forked from madjaeg/inventory_tracking_system
/
restock-validate.php
75 lines (60 loc) · 2.19 KB
/
restock-validate.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
<?php
ob_start();
session_start();
include('redirect_functions.inc.php');
?>
<!DOCTYPE html>
<body>
<?php
include('mysqli_connect.php');
$errorText = "";
//If name is empty or contains not only letters
if ( ($_POST['name'] == "") || !(ctype_alpha($_POST['name'])) ){
$_SESSION['name_errors'] = true;
$errorText .= "<br/> - Invalid name";
}
//If itemNameDropDown is empty
if ( ($_POST['itemNameDropDown'] == "") ){
$_SESSION['itemNameDropDown_errors'] = true;
$errorText .= "<br/> - Invalid item name";
}
//If amount is empty, contains not only numbers, or is less than or equal to 0
if ( ($_POST['changeAmount'] == "") || (ctype_alpha($_POST['changeAmount'])) || ($_POST['changeAmount'] <= 0) ){
$_SESSION['changeAmount_errors'] = true;
$errorText .= "<br/> - Amount cannot be less than or equal to 0";
}
//If eventDropDown is empty
if ( ($_POST['eventDropDown'] == "") ){
$_SESSION['eventDropDown_errors'] = true;
$errorText .= "<br/> - Invalid event";
}
//Makes form sticky if any errors
//*itemNameDropDown not sticky because of how number in stock col is being pulled
if ($errorText){
//Set variables
$name = $_POST['name'];
$changeAmount = $_POST['changeAmount'];
$eventDropDown = $_POST['eventDropDown'];
//Display variables back on restock.php to make form sticky
$_SESSION['name'] = $name;
$_SESSION['changeAmount'] = $changeAmount;
$_SESSION['eventDropDown'] = $eventDropDown;
}
else{
//Set variables for query
$action = $_GET['action'];
$name = $_GET['name'];
$currentItem = $_GET['itemName'];
$currentNumInStock = $_GET['currentNumInStockURL'];
$amount = $_POST['changeAmount'];
$updatedNumInStock = $_GET['currentNumInStockURL'] + $_POST['changeAmount'];
$event = $_GET['event'];
//Updates inventory list
$sql = mysqli_query($db, "UPDATE InventoryList SET numInStock='$updatedNumInStock' WHERE itemName='$currentItem'");
//Updates change log
$sql2 = mysqli_query($db, "INSERT INTO ChangeLog (action, name, itemName, numInStock, amount, updatedNumInStock, event, date_time) VALUES ('$action', '$name', '$currentItem', '$currentNumInStock', '$amount', '$updatedNumInStock', '$event', NOW())");
}
$_SESSION['form_error_text'] = $errorText;
redirect_user('restock.php');
mysqli_close($db);
?>