Sealing against XSS atacks: purchasing,sales,install,admin,taxes
[fa-stable.git] / purchasing / includes / db / invoice_items_db.inc
1 <?php
2
3 //-------------------------------------------------------------------------------------------------------------
4
5 function add_supp_invoice_item($supp_trans_type, $supp_trans_no, $stock_id, $description,
6         $gl_code, $unit_price, $unit_tax, $quantity, $grn_item_id, $po_detail_item_id, $memo_,
7         $err_msg="")
8 {
9         $sql = "INSERT INTO ".TB_PREF."supp_invoice_items (supp_trans_type, supp_trans_no, stock_id, description, gl_code, unit_price, unit_tax, quantity,
10                 grn_item_id, po_detail_item_id, memo_) ";
11         $sql .= "VALUES ($supp_trans_type, $supp_trans_no, ".db_escape($stock_id).
12         ", ".db_escape($description).", ".db_escape($gl_code).", $unit_price, $unit_tax, $quantity,
13                 $grn_item_id, $po_detail_item_id, ".db_escape($memo_).")";
14
15         if ($err_msg == "")
16                 $err_msg = "Cannot insert a supplier transaction detail record";
17
18         db_query($sql, $err_msg);
19
20         return db_insert_id();
21 }
22
23 //-------------------------------------------------------------------------------------------------------------
24
25 function add_supp_invoice_gl_item($supp_trans_type, $supp_trans_no, $gl_code, $amount, $memo_, $err_msg="")
26 {
27         return add_supp_invoice_item($supp_trans_type, $supp_trans_no,  "", "", $gl_code, $amount,
28                 0, 0, /*$grn_item_id*/0, /*$po_detail_item_id*/0, $memo_, $err_msg);
29 }
30
31
32 //----------------------------------------------------------------------------------------
33
34 function get_supp_invoice_items($supp_trans_type, $supp_trans_no)
35 {
36         $sql = "SELECT *, unit_price AS FullUnitPrice FROM ".TB_PREF."supp_invoice_items
37                 WHERE supp_trans_type = $supp_trans_type
38                 AND supp_trans_no = $supp_trans_no ORDER BY id";
39         return db_query($sql, "Cannot retreive supplier transaction detail records");
40 }
41
42 //----------------------------------------------------------------------------------------
43
44 function void_supp_invoice_items($type, $type_no)
45 {
46         $sql = "UPDATE ".TB_PREF."supp_invoice_items SET quantity=0, unit_price=0
47                 WHERE supp_trans_type = $type AND supp_trans_no=$type_no";
48         db_query($sql, "could not void supptrans details");
49 }
50
51 //----------------------------------------------------------------------------------------
52
53 function add_supp_invoice_tax_item($supp_trans_type, $supp_trans_no, $tax_type_id,
54         $rate, $included_in_price, $amount)
55 {
56         $sql = "INSERT INTO ".TB_PREF."supp_invoice_tax_items (supp_trans_type, supp_trans_no, tax_type_id, rate, included_in_price, amount)
57                 VALUES ($supp_trans_type, $supp_trans_no, $tax_type_id, $rate, $included_in_price, $amount)";
58
59         db_query($sql, "The supplier transaction tax detail could not be added");
60 }
61
62 //----------------------------------------------------------------------------------------
63
64 function get_supp_invoice_tax_items($supp_trans_type, $supp_trans_no)
65 {
66         $sql = "SELECT ".TB_PREF."supp_invoice_tax_items.*, ".TB_PREF."tax_types.name AS tax_type_name
67                 FROM ".TB_PREF."supp_invoice_tax_items,".TB_PREF."tax_types
68                 WHERE supp_trans_type = $supp_trans_type
69                 AND supp_trans_no = $supp_trans_no
70                 AND ".TB_PREF."tax_types.id = ".TB_PREF."supp_invoice_tax_items.tax_type_id";
71
72         return db_query($sql, "The supplier transaction tax details could not be queried");
73 }
74
75 //----------------------------------------------------------------------------------------
76
77 function void_supp_invoice_tax_items($type, $type_no)
78 {
79         $sql = "UPDATE ".TB_PREF."supp_invoice_tax_items SET amount=0
80                 WHERE supp_trans_type = $type
81                 AND supp_trans_no=$type_no";
82
83         db_query($sql, "The supplier transaction tax details could not be voided");
84 }
85
86 ?>