Files
Thanakorn SandClaude Sonnet 4.6 b07882e3f4 code audit fixes: require_once, issue flow, role guards
- Upgraded all plain `require` to `require_once` across 172 api/engine
  and api/engine_report files to prevent class-redeclaration errors
- Added issue button, issue_invoice() with GL toastr, and delete_invoice()
  to expense/manage_purchase_invoice.php, bringing it in line with
  po/manage_purchase_invoice.php
- Added can_delete role guard (admin/owner only) to trash icons on
  revenue/invoice.php and expense/purchase_invoice.php, matching the
  existing pattern in finance/receipt.php and finance/payment.php

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 17:06:08 +07:00

35 lines
952 B
PHP

<?php
session_start();
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes_ac/GlManager.php';
require_once '../../../assets/utils/classes_ac/GlQueryManager.php';
$doc_type = trim((string)($data['doc_type'] ?? ''));
$source_id = (int)($data['source_id'] ?? 0);
if (!$doc_type || $source_id <= 0) {
$answer['message'] = 'doc_type and source_id required.';
exit(json_encode($answer));
}
try {
$gl = new GlManager($pdo2, $company_id);
$entry = $gl->getBySource($doc_type, $source_id);
if (!$entry) {
$answer['success'] = 1;
$answer['output'] = null;
exit(json_encode($answer));
}
$query = new GlQueryManager($pdo2, $company_id);
$detail = $query->getJournalDetail((int)$entry['id']);
$answer['success'] = 1;
$answer['output'] = $detail;
} catch (Exception $e) {
$answer['message'] = $e->getMessage();
}
exit(json_encode($answer));