- Updated authorization checks in product management, product attributes, configurations, software, and user management files to use 'permissions' for consistency. - Ensured that all relevant pages correctly check user permissions for read, update, delete, and create actions. - Adjusted session variable references to align with the new permissions structure across various modules.
306 lines
13 KiB
PHP
306 lines
13 KiB
PHP
<?php
|
|
defined(page_security_key) or exit;
|
|
|
|
$page = 'account';
|
|
//Check if allowed
|
|
if (isAllowed($page,$_SESSION['authorization']['permissions'],$_SESSION['authorization']['permission'],'R') === 0){
|
|
header('location: index.php');
|
|
exit;
|
|
}
|
|
//PAGE Security
|
|
$update_allowed = isAllowed($page ,$_SESSION['authorization']['permissions'],$_SESSION['authorization']['permission'],'U');
|
|
$delete_allowed = isAllowed($page ,$_SESSION['authorization']['permissions'],$_SESSION['authorization']['permission'],'D');
|
|
$create_allowed = isAllowed($page ,$_SESSION['authorization']['permissions'],$_SESSION['authorization']['permission'],'C');
|
|
|
|
// Default input product values
|
|
$account = [
|
|
'rowID' => '',
|
|
'status' => 'Lead',
|
|
'accountdetails' => [
|
|
'billcompany' => '',
|
|
'billfirstname' => '',
|
|
'billlastname' => '',
|
|
'billemail' => '',
|
|
'billphonenumber' => '',
|
|
'contactfirstname' => '',
|
|
'contactlastname' => '',
|
|
'contactemail' => '',
|
|
'contactphonenumber' => '',
|
|
'billstreetadress' => '',
|
|
'billpostalcode' => '',
|
|
'billdistrict' => '',
|
|
'billcity' => '',
|
|
'billstate' => '',
|
|
'billcountry' => '',
|
|
'streetadress' => '',
|
|
'postalcode' => '',
|
|
'district' => '',
|
|
'city' => '',
|
|
'state' => '',
|
|
'country' => '',
|
|
'vatnumber' => '',
|
|
'loghandlername' => '',
|
|
'loghandleraccount' => ''
|
|
],
|
|
'created' => $date,
|
|
'createdby' => $_SESSION['authorization']['clientID'],
|
|
'accounthierarchy' => [
|
|
'salesid' => '',
|
|
'soldto' => ''
|
|
]
|
|
];
|
|
|
|
//defaults
|
|
$accountdetails = json_decode(json_encode($account['accountdetails'],JSON_UNESCAPED_UNICODE));
|
|
$accounthierarchy = json_decode(json_encode($account['accounthierarchy'],JSON_UNESCAPED_UNICODE));
|
|
|
|
$rowID = $_GET['rowID'] ?? '';
|
|
|
|
if ($rowID !=''){
|
|
$url = 'index.php?page=account&rowID='.$rowID.'';
|
|
} else {
|
|
$url = 'index.php?page=accounts';
|
|
}
|
|
|
|
if (isset($_GET['rowID'])) {
|
|
// ID param exists, edit an existing product
|
|
//CALL TO API
|
|
$api_url = '/v1/accounts/rowID='.$rowID;
|
|
$responses = ioServer($api_url,'');
|
|
//Decode Payload
|
|
if (!empty($responses)){$responses = decode_payload($responses);}else{$responses = null;}
|
|
|
|
$account = json_decode(json_encode($responses[0]), true);
|
|
$accountdetails = json_decode($account['accountdetails']);
|
|
$accounthierarchy = json_decode($account['accounthierarchy']);
|
|
|
|
if ($update_allowed === 1){
|
|
if (isset($_POST['submit'])) {
|
|
//GET ALL POST DATA
|
|
$data = json_encode($_POST, JSON_UNESCAPED_UNICODE);
|
|
//Secure data
|
|
$payload = generate_payload($data);
|
|
//API call
|
|
$responses = ioServer('/v1/accounts', $payload);
|
|
if ($responses === 'NOK'){
|
|
|
|
} else {
|
|
header('Location: index.php?page=account&rowID='.$rowID.'&success_msg=2');
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($delete_allowed === 1){
|
|
if (isset($_POST['delete'])) {
|
|
//GET ALL POST DATA
|
|
$data = json_encode($_POST , JSON_UNESCAPED_UNICODE);
|
|
//Secure data
|
|
$payload = generate_payload($data);
|
|
//API call
|
|
$responses = ioServer('/v1/accounts', $payload);
|
|
// Redirect and delete product
|
|
if ($responses === 'NOK'){
|
|
|
|
} else {
|
|
header('Location: index.php?page=accounts&success_msg=3');
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
} else {
|
|
// Create a new product
|
|
if (isset($_POST['submit']) && $create_allowed === 1) {
|
|
//GET ALL POST DATA
|
|
$data = json_encode($_POST, JSON_UNESCAPED_UNICODE);
|
|
//Secure data
|
|
$payload = generate_payload($data);
|
|
//API call
|
|
$responses = ioServer('/v1/accounts', $payload);
|
|
if ($responses === 'NOK'){
|
|
|
|
} else {
|
|
header('Location: index.php?page=accounts&success_msg=1');
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
template_header('Account', 'account', 'manage');
|
|
|
|
$view ='
|
|
<form action="" method="post">
|
|
<div class="content-title responsive-flex-wrap responsive-pad-bot-3">
|
|
<h2 class="responsive-width-100"><?=$page?>'.$account_h2.'</h2>
|
|
<a href="'.$url .'" class="btn alt mar-right-2">←</a>
|
|
';
|
|
|
|
if ($delete_allowed === 1){
|
|
$view .= '<input type="submit" name="delete" value="X" class="btn red mar-right-2" onclick="return confirm(\'Are you sure you want to delete this account?\')">';
|
|
}
|
|
if ($update_allowed === 1){
|
|
$view .= '<input type="submit" name="submit" value="💾" class="btn">';
|
|
}
|
|
|
|
$view .= '</div>';
|
|
|
|
$view .= '<div class="tabs">
|
|
<a href="#" class="active">'.$view_account_information.'</a>
|
|
</div>';
|
|
//Define Permission & Profile
|
|
|
|
$view .= '<div class="content-block tab-content active">
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_status.'</label>
|
|
<select id="status" name="status">
|
|
<option value="'.$accountstatus_0.'" '.($account['status']==$accountstatus_0?' selected':'').'>'.$accountstatus_0.'</option>
|
|
<option value="'.$accountstatus_1.'" '.($account['status']==$accountstatus_1?' selected':'').'>'.$accountstatus_1.'</option>
|
|
<option value="'.$accountstatus_2.'" '.($account['status']==$accountstatus_2?' selected':'').'>'.$accountstatus_2.'</option>
|
|
</select>
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_name.'</label>
|
|
<input name="accountdetails[billcompany]" type="text" value="'.$accountdetails->billcompany.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_firstname.'</label>
|
|
<input name="accountdetails[billfirstname]" type="text" value="'.$accountdetails->billfirstname.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_lastname.'</label>
|
|
<input name="accountdetails[billlastname]" type="text" value="'.$accountdetails->billlastname.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_email.'</label>
|
|
<input name="accountdetails[billemail]" type="text" value="'.$accountdetails->billemail.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_phone.'</label>
|
|
<input name="accountdetails[billphonenumber]" type="text" value="'.$accountdetails->billphonenumber.'">
|
|
</div>
|
|
</div>';
|
|
|
|
$view .= '<div class="tabs">
|
|
<a href="#">'.$view_account_contact.'</a>
|
|
</div>
|
|
<div class="content-block tab-content">
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_contactfirstname.'</label>
|
|
<input name="accountdetails[contactfirstname]" type="text" value="'.$accountdetails->contactfirstname.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_contactlastname.'</label>
|
|
<input name="accountdetails[contactlastname]" type="text" value="'.$accountdetails->contactlastname.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_contactemail.'</label>
|
|
<input name="accountdetails[contactemail]" type="text" value="'.$accountdetails->contactemail.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_contactphonenumber.'</label>
|
|
<input name="accountdetails[contactphonenumber]" type="text" value="'.$accountdetails->contactphonenumber.'">
|
|
</div>
|
|
</div>';
|
|
|
|
$view .= '<div class="tabs">
|
|
<a href="#">'.$account_billing.'</a>
|
|
</div>
|
|
<div class="content-block tab-content">
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_billstreetadress.'</label>
|
|
<input name="accountdetails[billstreetadress]" type="text" value="'.$accountdetails->billstreetadress.'">
|
|
<input name="accountdetails[billdistrict]" type="text" value="'.$accountdetails->billdistrict.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_billpostalcode.'</label>
|
|
<input name="accountdetails[billpostalcode]" type="text" value="'.$accountdetails->billpostalcode.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_billcity.'</label>
|
|
<input name="accountdetails[billcity]" type="text" value="'.$accountdetails->billcity.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_billstate.'</label>
|
|
<input name="accountdetails[billstate]" type="text" value="'.$accountdetails->billstate.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_billcountry.'</label>
|
|
<input name="accountdetails[billcountry]" type="text" value="'.$accountdetails->billcountry.'">
|
|
</div>
|
|
</div>';
|
|
|
|
$view .= '<div class="tabs">
|
|
<a href="#">'.$account_shipping.'</a>
|
|
</div>
|
|
<div class="content-block tab-content">
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_streetadress.'</label>
|
|
<input name="accountdetails[streetadress]" type="text" value="'.$accountdetails->streetadress.'">
|
|
<input name="accountdetails[district]" type="text" value="'.$accountdetails->district.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_postalcode.'</label>
|
|
<input name="accountdetails[postalcode]" type="text" value="'.$accountdetails->postalcode.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_city.'</label>
|
|
<input name="accountdetails[city]" type="text" value="'.$accountdetails->city.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_state.'</label>
|
|
<input name="accountdetails[state]" type="text" value="'.$accountdetails->state.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_country.'</label>
|
|
<input name="accountdetails[country]" type="text" value="'.$accountdetails->country.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_vatnumber.'</label>
|
|
<input name="accountdetails[vatnumber]" type="text" value="'.$accountdetails->vatnumber.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_loghandlername.'</label>
|
|
<input name="accountdetails[loghandlername]" type="text" value="'.$accountdetails->loghandlername.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$account_loghandleraccount.'</label>
|
|
<input name="accountdetails[loghandleraccount]" type="text" value="'.$accountdetails->loghandleraccount.'">
|
|
</div>
|
|
</div>';
|
|
|
|
//Dropdown
|
|
|
|
$partner_data = json_decode($_SESSION['authorization']['partnerhierarchy']);
|
|
$soldto_dropdown = listPartner('soldto',$_SESSION['authorization']['permission'],$accounthierarchy->soldto,'');
|
|
|
|
$view .= '<div class="tabs">
|
|
<a href="#">'.$tab3.'</a>
|
|
</div>
|
|
<div class="content-block tab-content">
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$general_salesid.'</label>
|
|
<input name="salesid" type="text" value="'.$partner_data->salesid.'">
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$general_soldto.'</label>
|
|
'.$soldto_dropdown.'
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$general_created.'</label>
|
|
<input id="name" type="text" name="" placeholder="'.$general_created.'" value="'.$account['created'].'" readonly>
|
|
</div>
|
|
<div class="form responsive-width-100">
|
|
<label for="">'.$general_createdby.'</label>
|
|
<input id="name" type="text" name="" placeholder="'.$general_createdby.'" value="'.$account['createdby'].'" readonly>
|
|
<input type="hidden" name="rowID" value="'.$account['rowID'].'" readonly>
|
|
</div>
|
|
</div>';
|
|
|
|
|
|
$view .= '</form>';
|
|
|
|
|
|
//Output
|
|
echo $view;
|
|
template_footer()?>
|