Thanakorn
c89b28da4c
Validate document lines on the server and recompute their totals, store notes with quotes/markup/emoji (utf8mb4, idempotent escaping, decode in form fields), exclude transfers from company-wide stock in/out, count revenue from confirmed orders only, one low-stock rule everywhere, list unapproved lots, natural bin sort, stable order/PO sort, status tiles that add up.
38 lines
1.4 KiB
PHP
38 lines
1.4 KiB
PHP
<?php
|
|
session_start();
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes/PurchaseRequestManager.php';
|
|
require_once '../../../assets/utils/classes/UsageGuard.php';
|
|
require_role($user_role, ['owner', 'admin', 'staff']);
|
|
|
|
$action = $data['action'] ?? '';
|
|
$id = (int)($data['id'] ?? 0);
|
|
$items = json_decode($data['items'] ?? '[]', true) ?: [];
|
|
|
|
$prm = new PurchaseRequestManager($pdo2, $company_id);
|
|
|
|
try {
|
|
if ($action === 'create') {
|
|
// One transaction: a failure while writing the lines must not leave the header behind.
|
|
$new_id = dbTransaction($pdo2, fn() => $prm->save(array_merge($data, ['id' => 0, 'items' => $items]), $logging));
|
|
$answer['success'] = 1;
|
|
$answer['message'] = 'Purchase request created.';
|
|
$answer['new_id'] = $new_id;
|
|
(new UsageGuard($pdo1, $company_id, $packages))->increment();
|
|
} elseif ($action === 'update') {
|
|
dbTransaction($pdo2, fn() => $prm->save(array_merge($data, ['id' => $id, 'items' => $items]), $logging));
|
|
$answer['success'] = 1;
|
|
$answer['message'] = 'Purchase request updated.';
|
|
} else {
|
|
throw new Exception('Unknown action.');
|
|
}
|
|
} catch (PDOException $e) {
|
|
$answer['message'] = 'Database error, please try again.';
|
|
http_response_code(500);
|
|
} catch (Exception $e) {
|
|
$answer['message'] = $e->getMessage();
|
|
http_response_code(400);
|
|
}
|
|
|
|
exit(json_encode($answer));
|