Gecko [ 167.86.127.34 ]

Name	Size	Permission
cli	[ DIR ]	drwxr-xr-x
client	[ DIR ]	drwxr-xr-x
config	[ DIR ]	drwxr-xr-x
fpdf	[ DIR ]	drwxr-xr-x
i18n	[ DIR ]	drwxr-xr-x
mpdf	[ DIR ]	drwxr-xr-x
pear	[ DIR ]	drwxr-xr-x
plugins	[ DIR ]	drwxr-xr-x
staff	[ DIR ]	drwxr-xr-x
upgrader	[ DIR ]	drwxr-xr-x
.MANIFEST	163.74 KB	-rw-r--r--
.htaccess	14 B	-rw-r--r--
JSON.php	33.13 KB	-rw-r--r--
PasswordHash.php	6.92 KB	-rw-r--r--
Spyc.php	31.73 KB	-rw-r--r--
UniversalClassLoader.php	8.61 KB	-rw-r--r--
ajax.admin.php	7.21 KB	-rw-r--r--
ajax.config.php	4.55 KB	-rw-r--r--
ajax.content.php	9.47 KB	-rw-r--r--
ajax.draft.php	12.72 KB	-rw-r--r--
ajax.export.php	1006 B	-rw-r--r--
ajax.filter.php	874 B	-rw-r--r--
ajax.forms.php	13.3 KB	-rw-r--r--
ajax.i18n.php	4.91 KB	-rw-r--r--
ajax.kbase.php	2.93 KB	-rw-r--r--
ajax.note.php	2.05 KB	-rw-r--r--
ajax.orgs.php	11.7 KB	-rw-r--r--
ajax.schedule.php	4.29 KB	-rw-r--r--
ajax.search.php	12.35 KB	-rw-r--r--
ajax.sequence.php	3.2 KB	-rw-r--r--
ajax.staff.php	7.84 KB	-rw-r--r--
ajax.tasks.php	30.25 KB	-rw-r--r--
ajax.thread.php	8.89 KB	-rw-r--r--
ajax.tickets.php	74 KB	-rw-r--r--
ajax.tips.php	1.66 KB	-rw-r--r--
ajax.upgrader.php	2.24 KB	-rw-r--r--
ajax.users.php	17.8 KB	-rw-r--r--
api.cron.php	909 B	-rw-r--r--
api.tickets.php	8.26 KB	-rw-r--r--
class.ajax.php	1.42 KB	-rw-r--r--
class.api.php	13.14 KB	-rw-r--r--
class.app.php	1.47 KB	-rw-r--r--
class.attachment.php	6.87 KB	-rw-r--r--
class.auth.php	43.91 KB	-rw-r--r--
class.avatar.php	6.43 KB	-rw-r--r--
class.banlist.php	2.54 KB	-rw-r--r--
class.base32.php	4.06 KB	-rw-r--r--
class.businesshours.php	6.72 KB	-rw-r--r--
class.canned.php	8.58 KB	-rw-r--r--
class.captcha.php	1.73 KB	-rw-r--r--
class.category.php	11.04 KB	-rw-r--r--
class.charset.php	3.4 KB	-rw-r--r--
class.cli.php	9.48 KB	-rw-r--r--
class.client.php	15.02 KB	-rw-r--r--
class.collaborator.php	5.44 KB	-rw-r--r--
class.company.php	2.65 KB	-rw-r--r--
class.config.php	58.51 KB	-rw-r--r--
class.cron.php	3.54 KB	-rw-r--r--
class.crypto.php	18.96 KB	-rw-r--r--
class.csrf.php	2.36 KB	-rw-r--r--
class.dept.php	32.39 KB	-rw-r--r--
class.dispatcher.php	6.72 KB	-rw-r--r--
class.draft.php	6.25 KB	-rw-r--r--
class.dynamic_forms.php	62.12 KB	-rw-r--r--
class.email.php	18.09 KB	-rw-r--r--
class.error.php	1.69 KB	-rw-r--r--
class.export.php	31.8 KB	-rw-r--r--
class.faq.php	15.05 KB	-rw-r--r--
class.file.php	32.41 KB	-rw-r--r--
class.filter.php	27.75 KB	-rw-r--r--
class.filter_action.php	20.27 KB	-rw-r--r--
class.format.php	40.68 KB	-rw-r--r--
class.forms.php	183.13 KB	-rw-r--r--
class.http.php	5.52 KB	-rw-r--r--
class.i18n.php	24.2 KB	-rw-r--r--
class.import.php	6.44 KB	-rw-r--r--
class.json.php	2.69 KB	-rw-r--r--
class.knowledgebase.php	5.8 KB	-rw-r--r--
class.list.php	41.85 KB	-rw-r--r--
class.lock.php	4.05 KB	-rw-r--r--
class.log.php	1.54 KB	-rw-r--r--
class.mailer.php	24.05 KB	-rw-r--r--
class.mailfetch.php	37.24 KB	-rw-r--r--
class.mailparse.php	26.7 KB	-rw-r--r--
class.message.php	6.4 KB	-rw-r--r--
class.migrater.php	5.2 KB	-rw-r--r--
class.misc.php	8.15 KB	-rw-r--r--
class.model.php	2.3 KB	-rw-r--r--
class.nav.php	14.14 KB	-rw-r--r--
class.note.php	2.39 KB	-rw-r--r--
class.organization.php	22.44 KB	-rw-r--r--
class.orm.php	119.54 KB	-rw-r--r--
class.osticket.php	18.8 KB	-rw-r--r--
class.ostsession.php	9.82 KB	-rw-r--r--
class.page.php	10.65 KB	-rw-r--r--
class.pagenate.php	5.13 KB	-rw-r--r--
class.passwd.php	1.19 KB	-rw-r--r--
class.pdf.php	3.62 KB	-rw-r--r--
class.plugin.php	23.89 KB	-rw-r--r--
class.priority.php	1.81 KB	-rw-r--r--
class.queue.php	102.01 KB	-rw-r--r--
class.report.php	11.47 KB	-rw-r--r--
class.role.php	11.12 KB	-rw-r--r--
class.schedule.php	46.03 KB	-rw-r--r--
class.search.php	56.26 KB	-rw-r--r--
class.sequence.php	7.27 KB	-rw-r--r--
class.setup.php	3.55 KB	-rw-r--r--
class.signal.php	4.16 KB	-rw-r--r--
class.sla.php	8.64 KB	-rw-r--r--
class.staff.php	52.41 KB	-rw-r--r--
class.task.php	49.97 KB	-rw-r--r--
class.team.php	12.01 KB	-rw-r--r--
class.template.php	23.33 KB	-rw-r--r--
class.thread.php	107.11 KB	-rw-r--r--
class.thread_actions.php	17.08 KB	-rw-r--r--
class.ticket.php	162.72 KB	-rw-r--r--
class.timezone.php	21.94 KB	-rw-r--r--
class.topic.php	19.07 KB	-rw-r--r--
class.translation.php	34.38 KB	-rw-r--r--
class.upgrader.php	13.54 KB	-rw-r--r--
class.user.php	42.45 KB	-rw-r--r--
class.usersession.php	4.99 KB	-rw-r--r--
class.util.php	8.01 KB	-rw-r--r--
class.validator.php	12.05 KB	-rw-r--r--
class.variable.php	11.93 KB	-rw-r--r--
class.xml.php	3.23 KB	-rw-r--r--
class.yaml.php	1.16 KB	-rw-r--r--
htmLawed.php	53.53 KB	-rw-r--r--
html2text.php	33.63 KB	-rw-r--r--
index.php	37 B	-rw-r--r--
mysqli.php	8.55 KB	-rw-r--r--
ost-config.php	5.61 KB	-rw-r--r--
ost-sampleconfig.php	5.62 KB	-rw-r--r--
tnef_decoder.php	19.82 KB	-rw-r--r--

Code Editor : ajax.tasks.php

<?php
/*********************************************************************
 ajax.tasks.php

AJAX interface for tasks

Peter Rotich <peter@osticket.com>
 Copyright (c) 20014 osTicket
 http://www.osticket.com

Released under the GNU General Public License WITHOUT ANY WARRANTY.
    See LICENSE.TXT for details.

vim: expandtab sw=4 ts=4 sts=4:
**********************************************************************/

if(!defined('INCLUDE_DIR')) die('403');

include_once(INCLUDE_DIR.'class.ticket.php');
require_once(INCLUDE_DIR.'class.ajax.php');
require_once(INCLUDE_DIR.'class.task.php');
include_once INCLUDE_DIR . 'class.thread_actions.php';

class TasksAjaxAPI extends AjaxController {

function lookup() {
        global $thisstaff;

$limit = isset($_REQUEST['limit']) ? (int) $_REQUEST['limit']:25;
        $tasks = array();

$visibility = Q::any(array(
            'staff_id' => $thisstaff->getId(),
            'team_id__in' => $thisstaff->teams->values_flat('team_id'),
        ));

if (!$thisstaff->showAssignedOnly() && ($depts=$thisstaff->getDepts())) {
            $visibility->add(array('dept_id__in' => $depts));
        }

$hits = TaskModel::objects()
            ->filter(Q::any(array(
                'number__startswith' => $_REQUEST['q'],
            )))
            ->filter($visibility)
            ->values('number')
            ->annotate(array('tasks' => SqlAggregate::COUNT('id')))
            ->order_by('-created')
            ->limit($limit);

foreach ($hits as $T) {
            $tasks[] = array('id'=>$T['number'], 'value'=>$T['number'],
                'info'=>"{$T['number']}",
                'matches'=>$_REQUEST['q']);
        }

return $this->json_encode($tasks);
    }

function triggerThreadAction($task_id, $thread_id, $action) {
        $thread = ThreadEntry::lookup($thread_id);
        if (!$thread)
            Http::response(404, 'No such task thread entry');
        if ($thread->getThread()->getObjectId() != $task_id)
            Http::response(404, 'No such task thread entry');

$valid = false;
        foreach ($thread->getActions() as $group=>$list) {
            foreach ($list as $name=>$A) {
                if ($A->getId() == $action) {
                    $valid = true; break;
                }
            }
        }

if (!$valid)
          Http::response(400, 'Not a valid action for this thread');

$thread->triggerAction($action);
    }

function add($tid=0, $vars=array()) {
        global $thisstaff;

if ($tid) {
            $vars = array_merge($_SESSION[':form-data'], $vars);
            $originalTask = Task::lookup($tid);
        }
        else
          unset($_SESSION[':form-data']);

$info=$errors=array();
        if ($_POST) {
            Draft::deleteForNamespace('task.add', $thisstaff->getId());
            // Default form
            $form = TaskForm::getInstance();
            $form->setSource($_POST);
            // Internal form
            $iform = TaskForm::getInternalForm($_POST);
            $isvalid = true;
            if (!$iform->isValid())
                $isvalid = false;
            if (!$form->isValid())
                $isvalid = false;

if ($isvalid) {
 $vars = $_POST;
 $vars['default_formdata'] = $form->getClean();
 $vars['internal_formdata'] = $iform->getClean();
 $desc = $form->getField('description');
 if ($desc
 && $desc->isAttachmentsEnabled()
 && ($attachments=$desc->getWidget()->getAttachments()))
 $vars['files'] = $attachments->getFiles();
 $vars['staffId'] = $thisstaff->getId();
 $vars['poster'] = $thisstaff;
 $vars['ip_address'] = $_SERVER['REMOTE_ADDR'];
 if (($task=Task::create($vars, $errors))) {
 if ($_SESSION[':form-data']['eid']) {
 //add internal note to original task:
 $taskLink = sprintf('<a href="tasks.php?id=%d">#%s</a>',
 $task->getId(),
 $task->getNumber());

$entryLink = sprintf('<a href="#entry-%d">%s</a>',
 $_SESSION[':form-data']['eid'],
 Format::datetime($_SESSION[':form-data']['timestamp']));

$note = array(
 'title' => __('Task Created From Thread Entry'),
 'note' => sprintf(__(
 // %1$s is the task ID number and %2$s is the thread
 // entry date
 'Task %1$s Thread Entry: %2$s'),
 $taskLink, $entryLink)
 );

$originalTask->postNote($note, $errors, $thisstaff);

//add internal note to new task:
 $taskLink = sprintf('<a href="tasks.php?id=%d">#%s</a>',
 $originalTask->getId(),
 $originalTask->getNumber());

$note = array(
                            'title' => __('Task Created From Thread Entry'),
                            'note' => sprintf(__('This Task was created from Task %1$s'), $taskLink));

$task->postNote($note, $errors, $thisstaff);
                  }

Http::response(201, $task->getId());
                }
              }
              $info['error'] = sprintf('%s - %s', __('Error adding task'), __('Please try again!'));
            }

if ($originalTask) {
          $info['action'] = sprintf('#tasks/%d/add', $originalTask->getId());
          $info['title'] = sprintf(
                  __( 'Task #%1$s: %2$s'),
                  $originalTask->getNumber(),
                  __('Add New Task')
                  );
        }

include STAFFINC_DIR . 'templates/task.tmpl.php';
    }

function preview($tid) {
        global $thisstaff;

// No perm. check -- preview allowed for staff
        // XXX: perhaps force preview via parent object?
        if(!$thisstaff || !($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

include STAFFINC_DIR . 'templates/task-preview.tmpl.php';
    }

function edit($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_EDIT))
            Http::response(403, __('Permission denied'));

$info = $errors = array();
        $forms = DynamicFormEntry::forObject($task->getId(),
                ObjectModel::OBJECT_TYPE_TASK);

if ($_POST && $forms) {
            // TODO: Validate internal form

// Validate dynamic meta-data
            if ($task->update($forms, $_POST, $errors)) {
                Http::response(201, 'Task updated successfully');
            } elseif(!$errors['err']) {
                $errors['err'] = sprintf('%s %s',
                    sprintf(__('Unable to update %s.'), __('this task')),
                    __('Correct any errors below and try again.'));
            }
            $info = Format::htmlchars($_POST);
        }

include STAFFINC_DIR . 'templates/task-edit.tmpl.php';
    }

function massProcess($action, $w=null)  {
        global $thisstaff, $cfg;

$actions = array(
                'transfer' => array(
                    'verbed' => __('transferred'),
                    ),
                'assign' => array(
                    'verbed' => __('assigned'),
                    ),
                'claim' => array(
                    'verbed' => __('claimed'),
                    ),
                'delete' => array(
                    'verbed' => __('deleted'),
                    ),
                'reopen' => array(
                    'verbed' => __('reopen'),
                    ),
                'close' => array(
                    'verbed' => __('closed'),
                    ),
                );

if (!isset($actions[$action]))
            Http::response(404, __('Unknown action'));

$info = $errors = $e = array();
        $inc = null;
        $i = $count = 0;
        if ($_POST) {
            if (!$_POST['tids'] || !($count=count($_POST['tids'])))
                $errors['err'] = sprintf(
                        __('You must select at least %s.'),
                        __('one task'));
        } else {
            $count  =  $_REQUEST['count'];
        }

switch ($action) {
        case 'claim':
            $w = 'me';
        case 'assign':
            $inc = 'assign.tmpl.php';
            $info[':action'] = "#tasks/mass/assign/$w";
            $info[':title'] = sprintf('Assign %s',
                    _N('selected task', 'selected tasks', $count));

$form = AssignmentForm::instantiate($_POST);

$assignCB = function($t, $f, $e) {
                return $t->assign($f, $e);
            };

$assignees = null;
            switch ($w) {
            case 'agents':
                $depts = array();
                $tids = $_POST['tids'] ?: array_filter(
                        explode(',', @$_REQUEST['tids'] ?: ''));
                if ($tids) {
                    $tasks = Task::objects()
                        ->distinct('dept_id')
                        ->filter(array('id__in' => $tids));
                    $depts = $tasks->values_flat('dept_id');
                }

$members = Staff::objects()
                    ->distinct('staff_id')
                    ->filter(array(
                                'onvacation' => 0,
                                'isactive' => 1,
                                )
                            );

if ($depts) {
                    $members->filter(Q::any( array(
                                    'dept_id__in' => $depts,
                                    Q::all(array(
                                        'dept_access__dept__id__in' => $depts,
                                        Q::not(array('dept_access__dept__flags__hasbit'
                                            => Dept::FLAG_ASSIGN_MEMBERS_ONLY,
                                            'dept_access__dept__flags__hasbit'
                                                => Dept::FLAG_ASSIGN_PRIMARY_ONLY))
                                        ))
                                    )));
                }

switch ($cfg->getAgentNameFormat()) {
                case 'last':
                case 'lastfirst':
                case 'legal':
                    $members->order_by('lastname', 'firstname');
                    break;

default:
                    $members->order_by('firstname', 'lastname');
                }

$prompt  = __('Select an Agent');
                $assignees = array();
                foreach ($members as $member)
                     $assignees['s'.$member->getId()] = $member->getName();

if (!$assignees)
                    $info['warn'] =  __('No agents available for assignment');
                break;
            case 'teams':
                $assignees = array();
                $prompt = __('Select a Team');
                foreach (Team::getActiveTeams() as $id => $name)
                    $assignees['t'.$id] = $name;

if (!$assignees)
                    $info['warn'] =  __('No teams available for assignment');
                break;
            case 'me':
                $info[':action'] = '#tasks/mass/claim';
                $info[':title'] = sprintf('Claim %s',
                        _N('selected task', 'selected tasks', $count));
                $info['warn'] = sprintf(
                        __('Are you sure you want to CLAIM %s?'),
                        _N('selected task', 'selected tasks', $count));
                $verb = sprintf('%s, %s', __('Yes'), __('Claim'));
                $id = sprintf('s%s', $thisstaff->getId());
                $assignees = array($id => $thisstaff->getName());
                $vars = $_POST ?: array('assignee' => array($id));
                $form = ClaimForm::instantiate($vars);
                $assignCB = function($t, $f, $e) {
                    return $t->claim($f, $e);
                };
                break;
            }

if ($assignees != null)
                $form->setAssignees($assignees);

if ($prompt && ($f=$form->getField('assignee')))
                $f->configure('prompt', $prompt);

if ($_POST && $form->isValid() && !$errors) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            // Make sure the agent is allowed to
                            // access and assign the task.
                            && $t->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                            // Do the assignment
                            && $assignCB($t, $form, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to assign %s' /* %s may be pluralized */),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        case 'transfer':
            $inc = 'transfer.tmpl.php';
            $info[':action'] = '#tasks/mass/transfer';
            $info[':title'] = sprintf('Transfer %s',
                    _N('selected task', 'selected tasks', $count));
            $form = TransferForm::instantiate($_POST);
            if ($_POST && $form->isValid()) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            // Make sure the agent is allowed to
                            // access and transfer the task.
                            && $t->checkStaffPerm($thisstaff, Task::PERM_TRANSFER)
                            // Do the transfer
                            && $t->transfer($form, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to transfer %s' /* %s may be pluralized */),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        case 'reopen':
            $info['status'] = 'open';
        case 'close':
            $inc = 'task-status.tmpl.php';
            $info[':action'] = "#tasks/mass/$action";
            $info['status'] = $info['status'] ?: 'closed';
            $perm = $action = '';
            switch ($info['status']) {
            case 'open':
                // If an agent can create a task then they're allowed to
                // reopen closed ones.
                $perm = Task::PERM_CREATE;
                $info[':title'] = sprintf('Reopen %s',
                         _N('selected task', 'selected tasks', $count));

$info['warn'] = sprintf(__('Are you sure you want to REOPEN %s?'),
                             _N('selected task', 'selected tasks', $count)
                             );
                break;
            case 'closed':
                $perm = Task::PERM_CLOSE;
                $info[':title'] = sprintf('Close %s',
                         _N('selected task', 'selected tasks', $count));

$info['warn'] = sprintf(__('Are you sure you want to CLOSE %s?'),
                             _N('selected task', 'selected tasks', $count)
                             );
                break;
            default:
                Http::response(404, __('Unknown action'));
            }
            // Check generic permissions --  department specific permissions
            // will be checked below.
            if ($perm && !$thisstaff->hasPerm($perm, false))
                $errors['err'] = sprintf(
                        __('You do not have permission to %s tasks'
                            /* %s will be an action verb */ ),
                        __($action));

if ($_POST && !$errors) {
                if (!$_POST['status']
                        || !in_array($_POST['status'], array('open', 'closed')))
                    $errors['status'] = __('Status selection required');
                else {
                    foreach ($_POST['tids'] as $tid) {
                        if (($t=Task::lookup($tid))
                                && $t->checkStaffPerm($thisstaff, $perm ?: null)
                                && $t->setStatus($_POST['status'], $_POST['comments'])
                                )
                            $i++;
                    }

if (!$i) {
 $info['error'] = sprintf(
 __('Unable to change status of %1$s'),
 _N('selected task', 'selected tasks', $count));
 }
 }
 }
 break;
 case 'delete':
 $inc = 'delete.tmpl.php';
 $info[':action'] = '#tasks/mass/delete';
 $info[':title'] = sprintf('Delete %s',
 _N('selected task', 'selected tasks', $count));
 $info[':placeholder'] = sprintf(__(
 'Optional reason for deleting %s'),
 _N('selected task', 'selected tasks', $count));
 $info['warn'] = sprintf(__(
 'Are you sure you want to DELETE %s?'),
 _N('selected task', 'selected tasks', $count));
 $info[':extra'] = sprintf('%s',
 __('Deleted tasks CANNOT be recovered, including any associated attachments.')
 );

if ($_POST && !$errors) {
                foreach ($_POST['tids'] as $tid) {
                    if (($t=Task::lookup($tid))
                            && $t->getDeptId() != $_POST['dept_id']
                            && $t->checkStaffPerm($thisstaff, Task::PERM_DELETE)
                            && $t->delete($_POST, $e)
                            )
                        $i++;
                }

if (!$i) {
                    $info['error'] = sprintf(
                            __('Unable to delete %s.'),
                            _N('selected task', 'selected tasks', $count));
                }
            }
            break;
        default:
            Http::response(404, __('Unknown action'));
        }

if ($_POST && $i) {

// Assume success
 if ($i==$count) {
 $msg = sprintf(__('Successfully %1$s %2$s.' /* Tokens are <actioned> <x selected task(s)> */),
 $actions[$action]['verbed'],
 sprintf('%1$d %2$s',
 $count,
 _N('selected task', 'selected tasks', $count))
 );
 $_SESSION['::sysmsgs']['msg'] = $msg;
 } else {
 $warn = sprintf(
 __('%1$d of %2$d %3$s %4$s'), $i, $count,
 _N('selected task', 'selected tasks',
 $count),
 $actions[$action]['verbed']);
 $_SESSION['::sysmsgs']['warn'] = $warn;
 }
 Http::response(201, 'processed');
 } elseif($_POST && !isset($info['error'])) {
 $info['error'] = $errors['err'] ?: sprintf(
 __('Unable to %1$s %2$s'),
 __('process'),
 _N('selected task', 'selected tasks', $count));
 }

if ($_POST)
            $info = array_merge($info, Format::htmlchars($_POST));

include STAFFINC_DIR . "templates/$inc";
 // Copy checked tasks to the form.
 echo "
 <script type=\"text/javascript\">
 $(function() {
 $('form#tasks input[name=\"tids[]\"]:checkbox:checked')
 .each(function() {
 $('<input>')
 .prop('type', 'hidden')
 .attr('name', 'tids[]')
 .val($(this).val())
 .appendTo('form.mass-action');
 });
 });
 </script>";
 }

function transfer($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_TRANSFER))
            Http::response(403, __('Permission denied'));

$errors = array();

$info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Transfer')),
                ':action' => sprintf('#tasks/%d/transfer',
                    $task->getId())
                );

$form = $task->getTransferForm($_POST);
        if ($_POST && $form->isValid()) {
            if ($task->transfer($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s transferred to %s department'),
                            __('Task'),
                            $task->getDept()
                            )
                        );
                Http::response(201, $task->getId());
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to transfer task');
        }

$info['dept_id'] = $info['dept_id'] ?: $task->getDeptId();

include STAFFINC_DIR . 'templates/transfer.tmpl.php';
    }

function assign($tid, $target=null) {
        global $thisstaff;

if (!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                || !($form=$task->getAssignmentForm($_POST, array(
                            'target' => $target))))
            Http::response(403, __('Permission denied'));

$errors = array();
 $info = array(
 ':title' => sprintf(__('Task #%s: %s'),
 $task->getNumber(),
 $task->isAssigned() ? __('Reassign') : __('Assign')),
 ':action' => sprintf('#tasks/%d/assign%s',
 $task->getId(),
 $target ? "/$target" : ''),
 );
 if ($task->isAssigned()) {
 $info['notice'] = sprintf(__('%s is currently assigned to %s'),
 __('Task'),
 $task->getAssigned());
 }

if ($_POST && $form->isValid()) {
            if ($task->assign($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s assigned to %s'),
                            __('Task'),
                            $form->getAssignee())
                        );
                Http::response(201, $task->getId());
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to assign task');
        }

include STAFFINC_DIR . 'templates/assign.tmpl.php';
    }

function claim($tid) {

global $thisstaff;

if (!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

// Check for premissions and such
        if (!$task->checkStaffPerm($thisstaff, Task::PERM_ASSIGN)
                || !($form = $task->getClaimForm($_POST)))
            Http::response(403, __('Permission denied'));

$errors = array();
        $info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Claim')),
                ':action' => sprintf('#tasks/%d/claim',
                    $task->getId()),

);

if ($task->isAssigned()) {
            if ($task->getStaffId() == $thisstaff->getId())
                $assigned = __('you');
            else
                $assigneed = $task->getAssigned();

$info['error'] = sprintf(__('%s is currently assigned to %s'),
 __('This task'),
 $assigned);
 } else {
 $info['warn'] = sprintf(__('Are you sure you want to CLAIM %s?'),
 __('this task'));
 }

if ($_POST && $form->isValid()) {
            if ($task->claim($form, $errors)) {
                $_SESSION['::sysmsgs']['msg'] = sprintf(
                        __('%s successfully'),
                        sprintf(
                            __('%s assigned to %s'),
                            __('Task'),
                            __('you'))
                        );
                Http::response(201, $task->getId());
            }

$form->addErrors($errors);
            $info['error'] = $errors['err'] ?: __('Unable to claim task');
        }

$verb = sprintf('%s, %s', __('Yes'), __('Claim'));

include STAFFINC_DIR . 'templates/assign.tmpl.php';

}

function delete($tid) {
        global $thisstaff;

if(!($task=Task::lookup($tid)))
            Http::response(404, __('No such task'));

if (!$task->checkStaffPerm($thisstaff, Task::PERM_DELETE))
            Http::response(403, __('Permission denied'));

$errors = array();
        $info = array(
                ':title' => sprintf(__('Task #%s: %s'),
                    $task->getNumber(),
                    __('Delete')),
                ':action' => sprintf('#tasks/%d/delete',
                    $task->getId()),
                );

if ($_POST) {
 if ($task->delete($_POST, $errors)) {
 $_SESSION['::sysmsgs']['msg'] = sprintf(
 __('%s #%s deleted successfully'),
 __('Task'),
 $task->getNumber(),
 $task->getDept());
 Http::response(201, 0);
 }
 $info = array_merge($info, Format::htmlchars($_POST));
 $info['error'] = $errors['err'] ?: __('Unable to delete task');
 }
 $info[':placeholder'] = sprintf(__(
 'Optional reason for deleting %s'),
 __('this task'));
 $info['warn'] = sprintf(__(
 'Are you sure you want to DELETE %s?'),
 __('this task'));
 $info[':extra'] = sprintf('%s',
 __('Deleted tasks CANNOT be recovered, including any associated attachments.')
 );

include STAFFINC_DIR . 'templates/delete.tmpl.php';
    }

function changeStatus($tid, $status) {
        global $thisstaff;
        $statuses = array(
                'open' => __('Reopen'),
                'closed' => __('Close'),
                );

if(!($task=Task::lookup($tid)) || !$task->checkStaffPerm($thisstaff))
            Http::response(404, __('No such task'));

$perm = null;
        $info = $errors = array();
        switch ($status) {
        case 'open':
            $perm = Task::PERM_CREATE;
            $info = array(
                    ':title' => sprintf(__('Reopen Task #%s'),
                        $task->getNumber()),
                    ':action' => sprintf('#tasks/%d/reopen',
                        $task->getId())
                    );
            break;
        case 'closed':
            $perm = Task::PERM_CLOSE;
            $info = array(
                    ':title' => sprintf(__('Close Task #%s'),
                        $task->getNumber()),
                    ':action' => sprintf('#tasks/%d/close',
                        $task->getId())
                    );

if (($m=$task->isCloseable()) !== true)
                $errors['err'] = $info['error'] = $m;
            else
                $info['warn'] = sprintf(__('Are you sure you want to change status of %s?'),
                        __('this task'));
            break;
        default:
            Http::response(404, __('Unknown status'));
        }

if (!$errors && (!$perm || !$task->checkStaffPerm($thisstaff, $perm)))
            $errors['err'] = sprintf(
                        __('You do not have permission to %s tasks'),
                        $statuses[$status]);

if ($_POST && !$errors) {
            if ($task->setStatus($status, $_POST['comments'], $errors))
                Http::response(201, 0);

$info['error'] = $errors['err'] ?: __('Unable to change status of the task');
        }

$info['status'] = $status;

include STAFFINC_DIR . 'templates/task-status.tmpl.php';
   }

function reopen($tid) {
       return $this->changeStatus($tid, 'open');
   }

function close($tid) {
       return $this->changeStatus($tid, 'closed');
   }

function task($tid) {
        global $thisstaff;

if (!($task=Task::lookup($tid))
                || !$task->checkStaffPerm($thisstaff))
            Http::response(404, __('No such task'));

$info=$errors=array();
        $note_form = new SimpleForm(array(
            'attachments' => new FileUploadField(array('id'=>'attach',
            'name'=>'attach:note',
            'configuration' => array('extensions'=>'')))
            ));

if ($_POST) {

switch ($_POST['a']) {
            case 'postnote':
                $vars = $_POST;
                $attachments = $note_form->getField('attachments')->getFiles();
                $vars['files'] = array_merge(
                    $vars['files'] ?: array(), $attachments);
                if(($note=$task->postNote($vars, $errors, $thisstaff))) {
                    $msg=__('Note posted successfully');
                    // Clear attachment list
                    $note_form->setSource(array());
                    $note_form->getField('attachments')->reset();
                    Draft::deleteForNamespace('task.note.'.$task->getId(),
                            $thisstaff->getId());
                } else {
                    if(!$errors['err'])
                        $errors['err'] = __('Unable to post the note - missing or invalid data.');
                }
                break;
            default:
                $errors['err'] = __('Unknown action');
            }
        }

include STAFFINC_DIR . 'templates/task-view.tmpl.php';
    }
}
?>

${this.title}

Code Editor : ajax.tasks.php