1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
<?
require("inc/configure.php");
require("inc/global.php");
require("inc/checklogin.php");
if ($logged_in == 0) {
//echo 'Not logged in. <a href="login.php">Login</a>';
header('Window-target: _parent');
header('Location: login.php');
exit();
}
if (checkObject(7) <> 1){
die("Unauthorized Access");
exit();
}
?>
<?
$receiptno = $_POST['receiptno'];
$custid = $_POST['custid'];
$custno = $_POST['custno'];
$catid = $_POST['catid'];
$custnameeng = htmlspecialchars($_POST['custnameeng'], ENT_QUOTES);
$custnamechi = htmlspecialchars($_POST['custnamechi'], ENT_QUOTES);
$telno = $_POST['telno'];
$faxno = $_POST['faxno'];
$email = $_POST['email'];
$billaddress = htmlspecialchars($_POST['billaddress'], ENT_QUOTES);
$shipaddress = htmlspecialchars($_POST['shipaddress'], ENT_QUOTES);
$remarks = htmlspecialchars($_POST['remarks'], ENT_QUOTES);
$docno = $_POST['docno'];
$paymentmethodid = $_POST['paymentmethodid'];
$attn = htmlspecialchars($_POST['attn'], ENT_QUOTES);
$orderdate = $_POST['orderdate'];
$amount = $_POST['amount'];
$status = $_POST['status'];
$creationdate = date("YmdGis");
if ($receiptno == "")
{
//**addnew
$sql = "select max(receiptno) as maxreceiptno from AR_RECEIPT_HDR";
$result = mysql_query($sql);
if ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
if (strlen($row{'maxreceiptno'}) == 0)
{
$receiptno = 100001;
}
else
{
$receiptno = $row{'maxreceiptno'} + 1;
}
}
else
{
$receiptno = 100001;
}
$sql = "insert into AR_RECEIPT_HDR
(receiptno, custno, catid, custnameeng, custnamechi, telno, faxno, email, billaddress, shipaddress, attn, remarks
, docno, paymentmethodid, amount, status, creationdate, creationby, orderdate)
values($receiptno, '$custno', $catid, '$custnameeng', '$custnamechi', '$telno', '$faxno', '$email', '$billaddress', '$shipaddress', '$attn', '$remarks'
, '$docno', $paymentmethodid, $amount, 1, '$creationdate', '$creationby', '$orderdate')";
// echo $sql;
$result = mysql_query($sql);
if (!$result) {
die('Invalid query: ' . mysql_error());
}
}
else
{
//**update
$sql = "update AR_RECEIPT_HDR
set custno = '$custno'
, catid = $catid
, custnameeng = '$custnameeng'
, custnamechi = '$custnamechi'
, telno = '$telno'
, faxno = '$faxno'
, email = '$email'
, billaddress = '$billaddress'
, shipaddress = '$shipaddress'
, attn = '$attn'
, remarks = '$remarks'
, docno = '$docno'
, paymentmethodid = $paymentmethodid
, status = 1
, amount = $amount
, updateddate = '$creationdate'
, updatedby = '$creationby'
, orderdate = '$orderdate'
where receiptno = $receiptno
";
// echo $sql;
$result = mysql_query($sql);
if (!$result) {
die('Invalid query: ' . mysql_error());
}
}
header("Location: receiptheader.php?receiptno=$receiptno");
?>
|