golden hour

/home/doctorbruno/public_html/taeionline.com/support/include

File/Folder	Size	Actions
.MANIFEST	194.97 KB
.htaccess	14 B
JSON.php	33.13 KB
PasswordHash.php	6.92 KB
Spyc.php	31.74 KB
UniversalClassLoader.php	8.61 KB
ajax.admin.php	7.29 KB
ajax.config.php	4.61 KB
ajax.content.php	9.76 KB
ajax.draft.php	13.03 KB
ajax.email.php	2.33 KB
ajax.export.php	1006 B
ajax.filter.php	874 B
ajax.forms.php	13.84 KB
ajax.i18n.php	5.1 KB
ajax.kbase.php	2.93 KB
ajax.note.php	2.05 KB
ajax.orgs.php	11.73 KB
ajax.plugins.php	2.15 KB
ajax.schedule.php	4.29 KB
ajax.search.php	12.72 KB
ajax.sequence.php	3.2 KB
ajax.staff.php	11.62 KB
ajax.tasks.php	33.87 KB
ajax.thread.php	8.81 KB
ajax.tickets.php	79.7 KB
ajax.tips.php	1.66 KB
ajax.upgrader.php	2.24 KB
ajax.users.php	18.33 KB
api.cron.php	1.06 KB
api.tickets.php	10.36 KB
class.2fa.php	7.76 KB
class.ajax.php	1.45 KB
class.api.php	15.31 KB
class.app.php	1.49 KB
class.attachment.php	6.95 KB
class.auth.php	50.73 KB
class.avatar.php	6.44 KB
class.banlist.php	2.58 KB
class.base32.php	4.07 KB
class.businesshours.php	7.08 KB
class.canned.php	9.05 KB
class.captcha.php	1.73 KB
class.category.php	11.14 KB
class.charset.php	3.41 KB
class.cli.php	9.48 KB
class.client.php	15.39 KB
class.collaborator.php	5.65 KB
class.company.php	2.65 KB
class.config.php	60.36 KB
class.controller.php	1.15 KB
class.cron.php	3.6 KB
class.crypto.php	18.92 KB
class.csrf.php	2.38 KB
class.dept.php	33.21 KB
class.dispatcher.php	7.12 KB
class.draft.php	6.23 KB
class.dynamic_forms.php	64.98 KB
class.email.php	49 KB
class.error.php	1.69 KB
class.export.php	32.92 KB
class.faq.php	15.05 KB
class.file.php	34.59 KB
class.filter.php	31.9 KB
class.filter_action.php	23.67 KB
class.format.php	44.3 KB
class.forms.php	195.58 KB
class.http.php	7.16 KB
class.i18n.php	24.28 KB
class.import.php	6.9 KB
class.json.php	2.71 KB
class.knowledgebase.php	5.8 KB
class.list.php	42 KB
class.lock.php	4.05 KB
class.log.php	1.55 KB
class.mail.php	35.76 KB
class.mailer.php	25.75 KB
class.mailfetch.php	9.72 KB
class.mailparse.php	30.99 KB
class.message.php	6.42 KB
class.migrater.php	5.2 KB
class.misc.php	7.5 KB
class.model.php	2.3 KB
class.nav.php	14.15 KB
class.note.php	2.39 KB
class.oauth2.php	4.04 KB
class.organization.php	22.45 KB
class.orm.php	120.9 KB
class.osticket.php	20.64 KB
class.ostsession.php	21.86 KB
class.page.php	10.59 KB
class.pagenate.php	5.53 KB
class.passwd.php	1.21 KB
class.pdf.php	3.83 KB
class.plugin.php	36.13 KB
class.priority.php	1.81 KB
class.queue.php	103.51 KB
class.report.php	11.76 KB
class.role.php	11.27 KB
class.schedule.php	46.28 KB
class.search.php	61.66 KB
class.sequence.php	7.27 KB
class.session.php	19.25 KB
class.setup.php	3.55 KB
class.signal.php	4.16 KB
class.sla.php	9.11 KB
class.staff.php	60.21 KB
class.task.php	56.21 KB
class.team.php	12.31 KB
class.template.php	23.45 KB
class.thread.php	108.96 KB
class.thread_actions.php	17.08 KB
class.ticket.php	167.39 KB
class.timezone.php	21.94 KB
class.topic.php	20.06 KB
class.translation.php	34.79 KB
class.upgrader.php	13.76 KB
class.user.php	43.4 KB
class.usersession.php	7.55 KB
class.util.php	10.07 KB
class.validator.php	12.94 KB
class.variable.php	11.93 KB
class.xml.php	3.23 KB
class.yaml.php	1.15 KB
cli	-
client	-
config	-
fpdf	-
htmLawed.php	53.53 KB
html2text.php	33.71 KB
i18n	-
index.php	37 B
laminas-mail	-
mpdf	-
mysqli.php	9.55 KB
ost-config.php	5.63 KB
ost-sampleconfig.php	6.24 KB
pear	-
plugins	-
staff	-
tnef_decoder.php	19.82 KB
upgrader	-

Edit: ajax.tasks.php

<?php
/*********************************************************************
 ajax.tasks.php

AJAX interface for tasks

Peter Rotich <peter@osticket.com>
 Copyright (c) 20014 osTicket
 http://www.osticket.com

Released under the GNU General Public License WITHOUT ANY WARRANTY.
    See LICENSE.TXT for details.

vim: expandtab sw=4 ts=4 sts=4:
**********************************************************************/

if(!defined('INCLUDE_DIR')) die('403');

include_once(INCLUDE_DIR.'class.ticket.php');
require_once(INCLUDE_DIR.'class.ajax.php');
require_once(INCLUDE_DIR.'class.task.php');
include_once INCLUDE_DIR . 'class.thread_actions.php';

class TasksAjaxAPI extends AjaxController {

function lookup() {
        global $thisstaff;

$limit = isset($_REQUEST['limit']) ? (int) $_REQUEST['limit']:25;
        $tasks = array();

$visibility = Q::any(array(
            'staff_id' => $thisstaff->getId(),
            'team_id__in' => $thisstaff->teams->values_flat('team_id'),
        ));

if (!$thisstaff->showAssignedOnly() && ($depts=$thisstaff->getDepts())) {
            $visibility->add(array('dept_id__in' => $depts));
        }

$hits = TaskModel::objects()
            ->filter(Q::any(array(
                'number__startswith' => $_REQUEST['q'],
            )))
            ->filter($visibility)
            ->values('number')
            ->annotate(array('tasks' => SqlAggregate::COUNT('id')))
            ->order_by('-created')
            ->limit($limit);

foreach ($hits as $T) {
            $tasks[] = array('id'=>$T['number'], 'value'=>$T['number'],
                'info'=>"{$T['number']}",
                'matches'=>$_REQUEST['q']);
        }

return $this->json_encode($tasks);
    }

function triggerThreadAction($task_id, $thread_id, $action) {
        $thread = ThreadEntry::lookup($thread_id);
        if (!$thread)
            Http::response(404, 'No such task thread entry');
        if ($thread->getThread()->getObjectId() != $task_id)
            Http::response(404, 'No such task thread entry');

$valid = false;
        foreach ($thread->getActions() as $group=>$list) {
            foreach ($list as $name=>$A) {
                if ($A->getId() == $action) {
                    $valid = true; break;
                }
            }
        }

if (!$valid)
          Http::response(400, 'Not a valid action for this thread');

$thread->triggerAction($action);
    }

function add($tid=0, $vars=array()) {
        global $thisstaff;

if ($tid) {
            $vars = array_merge($_SESSION[':form-data'], $vars);
            $originalTask = Task::lookup($tid);
        }
        else
          unset($_SESSION[':form-data']);

$info=$errors=array();
        if ($_POST) {
            Draft::deleteForNamespace('task.add', $thisstaff->getId());
            // Default form
            $form = TaskForm::getInstance();
            $form->setSource($_POST);
            // Internal form
            $iform = TaskForm::getInternalForm($_POST);
            $isvalid = true;
            if (!$iform->isValid())
                $isvalid = false;
            if (!$form->isValid())
                $isvalid = false;

if ($isvalid) {
 $vars = $_POST;
 $vars['default_formdata'] = $form->getClean();
 $vars['internal_formdata'] = $iform->getClean();
 $desc = $form->getField('description');
 $vars['description'] = $desc->getClean();
 if ($desc
 && $desc->isAttachmentsEnabled()
 && ($attachments=$desc->getWidget()->getAttachments()))
 $vars['files'] = $attachments->getFiles();
 $vars['staffId'] = $thisstaff->getId();
 $vars['poster'] = $thisstaff;
 $vars['ip_address'] = $_SERVER['REMOTE_ADDR'];
 if (($task=Task::create($vars, $errors))) {
 if ($_SESSION[':form-data']['eid']) {
 //add internal note to original task:
 $taskLink = sprintf('<a href="tasks.php?id=%d">#%s</a>',
 $task->getId(),
 $task->getNumber());

$entryLink = sprintf('<a href="#entry-%d">%s</a>',
 $_SESSION[':form-data']['eid'],
 Format::datetime($_SESSION[':form-data']['timestamp']));

$note = array(
 'title' => __('Task Created From Thread Entry'),
 'note' => sprintf(__(
 // %1$s is the task ID number and %2$s is the thread
 // entry date
 'Task %1$s Thread Entry: %2$s'),
 $taskLink, $entryLink)
 );

$originalTask->postNote($note, $errors, $thisstaff);

//add internal note to new task:
 $taskLink = sprintf('<a href="tasks.php?id=%d">#%s</a>',
 $originalTask->getId(),
 $originalTask->getNumber());

$note = array(
                            'title' => __('Task Created From Thread Entry'),
                            'note' => sprintf(__('This Task was created from Task %1$s'), $taskLink));

$task->postNote($note, $errors, $thisstaff);
                  }

Http::response(201, $task->getId());
                }
              }
              $info['error'] = sprintf('%s - %s', __('Error adding task'), __('Please try again!'));
            }

if ($originalTask) {
          $info['action'] = sprintf('#tasks/%d/add', $originalTask->getId());
          $info['title'] = sprintf(
                  __( 'Task #%1$s: %2$s'),
                  $originalTask->getNumber(),
                  __('Add New Task')
                  );
        }

include STAFFINC_DIR . 'templates/task.tmpl.php';
    }

function preview($tid) {
        global $thisstaff;

// No perm. check -- preview allowed for staff
        // XXX: perhaps force preview via parent object?
        if(!$thisstaff || !($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

include STAFFINC_DIR . 'templates/task-preview.tmpl.php';
    }

function edit($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_EDIT))
            Http::response(403, __('Permission denied'));

$info = $errors = array();
        $forms = DynamicFormEntry::forObject($task->getId(),
                ObjectModel::OBJECT_TYPE_TASK);

if ($_POST && $forms) {
            // TODO: Validate internal form

// Validate dynamic meta-data
            if ($task->update($forms, $_POST, $errors)) {
                Http::response(201, 'Task updated successfully');
            } elseif(!$errors['err']) {
                $errors['err'] = sprintf('%s %s',
                    sprintf(__('Unable to update %s.'), __('this task')),
                    __('Correct any errors below and try again.'));
            }
            $info = Format::htmlchars($_POST);
        }

include STAFFINC_DIR . 'templates/task-edit.tmpl.php';
    }

function editField($tid, $fid) {
        global $thisstaff;

if (!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));
        elseif (!$task->checkStaffPerm($thisstaff, Task::PERM_EDIT))
            Http::response(403, __('Permission denied'));
        elseif (!($field=$task->getField($fid)))
            Http::response(404, __('No such field'));
        $errors = array();
        $info = array(
                ':title' => sprintf(__('Task #%s: %s %s'),
                  $task->getNumber(),
                  __('Update'),
                  $field->getLabel()
                  ),
              ':action' => sprintf('#tasks/%d/field/%s/edit',
                  $task->getId(), $field->getId())
              );

$form = $field->getEditForm($_POST);
        if ($_POST && $form->isValid()) {

if ($task->updateField($form, $errors)) {
                $msg = sprintf(
                      __('%s successfully'),
                      sprintf(
                          __('%s updated'),
                          __($field->getLabel())
                          )
                      );

switch (true) {
                    case $field instanceof DateTime:
                    case $field instanceof DatetimeField:
                        $clean = Format::datetime((string) $field->getClean());
                        break;
                    case $field instanceof FileUploadField:
                        $field->save();
                        $answer =  $field->getAnswer();
                        $clean = $answer->display() ?: '&mdash;' . __('Empty') .  '&mdash;';
                        break;
                    case $field instanceof DepartmentField:
                        $clean = (string) Dept::lookup($field->getClean());
                        break;
                    case $field instanceof TextareaField:
                        $clean =  (string) $field->getClean();
                        $clean = Format::striptags($clean) ? $clean : '&mdash;' . __('Empty') .  '&mdash;';
                        if (strlen($clean) > 200)
                             $clean = Format::truncate($clean, 200);
                        break;
                    case $field instanceof BooleanField:
                        $clean = $field->getClean();
                        $clean = $field->toString($clean);
                        break;
                    default:
                        $clean =  $field->getClean();
                        $clean = is_array($clean) ? implode(',', $clean) :
                            (string) $clean;
                        if (strlen($clean) > 200)
                             $clean = Format::truncate($clean, 200);
                }

$clean = is_array($clean) ? $clean[0] : $clean;
                Http::response(201, $this->json_encode(['value' =>
                            $clean ?: '&mdash;' . __('Empty') .  '&mdash;',
                            'id' => $fid, 'msg' => $msg]));
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to update field');
        }

include STAFFINC_DIR . 'templates/field-edit.tmpl.php';
    }

function massProcess($action, $w=null)  {
        global $thisstaff, $cfg;

$actions = array(
                'transfer' => array(
                    'verbed' => __('transferred'),
                    ),
                'assign' => array(
                    'verbed' => __('assigned'),
                    ),
                'claim' => array(
                    'verbed' => __('claimed'),
                    ),
                'delete' => array(
                    'verbed' => __('deleted'),
                    ),
                'reopen' => array(
                    'verbed' => __('reopened'),
                    ),
                'close' => array(
                    'verbed' => __('closed'),
                    ),
                );

if (!isset($actions[$action]))
            Http::response(404, __('Unknown action'));

$info = $errors = $e = array();
        $inc = null;
        $i = $count = 0;
        if ($_POST) {
            if (!$_POST['tids'] || !($count=count($_POST['tids'])))
                $errors['err'] = sprintf(
                        __('You must select at least %s.'),
                        __('one task'));
        } else {
            $count  =  $_REQUEST['count'];
        }

switch ($action) {
        case 'claim':
            $w = 'me';
        case 'assign':
            $inc = 'assign.tmpl.php';
            $info[':action'] = "#tasks/mass/assign/$w";
            $info[':title'] = sprintf('Assign %s',
                    _N('selected task', 'selected tasks', $count));

$form = AssignmentForm::instantiate($_POST);

$assignCB = function($t, $f, $e) {
                return $t->assign($f, $e);
            };

$assignees = null;
            switch ($w) {
            case 'agents':
                $depts = array();
                $tids = $_POST['tids'] ?: array_filter(
                        explode(',', @$_REQUEST['tids'] ?: ''));
                if ($tids) {
                    $tasks = Task::objects()
                        ->distinct('dept_id')
                        ->filter(array('id__in' => $tids));
                    $depts = $tasks->values_flat('dept_id');
                }

$members = Staff::objects()
                    ->distinct('staff_id')
                    ->filter(array(
                                'onvacation' => 0,
                                'isactive' => 1,
                                )
                            );

if ($depts) {
                    $members->filter(Q::any( array(
                                    'dept_id__in' => $depts,
                                    Q::all(array(
                                        'dept_access__dept__id__in' => $depts,
                                        Q::not(array('dept_access__dept__flags__hasbit'
                                            => Dept::FLAG_ASSIGN_MEMBERS_ONLY,
                                            'dept_access__dept__flags__hasbit'
                                                => Dept::FLAG_ASSIGN_PRIMARY_ONLY))
                                        ))
                                    )));
                }

switch ($cfg->getAgentNameFormat()) {
                case 'last':
                case 'lastfirst':
                case 'legal':
                    $members->order_by('lastname', 'firstname');
                    break;

default:
                    $members->order_by('firstname', 'lastname');
                }

$prompt  = __('Select an Agent');
                $assignees = array();
                foreach ($members as $member)
                     $assignees['s'.$member->getId()] = $member->getName();

if (!$assignees)
                    $info['warn'] =  __('No agents available for assignment');
                break;
            case 'teams':
                $assignees = array();
                $prompt = __('Select a Team');
                foreach (Team::getActiveTeams() as $id => $name)
                    $assignees['t'.$id] = $name;

if (!$assignees)
                    $info['warn'] =  __('No teams available for assignment');
                break;
            case 'me':
                $info[':action'] = '#tasks/mass/claim';
                $info[':title'] = sprintf('Claim %s',
                        _N('selected task', 'selected tasks', $count));
                $info['warn'] = sprintf(
                        __('Are you sure you want to CLAIM %s?'),
                        _N('selected task', 'selected tasks', $count));
                $verb = sprintf('%s, %s', __('Yes'), __('Claim'));
                $id = sprintf('s%s', $thisstaff->getId());
                $assignees = array($id => $thisstaff->getName());
                $vars = $_POST ?: array('assignee' => array($id));
                $form = ClaimForm::instantiate($vars);
                $assignCB = function($t, $f, $e) {
                    return $t->claim($f, $e);
                };
                break;
            }

if ($assignees != null)
                $form->setAssignees($assignees);

if ($prompt && ($f=$form->getField('assignee')))
                $f->configure('prompt', $prompt);

if ($_POST && $form->isValid() && !$errors) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            // Make sure the agent is allowed to
                            // access and assign the task.
                            && $t->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                            // Do the assignment
                            && $assignCB($t, $form, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to assign %s' /* %s may be pluralized */),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        case 'transfer':
            $inc = 'transfer.tmpl.php';
            $info[':action'] = '#tasks/mass/transfer';
            $info[':title'] = sprintf(__('Transfer %s'),
                    _N('selected task', 'selected tasks', $count));
            $form = TransferForm::instantiate($_POST);
            $form->hideDisabled();
            if ($_POST && $form->isValid()) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            // Make sure the agent is allowed to
                            // access and transfer the task.
                            && $t->checkStaffPerm($thisstaff, Task::PERM_TRANSFER)
                            // Do the transfer
                            && $t->transfer($form, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to transfer %s' /* %s may be pluralized */),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        case 'reopen':
            $info['status'] = 'open';
        case 'close':
            $inc = 'task-status.tmpl.php';
            $info[':action'] = "#tasks/mass/$action";
            $info['status'] = $info['status'] ?: 'closed';
            $perm = '';
            switch ($info['status']) {
            case 'open':
                // If an agent can create a task then they're allowed to
                // reopen closed ones.
                $perm = Task::PERM_CREATE;
                $info[':title'] = sprintf('Reopen %s',
                         _N('selected task', 'selected tasks', $count));

$info['warn'] = sprintf(__('Are you sure you want to REOPEN %s?'),
                             _N('selected task', 'selected tasks', $count)
                             );
                break;
            case 'closed':
                $perm = Task::PERM_CLOSE;
                $info[':title'] = sprintf('Close %s',
                         _N('selected task', 'selected tasks', $count));

$info['warn'] = sprintf(__('Are you sure you want to CLOSE %s?'),
                             _N('selected task', 'selected tasks', $count)
                             );
                break;
            default:
                Http::response(404, __('Unknown action'));
            }
            // Check generic permissions --  department specific permissions
            // will be checked below.
            if ($perm && !$thisstaff->hasPerm($perm, false))
                $errors['err'] = sprintf(
                        __('You do not have permission to %s tasks'
                            /* %s will be an action verb */ ),
                        __($action));

if ($_POST && !$errors) {
                if (!$_POST['status']
                        || !in_array($_POST['status'], array('open', 'closed')))
                    $errors['status'] = __('Status selection required');
                else {
                    foreach ($_POST['tids'] as $tid) {
                        if (($t=Task::lookup($tid))
                                && $t->checkStaffPerm($thisstaff, $perm ?: null)
                                && $t->setStatus($_POST['status'], $_POST['comments'])
                                )
                            $i++;
                    }

if (!$i) {
 $info['error'] = sprintf(
 __('Unable to change status of %1$s'),
 _N('selected task', 'selected tasks', $count));
 }
 }
 }
 break;
 case 'delete':
 $inc = 'delete.tmpl.php';
 $info[':action'] = '#tasks/mass/delete';
 $info[':title'] = sprintf('Delete %s',
 _N('selected task', 'selected tasks', $count));
 $info[':placeholder'] = sprintf(__(
 'Optional reason for deleting %s'),
 _N('selected task', 'selected tasks', $count));
 $info['warn'] = sprintf(__(
 'Are you sure you want to DELETE %s?'),
 _N('selected task', 'selected tasks', $count));
 $info[':extra'] = sprintf('%s',
 __('Deleted tasks CANNOT be recovered, including any associated attachments.')
 );

if ($_POST && !$errors) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            && $t->getDeptId() != $_POST['dept_id']
                            && $t->checkStaffPerm($thisstaff, Task::PERM_DELETE)
                            && $t->delete($_POST, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to delete %s.'),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        default:
            Http::response(404, __('Unknown action'));
        }

if ($_POST && $i) {

// Assume success
 if ($i==$count) {
 $msg = sprintf(__('Successfully %1$s %2$s.' /* Tokens are <actioned> <x selected task(s)> */),
 $actions[$action]['verbed'],
 sprintf('%1$d %2$s',
 $count,
 _N('selected task', 'selected tasks', $count))
 );
 $_SESSION['::sysmsgs']['msg'] = $msg;
 } else {
 $warn = sprintf(
 __('%1$d of %2$d %3$s %4$s'), $i, $count,
 _N('selected task', 'selected tasks',
 $count),
 $actions[$action]['verbed']);
 $_SESSION['::sysmsgs']['warn'] = $warn;
 }
 Http::response(201, 'processed');
 } elseif($_POST && !isset($info['error'])) {
 $info['error'] = $errors['err'] ?: sprintf(
 __('Unable to %1$s %2$s'),
 __('process'),
 _N('selected task', 'selected tasks', $count));
 }

if ($_POST)
            $info = array_merge($info, Format::htmlchars($_POST));

include STAFFINC_DIR . "templates/$inc";
 // Copy checked tasks to the form.
 echo "
 <script type=\"text/javascript\">
 $(function() {
 $('form#tasks input[name=\"tids[]\"]:checkbox:checked')
 .each(function() {
 $('<input>')
 .prop('type', 'hidden')
 .attr('name', 'tids[]')
 .val($(this).val())
 .appendTo('form.mass-action');
 });
 });
 </script>";
 }

function transfer($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_TRANSFER))
            Http::response(403, __('Permission denied'));

$errors = array();

$info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Transfer')),
                ':action' => sprintf('#tasks/%d/transfer',
                    $task->getId())
                );

$form = $task->getTransferForm($_POST);
        $form->hideDisabled();

if ($_POST && $form->isValid()) {
            if ($task->transfer($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s transferred to %s department'),
                            __('Task'),
                            $task->getDept()
                            )
                        );
                Http::response(201, $task->getId());
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to transfer task');
        }

$info['dept_id'] = $info['dept_id'] ?: $task->getDeptId();

include STAFFINC_DIR . 'templates/transfer.tmpl.php';
    }

function assign($tid, $target=null) {
        global $thisstaff;

if (!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                || !($form=$task->getAssignmentForm($_POST, array(
                            'target' => $target))))
            Http::response(403, __('Permission denied'));

$errors = array();
 $info = array(
 ':title' => sprintf(__('Task #%s: %s'),
 $task->getNumber(),
 $task->isAssigned() ? __('Reassign') : __('Assign')),
 ':action' => sprintf('#tasks/%d/assign%s',
 $task->getId(),
 $target ? "/$target" : ''),
 );
 if ($task->isAssigned()) {
 $info['notice'] = sprintf(__('%s is currently assigned to %s'),
 __('Task'),
 $task->getAssigned());
 }

if ($_POST && $form->isValid()) {
            if ($task->assign($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s assigned to %s'),
                            __('Task'),
                            $form->getAssignee())
                        );

$assignee = $task->isAssigned() ? Format::htmlchars(implode('/', $task->getAssignees())) :
 '&mdash; '.__('Unassigned').' &mdash;';
 Http::response(201, $this->json_encode(['value' =>
 $assignee, 'id' => 'assign', 'msg' => $_SESSION['::sysmsgs']['msg']]));
 }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to assign task');
        }

include STAFFINC_DIR . 'templates/assign.tmpl.php';
    }

function claim($tid) {

global $thisstaff;

if (!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

// Check for premissions and such
        if (!$task->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                || !($form = $task->getClaimForm($_POST)))
            Http::response(403, __('Permission denied'));

$errors = array();
        $info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Claim')),
                ':action' => sprintf('#tasks/%d/claim',
                    $task->getId()),

);

if ($task->isAssigned()) {
            if ($task->getStaffId() == $thisstaff->getId())
                $assigned = __('you');
            else
                $assigneed = $task->getAssigned();

$info['error'] = sprintf(__('%s is currently assigned to %s'),
 __('This task'),
 $assigned);
 } else {
 $info['warn'] = sprintf(__('Are you sure you want to CLAIM %s?'),
 __('this task'));
 }

if ($_POST && $form->isValid()) {
            if ($task->claim($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s assigned to %s'),
                            __('Task'),
                            __('you'))
                        );
                Http::response(201, $task->getId());
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to claim task');
        }

$verb = sprintf('%s, %s', __('Yes'), __('Claim'));

include STAFFINC_DIR . 'templates/assign.tmpl.php';

}

function delete($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_DELETE))
            Http::response(403, __('Permission denied'));

$errors = array();
        $info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Delete')),
                ':action' => sprintf('#tasks/%d/delete',
                    $task->getId()),
                );

if ($_POST) {
 if ($task->delete($_POST, $errors)) {
 $_SESSION['::sysmsgs']['msg'] = sprintf(
 __('%s #%s deleted successfully'),
 __('Task'),
 $task->getNumber(),
 $task->getDept());
 Http::response(201, 0);
 }
 $info = array_merge($info, Format::htmlchars($_POST));
 $info['error'] = $errors['err'] ?: __('Unable to delete task');
 }
 $info[':placeholder'] = sprintf(__(
 'Optional reason for deleting %s'),
 __('this task'));
 $info['warn'] = sprintf(__(
 'Are you sure you want to DELETE %s?'),
 __('this task'));
 $info[':extra'] = sprintf('%s',
 __('Deleted tasks CANNOT be recovered, including any associated attachments.')
 );

include STAFFINC_DIR . 'templates/delete.tmpl.php';
    }

function changeStatus($tid, $status) {
        global $thisstaff;
        $statuses = array(
                'open' => __('Reopen'),
                'closed' => __('Close'),
                );

if(!($task=Task::lookup($tid)) || !$task->checkStaffPerm($thisstaff))
            Http::response(404, __('No such task'));

$perm = null;
        $info = $errors = array();
        switch ($status) {
        case 'open':
            $perm = Task::PERM_CREATE;
            $info = array(
                    ':title' => sprintf(__('Reopen Task #%s'),
                        $task->getNumber()),
                    ':action' => sprintf('#tasks/%d/reopen',
                        $task->getId())
                    );
            break;
        case 'closed':
            $perm = Task::PERM_CLOSE;
            $info = array(
                    ':title' => sprintf(__('Close Task #%s'),
                        $task->getNumber()),
                    ':action' => sprintf('#tasks/%d/close',
                        $task->getId())
                    );

if (($m=$task->isCloseable()) !== true)
                $errors['err'] = $info['error'] = $m;
            else
                $info['warn'] = sprintf(__('Are you sure you want to change status of %s?'),
                        __('this task'));
            break;
        default:
            Http::response(404, __('Unknown status'));
        }

if (!$errors && (!$perm || !$task->checkStaffPerm($thisstaff, $perm)))
            $errors['err'] = sprintf(
                        __('You do not have permission to %s tasks'),
                        $statuses[$status]);

if ($_POST && !$errors) {
            if ($task->setStatus($status, $_POST['comments'], $errors))
                Http::response(201, 0);

$info['error'] = $errors['err'] ?: __('Unable to change status of the task');
        }

$info['status'] = $status;

include STAFFINC_DIR . 'templates/task-status.tmpl.php';
   }

function reopen($tid) {
       return $this->changeStatus($tid, 'open');
   }

function close($tid) {
       return $this->changeStatus($tid, 'closed');
   }

function task($tid) {
        global $thisstaff;

if (!($task=Task::lookup($tid))
                || !$task->checkStaffPerm($thisstaff))
            Http::response(404, __('No such task'));

$info=$errors=array();
        $note_form = new SimpleForm(array(
            'attachments' => new FileUploadField(array('id'=>'attach',
            'name'=>'attach:note',
            'configuration' => array('extensions'=>'')))
            ));

if ($_POST) {

switch ($_POST['a']) {
            case 'postnote':
                $vars = $_POST;
                $attachments = $note_form->getField('attachments')->getFiles();
                $vars['files'] = array_merge(
                    $vars['files'] ?: array(), $attachments);
                if(($note=$task->postNote($vars, $errors, $thisstaff))) {
                    $msg=__('Note posted successfully');
                    // Clear attachment list
                    $note_form->setSource(array());
                    $note_form->getField('attachments')->reset();
                    Draft::deleteForNamespace('task.note.'.$task->getId(),
                            $thisstaff->getId());
                } else {
                    if(!$errors['err'])
                        $errors['err'] = __('Unable to post the note - missing or invalid data.');
                }
                break;
            default:
                $errors['err'] = __('Unknown action');
            }
        }

include STAFFINC_DIR . 'templates/task-view.tmpl.php';
    }
}
?>