Factors.php

<?php

include('includes/session.inc');

$title = _('Factor Company Maintenance');

include('includes/header.inc');

if (isset($_GET['FactorID'])){
	$FactorID = strtoupper($_GET['FactorID']);
	$_POST['amend']=True;
} elseif (isset($_POST['FactorID'])){
	$FactorID = strtoupper($_POST['FactorID']);
} else {
	unset($FactorID);
}

if (isset($_POST['Create'])) {
	$FactorID = 0;
	$_POST['New'] = 'Yes';
};

echo '<p class="page_title_text"><img src="'.$rootpath.'/css/'.$theme.'/images/supplier.png" title="' . _('Factor Companies') . '" alt="" />' . ' ' .$title . '</p>';
/* This section has been reached because the user has pressed either the insert/update buttons on the
 form hopefully with input in the correct fields, which we check for firsrt. */

//initialise no input errors assumed initially before we test
$InputError = 0;

if (isset($_POST['submit']) or isset($_POST['update']) or isset($_POST['delete'])) {

	if (strlen($_POST['FactorName']) > 40 or strlen($_POST['FactorName']) == 0 or $_POST['FactorName'] == '') {
		$InputError = 1;
		prnMsg(_('The factoring company name must be entered and be forty characters or less long'),'error');
	}

	// But if errors were found in the input
	if ($InputError>0) {
		prnMsg(_('Validation failed') . _('no updates or deletes took place'),'warn');
		include('includes/footer.inc');
		exit;
	}

	/* If no input errors have been recieved */
	if ($InputError == 0 and isset($_POST['submit'])){
		//And if its not a new part then update existing one

		$sql = "INSERT INTO factorcompanies (id,
						coyname,
						address1,
						address2,
						address3,
						address4,
						address5,
						address6,
						contact,
						telephone,
						fax,
						email)
					 VALUES (null,
					 	'" .$_POST['FactorName'] . "',
						'" . $_POST['Address1'] . "',
						'" . $_POST['Address2'] . "',
						'" . $_POST['Address3'] . "',
						'" . $_POST['Address4'] . "',
						'" . $_POST['Address5'] . "',
						'" . $_POST['Address6'] . "',
						'" . $_POST['ContactName'] . "',
						'" . $_POST['Telephone'] . "',
						'" . $_POST['Fax'] . "',
						'" . $_POST['Email']  . "')";

		$ErrMsg = _('The factoring company') . ' ' . $_POST['FactorName'] . ' ' . _('could not be added because');
		$DbgMsg = _('The SQL that was used to insert the factor but failed was');

		$result = DB_query($sql, $db, $ErrMsg, $DbgMsg);

		prnMsg(_('A new factoring company for') . ' ' . $_POST['FactorName'] . ' ' . _('has been added to the database'),'success');

		unset ($FactorID);
		unset($_POST['FactorName']);
		unset($_POST['Address1']);
		unset($_POST['Address2']);
		unset($_POST['Address3']);
		unset($_POST['Address4']);
		unset($_POST['Address5']);
		unset($_POST['Address6']);
		unset($_POST['ContactName']);
		unset($_POST['Telephone']);
		unset($_POST['Fax']);
		unset($_POST['Email']);

	}

	if ($InputError == 0 and isset($_POST['update'])) {
		$sql = "UPDATE factorcompanies SET coyname='" . $_POST['FactorName'] . "',
				address1='" . $_POST['Address1'] . "',
				address2='" . $_POST['Address2'] . "',
				address3='" . $_POST['Address3'] . "',
				address4='" . $_POST['Address4'] . "',
				address5='" . $_POST['Address5'] . "',
				address6='" . $_POST['Address6'] . "',
				contact='" . $_POST['ContactName'] . "',
				telephone='" . $_POST['Telephone'] . "',
				fax='" . $_POST['Fax'] . "',
				email='" . $_POST['Email'] . "'
			WHERE id = '" .$FactorID."'";

		$ErrMsg = _('The factoring company could not be updated because');
		$DbgMsg = _('The SQL that was used to update the factor but failed was');
		$result = DB_query($sql, $db, $ErrMsg, $DbgMsg);

		prnMsg(_('The factoring company record for') . ' ' . $_POST['FactorName'] . ' ' . _('has been updated'),'success');

		//If it is a new part then insert it
	}

	/* If neither the Update or Insert buttons were pushed was it the delete button? */

	if (isset($_POST['delete'])) {

		$CancelDelete = 0;

	// PREVENT DELETES IF DEPENDENT RECORDS IN 'SuppTrans' , PurchOrders, SupplierContacts

		$sql= "SELECT COUNT(*) FROM suppliers WHERE factorcompanyid='".$FactorID."'";
		$result = DB_query($sql, $db);
		$myrow = DB_fetch_row($result);
		if ($myrow[0] > 0) {
			$CancelDelete = 1;
			prnMsg(_('Cannot delete this factor because there are suppliers using them'),'warn');
			echo '<br />' . _('There are') . ' ' . $myrow[0] . ' ' . _('suppliers using this factor company');
		}

		if ($CancelDelete == 0) {
			$sql="DELETE FROM factorcompanies WHERE id='".$FactorID."'";
			$result = DB_query($sql, $db);
			prnMsg(_('Factoring company record record for') . ' ' . $_POST['FactorName'] . ' ' . _('has been deleted'),'success');
			echo '<br />';
			unset($_SESSION['FactorID']);
		} //end if Delete factor
	}
	unset($FactorID);
}
/* So the page hasn't called itself with the input/update/delete/buttons */

/* If it didn't come with a $FactorID it must be a completely fresh start, so choose a new $factorID or give the
  option to create a new one*/

if (empty($FactorID) and !isset($_POST['Create'])) {

	echo '<form method="post" action="' . htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '">';
	echo '<input type="hidden" name="FormID" value="' . $_SESSION['FormID'] . '" />';

	echo '<input type="hidden" name="New" value="No" />';
	echo '<table class="selection"><tr>';
	echo '<th>' . _('ID') . '</th>';
	echo '<th>' . _('Company Name').'</th>';
	echo '<th>' . _('Address 1').'</th>';
	echo '<th>' . _('Address 2').'</th>';
	echo '<th>' . _('Address 3').'</th>';
	echo '<th>' . _('Address 4').'</th>';
	echo '<th>' . _('Address 5').'</th>';
	echo '<th>' . _('Address 6').'</th>';
	echo '<th>' . _('Contact').'</th>';
	echo '<th>' . _('Telephone').'</th>';
	echo '<th>' . _('Fax Number').'</th>';
	echo '<th>' . _('Email').'</th></tr>';
	$sql = "SELECT id,
			coyname,
			address1,
			address2,
			address3,
			address4,
			address5,
			address6,
			contact,
			telephone,
			fax,
			email
		FROM factorcompanies";
	$result=DB_query($sql, $db);
	$j=1;
	while ($myrow = DB_fetch_array($result)) {
		if ($j==1) {
			echo '<tr class="OddTableRows">';
			$j=0;
		} else {
			echo '<tr class="EvenTableRows">';
			$j++;
		}
		echo '<td>' . $myrow['id'] . '</td>';
		echo '<td>' . $myrow['coyname'].'</td>';
		echo '<td>' . $myrow['address1'].'</td>';
		echo '<td>' . $myrow['address2'].'</td>';
		echo '<td>' . $myrow['address3'].'</td>';
		echo '<td>' . $myrow['address4'].'</td>';
		echo '<td>' . $myrow['address5'].'</td>';
		echo '<td>' . $myrow['address6'].'</td>';
		echo '<td>' . $myrow['contact'].'</td>';
		echo '<td>' . $myrow['telephone'].'</td>';
		echo '<td>' . $myrow['fax'].'</td>';
		echo '<td>' . $myrow['email'].'</td>';
		echo '<td><a href="'.$rootpath . '/Factors.php?FactorID='.$myrow['id'].'">'._('Edit').'</a></td></tr>';
	}
	echo '</table><br /><div class="centre">';
	echo '<br /><button tabindex="3" type="submit" name="Create">' . _('Create New Factor') . '</button>';
	echo '</div><br /></form>';
	include('includes/footer.inc');
	exit;

}

if (isset($FactorID) and isset($_POST['amend'])) {

	$sql = "SELECT id,
			coyname,
			address1,
			address2,
			address3,
			address4,
			address5,
			address6,
			contact,
			telephone,
			fax,
			email
		FROM factorcompanies
		WHERE id = '".$FactorID."'";

	$result = DB_query($sql, $db);
	$myrow = DB_fetch_array($result);

	$_POST['FactorName'] = $myrow['coyname'];
	$_POST['Address1']  = $myrow['address1'];
	$_POST['Address2']  = $myrow['address2'];
	$_POST['Address3']  = $myrow['address3'];
	$_POST['Address4']  = $myrow['address4'];
	$_POST['Address5']  = $myrow['address5'];
	$_POST['Address6']  = $myrow['address6'];
	$_POST['ContactName']  = $myrow['contact'];
	$_POST['Telephone']  = $myrow['telephone'];
	$_POST['Fax']  = $myrow['fax'];
	$_POST['Email'] = $myrow['email'];

} else {
	$_POST['FactorName'] = '';
	$_POST['Address1']  = '';
	$_POST['Address2']  = '';
	$_POST['Address3']  = '';
	$_POST['Address4']  = '';
	$_POST['Address5']  = '';
	$_POST['Address6']  = '';
	$_POST['ContactName']  = '';
	$_POST['Telephone']  = '';
	$_POST['Fax']  = '';
	$_POST['Email'] = '';
}

if (isset($_POST['amend']) or isset($_POST['Create'])) {
	// its a new factor being added

	echo '<form method="post" action="' . htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '">';
	echo '<input type="hidden" name="FormID" value="' . $_SESSION['FormID'] . '" />';
	echo '<input type="hidden" name="FactorID" value="'.$FactorID.'" />';
	echo '<table class="selection">';
	echo '<input type="hidden" name="New" value="Yes" />';
	echo '<tr><td>' . _('Factor company Name') . ':</td><td><input tabindex="1" type="text" name="FactorName" size="42" maxlength="40" value="'.$_POST['FactorName'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 1') . ':</td><td><input tabindex="2" type="text" name="Address1" size="42" maxlength="40" value="'.$_POST['Address1'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 2') . ':</td><td><input tabindex="3" type="text" name="Address2" size="42" maxlength="40" value="'.$_POST['Address2'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 3') . ':</td><td><input tabindex="4" type="text" name="Address3" size="42" maxlength="40" value="'.$_POST['Address3'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 4') . ':</td><td><input tabindex="5" type="text" name="Address4" size="42" maxlength="40" value="'.$_POST['Address4'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 5') . ':</td><td><input tabindex="6" type="text" name="Address5" size="42" maxlength="40" value="'.$_POST['Address5'].'" /></td></tr>';
	echo '<tr><td>' . _('Address Line 6') . ':</td><td><input tabindex="7" type="text" name="Address6" size="42" maxlength="40" value="'.$_POST['Address6'].'" /></td></tr>';
	echo '<tr><td>' . _('Contact Name') . ':</td><td><input tabindex="8" type="text" name="ContactName" size="13" maxlength="25" value="'.$_POST['ContactName'].'" /></td></tr>';
	echo '<tr><td>' . _('Telephone') . ':</td><td><input tabindex="9" type="text" name="Telephone" size="13" maxlength="25" value="'.$_POST['Telephone'].'" /></td></tr>';
	echo '<tr><td>' . _('Fax') . ':</td><td><input tabindex="10" type="text" name="Fax" size="13" maxlength="25" value="'.$_POST['Fax'].'" /></td></tr>';
	echo '<tr><td>' . _('Email') . ':</td><td><input tabindex="11" type="text" name="Email" size="55" maxlength="55" value="'.$_POST['Email'].'" /></td></tr>';
}


if (isset($_POST['Create'])) {
	echo '</table><br /><div class="centre"><button tabindex="12" type="submit" name="submit">' . _('Insert New Factor') . '</button></div>';
} else if (isset($_POST['amend'])) {
	echo '</table><p><div class="centre"><button tabindex="13" type="submit" name="update">' . _('Update Factor') . '</button></p>';
	prnMsg ( _('There is no second warning if you hit the delete button below') . '. ' . _('However checks will be made to ensure there are no suppliers are using this factor before the deletion is processed'), 'warn');
	echo '<br /><button tabindex="14" type="submit" name="delete" onclick="return confirm(' . _('Are you sure you wish to delete this factoring company?') . '");" />' . _('Delete Factor') . '</button></form></div>';
}


include('includes/footer.inc');
?>