';
+echo '\n";
echo '', $i;
echo '', "\n";
+ // icons for some flags
+ $flags = explode(',', $row['flags']);
+ if (in_array('historic', $flags)) {
+ echo '';
+ }
+ if (in_array('deleted', $flags)) {
+ echo '';
+ }
echo " \n";
echo "", $row['compname'], " \n";
echo "", $opt_comptype[$row['comptype']], " \n";
@@ -251,7 +261,7 @@ elseif ($action == ACT_VIEW):
// ========== VARIANT: view single record =====================================
$sql = "SELECT compname, comptype, comptype2, shortname, street, zip, city,"
- . " country, contact, phone, email, web, customerno, contractno, remarks "
+ . " country, contact, phone, email, web, customerno, contractno, remarks, flags "
. "FROM company "
. "WHERE compid=?";
$sth = $pdo->prepare($sql);
@@ -283,6 +293,7 @@ echo make_weblink($company->web), ' ', $company->web, " \n";
echo '', _('Customer no.')," ", $company->customerno, " ', _('Contract no.')," ", $company->contractno, " ', _('Remarks')," ", $company->remarks, " ', _('Flags')," ", $company->flags, "
+flags));
+?>
diff --git a/webgui/documents.php b/webgui/documents.php
index d7156c3..4eb8de2 100644
--- a/webgui/documents.php
+++ b/webgui/documents.php
@@ -6,6 +6,14 @@
* SPDX-License-Identifier: WTFPL
******************************************************************************/
+/*
+doctype icons
+ generic: file-earmark
+ image: file-earmark-image
+ drawing: file-earmark-easel
+ pdf: file-earmark-pdf
+*/
+
require 'globals.inc';
require 'lib/gpc.inc';
require 'lib/fileutils.inc';
@@ -143,6 +151,12 @@ switch ($submit = form_get_action()) {
break;
case 'delete':
+ // check user rights
+ if ($user->role == ROLE_SAILOR) {
+ $g_error->Add(_('User level allows no deletion!'));
+ $action = ACT_VIEW;
+ break;
+ }
// Security token needed!
if (gpc_get_string($_POST, 'token', 16) != $_SESSION['token']) {
$g_error->Add(_('Delete prohibited, invalid security token!'));
@@ -189,21 +203,18 @@ switch ($submit = form_get_action()) {
$p[':docid'] = $id;
$p[':refid'] = gpc_get_int($_POST, 'refid');
$p[':reftype'] = gpc_get_enum($_POST, 'reftype', $opt_reftype, 'equipment');
- /* $sql = "INSERT INTO docref "
- . " (docid, refid, reftype) "
- . "VALUES "
- . " (:docid, :refid, :reftype)";
- $sth = $pdo->prepare($sql);
- $sth->bindValue(':docid', $id, PDO::PARAM_INT);
- $sth->bindValue(':refid', $refid, PDO::PARAM_INT);
- $sth->bindValue(':reftype', $reftype, PDO::PARAM_STR);
- $sth->execute(); */
db_exec_insert('docref', $p);
$action = ACT_VIEW;
break;
case 'delref':
// remove only link, not critical so get without token is ok
+ // check user rights
+ if ($user->role == ROLE_SAILOR) {
+ $g_error->Add(_('User level allows no deletion!'));
+ $action = ACT_VIEW;
+ break;
+ }
$drid = gpc_get_int($_GET, 'drid');
$sql = "DELETE FROM docref WHERE drid=?";
$sth = $pdo->prepare($sql);
@@ -582,6 +593,18 @@ foreach ($sth->fetchAll() as $row) {
$compids[] = $row['refid'];
}
+// Boxes
+$boxids = array();
+$sql = "SELECT drid, reftype, refid, CONCAT_WS(' - ', label, NULLIF(content, '')) AS target "
+ . "FROM docref INNER JOIN box ON (docref.reftype='box' AND docref.refid=box.boxid) "
+ . "WHERE docid=?";
+$sth = $pdo->prepare($sql);
+$sth->execute([$id]);
+foreach ($sth->fetchAll() as $row) {
+ $references[] = $row;
+ $boxids[] = $row['refid'];
+}
+
echo '';
+
echo '', "\n";
echo '
\n";
form_view_buttons($g_scriptname, $id);
+echo '
'; // Column break
+echo '| ', _('Box type')," | ", ($opt_boxtype[$box->boxtype] ?? ''), " |
|---|---|
| ', _('Content')," | ", $box->content, " |
', "\n";
+
+echo '
'; // container
+
// Inventory in box
// WIP
$sql = "SELECT invid, invname, weight, number FROM inventory WHERE conttype='box' AND boxid=?";
diff --git a/webgui/company.php b/webgui/company.php
index 350db6e..0aa05ab 100644
--- a/webgui/company.php
+++ b/webgui/company.php
@@ -63,6 +63,8 @@ switch ($submit = form_get_action()) {
$p[':customerno'] = gpc_get_string($_POST, 'customerno', 20);
$p[':contractno'] = gpc_get_string($_POST, 'contractno', 20);
$p[':remarks'] = gpc_get_string($_POST, 'remarks', 150);
+ $allowed = db_load_enum('company', 'flags');
+ $p[':flags'] = gpc_get_set($_POST, 'flags', $allowed, true, NULL);
db_exec_update('company', $p, 'compid');
$action = ACT_VIEW;
break;
@@ -136,7 +138,7 @@ $page = gpc_get_int($_REQUEST, 'p', 1);
$rows_pp = gpc_get_int($_REQUEST, 'n', $user->rows_pp);
$lastpage = ceil($numrows/$rows_pp);
-$sql = "SELECT compid, compname, comptype, remarks "
+$sql = "SELECT compid, compname, comptype, remarks, flags "
. "FROM company";
if ($where) $sql .= ' WHERE ' . $where;
$sql .= $order;
@@ -212,6 +214,14 @@ foreach ($res as $row) {
echo "', "\n";
+echo '
'; // row
+echo '', _('Images'), "
\n";
+echo '', "\n";
+
+$sql = "SELECT d.docid, d.title "
+ . "FROM docref AS r INNER JOIN document AS d using (docid) "
+ . "WHERE d.doctype='picture' AND r.reftype='box' AND r.refid=? "
+ . "ORDER BY d.title";
+$sth = $pdo->prepare($sql);
+$sth->execute([$id]);
+$res = $sth->fetchAll();
+// TODO hübsche Darstellung
+$doccount = 0;
+foreach ($res as $row) {
+ $doccount += 1;
+ echo '
'; // col
+echo '';
+ echo '';
+// echo '
';
+ echo '![', $row['title'], '](dl.php?id=', $row['docid'], ')
';
+ echo "\n";
+ // additionally direct download and go to document details page
+ echo '\n";
+ echo "\n"; // card-body
+echo "
\n"; // card
+
+echo '