Smal display fix
[fa-stable.git] / sales / manage / sales_people.php
index e0d4f7b155661579fe8d5e669e42ba52ad0ee33d..ff45e3e043ce9fb215c84ddaded95e25149d240a 100644 (file)
@@ -11,7 +11,7 @@ include($path_to_root . "/includes/ui.inc");
 if (isset($_GET['selected_id']))
 {
        $selected_id = strtoupper($_GET['selected_id']);
-} 
+}
 elseif (isset($_POST['selected_id']))
 {
        $selected_id = strtoupper($_POST['selected_id']);
@@ -19,44 +19,63 @@ elseif (isset($_POST['selected_id']))
 
 //------------------------------------------------------------------------------------------------
 
-if (isset($_POST['ADD_ITEM']) || isset($_POST['UPDATE_ITEM'])) 
+if (isset($_POST['ADD_ITEM']) || isset($_POST['UPDATE_ITEM']))
 {
 
        //initialise no input errors assumed initially before we test
        $input_error = 0;
 
-       if (strlen($_POST['salesman_name']) == 0) 
+       if (strlen($_POST['salesman_name']) == 0)
        {
                $input_error = 1;
                display_error(_("The sales person name cannot be empty."));
-       } 
-
+       }
+       $pr1 = check_num('provision', 0,100);
+       if (!$pr1 || !check_num('provision2', 0, 100)) {
+               $input_error = 1;
+               display_error( _("Salesman provision cannot be less than 0 or more than 100%."));
+               set_focus(!$pr1 ? 'provision' : 'provision2');
+       }
+       if (!check_num('break_pt', 0)) {
+               $input_error = 1;
+               display_error( _("Salesman provision breakpoint must be numeric and not less than 0."));
+               set_focus('break_pt');
+       }
        if ($input_error != 1)
        {
-       if (isset($selected_id)) 
+       if (isset($selected_id))
        {
                /*selected_id could also exist if submit had not been clicked this code would not run in this case cos submit is false of course  see the delete code below*/
-    
-               $sql = "UPDATE ".TB_PREF."salesman SET salesman_name='" . $_POST['salesman_name'] . "', 
-                       salesman_phone='" . $_POST['salesman_phone'] . "', 
-                       salesman_fax='" . $_POST['salesman_fax'] . "'
-                       salesman_email='" . $_POST['salesman_email'] . "'
+
+               $sql = "UPDATE ".TB_PREF."salesman SET salesman_name=".db_escape($_POST['salesman_name']) . ",
+                       salesman_phone=".db_escape($_POST['salesman_phone']) . ",
+                       salesman_fax=".db_escape($_POST['salesman_fax']) . ",
+                       salesman_email=".db_escape($_POST['salesman_email']) . ",
+                       provision=".input_num('provision').",
+                       break_pt=".input_num('break_pt').",
+                       provision2=".input_num('provision2')."
                        WHERE salesman_code = '$selected_id'";
-       } 
-       else 
+       }
+       else
        {
                /*Selected group is null cos no item selected on first time round so must be adding a record must be submitting new entries in the new Sales-person form */
-               $sql = "INSERT INTO ".TB_PREF."salesman (salesman_name, salesman_phone, salesman_fax, salesman_email) 
-                       VALUES ('" . $_POST['salesman_name'] . "', '" . $_POST['salesman_phone'] . "', '" . $_POST['salesman_fax'] . "', '" . $_POST['salesman_email'] . "')";
+               $sql = "INSERT INTO ".TB_PREF."salesman (salesman_name, salesman_phone, salesman_fax, salesman_email,
+                       provision, break_pt, provision2)
+                       VALUES (".db_escape($_POST['salesman_name']) . ", "
+                                 .db_escape($_POST['salesman_phone']) . ", "
+                                 .db_escape($_POST['salesman_fax']) . ", "
+                                 .db_escape($_POST['salesman_email']) . ", ".
+                       input_num('provision').", ".input_num('break_pt').", "
+                               .input_num('provision2').")";
        }
 
        //run the sql from either of the above possibilites
        db_query($sql,"The insert or update of the salesperson failed");
-    
-               meta_forward($_SERVER['PHP_SELF']);             
+
+               meta_forward($_SERVER['PHP_SELF']);
        }
-} 
-if (isset($_GET['delete'])) 
+}
+if (isset($_GET['delete']))
 {
        //the link to delete a selected record was clicked instead of the submit button
 
@@ -65,45 +84,48 @@ if (isset($_GET['delete']))
        $sql= "SELECT COUNT(*) FROM ".TB_PREF."cust_branch WHERE salesman='$selected_id'";
        $result = db_query($sql,"check failed");
        $myrow = db_fetch_row($result);
-       if ($myrow[0] > 0) 
+       if ($myrow[0] > 0)
        {
                display_error("Cannot delete this sales-person because branches are set up referring to this sales-person - first alter the branches concerned.");
-       } 
-       else 
+       }
+       else
        {
                $sql="DELETE FROM ".TB_PREF."salesman WHERE salesman_code='$selected_id'";
                db_query($sql,"The sales-person could not be deleted");
 
-               meta_forward($_SERVER['PHP_SELF']);                     
+               meta_forward($_SERVER['PHP_SELF']);
        }
 }
 
-//------------------------------------------------------------------------------------------------ 
+//------------------------------------------------------------------------------------------------
 
 $sql = "SELECT * FROM ".TB_PREF."salesman";
 $result = db_query($sql,"could not get sales persons");
 
-start_table("$table_style width=40%");
-$th = array(_("Name"), _("Phone"), _("Fax"), _("Email"), "", "");
+start_table("$table_style width=60%");
+$th = array(_("Name"), _("Phone"), _("Fax"), _("Email"), _("Provision"), _("Break Pt."), _("Provision")." 2", "", "");
 table_header($th);
 
 $k = 0;
 
-while ($myrow = db_fetch($result)) 
+while ($myrow = db_fetch($result))
 {
-       
-       alt_table_row_color($k);                
-    
+
+       alt_table_row_color($k);
+
     label_cell($myrow["salesman_name"]);
        label_cell($myrow["salesman_phone"]);
        label_cell($myrow["salesman_fax"]);
        label_cell($myrow["salesman_email"]);
+       label_cell(percent_format($myrow["provision"])." %", "nowrap align=right");
+       amount_cell($myrow["break_pt"]);
+       label_cell(percent_format($myrow["provision2"])." %", "nowrap align=right");
        edit_link_cell(SID . "selected_id=" . $myrow["salesman_code"]);
        delete_link_cell(SID . "selected_id=" . $myrow["salesman_code"]. "&delete=1");
        end_row();
-    
+
 } //END WHILE LIST LOOP
+
 end_table();
 
 //------------------------------------------------------------------------------------------------
@@ -114,7 +136,7 @@ hyperlink_no_params($_SERVER['PHP_SELF'], _("New Sales Person"));
 
 start_form();
 
-if (isset($selected_id)) 
+if (isset($selected_id))
 {
        //editing an existing Sales-person
        $sql = "SELECT *  FROM ".TB_PREF."salesman WHERE salesman_code='$selected_id'";
@@ -126,17 +148,22 @@ if (isset($selected_id))
        $_POST['salesman_phone'] = $myrow["salesman_phone"];
        $_POST['salesman_fax'] = $myrow["salesman_fax"];
        $_POST['salesman_email'] = $myrow["salesman_email"];
+       $_POST['provision'] = percent_format($myrow["provision"]);
+       $_POST['break_pt'] = price_format($myrow["break_pt"]);
+       $_POST['provision2'] = percent_format($myrow["provision2"]);
 
        hidden('selected_id', $selected_id);
 }
 
-start_table("$table_style2 width=40%");
+start_table("$table_style2 width=60%");
 
 text_row_ex(_("Sales person name:"), 'salesman_name', 30);
 text_row_ex(_("Telephone number:"), 'salesman_phone', 20);
 text_row_ex(_("Fax number:"), 'salesman_fax', 20);
 text_row_ex(_("Email:"), 'salesman_email', 40);
-
+percent_row(_("Provision").':', 'provision');
+amount_row(_("Break Pt.:"), 'break_pt');
+percent_row(_("Provision")." 2:", 'provision2');
 end_table(1);
 
 submit_add_or_update_center(!isset($selected_id));