90 lines
2.1 KiB
PHP
90 lines
2.1 KiB
PHP
<?php
|
|
$ValidAccess = 2010;
|
|
require_once("include/globals.php");
|
|
|
|
|
|
if (SessionActive() != 1 || ! UserLoggedIn()) {
|
|
logExit("Session is not active",$moduleName);
|
|
exit();
|
|
}
|
|
|
|
// Set userType
|
|
$userType = "Parent";
|
|
if (array_key_exists('type', $_SESSION['UserInfo']) && in_array($_SESSION['UserInfo']['type'],$AllAdminUserTypes)) $userType = "Admin";
|
|
if ($userType != 'Admin') return;
|
|
|
|
|
|
// Ensure that only valid user types have access to this module
|
|
if ($userType != 'Admin') {
|
|
$error_message = getLanguageText('ERRORMSG-ACCESS-DENIED');
|
|
logExit($error_message);
|
|
exit;
|
|
}
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Set default timezone
|
|
date_default_timezone_set("Canada/Pacific");
|
|
$now = date("Y-m-d H:i:s",time());
|
|
|
|
$return_data = array();
|
|
|
|
$moduleName = "ajax.SupplierCopy.php";
|
|
// startLog($moduleName);
|
|
|
|
|
|
// CSRF token validation
|
|
include "include/ajax.csrfToken.php";
|
|
|
|
|
|
// Get parameters
|
|
$source_supplier_num = intval($_GET['source_supplier_num']);
|
|
|
|
writeLog("source_supplier_num: $source_supplier_num\n");
|
|
|
|
|
|
$suppliersTable = new Table("suppliers");
|
|
$suppliersProductsTable = new Table("supplier_products");
|
|
|
|
|
|
// Get source supplier
|
|
$query = "SELECT * FROM suppliers WHERE record_num = $source_supplier_num";
|
|
$results = db_query($query);
|
|
|
|
if (db_num_rows($results) == 0) {
|
|
$return_data['ajax_return_code'] = -1;
|
|
$return_data['ajax_message'] = getLanguageText('ERRORMSG-INVALID-DATA-ENTERED');
|
|
echo(json_encode($return_data));
|
|
exit();
|
|
}
|
|
|
|
$supplier = db_fetch_assoc($results);
|
|
$supplier['school_num'] = $base_school_num;
|
|
|
|
$query = $suppliersTable->BuildInsert($supplier);
|
|
db_query($query);
|
|
$new_supplier_num = db_insert_id();
|
|
|
|
|
|
// Get supplier products
|
|
$query = "SELECT * FROM supplier_products WHERE supplier_num = $source_supplier_num";
|
|
$results = db_query($query);
|
|
while ($row = db_fetch_assoc($results)) {
|
|
$row['school_num'] = $base_school_num;
|
|
$row['supplier_num'] = $new_supplier_num;
|
|
|
|
$query = $suppliersProductsTable->BuildInsert($row);
|
|
db_query($query);
|
|
}
|
|
|
|
|
|
$return_data['ajax_return_code'] = 0;
|
|
$return_data['ajax_message'] = getLanguageText('MSG-SUPPLIER-COPIED');;
|
|
|
|
echo(json_encode($return_data));
|
|
|
|
?>
|