LedgerSMB/RESTXML/Document/Customer_Search.pm



package LedgerSMB::RESTXML::Document::Customer_Search;
use strict;
use warnings;
use base qw(LedgerSMB::RESTXML::Document::Base);
use LedgerSMB::Log;

sub handle_get {
    my ( $self, $args ) = @_;
    my $user    = $args->{user};
    my $dbh     = $args->{dbh};
    my $handler = $args->{handler};

    my $query = $handler->read_query();

    my %terms;

    for my $field ( $query->param() ) {

        # TODO: BIG GAPING HOLE HERE.
        $terms{$field} = $query->param($field);
    }

    if ( $terms{_keyword} ) {
        %terms = (
            name           => $terms{_keyword},
            customernumber => $terms{_keyword},
            contact        => $terms{_keyword}
        );
    }
    my $sql =
      'SELECT id,name,phone,customernumber FROM customer WHERE '
      . join( ' OR ', map { "$_ like ?" } sort keys %terms );

    my $res = $dbh->prepare($sql);

    $res->execute( map { "$terms{$_}\%" } sort keys %terms )
      or return $handler->error( $dbh->errstr );

    my @rows;
    my $row;
    push @rows, $row while $row = $res->fetchrow_hashref();

    $res->finish();

    $handler->respond(
        XML::Twig::Elt->new(
            'Customer_Search_Response',
            { 'xmlns:xlink' => "http://www.w3.org/1999/xlink" },
            map {
                $self->hash_to_twig(
                    {
                        name      => 'Customer',
                        root_attr => { 'xlink:href' => "Customer/$_->{id}" },
                        hash      => $_
                    }
                );
              } @rows
        )
    );
}
1;