vid); $opt_box = db_get_opt_box($user->vid); // ========== ACTIONS START =================================================== switch ($submit = form_get_action()) { case NULL: break; case 'add': $action = ACT_ADD; break; case 'view': $action = ACT_VIEW; break; case 'edit': $action = ACT_EDIT; break; case 'del': $action = ACT_DELETE; break; case 'filter': $action = ACT_DEFAULT; break; case 'insert': $p[':invname'] = gpc_get_string($_POST, 'invname'); $p[':number'] = gpc_get_int($_POST, 'number'); $p[':boxtype'] = gpc_get_string($_POST, 'boxtype'); $p[':sid'] = gpc_get_int($_POST, 'sid'); $p[':boxid'] = gpc_get_int($_POST, 'boxid'); $p[':invcond'] = 'good'; $id = db_exec_insert('inventory', $p); $action = ACT_VIEW; break; case 'update': $p[':invid'] = $id; $p[':invname'] = gpc_get_string($_POST, 'invname'); $p[':number'] = gpc_get_int($_POST, 'number'); $p[':boxtype'] = gpc_get_string($_POST, 'boxtype'); $p[':sid'] = gpc_get_int($_POST, 'sid'); $p[':boxid'] = gpc_get_int($_POST, 'boxid'); $p[':weight'] = min(gpc_get_float($_POST, 'weight'), 999.99); // limit max value $p[':price'] = gpc_get_currency($_POST, 'price'); $p[':purchdate'] = gpc_get_date($_POST, 'purchdate'); $p[':invcond'] = gpc_get_string($_POST, 'invcond'); $p[':remarks'] = gpc_get_string($_POST, 'remarks', 150); db_exec_update('inventory', $p, 'invid'); $action = ACT_VIEW; break; case 'delete': // Security token needed! if (gpc_get_string($_POST, 'token', 16) != $_SESSION['token']) { $g_error->Add(_('Delete prohibited, invalid security token!')); $action = ACT_VIEW; break; } unset($_SESSION['token']); $sth = $pdo->prepare("DELETE FROM inventory WHERE invid=?"); $sth->execute([$id]); $g_message->Add(sprintf(_('Deleted inventory no. %d'), $id)); $action = ACT_DEFAULT; break; default: $g_error->Add(sprintf(_('Unknown function!'), $submit)); $valid = FALSE; } // ========== ACTIONS END ===================================================== require 'header.php'; // ========== PAGE CONTENT ==================================================== if ($action == ACT_DEFAULT): // ========== VARIANT: default behavior ======================================= $flt = db_get_filter($user->id, 201); /* The only way to find out whether the inventory is on the current boat is to use the box assignment. But this is also intentional to allow easy rearrangement. */ echo "

$pagetitle

\n"; $sql = "SELECT i.invid, i.invname, i.number, i.invcond, s.sname AS container " . "FROM inventory AS i JOIN storage AS s ON (i.boxtype='storage' AND i.sid=s.sid)" . "WHERE s.vid=:vid " . "UNION " . "SELECT i.invid, i.invname, i.number, i.invcond, b.label AS container " . "FROM inventory AS i JOIN box AS b ON (i.boxtype='box' AND i.boxid=b.boxid) " . " JOIN storage AS s ON (b.sid=s.sid) " . "WHERE s.vid=:vid " . "ORDER BY invname"; $sth = $pdo->prepare($sql); $sth->bindValue(':vid', $user->vid, PDO::PARAM_INT); $sth->execute(); $res = $sth->fetchAll(); echo '', "\n"; echo "\n"; echo "\n"; echo "\n"; echo ""; echo ""; echo ""; echo "\n"; echo "\n"; foreach ($res as $row) { echo "\n"; echo '\n"; echo "\n"; echo "\n"; echo "\n"; form_action_buttons($g_scriptname, $row['invid']); echo "\n"; } // Table summary echo "\n"; echo '', "\n"; echo "\n"; echo "
" . _('Name') . "" . _('Container') . "" . _('Number') . "" . _('Condition') . "
', $row['invname'], "". $row['container'] ."". $row['number'] ."". $row['invcond'] ."
', sprintf(_('%d records'), count($res)), '
\n"; form_add_button($g_scriptname); elseif ($action == ACT_ADD): // ========== VARIANT: add record ============================================= echo '

', _('Add Inventory'), "

\n"; ?>
prepare($sql); $sth->execute([$id]); $inventory = $sth->fetch(PDO::FETCH_OBJ); // boxtype can be storage or box switch ($inventory->boxtype) { case 'storage': $sql = "SELECT sname, vid FROM storage WHERE sid=?"; $sth = $pdo->prepare($sql); $sth->execute([$inventory->sid]); $row = $sth->fetch(); $storagename = $row['sname']; $vid = $row['vid']; break; case 'box': // Future: Boxes can also be nested! // Recursive Function "get_storage_for_box()" $sql = "SELECT sid, label FROM box WHERE boxid=?"; // TODO Load additional box data $sth = $pdo->prepare($sql); $sth->execute([$inventory->boxid]); $box = $sth->fetch(); $sql = "SELECT sname, vid FROM storage WHERE sid=?"; $sth = $pdo->prepare($sql); $sth->execute([$box['sid']]); $row = $sth->fetch(); $storagename = $row['sname']; $vid = $row['vid']; break; } echo '

', $inventory->invname, "

\n"; echo '', "\n"; echo '\n"; // Container with link echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "
', _('Box type'),"", $inventory->boxtype, "
", _('Container'),"", sprintf(_('%s in %s'), $box['label'], $storagename); echo "
", _('Location ID'), "", $inventory->locationid, "
", _('Number'), "", $inventory->number, "
", _('Weight'), "", format_float($inventory->weight, 2, 'kg'), "
", _('Price'), "", format_currency($inventory->price), "
", _('Purchase date'), "", $inventory->purchdate, "
", _('Condition'), "", $inventory->invcond, "
", _('Remarks'), "", $inventory->remarks, "
\n"; form_view_buttons($g_scriptname, $id); elseif ($action == ACT_EDIT): // ========== VARIANT: edit single record ===================================== $sql = "SELECT invname, boxtype, sid, boxid, number, weight, price, purchdate, " . " invcond, remarks " . "FROM inventory " . "WHERE invid=?"; $sth = $pdo->prepare($sql); $sth->execute([$id]); $inventory = $sth->fetch(PDO::FETCH_OBJ); ?>

sid); form_create_select('boxid', _('Box'), $opt_box, $inventory->boxid); ?>
\n"; elseif ($action == ACT_DELETE): // ========== VARIANT: delete record ========================================== $sql = "SELECT invname FROM inventory WHERE invid=?"; $sth = $pdo->prepare($sql); $sth->execute([$id]); $inventory = $sth->fetch(PDO::FETCH_OBJ); echo '

', _('Delete Inventory'), "

\n"; echo '

', sprintf(_('Record no. %d'), $id), "

\n"; echo '

Name: ', $inventory->invname, "

"; echo '

', _('Deleting an inventory item is final. There is no way back. Only delete if you are absolute sure.'), "

\n"; $_SESSION['token'] = bin2hex(random_bytes(8)); form_delete_buttons($g_scriptname, $id, $_SESSION['token']); else: // ========== ERROR UNKNOWN VARIANT =========================================== echo '

', _('Unknown function call: Please report to system development!'), "

\n"; endif; // $action == ... // ========== END OF VARIANTS ================================================= include 'footer.php';