Databse INSERT/UPDATE secured against db javscript injection
[fa-stable.git] / gl / includes / db / gl_db_accounts.inc
1 <?php
2
3
4 function add_gl_account($account_code, $account_name, $account_type, $account_code2, $tax_code)
5 {
6         $account_name = db_escape($account_name);
7         $sql = "INSERT INTO ".TB_PREF."chart_master (account_code, account_code2, account_name, account_type,
8                 tax_code) 
9                 VALUES ('$account_code', '$account_code2', $account_name, $account_type, $tax_code)";
10
11         db_query($sql, "could not add gl account");
12 }
13
14 function update_gl_account($account_code, $account_name, $account_type, $account_code2, $tax_code)
15 {
16         $account_name = db_escape($account_name);
17     $sql = "UPDATE ".TB_PREF."chart_master SET account_name=$account_name,
18                 account_type=$account_type, account_code2='$account_code2',
19                 tax_code=$tax_code WHERE account_code = '$account_code'";
20
21         db_query($sql, "could not update gl account");
22 }
23
24 function delete_gl_account($code)
25 {
26         $sql = "DELETE FROM ".TB_PREF."chart_master WHERE account_code='$code'";
27
28         db_query($sql, "could not delete gl account");
29 }
30
31 function get_gl_accounts($from=null, $to=null)
32 {
33         $sql = "SELECT ".TB_PREF."chart_master.*,".TB_PREF."chart_types.name AS AccountTypeName
34                 FROM ".TB_PREF."chart_master,".TB_PREF."chart_types
35                 WHERE ".TB_PREF."chart_master.account_type=".TB_PREF."chart_types.id";
36         if ($from != null)
37                 $sql .= " AND ".TB_PREF."chart_master.account_code >= '$from'";
38         if ($to != null)        
39                 $sql .= " AND ".TB_PREF."chart_master.account_code <= '$to'";
40         $sql .= " ORDER BY account_code";
41         
42         return db_query($sql, "could not get gl accounts");
43 }
44
45 function get_gl_accounts_all($balance=-1)
46 {
47         $sql = "SELECT ".TB_PREF."chart_master.*,".TB_PREF."chart_types.name AS AccountTypeName,".TB_PREF."chart_class.class_name AS AccountClassName
48                 FROM ".TB_PREF."chart_master,".TB_PREF."chart_types, ".TB_PREF."chart_class
49                 WHERE ".TB_PREF."chart_master.account_type=".TB_PREF."chart_types.id AND
50                 ".TB_PREF."chart_types.class_id=".TB_PREF."chart_class.cid";
51         if ($balance != -1)                             
52                 $sql .= " AND ".TB_PREF."chart_class.balance_sheet=$balance";
53         $sql .= " ORDER BY ".TB_PREF."chart_class.cid, ".TB_PREF."chart_types.id, ".TB_PREF."chart_master.account_code";
54         
55         return db_query($sql, "could not get gl accounts");
56 }
57
58 function get_gl_account($code)
59 {
60         $sql = "SELECT * FROM ".TB_PREF."chart_master WHERE account_code='$code'";
61
62         $result = db_query($sql, "could not get gl account");
63         return db_fetch($result);
64 }
65
66 function is_account_balancesheet($code)
67 {
68         $sql = "SELECT ".TB_PREF."chart_class.balance_sheet FROM ".TB_PREF."chart_class, ".TB_PREF."chart_types, ".TB_PREF."chart_master
69                 WHERE ".TB_PREF."chart_master.account_type=".TB_PREF."chart_types.id AND
70                 ".TB_PREF."chart_types.class_id=".TB_PREF."chart_class.cid
71                 AND ".TB_PREF."chart_master.account_code='$code'";
72         
73         $result = db_query($sql,"could not retreive the account class for $code");
74         $row = db_fetch_row($result);
75         return $row[0];
76 }
77         
78 function get_gl_account_name($code)
79 {
80         $sql = "SELECT account_name from ".TB_PREF."chart_master WHERE account_code='$code'";
81
82         $result = db_query($sql,"could not retreive the account name for $code");
83
84         if (db_num_rows($result) == 1)
85         {
86                 $row = db_fetch_row($result);
87                 return $row[0];
88         }
89
90         display_db_error("could not retreive the account name for $code", $sql, true);
91 }
92
93
94 ?>