Sales invoice voiding is blocked when sales credit was issued against the invoice.
[fa-stable.git] / admin / create_coy.php
index d2498b017b8849649524c688aed259700341837e..eb44a1bc060ea59d7e041c55387ac7038cff2228 100644 (file)
@@ -1,6 +1,15 @@
 <?php
-
-$page_security = 15;
+/**********************************************************************
+    Copyright (C) FrontAccounting, LLC.
+       Released under the terms of the GNU General Public License, GPL, 
+       as published by the Free Software Foundation, either version 3 
+       of the License, or (at your option) any later version.
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
+***********************************************************************/
+$page_security = 'SA_CREATECOMPANY';
 $path_to_root="..";
 include_once($path_to_root . "/includes/session.inc");
 
@@ -9,46 +18,57 @@ include_once($path_to_root . "/admin/db/company_db.inc");
 include_once($path_to_root . "/admin/db/maintenance_db.inc");
 include_once($path_to_root . "/includes/ui.inc");
 
-page(_("Create/Update Company"));
+page(_($help_context = "Create/Update Company"));
 
-$comp_subdirs = array('images', 'pdf_files', 'backup','js_cache', 'reporting');
+$comp_subdirs = array('images', 'pdf_files', 'backup','js_cache', 'reporting', 'attachments');
 
 //---------------------------------------------------------------------------------------------
-
 if (isset($_GET['selected_id']))
 {
-       $selected_id = $_GET['selected_id'];
+       $selected_id = (int)$_GET['selected_id'];
 }
 elseif (isset($_POST['selected_id']))
 {
-       $selected_id = $_POST['selected_id'];
+       $selected_id = (int)$_POST['selected_id'];
 }
 else
        $selected_id = -1;
 
 //---------------------------------------------------------------------------------------------
 
-function check_data()
+function check_data($selected_id)
 {
        global $db_connections, $tb_pref_counter;
 
-       if ($_POST['name'] == "" || $_POST['host'] == "" || $_POST['dbuser'] == "" || $_POST['dbname'] == "")
-               return false;
-       foreach($db_connections as $id=>$con)
-       {
-               if ($_POST['host'] == $con['host'] && $_POST['dbname'] == $con['dbname'])
-               {
-                       if ($_POST['tbpref'] == $con['tbpref'])
-                       {
-                               display_error(_("This database settings are already used by another company."));
-                               return false;
-                       }
-                       if ($_POST['tbpref'] == 0 || $con['tbpref'] == '')
-                       {
-                               display_error(_("You cannot have table set without prefix together with prefixed sets in the same database."));
-                               return false;
-                       }
-               }
+       if($selected_id != -1) {
+               if ($_POST['name'] == "")
+               {
+                       display_error(_("Database settings are not specified."));
+                       return false;
+               }
+       } else {
+               if ($_POST['name'] == "" || $_POST['host'] == "" || $_POST['dbuser'] == "" || $_POST['dbname'] == "")
+               {
+                       display_error(_("Database settings are not specified."));
+                       return false;
+               }
+               foreach($db_connections as $id=>$con)
+               {
+                if($id != $selected_id && $_POST['host'] == $con['host'] 
+                       && $_POST['dbname'] == $con['dbname'])
+                       {
+                               if ($_POST['tbpref'] == $con['tbpref'])
+                               {
+                                       display_error(_("This database settings are already used by another company."));
+                                       return false;
+                               }
+                               if (($_POST['tbpref'] == 0) ^ ($con['tbpref'] == ''))
+                               {
+                                       display_error(_("You cannot have table set without prefix together with prefixed sets in the same database."));
+                                       return false;
+                               }
+                       }
+               }
        }
        return true;
 }
@@ -58,7 +78,6 @@ function check_data()
 function remove_connection($id) {
        global $db_connections;
 
-       $dbase = $db_connections[$id]['dbname'];
        $err = db_drop_db($db_connections[$id]);
 
        unset($db_connections[$id]);
@@ -69,65 +88,66 @@ function remove_connection($id) {
 }
 //---------------------------------------------------------------------------------------------
 
-function handle_submit()
+function handle_submit($selected_id)
 {
-       global $db_connections, $def_coy, $tb_pref_counter, $db,
-           $comp_path, $comp_subdirs;
+       global $Ajax, $db_connections, $def_coy, $tb_pref_counter, $db,
+           $comp_subdirs, $path_to_root;
 
-       $new = false;
-
-       if (!check_data())
+       $error = false;
+       if (!check_data($selected_id))
                return false;
 
-       $id = $_GET['id'];
+       if ($selected_id==-1)
+               $selected_id = count($db_connections);
 
-       $db_connections[$id]['name'] = $_POST['name'];
-       $db_connections[$id]['host'] = $_POST['host'];
-       $db_connections[$id]['dbuser'] = $_POST['dbuser'];
-       $db_connections[$id]['dbpassword'] = $_POST['dbpassword'];
-       $db_connections[$id]['dbname'] = $_POST['dbname'];
-       if (isset($_GET['ul']) && $_GET['ul'] == 1)
-       {
+       $new = !isset($db_connections[$selected_id]);
+
+       if ((bool)$_POST['def'] == true)
+               $def_coy = $selected_id;
+
+       $db_connections[$selected_id]['name'] = $_POST['name'];
+       if ($new) {
+               $db_connections[$selected_id]['host'] = $_POST['host'];
+               $db_connections[$selected_id]['dbuser'] = $_POST['dbuser'];
+               $db_connections[$selected_id]['dbpassword'] = $_POST['dbpassword'];
+               $db_connections[$selected_id]['dbname'] = $_POST['dbname'];
                if (is_numeric($_POST['tbpref']))
                {
-                       $db_connections[$id]['tbpref'] = $_POST['tbpref'] == 1 ?
+                       $db_connections[$selected_id]['tbpref'] = $_POST['tbpref'] == 1 ?
                          $tb_pref_counter."_" : '';
-                       $new = true;
                }
                else if ($_POST['tbpref'] != "")
-                       $db_connections[$id]['tbpref'] = $_POST['tbpref'];
+                       $db_connections[$selected_id]['tbpref'] = $_POST['tbpref'];
                else
-                       $db_connections[$id]['tbpref'] = "";
-       }
-       if ((bool)$_POST['def'] == true)
-               $def_coy = $id;
-       if (isset($_GET['ul']) && $_GET['ul'] == 1)
-       {
-               $conn = $db_connections[$id];
-               if (($db = db_create_db($conn)) == 0)
-               {
-                       display_error(_("Error creating Database: ") . $conn['dbname'] . _(", Please create it manually"));
-                       remove_connection($id);
-                       set_global_connection();
-                       return false;
-               }
+                       $db_connections[$selected_id]['tbpref'] = "";
 
-               $filename = $_FILES['uploadfile']['tmp_name'];
-               if (is_uploaded_file ($filename))
+               $conn = $db_connections[$selected_id];
+               if (($db = db_create_db($conn)) === false)
                {
-                       db_import($filename, $conn, $id);
-                       if (isset($_POST['admpassword']) && $_POST['admpassword'] != "")
-                               db_query("UPDATE ".$conn['tbpref']."users set password = '".md5($_POST['admpassword']). "' WHERE user_id = 'admin'");
+                       display_error(_("Error creating Database: ") . $conn['dbname'] . _(", Please create it manually"));
+                       $error = true;
+               } else {
+                       if (strncmp(db_get_version(), "5.6", 3) >= 0) 
+                               db_query("SET sql_mode = ''");
+                       if (!db_import($path_to_root.'/sql/'.get_post('coa'), $conn, $selected_id)) {
+                               display_error(_('Cannot create new company due to bugs in sql file.'));
+                               $error = true;
+                       } 
+                       else
+                       {
+                               if (!isset($_POST['admpassword']) || $_POST['admpassword'] == "")
+                                       $_POST['admpassword'] = "password";
+                               update_admin_password($conn, md5($_POST['admpassword']));
+                       }
                }
-               else
-               {
-                       display_error(_("Error uploading Database Script, please upload it manually"));
-                       set_global_connection();
+               if ($error) {
+                       remove_connection($selected_id);
                        return false;
                }
-               set_global_connection();
        }
+
        $error = write_config_db($new);
+       set_global_connection();
        if ($error == -1)
                display_error(_("Cannot open the configuration file - ") . $path_to_root . "/config_db.php");
        else if ($error == -2)
@@ -138,37 +158,62 @@ function handle_submit()
        {
                return false;
        }
-       $index = "<?php\nheader(\"Location: ../../index.php\");\n?>";
 
        if ($new)
        {
-           $cdir = $comp_path.'/'.$id;
-           @mkdir($cdir);
-           save_to_file($cdir.'/'.'index.php', 0, $index);
-
-           foreach($comp_subdirs as $dir)
-           {
-                       @mkdir($cdir.'/'.$dir);
-                       save_to_file($cdir.'/'.$dir.'/'.'index.php', 0, $index);
-           }
+               create_comp_dirs(company_path($selected_id), $comp_subdirs);
        }
+       $exts = get_company_extensions();
+       write_extensions($exts, $selected_id);
+       display_notification($new ? _('New company has been created.') : _('Company has been updated.'));
+       $Ajax->activate('_page_body');
        return true;
 }
 
 //---------------------------------------------------------------------------------------------
 
-function handle_delete()
+function handle_delete($id)
 {
-       global $comp_path, $def_coy, $db_connections, $comp_subdirs;
-
-       $id = $_GET['id'];
-
+       global $Ajax, $def_coy, $db_connections, $comp_subdirs, $path_to_root;
+
+       // First make sure all company directories from the one under removal are writable. 
+       // Without this after operation we end up with changed per-company owners!
+       for($i = $id; $i < count($db_connections); $i++) {
+                       $comp_path = company_path($i);
+               if (!is_dir($comp_path) || !is_writable($comp_path)) {
+                       display_error(_('Broken company subdirectories system. You have to remove this company manually.'));
+                       return;
+               }
+       }
+       // make sure config file is writable
+       if (!is_writeable($path_to_root . "/config_db.php"))
+       {
+               display_error(_("The configuration file ") . $path_to_root . "/config_db.php" . _(" is not writable. Change its permissions so it is, then re-run the operation."));
+               return;
+       }
+       // rename directory to temporary name to ensure all
+       // other subdirectories will have right owners even after
+       // unsuccessfull removal.
+       $cdir = company_path($id);
+       $tmpname  = company_path('/old_'.$id);
+       if (!@rename($cdir, $tmpname)) {
+               display_error(_('Cannot rename subdirectory to temporary name.'));
+               return;
+       }
+       // 'shift' company directories names
+       for ($i = $id+1; $i < count($db_connections); $i++) {
+               if (!rename(company_path($i), company_path($i-1))) {
+                       display_error(_("Cannot rename company subdirectory"));
+                       return;
+               }
+       }
        $err = remove_connection($id);
        if ($err == 0)
-               display_error(_("Error removing Database: ") . $dbase . _(", please remove it manuallly"));
+               display_error(_("Error removing Database: ") . $dbase . _(", please remove it manually"));
 
        if ($def_coy == $id)
                $def_coy = 0;
+
        $error = write_config_db();
        if ($error == -1)
                display_error(_("Cannot open the configuration file - ") . $path_to_root . "/config_db.php");
@@ -176,37 +221,38 @@ function handle_delete()
                display_error(_("Cannot write to the configuration file - ") . $path_to_root . "/config_db.php");
        else if ($error == -3)
                display_error(_("The configuration file ") . $path_to_root . "/config_db.php" . _(" is not writable. Change its permissions so it is, then re-run the operation."));
-       if ($error != 0)
+       if ($error != 0) {
+               @rename($tmpname, $cdir);
                return;
-
-       $cdir = $comp_path.'/'.$id;
-       flush_dir($cdir);
-       if (!rmdir($cdir))
+       }
+       // finally remove renamed company directory
+       @flush_dir($tmpname, true);
+       if (!@rmdir($tmpname))
        {
-               display_error(_("Cannot remove company data directory ") . $cdir);
+               display_error(_("Cannot remove temporary renamed company data directory ") . $tmpname);
                return;
        }
-
-       meta_forward($_SERVER['PHP_SELF']);
+       display_notification(_("Selected company has been deleted"));
+       $Ajax->activate('_page_body');
 }
 
 //---------------------------------------------------------------------------------------------
 
 function display_companies()
 {
-       global $table_style, $def_coy, $db_connections;
+       global $def_coy, $db_connections;
 
-       $coyno = $_SESSION["wa_current_user"]->company;
+       $coyno = user_company();
 
        echo "
-               <script language='javascript'>
-               function deleteCompany(id) {
-                       if (!confirm('" . _("Are you sure you want to delete company no. ") . "'+id))
+               <script type='text/javascript'>
+               function deleteCompany(id, name) {
+                       if (!confirm('" . _("Are you sure you want to delete company no. ") . "'+id+' '+name+'?'))
                                return
                        document.location.replace('create_coy.php?c=df&id='+id)
                }
                </script>";
-       start_table($table_style);
+       start_table(TABLESTYLE);
 
        $th = array(_("Company"), _("Database Host"), _("Database User"),
                _("Database Name"), _("Table Pref"), _("Default"), "", "");
@@ -232,43 +278,34 @@ function display_companies()
                label_cell($conn[$i]['dbname']);
                label_cell($conn[$i]['tbpref']);
                label_cell($what);
-               label_cell("<a href=" . $_SERVER['PHP_SELF']. "?selected_id=" . $i . ">" . _("Edit") . "</a>");
-               if ($i != $coyno)
-                       label_cell("<a href='javascript:deleteCompany(" . $i . ")'>" . _("Delete") . "</a>");
+               $edit = _("Edit");
+               $delete = _("Delete");
+               if (user_graphic_links())
+               {
+                       $edit = set_icon(ICON_EDIT, $edit);
+                       $delete = set_icon(ICON_DELETE, $delete);
+               }
+       label_cell("<a href='" . $_SERVER['PHP_SELF']. "?selected_id=$i'>$edit</a>");
+       $name = "\"".$conn[$i]['name']."\"";
+               label_cell( $i == $coyno ? '' :
+                       "<a href='javascript:deleteCompany($i, $name)'>$delete</a>");
                end_row();
        }
 
        end_table();
     display_note(_("The marked company is the current company which cannot be deleted."), 0, 0, "class='currentfg'");
+    display_note(_("If no Admin Password is entered, the new Admin Password will be '<b>password</b>' by default "), 1, 0, "class='currentfg'");
 }
 
 //---------------------------------------------------------------------------------------------
 
 function display_company_edit($selected_id)
 {
-       global $def_coy, $db_connections, $tb_pref_counter, $table_style2;
-
-       if ($selected_id != -1)
-               $n = $selected_id;
-       else
-               $n = count($db_connections);
+       global $def_coy, $db_connections, $tb_pref_counter;
 
-       start_form(true, true);
+       start_form();
 
-       echo "
-               <script language='javascript'>
-               function updateCompany() {
-                       if (document.forms[0].uploadfile.value!='' && document.forms[0].dbname.value!='') {
-                               document.forms[0].action='create_coy.php?c=u&ul=1&id=" . $n . "&fn=' + document.forms[0].uploadfile.value
-                       }
-                       else {
-                               document.forms[0].action='create_coy.php?c=u&id=" . $n . "&fn=' + document.forms[0].uploadfile.value
-                       }
-                       document.forms[0].submit()
-               }
-               </script>";
-
-       start_table($table_style2);
+       start_table(TABLESTYLE2);
 
        if ($selected_id != -1)
        {
@@ -289,30 +326,42 @@ function display_company_edit($selected_id)
                hidden('dbpassword', $_POST['dbpassword']);
        }
        else
+       {
                $_POST['tbpref'] = $tb_pref_counter."_";
-       text_row_ex(_("Company"), 'name', 30);
-       text_row_ex(_("Host"), 'host', 30);
-       text_row_ex(_("Database User"), 'dbuser', 30);
+               // Insert the current settings as default
+               $conn = $db_connections[user_company()];
+               $_POST['name'] = '';
+               $_POST['host']  = $conn['host'];
+               $_POST['dbuser']  = $conn['dbuser'];
+               $_POST['dbpassword']  = $conn['dbpassword'];
+               $_POST['dbname']  = $conn['dbname'];
+       }
+
+       text_row_ex(_("Company"), 'name', 50);
+
        if ($selected_id == -1)
+       {
+               text_row_ex(_("Host"), 'host', 30, 60);
+               text_row_ex(_("Database User"), 'dbuser', 30);
                text_row_ex(_("Database Password"), 'dbpassword', 30);
-       text_row_ex(_("Database Name"), 'dbname', 30);
-       if ($selected_id == -1)
+               text_row_ex(_("Database Name"), 'dbname', 30);
                yesno_list_row(_("Table Pref"), 'tbpref', 1, $_POST['tbpref'], _("None"), false);
-       else
+       } else {
+               label_row(_("Host"), $_POST['host']);
+               label_row(_("Database User"), $_POST['dbuser']);
+               label_row(_("Database Name"), $_POST['dbname']);
                label_row(_("Table Pref"), $_POST['tbpref']);
+       }
        yesno_list_row(_("Default"), 'def', null, "", "", false);
 
-       start_row();
-       label_cell(_("Database Script"));
-       label_cell("<input name='uploadfile' type='file'>");
-       end_row();
-
-       text_row_ex(_("New script Admin Password"), 'admpassword', 20);
-
-       end_table();
-       display_note(_("Choose from Database scripts in SQL folder. No Datase is created without a script."), 0, 1);
-       echo "<center><input onclick='javascript:updateCompany()' type='button' style='width:150px' value='". _("Save"). "'>";
+       if ($selected_id == -1)
+       {
+               coa_list_row(_("Database Script"), 'coa');
+               text_row_ex(_("New script Admin Password"), 'admpassword', 20);
+       }
+       end_table(1);
 
+       submit_center('save', _("Save"));
 
        end_form();
 }
@@ -320,21 +369,16 @@ function display_company_edit($selected_id)
 
 //---------------------------------------------------------------------------------------------
 
-if (isset($_GET['c']) && $_GET['c'] == 'df')
-{
-
-       handle_delete();
+if (isset($_GET['c']) && $_GET['c'] == 'df') {
+       handle_delete( (int)$_GET['id'] );
+       $selected_id = -1;
 }
 
-if (isset($_GET['c']) && $_GET['c'] == 'u')
-{
-       if (handle_submit())
-       {
-               meta_forward($_SERVER['PHP_SELF']);
-       }
+if (get_post('save')) {
+       if (handle_submit($selected_id))
+               $selected_id = -1;
 }
 
-
 //---------------------------------------------------------------------------------------------
 
 display_companies();
@@ -344,7 +388,5 @@ hyperlink_no_params($_SERVER['PHP_SELF'], _("Create a new company"));
 display_company_edit($selected_id);
 
 //---------------------------------------------------------------------------------------------
-
 end_page();
 
-?>
\ No newline at end of file