fix XSS
[freeside.git] / httemplate / edit / cust_main / top_misc.html
1 <TABLE CLASS="fsinnerbox">
2
3 <TR>
4   <TD ALIGN="right">Residential</TD>
5   <TD><INPUT TYPE     = "radio"
6              NAME     = "residential_commercial"
7              ID       = "residential_commercial_Residential"
8              VALUE    = "Residential"
9              onChange = "rescom_changed(this)"
10        <% $cust_main->residential_commercial eq 'Commercial' ? '' : 'CHECKED' %>
11   ></TD>
12 </TR>
13 <TR>
14   <TD ALIGN="right">Commercial</TD>
15   <TD><INPUT TYPE     = "radio"
16              NAME     = "residential_commercial"
17              ID       = "residential_commercial_Commercial"
18              VALUE    = "Commercial"
19              onChange = "rescom_changed(this)"
20        <% $cust_main->residential_commercial eq 'Commercial' ? 'CHECKED' : '' %>
21   ></TD>
22 </TR>
23 <SCRIPT TYPE="text/javascript">
24   function rescom_changed(what) {
25     if ( what.checked == (what.value == 'Commercial' ) ) {
26       document.getElementById('company_row').style.display = '';
27       document.getElementById('contacts_div').style.display = '';
28     } else {
29       if ( document.getElementById('company').value.length == 0 ) {
30         document.getElementById('company_row').style.display = 'none';
31       }
32       document.getElementById('contacts_div').style.display = 'none';
33     }
34   }
35 </SCRIPT>
36
37 % foreach my $field ($cust_main->virtual_fields) {
38     <% $cust_main->pvf($field)->widget('HTML', 'edit',$cust_main->getfield($field)) %>
39 % }
40
41 %# tags
42 <& /elements/tr-select-cust_tag.html,
43              'custnum' => $custnum,
44              'cgi'     => $cgi,
45 &>
46
47 %# agent
48 % if ( $cgi->param('lock_agentnum') =~ /^(\d+)$/ && $curuser->agentnum($1) ) {
49 %
50 %   my $agentnum = $1;
51 %   $cust_main->agentnum($agentnum);
52
53     <INPUT TYPE="hidden" NAME="lock_agentnum" VALUE="<% $agentnum %>">
54     <INPUT TYPE="hidden" NAME="agentnum"      VALUE="<% $agentnum %>">
55     <TR>
56       <TD ALIGN="right"><% mt('Agent') |h %></TD>
57       <TD CLASS="fsdisabled"><% $cust_main->agent->agent |h %></TD>
58     </TR>
59  
60 % } else {
61
62   <& /elements/tr-select-agent.html, 
63                 'curr_value'    => $cust_main->agentnum,
64                 'label'         => "<B>${r}".emt('Agent')."</B>",
65                 'empty_label'   => emt('Select agent'),
66                 'disable_empty' => ( $cust_main->agentnum ? 1 : 0 ),
67                 'viewall_right' => emt('None'), 
68   &>
69
70 % }
71
72 %# agent_custid
73 % if ( $conf->exists('cust_main-edit_agent_custid') ) {
74
75     <TR>
76       <TD ALIGN="right"><% mt('Customer identifier') |h %></TD>
77       <TD><INPUT TYPE="text" NAME="agent_custid" VALUE="<% $cust_main->agent_custid %>"></TD>
78     </TR>
79
80 % } else {
81
82     <INPUT TYPE="hidden" NAME="agent_custid" VALUE="<% $cust_main->agent_custid %>">
83
84 % }
85
86 %# class
87 <& /elements/tr-select-cust_class.html,
88              'curr_value'  => $cust_main->classnum,
89              'label'       => emt("Class"),
90 &>
91
92 %# referral (advertising source)
93 %my $refnum = $cust_main->refnum || $conf->config('referraldefault') || 0;
94 %if ( $custnum && ! $conf->exists('editreferrals') ) {
95
96   <INPUT TYPE="hidden" NAME="refnum" VALUE="<% $refnum %>">
97
98 % } else { 
99
100    <& /elements/tr-select-part_referral.html,
101                 'curr_value' => $refnum
102    &>
103 % } 
104
105
106 %# referring customer
107 %my $referring_cust_main = '';
108 %if ( $cust_main->referral_custnum
109 %     and $referring_cust_main =
110 %           qsearchs('cust_main', { custnum => $cust_main->referral_custnum } )
111 %     and ! $curuser->access_right('Edit referring customer')
112 %) {
113
114   <TR>
115     <TD ALIGN="right"><% mt('Referring customer') |h %></TD>
116     <TD>
117       <A HREF="<% popurl(1) %>/cust_main.cgi?<% $cust_main->referral_custnum %>"><% $cust_main->referral_custnum %>: <% $referring_cust_main->name |h %></A>
118     </TD>
119   </TR>
120   <INPUT TYPE="hidden" NAME="referral_custnum" VALUE="<% $cust_main->referral_custnum %>">
121
122 % } elsif ( ! $conf->exists('disable_customer_referrals') ) { 
123
124   <TR>
125     <TD ALIGN="right"><% mt('Referring customer') |h %></TD>
126     <TD>
127       <& /elements/search-cust_main.html,
128                     'field_name' => 'referral_custnum',
129                     'curr_value' => $cust_main->referral_custnum,
130       &>
131     </TD>
132   </TR>
133
134 % } else { 
135   <INPUT TYPE="hidden" NAME="referral_custnum" VALUE="">
136 % } 
137
138 %# signup date
139 % if ( $conf->exists('cust_main-edit_signupdate') ) {
140     <& /elements/tr-input-date-field.html, {
141                   'name'        => 'signupdate',
142                   'value'       => $cust_main->signupdate,
143                   'label'       => emt('Signup date'),
144                   'format'      => ( $conf->config('date_format') || "%m/%d/%Y" ),
145               }
146     &>
147 % }
148
149 % # permission to edit ticket subjects
150 % if ( $conf->exists('ticket_system-selfservice_edit_subject') ) {
151   <TR>
152     <TD ALIGN="right">
153       <INPUT TYPE="checkbox" NAME="edit_subject" VALUE="Y" <% 
154         $cust_main->edit_subject ? 'CHECKED' : '' %>></TD>
155     <TD ALIGN="left"><% mt('Can edit ticket subjects') |h %></TD>
156   </TR>
157 % } else {
158   <INPUT TYPE="hidden" NAME="edit_subject" VALUE="<% $cust_main->edit_subject %>">
159 % }
160
161 % # permission to edit
162 % if ( $conf->exists('cust_main-edit_calling_list_exempt') ) {
163   <TR>
164     <TD ALIGN="right">
165       <INPUT TYPE="checkbox" NAME="calling_list_exempt" VALUE="Y" <% 
166         $cust_main->calling_list_exempt ? 'CHECKED' : '' %>></TD>
167     <TD ALIGN="left"><% mt('Calling list exempt') |h %></TD>
168   </TR>
169 % } else {
170   <INPUT TYPE="hidden" NAME="calling_list_exempt" VALUE="<% $cust_main->calling_list_exempt %>">
171 % }
172
173 </TABLE>
174
175 <%init>
176
177 my( $cust_main, %opt ) = @_;
178
179 my $custnum = $opt{'custnum'};
180
181 if ( $cgi->param('error') ) {
182   $cust_main->set('residential_commercial',
183     ($cgi->param('residential_commercial') eq 'Commercial')
184       ? 'Commercial'
185       : 'Residential'
186   );
187 } elsif ( $custnum ) { #editing
188   $cust_main->set('residential_commercial',
189     length($cust_main->company)
190       ? 'Commercial'
191       : 'Residential'
192   );
193 } else { #new customer
194   #config to default to commercial and/or disable residential when someone needs
195   $cust_main->set('residential_commercial', 'Residential');
196 }
197
198 my $conf = new FS::Conf;
199
200 my $curuser = $FS::CurrentUser::CurrentUser;
201
202 my $r = qq!<font color="#ff0000">*</font>&nbsp;!;
203
204 </%init>