Thanakorn SandClaude Sonnet 4.6
b07882e3f4
- Upgraded all plain `require` to `require_once` across 172 api/engine and api/engine_report files to prevent class-redeclaration errors - Added issue button, issue_invoice() with GL toastr, and delete_invoice() to expense/manage_purchase_invoice.php, bringing it in line with po/manage_purchase_invoice.php - Added can_delete role guard (admin/owner only) to trash icons on revenue/invoice.php and expense/purchase_invoice.php, matching the existing pattern in finance/receipt.php and finance/payment.php Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
60 lines
1.6 KiB
PHP
60 lines
1.6 KiB
PHP
<?php
|
|
session_start();
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes/UsageGuard.php';
|
|
require_once '../../../assets/utils/classes/OrderManager.php';
|
|
|
|
require_role($user_role, ['owner', 'admin', 'staff']);
|
|
|
|
$action = $data['action'] ?? '';
|
|
$data['items'] = json_decode($data['items'] ?? '[]', true) ?: [];
|
|
|
|
if (!in_array($action, ['create', 'update'], true)) {
|
|
$answer['message'] = 'Unknown action';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
if (empty($data['items'])) {
|
|
$answer['message'] = 'At least one item is required';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
try {
|
|
$new_id = null;
|
|
|
|
dbTransaction($pdo2, function($pdo) use ($data, $action, $company_id, $logging, &$new_id) {
|
|
$order = new OrderManager($pdo, $company_id);
|
|
|
|
if ($action === 'create') {
|
|
$data['source'] = 'revenue';
|
|
$data['source_id'] = 0;
|
|
} else {
|
|
$id = (int)($data['id'] ?? 0);
|
|
if (!$id) {
|
|
throw new Exception('Order ID required.');
|
|
}
|
|
|
|
$order->assertRevenueOrderEditable($id);
|
|
}
|
|
|
|
$new_id = $order->saveOrder($data, $logging);
|
|
});
|
|
|
|
$answer['success'] = 1;
|
|
$answer['message'] = $action === 'create' ? 'Sales order created' : 'Sales order updated';
|
|
if ($new_id) {
|
|
$answer['new_id'] = $new_id;
|
|
(new UsageGuard($pdo1, $company_id, $packages))->increment();
|
|
}
|
|
|
|
} catch (PDOException $e) {
|
|
$answer['message'] = 'Database error, please try again.';
|
|
http_response_code(500);
|
|
|
|
} catch (Exception $e) {
|
|
$answer['message'] = $e->getMessage();
|
|
http_response_code(400);
|
|
}
|
|
|
|
exit(json_encode($answer));
|