AddCustomerContacts.php

<?php

/* Adds customer contacts */

require(__DIR__ . '/includes/session.php');

$Title = __('Customer Contacts');
$ViewTopic = 'AccountsReceivable';
$BookMark = 'AddCustomerContacts';
include(__DIR__ . '/includes/header.php');

include(__DIR__ . '/includes/SQL_CommonFunctions.php');

if (isset($_GET['Id'])) {
	$Id = (int)$_GET['Id'];
} elseif (isset($_POST['Id'])) {
	$Id = (int)$_POST['Id'];
}
if (isset($_POST['DebtorNo'])) {
	$DebtorNo = $_POST['DebtorNo'];
} elseif (isset($_GET['DebtorNo'])) {
	$DebtorNo = $_GET['DebtorNo'];
}
echo '<a class="noPrint toplink" href="' . $RootPath . '/Customers.php?DebtorNo=' . $DebtorNo . '">' . __('Back to Customers') . '</a><br />';
$SQLname = "SELECT name FROM debtorsmaster WHERE debtorno='" . $DebtorNo . "'";
$Result = DB_query($SQLname);
$MyRow = DB_fetch_array($Result);
if (!isset($_GET['Id'])) {
	echo '<p class="page_title_text"><img src="'.$RootPath.'/css/'.$Theme.'/images/maintenance.png" title="' . __('Search') . '" alt="" />' . ' ' . __('Contacts for Customer') . ': <b>' . htmlspecialchars($MyRow['name'], ENT_QUOTES, 'UTF-8') . '</b></p>';
} else {
	echo '<p class="page_title_text"><img src="'.$RootPath.'/css/'.$Theme.'/images/maintenance.png" title="' . __('Search') . '" alt="" />' . ' ' . __('Edit contact for'). ': <b>' . htmlspecialchars($MyRow['name'], ENT_QUOTES, 'UTF-8') . '</b></p>';
}
if ( isset($_POST['submit']) ) {

	//initialise no input errors assumed initially before we test
	$InputError = 0;
	/* actions to take once the user has clicked the submit button
	ie the page has called itself with some user input */

	//first off validate inputs sensible
	if (isset($_POST['Con_ID']) AND !is_long((int)$_POST['Con_ID'])) {
		$InputError = 1;
		prnMsg( __('The Contact ID must be an integer.'), 'error');
	} elseif (mb_strlen($_POST['ContactName']) >40) {
		$InputError = 1;
		prnMsg( __('The contact name must be forty characters or less long'), 'error');
	} elseif (trim($_POST['ContactName']) == '') {
		$InputError = 1;
		prnMsg( __('The contact name may not be empty'), 'error');
	} elseif (!IsEmailAddress($_POST['ContactEmail']) AND mb_strlen($_POST['ContactEmail']) > 0) {
		$InputError = 1;
		prnMsg( __('The contact email address is not a valid email address'), 'error');
	}
    
    $Msg = '';

	if (isset($Id) AND ($Id AND $InputError != 1)) {
		$SQL = "UPDATE custcontacts SET contactname='" . $_POST['ContactName'] . "',
										role='" . $_POST['ContactRole'] . "',
										phoneno='" . $_POST['ContactPhone'] . "',
										notes='" . $_POST['ContactNotes'] . "',
										email='" . $_POST['ContactEmail'] . "',
										statement='" . $_POST['StatementAddress'] . "',
										mobile='" . $_POST['ContactMobile'] . "',
										department='" . $_POST['ContactDepartment'] . "',
										linkedin='" . $_POST['ContactLinkedIn'] . "',
										active='" . (isset($_POST['ContactActive']) ? '1' : '0') . "'
					WHERE contid='".$Id."'";
		$Msg = __('Customer Contacts') . ' ' . $DebtorNo . ' ' . __('has been updated');
	} elseif ($InputError != 1) {

		$SQL = "INSERT INTO custcontacts (debtorno,
										contactname,
										role,
										phoneno,
										notes,
										email,
										statement,
										mobile,
										department,
										linkedin,
										active)
				VALUES ('" . $DebtorNo. "',
						'" . $_POST['ContactName'] . "',
						'" . $_POST['ContactRole'] . "',
						'" . $_POST['ContactPhone'] . "',
						'" . $_POST['ContactNotes'] . "',
						'" . $_POST['ContactEmail'] . "',
						'" . $_POST['StatementAddress'] . "',
						'" . $_POST['ContactMobile'] . "',
						'" . $_POST['ContactDepartment'] . "',
						'" . $_POST['ContactLinkedIn'] . "',
						'" . (isset($_POST['ContactActive']) ? '1' : '0') . "')";
		$Msg = __('The contact record has been added');
	}

	if ($InputError != 1) {
		$Result = DB_query($SQL);
				//echo '<br />' . $SQL;

		prnMsg($Msg, 'success');
		unset($Id);
		unset($_POST['ContactName']);
		unset($_POST['ContactRole']);
		unset($_POST['ContactPhone']);
		unset($_POST['ContactNotes']);
		unset($_POST['ContactEmail']);
		unset($_POST['Con_ID']);
	}
} elseif (isset($_GET['delete']) AND $_GET['delete']) {
//the link to delete a selected record was clicked instead of the submit button

// PREVENT DELETES IF DEPENDENT RECORDS IN 'SalesOrders'

	$SQL = "DELETE FROM custcontacts
			WHERE contid='" . $Id . "'
			AND debtorno='" . $DebtorNo . "'";
	$Result = DB_query($SQL);

	echo '<br />';
	prnMsg( __('The contact record has been deleted'), 'success');
	unset($Id);
	unset($_GET['delete']);

}

if (isset($Id)) {
	echo '<div class="centre"><a href="' . htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '?DebtorNo='.$DebtorNo .'">' . __('Review all contacts for this Customer') . '</a></div>';
}

if (!isset($_GET['delete'])) {
	$DepartmentOptions = array();
	$SQL = "SELECT description
			FROM departments
			ORDER BY description";
	$Result = DB_query($SQL);
	while ($MyRow = DB_fetch_array($Result)) {
		$DepartmentOptions[] = $MyRow['description'];
	}

	echo '<form method="post" action="' . htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '?DebtorNo='.$DebtorNo.'">',
		'<div>',
		'<input type="hidden" name="FormID" value="' . $_SESSION['FormID'] . '" />';

	if (isset($Id)) {// Edit Customer Contact Details.
		$SQL = "SELECT contid,
						debtorno,
						contactname,
						role,
						phoneno,
						notes,
						email,
						mobile,
						department,
						linkedin,
						active
					FROM custcontacts
					WHERE contid='".$Id."'
						AND debtorno='".$DebtorNo."'";

		$Result = DB_query($SQL);
		$MyRow = DB_fetch_array($Result);

		$_POST['Con_ID'] = $MyRow['contid'];
		$_POST['ContactName'] = $MyRow['contactname'];
		$_POST['ContactRole'] = $MyRow['role'];
		$_POST['ContactPhone']  = $MyRow['phoneno'];
		$_POST['ContactEmail'] = $MyRow['email'];
		$_POST['ContactNotes'] = $MyRow['notes'];
		$_POST['ContactMobile'] = $MyRow['mobile'];
		$_POST['ContactDepartment'] = $MyRow['department'];
		$_POST['ContactLinkedIn'] = $MyRow['linkedin'];
		$_POST['ContactActive'] = $MyRow['active'];
		echo '<input type="hidden" name="Id" value="'. $Id .'" />
			<input type="hidden" name="Con_ID" value="' . $_POST['Con_ID'] . '" />
			<input type="hidden" name="DebtorNo" value="' . $DebtorNo . '" />';

		echo '<fieldset>
				<legend>', __('Edit Customer Contact Details'), '</legend>';

		echo '<field>
				<label for="Con_ID">', __('Contact Code'), ':</label>
				<fieldtext>', $_POST['Con_ID'], '</fieldtext>
			</field>';
	} else {// New Customer Contact Details.
		echo '<fieldset>
				<legend>', __('New Customer Contact Details'), '</legend>';
	}
	// Contact name:
	echo '<field>
			<label for="ContactName">', __('Contact Name'), ':</label>
			<input maxlength="40" name="ContactName" autofocus="autofocus" required="required" size="35" type="text" ';
				if (isset($_POST['ContactName'])) {
					echo 'value="', $_POST['ContactName'], '" ';
				}
				echo '/>
			<fieldhelp>', __('The name of the person from this customer'), '</fieldhelp>
		</field>';
	// Role:
	echo '<field>
			<label for="ContactRole">', __('Role'), ':</label>
			<input maxlength="40" name="ContactRole" size="35" type="text" ';
				if (isset($_POST['ContactRole'])) {
					echo 'value="', $_POST['ContactRole'], '" ';
				}
				echo '/>
			<fieldhelp>', __('The job role that this contact has at the customer'), '</fieldhelp>
		</field>';
	// Phone:
	echo '<field>
			<label for="ContactPhone">', __('Phone'), ':</label>
			<input maxlength="40" name="ContactPhone" size="35" type="tel" ';
				if (isset($_POST['ContactPhone'])) {
					echo 'value="', $_POST['ContactPhone'], '" ';
				}
				echo '/>
			<fieldhelp>', __('A phone number for this contact'), '</fieldhelp>
		</field>';
	// Mobile:
	echo '<field>
			<label for="ContactMobile">', __('Mobile'), ':</label>
			<input maxlength="20" name="ContactMobile" size="25" type="tel" ';
				if (isset($_POST['ContactMobile'])) {
					echo 'value="', $_POST['ContactMobile'], '" ';
				}
				echo '/>
			<fieldhelp>', __('Mobile phone number for this contact'), '</fieldhelp>
		</field>';
	// Department:
	echo '<field>
			<label for="ContactDepartment">', __('Department'), ':</label>
			<select name="ContactDepartment">';
				echo '<option value=""></option>';
				$DepartmentFound = false;
				foreach ($DepartmentOptions as $DepartmentName) {
					$Selected = '';
					if (isset($_POST['ContactDepartment']) and $_POST['ContactDepartment'] == $DepartmentName) {
						$Selected = ' selected="selected"';
						$DepartmentFound = true;
					}
					echo '<option value="' . htmlspecialchars($DepartmentName, ENT_QUOTES, 'UTF-8') . '"' . $Selected . '>' . htmlspecialchars($DepartmentName, ENT_QUOTES, 'UTF-8') . '</option>';
				}
				if (isset($_POST['ContactDepartment'])
					and $_POST['ContactDepartment'] != ''
					and !$DepartmentFound) {
					echo '<option selected="selected" value="' . htmlspecialchars($_POST['ContactDepartment'], ENT_QUOTES, 'UTF-8') . '">' . htmlspecialchars($_POST['ContactDepartment'], ENT_QUOTES, 'UTF-8') . '</option>';
				}
				echo '</select>
			<fieldhelp>', __('Department this contact works in'), '</fieldhelp>
		</field>';
	// LinkedIn:
	echo '<field>
			<label for="ContactLinkedIn">', __('LinkedIn'), ':</label>
			<input maxlength="120" name="ContactLinkedIn" size="55" type="url" ';
				if (isset($_POST['ContactLinkedIn'])) {
					echo 'value="', $_POST['ContactLinkedIn'], '" ';
				} else {
                    echo 'value="" ';
                }
				echo '/>
			<fieldhelp>', __('Optional LinkedIn profile URL for this contact'), '</fieldhelp>
		</field>';
	// Email:
	echo '<field>
			<label for="ContactEmail">', __('Email'), ':</label>
			<input maxlength="55" name="ContactEmail" size="55" type="email" ';
				if (isset($_POST['ContactEmail'])) {
					echo 'value="', $_POST['ContactEmail'], '" ';
				}
				echo '/>
			<fieldhelp>', __('An email address for this contact'), '</fieldhelp>
		</field>';
	echo '<field>
			<label for="StatementAddress">', __('Send Statement'), ':</label>
			<select name="StatementAddress" title="" >';
				if (!isset($_POST['StatementAddress'])) {
					echo '<option selected="selected" value="0">', __('No') , '</option>
							<option value="1">', __('Yes') , '</option>';
				} else {
					if ($_POST['StatementAddress']==0) {
						echo '<option selected="selected" value="0">', __('No') , '</option>
								<option value="1">', __('Yes') , '</option>';
					} else {
						echo '<option value="0">', __('No') , '</option>
								<option selected="selected" value="1">', __('Yes') , '</option>';
					}
				}
				echo '</select>';
				echo '<fieldhelp>' , __('This flag identifies the contact as one who should receive an email cusstomer statement') , '</fieldhelp>
		</field>';
	// Active:
	echo '<field>
			<label for="ContactActive">', __('Active'), ':</label>
			<select name="ContactActive">';
				$ActiveVal = isset($_POST['ContactActive']) ? (int)$_POST['ContactActive'] : 1;
				echo '<option value="1"' . ($ActiveVal ? ' selected="selected"' : '') . '>', __('Yes'), '</option>
					<option value="0"' . (!$ActiveVal ? ' selected="selected"' : '') . '>', __('No'), '</option>';
				echo '</select>
			<fieldhelp>', __('Whether this contact is currently active'), '</fieldhelp>
		</field>';
	// Notes:
	echo '<field>
			<label for="ContactNotes">', __('Notes'), '</label>
			<textarea cols="40" name="ContactNotes" rows="3">',
				($_POST['ContactNotes'] ?? ''),
				'</textarea>
			<fieldhelp>', __('Any notes on this customer contact'), '</fieldhelp>
		</field>';

	echo '</fieldset>';

	echo '<div class ="centre">
			<input name="submit" type="submit" value="', __('Enter Information'), '" />
		</div>
	</form>';

} //end if record deleted no point displaying form to add record

if (!isset($Id)) {

	$SQL = "SELECT contid,
					debtorno,
					contactname,
					role,
					phoneno,
					notes,
					email,
					statement,
					mobile,
					department,
					linkedin,
					active
				FROM custcontacts
				WHERE debtorno='" . $DebtorNo . "'
				ORDER BY contid";
	$Result = DB_query($SQL);

	if (DB_num_rows($Result) > 0) {
		echo '<table class="selection">';
		echo '<tr>
				<th class="text">', __('Name'), '</th>
				<th class="text">', __('Role'), '</th>
				<th class="text">', __('Phone No'), '</th>
				<th class="text">', __('Email'), '</th>
				<th class="text">', __('Mobile'), '</th>
				<th class="text">', __('Statement'), '</th>
				<th class="text">', __('Notes'), '</th>
				<th class="text">', __('Active'), '</th>
				<th class="noPrint" colspan="2">&nbsp;</th>
			</tr>';

		while ($MyRow = DB_fetch_array($Result)) {
			echo '<tr class="striped_row">
					<td class="text">', $MyRow['contactname'], '</td>
					<td class="text">', $MyRow['role'], '</td>
					<td class="text">', $MyRow['phoneno'], '</td>
					<td class="text"><a href="mailto:', $MyRow['email'], '">', $MyRow['email'], '</a></td>
					<td class="text">', $MyRow['mobile'], '</td>
					<td class="text">', ($MyRow['statement']==0) ? __('No') : __('Yes'), '</td>
					<td class="text">', $MyRow['notes'], '</td>
					<td class="text">', ($MyRow['active']==1) ? __('Yes') : __('No'), '</td>
					<td class="noPrint"><a href="', htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '?Id=', $MyRow['contid'], '&amp;DebtorNo=', $MyRow['debtorno'], '">' . __('Edit') . '</a></td>
					<td class="noPrint"><a href="', htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8') . '?Id=', $MyRow['contid'], '&amp;DebtorNo=', $MyRow['debtorno'], '&amp;delete=1" onclick="return confirm(\'' . __('Are you sure you wish to delete this contact?') . '\');">' . __('Delete'). '</a></td>
				</tr>';

		}
	//END WHILE LIST LOOP
	}
	echo '</table><br />';
}

include(__DIR__ . '/includes/footer.php');