' . ' ' . $Title . '';
if ( isset($_GET['SelectedMeasureID']) )
$SelectedMeasureID = $_GET['SelectedMeasureID'];
elseif (isset($_POST['SelectedMeasureID']))
$SelectedMeasureID = $_POST['SelectedMeasureID'];
if (isset($_POST['Submit'])) {
//initialise no input errors assumed initially before we test
$InputError = 0;
/* actions to take once the user has clicked the submit button
ie the page has called itself with some user input */
//first off validate inputs sensible
if (ContainsIllegalCharacters($_POST['MeasureName'])) {
$InputError = 1;
prnMsg( _('The unit of measure cannot contain any of the illegal characters') ,'error');
}
if (trim($_POST['MeasureName']) == '') {
$InputError = 1;
prnMsg( _('The unit of measure may not be empty'), 'error');
}
if (isset($_POST['SelectedMeasureID']) AND $_POST['SelectedMeasureID']!='' AND $InputError !=1) {
/*SelectedMeasureID could also exist if submit had not been clicked this code would not run in this case cos submit is false of course see the delete code below*/
// Check the name does not clash
$sql = "SELECT count(*) FROM unitsofmeasure
WHERE unitid <> '" . $SelectedMeasureID ."'
AND unitname ".LIKE." '" . $_POST['MeasureName'] . "'";
$result = DB_query($sql);
$myrow = DB_fetch_row($result);
if ( $myrow[0] > 0 ) {
$InputError = 1;
prnMsg( _('The unit of measure can not be renamed because another with the same name already exist.'),'error');
} else {
// Get the old name and check that the record still exist neet to be very carefull here
// idealy this is one of those sets that should be in a stored procedure simce even the checks are
// relavant
$sql = "SELECT unitname FROM unitsofmeasure
WHERE unitid = '" . $SelectedMeasureID . "'";
$result = DB_query($sql);
if ( DB_num_rows($result) != 0 ) {
// This is probably the safest way there is
$myrow = DB_fetch_row($result);
$OldMeasureName = $myrow[0];
$sql = array();
$sql[] = "UPDATE unitsofmeasure
SET unitname='" . $_POST['MeasureName'] . "'
WHERE unitname ".LIKE." '".$OldMeasureName."'";
$sql[] = "UPDATE stockmaster
SET units='" . $_POST['MeasureName'] . "'
WHERE units ".LIKE." '" . $OldMeasureName . "'";
} else {
$InputError = 1;
prnMsg( _('The unit of measure no longer exist.'),'error');
}
}
$msg = _('Unit of measure changed');
} elseif ($InputError !=1) {
/*SelectedMeasureID is null cos no item selected on first time round so must be adding a record*/
$sql = "SELECT count(*) FROM unitsofmeasure
WHERE unitname " .LIKE. " '".$_POST['MeasureName'] ."'";
$result = DB_query($sql);
$myrow = DB_fetch_row($result);
if ( $myrow[0] > 0 ) {
$InputError = 1;
prnMsg( _('The unit of measure can not be created because another with the same name already exists.'),'error');
} else {
$sql = "INSERT INTO unitsofmeasure (unitname )
VALUES ('" . $_POST['MeasureName'] ."')";
}
$msg = _('New unit of measure added');
}
if ($InputError!=1){
//run the SQL from either of the above possibilites
if (is_array($sql)) {
$result = DB_Txn_Begin();
$tmpErr = _('Could not update unit of measure');
$tmpDbg = _('The sql that failed was') . ':';
foreach ($sql as $stmt ) {
$result = DB_query($stmt, $tmpErr,$tmpDbg,true);
if(!$result) {
$InputError = 1;
break;
}
}
if ($InputError!=1){
$result = DB_Txn_Commit();
} else {
$result = DB_Txn_Rollback();
}
} else {
$result = DB_query($sql);
}
prnMsg($msg,'success');
}
unset ($SelectedMeasureID);
unset ($_POST['SelectedMeasureID']);
unset ($_POST['MeasureName']);
} elseif (isset($_GET['delete'])) {
//the link to delete a selected record was clicked instead of the submit button
// PREVENT DELETES IF DEPENDENT RECORDS IN 'stockmaster'
// Get the original name of the unit of measure the ID is just a secure way to find the unit of measure
$sql = "SELECT unitname FROM unitsofmeasure
WHERE unitid = '" . $SelectedMeasureID . "'";
$result = DB_query($sql);
if ( DB_num_rows($result) == 0 ) {
// This is probably the safest way there is
prnMsg( _('Cannot delete this unit of measure because it no longer exist'),'warn');
} else {
$myrow = DB_fetch_row($result);
$OldMeasureName = $myrow[0];
$sql= "SELECT COUNT(*) FROM stockmaster WHERE units ".LIKE." '" . $OldMeasureName . "'";
$result = DB_query($sql);
$myrow = DB_fetch_row($result);
if ($myrow[0]>0) {
prnMsg( _('Cannot delete this unit of measure because inventory items have been created using this unit of measure'),'warn');
echo '| ' . _('Units of Measure') . ' | ||
|---|---|---|
| ' . $myrow[1] . ' | ' . _('Edit') . ' | ' . _('Delete') . ' |