-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathCurrencies.php
338 lines (289 loc) · 12.6 KB
/
Currencies.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
<?php
/* $Revision: 1.20 $ */
$PageSecurity = 9;
include('includes/session.inc');
$title = _('Currencies Maintenance');
include('includes/header.inc');
include('includes/SQL_CommonFunctions.inc');
if (isset($_GET['SelectedCurrency'])){
$SelectedCurrency = $_GET['SelectedCurrency'];
} elseif (isset($_POST['SelectedCurrency'])){
$SelectedCurrency = $_POST['SelectedCurrency'];
}
$ForceConfigReload = true;
include('includes/GetConfig.php');
$FunctionalCurrency = $_SESSION['CompanyRecord']['currencydefault'];
if (isset($Errors)) {
unset($Errors);
}
$Errors = array();
if (isset($_POST['submit'])) {
//initialise no input errors assumed initially before we test
$InputError = 0;
/* actions to take once the user has clicked the submit button
ie the page has called itself with some user input */
//first off validate inputs are sensible
$i=1;
$sql="SELECT count(currabrev)
FROM currencies WHERE currabrev='".$_POST['Abbreviation']."'";
$result=DB_query($sql, $db);
$myrow=DB_fetch_row($result);
if ($myrow[0]!=0 and !isset($SelectedCurrency)) {
$InputError = 1;
prnMsg( _('The currency already exists in the database'),'error');
$Errors[$i] = 'Abbreviation';
$i++;
}
if (strlen($_POST['Abbreviation']) > 3) {
$InputError = 1;
prnMsg(_('The currency abbreviation must be 3 characters or less long and for automated currency updates to work correctly be one of the ISO4217 currency codes'),'error');
$Errors[$i] = 'Abbreviation';
$i++;
}
if (!is_numeric($_POST['ExchangeRate'])){
$InputError = 1;
prnMsg(_('The exchange rate must be numeric'),'error');
$Errors[$i] = 'ExchangeRate';
$i++;
}
if (strlen($_POST['CurrencyName']) > 20) {
$InputError = 1;
prnMsg(_('The currency name must be 20 characters or less long'),'error');
$Errors[$i] = 'CurrencyName';
$i++;
}
if (strlen($_POST['Country']) > 50) {
$InputError = 1;
prnMsg(_('The currency country must be 50 characters or less long'),'error');
$Errors[$i] = 'Country';
$i++;
}
if (strlen($_POST['HundredsName']) > 15) {
$InputError = 1;
prnMsg(_('The hundredths name must be 15 characters or less long'),'error');
$Errors[$i] = 'HundredsName';
$i++;
}
if (($FunctionalCurrency != '') and (isset($SelectedCurrency) and $SelectedCurrency==$FunctionalCurrency)){
$InputError = 1;
prnMsg(_('The functional currency cannot be modified or deleted'),'error');
}
if (strstr($_POST['Abbreviation'],"'") OR strstr($_POST['Abbreviation'],'+') OR strstr($_POST['Abbreviation'],"\"") OR strstr($_POST['Abbreviation'],'&') OR strstr($_POST['Abbreviation'],' ') OR strstr($_POST['Abbreviation'],"\\") OR strstr($_POST['Abbreviation'],'.') OR strstr($_POST['Abbreviation'],'"')) {
$InputError = 1;
prnMsg( _('The currency code cannot contain any of the following characters') . " . - ' & + \" " . _('or a space'),'error');
$Errors[$i] = 'Abbreviation';
$i++;
}
if (isset($SelectedCurrency) AND $InputError !=1) {
/*SelectedCurrency could also exist if submit had not been clicked this code would not run in this case cos submit is false of course see the delete code below*/
$sql = "UPDATE currencies SET
currency='" . $_POST['CurrencyName'] . "',
country='". $_POST['Country']. "',
hundredsname='" . $_POST['HundredsName'] . "',
rate=" .$_POST['ExchangeRate'] . "
WHERE currabrev = '" . $SelectedCurrency . "'";
$msg = _('The currency definition record has been updated');
} else if ($InputError !=1) {
/*Selected currencies is null cos no item selected on first time round so must be adding a record must be submitting new entries in the new payment terms form */
$sql = "INSERT INTO currencies (currency,
currabrev,
country,
hundredsname,
rate)
VALUES ('" . $_POST['CurrencyName'] . "',
'" . $_POST['Abbreviation'] . "',
'" . $_POST['Country'] . "',
'" . $_POST['HundredsName'] . "',
" . $_POST['ExchangeRate'] . ")";
$msg = _('The currency definition record has been added');
}
//run the SQL from either of the above possibilites
$result = DB_query($sql,$db);
if ($InputError!=1){
prnMsg( $msg,'success');
}
unset($SelectedCurrency);
unset($_POST['CurrencyName']);
unset($_POST['Country']);
unset($_POST['HundredsName']);
unset($_POST['ExchangeRate']);
unset($_POST['Abbreviation']);
} elseif (isset($_GET['delete'])) {
//the link to delete a selected record was clicked instead of the submit button
// PREVENT DELETES IF DEPENDENT RECORDS IN DebtorsMaster
$sql= "SELECT COUNT(*) FROM debtorsmaster WHERE debtorsmaster.currcode = '" . $SelectedCurrency . "'";
$result = DB_query($sql,$db);
$myrow = DB_fetch_row($result);
if ($myrow[0] > 0)
{
prnMsg(_('Cannot delete this currency because customer accounts have been created referring to this currency') .
'<br>' . _('There are') . ' ' . $myrow[0] . ' ' . _('customer accounts that refer to this currency'),'warn');
} else {
$sql= "SELECT COUNT(*) FROM suppliers WHERE suppliers.currcode = '$SelectedCurrency'";
$result = DB_query($sql,$db);
$myrow = DB_fetch_row($result);
if ($myrow[0] > 0)
{
prnMsg(_('Cannot delete this currency because supplier accounts have been created referring to this currency')
. '<br>' . _('There are') . ' ' . $myrow[0] . ' ' . _('supplier accounts that refer to this currency'),'warn');
} else {
$sql= "SELECT COUNT(*) FROM banktrans WHERE banktrans.currcode = '" . $SelectedCurrency . "'";
$result = DB_query($sql,$db);
$myrow = DB_fetch_row($result);
if ($myrow[0] > 0){
prnMsg(_('Cannot delete this currency because there are bank transactions that use this currency') .
'<br>' . ' ' . _('There are') . ' ' . $myrow[0] . ' ' . _('bank transactions that refer to this currency'),'warn');
} elseif ($FunctionalCurrency==$SelectedCurrency){
prnMsg(_('Cannot delete this currency because it is the functional currency of the company'),'warn');
} else {
//only delete if used in neither customer or supplier, comp prefs, bank trans accounts
$sql="DELETE FROM currencies WHERE currabrev='" . $SelectedCurrency . "'";
$result = DB_query($sql,$db);
prnMsg(_('The currency definition record has been deleted'),'success');
}
}
}
//end if currency used in customer or supplier accounts
}
if (!isset($SelectedCurrency)) {
/* It could still be the second time the page has been run and a record has been selected for modification - SelectedCurrency will exist because it was sent with the new call. If its the first time the page has been displayed with no parameters
then none of the above are true and the list of payment termss will be displayed with
links to delete or edit each. These will call the same page again and allow update/input
or deletion of the records*/
$sql = 'SELECT currency, currabrev, country, hundredsname, rate FROM currencies';
$result = DB_query($sql, $db);
echo '<table border=1>';
echo '<tr><td></td>
<th>' . _('ISO4217 Code') . '</th>
<th>' . _('Currency Name') . '</th>
<th>' . _('Country') . '</th>
<th>' . _('Hundredths Name') . '</th>
<th>' . _('Exchange Rate') . '</th>
<th>' . _('Ex Rate - ECB') .'</th>
</tr>';
$k=0; //row colour counter
/*Get published currency rates from Eurpoean Central Bank */
$CurrencyRatesArray = GetECBCurrencyRates();
while ($myrow = DB_fetch_row($result)) {
if ($myrow[1]==$FunctionalCurrency){
echo '<tr bgcolor=#FFbbbb>';
} elseif ($k==1){
echo '<tr class="EvenTableRows">';
$k=0;
} else {
echo '<tr class="OddTableRows">';;
$k++;
}
// Lets show the country flag
$ImageFile = 'flags/' . strtoupper($myrow[1]) . '.gif';
if(!file_exists($ImageFile)){
$ImageFile = 'flags/blank.gif';
}
if ($myrow[1]!=$FunctionalCurrency){
printf("<td><img src=\"%s\"></td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td class=number>%s</td>
<td class=number>%s</td>
<td><a href=\"%s&SelectedCurrency=%s\">%s</a></td>
<td><a href=\"%s&SelectedCurrency=%s&delete=1\">%s</a></td>
<td><a href=\"%s/ExchangeRateTrend.php?%s\">" . _('Graph') . "</a></td>
</tr>",
$ImageFile,
$myrow[1],
$myrow[0],
$myrow[2],
$myrow[3],
number_format($myrow[4],5),
number_format(GetCurrencyRate($myrow[1],$CurrencyRatesArray),5),
$_SERVER['PHP_SELF'] . '?' . SID,
$myrow[1],
_('Edit'),
$_SERVER['PHP_SELF'] . '?' . SID,
$myrow[1],
_('Delete'),
$rootpath,
SID . '&CurrencyToShow=' . $myrow[1]);
} else {
printf("<td><img src=\"%s\"></td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td class=number>%s</td>
<td colspan=4>%s</td>
</tr>",
$ImageFile,
$myrow[1],
$myrow[0],
$myrow[2],
$myrow[3],
1,
_('Functional Currency'));
}
} //END WHILE LIST LOOP
echo '</table><br>';
} //end of ifs and buts!
if (isset($SelectedCurrency)) {
echo '<div class="centre"><a href=' .$_SERVER['PHP_SELF'] . '?' . SID. '>'._('Show all currency definitions').'</a></div>';
}
echo '<br>';
if (!isset($_GET['delete'])) {
echo "<form method='post' action=" . $_SERVER['PHP_SELF'] . '?' . SID . '>';
if (isset($SelectedCurrency) AND $SelectedCurrency!='') {
//editing an existing payment terms
$sql = "SELECT currency,
currabrev,
country,
hundredsname,
rate
FROM currencies
WHERE currabrev='" . $SelectedCurrency . "'";
$ErrMsg = _('An error occurred in retrieving the currency information');;
$result = DB_query($sql, $db, $ErrMsg);
$myrow = DB_fetch_array($result);
$_POST['Abbreviation'] = $myrow['currabrev'];
$_POST['CurrencyName'] = $myrow['currency'];
$_POST['Country'] = $myrow['country'];
$_POST['HundredsName'] = $myrow['hundredsname'];
$_POST['ExchangeRate'] = $myrow['rate'];
echo '<input type="hidden" name="SelectedCurrency" VALUE="' . $SelectedCurrency . '">';
echo '<input type="hidden" name="Abbreviation" VALUE="' . $_POST['Abbreviation'] . '">';
echo '<table><tr>
<td>' . _('ISO 4217 Currency Code').':</td>
<td>';
echo $_POST['Abbreviation'] . '</td></tr>';
} else { //end of if $SelectedCurrency only do the else when a new record is being entered
if (!isset($_POST['Abbreviation'])) {$_POST['Abbreviation']='';}
echo '<table><tr>
<td>' ._('Currency Abbreviation') . ':</td>
<td><input ' . (in_array('Abbreviation',$Errors) ? 'class="inputerror"' : '' ) .' type="Text" name="Abbreviation" value="' . $_POST['Abbreviation'] . '" size=4 maxlength=3></td></tr>';
}
echo '<tr><td>'._('Currency Name').':</td>';
echo '<td>';
if (!isset($_POST['CurrencyName'])) {$_POST['CurrencyName']='';}
echo '<input ' . (in_array('CurrencyName',$Errors) ? 'class="inputerror"' : '' ) .' type="text" name="CurrencyName" size=20 maxlength=20 VALUE="' . $_POST['CurrencyName'] . '">';
echo '</td></tr>';
echo '<tr><td>'._('Country').':</td>';
echo '<td>';
if (!isset($_POST['Country'])) {$_POST['Country']='';}
echo '<input ' . (in_array('Country',$Errors) ? 'class="inputerror"' : '' ) .' type="text" name="Country" size=30 maxlength=50 VALUE="' . $_POST['Country'] . '">';
echo '</td></tr>';
echo '<tr><td>'._('Hundredths Name').':</td>';
echo '<td>';
if (!isset($_POST['HundredsName'])) {$_POST['HundredsName']='';}
echo '<input ' . (in_array('HundredsName',$Errors) ? 'class="inputerror"' : '' ) .' type="text" name="HundredsName" size=10 maxlength=15 VALUE="'. $_POST['HundredsName'].'">';
echo '</td></tr>';
echo '<tr><td>'._('Exchange Rate').':</td>';
echo '<td>';
if (!isset($_POST['ExchangeRate'])) {$_POST['ExchangeRate']='';}
echo '<input ' . (in_array('ExchangeRate',$Errors) ? 'class="inputerror"' : '' ) .' type="text" class=number name="ExchangeRate" size=10 maxlength=9 VALUE='. $_POST['ExchangeRate'].'>';
echo '</td></tr>';
echo '</table>';
echo '<div class="centre"><input type="Submit" name="submit" value='._('Enter Information').'></div>';
echo '</form>';
} //end if record deleted no point displaying form to add record
include('includes/footer.inc');
?>