1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

<?php 
$formid = "Order";
require_once "inc/configure.php";

$refid                 = (int) filter_var($_REQUEST['refid'], FILTER_SANITIZE_STRING);

if( $_REQUEST['action']=="ord_cancel" && !empty($refid) ){
//vdump($_REQUEST); exit;    
    $createby            = filter_var($_SESSION['user'], FILTER_SANITIZE_STRING);
    $lastupby            = filter_var($_SESSION['user'], FILTER_SANITIZE_STRING);

    $sql_param = array(    ':status' => 'CANCEL',
                            ':lastupby' => $lastupby,
                            ':refid' => $refid);
    
    $sql = "UPDATE ord_main SET 
                status = :status, 
                lastupby = :lastupby, 
                lastupdate = GETDATE()
            WHERE refid = :refid";
                
    $sth = $dbh->prepare($sql);
    $q = $sth->execute( $sql_param );
/*echo $sth->getSQL( $sql_param ) . HTML_EOL;    */    
    pdo_showerror($sth, $q);
                            

    header("Location: ord_dtl_modifyform.php?refid=$refid&msg=Saved.");
    print "Saved.";
    exit;
    
    
}
print "Invalid Request";


?>