Thanakorn
8705be0d1b
- users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client
27 lines
754 B
PHP
27 lines
754 B
PHP
<?php
|
|
require_once __DIR__ . '/../../../session.php';
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes_ac/ChartOfAccounts.php';
|
|
|
|
require_role($user_role, ['owner', 'admin']);
|
|
|
|
if (empty($data['account_code']) || empty($data['account_name']) || empty($data['account_type'])) {
|
|
http_response_code(400);
|
|
$answer['message'] = 'Account code, name, and type are required';
|
|
exit(json_encode($answer));
|
|
}
|
|
|
|
$coa = new ChartOfAccounts($pdo2, $company_id);
|
|
$id = (int)($data['id'] ?? 0);
|
|
|
|
if ($id) {
|
|
$coa->update($id, $data);
|
|
$answer['message'] = 'Account updated';
|
|
} else {
|
|
$coa->create($data);
|
|
$answer['message'] = 'Account created';
|
|
}
|
|
|
|
$answer['success'] = 1;
|
|
exit(json_encode($answer));
|