module_name']),
            $parentModule,
            $parentType,
            $_REQUEST['subpanel_id'],
            $_REQUEST['child_id'],
            $_REQUEST['link_attribute'],
            $_REQUEST['link_type'],
            $parent
        );
    }

$refreshsubpanel = false;
} elseif (isset($_REQUEST['return_type']) && $_REQUEST['return_type'] == 'addcampaignlog') {
    //if param is set to "addcampaignlog", then we need to create a campaign log entry
    //for each campaign id passed in.

// Get a list of campaigns selected.
    if (isset($_REQUEST['subpanel_id']) && !empty($_REQUEST['subpanel_id'])) {
        $campaign_ids = $_REQUEST['subpanel_id'];
        $focus = BeanFactory::getBean($_REQUEST['module'], $_REQUEST['record']);
        require_once 'modules/Campaigns/utils.php';
        //call util function to create the campaign log entry
        foreach ($campaign_ids as $id) {
            create_campaign_log_entry($id, $focus, $focus->module_dir, $focus, $focus->id);
        }
        $refreshsubpanel = true;
    }
} else {
    $focus = BeanFactory::getBean($_REQUEST['module'], $_REQUEST['record']);

// If the user selected "All records" from the selection menu, we pull up the list
    // based on the query they used on that popup to relate them to the parent record
    if (!empty($_REQUEST['select_entire_list']) && $_REQUEST['select_entire_list'] != 'undefined' && isset($_REQUEST['current_query_by_page'])) {
        $order_by = '';
        $current_query_by_page_array = unserialize(base64_decode($_REQUEST['current_query_by_page']), ['allowed_classes' => false]);
        $module = $current_query_by_page_array['module'];
        $seed = BeanFactory::newBean($module);
        if (empty($seed)) {
            sugar_die($GLOBALS['app_strings']['ERROR_NO_BEAN']);
        }
        $where_clauses = '';
        require_once 'include/SearchForm/SearchForm2.php';

$searchdefs_file = SugarAutoLoader::loadWithMetafiles($module, 'searchdefs');
        if ($searchdefs_file) {
            require $searchdefs_file;
        }

$searchFields = SugarAutoLoader::loadSearchFields($module);

if (!empty($searchdefs) && !empty($searchFields)) {
            $searchForm = new SearchForm($seed, $module);
            $searchForm->setup($searchdefs, $searchFields, 'SearchFormGeneric.tpl');
            $searchForm->populateFromArray($current_query_by_page_array, 'advanced');
            $where_clauses_arr = $searchForm->generateSearchWhere(true, $module);
            if (safeCount($where_clauses_arr) > 0) {
                $where_clauses = '(' . implode(' ) AND ( ', $where_clauses_arr) . ')';
            }
        }

$query = $seed->create_new_list_query($order_by, $where_clauses);
        $result = $GLOBALS['db']->query($query, true);
        $uids = [];
        while ($val = $GLOBALS['db']->fetchByAssoc($result, false)) {
            array_push($uids, $val['id']);
        }
        $_REQUEST['subpanel_id'] = $uids;
    }

if ($_REQUEST['module'] == 'Teams') {
        if (!$GLOBALS['current_user']->isAdminForModule('Users')) {
            sugar_die('Unauthorized access to administration.');
        }
        $subpanel_id = $_REQUEST['subpanel_id'];
        if (is_array($subpanel_id)) {
            foreach ($subpanel_id as $id) {
                $focus->add_user_to_team($id);
            }
        } else {
            $focus->add_user_to_team($subpanel_id);
        }
    } else {
        //find request paramters with with prefix of REL_ATTRIBUTE_
        //convert them into an array of name value pairs add pass them as
        //parameters to the add metod.
        $add_values = [];
        foreach ($_REQUEST as $key => $value) {
            if (strpos($key, 'REL_ATTRIBUTE_') !== false) {
                $add_values[substr($key, 14)] = $value;
            }
        }
        $focus->load_relationship($_REQUEST['subpanel_field_name']);
        $focus->{$_REQUEST['subpanel_field_name']}->add($_REQUEST['subpanel_id'], $add_values);
        $focus->save();
    }
}

if ($refreshsubpanel) {
    //refresh contents of the sub-panel.
    $GLOBALS['log']->debug('Location: index.php?sugar_body_only=1&module=' . $_REQUEST['module'] . '&subpanel=' . $_REQUEST['subpanel_module_name'] . '&action=SubPanelViewer&inline=1&record=' . $_REQUEST['record']);
    if (empty($_REQUEST['refresh_page']) || $_REQUEST['refresh_page'] != 1) {
        $inline = $_REQUEST['inline'] ?? $inline;
        $query = http_build_query([
            'sugar_body_only' => 1,
            'module' => $_REQUEST['module'],
            'subpanel' => $_REQUEST['subpanel_module_name'],
            'action' => 'SubPanelViewer',
            'inline' => $inline,
            'record' => $_REQUEST['record'],
        ]);
        header('Location: index.php?' . $query);
    }
    exit;
}