Brands.php

<?php

require(__DIR__ . '/includes/session.php');

$Title = __('Brands Maintenance');
$ViewTopic = 'Inventory';
$BookMark = '';
include(__DIR__ . '/includes/header.php');

include(__DIR__ . '/includes/ImageFunctions.php');

if (isset($_GET['SelectedBrand'])){
	$SelectedBrand = $_GET['SelectedBrand'];
} elseif (isset($_POST['SelectedBrand'])){
	$SelectedBrand = $_POST['SelectedBrand'];
}

$SupportedImgExt = array('png','jpg','jpeg');

if (isset($_POST['submit'])) {


	//initialise no input errors assumed initially before we test
	$InputError = 0;

	/* actions to take once the user has clicked the submit button
	ie the page has called itself with some user input */

	if (isset($SelectedBrand) AND $InputError !=1) {

		if (isset($_FILES['BrandPicture']) AND $_FILES['BrandPicture']['name'] !='') {

			$Result	= $_FILES['BrandPicture']['error'];
		 	$UploadTheFile = 'Yes'; //Assume all is well to start off with

			$ImgExt = pathinfo($_FILES['BrandPicture']['name'], PATHINFO_EXTENSION);
			$FileName = $_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.' . $ImgExt;

			 //But check for the worst
			if (!in_array ($ImgExt, $SupportedImgExt)) {
				prnMsg(__('Only ' . implode(", ", $SupportedImgExt) . ' files are supported - a file extension of ' . implode(", ", $SupportedImgExt) . ' is expected'),'warn');
				$UploadTheFile ='No';
			} elseif ( $_FILES['BrandPicture']['size'] > ($_SESSION['MaxImageSize']*1024)) { //File Size Check
				prnMsg(__('The file size is over the maximum allowed. The maximum size allowed in KB is') . ' ' . $_SESSION['MaxImageSize'],'warn');
				$UploadTheFile ='No';
			} elseif ( $_FILES['BrandPicture']['type'] == 'text/plain' ) {  //File Type Check
				prnMsg( __('Only graphics files can be uploaded'),'warn');
				 	$UploadTheFile ='No';
			}
			foreach ($SupportedImgExt as $Ext) {
				$File = $_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.' . $Ext;
				if (file_exists ($File) ) {
					$Result = unlink($File);
					if (!$Result){
						prnMsg(__('The existing image could not be removed'),'error');
						$UploadTheFile ='No';
					}
				}
			}

			if ($UploadTheFile=='Yes'){
				$Result  =  move_uploaded_file($_FILES['BrandPicture']['tmp_name'], $FileName);
				$Message = ($Result)?__('File url')  . '<a href="' . $FileName .'">' .  $FileName . '</a>' : __('Something is wrong with uploading a file');
				$_POST['BrandsImage'] = 'BRAND-' . $SelectedBrand;
			} else {
				$_POST['BrandsImage'] = '';
			}
		}
		if ( isset($_POST['BrandsImage'])){
			foreach ($SupportedImgExt as $Ext) {
				$File = $_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.' . $Ext;
				if (file_exists ($File) ) {
					$_POST['BrandsImage'] = 'BRAND-' . $SelectedBrand;
					break;
				} else {
					$_POST['BrandsImage'] = '';
				}
			}

		}
		if (isset($_POST['ClearImage']) ) {
			foreach ($SupportedImgExt as $Ext) {
				$File = $_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.' . $Ext;
				if (file_exists ($File) ) {
					@unlink($File);
					$_POST['BrandsImage'] = '';
					if (is_file($File)) {
						prnMsg(__('You do not have access to delete this item image file.'),'error');
					}
				}
			}
		}

		$SQL = "UPDATE brands SET brands_name='" . $_POST['BrandsName'] . "',
									brands_url='" . $_POST['BrandsURL'] . "'";
		if (isset($_POST['BrandsImage'])){
			$SQL .= ", brands_image='" . $_POST['BrandsImage'] . "'";
		}
		$SQL .= " WHERE brands_id = '" . $SelectedBrand . "'";

		$ErrMsg = __('An error occurred updating the') . ' ' . $SelectedBrand . ' ' . __('brand record because');

		$Result = DB_query($SQL, $ErrMsg);

		prnMsg( __('The brand record has been updated'),'success');
		unset($_POST['BrandsName']);
		unset($_POST['BrandsURL']);
		unset($_POST['BrandsImage']);
		unset($SelectedBrand);

	} elseif ($InputError !=1) {

		/*SelectedBrand is null cos no item selected on first time round so must be adding a	record must be submitting new entries in the new Location form */

		$SQL = "INSERT INTO brands (brands_name,
										brands_url)
						VALUES ('" . $_POST['BrandsName'] . "',
								'" . $_POST['BrandsURL'] . "')";

		$ErrMsg =  __('An error occurred inserting the new brand record because');
		$Result = DB_query($SQL, $ErrMsg);
		$LastInsertId = DB_Last_Insert_ID('brands', 'brands_id');

		if (isset($_FILES['BrandPicture']) AND $_FILES['BrandPicture']['name'] !='') {

			$Result	= $_FILES['BrandPicture']['error'];
		 	$UploadTheFile = 'Yes'; //Assume all is well to start off with

			$ImgExt = pathinfo($_FILES['BrandPicture']['name'], PATHINFO_EXTENSION);
			$FileName = $_SESSION['part_pics_dir'] . '/BRAND-' . $LastInsertId . '.' . $ImgExt;

			 //But check for the worst
			if (!in_array ($ImgExt, $SupportedImgExt)) {
				prnMsg(__('Only ' . implode(", ", $SupportedImgExt) . ' files are supported - a file extension of ' . implode(", ", $SupportedImgExt) . ' is expected'),'warn');
				$UploadTheFile ='No';
			} elseif ( $_FILES['BrandPicture']['size'] > ($_SESSION['MaxImageSize']*1024)) { //File Size Check
				prnMsg(__('The file size is over the maximum allowed. The maximum size allowed in KB is') . ' ' . $_SESSION['MaxImageSize'],'warn');
				$UploadTheFile ='No';
			} elseif ( $_FILES['BrandPicture']['type'] == 'text/plain' ) {  //File Type Check
				prnMsg( __('Only graphics files can be uploaded'),'warn');
				 	$UploadTheFile ='No';
			}
			foreach ($SupportedImgExt as $Ext) {
				$File = $_SESSION['part_pics_dir'] . '/BRAND-' . $LastInsertId . '.' . $Ext;
				if (file_exists ($File) ) {
					$Result = unlink($File);
					if (!$Result){
						prnMsg(__('The existing image could not be removed'),'error');
						$UploadTheFile ='No';
					}
				}
			}

			if ($UploadTheFile=='Yes'){
				$Result  =  move_uploaded_file($_FILES['BrandPicture']['tmp_name'], $FileName);
				$Message = ($Result)?__('File url')  . '<a href="' . $FileName .'">' .  $FileName . '</a>' : __('Something is wrong with uploading a file');
				DB_query("UPDATE brands
					SET  brands_image='" . 'BRAND-' . $LastInsertId . "'
					WHERE brands_id = '" . $LastInsertId . "'
					");
			}
		}

		prnMsg( __('The new brand record has been added'),'success');

		unset($_POST['BrandsName']);
		unset($_POST['BrandsURL']);
		unset($_POST['BrandsImage']);
		unset($SelectedBrand);
	}

} elseif (isset($_GET['delete'])) {
//the link to delete a selected record was clicked instead of the submit button

	$CancelDelete = false;

// PREVENT DELETES IF DEPENDENT RECORDS
	$SQL= "SELECT COUNT(*) FROM salescatprod WHERE brands_id='". $SelectedBrand . "'";
	$Result = DB_query($SQL);
	$MyRow = DB_fetch_row($Result);
	if ($MyRow[0]>0) {
		$CancelDelete = true;
		prnMsg( __('Cannot delete this brand because products have been defined as from this brand'),'warn');
		echo  __('There are') . ' ' . $MyRow[0] . ' ' . __('items with this brand code');
	}

	if (!$CancelDelete) {

		$Result = DB_query("DELETE FROM brands WHERE brands_id='" . $SelectedBrand . "'");
		foreach ($SupportedImgExt as $Ext) {
			$File = $_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.' . $Ext;
			if (file_exists ($File) ) {
				@unlink($File);
			}
		}
		prnMsg( __('Brand') . ' ' . $SelectedBrand . ' ' . __('has been deleted') . '!', 'success');
		unset ($SelectedBrand);
	} //end if Delete Brand
	unset($SelectedBrand);
	unset($_GET['delete']);
}

if (!isset($SelectedBrand)) {

/* It could still be the second time the page has been run and a record has been selected for modification - SelectedBrand will exist because it was sent with the new call. If its the first time the page has been displayed with no parameters
then none of the above are true and the list of Brands will be displayed with
links to delete or edit each. These will call the same page again and allow update/input
or deletion of the records*/

	$SQL = "SELECT brands_id,
				brands_name,
				brands_url,
				brands_image
			FROM brands";
	$Result = DB_query($SQL);

	if (DB_num_rows($Result)==0){
		prnMsg(__('There are no brands to display'),'error');
	}
	echo '<p class="page_title_text"><img src="'.$RootPath.'/css/'.$Theme.'/images/supplier.png" Title="' .
			__('Brands') . '" alt="" />' . ' ' . $Title . '</p>';

	echo '<table class="selection">';
	echo '<tr>
			<th>' . __('Brand Code') . '</th>
			<th>' . __('Brand Name') . '</th>
			<th>' . __('Brand URL') . '</th>
			<th>' . __('Brands Image') . '</th>
			<th colspan="2"></th>
		</tr>';

while ($MyRow = DB_fetch_array($Result)) {
    $Glob = (glob($_SESSION['part_pics_dir'] . '/BRAND-' . $MyRow['brands_id'] . '.{' . implode(",", $SupportedImgExt) . '}', GLOB_BRACE));
	$ImageFile = reset($Glob);
	$BrandImgLink = GetImageLink($ImageFile, '/BRAND-' . $MyRow['brands_id'], 120, 120, "", "");

	echo '<tr class="striped_row">
			<td>', $MyRow['brands_id'], '</td>
			<td>', $MyRow['brands_name'], '</td>
			<td><a target="_blank" href="', $MyRow['brands_url'], '">', $MyRow['brands_url'], '</a></td>
			<td>', $BrandImgLink, '</td>
			<td><a href="', htmlspecialchars($_SERVER['PHP_SELF'],ENT_QUOTES,'UTF-8') . '?SelectedBrand=', $MyRow['brands_id'], '&amp;edit=1">' . __('Edit') . '</a></td>
			<td><a href="', htmlspecialchars($_SERVER['PHP_SELF'],ENT_QUOTES,'UTF-8') . '?SelectedBrand=', $MyRow['brands_id'], '&amp;delete=1" onclick="return confirm(\'' . __('Are you sure you wish to delete this brand?') . '\');">' . __('Delete') . '</a></td>
		</tr>';

	}
	//END WHILE LIST LOOP
	echo '</table>';
}

//end of ifs and buts!

if (isset($SelectedBrand)) {
	echo '<a href="' . htmlspecialchars($_SERVER['PHP_SELF'],ENT_QUOTES,'UTF-8') . '">' . __('Review BrandRecords') . '</a>';
}

if (!isset($_GET['delete'])) {

	echo '<form enctype="multipart/form-data" method="post" action="' . htmlspecialchars($_SERVER['PHP_SELF'],ENT_QUOTES,'UTF-8') . '">';
	echo '<input type="hidden" name="FormID" value="' . $_SESSION['FormID'] . '" />';

	if (isset($SelectedBrand)) {
		//editing an existing Brand
		echo '<p class="page_title_text"><img src="'.$RootPath.'/css/'.$Theme.'/images/supplier.png" Title="' .
			__('Brand') . '" alt="" />' . ' ' . $Title . '</p>';

		$SQL = "SELECT brands_id,
					brands_name,
					brands_url,
					brands_image
				FROM brands
				WHERE brands_id='" . $SelectedBrand . "'";

		$Result = DB_query($SQL);
		$MyRow = DB_fetch_array($Result);

		$_POST['BrandsName'] = $MyRow['brands_name'];
		$_POST['BrandsURL'] = $MyRow['brands_url'];
		$_POST['BrandsImage'] = $MyRow['brands_image'];


		echo '<input type="hidden" name="SelectedBrand" value="' . $SelectedBrand . '" />';
		echo '<fieldset>';
		echo '<legend>' . __('Update Brand Details') . '</legend>';
	} else { //end of if $SelectedBrand only do the else when a new record is being entered

		echo '<fieldset>
				<legend>' . __('New Brand Details') . '</legend>';
	}
	if (!isset($_POST['BrandsName'])) {
		$_POST['BrandsName'] = '';
	}
	if (!isset($_POST['BrandsURL'])) {
		$_POST['BrandsURL'] = ' ';
	}
	if (!isset($_POST['BrandsImage'])) {
		$_POST['BrandsImage'] = '';
	}

	echo '<field>
			<label for="BrandsName">' .  __('Brand Name') . ':' . '</label>
			<input type="text" required="required" autofocus="autofocus" name="BrandsName" value="'. $_POST['BrandsName'] . '" size="32" maxlength="32" />
		</field>
		<field>
			<label for="BrandsURL">' . __('Brand URL') . ':' . '</label>
			<input type="text" name="BrandsURL" value="' . $_POST['BrandsURL'] . '" size="50" maxlength="50" />
		</field>
		<field>
			<label for="BrandPicture">' .  __('Brand Image File (' . implode(", ", $SupportedImgExt) . ')') . ':</label>
			<input type="file" id="BrandPicture" name="BrandPicture" />';

	if (isset ($_GET['edit']) ) {
		echo '<field>
				<label for="ClearImage">'.__('Clear Image').'</label>
				<input type="checkbox" name="ClearImage" id="ClearImage" value="1">
			</field>';
	}

	echo '</field>';
		if (isset($SelectedBrand)){
            $Glob = (glob($_SESSION['part_pics_dir'] . '/BRAND-' . $SelectedBrand . '.{' . implode(",", $SupportedImgExt) . '}', GLOB_BRACE));
			$ImageFile = reset($Glob);
			if (extension_loaded('gd') && function_exists('gd_info') && file_exists($ImageFile)) {
				$BrandImgLink = '<img src="GetStockImage.php?automake=1&amp;textcolor=FFFFFF&amp;bgcolor=CCCCCC'.
					'&amp;StockID='.urlencode('/BRAND-' . $SelectedBrand).
					'&amp;text='.
					'&amp;width=100'.
					'&amp;height=100'.
					'" alt="" />';
			} else {
				if ( isset($SelectedBrand) AND  !empty($SelectedBrand) AND file_exists($ImageFile) ) {
					$BrandImgLink = '<img src="' . $ImageFile . '" height="100" width="100" />';
				} else {
					$BrandImgLink = __('No Image');
				}
			}
			$BrandImgLink = GetImageLink($ImageFile, '/BRAND-' . $SelectedBrand, 100, 100, "", "");
			echo '<field><td colspan="2">' . $BrandImgLink . '</td></field>';
		}

		echo 	'</fieldset>
			<div class="centre">
				<input type="submit" name="submit" value="' .  __('Enter Information') . '" />
			</div>
			</form>';

} //end if record deleted no point displaying form to add record

include(__DIR__ . '/includes/footer.php');