First Commit

hotlunch_schedules_discounts.php

@@ -0,0 +1,223 @@
+<?php
+require_once("include/globals.php");
+
+if (SessionActive() != 1 || ! UserLoggedIn()) {
+   header("Location: /");
+   exit();
+}
+
+
+
+//
+// Process all actions to list and edit records
+//
+$CurrentTable = "hotlunch_schedules_discounts";
+$DeleteField  = "menu_group,order_quantity,discount_percentage";
+$dSeparator   = "<br>";
+$FormFile     = "hotlunch_schedules_discounts.form.php";
+$TitleText    = getLanguageText('TEXT-SCHEDULE-DISCOUNTS');
+$OrderBy      = "menu_date asc";
+
+// Start the template and output buffering
+startTemplate();
+$templatePageTitle = $TitleText;
+
+
+// Ensure that only valid user types have access to this module
+$AllowedUserTypes = array('SuperUser','System Administrator','Schedule Team','Application Administrator');
+if (checkPermission($AllowedUserTypes) != 1) {
+   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
+   include "form.messages.php";
+   include "hotlunch_reports.menu.php";
+   endTemplate();
+   exit();
+}
+
+
+if (array_key_exists('schedule_num',$_GET)) $schedule_num = intval($_GET['schedule_num']);
+if (array_key_exists('schedule_num',$_POST)) $schedule_num = intval($_POST['schedule_num']);
+
+// Check if this is a valid schedule
+$swhere = "";
+if ($_SESSION['UserInfo']['type'] == 'Supplier') $swhere = " and supplier_num = " . $_SESSION['UserInfo']['supplier_num'];
+$query = "select * from hotlunch_schedules " .
+         "where record_num = $schedule_num " .
+         "and school_num = $school_num $swhere";
+$results = db_query($query);
+
+if (db_num_rows($results) == 0) {
+   $error_message = getLanguageText('ERRORMSG-INVALID-SCHEDULE-NUM');
+   include "form.messages.php";
+   include "hotlunch_reports.menu.php";
+   endTemplate();
+   exit();
+}
+
+$hotlunch_schedule = db_fetch_array($results);
+$templatePageTitle .= " - " . $hotlunch_schedule['schedule_name'];
+
+
+// If this is a ScheduleTeam user check if they have permission to access this schedule
+if (in_array($_SESSION['UserInfo']['type'],array('Schedule Team','Schedule Volunteer'))) {
+   $userNum = intval($_SESSION['UserInfo']['record_num']);
+   $access = db_getVal("SELECT count(*) FROM hotlunch_schedules_people WHERE school_num = $school_num AND schedule_num = $schedule_num AND user_num = $userNum");
+
+   if (!$access || $access == 0) {
+      $error_message = getLanguageText('ERRORMSG-NO-SCHEDULE-ACCESS');
+      include "form.messages.php";
+      include "hotlunch_reports.menu.php";
+      endTemplate();
+      exit();
+   }
+}
+
+
+
+$scriptName = str_replace("/m/data1/app.hotlunches.net/","",__FILE__);
+echo("<!-- $scriptName -->\n\n");
+
+
+if (array_key_exists('naction',$_GET)) $naction = $_GET['naction'];
+if (array_key_exists('naction',$_POST)) $naction = $_POST['naction'];
+
+
+
+switch (strtolower($naction)) {
+   case "add":
+      $next_naction = "insert";
+      $active = 'Y';
+
+      include $FormFile;
+      break;
+
+   case "insert":
+      extract($_POST);
+
+      // Insert primary record
+      $table = new Table("$CurrentTable");
+      $query = $table->BuildInsert();
+      db_query($query);
+
+      $form_message = getLanguageText('RECORD-INSERTED-MSG');
+      $action = "$action&schedule_num=$schedule_num";
+      $naction = 'list';
+      header("Location: /?action=$action&naction=$naction&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
+      exit();
+
+   case "edit":
+      $next_naction = "update";
+
+      // Get current record
+      $record_num = intval($_GET['record_num']);
+      $query = "select * from $CurrentTable where record_num = $record_num";
+      $results = db_query($query);
+      if (db_num_rows($results) == 1) {
+         $row = db_fetch_array($results);
+         extract($row);
+         include $FormFile;
+      }
+      else {
+         $error_message = getLanguageText('ERRORMSG-NOT-FOUND');
+         $action = "$action&schedule_num=$schedule_num";
+         $naction = 'list';
+         header("Location: /?action=$action&naction=$naction&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
+         exit();
+      }
+      break;
+
+   case "update":
+      extract($_POST);
+
+      // Update the menu date record
+      $table = new Table("$CurrentTable");
+      $query = $table->BuildUpdate();
+      db_query($query);
+
+      $form_message = getLanguageText('RECORD-UPDATED-MSG');
+      $action = "$action&schedule_num=$schedule_num";
+      $naction = "list";
+      header("Location: /?action=$action&naction=$naction&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
+      exit();
+
+   case "delete":
+      $record_num = intval($_GET['record_num']);
+
+      $query = "select * from $CurrentTable where record_num = $record_num";
+      $results = db_query($query);
+      if (db_num_rows($results) == 1) {
+         $row = db_fetch_array($results);
+         extract($row);
+
+         $dFields = explode(",",$DeleteField);
+         $dTitle = "$TitleText ";
+         for ($i = 0; $i < count($dFields); $i++) {
+            if ($i) $dTitle .= $dSeparator;
+            $dTitle .= $row[$dFields[$i]];
+         }
+
+         $dTitle .= "<br><br>" . getLanguageText('MSG-DELETE-ALL-DATES');
+
+         $HiddenFields = "   <input type='hidden' name='schedule_num' value='$schedule_num'>";
+         include "delete.form.php";
+      }
+      else {
+         $error_message = getLanguageText('ERRORMSG-NOT-FOUND');
+         $action = "$action&schedule_num=$schedule_num";
+         $naction = 'list';
+         header("Location: /?action=$action&naction=$naction&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
+         exit();
+      }
+      break;
+
+   case "delete-confirmed":
+      $record_num = intval($_GET['record_num']);
+
+      // Delete the current record
+      $query = "delete from $CurrentTable where record_num = $record_num";
+      db_query($query);
+
+      $form_message = getLanguageText('RECORD-DELETED-MSG');
+      $action = "$action&schedule_num=$schedule_num";
+      $naction = "list";
+      header("Location: /?action=$action&naction=$naction&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
+      exit();
+
+   default:
+      $naction = "list";
+      break;
+}
+
+
+//
+// List all records if naction is "list"
+//
+if ($naction == "list") {
+
+   $scriptName = str_replace("/m/data1/app.hotlunches.net/","",__FILE__);
+   include "help.docs.php";
+
+   $columnHeaders = array(getLanguageText('TEXT-MENU-GROUP'),
+                          getLanguageText('TEXT-QUANTITY'),
+                          getLanguageText('TEXT-DISCOUNT'),
+                          getLanguageText('TEXT-AMOUNT'),
+                          getLanguageText('TEXT-EXPIRY-DATE'));
+   $columnAlign = array('center','center','center','center');
+
+   $query = "select menu_group,order_quantity,concat(discount_percentage,'%'),concat('$currencySymbol',discount_amount),expiry_date,record_num " .
+            "from hotlunch_schedules_discounts " .
+            "where school_num = $school_num " .
+            "and schedule_num = $schedule_num " .
+            "order by menu_group,order_quantity";
+   $results = db_query($query);
+
+   $message_width = $default_data_width;
+   include "form.messages.php";
+
+   $action = "$action&schedule_num=$schedule_num";
+   listData($results,$columnHeaders,$action,array(),'Y',$columnAlign);
+}
+
+include "hotlunch_reports.menu.php";
+
+endTemplate();
+?>