root/trunk/phpbms/modules/bms/invoices_attachments.php

<?php
/*
 $Rev$ | $LastChangedBy$
 $LastChangedDate$
 +-------------------------------------------------------------------------+
 | Copyright (c) 2004 - 2010, Kreotek LLC                                  |
 | All rights reserved.                                                    |
 +-------------------------------------------------------------------------+
 |                                                                         |
 | Redistribution and use in source and binary forms, with or without      |
 | modification, are permitted provided that the following conditions are  |
 | met:                                                                    |
 |                                                                         |
 | - Redistributions of source code must retain the above copyright        |
 |   notice, this list of conditions and the following disclaimer.         |
 |                                                                         |
 | - Redistributions in binary form must reproduce the above copyright     |
 |   notice, this list of conditions and the following disclaimer in the   |
 |   documentation and/or other materials provided with the distribution.  |
 |                                                                         |
 | - Neither the name of Kreotek LLC nor the names of its contributore may |
 |   be used to endorse or promote products derived from this software     |
 |   without specific prior written permission.                            |
 |                                                                         |
 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS     |
 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT       |
 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A |
 | PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT      |
 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,   |
 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT        |
 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,   |
 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY   |
 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT     |
 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE   |
 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.    |
 |                                                                         |
 +-------------------------------------------------------------------------+
*/

        include("../../include/session.php");


        require_once("../../include/search_class.php");


        //set the table passing stuff
        $tabledefuuid = "tbld:62fe599d-c18f-3674-9e54-b62c2d6b1883";
        if(isset($_GET["refid"])) $_GET["id"]=$_GET["refid"];
        $refid=(integer) $_GET["id"];

    $querystatement = "
        SELECT
            `uuid`
        FROM
            `invoices`
        WHERE
            `id` = '".$refid."'
        ";

    $queryresult = $db->query($querystatement);
    $therecord = $db->fetchArray($queryresult);
    $refuuid = $therecord["uuid"];

    $securitywhere="";
    if ($_SESSION["userinfo"]["admin"]!=1 && count($_SESSION["userinfo"]["roles"])>0){
        $securitywhere = "''";
        foreach($_SESSION["userinfo"]["roles"] as $roleuuid)
            $securitywhere .= ",'".$roleuuid."'";
    }//end if

    $whereclause="attachments.tabledefid='".$tabledefuuid."' AND attachments.recordid='".$refuuid."'".$securitywhere;
        $backurl="../bms/invoices_attachments.php";
        $base="../../";

        $refquery="select firstname,lastname,company from clients where id=".$refid;
        $refquery=$db->query($refquery);
        $refrecord=$db->fetchArray($refquery);

        $refquery="SELECT
                           invoices.id, if(clients.lastname!=\"\",concat(clients.lastname,\", \",clients.firstname,if(clients.company!=\"\",concat(\" (\",clients.company,\")\"),\"\")),clients.company) as name
                           FROM invoices INNER JOIN clients ON invoices.clientid=clients.uuid
                           WHERE invoices.id=".$refid;
        $refquery=$db->query($refquery);
        $refrecord=$db->fetchArray($refquery);

        $pageTitle="Attachments: ".$refrecord["id"];
        if($refrecord["name"] !== "")
                $pageTitle .= ", ".$refrecord["name"];

        $tabgroup="invoices entry";
        $selectedtabid="tab:23687374-5c14-04af-74ac-0f74342e1019";

        include("../base/attachments_records.php");

?>