Elep

<?php
/*
 * Your installation or use of this SugarCRM file is subject to the applicable
 * terms available at
 * http://support.sugarcrm.com/Resources/Master_Subscription_Agreements/.
 * If you do not agree to all of the applicable terms or do not have the
 * authority to bind the entity as an authorized representative, then do not
 * install or use this SugarCRM file.
 *
 * Copyright (C) SugarCRM Inc. All rights reserved.
 */

use Sugarcrm\Sugarcrm\Security\InputValidation\Exception\ViolationException;
use Sugarcrm\Sugarcrm\Security\Validator\Constraints\DropdownList;
use Sugarcrm\Sugarcrm\Security\Validator\Constraints\Guid;
use Sugarcrm\Sugarcrm\Security\Validator\Validator;
use Sugarcrm\Sugarcrm\Security\Validator\Constraints\Bean\ModuleName;

require_once 'modules/MailMerge/modules_array.php';
require_once 'modules/MailMerge/merge_query.php';

global $app_strings;
global $app_list_strings;
global $mod_strings;
global $current_user;
global $odd_bg;
global $even_bg;
global $sugar_version, $sugar_config;
global $locale;

$xtpl = new XTemplate('modules/MailMerge/Step3.html');
$xtpl->assign('MOD', $mod_strings);
$xtpl->assign('APP', $app_strings);

if (!isset($_SESSION['MAILMERGE_MODULE'])) {
    if (isset($_POST['mailmerge_module'])) {
        $violations = Validator::getService()->validate($_POST['mailmerge_module'], new ModuleName());

if ($violations->count() > 0) {
            $GLOBALS['log']->error('Violation for module name');
            throw new ViolationException(
                'Violation for module name',
                $violations
            );
        }

$_SESSION['MAILMERGE_MODULE'] = $_POST['mailmerge_module'];
    }
}

if (isset($_POST['contains_contact_info'])) {
    $violations = Validator::getService()->validate($_POST['contains_contact_info'], new ModuleName());

if ($violations->count() > 0) {
        $GLOBALS['log']->error('Violation for module name');
        throw new ViolationException(
            'Violation for module name',
            $violations
        );
    }

$_SESSION['MAILMERGE_CONTAINS_CONTACT_INFO'] = $_POST['contains_contact_info'];
}

if (!isset($_SESSION['MAILMERGE_DOCUMENT_ID'])) {
    if (!empty($_POST['document_id'])) {
        $violations = Validator::getService()->validate($_POST['document_id'], new Guid());

if ($violations->count()) {
            throw new ViolationException('Invalid document ID', $violations);
        }

$_SESSION['MAILMERGE_DOCUMENT_ID'] = $_POST['document_id'];
    }
}
$document_id = $_SESSION['MAILMERGE_DOCUMENT_ID'];
$document = BeanFactory::getBean('Documents', $document_id);
$_SESSION['MAILMERGE_TEMPLATE'] = $document->document_name;

if (!empty($_POST['selected_objects'])) {
    $selObjs = urldecode($_POST['selected_objects']);
    $_SESSION['SELECTED_OBJECTS_DEF'] = $selObjs;
} else {
    $selObjs = $_SESSION['SELECTED_OBJECTS_DEF'];
}
$sel_obj = [];
parse_str(html_entity_decode($selObjs, ENT_QUOTES), $sel_obj);
$step_num = 3;
$xtpl->assign('PREV_STEP', '2');
$xtpl->assign('STEP_NUM', 'Step 3:');
$popup_request_data = ['call_back_function' => 'set_return', 'form_name' => 'EditView', 'field_to_name_array' => ['id' => 'rel_id', 'name' => 'rel_name',],];
$json = getJSONobj();

// must urlencode to put into the filter request string
// because IE gets an out of memory error when it is passed
// as the usual object literal
$encoded_popup_request_data = urlencode($json->encode($popup_request_data));

$modules = $modules_array;

$xtpl->assign('MAILMERGE_MODULE_OPTIONS', get_select_options_with_id($modules, '0'));
$change_parent_button = "<input title='" . $app_strings['LBL_SELECT_BUTTON_TITLE'] . "' tabindex='2' type='button' class='button' value='" . $app_strings['LBL_SELECT_BUTTON_LABEL'] . "' name='button' onclick='open_popup(document.EditView.rel_type.value, 600, 400, \"&request_data=$encoded_popup_request_data\", true, false, {});' />";

$change_parent_button = "<input title='" . $app_strings['LBL_SELECT_BUTTON_TITLE'] . "' tabindex='2' type='button' class='button' value='" . $app_strings['LBL_SELECT_BUTTON_LABEL'] . "' name='button' onclick='open_popup(document.EditView.parent_type.value, 600, 400, \"&request_data=$encoded_popup_request_data\", true, false, {});' />";
$xtpl->assign('CHANGE_PARENT_BUTTON', $change_parent_button);

$relModule = $_SESSION['MAILMERGE_CONTAINS_CONTACT_INFO'];
$xtpl->assign('STEP3_HEADER', 'Set ' . get_singular_bean_name($relModule) . ' Association');

$select = 'Select id, name from contacts';
$seed = BeanFactory::newBean($relModule);

if (isset($_SESSION['MAILMERGE_SKIP_REL']) && $_SESSION['MAILMERGE_SKIP_REL']) {
    $disabled = 'disabled';
} else {
    $disabled = '';
}
$oddRow = true;

foreach ($sel_obj as $key => $value) {
    $value = str_replace('##', '&', $value);
    $value = stripslashes($value);
    $code = md5($key);
    $popup_request_data = ['call_back_function' => 'set_return', 'form_name' => 'EditView', 'field_to_name_array' => ['id' => 'rel_id_' . $code, 'name' => 'rel_name_' . $code,],];
    $encoded_popup_request_data = urlencode($json->encode($popup_request_data));

$fullQuery = get_merge_query($seed, $_SESSION['MAILMERGE_MODULE'], $key);
    $result = $seed->db->limitQuery($fullQuery, 0, 1, true, 'Error performing limit query');

$full_name = '';
    $contact_id = '';
    if ($row = $seed->db->fetchByAssoc($result, 0)) {
        if ($relModule == 'Contacts') {
            $full_name = $locale->formatName('Contacts', $row);
        } else {
            $full_name = $row['name'];
        }
        $contact_id = $row['id'];
    }
    $umodule = urlencode($_SESSION['MAILMERGE_MODULE']);
    $ukey = urlencode($key);
    $change_parent_button = "<input title='{$app_strings['LBL_SELECT_BUTTON_TITLE']}' tabindex='2'  type='button' class='button' value='{$app_strings['LBL_SELECT_BUTTON_LABEL']}'
		name='button' onclick='open_popup(document.EditView.rel_type_{$code}.value, 600, 400,
			\"&html=mail_merge&rel_module=$umodule&id=$ukey&request_data=$encoded_popup_request_data\", true, false, {});' $disabled/>";
    $items = [
        'ID' => $key,
        'NAME' => $value,
        'CODE' => $code,
        'TYPE_OPTIONS' => get_select_options_with_id($modules, '0'),
        'CHANGE_RELATIONSHIP' => $change_parent_button,
        'CONTACT_ID' => $contact_id,
        'CONTACT_NAME' => $full_name,
        'REL_MODULE' => $_SESSION['MAILMERGE_CONTAINS_CONTACT_INFO'],
    ];

$xtpl->assign('MAILMERGE', $items);

if ($oddRow) {
        //todo move to themes
        $xtpl->assign('ROW_COLOR', 'oddListRow');
        $xtpl->assign('BG_COLOR', $odd_bg);
    } else {
        //todo move to themes
        $xtpl->assign('ROW_COLOR', 'evenListRow');
        $xtpl->assign('BG_COLOR', $even_bg);
    }
    $oddRow = !$oddRow;
    $xtpl->parse('main.items.row');
}
$xtpl->parse('main.items');

$xtpl->parse('main');
$xtpl->out('main');