Scope stock table access by company warehouses

2026-05-28 15:36:49 +07:00
parent 2a6441c6a9
commit b634372b22
11 changed files with 174 additions and 78 deletions
@@ -36,6 +36,19 @@ class BarcodeManager {
    // ─────────────────────────────────────────────────────────────

    private function stockTableName(int $warehouse_id): string {
+        if ($warehouse_id <= 0) {
+            throw new Exception("Invalid warehouse id.");
+        }
+
+        $sth = $this->pdo->prepare(
+            "SELECT id FROM md_warehouse
+             WHERE company_id = :company_id AND id = :id"
+        );
+        $sth->execute([':company_id' => $this->company_id, ':id' => $warehouse_id]);
+        if (!$sth->fetchColumn()) {
+            throw new Exception("Warehouse ID {$warehouse_id} not found.");
+        }
+
        return 'td_stock_' . $warehouse_id;
    }