Replaced the global variables for table styles to defined CSS classes.
[fa-stable.git] / sales / manage / customers.php
index e5ea837ab7228c08f75c2ca6d5efe089d31f4017..fa757da2e9c6fc592111dca34827c7412b64bf83 100644 (file)
@@ -9,11 +9,11 @@
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
 ***********************************************************************/
-$page_security = 3;
-$path_to_root="../..";
+$page_security = 'SA_CUSTOMER';
+$path_to_root = "../..";
 
 include_once($path_to_root . "/includes/session.inc");
-page(_("Customers"), @$_REQUEST['popup']); 
+page(_($help_context = "Customers"), @$_REQUEST['popup']); 
 
 include_once($path_to_root . "/includes/date_functions.inc");
 include_once($path_to_root . "/includes/banking.inc");
@@ -34,6 +34,13 @@ function can_process()
                set_focus('CustName');
                return false;
        } 
+
+       if (strlen($_POST['cust_ref']) == 0) 
+       {
+               display_error(_("The customer short name cannot be empty."));
+               set_focus('cust_ref');
+               return false;
+       } 
        
        if (!check_num('credit_limit', 0))
        {
@@ -70,23 +77,10 @@ function handle_submit()
                
        if ($new_customer == false) 
        {
-
-               $sql = "UPDATE ".TB_PREF."debtors_master SET name=" . db_escape($_POST['CustName']) . ", 
-                       address=".db_escape($_POST['address']) . ", 
-                       tax_id=".db_escape($_POST['tax_id']) . ", 
-                       curr_code=".db_escape($_POST['curr_code']) . ", 
-                       email=".db_escape($_POST['email']) . ", 
-                       dimension_id=".db_escape($_POST['dimension_id']) . ", 
-                       dimension2_id=".db_escape($_POST['dimension2_id']) . ", 
-            credit_status=".db_escape($_POST['credit_status']) . ", 
-            payment_terms=".db_escape($_POST['payment_terms']) . ", 
-            discount=" . input_num('discount') / 100 . ", 
-            pymt_discount=" . input_num('pymt_discount') / 100 . ", 
-            credit_limit=" . input_num('credit_limit') . ", 
-            sales_type = ".db_escape($_POST['sales_type']) . " 
-            WHERE debtor_no = '". $_POST['customer_id'] . "'";
-
-               db_query($sql,"The customer could not be updated");
+               update_customer($_POST['customer_id'], $_POST['CustName'], $_POST['cust_ref'], $_POST['address'],
+                       $_POST['tax_id'], $_POST['curr_code'], $_POST['email'], $_POST['dimension_id'], $_POST['dimension2_id'],
+                       $_POST['credit_status'], $_POST['payment_terms'], input_num('discount') / 100, input_num('pymt_discount') / 100,
+                       input_num('credit_limit'), $_POST['sales_type'], $_POST['notes'], $_POST['rep_lang']);
 
                update_record_status($_POST['customer_id'], $_POST['inactive'],
                        'debtors_master', 'debtor_no');
@@ -98,17 +92,10 @@ function handle_submit()
        {       //it is a new customer
 
                begin_transaction();
-
-               $sql = "INSERT INTO ".TB_PREF."debtors_master (name, address, tax_id, email, dimension_id, dimension2_id,  
-                       curr_code, credit_status, payment_terms, discount, pymt_discount,credit_limit,  
-                       sales_type) VALUES (".db_escape($_POST['CustName']) .", " 
-                       .db_escape($_POST['address']) . ", " . db_escape($_POST['tax_id']) . ","
-                       .db_escape($_POST['email']) . ", ".db_escape($_POST['dimension_id']) . ", " 
-                       .db_escape($_POST['dimension2_id']) . ", ".db_escape($_POST['curr_code']) . ", 
-                       " . db_escape($_POST['credit_status']) . ", ".db_escape($_POST['payment_terms']) . ", " . input_num('discount')/100 . ", 
-                       " . input_num('pymt_discount')/100 . ", " . input_num('credit_limit') . ", ".db_escape($_POST['sales_type']) . ")";
-
-               db_query($sql,"The customer could not be added");
+               add_customer($_POST['CustName'], $_POST['cust_ref'], $_POST['address'],
+                       $_POST['tax_id'], $_POST['curr_code'], $_POST['email'], $_POST['dimension_id'], $_POST['dimension2_id'],
+                       $_POST['credit_status'], $_POST['payment_terms'], input_num('discount') / 100, input_num('pymt_discount') / 100,
+                       input_num('credit_limit'), $_POST['sales_type'], $_POST['notes'], $_POST['rep_lang']);
 
                $_POST['customer_id'] = db_insert_id();
                $new_customer = false;
@@ -136,30 +123,22 @@ if (isset($_POST['delete']))
 
        // PREVENT DELETES IF DEPENDENT RECORDS IN 'debtor_trans'
        $sel_id = db_escape($_POST['customer_id']);
-       $sql= "SELECT COUNT(*) FROM ".TB_PREF."debtor_trans WHERE debtor_no=$sel_id";
-       $result = db_query($sql,"check failed");
-       $myrow = db_fetch_row($result);
-       if ($myrow[0] > 0) 
+
+       if (key_in_foreign_table($sel_id, 'debtor_trans', 'debtor_no', true))
        {
                $cancel_delete = 1;
                display_error(_("This customer cannot be deleted because there are transactions that refer to it."));
        } 
        else 
        {
-               $sql= "SELECT COUNT(*) FROM ".TB_PREF."sales_orders WHERE debtor_no=$sel_id";
-               $result = db_query($sql,"check failed");
-               $myrow = db_fetch_row($result);
-               if ($myrow[0] > 0) 
+               if (key_in_foreign_table($sel_id, 'sales_orders', 'debtor_no', true))
                {
                        $cancel_delete = 1;
                        display_error(_("Cannot delete the customer record because orders have been created against it."));
                } 
                else 
                {
-                       $sql = "SELECT COUNT(*) FROM ".TB_PREF."cust_branch WHERE debtor_no=$sel_id";
-                       $result = db_query($sql,"check failed");
-                       $myrow = db_fetch_row($result);
-                       if ($myrow[0] > 0) 
+                       if (key_in_foreign_table($sel_id, 'cust_branch', 'debtor_no', true))
                        {
                                $cancel_delete = 1;
                                display_error(_("Cannot delete this customer because there are branch records set up against it."));
@@ -170,8 +149,8 @@ if (isset($_POST['delete']))
        
        if ($cancel_delete == 0) 
        {       //ie not cancelled the delete as a result of above tests
-               $sql = "DELETE FROM ".TB_PREF."debtors_master WHERE debtor_no=$sel_id";
-               db_query($sql,"cannot delete customer");
+       
+               delete_customer($sel_id, true);
 
                display_notification(_("Selected customer has been deleted."));
                unset($_POST['customer_id']);
@@ -186,7 +165,7 @@ start_form();
 
 if (db_has_customers()) 
 {
-       start_table("class = 'tablestyle_noborder'");
+       start_table(TABLESTYLE_NOBORDER);
        start_row();
        customer_list_cells(_("Select a customer: "), 'customer_id', null,
                _('New customer'), true, check_value('show_inactive'));
@@ -205,47 +184,49 @@ else
 
 if ($new_customer) 
 {
-       $_POST['CustName'] = $_POST['address'] = $_POST['tax_id']  = '';
+       $_POST['CustName'] = $_POST['cust_ref'] = $_POST['address'] = $_POST['tax_id']  = '';
        $_POST['dimension_id'] = 0;
        $_POST['dimension2_id'] = 0;
        $_POST['sales_type'] = -1;
+       $_POST['rep_lang'] = '';
        $_POST['email'] = '';
        $_POST['curr_code']  = get_company_currency();
        $_POST['credit_status']  = -1;
-       $_POST['payment_terms']  = '';
+       $_POST['payment_terms']  = $_POST['notes']  = '';
+
        $_POST['discount']  = $_POST['pymt_discount'] = percent_format(0);
-       $_POST['credit_limit']  = price_format(sys_prefs::default_credit_limit());
+       $_POST['credit_limit']  = price_format($SysPrefs->default_credit_limit());
        $_POST['inactive'] = 0;
 } 
 else 
 {
-
-       $sql = "SELECT * FROM ".TB_PREF."debtors_master WHERE debtor_no = ".db_escape($_POST['customer_id']);
-       $result = db_query($sql,"check failed");
-
-       $myrow = db_fetch($result);
+       $myrow = get_customer($_POST['customer_id']);
 
        $_POST['CustName'] = $myrow["name"];
+       $_POST['cust_ref'] = $myrow["debtor_ref"];
        $_POST['address']  = $myrow["address"];
        $_POST['tax_id']  = $myrow["tax_id"];
        $_POST['email']  = $myrow["email"];
        $_POST['dimension_id']  = $myrow["dimension_id"];
        $_POST['dimension2_id']  = $myrow["dimension2_id"];
        $_POST['sales_type'] = $myrow["sales_type"];
+       $_POST['rep_lang'] = $myrow["rep_lang"];
        $_POST['curr_code']  = $myrow["curr_code"];
        $_POST['credit_status']  = $myrow["credit_status"];
        $_POST['payment_terms']  = $myrow["payment_terms"];
        $_POST['discount']  = percent_format($myrow["discount"] * 100);
        $_POST['pymt_discount']  = percent_format($myrow["pymt_discount"] * 100);
        $_POST['credit_limit']  = price_format($myrow["credit_limit"]);
+       $_POST['notes']  = $myrow["notes"];
        $_POST['inactive'] = $myrow["inactive"];
 }
 
-start_outer_table($table_style2, 5);
+start_outer_table(TABLESTYLE2);
 table_section(1);
 table_section_title(_("Name and Address"));
 
 text_row(_("Customer Name:"), 'CustName', $_POST['CustName'], 40, 80);
+text_row(_("Customer Short Name:"), 'cust_ref', null, 30, 30);
 textarea_row(_("Address:"), 'address', $_POST['address'], 35, 5);
 
 email_row(_("E-mail:"), 'email', null, 40, 40);
@@ -262,6 +243,7 @@ else
        hidden('curr_code', $_POST['curr_code']);                               
 }      
 sales_types_list_row(_("Sales Type/Price List:"), 'sales_type', $_POST['sales_type']);
+languages_list_row( _("Document Language:"), 'rep_lang', $_POST['rep_lang'], _('System default'));
 
 table_section(2);
 
@@ -293,6 +275,7 @@ if (!$new_customer)  {
 
 }
 
+textarea_row(_("General Notes:"), 'notes', null, 35, 5);
 record_status_list_row(_("Customer status:"), 'inactive');
 end_outer_table(1);
 
@@ -304,7 +287,7 @@ if ($new_customer)
 else 
 {
        submit_center_first('submit', _("Update Customer"), 
-         _('Update customer data'), true);
+         _('Update customer data'), @$_REQUEST['popup'] ? true : 'default');
        submit_return('select', get_post('customer_id'), _("Select this customer and return to document entry."));
        submit_center_last('delete', _("Delete Customer"), 
          _('Delete customer data if have been never used'), true);