<?php
// +-----------------------------------------------------------------+
// | PhreeBooks Open Source ERP |
// +-----------------------------------------------------------------+
// | Copyright (c) 2008 PhreeSoft, LLC |
// | http://www.PhreeSoft.com |
// +-----------------------------------------------------------------+
// | This program is free software: you can redistribute it and/or |
// | modify it under the terms of the GNU General Public License as |
// | published by the Free Software Foundation, either version 3 of |
// | the License, or any later version. |
// | |
// | This program is distributed in the hope that it will be useful, |
// | but WITHOUT ANY WARRANTY; without even the implied warranty of |
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
// | GNU General Public License for more details. |
// | |
// | The license that is bundled with this package is located in the |
// | file: /doc/manual/ch01-Introduction/license.html. |
// | If not, see http://www.gnu.org/licenses/ |
// +-----------------------------------------------------------------+
// Path: /modules/inventory/pages/main/pre_process.php
//
/************** Check user security *****************************/
$security_level = $_SESSION['admin_security'][SECURITY_ID_MAINTAIN_INVENTORY];
if ($security_level == 0) { // not supposed to be here
$messageStack->add_session(ERROR_NO_PERMISSION, 'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, '', 'SSL'));
}
/************** include page specific files *********************/
require(DIR_FS_WORKING . 'language/' . $_SESSION['language'] . '/language.php');
require(DIR_FS_WORKING . 'functions/inventory.php');
/************** page specific initialization *************************/
$error = false;
$processed = false;
$action = (isset($_GET['action']) ? $_GET['action'] : $_POST['todo']);
/*************** hook for custom actions ***************************/
$custom_path = DIR_FS_MY_FILES . 'custom/inventory/main/extra_actions.php';
if (file_exists($custom_path)) { include($custom_path); }
/*************** Act on the action request *************************/
switch ($action) {
case 'new':
$inventory = '';
$cInfo = '';
break;
case 'create':
if ($security_level < 2) {
$messageStack->add_session(ERROR_NO_PERMISSION, 'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
break;
}
$sku = db_prepare_input($_POST['sku']);
$inventory_type = db_prepare_input($_POST['inventory_type']);
$cost_method = db_prepare_input($_POST['cost_method']);
if (!$sku) {
$messageStack->add(INV_ERROR_SKU_BLANK, 'error');
$action = 'new';
break;
}
if (gen_validate_sku($sku)) {
$messageStack->add(INV_ERROR_DUPLICATE_SKU, 'error');
$action = 'new';
break;
}
$sql_data_array = array(
'sku' => $sku,
'inventory_type' => $inventory_type,
'cost_method' => $cost_method,
'creation_date' => 'now()',
'last_update' => 'now()',
'item_taxable' => INVENTORY_DEFAULT_TAX_ID,
);
switch ($inventory_type) {
case 'si':
$sql_data_array['account_sales_income'] = INV_STOCK_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_STOCK_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_STOCK_DEFAULT_COS;
$sql_data_array['cost_method'] = INV_STOCK_DEFAULT_COSTING;
break;
case 'sr':
$sql_data_array['account_sales_income'] = INV_SERIALIZE_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_SERIALIZE_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_SERIALIZE_DEFAULT_COS;
$sql_data_array['cost_method'] = INV_SERIALIZE_DEFAULT_COSTING;
$sql_data_array['serialize'] = '1';
break;
case 'ms':
$sql_data_array['account_sales_income'] = INV_MASTER_STOCK_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_MASTER_STOCK_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_MASTER_STOCK_DEFAULT_COS;
$sql_data_array['cost_method'] = INV_MASTER_STOCK_DEFAULT_COSTING;
break;
case 'as':
$sql_data_array['account_sales_income'] = INV_ASSY_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_ASSY_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_ASSY_DEFAULT_COS;
$sql_data_array['cost_method'] = INV_ASSY_DEFAULT_COSTING;
break;
case 'ns':
$sql_data_array['account_sales_income'] = INV_NON_STOCK_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_NON_STOCK_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_NON_STOCK_DEFAULT_COS;
break;
case 'lb':
$sql_data_array['account_sales_income'] = INV_LABOR_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_LABOR_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_LABOR_DEFAULT_COS;
break;
case 'sv':
$sql_data_array['account_sales_income'] = INV_SERVICE_DEFAULT_SALES;
$sql_data_array['account_inventory_wage'] = INV_SERVICE_DEFAULT_INVENTORY;
$sql_data_array['account_cost_of_sales'] = INV_SERVICE_DEFAULT_COS;
break;
case 'ci':
$sql_data_array['account_sales_income'] = INV_CHARGE_DEFAULT_SALES;
break;
case 'ai':
$sql_data_array['account_sales_income'] = INV_ACTIVITY_DEFAULT_SALES;
break;
default:
case 'ds': // description only item type
}
db_perform(TABLE_INVENTORY, $sql_data_array, 'insert');
$id = db_insert_id();
gen_add_audit_log(INV_LOG_INVENTORY . TEXT_ADD, 'Type: ' . $inventory_type . ' - ' . $sku);
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('cID', 'action')) . 'cID=' . $id . '&action=edit', 'SSL'));
break;
case 'delete':
if ($security_level < 4) {
$messageStack->add_session(ERROR_NO_PERMISSION,'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
break;
}
$id = db_prepare_input($_GET['cID']);
$result = $db->Execute("select sku, inventory_type from " . TABLE_INVENTORY . " where id = " . $id);
$sku = $result->fields['sku'];
$inventory_type = $result->fields['inventory_type'];
if ($inventory_type == 'mi') { // this is disabled in the form but just in case, error here as well
$messageStack->add_session('Master Stock Sub Items are not allowed to be deleted separately!','error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
}
if ($inventory_type == 'ms') {
$sql = "select id from " . TABLE_JOURNAL_ITEM . " where sku like '" . $sku . "-%' limit 1";
} else {
$sql = "select id from " . TABLE_JOURNAL_ITEM . " where sku = '" . $sku . "' limit 1";
}
$result = $db->Execute($sql);
if ($result->Recordcount() == 0) {
$db->Execute("delete from " . TABLE_INVENTORY . " where id = " . $id);
if ($inventory_type == 'ms') {
$db->Execute("delete from " . TABLE_INVENTORY_MS_LIST . " where sku = '" . $sku . "'");
$db->Execute("delete from " . TABLE_INVENTORY . " where sku like '" . $sku . "-%'");
}
// TBD delete the pictures if they exists
gen_add_audit_log(INV_LOG_INVENTORY . TEXT_DELETE, $sku);
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('cID', 'action')), 'SSL'));
} else {
$messageStack->add(INV_ERROR_CANNOT_DELETE, 'error');
}
break;
case 'save':
if ($security_level < 3) {
$messageStack->add_session(ERROR_NO_PERMISSION,'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
break;
}
$id = (int)db_prepare_input($_POST['rowSeq']);
$sku = db_prepare_input($_POST['sku']);
$image_with_path = db_prepare_input($_POST['image_with_path']); // the current image name with path relative from my_files/company_db/inventory/images directory
$inventory_path = db_prepare_input($_POST['inventory_path']);
if (substr($inventory_path, 0, 1) == '/') $inventory_path = substr($inventory_path, 1); // remove leading '/' if there
if (substr($inventory_path, -1, 1) == '/') $inventory_path = substr($inventory_path, 0, strlen($inventory_path)-1); // remove trailing '/' if there
$inventory_type = db_prepare_input($_POST['inventory_type']);
$sql_data_array = array();
$inventory_fields = $db->Execute("select field_name, entry_type from " . TABLE_INVENTORY_FIELDS);
while (!$inventory_fields->EOF) {
$field_name = $inventory_fields->fields['field_name'];
if (!isset($_POST[$field_name]) && $inventory_fields->fields['entry_type'] == 'check_box') {
$sql_data_array[$field_name] = '0'; // special case for unchecked check boxes
} elseif (isset($_POST[$field_name]) && $field_name <> 'id') {
$sql_data_array[$field_name] = db_prepare_input($_POST[$field_name]);
}
$inventory_fields->MoveNext();
}
$sql_data_array['last_update'] = date('Y-m-d H-i-s');
// special cases for checkboxes of system fields (don't return a POST value if unchecked)
$remove_image = $_POST['remove_image'] == '1' ? true : false;
unset($sql_data_array['remove_image']); // this is not a db field, just an action
$sql_data_array['inactive'] = ($sql_data_array['inactive'] == '1' ? '1' : '0');
// $sql_data_array['serialize'] = ($sql_data_array['serialize'] == '1' ? '1' : '0');
// special cases for monetary values in system fields
$sql_data_array['full_price'] = $currencies->clean_value($sql_data_array['full_price']);
$sql_data_array['item_cost'] = $currencies->clean_value($sql_data_array['item_cost']);
// if it's a master stock item, process
if ($inventory_type == 'ms') {
$attributes = array(
'attr_name_0' => db_prepare_input($_POST['attr_name_0']),
'ms_attr_0' => substr(db_prepare_input($_POST['ms_attr_0']), 0, -1),
'attr_name_1' => db_prepare_input($_POST['attr_name_1']),
'ms_attr_1' => substr(db_prepare_input($_POST['ms_attr_1']), 0, -1));
save_ms_items($sql_data_array, $attributes);
}
// if it's an assembly, retrieve the BOM (if no journal_entries have been posted)
$update_bom = false;
if ($inventory_type == 'as') {
$result = $db->Execute("select last_journal_date from " . TABLE_INVENTORY . " where id = " . $id);
if ($result->fields['last_journal_date'] == '0000-00-00 00:00:00') { // only update if no posting has been performed
$x = 1;
$bom_array = array();
for($x=0; $x<count($_POST['assy_sku']); $x++) {
$assy_sku = db_prepare_input($_POST['assy_sku'][$x]);
$assy_qty = $currencies->clean_value(db_prepare_input($_POST['assy_qty'][$x]));
if (gen_validate_sku($assy_sku) && $assy_qty > 0) { // error check sku is valid and qty > 0
$bom_array[] = array(
'ref_id' => $id,
'sku' => $assy_sku,
'description' => db_prepare_input($_POST['assy_desc'][$x]),
'qty' => $assy_qty);
} elseif ($assy_sku <> '' || $assy_qty < 0) { // show error, bad sku, negative quantity, skip the blank lines
$messageStack->add(INV_ERROR_BAD_SKU . $assy_sku, 'error');
}
}
$update_bom = true;
}
}
// TBD - validate input
if ($remove_image) { // update the image with relative path
$_POST['image_with_path'] = '';
$sql_data_array['image_with_path'] = '';
// TBD retrieve image with path info and delete image from my_files (no delete, warn only if image also pointed to by another SKU)
}
if (!$error && is_uploaded_file($_FILES['inventory_image']['tmp_name'])) {
// TBD first check to see if the image was moved from a different directory... if so, delete it
$file_path = DIR_FS_MY_FILES . $_SESSION['company'] . '/inventory/images';
$inventory_path = str_replace('\\', '/', $inventory_path);
// strip beginning and trailing slashes if present
if (substr($inventory_path, -1, 1) == '/') $inventory_path = substr($inventory_path, 0, -1);
if (substr($inventory_path, 0, 1) == '/') $inventory_path = substr($inventory_path, 1);
if ($inventory_path) $file_path .= '/' . $inventory_path;
$temp_file_name = $_FILES['inventory_image']['tmp_name'];
$file_name = $_FILES['inventory_image']['name'];
if (!validate_path($file_path)) {
$messageStack->add(INV_IMAGE_PATH_ERROR, 'error');
$error = true;
} elseif (!validate_upload('inventory_image', 'image', 'jpg')) {
$messageStack->add(INV_IMAGE_FILE_TYPE_ERROR, 'error');
$error = true;
} else { // passed all test, write file
if (!copy($temp_file_name, $file_path . '/' . $file_name)) {
$messageStack->add(INV_IMAGE_FILE_WRITE_ERROR, 'error');
$error = true;
} else {
$image_with_path = ($inventory_path ? ($inventory_path . '/') : '') . $file_name;
$_POST['image_with_path'] = $image_with_path;
$sql_data_array['image_with_path'] = $image_with_path; // update the image with relative path
}
}
}
// Ready to write update
if (!$error) {
if ($inventory_type == 'as' && $update_bom) {
$result = $db->Execute("delete from " . TABLE_INVENTORY_ASSY_LIST . " where ref_id = " . $id);
while ($list_array = array_shift($bom_array)) {
db_perform(TABLE_INVENTORY_ASSY_LIST, $list_array, 'insert');
}
}
db_perform(TABLE_INVENTORY, $sql_data_array, 'update', "id = " . $id);
gen_add_audit_log(INV_LOG_INVENTORY . TEXT_UPDATE, $sku . ' - ' . $sql_data_array['description_short']);
} else if ($error == true) {
$category_list = $db->Execute("select category_id, category_name, category_description
from " . TABLE_INVENTORY_CATEGORIES . " order by sort_order");
$_POST['id'] = $id;
$cInfo = new objectInfo($_POST);
$processed = true;
}
break;
case 'copy':
if ($security_level < 2) {
$messageStack->add_session(ERROR_NO_PERMISSION,'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
break;
}
$id = db_prepare_input($_GET['cID']);
$sku = db_prepare_input($_GET['sku']);
// check for duplicate skus
$result = $db->Execute("select id from " . TABLE_INVENTORY . " where sku = '" . $sku . "'");
if ($result->Recordcount() > 0) { // error and reload
$messageStack->add(INV_ERROR_DUPLICATE_SKU, 'error');
break;
}
$result = $db->Execute("select * from " . TABLE_INVENTORY . " where id = " . $id);
$old_sku = $result->fields['sku'];
// clean up the fields (especially the system fields, retain the custom fields)
$output_array = array();
foreach ($result->fields as $key => $value) {
switch ($key) {
case 'id': // Remove from write list fields
case 'last_journal_date':
case 'item_cost':
case 'quantity_on_hand':
case 'quantity_on_order':
case 'quantity_on_sales_order':
break;
case 'sku': // set the new sku
$output_array[$key] = $sku;
break;
case 'creation_date':
case 'last_update':
$output_array[$key] = date('Y-m-d H:i:s');
break;
default:
$output_array[$key] = $value;
}
}
db_perform(TABLE_INVENTORY, $output_array, 'insert');
$new_id = db_insert_id();
if ($result->fields['inventory_type'] == 'ms') { // create master stock items
$ms_result = $db->Execute("select * from " . TABLE_INVENTORY_MS_LIST . " where sku = '" . $old_sku . "'");
$ms_attr_0 = ($ms_result->RecordCount() > 0) ? $ms_result->fields['attr_0'] : '';
$attr_name_0 = ($ms_result->RecordCount() > 0) ? $ms_result->fields['attr_name_0'] : '';
$ms_attr_1 = ($ms_result->RecordCount() > 0) ? $ms_result->fields['attr_1'] : '';
$attr_name_1 = ($ms_result->RecordCount() > 0) ? $ms_result->fields['attr_name_1'] : '';
$attributes = array(
'attr_name_0' => $attr_name_0,
'ms_attr_0' => $ms_attr_0,
'attr_name_1' => $attr_name_1,
'ms_attr_1' => $ms_attr_1);
save_ms_items($output_array, $attributes);
}
if ($result->fields['inventory_type'] == 'as') { // copy assembly list if it's an assembly
$result = $db->Execute("select sku, description, qty from " . TABLE_INVENTORY_ASSY_LIST . " where ref_id = " . $id);
while (!$result->EOF) {
$output_array = array(
'ref_id' => $new_id,
'sku' => $result->fields['sku'],
'description' => $result->fields['description'],
'qty' => $result->fields['qty']);
db_perform(TABLE_INVENTORY_ASSY_LIST, $output_array, 'insert');
$result->MoveNext();
}
}
// Pictures are not copied over...
// now continue with newly copied item by editing it
gen_add_audit_log(INV_LOG_INVENTORY . TEXT_COPY, $old_sku . ' => ' . $sku);
$_POST['rowSeq'] = $new_id; // set item pointer to new record
$action = 'edit'; // fall through to edit case
case 'edit':
$id = isset($_POST['rowSeq']) ? (int)db_prepare_input($_POST['rowSeq']) : (int)db_prepare_input($_GET['cID']);
$category_list = $db->Execute("select category_id, category_name, category_description
from " . TABLE_INVENTORY_CATEGORIES . " order by sort_order");
$field_list = $db->Execute("select field_name, description, category_id, params
from " . TABLE_INVENTORY_FIELDS . " order by description");
if ($field_list->RecordCount() < 1) inv_sync_inv_field_list();
$query = '';
while (!$field_list->EOF) {
$query .= $field_list->fields['field_name'] . ', ';
$field_list->MoveNext();
}
$full_inv_query = ($query == '') ? '*' : substr($query, 0, -2);
$sql = "select " . $full_inv_query . " from " . TABLE_INVENTORY . " where id = " . $id . " order by sku";
$inventory = $db->Execute($sql);
$cInfo = new objectInfo($inventory->fields);
// gather the history
$sku_history = gather_history($inventory->fields['sku']);
// get the branch stock
if (ENABLE_MULTI_BRANCH) {
$sql = " select id, short_name from " . TABLE_CONTACTS . " where type = 'b'";
$result = $db->Execute($sql);
$store_stock = array();
$store_stock[] = array('store' => COMPANY_ID, 'qty' => load_store_stock($inventory->fields['sku'], 0));
while (!$result->EOF) {
$store_stock[] = array(
'store' => $result->fields['short_name'],
'qty' => load_store_stock($inventory->fields['sku'], $result->fields['id']),
);
$result->MoveNext();
}
}
// master stock, fetch attributes
if ($cInfo->inventory_type == 'ms') {
$result = $db->Execute("select * from " . TABLE_INVENTORY_MS_LIST . " where sku = '" . $cInfo->sku . "'");
$cInfo->ms_attr_0 = ($result->RecordCount() > 0) ? $result->fields['attr_0'] : '';
$cInfo->attr_name_0 = ($result->RecordCount() > 0) ? $result->fields['attr_name_0'] : '';
$cInfo->ms_attr_1 = ($result->RecordCount() > 0) ? $result->fields['attr_1'] : '';
$cInfo->attr_name_1 = ($result->RecordCount() > 0) ? $result->fields['attr_name_1'] : '';
$attr_array0 = array();
if ($cInfo->ms_attr_0) {
$temp = explode(',', $cInfo->ms_attr_0);
for ($i = 0; $i < count($temp); $i++) {
$code = substr($temp[$i], 0, strpos($temp[$i], ':'));
$desc = substr($temp[$i], strpos($temp[$i], ':') + 1);
$attr_array0[] = array('id' => $code . ':' . $desc,
'text' => $code . ' : ' . $desc);
}
}
$attr_array1 = array();
if ($cInfo->ms_attr_1) {
$temp = explode(',', $cInfo->ms_attr_1);
for ($i = 0; $i < count($temp); $i++) {
$code = substr($temp[$i], 0, strpos($temp[$i], ':'));
$desc = substr($temp[$i], strpos($temp[$i], ':') + 1);
$attr_array1[] = array('id' => $code . ':' . $desc,
'text' => $code . ' : ' . $desc);
}
}
}
break;
case 'rename':
if ($security_level < 4) {
$messageStack->add_session(ERROR_NO_PERMISSION,'error');
gen_redirect(html_href_link(FILENAME_DEFAULT, gen_get_all_get_params(array('action')), 'SSL'));
break;
}
$id = db_prepare_input($_GET['cID']);
$sku = db_prepare_input($_GET['sku']);
// check for duplicate skus
$result = $db->Execute("select id from " . TABLE_INVENTORY . " where sku = '" . $sku . "'");
if ($result->Recordcount() > 0) { // error and reload
$messageStack->add(INV_ERROR_DUPLICATE_SKU, 'error');
break;
}
$result = $db->Execute("select sku, inventory_type from " . TABLE_INVENTORY . " where id = " . $id);
$orig_sku = $result->fields['sku'];
$inventory_type = $result->fields['inventory_type'];
$sku_list = array($orig_sku);
if ($inventory_type == 'ms') { // build list of sku's to rename (without changing contents)
$result = $db->Execute("select sku from " . TABLE_INVENTORY ." where sku like '". $orig_sku . "-%'");
while(!$result->EOF) {
$sku_list[] = $result->fields['sku'];
$result->MoveNext();
}
}
// start transaction (needs to all work or reset to avoid unsyncing tables)
$db->transStart();
// rename the afffected tables
for($i = 0; $i < count($sku_list); $i++) {
$new_sku = str_replace($orig_sku, $sku, $sku_list[$i], $count = 1);
$result = $db->Execute("update " . TABLE_INVENTORY . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
$result = $db->Execute("update " . TABLE_INVENTORY_ASSY_LIST . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
$result = $db->Execute("update " . TABLE_INVENTORY_COGS_OWED . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
$result = $db->Execute("update " . TABLE_INVENTORY_HISTORY . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
$result = $db->Execute("update " . TABLE_INVENTORY_MS_LIST . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
$result = $db->Execute("update " . TABLE_JOURNAL_ITEM . " set sku = '" . $new_sku . "' where sku = '" . $sku_list[$i] . "'");
}
$db->transCommit(); // finished successfully
break;
case 'go_first': $_GET['page'] = 1; break;
case 'go_previous': $_GET['page']--; break;
case 'go_next': $_GET['page']++; break;
case 'go_last': $_GET['page'] = 99999; break;
case 'search':
case 'search_reset':
case 'go_page':
default:
}
/***************** prepare to display templates *************************/
// load the tax rates
$tax_rates = inv_calculate_tax_drop_down();
// load gl accounts
$gl_array_list = gen_get_pull_down(TABLE_CHART_OF_ACCOUNTS, false, SHOW_FULL_GL_NAMES);
$include_header = true;
$include_footer = true;
switch ($action) {
case 'new':
define('PAGE_TITLE', BOX_INV_MAINTAIN);
$include_template = 'template_id.php';
break;
case 'edit':
define('PAGE_TITLE', BOX_INV_MAINTAIN);
$include_tabs = true;
$include_template = 'template_detail.php';
break;
default:
// build the list header
$heading_array = array(
'sku' => TEXT_SKU,
'inactive' => TEXT_INACTIVE,
'description_short' => TEXT_DESCRIPTION,
'quantity_on_order' => INV_HEADING_QTY_ON_ORDER,
'quantity_on_hand' => INV_HEADING_QTY_ON_HAND,
'quantity_on_sales_order' => INV_HEADING_QTY_ON_SO);
$result = html_heading_bar($heading_array, $_GET['list_order']);
$list_header = $result['html_code'];
$disp_order = $result['disp_order'];
// build the list for the page selected
$search_text = ($_GET['search_text'] == TEXT_SEARCH) ? '' : db_input(db_prepare_input($_GET['search_text']));
if (isset($search_text) && gen_not_null($search_text)) {
$search_fields = array('sku', 'description_short', 'description_purchase');
// hook for inserting new search fields to the query criteria.
if (is_array($extra_search_fields)) $search_fields = array_merge($search_fields, $extra_search_fields);
$search = ' where ' . implode(' like \'%' . $search_text . '%\' or ', $search_fields) . ' like \'%' . $search_text . '%\'';
} else {
$search = '';
}
$field_list = array('id', 'sku', 'inactive', 'inventory_type', 'description_short', 'item_cost', 'full_price',
'quantity_on_hand', 'quantity_on_order', 'quantity_on_sales_order');
// hook to add new fields to the query return results
if (is_array($extra_query_list_fields) > 0) $field_list = array_merge($field_list, $extra_query_list_fields);
$query_raw = "select " . implode(', ', $field_list) . " from " . TABLE_INVENTORY . $search . " order by $disp_order, sku";
$query_split = new splitPageResults($_GET['page'], MAX_DISPLAY_SEARCH_RESULTS, $query_raw, $query_numrows);
$query_result = $db->Execute($query_raw);
define('PAGE_TITLE', BOX_INV_MAINTAIN);
$include_template = 'template_main.php';
break;
}
?>