mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-03-31 21:32:03 -04:00
- Remove redundant property assignment loop in Expenses.php - Add esc() to employee name values to prevent XSS vulnerabilities
113 lines
4.8 KiB
PHP
113 lines
4.8 KiB
PHP
<?php
|
|
/**
|
|
* @var array $receiving_info
|
|
* @var string $selected_supplier_name
|
|
* @var int $selected_supplier_id
|
|
* @var array $employees
|
|
* @var string $controller_name
|
|
* @var bool $can_assign_employee
|
|
*/
|
|
?>
|
|
|
|
<div id="required_fields_message"><?= lang('Common.fields_required_message') ?></div>
|
|
<ul id="error_message_box" class="error_message_box"></ul>
|
|
|
|
<?= form_open("receivings/save/" . $receiving_info['receiving_id'], ['id' => 'receivings_edit_form', 'class' => 'form-horizontal']) ?>
|
|
<fieldset id="receiving_basic_info">
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.receipt_number'), 'supplier', ['class' => 'control-label col-xs-3']) ?>
|
|
<?= anchor('receivings/receipt/' . $receiving_info['receiving_id'], 'RECV ' . $receiving_info['receiving_id'], ['target' => '_blank', 'class' => 'control-label col-xs-8', "style" => "text-align: left"]) ?>
|
|
</div>
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.date'), 'date', ['class' => 'control-label col-xs-3']) ?>
|
|
<div class="col-xs-8">
|
|
<?= form_input([
|
|
'name' => 'date',
|
|
'value' => to_datetime(strtotime($receiving_info['receiving_time'])),
|
|
'id' => 'datetime',
|
|
'class' => 'datetime form-control input-sm',
|
|
'readonly' => 'readonly'
|
|
]) ?>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.supplier'), 'supplier', ['class' => 'control-label col-xs-3']) ?>
|
|
<div class="col-xs-8">
|
|
<?= form_input(['name' => 'supplier_name', 'value' => $selected_supplier_name, 'id' => 'supplier_name', 'class' => 'form-control input-sm']) ?>
|
|
<?= form_hidden('supplier_id', $selected_supplier_id ?? '') ?>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.reference'), 'reference', ['class' => 'control-label col-xs-3']) ?>
|
|
<div class="col-xs-8">
|
|
<?= form_input(['name' => 'reference', 'value' => $receiving_info['reference'], 'id' => 'reference', 'class' => 'form-control input-sm']) ?>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.employee'), 'employee', ['class' => 'control-label col-xs-3']) ?>
|
|
<div class="col-xs-8">
|
|
<?php if ($can_assign_employee): ?>
|
|
<?= form_dropdown('employee_id', $employees, $receiving_info['employee_id'], 'id="employee_id" class="form-control"') ?>
|
|
<?php else: ?>
|
|
<?= form_hidden('employee_id', $receiving_info['employee_id']) ?>
|
|
<?= form_input(['name' => 'employee_name', 'value' => esc($employees[$receiving_info['employee_id']] ?? ''), 'class' => 'form-control input-sm', 'readonly' => 'readonly']) ?>
|
|
<?php endif; ?>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group form-group-sm">
|
|
<?= form_label(lang('Receivings.comments'), 'comment', ['class' => 'control-label col-xs-3']) ?>
|
|
<div class="col-xs-8">
|
|
<?= form_textarea(['name' => 'comment', 'value' => $receiving_info['comment'], 'id' => 'comment', 'class' => 'form-control input-sm']) ?>
|
|
</div>
|
|
</div>
|
|
|
|
</fieldset>
|
|
<?= form_close() ?>
|
|
|
|
<script type="text/javascript">
|
|
$(document).ready(function() {
|
|
<?= view('partial/datepicker_locale') ?>
|
|
|
|
$('#datetime').datetimepicker(pickerconfig);
|
|
|
|
var fill_value = function(event, ui) {
|
|
event.preventDefault();
|
|
$("input[name='supplier_id']").val(ui.item.value);
|
|
$("input[name='supplier_name']").val(ui.item.label);
|
|
};
|
|
|
|
$('#supplier_name').autocomplete({
|
|
source: "<?= 'suppliers/suggest' ?>",
|
|
minChars: 0,
|
|
delay: 15,
|
|
cacheLength: 1,
|
|
appendTo: '.modal-content',
|
|
select: fill_value,
|
|
focus: fill_value
|
|
});
|
|
|
|
$('button#delete').click(function() {
|
|
dialog_support.hide();
|
|
table_support.do_delete("<?= esc($controller_name) ?>", <?= $receiving_info['receiving_id'] ?>);
|
|
});
|
|
|
|
$('#receivings_edit_form').validate($.extend({
|
|
submitHandler: function(form) {
|
|
$(form).ajaxSubmit({
|
|
success: function(response) {
|
|
dialog_support.hide();
|
|
table_support.handle_submit("<?= esc($controller_name) ?>", response);
|
|
},
|
|
dataType: 'json'
|
|
});
|
|
}
|
|
}, form_support.error));
|
|
});
|
|
</script>
|