function get_reference($type, $id)
{
- $sql = "SELECT * FROM ".TB_PREF."refs WHERE type=$type AND id=$id";
+ $sql = "SELECT * FROM ".TB_PREF."refs WHERE type=".db_escape($type)." AND id=".db_escape($id);
- return db_query($sql, "could not query reference table");
+ $result = db_query($sql, "could not query reference table");
+ $row = db_fetch($result);
+ return $row['reference'];
}
//--------------------------------------------------------------------------------------------------
-
-function add_reference($type, $id, $reference)
+
+function update_reference($type, $id, $reference)
{
- $sql = "INSERT INTO ".TB_PREF."refs (type, id, reference)
- VALUES ($type, $id, " . db_escape(trim($reference)) . ")";
-
- db_query($sql, "could not add reference entry");
+ $sql = "REPLACE ".TB_PREF."refs SET reference=".db_escape($reference)
+ .", type=".db_escape($type).", id=".db_escape($id);
+ db_query($sql, "could not update reference entry");
}
//--------------------------------------------------------------------------------------------------
function delete_reference($type, $id)
{
- $sql = "DELETE FROM ".TB_PREF."refs WHERE type=$type AND id=$id";
+ $sql = "DELETE FROM ".TB_PREF."refs WHERE type=".db_escape($type)." AND id=".db_escape($id);
return db_query($sql, "could not delete from reference table");
}
function find_reference($type, $reference)
{
- $sql = "SELECT id FROM ".TB_PREF."refs WHERE type=$type AND reference='$reference'";
+ // ignore refs references for voided transactions
+ $sql = "SELECT r.id FROM ".TB_PREF."refs r LEFT JOIN ".TB_PREF."voided v ON"
+ ." r.type=v.type AND r.id=v.id"
+ ." WHERE r.type=".db_escape($type)
+ ." AND reference=".db_escape($reference)
+ ." AND ISNULL(`memo_`)";
$result = db_query($sql, "could not query reference table");
function save_next_reference($type, $reference)
{
- $sql = "UPDATE ".TB_PREF."sys_types SET next_reference=" . db_escape(trim($reference)) . " WHERE type_id = $type";
+ $sql = "UPDATE ".TB_PREF."sys_types SET next_reference=" . db_escape(trim($reference))
+ . " WHERE type_id = ".db_escape($type);
db_query($sql, "The next transaction ref for $type could not be updated");
}
function get_next_reference($type)
{
- $sql = "SELECT next_reference FROM ".TB_PREF."sys_types WHERE type_id = $type";
+ $sql = "SELECT next_reference FROM ".TB_PREF."sys_types WHERE type_id = ".db_escape($type);
$result = db_query($sql,"The last transaction ref for $type could not be retreived");