X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=admin%2Fshipping_companies.php;h=c215f8cd31941cf55e88f5c95aaabc005c514e72;hb=179e8cf33e77512ca94cf8389ea36a253feebba7;hp=7d4e530c7cb0a424742928a86d821c1a15f11a42;hpb=da8311619dd73feae101d246a1957b972e00cbd2;p=fa-stable.git

diff --git a/admin/shipping_companies.php b/admin/shipping_companies.php
index 7d4e530c..c215f8cd 100644
--- a/admin/shipping_companies.php
+++ b/admin/shipping_companies.php
@@ -1,22 +1,21 @@
 <?php
-
-
-$page_security = 14;
+/**********************************************************************
+    Copyright (C) FrontAccounting, LLC.
+	Released under the terms of the GNU General Public License, GPL, 
+	as published by the Free Software Foundation, either version 3 
+	of the License, or (at your option) any later version.
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
+***********************************************************************/
+$page_security = 'SA_SHIPPING';
 $path_to_root="..";
 include($path_to_root . "/includes/session.inc");
 page(_("Shipping Company"));
 include($path_to_root . "/includes/ui.inc");
 
-
-if (isset($_GET['selected_id']))
-{
-	$selected_id = $_GET['selected_id'];
-} 
-else if (isset($_POST['selected_id']))
-{
-	$selected_id = $_POST['selected_id'];
-}
-
+simple_page_mode(true);
 //----------------------------------------------------------------------------------------------
 
 function can_process() 
@@ -24,44 +23,48 @@ function can_process()
 	if (strlen($_POST['shipper_name']) == 0) 
 	{
 		display_error(_("The shipping company name cannot be empty."));
+		set_focus('shipper_name');
 		return false;
 	}
 	return true;
 }
 
 //----------------------------------------------------------------------------------------------
-
-if (isset($_POST['ADD_ITEM']) && can_process()) 
+if ($Mode=='ADD_ITEM' && can_process()) 
 {
 
-	$sql = "INSERT INTO ".TB_PREF."shippers (shipper_name, contact, phone, address)
-		VALUES ('" . $_POST['shipper_name'] . "', '" .
-		$_POST['contact'] . "', '" .
-		$_POST['phone'] . "', '" .
-		$_POST['address'] . "')";
+	$sql = "INSERT INTO ".TB_PREF."shippers (shipper_name, contact, phone, phone2, address)
+		VALUES (" . db_escape($_POST['shipper_name']) . ", " .
+		db_escape($_POST['contact']). ", " .
+		db_escape($_POST['phone']). ", " .
+		db_escape($_POST['phone2']). ", " .
+		db_escape($_POST['address']) . ")";
 
 	db_query($sql,"The Shipping Company could not be added");
-	meta_forward($_SERVER['PHP_SELF']);
+	display_notification(_('New shipping company has been added'));
+	$Mode = 'RESET';
 }
 
 //----------------------------------------------------------------------------------------------
 
-if (isset($_POST['UPDATE_ITEM']) && can_process()) 
+if ($Mode=='UPDATE_ITEM' && can_process()) 
 {
 
-	$sql = "UPDATE ".TB_PREF."shippers SET shipper_name='" . $_POST['shipper_name'] . "' ,
-		contact ='" . $_POST['contact'] . "' ,
-		phone ='" . $_POST['phone'] . "' ,
-		address ='" . $_POST['address'] . "'
+	$sql = "UPDATE ".TB_PREF."shippers SET shipper_name=" . db_escape($_POST['shipper_name']). " ,
+		contact =" . db_escape($_POST['contact']). " ,
+		phone =" . db_escape($_POST['phone']). " ,
+		phone2 =" . db_escape($_POST['phone2']). " ,
+		address =" . db_escape($_POST['address']). "
 		WHERE shipper_id = $selected_id";
 
 	db_query($sql,"The shipping company could not be updated");
-	meta_forward($_SERVER['PHP_SELF']);
+	display_notification(_('Selected shipping company has been updated'));
+	$Mode = 'RESET';
 }
 
 //----------------------------------------------------------------------------------------------
 
-if (isset($_GET['delete']))
+if ($Mode == 'Delete')
 {
 // PREVENT DELETES IF DEPENDENT RECORDS IN 'sales_orders'
 
@@ -89,19 +92,30 @@ if (isset($_GET['delete']))
 		{
 			$sql="DELETE FROM ".TB_PREF."shippers WHERE shipper_id=$selected_id";
 			db_query($sql,"could not delete shipper");
-
-			meta_forward($_SERVER['PHP_SELF']);
+			display_notification(_('Selected shipping company has been deleted'));
 		}
 	}
+	$Mode = 'RESET';
 }
 
+if ($Mode == 'RESET')
+{
+	$selected_id = -1;
+	$sav = get_post('show_inactive');
+	unset($_POST);
+	$_POST['show_inactive'] = $sav;
+}
 //----------------------------------------------------------------------------------------------
 
-$sql = "SELECT * FROM ".TB_PREF."shippers ORDER BY shipper_id";
+$sql = "SELECT * FROM ".TB_PREF."shippers";
+if (!check_value('show_inactive')) $sql .= " WHERE !inactive";
+$sql .= " ORDER BY shipper_id";
 $result = db_query($sql,"could not get shippers");
 
+start_form();
 start_table($table_style);
-$th = array(_("Name"), _("Contact Person"), _("Phone Number"), _("Address"), "", "");
+$th = array(_("Name"), _("Contact Person"), _("Phone Number"), _("Secondary Phone"), _("Address"), "", "");
+inactive_control_column($th);
 table_header($th);
 
 $k = 0; //row colour counter
@@ -112,36 +126,37 @@ while ($myrow = db_fetch($result))
 	label_cell($myrow["shipper_name"]);
 	label_cell($myrow["contact"]);
 	label_cell($myrow["phone"]);
+	label_cell($myrow["phone2"]);
 	label_cell($myrow["address"]);
-    edit_link_cell("selected_id=".$myrow[0]);
-    delete_link_cell("selected_id=".$myrow[0]."&delete=1");
+	inactive_control_cell($myrow["shipper_id"], $myrow["inactive"], 'shippers', 'shipper_id');
+ 	edit_button_cell("Edit".$myrow["shipper_id"], _("Edit"));
+ 	delete_button_cell("Delete".$myrow["shipper_id"], _("Delete"));
 	end_row();
 }
 
-end_table();
+inactive_control_row($th);
+end_table(1);
 
 //----------------------------------------------------------------------------------------------
 
-hyperlink_no_params($_SERVER['PHP_SELF'], _("New Shipping Company"));
-
-start_form();
-
 start_table($table_style2);
 
-if (isset($selected_id)) 
+if ($selected_id != -1) 
 {
-	//editing an existing Shipper
-
-	$sql = "SELECT * FROM ".TB_PREF."shippers WHERE shipper_id=$selected_id";
+ 	if ($Mode == 'Edit') {
+		//editing an existing Shipper
 
-	$result = db_query($sql, "could not get shipper");
-	$myrow = db_fetch($result);
+		$sql = "SELECT * FROM ".TB_PREF."shippers WHERE shipper_id=$selected_id";
 
-	$_POST['shipper_name']	= $myrow["shipper_name"];
-	$_POST['contact']	= $myrow["contact"];
-	$_POST['phone']	= $myrow["phone"];
-	$_POST['address'] = $myrow["address"];
+		$result = db_query($sql, "could not get shipper");
+		$myrow = db_fetch($result);
 
+		$_POST['shipper_name']	= $myrow["shipper_name"];
+		$_POST['contact']	= $myrow["contact"];
+		$_POST['phone']	= $myrow["phone"];
+		$_POST['phone2']	= $myrow["phone2"];
+		$_POST['address'] = $myrow["address"];
+	}
 	hidden('selected_id', $selected_id);
 }
 
@@ -149,13 +164,15 @@ text_row_ex(_("Name:"), 'shipper_name', 40);
 
 text_row_ex(_("Contact Person:"), 'contact', 30);
 
-text_row_ex(_("Phone Number:"), 'phone', 20);
+text_row_ex(_("Phone Number:"), 'phone', 32, 30);
+
+text_row_ex(_("Secondary Phone Number:"), 'phone2', 32, 30);
 
 text_row_ex(_("Address:"), 'address', 50);
 
 end_table(1);
 
-submit_add_or_update_center(!isset($selected_id));
+submit_add_or_update_center($selected_id == -1, '', 'both');
 
 end_form();
 end_page();