1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
<? require("inc/configure.php"); require("inc/global.php"); require("inc/checklogin.php"); if ($logged_in == 0) { //echo 'Not logged in. <a href="login.php">Login</a>'; header('Window-target: _parent'); header('Location: login.php'); exit(); } if (checkObject(16) <> 1){ die("Unauthorized Access"); exit(); } ?> <? $invoiceno = $_POST['invoiceno']; $lineno = $_POST['lineno']; $prodid = $_POST['prodid']; $prodname = htmlspecialchars($_POST['prodname'], ENT_QUOTES); $qty = isnull($_POST['qty'],0); $uomid = isnull($_POST['uomid'],0); $uom = $_POST['uom']; $price = isnull($_POST['price'],0); $discount = isnull($_POST['discount'],0); $amount = $qty * $price - $discount; $cost = isnull($_POST['cost'],0); $description = htmlspecialchars($_POST['description'], ENT_QUOTES); $creationdate = date("YmdGis"); $typeid = $_POST['typeid']; $prodno = $_POST['prodno1'];
if ($lineno == "") { //**add new $sql = "select max(lineno) as maxlineno from OM_INVOICE_DTL where invoiceno = $invoiceno"; $result = mysql_query($sql); $lineno = 1; if ($row = mysql_fetch_array($result,MYSQL_ASSOC)) { if (strlen($row{'maxlineno'}) == 0) { $lineno = 1; } else { $lineno = $row{'maxlineno'} + 1; } } else { $lineno = 1; }
$sql = " insert into OM_INVOICE_DTL (invoiceno, lineno, prodid, prodname, description, uomid, uom, qty, price, cost, discount, amount, prodno) values ($invoiceno, $lineno, $prodid, '$prodname', '$description', $uomid, '$uom', $qty, $price, $cost, $discount, $amount, '$prodno') "; //echo $sql; $result = mysql_query($sql);
if (!$result) { die('Invalid query: ' . mysql_error()); }
$sql = " insert into INV_STOCK_TRANSACTION (prodid, qty, uomid, stocktrantypeid, sign, docno, lineno, creationdate, creationby) select $prodid, $qty, $uomid, 2, -1, '$invoiceno', $lineno, '$creationdate', '$creationby' from INV_PRODUCT where prodid = $prodid and typeid = 1 "; $result = mysql_query($sql);
if (!$result) { die('Invalid query: ' . mysql_error()); } $msg = "Insert successful!"; } else { //**update $sql = " update OM_INVOICE_DTL set prodid = $prodid , prodname = '$prodname' , description = '$description' , uomid = $uomid , uom = '$uom' , qty = $qty , price = $price , cost = $cost , discount = $discount , prodno = '$prodno' , amount = $amount where invoiceno = $invoiceno and lineno = $lineno "; echo $sql; $result = mysql_query($sql);
if (!$result) { die('Invalid query: ' . mysql_error()); }
$sql = "delete from INV_STOCK_TRANSACTION where docno = '$invoiceno' and lineno = $lineno"; $result = mysql_query($sql); if (!$result) { die('Invalid query: ' . mysql_error()); } $sql = " insert into INV_STOCK_TRANSACTION (prodid, qty, uomid, stocktrantypeid, sign, docno, lineno, creationdate, creationby) select $prodid, $qty, $uomid, 2, -1, '$invoiceno', $lineno, '$creationdate', '$creationby' from INV_PRODUCT where prodid = $prodid and typeid = 1 "; $result = mysql_query($sql);
if (!$result) { die('Invalid query: ' . mysql_error()); } $msg = "Updated successful!"; } header("Location: invoicedetail.php?invoiceno=$invoiceno&msg=$msg"); ?>
|