Thanakorn
8705be0d1b
- users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client
27 lines
1.0 KiB
PHP
27 lines
1.0 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../../../session.php';
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes/UsageGuard.php';
|
|
|
|
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
|
|
require_once '../../../assets/utils/classes/ReportManager.php';
|
|
|
|
$data = json_decode($_POST['json'] ?? '{}', true) ?: [];
|
|
$warehouse_id = (int)($data['warehouse_id'] ?? 0);
|
|
$from_month = $data['from_month'] ?? '';
|
|
$to_month = $data['to_month'] ?? '';
|
|
|
|
if (!$warehouse_id || !$from_month || !$to_month) {
|
|
http_response_code(400);
|
|
$answer['message'] = 'warehouse_id, from_month, and to_month are required.';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
if ($from_month > $to_month) [$from_month, $to_month] = [$to_month, $from_month];
|
|
|
|
$report = new ReportManager($pdo2, $company_id);
|
|
|
|
$answer['output'] = $report->getStockMovementSummary($warehouse_id, $from_month, $to_month);
|
|
$answer['success'] = 1;
|
|
exit(json_encode($answer));
|
|
?>
|