X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;ds=inline;f=admin%2Fshipping_companies.php;h=19f034b7408fc343c300539fb0a8d1b0052786d9;hb=953b3605810699962454b624e19bd0779b17e7f7;hp=7d4e530c7cb0a424742928a86d821c1a15f11a42;hpb=da8311619dd73feae101d246a1957b972e00cbd2;p=fa-stable.git diff --git a/admin/shipping_companies.php b/admin/shipping_companies.php index 7d4e530c..19f034b7 100644 --- a/admin/shipping_companies.php +++ b/admin/shipping_companies.php @@ -1,22 +1,21 @@ . +***********************************************************************/ +$page_security = 'SA_SHIPPING'; $path_to_root=".."; include($path_to_root . "/includes/session.inc"); -page(_("Shipping Company")); +page(_($help_context = "Shipping Company")); include($path_to_root . "/includes/ui.inc"); - -if (isset($_GET['selected_id'])) -{ - $selected_id = $_GET['selected_id']; -} -else if (isset($_POST['selected_id'])) -{ - $selected_id = $_POST['selected_id']; -} - +simple_page_mode(true); //---------------------------------------------------------------------------------------------- function can_process() @@ -24,48 +23,52 @@ function can_process() if (strlen($_POST['shipper_name']) == 0) { display_error(_("The shipping company name cannot be empty.")); + set_focus('shipper_name'); return false; } return true; } //---------------------------------------------------------------------------------------------- - -if (isset($_POST['ADD_ITEM']) && can_process()) +if ($Mode=='ADD_ITEM' && can_process()) { - $sql = "INSERT INTO ".TB_PREF."shippers (shipper_name, contact, phone, address) - VALUES ('" . $_POST['shipper_name'] . "', '" . - $_POST['contact'] . "', '" . - $_POST['phone'] . "', '" . - $_POST['address'] . "')"; + $sql = "INSERT INTO ".TB_PREF."shippers (shipper_name, contact, phone, phone2, address) + VALUES (" . db_escape($_POST['shipper_name']) . ", " . + db_escape($_POST['contact']). ", " . + db_escape($_POST['phone']). ", " . + db_escape($_POST['phone2']). ", " . + db_escape($_POST['address']) . ")"; db_query($sql,"The Shipping Company could not be added"); - meta_forward($_SERVER['PHP_SELF']); + display_notification(_('New shipping company has been added')); + $Mode = 'RESET'; } //---------------------------------------------------------------------------------------------- -if (isset($_POST['UPDATE_ITEM']) && can_process()) +if ($Mode=='UPDATE_ITEM' && can_process()) { - $sql = "UPDATE ".TB_PREF."shippers SET shipper_name='" . $_POST['shipper_name'] . "' , - contact ='" . $_POST['contact'] . "' , - phone ='" . $_POST['phone'] . "' , - address ='" . $_POST['address'] . "' - WHERE shipper_id = $selected_id"; + $sql = "UPDATE ".TB_PREF."shippers SET shipper_name=" . db_escape($_POST['shipper_name']). " , + contact =" . db_escape($_POST['contact']). " , + phone =" . db_escape($_POST['phone']). " , + phone2 =" . db_escape($_POST['phone2']). " , + address =" . db_escape($_POST['address']). " + WHERE shipper_id = ".db_escape($selected_id); db_query($sql,"The shipping company could not be updated"); - meta_forward($_SERVER['PHP_SELF']); + display_notification(_('Selected shipping company has been updated')); + $Mode = 'RESET'; } //---------------------------------------------------------------------------------------------- -if (isset($_GET['delete'])) +if ($Mode == 'Delete') { // PREVENT DELETES IF DEPENDENT RECORDS IN 'sales_orders' - $sql= "SELECT COUNT(*) FROM ".TB_PREF."sales_orders WHERE ship_via='$selected_id'"; + $sql= "SELECT COUNT(*) FROM ".TB_PREF."sales_orders WHERE ship_via=".db_escape($selected_id); $result = db_query($sql,"check failed"); $myrow = db_fetch_row($result); if ($myrow[0] > 0) @@ -77,7 +80,7 @@ if (isset($_GET['delete'])) { // PREVENT DELETES IF DEPENDENT RECORDS IN 'debtor_trans' - $sql= "SELECT COUNT(*) FROM ".TB_PREF."debtor_trans WHERE ship_via='$selected_id'"; + $sql= "SELECT COUNT(*) FROM ".TB_PREF."debtor_trans WHERE ship_via=".db_escape($selected_id); $result = db_query($sql,"check failed"); $myrow = db_fetch_row($result); if ($myrow[0] > 0) @@ -87,21 +90,32 @@ if (isset($_GET['delete'])) } else { - $sql="DELETE FROM ".TB_PREF."shippers WHERE shipper_id=$selected_id"; + $sql="DELETE FROM ".TB_PREF."shippers WHERE shipper_id=".db_escape($selected_id); db_query($sql,"could not delete shipper"); - - meta_forward($_SERVER['PHP_SELF']); + display_notification(_('Selected shipping company has been deleted')); } } + $Mode = 'RESET'; } +if ($Mode == 'RESET') +{ + $selected_id = -1; + $sav = get_post('show_inactive'); + unset($_POST); + $_POST['show_inactive'] = $sav; +} //---------------------------------------------------------------------------------------------- -$sql = "SELECT * FROM ".TB_PREF."shippers ORDER BY shipper_id"; +$sql = "SELECT * FROM ".TB_PREF."shippers"; +if (!check_value('show_inactive')) $sql .= " WHERE !inactive"; +$sql .= " ORDER BY shipper_id"; $result = db_query($sql,"could not get shippers"); +start_form(); start_table($table_style); -$th = array(_("Name"), _("Contact Person"), _("Phone Number"), _("Address"), "", ""); +$th = array(_("Name"), _("Contact Person"), _("Phone Number"), _("Secondary Phone"), _("Address"), "", ""); +inactive_control_column($th); table_header($th); $k = 0; //row colour counter @@ -112,36 +126,37 @@ while ($myrow = db_fetch($result)) label_cell($myrow["shipper_name"]); label_cell($myrow["contact"]); label_cell($myrow["phone"]); + label_cell($myrow["phone2"]); label_cell($myrow["address"]); - edit_link_cell("selected_id=".$myrow[0]); - delete_link_cell("selected_id=".$myrow[0]."&delete=1"); + inactive_control_cell($myrow["shipper_id"], $myrow["inactive"], 'shippers', 'shipper_id'); + edit_button_cell("Edit".$myrow["shipper_id"], _("Edit")); + delete_button_cell("Delete".$myrow["shipper_id"], _("Delete")); end_row(); } -end_table(); +inactive_control_row($th); +end_table(1); //---------------------------------------------------------------------------------------------- -hyperlink_no_params($_SERVER['PHP_SELF'], _("New Shipping Company")); - -start_form(); - start_table($table_style2); -if (isset($selected_id)) +if ($selected_id != -1) { - //editing an existing Shipper - - $sql = "SELECT * FROM ".TB_PREF."shippers WHERE shipper_id=$selected_id"; + if ($Mode == 'Edit') { + //editing an existing Shipper - $result = db_query($sql, "could not get shipper"); - $myrow = db_fetch($result); + $sql = "SELECT * FROM ".TB_PREF."shippers WHERE shipper_id=".db_escape($selected_id); - $_POST['shipper_name'] = $myrow["shipper_name"]; - $_POST['contact'] = $myrow["contact"]; - $_POST['phone'] = $myrow["phone"]; - $_POST['address'] = $myrow["address"]; + $result = db_query($sql, "could not get shipper"); + $myrow = db_fetch($result); + $_POST['shipper_name'] = $myrow["shipper_name"]; + $_POST['contact'] = $myrow["contact"]; + $_POST['phone'] = $myrow["phone"]; + $_POST['phone2'] = $myrow["phone2"]; + $_POST['address'] = $myrow["address"]; + } hidden('selected_id', $selected_id); } @@ -149,13 +164,15 @@ text_row_ex(_("Name:"), 'shipper_name', 40); text_row_ex(_("Contact Person:"), 'contact', 30); -text_row_ex(_("Phone Number:"), 'phone', 20); +text_row_ex(_("Phone Number:"), 'phone', 32, 30); + +text_row_ex(_("Secondary Phone Number:"), 'phone2', 32, 30); text_row_ex(_("Address:"), 'address', 50); end_table(1); -submit_add_or_update_center(!isset($selected_id)); +submit_add_or_update_center($selected_id == -1, '', 'both'); end_form(); end_page();