Fixed picture display after upload in items.php.
[fa-stable.git] / inventory / manage / items.php
1 <?php
2 /**********************************************************************
3     Copyright (C) FrontAccounting, LLC.
4         Released under the terms of the GNU General Public License, GPL, 
5         as published by the Free Software Foundation, either version 3 
6         of the License, or (at your option) any later version.
7     This program is distributed in the hope that it will be useful,
8     but WITHOUT ANY WARRANTY; without even the implied warranty of
9     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
10     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
11 ***********************************************************************/
12 $page_security = 11;
13 $path_to_root="../..";
14 include($path_to_root . "/includes/session.inc");
15
16 page(_("Items"));
17
18 include_once($path_to_root . "/includes/date_functions.inc");
19 include_once($path_to_root . "/includes/ui.inc");
20 include_once($path_to_root . "/includes/data_checks.inc");
21
22 include_once($path_to_root . "/inventory/includes/inventory_db.inc");
23
24 $user_comp = user_company();
25 $new_item = get_post('stock_id')==''; 
26 //------------------------------------------------------------------------------------
27
28 if (isset($_GET['stock_id']))
29 {
30         $_POST['stock_id'] = $stock_id = strtoupper($_GET['stock_id']);
31 }
32 else if (isset($_POST['stock_id']))
33 {
34         $stock_id = strtoupper($_POST['stock_id']);
35 }
36
37 if (list_updated('stock_id')) {
38         $_POST['NewStockID'] = get_post('stock_id');
39     clear_data();
40         $Ajax->activate('details');
41         $Ajax->activate('controls');
42 }
43 $upload_file = "";
44 if (isset($_FILES['pic']) && $_FILES['pic']['name'] != '') 
45 {
46         $result = $_FILES['pic']['error'];
47         $upload_file = 'Yes'; //Assume all is well to start off with
48         $filename = $comp_path . "/$user_comp/images";
49         if (!file_exists($filename))
50         {
51                 mkdir($filename);
52         }       
53         $filename .= "/$stock_id.jpg";
54         
55          //But check for the worst 
56         if (strtoupper(substr(trim($_FILES['pic']['name']), strlen($_FILES['pic']['name']) - 3)) != 'JPG')
57         {
58                 display_warning(_('Only jpg files are supported - a file extension of .jpg is expected'));
59                 $upload_file ='No';
60         } 
61         elseif ( $_FILES['pic']['size'] > ($max_image_size * 1024)) 
62         { //File Size Check
63                 display_warning(_('The file size is over the maximum allowed. The maximum size allowed in KB is') . ' ' . $max_image_size);
64                 $upload_file ='No';
65         } 
66         elseif ( $_FILES['pic']['type'] == "text/plain" ) 
67         {  //File type Check
68                 display_warning( _('Only graphics files can be uploaded'));
69                 $upload_file ='No';
70         } 
71         elseif (file_exists($filename))
72         {
73                 $result = unlink($filename);
74                 if (!$result) 
75                 {
76                         display_error(_('The existing image could not be removed'));
77                         $upload_file ='No';
78                 }
79         }
80         
81         if ($upload_file == 'Yes')
82         {
83                 $result  =  move_uploaded_file($_FILES['pic']['tmp_name'], $filename);
84         }
85         $Ajax->activate('details');
86  /* EOF Add Image upload for New Item  - by Ori */
87 }
88
89
90 check_db_has_stock_categories(_("There are no item categories defined in the system. At least one item category is required to add a item."));
91
92 check_db_has_item_tax_types(_("There are no item tax types defined in the system. At least one item tax type is required to add a item."));
93
94 function clear_data()
95 {
96         unset($_POST['long_description']);
97         unset($_POST['description']);
98         unset($_POST['category_id']);
99         unset($_POST['tax_type_id']);
100         unset($_POST['units']);
101         unset($_POST['mb_flag']);
102         unset($_POST['NewStockID']);
103         unset($_POST['dimension_id']);
104         unset($_POST['dimension2_id']);
105 }
106
107 //------------------------------------------------------------------------------------
108
109 if (isset($_POST['addupdate'])) 
110 {
111
112         $input_error = 0;
113         if ($upload_file == 'No')
114                 $input_error = 1;
115         if (strlen($_POST['description']) == 0) 
116         {
117                 $input_error = 1;
118                 display_error( _('The item name must be entered.'));
119                 set_focus('description');
120         } 
121         elseif (strlen($_POST['NewStockID']) == 0) 
122         {
123                 $input_error = 1;
124                 display_error( _('The item code cannot be empty'));
125                 set_focus('NewStockID');
126         }
127         elseif (strstr($_POST['NewStockID'], " ") || strstr($_POST['NewStockID'],"'") || 
128                 strstr($_POST['NewStockID'], "+") || strstr($_POST['NewStockID'], "\"") || 
129                 strstr($_POST['NewStockID'], "&")) 
130         {
131                 $input_error = 1;
132                 display_error( _('The item code cannot contain any of the following characters -  & + OR a space OR quotes'));
133                 set_focus('NewStockID');
134
135         }
136         elseif ($new_item && db_num_rows(get_item_kit($_POST['NewStockID'])))
137         {
138                         $input_error = 1;
139                 display_error( _("This item code is already assigned to stock item or sale kit."));
140                         set_focus('NewStockID');
141         }
142         
143         if ($input_error != 1)
144         {
145
146                 if (!$new_item) 
147                 { /*so its an existing one */
148
149                         update_item($_POST['NewStockID'], $_POST['description'],
150                                 $_POST['long_description'], $_POST['category_id'], $_POST['tax_type_id'],
151                                 $_POST['sales_account'], $_POST['inventory_account'], $_POST['cogs_account'],
152                                 $_POST['adjustment_account'], $_POST['assembly_account'], 
153                                 $_POST['dimension_id'], $_POST['dimension2_id']);
154
155                         display_notification(_("Item has been updated."));
156                 } 
157                 else 
158                 { //it is a NEW part
159
160                         add_item($_POST['NewStockID'], $_POST['description'],
161                                 $_POST['long_description'], $_POST['category_id'], $_POST['tax_type_id'],
162                                 $_POST['units'], $_POST['mb_flag'], $_POST['sales_account'],
163                                 $_POST['inventory_account'], $_POST['cogs_account'],
164                                 $_POST['adjustment_account'], $_POST['assembly_account'], 
165                                 $_POST['dimension_id'], $_POST['dimension2_id']);
166
167                 display_notification(_("A new item has been added."));
168                 $_POST['stock_id'] = $_POST['NewStockID'];
169                 }
170                 set_focus('stock_id');
171                 $Ajax->activate('_page_body');
172         }
173 }
174
175 //------------------------------------------------------------------------------------
176
177 function can_delete($stock_id)
178 {
179         $sql= "SELECT COUNT(*) FROM ".TB_PREF."stock_moves WHERE stock_id='$stock_id'";
180         $result = db_query($sql, "could not query stock moves");
181         $myrow = db_fetch_row($result);
182         if ($myrow[0] > 0) 
183         {
184                 display_error(_('Cannot delete this item because there are stock movements that refer to this item.'));
185                 return false;
186         }
187
188         $sql= "SELECT COUNT(*) FROM ".TB_PREF."bom WHERE component='$stock_id'";
189         $result = db_query($sql, "could not query boms");
190         $myrow = db_fetch_row($result);
191         if ($myrow[0] > 0) 
192         {
193                 display_error(_('Cannot delete this item record because there are bills of material that require this part as a component.'));
194                 return false;
195         }
196
197         $sql= "SELECT COUNT(*) FROM ".TB_PREF."sales_order_details WHERE stk_code='$stock_id'";
198         $result = db_query($sql, "could not query sales orders");
199         $myrow = db_fetch_row($result);
200         if ($myrow[0] > 0) 
201         {
202                 display_error(_('Cannot delete this item record because there are existing sales orders for this part.'));
203                 return false;
204         }
205
206         $sql= "SELECT COUNT(*) FROM ".TB_PREF."purch_order_details WHERE item_code='$stock_id'";
207         $result = db_query($sql, "could not query purchase orders");
208         $myrow = db_fetch_row($result);
209         if ($myrow[0] > 0) 
210         {
211                 display_error(_('Cannot delete this item because there are existing purchase order items for it.'));
212                 return false;
213         }
214         $kits = get_where_used($stock_id);
215         $num_kits = db_num_rows($kits);
216         if ($num_kits) {
217                 $msg = _("This item cannot be deleted because some code aliases 
218                         or foreign codes was entered for it, or there are kits defined 
219                         using this item as component")
220                         .':<br>';
221
222                 while($num_kits--) {
223                         $kit = db_fetch($kits);
224                         $msg .= "'".$kit[0]."'";
225                         if ($num_kits) $msg .= ',';
226                 }
227                 display_error($msg);
228                 return false;
229         }
230         return true;
231 }
232
233 //------------------------------------------------------------------------------------
234
235 if (isset($_POST['delete']) && strlen($_POST['delete']) > 1) 
236 {
237
238         if (can_delete($_POST['NewStockID'])) {
239
240                 $stock_id = $_POST['NewStockID'];
241                 delete_item($stock_id);
242                 $filename = $comp_path . "/$user_comp/images/$stock_id.jpg";
243                 if (file_exists($filename))
244                         unlink($filename);
245                 display_notification(_("Selected item has been deleted."));
246                 $_POST['stock_id'] = '';
247                 clear_data();
248                 set_focus('stock_id');
249                 $new_item = true;
250                 $Ajax->activate('_page_body');
251         }
252 }
253 //-------------------------------------------------------------------------------------------- 
254
255 if (isset($_POST['select']))
256 {
257         context_return(array('stock_id' => $_POST['stock_id']));
258 }
259
260 //------------------------------------------------------------------------------------
261
262 start_form(true);
263
264 if (db_has_stock_items()) 
265 {
266         start_table("class='tablestyle_noborder'");
267         start_row();
268     stock_items_list_cells(_("Select an item:"), 'stock_id', null,
269           _('New item'), true);
270         $new_item = get_post('stock_id')==''; 
271         end_row();
272         end_table();
273 }
274
275 div_start('details');
276 start_outer_table($table_style2, 5);
277
278 table_section(1);
279
280 table_section_title(_("Item"));
281
282 //------------------------------------------------------------------------------------
283
284 if ($new_item) 
285 {
286
287 /*If the page was called without $_POST['NewStockID'] passed to page then assume a new item is to be entered show a form with a part Code field other wise the form showing the fields with the existing entries against the part will show for editing with only a hidden stock_id field. New is set to flag that the page may have called itself and still be entering a new part, in which case the page needs to know not to go looking up details for an existing part*/
288
289         text_row(_("Item Code:"), 'NewStockID', null, 21, 20);
290
291         $company_record = get_company_prefs();
292
293     if (!isset($_POST['inventory_account']) || $_POST['inventory_account'] == "")
294         $_POST['inventory_account'] = $company_record["default_inventory_act"];
295
296     if (!isset($_POST['cogs_account']) || $_POST['cogs_account'] == "")
297         $_POST['cogs_account'] = $company_record["default_cogs_act"];
298
299         if (!isset($_POST['sales_account']) || $_POST['sales_account'] == "")
300                 $_POST['sales_account'] = $company_record["default_inv_sales_act"];
301
302         if (!isset($_POST['adjustment_account']) || $_POST['adjustment_account'] == "")
303                 $_POST['adjustment_account'] = $company_record["default_adj_act"];
304
305         if (!isset($_POST['assembly_account']) || $_POST['assembly_account'] == "")
306                 $_POST['assembly_account'] = $company_record["default_assembly_act"];
307
308
309 else 
310 { // Must be modifying an existing item
311                 $_POST['NewStockID'] = $_POST['stock_id'];
312
313                 $myrow = get_item($_POST['NewStockID']);
314
315                 $_POST['long_description'] = $myrow["long_description"];
316                 $_POST['description'] = $myrow["description"];
317                 $_POST['category_id']  = $myrow["category_id"];
318                 $_POST['tax_type_id']  = $myrow["tax_type_id"];
319                 $_POST['units']  = $myrow["units"];
320                 $_POST['mb_flag']  = $myrow["mb_flag"];
321
322                 $_POST['sales_account'] =  $myrow['sales_account'];
323                 $_POST['inventory_account'] = $myrow['inventory_account'];
324                 $_POST['cogs_account'] = $myrow['cogs_account'];
325                 $_POST['adjustment_account']    = $myrow['adjustment_account'];
326                 $_POST['assembly_account']      = $myrow['assembly_account'];
327                 $_POST['dimension_id']  = $myrow['dimension_id'];
328                 $_POST['dimension2_id'] = $myrow['dimension2_id'];
329         
330                 label_row(_("Item Code:"),$_POST['NewStockID']);
331                 hidden('NewStockID', $_POST['NewStockID']);
332                 set_focus('description');
333 }
334
335 text_row(_("Name:"), 'description', null, 52, 50);
336
337 textarea_row(_('Description:'), 'long_description', null, 42, 3);
338
339 stock_categories_list_row(_("Category:"), 'category_id', null);
340
341 item_tax_types_list_row(_("Item Tax Type:"), 'tax_type_id', null);
342
343 stock_item_types_list_row(_("Item Type:"), 'mb_flag', null,
344         (!isset($_POST['NewStockID']) || $new_item));
345
346 stock_units_list_row(_('Units of Measure:'), 'units', null,
347         (!isset($_POST['NewStockID']) || $new_item));
348
349 $dim = get_company_pref('use_dimension');
350 if ($dim >= 1)
351 {
352         table_section_title(_("Dimensions"));
353
354         dimensions_list_row(_("Dimension")." 1", 'dimension_id', null, true, " ", false, 1);
355         if ($dim > 1)
356                 dimensions_list_row(_("Dimension")." 2", 'dimension2_id', null, true, " ", false, 2);
357 }
358 if ($dim < 1)
359         hidden('dimension_id', 0);
360 if ($dim < 2)
361         hidden('dimension2_id', 0);
362
363 table_section(2);
364
365 table_section_title(_("GL Accounts"));
366
367 gl_all_accounts_list_row(_("Sales Account:"), 'sales_account', $_POST['sales_account']);
368
369 gl_all_accounts_list_row(_("Inventory Account:"), 'inventory_account', $_POST['inventory_account']);
370
371 if (!is_service($_POST['mb_flag'])) 
372 {
373         gl_all_accounts_list_row(_("C.O.G.S. Account:"), 'cogs_account', $_POST['cogs_account']);
374         gl_all_accounts_list_row(_("Inventory Adjustments Account:"), 'adjustment_account', $_POST['adjustment_account']);
375 }
376 else 
377 {
378         hidden('cogs_account', $_POST['cogs_account']);
379         hidden('adjustment_account', $_POST['adjustment_account']);
380 }
381
382
383 if (is_manufactured($_POST['mb_flag']))
384         gl_all_accounts_list_row(_("Item Assembly Costs Account:"), 'assembly_account', $_POST['assembly_account']);
385 else
386         hidden('assembly_account', $_POST['assembly_account']);
387
388 table_section_title(_("Picture"));
389
390 // Add image upload for New Item  - by Joe
391 label_row(_("Image File (.jpg)") . ":", "<input type='file' id='pic' name='pic'>");
392 // Add Image upload for New Item  - by Joe
393 $stock_img_link = "";
394 if (isset($_POST['NewStockID']) && file_exists("$comp_path/$user_comp/images/".$_POST['NewStockID'].".jpg")) 
395 {
396  // 31/08/08 - rand() call is necessary here to avoid caching problems. Thanks to Peter D.
397         $stock_img_link .= "<img id='item_img' alt = '[".$_POST['NewStockID'].".jpg".
398                 "]' src='$comp_path/$user_comp/images/".$_POST['NewStockID'].".jpg?nocache=".rand()."'".
399                 " width='$pic_width' height='$pic_height' border='0'>";
400
401 else 
402 {
403         $stock_img_link .= _("No image");
404 }
405
406 label_row("&nbsp;", $stock_img_link);
407
408 end_outer_table(1);
409 div_end();
410 div_start('controls');
411 if (!isset($_POST['NewStockID']) || $new_item) 
412 {
413         submit_center('addupdate', _("Insert New Item"), true, '', true);
414
415 else 
416 {
417         submit_center_first('addupdate', _("Update Item"), '', true);
418         submit_return('select', _("Return"), _("Select this items and return to document entry."), true);
419         submit_center_last('delete', _("Delete This Item"), '', true);
420 }
421
422 div_end();
423 end_form();
424
425 //------------------------------------------------------------------------------------
426
427 end_page();
428 ?>