335 lines
11 KiB
Python
335 lines
11 KiB
Python
# -*- coding: utf8 -*-
|
|
from pyramid.response import Response
|
|
from pyramid.renderers import render, get_renderer
|
|
from pyramid.view import (
|
|
view_config,
|
|
forbidden_view_config,
|
|
)
|
|
from pyramid.security import (
|
|
authenticated_userid,
|
|
remember,
|
|
forget,
|
|
)
|
|
from pyramid.httpexceptions import (
|
|
HTTPFound,
|
|
HTTPNotFound,
|
|
HTTPForbidden,
|
|
)
|
|
from pyramid_mailer import get_mailer
|
|
from pyramid_mailer.message import Message, Attachment
|
|
from datetime import *
|
|
import hashlib
|
|
|
|
from sqlalchemy.exc import DBAPIError
|
|
from ..security import groupfinder
|
|
|
|
import json
|
|
|
|
from ..models.default import *
|
|
|
|
def to_decimal(x):
|
|
import decimal
|
|
return decimal.Decimal(str(x))
|
|
|
|
def to_euro(x):
|
|
"""Takes a float and returns a string"""
|
|
#if x == 0:
|
|
# return ""
|
|
#else:
|
|
return (u"%.2f €" % x).replace('.', ',')
|
|
|
|
def to_int(x):
|
|
try:
|
|
number = int(x.replace(',', '.'))
|
|
return number
|
|
except ValueError:
|
|
return 0
|
|
|
|
def to_percent(x):
|
|
"""Takes a float and returns a string"""
|
|
return (u"%.2f " % x).replace('.', ',') + "%"
|
|
|
|
|
|
@view_config(route_name='home', renderer='../templates/home.pt', permission='view')
|
|
def home(request):
|
|
return {
|
|
'page_title': 'Bienvenue',
|
|
'project': 'mondumas',
|
|
}
|
|
|
|
@view_config(route_name='envoyer_mdp', renderer='../templates/envoyer_mdp.pt')
|
|
def envoyer_mdp(request):
|
|
url = request.route_url('envoyer_mdp')
|
|
message = u''
|
|
|
|
if 'form.submitted' in request.params:
|
|
login = request.params['login']
|
|
member = get_member_by_email(request, login)
|
|
if member:
|
|
# Fabrication du corps du email_passwordMessage
|
|
lien = update_membre_mdp_oublie(request, login)
|
|
body = u"""
|
|
|
|
Liên kết này cho phép bạn đặt lại mật khẩu của mình tại <tinhdo.caotek.fr> :
|
|
|
|
%s
|
|
|
|
Liên kết này có hiệu lực trong vòng 7 ngày.
|
|
|
|
|
|
""" % (request.route_url('redefinir_mdp', lien=lien))
|
|
envoyerMail(request, member.email, u"Yêu cầu đặt lại mật khẩu", body)
|
|
request.session.flash(u"Xác nhận đặt lại mật khẩu đã được gửi đến : %s." % member.email)
|
|
return HTTPFound(location=request.route_url('login'))
|
|
else:
|
|
message = u"Email đăng nhập không tìm thấy."
|
|
|
|
return {
|
|
'page_title': u"Quên mật khẩu ?",
|
|
'url': url,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='redefinir_mdp', renderer='../templates/redefinir_mdp.pt')
|
|
def redefinir_mdp(request):
|
|
lien = request.matchdict["lien"]
|
|
url = request.route_url('redefinir_mdp', lien=lien)
|
|
|
|
# tester si le champ "motdepasse_oublie" est encore valide
|
|
membre = get_member_by_mdp_oublie(request, lien)
|
|
if membre:
|
|
if 'form.submitted' in request.params:
|
|
login = request.params["login"]
|
|
mdp = request.params["new_password1"]
|
|
if login == membre.email:
|
|
update_membre_mdp(request, membre.email, mdp)
|
|
request.session.flash(u"Mật khẩu của bạn đã được thay đổi.", 'success')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
else:
|
|
request.session.flash(u"Email và liên kết không khớp với nhau.", 'danger')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
else:
|
|
request.session.flash(u"Liên kết không còn giá trị.", 'danger')
|
|
return HTTPFound(location=request.route_url('login'))
|
|
return {
|
|
'page_title': u"Đặt lại mật khẩu",
|
|
'url': url,
|
|
}
|
|
|
|
|
|
@view_config(route_name='login', renderer='../templates/login.pt', permission='view')
|
|
@forbidden_view_config(renderer='../templates/login.pt')
|
|
def login(request):
|
|
|
|
current_route_path = request.current_route_path()
|
|
login = ''
|
|
login_url = request.route_url('login')
|
|
|
|
referrer = request.url
|
|
if referrer == login_url:
|
|
referrer = '/' # never use the login form itself as came_from
|
|
|
|
came_from = request.params.get('came_from', referrer)
|
|
password = u''
|
|
message = u''
|
|
if 'form.submitted' in request.params:
|
|
login = request.params['login']
|
|
password = request.params['password']
|
|
record = get_member_by_email(request, login)
|
|
if record :
|
|
password_hash = hashlib.sha1(password).hexdigest()
|
|
if record.mdp == password_hash:
|
|
headers = remember(request, login)
|
|
return HTTPFound(location=came_from, headers=headers)
|
|
|
|
message = u"Email và mật khẫu không ăn khớp. Đăng nhập không thành công."
|
|
|
|
return {
|
|
'page_title': u"",
|
|
'url': login_url,
|
|
'came_from': came_from,
|
|
'login': login,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='gift_edit', renderer='../templates/gift_edit.pt', permission='view')
|
|
def gift_edit(request):
|
|
mbr_id = request.matchdict['mbr_id']
|
|
don_id = request.matchdict['don_id']
|
|
url = request.route_url("gift_edit", mbr_id=mbr_id, don_id=don_id)
|
|
|
|
# lire la fiche de l'membre
|
|
membre = get_member_by_id(request, mbr_id)
|
|
message = ''
|
|
types = ["DON MANUEL","COTISATION"]
|
|
modes = [u"ESPECE",u"CHEQUE"]
|
|
if don_id == '0':
|
|
# nouveau
|
|
don = {}
|
|
don['mbr_id'] = str(mbr_id)
|
|
don['don_id'] = '0'
|
|
don['date'] = date.today()
|
|
don['type'] = 'DON MANUEL'
|
|
don['mode'] = 'ESPECE'
|
|
don['montant'] = 0
|
|
don['valide_le'] = ''
|
|
page_title= 'Nouveau don'
|
|
else:
|
|
# lire le don
|
|
don = get_dons_by_mbr(request, mbr_id, don_id)
|
|
if not don:
|
|
request.session.flash(u"Don non trouvé : %s" % don_id, 'danger')
|
|
return HTTPFound(location=request.route_url('member_view', mbr_id=mbr_id))
|
|
page_title= u"Modification du don no %s" % (don.don_id)
|
|
|
|
if 'form.submitted' in request.params:
|
|
new_values = {}
|
|
for param, db_value in don.items():
|
|
if param in request.params and request.params[param] != db_value:
|
|
new_values[param] = request.params[param]
|
|
|
|
if new_values:
|
|
update_don(request, mbr_id, don_id, new_values)
|
|
request.session.flash(u"Le don a été mise à jour avec succès.", 'success')
|
|
return HTTPFound(location=request.route_url('member_view', mbr_id=mbr_id))
|
|
|
|
if 'form.deleted' in request.params:
|
|
delete_don(request, mbr_id, don_id)
|
|
request.session.flash(u"Le don a été supprimé avec succès.", 'success')
|
|
return HTTPFound(location=request.route_url('member_view', mbr_id=mbr_id))
|
|
|
|
return {
|
|
'page_title': page_title,
|
|
'url': url,
|
|
'mbr_nom': '%s %s' % (membre.nom, membre.prenom),
|
|
'don': don,
|
|
'types': types,
|
|
'modes': modes,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='logout')
|
|
def logout(request):
|
|
request.session.invalidate()
|
|
headers = forget(request)
|
|
request.session.flash(u"Vous avez bien été déconnecté.")
|
|
return HTTPFound(location=request.route_url('login', login=''),
|
|
headers=headers)
|
|
|
|
|
|
@view_config(route_name='member_edit', renderer='../templates/member_edit.pt', permission='view')
|
|
def member_edit(request):
|
|
mbr_id = request.matchdict['mbr_id']
|
|
url = request.route_url("member_edit", mbr_id=mbr_id)
|
|
|
|
message = ''
|
|
civilites = ["M.","M.Mme","Mme"]
|
|
etats = [u"Actif",u"Décédé",u"NPAI"]
|
|
if mbr_id == '0':
|
|
# nouveau
|
|
membre = {}
|
|
membre['mbr_id'] = 0
|
|
membre['civilite'] = 'Mme'
|
|
membre['nom'] = ''
|
|
membre['prenom'] = ''
|
|
membre['adresse'] = ''
|
|
membre['adresse2'] = ''
|
|
membre['cp'] = ''
|
|
membre['ville'] = ''
|
|
membre['email'] = ''
|
|
membre['tel_fixe'] = ''
|
|
membre['tel_mobile'] = ''
|
|
membre['phap_danh'] = '0'
|
|
membre['notes'] = ''
|
|
membre['etat'] = 'Actif'
|
|
membre['statut'] = 'HV'
|
|
page_title= 'Nouvelle Fiche'
|
|
else:
|
|
# lire la fiche de l'membre
|
|
membre = get_member_by_id(request, mbr_id)
|
|
if not membre:
|
|
request.session.flash(u"Membre non trouvé : %s" % id, 'warning')
|
|
return HTTPFound(location=request.route_url('members'))
|
|
page_title= u"Modification de la fiche no %s" %(membre.mbr_id)
|
|
|
|
if 'form.submitted' in request.params:
|
|
new_values = {}
|
|
for param, db_value in membre.items():
|
|
if param in request.params and request.params[param] != db_value:
|
|
new_values[param] = request.params[param]
|
|
|
|
if new_values:
|
|
update_membre(request, mbr_id, new_values)
|
|
request.session.flash(u"La fiche a été mise à jour avec succès.", 'success')
|
|
if mbr_id == '0':
|
|
return HTTPFound(location=request.route_url('members'))
|
|
else:
|
|
return HTTPFound(location=request.route_url('member_view', mbr_id=mbr_id))
|
|
|
|
if 'form.deleted' in request.params:
|
|
delete_membre(request, mbr_id)
|
|
request.session.flash(u"La fiche a été supprimée avec succès.", 'success')
|
|
return HTTPFound(location=request.route_url('members'))
|
|
|
|
return {
|
|
'page_title': page_title,
|
|
'url': url,
|
|
'membre': membre,
|
|
'etats': etats,
|
|
'civilites': civilites,
|
|
'message': message,
|
|
}
|
|
|
|
@view_config(route_name='member_view', renderer='../templates/member_view.pt', permission='view')
|
|
def member_view(request):
|
|
mbr_id = request.matchdict['mbr_id']
|
|
url = request.route_url("member_view", mbr_id=mbr_id)
|
|
|
|
member = get_member_by_id(request, mbr_id)
|
|
if member is None:
|
|
request.session.flash(u"La fiche no %s est introuvable" % (mbr_id), 'danger')
|
|
return HTTPFound(location=request.route_url("members"))
|
|
# lire tous les dons du membre
|
|
dons = get_dons_by_mbr(request, mbr_id, 0)
|
|
|
|
return {
|
|
'page_title': u"[#%s] : %s %s" % (mbr_id, member.nom, member.prenom),
|
|
'member': member,
|
|
'dons': dons,
|
|
}
|
|
|
|
@view_config(route_name='members', renderer='../templates/members.pt', permission='view')
|
|
def members(request):
|
|
|
|
items = get_membres(request)
|
|
|
|
liste=[]
|
|
for item in items:
|
|
full_name = u'%s, %s ' % (item.nom, item.prenom)
|
|
d = (full_name, item.civilite, item.email, item.ville, item.statut, item.phap_danh, item.etat, item.mbr_id)
|
|
liste.append(d)
|
|
|
|
return {
|
|
"page_title": u"Danh sách",
|
|
'dt_data': json.dumps(liste),
|
|
}
|
|
|
|
|
|
def envoyerMail(request, destinataire, objet, corps):
|
|
body = u"""
|
|
|
|
%s
|
|
|
|
Thân mến,
|
|
https://tinhdo.caotek.fr
|
|
|
|
""" % (corps)
|
|
|
|
message = Message(subject=u"[tinh-do] %s" % objet,
|
|
sender=request.registry.settings['mondumas.admin_email'],
|
|
body=body)
|
|
message.add_recipient(destinataire)
|
|
mailer = get_mailer(request)
|
|
|
|
mailer.send_immediately(message)
|