HotLunches/schedule.supplier_orders.php

<?php
require_once("include/globals.php");

if (SessionActive() != 1 || ! UserLoggedIn()) {
   header("Location: /");
   exit();
}


// Start the template and output buffering
startTemplate();
$templatePageTitle = "";
$headerArgs = "";



// Ensure that only valid user types have access to this module
$AllowedUserTypes = array('SuperUser','System Administrator','Application Administrator','Administration Team','Schedule Team','Supplier');
if (checkPermission($AllowedUserTypes) != 1) {
   $error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
   $action = '';
   $naction = '';
   header("Location: /?action=$action&naction=$naction$headerArgs&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
   exit();
}


//
// Process all actions to list and edit records
//
$naction = "";

if (array_key_exists('schedule_num',$_GET)) $schedule_num = intval($_GET['schedule_num']);
if (array_key_exists('schedule_num',$_POST)) $schedule_num = intval($_POST['schedule_num']);

if (!isset($schedule_num)) {
   $error_message = getLanguageText('ERRORMSG-INVALID-SCHEDULE-NUM');
   $naction = '';
   header("Location: /?action=$action&naction=$naction$headerArgs&form_message=" . urlencode($form_message) . "&error_message=" . urlencode($error_message));
   exit();
}


// Check if this is a valid schedule
$query = "select * from hotlunch_schedules " .
         "where school_num = $school_num " .
         "and record_num = $schedule_num";
$results = db_query($query);

if (db_num_rows($results) == 0) {
   echo("<br>\n");
   $error_message = getLanguageText('ERRORMSG-INVALID-SCHEDULE');
   include "form.messages.php";
   return;
}

$hotlunch_schedule = db_fetch_array($results);


// If this is a ScheduleTeam user check if they have permission to access this schedule
if (in_array($_SESSION['UserInfo']['type'],array('Schedule Team','Schedule Volunteer'))) {
   $userNum = intval($_SESSION['UserInfo']['record_num']);
   $access = db_getVal("SELECT count(*) FROM hotlunch_schedules_people WHERE school_num = $school_num AND schedule_num = $schedule_num AND user_num = $userNum");

   if (!$access || $access == 0) {
      echo("<br>\n");
      $error_message = "You are not allowed access to the requested hot lunch schedule";
      include "form.messages.php";
      return;
   }
}

$num_menu_dates = db_getVal("SELECT count(*) FROM hotlunch_menu_dates WHERE school_num = $school_num AND schedule_num = $schedule_num");
$select_size = $num_menu_dates;
if ($select_size > 10) $select_size = 10;


$templatePageTitle = getLanguageText('TEXT-SCHEDULE-SUPPLIER-ORDERS') . " - " . $hotlunch_schedule['schedule_name'];

include "hotlunch_reports.menu.php";
echo("<br>\n");


if (array_key_exists('naction',$_GET)) $naction = $_GET['naction'];
if (array_key_exists('naction',$_POST)) $naction = $_POST['naction'];

$school_num = $school_record['record_num'];

include "form.messages.php";


//
// Display the menu selection
//
?>
      <form method='post' action='/'>
       <table width='90%' class='content-table'>
        <tr class='heading'>
         <td colspan='2' align='center'><?php displayLanguageText('TEXT-SCHEDULE-SUPPLIER-ORDERS'); ?></td>
        </tr>
        <tr>
         <td colspan='2' align='center'>
          <br>
          <table class='content-table'>
           <tr class='heading'>
            <td align='center'><?php displayLanguageText('TEXT-SELECTED-MENU-DATES'); ?></td>
           </tr>
           <tr>
            <td align='left'>
             <select name='selected_menus[]' multiple size='<?php echo($select_size) ?>'>
<?php
   $query = "select * from hotlunch_menu_dates " .
            "where school_num = $school_num " .
            "and schedule_num = $schedule_num " .
            "order by sequence,menu_date";
   $results = db_query($query);

   $selected_date = 'N';
   while ($row = db_fetch_array($results)) {
      $mtitle = $row['menu_title'];
      $mdate  = $row['menu_date'];
      $record_num = $row['record_num'];

      if ($hotlunch_schedule['display_menu_date'] == 'Y') $mtitle .= " - $mdate";

      $selected = "";
      if (isset($menu_num) && $menu_num == $record_num) {
         $selected_date = 'Y';
         $selected = " selected='selected'";
      }
      $selected = " selected='selected'";
      echo("           <option value='$record_num'$selected>$mtitle</option>\n");
   }
?>
             </select>
            </td>
           </tr>
          </table>
         </td>
        </tr>
        <tr>
         <td colspan='2' align='center'>
          <br>
          <table width='600' class='content-table'>
           <tr class='heading'>
            <td align='center'><?php displayLanguageText('TEXT-SUPPLIERS'); ?></td>
           </tr>
           <tr>
            <td align='center'>
             <select name='supplier_num'>
              <option value=''>All Suppliers</option>
<?php
   $query = "select supplier_name,record_num from suppliers where school_num = $supplier_school_num AND status = 'Active' order by supplier_name";
   $results = db_query($query);

   while ($row = db_fetch_array($results)) {
      echo("           <option value='$row[record_num]'>$row[supplier_name]</option>\n");
   }
?>
             </select>
            </td>
           </tr>
          </table>
          <br>
         </td>
        </tr>
       </table>
       <br>
       <input type='hidden' name='action' value='supplier-orders-print'>
       <input type='hidden' name='schedule_num' value='<?php echo($schedule_num) ?>'>
       <input type='submit' name='button' class='btn btn--primary' value='Print Orders'>
      </form>
      <br>
<?php

?>

<?php
include "hotlunch_orders.print_buttons.php";

endTemplate();
?>