Activated strict SQL mode, minor SQL injection fix, fixed _vl() debug helper.
[fa-stable.git] / inventory / includes / db / items_db.inc
1 <?php
2 /**********************************************************************
3     Copyright (C) FrontAccounting, LLC.
4         Released under the terms of the GNU General Public License, GPL, 
5         as published by the Free Software Foundation, either version 3 
6         of the License, or (at your option) any later version.
7     This program is distributed in the hope that it will be useful,
8     but WITHOUT ANY WARRANTY; without even the implied warranty of
9     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
10     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
11 ***********************************************************************/
12 function update_item($stock_id, $description, $long_description, $category_id, 
13         $tax_type_id, $units='', $mb_flag='', $sales_account, $inventory_account, 
14         $cogs_account,  $adjustment_account, $wip_account, $dimension_id, 
15         $dimension2_id, $no_sale, $editable, $no_purchase,
16         $depreciation_method = 'D', $depreciation_rate=100, $depreciation_factor=1,
17         $depreciation_start=null, $fa_class_id=null)
18 {
19         $sql = "UPDATE ".TB_PREF."stock_master SET long_description=".db_escape($long_description).",
20                 description=".db_escape($description).",
21                 category_id=".db_escape($category_id).",
22                 sales_account=".db_escape($sales_account).",
23                 inventory_account=".db_escape($inventory_account).",
24                 cogs_account=".db_escape($cogs_account).",
25                 adjustment_account=".db_escape($adjustment_account).",
26                 wip_account=".db_escape($wip_account).",
27                 dimension_id=".db_escape($dimension_id).",
28                 dimension2_id=".db_escape($dimension2_id).",
29                 tax_type_id=".db_escape($tax_type_id).",
30                 no_sale=".db_escape($no_sale).",
31                 no_purchase=".db_escape($no_purchase).",
32                 editable=".db_escape($editable).",
33                 depreciation_method=".db_escape($depreciation_method).",
34                 depreciation_rate=".db_escape($depreciation_rate).",
35                 depreciation_factor=".db_escape($depreciation_factor).",
36                 fa_class_id=".db_escape($fa_class_id);
37
38         if ($units != '')
39                 $sql .= ", units=".db_escape($units);
40
41         if ($mb_flag != '')
42                 $sql .= ", mb_flag=".db_escape($mb_flag);
43
44         if (isset($depreciation_start)) {
45                 $sql .= ", depreciation_start='".date2sql($depreciation_start)."'"
46                         .", depreciation_date='".date2sql($depreciation_start)."'";
47         }
48
49         $sql .= " WHERE stock_id=".db_escape($stock_id);
50
51         db_query($sql, "The item could not be updated");
52
53         update_item_code(-1, $stock_id, $stock_id, $description, $category_id, 1, 0);
54 }
55
56 function add_item($stock_id, $description, $long_description, $category_id, 
57         $tax_type_id, $units, $mb_flag, $sales_account, $inventory_account, 
58         $cogs_account, $adjustment_account,     $wip_account, $dimension_id, 
59         $dimension2_id, $no_sale, $editable, $no_purchase,
60         $depreciation_method='D', $depreciation_rate=100,  $depreciation_factor=1, $depreciation_start=null,
61         $fa_class_id=null)
62 {
63         $sql = "INSERT INTO ".TB_PREF."stock_master (stock_id, description, long_description, category_id,
64                 tax_type_id, units, mb_flag, sales_account, inventory_account, cogs_account,
65                 adjustment_account, wip_account, dimension_id, dimension2_id, no_sale, no_purchase, editable,
66                 depreciation_method, depreciation_rate, depreciation_factor"
67                 .(isset($depreciation_start) ? ", depreciation_start, depreciation_date, fa_class_id" : "")
68                 .") VALUES (".db_escape($stock_id).", ".db_escape($description).", ".db_escape($long_description).",
69                 ".db_escape($category_id).", ".db_escape($tax_type_id).", "
70                 .db_escape($units).", ".db_escape($mb_flag).",
71                 ".db_escape($sales_account).", ".db_escape($inventory_account)
72                 .", ".db_escape($cogs_account).",".db_escape($adjustment_account)
73                 .", ".db_escape($wip_account).", "
74                 .db_escape($dimension_id).", ".db_escape($dimension2_id).","
75                 .db_escape($no_sale).","
76                 .db_escape($no_purchase).","
77                 .db_escape($editable).","
78                 .db_escape($depreciation_method).",".db_escape($depreciation_rate).",".db_escape($depreciation_factor)
79                 .(isset($depreciation_start) ? ",'".date2sql($depreciation_start)."','".date2sql($depreciation_start)."',".db_escape($fa_class_id) : "")
80                 .")";
81
82         db_query($sql, "The item could not be added");
83
84         $sql = "INSERT INTO ".TB_PREF."loc_stock (loc_code, stock_id)
85                 SELECT loc_code, ".db_escape($stock_id)
86                 ." FROM ".TB_PREF."locations";
87
88         db_query($sql, "The item locstock could not be added");
89
90         add_item_code($stock_id, $stock_id, $description, $category_id, 1, 0);
91 }
92
93 function delete_item($stock_id)
94 {
95         $sql="DELETE FROM ".TB_PREF."stock_master WHERE stock_id=".db_escape($stock_id);
96         db_query($sql, "could not delete stock item");
97
98         /*and cascade deletes in loc_stock */
99         $sql ="DELETE FROM ".TB_PREF."loc_stock WHERE stock_id=".db_escape($stock_id);
100         db_query($sql, "could not delete stock item loc stock");
101
102         /*and cascade deletes in purch_data */
103         $sql ="DELETE FROM ".TB_PREF."purch_data WHERE stock_id=".db_escape($stock_id);
104         db_query($sql, "could not delete stock item purch data");
105
106         /*and cascade deletes in prices */
107         $sql ="DELETE FROM ".TB_PREF."prices WHERE stock_id=".db_escape($stock_id);
108         db_query($sql, "could not delete stock item prices");
109
110         /*and cascade delete the bill of material if any */
111         $sql = "DELETE FROM ".TB_PREF."bom WHERE parent=".db_escape($stock_id);
112         db_query($sql, "could not delete stock item bom");
113
114         delete_item_kit($stock_id);
115 }
116
117 function get_item($stock_id)
118 {
119         $sql = "SELECT item.*, taxtype.name AS tax_type_name
120                 FROM ".TB_PREF."stock_master item,"
121                         .TB_PREF."item_tax_types taxtype
122                 WHERE taxtype.id=item.tax_type_id
123                 AND stock_id=".db_escape($stock_id);
124         $result = db_query($sql,"an item could not be retreived");
125
126         return db_fetch_assoc($result);
127 }
128
129 function get_items($fixed_asset = 0)
130 {
131         $sql = "SELECT * FROM ".TB_PREF."stock_master WHERE fixed_asset=".db_escape($fixed_asset);
132         return db_query($sql,"items could not be retreived");
133 }
134
135 function item_in_foreign_codes($stock_id)
136 {
137         $sqls=  array(
138         "SELECT COUNT(*) FROM "
139                 .TB_PREF."stock_moves WHERE stock_id=".db_escape($stock_id) =>
140          _('Cannot delete this item because there are stock movements that refer to this item.'),
141         "SELECT COUNT(*) FROM "
142                 .TB_PREF."bom WHERE component=".db_escape($stock_id)=>
143          _('Cannot delete this item record because there are bills of material that require this part as a component.'),
144         "SELECT COUNT(*) FROM "
145                 .TB_PREF."sales_order_details WHERE stk_code=".db_escape($stock_id) =>
146          _('Cannot delete this item because there are existing sales order items for it.'),
147         "SELECT COUNT(*) FROM "
148                 .TB_PREF."purch_order_details WHERE item_code=".db_escape($stock_id)=>
149          _('Cannot delete this item because there are existing purchase order items for it.')
150         );
151
152         $msg = '';
153
154         foreach($sqls as $sql=>$err) {
155                 $result = db_query($sql, "could not query stock usage");
156                 $myrow = db_fetch_row($result);
157                 if ($myrow[0] > 0) 
158                 {
159                         $msg = $err; break;
160                 }
161         }
162         if ($msg == '') {
163
164                 $kits = get_where_used($stock_id);
165                 $num_kits = db_num_rows($kits);
166                 if ($num_kits) {
167                         $msg = _("This item cannot be deleted because some code aliases 
168                                 or foreign codes was entered for it, or there are kits defined 
169                                 using this item as component")
170                                 .':<br>';
171
172                         while($num_kits--) {
173                                 $kit = db_fetch($kits);
174                                 $msg .= "'".$kit[0]."'";
175                                 if ($num_kits) $msg .= ',';
176                         }
177
178                 }
179         }
180         return $msg;
181 }
182
183 function get_items_search($description, $type)
184 {
185         global $SysPrefs;
186
187         $sql = "SELECT COUNT(i.item_code) AS kit, i.item_code, i.description, c.description category
188                 FROM ".TB_PREF."stock_master s, ".TB_PREF."item_codes i
189                         LEFT JOIN ".TB_PREF."stock_category c ON i.category_id=c.category_id
190                 WHERE i.stock_id=s.stock_id
191                         AND !i.inactive AND !s.inactive
192                         AND (  i.item_code LIKE " . db_escape("%" . $description. "%") . " OR 
193                                 i.description LIKE " . db_escape("%" . get_post("description"). "%") . " OR 
194                                 c.description LIKE " . db_escape("%" . get_post("description"). "%") . ") ";
195
196         switch ($type) {
197                 case "sales":
198                         $sql .= " AND !s.no_sale AND mb_flag <> 'F'";
199                         break;
200                 case "manufactured":
201                         $sql .= " AND mb_flag = 'M'";
202                         break;
203         case "purchasable":
204                 $sql .= " AND NOT no_purchase AND mb_flag <> 'F' AND i.item_code=i.stock_id";
205                 break;
206                 case "costable":
207                         $sql .= " AND mb_flag <> 'D' AND mb_flag <> 'F' AND  i.item_code=i.stock_id";
208                         break;
209                 case "component":
210                         $parent = $_GET['parent'];
211                         $sql .= " AND  i.item_code=i.stock_id AND i.stock_id <> '$parent' AND mb_flag <> 'F' ";
212                         break;
213                 case "kits":
214                         $sql .= " AND !i.is_foreign AND i.item_code!=i.stock_id AND mb_flag <> 'F'";
215                         break;
216                 case "all":
217                         $sql .= " AND mb_flag <> 'F' AND i.item_code=i.stock_id";
218                         break;
219         }
220
221         if (isset($SysPrefs->max_rows_in_search))
222                 $limit = $SysPrefs->max_rows_in_search;
223         else
224                 $limit = 10;
225
226         $sql .= " GROUP BY i.item_code ORDER BY i.description LIMIT 0,".(int)($limit);
227
228         return db_query($sql, "Failed in retreiving item list.");
229 }
230