First Commit

ajax.SupplierCopy.php

@@ -0,0 +1,89 @@
+<?php
+$ValidAccess = 2010;
+require_once("include/globals.php");
+
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   logExit("Session is not active",$moduleName);
+   exit();
+}
+
+// Set userType
+$userType = "Parent";
+if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
+if ($userType != 'Admin') return;
+
+
+// Ensure that only valid user types have access to this module
+if ($userType != 'Admin') {
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   logExit($error_message);
+   exit;
+}
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+// Set default timezone
+date_default_timezone_set("Canada/Pacific");
+$now = date("Y-m-d H:i:s",time());
+
+$return_data = array();
+
+$moduleName = "ajax.SupplierCopy.php";
+// startLog($moduleName);
+
+
+// CSRF token validation
+include "include/ajax.csrfToken.php";
+
+
+// Get parameters
+$source_supplier_num = intval($_GET['source_supplier_num']);
+
+writeLog("source_supplier_num: $source_supplier_num\n");
+
+
+$suppliersTable = new Table("suppliers");
+$suppliersProductsTable = new Table("supplier_products");
+
+
+// Get source supplier
+$query = "SELECT * FROM suppliers WHERE record_num = $source_supplier_num";
+$results = db_query($query);
+
+if (db_num_rows($results) == 0) {
+   $return_data['ajax_return_code'] = -1;
+   $return_data['ajax_message'] = getLanguageText('ERRORMSG-INVALID-DATA-ENTERED');
+   echo(json_encode($return_data));
+   exit();
+}
+
+$supplier = db_fetch_assoc($results);
+$supplier['school_num'] = $base_school_num;
+
+$query = $suppliersTable->BuildInsert($supplier);
+db_query($query);
+$new_supplier_num = db_insert_id();
+
+
+// Get supplier products
+$query = "SELECT * FROM supplier_products WHERE supplier_num = $source_supplier_num";
+$results = db_query($query);
+while ($row = db_fetch_assoc($results)) {
+   $row['school_num'] = $base_school_num;
+   $row['supplier_num'] = $new_supplier_num;
+
+   $query = $suppliersProductsTable->BuildInsert($row);
+   db_query($query);
+}
+
+
+$return_data['ajax_return_code'] = 0;
+$return_data['ajax_message'] = getLanguageText('MSG-SUPPLIER-COPIED');;
+
+echo(json_encode($return_data));
+
+?>