d7473602cb
Change : the class widget SELECT do not protect against Cross scripting Fix Bug : the quick writing doesn't have a "use predefined operation" Change : after computing the internal code the data member jr_internal is set Bug : protect against CS in fiche_search.php
250 lines
6.9 KiB
PHP
250 lines
6.9 KiB
PHP
<?php
|
|
/*
|
|
* This file is part of PhpCompta.
|
|
*
|
|
* PhpCompta is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* PhpCompta is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with PhpCompta; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
/* $Revision$ */
|
|
|
|
// Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
|
|
|
|
/*!\file
|
|
*
|
|
*
|
|
* \brief to write directly into the ledgers,the stock and the tables
|
|
* quant_purchase and quant_sold are not changed by this
|
|
*
|
|
*/
|
|
require_once ('class_acc_ledger.php');
|
|
require_once ('class_acc_reconciliation.php');
|
|
|
|
require_once('check_priv.php');
|
|
|
|
|
|
$cn=DbConnect(dossier::id());
|
|
$id=(isset ($_REQUEST['p_jrn']))?$_REQUEST['p_jrn']:-1;
|
|
/*!\brief show a form for quick_writing */
|
|
function show_qw_menu($def=0) {
|
|
echo '<div class="lmenu">';
|
|
$id=(isset ($_REQUEST['p_jrn']))?$_REQUEST['p_jrn']:-1;
|
|
echo ShowItem(
|
|
array(
|
|
array('?p_action='.$_REQUEST['p_action'].'&'.dossier::get().'&p_jrn='.$id.'&show_form','Encoder une Operation',
|
|
' Encoder une operation dans ce journal',0),
|
|
array('?p_action='.$_REQUEST['p_action'].'&'.dossier::get().'&p_jrn='.$id.'&sa=l','Voir Operation',
|
|
' Voir les operations de ce journal',1),
|
|
array('?p_action='.$_REQUEST['p_action'].'&'.dossier::get(),
|
|
'Autre journal',
|
|
'Choisir un autre journal')
|
|
),
|
|
'H',"mtitle","mtitle",$def,' width="100%"'
|
|
);
|
|
|
|
echo '</div>';
|
|
}
|
|
|
|
/*!\brief show a form for quick_writing */
|
|
function show_direct_form($cn,$ledger,$p_array) {
|
|
echo '<div class="content">';
|
|
|
|
$id=(isset ($_REQUEST['p_jrn']))?$_REQUEST['p_jrn']:-1;
|
|
echo JS_COMPUTE_DIRECT;
|
|
echo Acc_Reconciliation::$javascript;
|
|
|
|
// Show the predef operation
|
|
// Don't forget the p_jrn
|
|
echo '<form method="get">';
|
|
echo widget::hidden('p_action',$_REQUEST['p_action']);
|
|
echo dossier::hidden();
|
|
echo widget::hidden('p_jrn',$_REQUEST['p_jrn']);
|
|
$op=new Pre_operation($cn);
|
|
$op->p_jrn=$_REQUEST['p_jrn'];
|
|
$op->od_direct='t';
|
|
if ( $op->count() > 0 ) {
|
|
echo "Utilisez une operation ";
|
|
echo $op->show_button();
|
|
echo widget::submit('use_opd','Utilisez une operation');
|
|
}
|
|
echo '</form>';
|
|
|
|
|
|
|
|
echo '<form method="post" action="?">';
|
|
echo dossier::hidden();
|
|
echo widget::hidden('p_action',$_REQUEST['p_action']);
|
|
|
|
echo $ledger->show_form($p_array);
|
|
|
|
|
|
echo widget::button('add','Ajout d\'une ligne','onClick="quick_writing_add_row()"');
|
|
|
|
echo widget::submit('summary','Sauvez');
|
|
echo '<div class="info">
|
|
Débit = <span id="totalDeb"></span>
|
|
Crédit = <span id="totalCred"></span>
|
|
Difference = <span id="totalDiff"></span>
|
|
</div>
|
|
';
|
|
|
|
|
|
echo '</form>';
|
|
echo "<script>checkTotalDirect();</script>";
|
|
|
|
echo "<div>".JS_CALC_LINE."</div>";
|
|
|
|
echo '</div>';
|
|
}
|
|
|
|
$ledger=new Acc_Ledger($cn,$id);
|
|
|
|
$ledger->with_concerned=true;
|
|
// no ledger selected, propose one
|
|
if ($id == -1 )
|
|
{
|
|
echo '<div class="content">';
|
|
|
|
// Vide
|
|
echo '<FORM method="get" action="?">';
|
|
echo dossier::hidden();
|
|
echo widget::hidden('p_action',$_REQUEST['p_action']);
|
|
echo $ledger->select_ledger()->IOValue();
|
|
echo widget::submit('show_form','Choix du journal');
|
|
echo '</form>';
|
|
echo '</div>';
|
|
exit();
|
|
}
|
|
if ( $User->AccessJrn($cn,$id) == false ) {
|
|
echo "
|
|
<script> alert(\"L'acces a ce journal est interdit, contactez votre responsable\");</script>";
|
|
exit();
|
|
}
|
|
echo '<div class="content">';
|
|
echo '<h2 class="info"> Journal : '.$ledger->get_name().'</h2>';
|
|
$sa=( isset ($_REQUEST['sa']))?$_REQUEST['sa']:'';
|
|
//======================================================================
|
|
// See the ledger listing
|
|
if ($sa == 'l' && $id != -1) {
|
|
// Check privilege
|
|
|
|
if ( CheckJrn(dossier::id(),$_SESSION['g_user'],$id) ==0 ) {
|
|
NoAccess();
|
|
exit -1;
|
|
}
|
|
show_qw_menu(1);
|
|
echo '<div class="content">';
|
|
$Ledger=new Acc_Ledger($cn,$id);
|
|
$href=basename($_SERVER['PHP_SELF']);
|
|
|
|
echo '<form method="GET" action="'.$href.'">';
|
|
echo widget::hidden("sa","l");
|
|
echo widget::hidden("p_jrn",$id);
|
|
echo widget::hidden("p_action","quick_writing");
|
|
echo dossier::hidden();
|
|
$Ledger->show_ledger();
|
|
echo '</form>';
|
|
|
|
echo '</div>';
|
|
exit();
|
|
|
|
exit(0);
|
|
}
|
|
|
|
//======================================================================
|
|
// User can write ?
|
|
// Write into the ledger
|
|
|
|
if ( CheckJrn(dossier::id(),$_SESSION['g_user'],$id) != 2 ) {
|
|
echo "
|
|
<script> alert(\"Vous ne pouvez pas ecrire dans ce journal, contactez votre responsable\");</script>";
|
|
exit -1;
|
|
}
|
|
|
|
if ( isset($_GET['show_form']) || isset($_POST['correct_it']) ) {
|
|
$array=$_POST;
|
|
$default_periode=$User->get_periode();
|
|
/* check if the ledger is closed */
|
|
if ( $ledger->is_closed($default_periode)==1) {
|
|
echo '<h2 class="error"> Desole mais cette periode est fermee pour ce journal</h2>';
|
|
exit();
|
|
}
|
|
list($date,$devnull)=get_periode($cn,$default_periode);
|
|
$array['date']=$date;
|
|
show_qw_menu();
|
|
show_direct_form($cn,$ledger,$array);
|
|
exit();
|
|
}
|
|
|
|
// reload with a predefined operation
|
|
//
|
|
if ( isset ($_GET['use_opd'])) {
|
|
$op=new Pre_op_advanced($cn);
|
|
$p_post=null;
|
|
if ( isset($_REQUEST['pre_def']) && $_REQUEST['pre_def'] != ''){
|
|
$op->set_od_id($_REQUEST['pre_def']);
|
|
//$op->p_jrn=$id;
|
|
|
|
$p_post=$op->compute_array();
|
|
}
|
|
show_qw_menu();
|
|
show_direct_form($cn,$ledger,$p_post);
|
|
|
|
exit();
|
|
|
|
}
|
|
if ( isset($_POST['summary'])) {
|
|
try {
|
|
$ledger->verify($_POST );
|
|
} catch (AcException $e) {
|
|
echo '<script>alert (\''.$e->getMessage()."'); </script>";
|
|
show_qw_menu();
|
|
show_direct_form($cn,$ledger,$_POST);
|
|
exit();
|
|
}
|
|
|
|
echo '<form method="post" action="?">';
|
|
echo $ledger->show_form($_POST,1);
|
|
echo dossier::hidden();
|
|
echo widget::hidden('p_action',$_REQUEST['p_action']);
|
|
|
|
echo widget::submit('save_it',"Sauver");
|
|
echo widget::submit('correct_it','Corriger');
|
|
|
|
$chk=new widget('checkbox');
|
|
$chk->selected=false;
|
|
echo "Sauvez l'opération ?";
|
|
echo $chk->IOValue('save_opd');
|
|
echo '</form>';
|
|
exit();
|
|
|
|
}
|
|
if ( isset($_POST['save_it' ])) {
|
|
$array=$_POST;
|
|
|
|
try {
|
|
$ledger->save($array);
|
|
echo '<h2> Opération enregistrée '.$ledger->jr_internal.'</h2>';
|
|
echo widget::button_href('Autre opération dans ce journal',
|
|
"?".dossier::get().
|
|
'&show_form'.
|
|
'&p_action=quick_writing&p_jrn='.
|
|
$_REQUEST['p_jrn']);
|
|
|
|
} catch (AcException $e) {
|
|
echo '<script>alert (\''.$e->getMessage()."'); </script>";
|
|
show_qw_menu();
|
|
show_direct_form($cn,$ledger,$_POST);
|
|
}
|
|
exit();
|
|
}
|