Thanakorn
8705be0d1b
- users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client
25 lines
982 B
PHP
25 lines
982 B
PHP
<?php
|
|
require_once __DIR__ . '/../../../session.php';
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes/UsageGuard.php';
|
|
|
|
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
|
|
require_once '../../../assets/utils/classes_ac/FinancialReports.php';
|
|
|
|
$account_code = trim((string)($data['account_code'] ?? ''));
|
|
$from_date = trim((string)($data['from_date'] ?? ($data['from_period'] ?? date('Y-m-d'))));
|
|
$to_date = trim((string)($data['to_date'] ?? ($data['to_period'] ?? $from_date)));
|
|
$dept_id = (int)($data['department_id'] ?? 0);
|
|
|
|
if ($account_code === '') {
|
|
http_response_code(400);
|
|
$answer['message'] = 'account_code is required.';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
$reports = new FinancialReports($pdo2, $company_id);
|
|
|
|
$answer['success'] = 1;
|
|
$answer['output'] = $reports->getGLMovement($account_code, $from_date, $to_date, $dept_id);
|
|
exit(json_encode($answer));
|