568 行
19 KiB
PHP
568 行
19 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
use App\Http\Controllers\AuthController;
|
|
use App\Http\Controllers\UserController;
|
|
use App\Http\Controllers\PermissionController; // Remove permission controller soon.
|
|
|
|
class InvoiceController extends Controller {
|
|
private $objAuth;
|
|
private $objUser;
|
|
private $objPermission;
|
|
|
|
// Constructor
|
|
public function __construct() {
|
|
$this->objAuth = new AuthController();
|
|
$this->objUser = new UserController();
|
|
$this->objPermission = new PermissionController();
|
|
}
|
|
|
|
// Company
|
|
public function getCompanies(Request $request) { // /api/rpc/invoice/company/getcompanies
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancompany'] == 1 && $valid['inv_manuser'] == 1) {
|
|
return DB::table('inv_company')
|
|
->select(
|
|
'id',
|
|
'name',
|
|
'compreg',
|
|
'taxnr',
|
|
'bank_number',
|
|
'bank_name',
|
|
'bank_recipient',
|
|
'logo',
|
|
'payterm'
|
|
)
|
|
->get();
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function getCompany($id, Request $request) { // /api/rpc/invoice/company/getcompany/id
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancompany'] == 1) {
|
|
if ($valid['inv_manuser'] == 0) {
|
|
if ($id == $check) {
|
|
return DB::table('inv_company')
|
|
->select(
|
|
'name',
|
|
'compreg',
|
|
'taxnr',
|
|
'bank_number',
|
|
'bank_name',
|
|
'bank_recipient',
|
|
'logo',
|
|
'payterm'
|
|
)
|
|
->where('id', $id)
|
|
->get();
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
else if ($valid['inv_manuser'] == 1) {
|
|
return DB::table('inv_company')
|
|
->select(
|
|
'cu_id',
|
|
'name',
|
|
'compreg',
|
|
'taxnr',
|
|
'bank_number',
|
|
'bank_name',
|
|
'bank_recipient',
|
|
'logo',
|
|
'payterm'
|
|
)
|
|
->where('id', $id)
|
|
->get();
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function newCompany(Request $request) { // /api/rpc/invoice/company/new
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancompany'] == 1 && $valid['inv_manuser'] == 1) {
|
|
$user = DB::table('inv_company_users')
|
|
->insertGetId([
|
|
'user_id' => $request->user,
|
|
'company_id' => 0
|
|
]);
|
|
|
|
$add = DB::table('inv_company')
|
|
->insertGetId([
|
|
'cu_id' => $user,
|
|
'name' => $request->name,
|
|
'compreg' => ($request->compreg ? $request->compreg : ''),
|
|
'taxnr' => ($request->taxnr ? $request->taxnr : ''),
|
|
'bank_number' => $request->bank_number,
|
|
'bank_name' => $request->bank_name,
|
|
'bank_recipient' => $request->bank_recipient,
|
|
'logo' => ($request->logo ? $request->logo : ''),
|
|
'payterm' => $request->payterm
|
|
]);
|
|
|
|
DB::table('inv_company_users')
|
|
->where('user_id', $request->user)
|
|
->update(['company_id' => $add]);
|
|
|
|
return $add;
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function editCompany(Request $request) { // /api/rpc/invoice/company/edit
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancompany'] == 1) {
|
|
if ($valid['inv_manuser'] == 0) {
|
|
$companyId = DB::table('inv_company_users')
|
|
->select('company_id')
|
|
->where('user_id', $check)
|
|
->limit(1)
|
|
->first();
|
|
|
|
if ($companyId != 0) {
|
|
DB::table('inv_company')
|
|
->where('id', $request->id)
|
|
->update([
|
|
'name' => $request->name,
|
|
'compreg' => ($request->compreg ? $request->compreg : ''),
|
|
'taxnr' => ($request->taxnr ? $request->taxnr : ''),
|
|
'bank_number' => $request->bank_number,
|
|
'bank_name' => $request->bank_name,
|
|
'bank_recipient' => $request->bank_recipient,
|
|
'logo' => ($request->logo ? $request->logo : ''),
|
|
'payterm' => $request->payterm
|
|
]);
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
else if ($valid['inv_manuser'] == 1) {
|
|
DB::table('inv_company_users')
|
|
->where('company_id', $request->id)
|
|
->update([
|
|
'user_id' => $request->cu_id
|
|
]);
|
|
|
|
DB::table('inv_company')
|
|
->where('id', $request->id)
|
|
->update([
|
|
'cu_id' => $request->cu_id,
|
|
'name' => $request->name,
|
|
'compreg' => ($request->compreg ? $request->compreg : ''),
|
|
'taxnr' => ($request->taxnr ? $request->taxnr : ''),
|
|
'bank_number' => $request->bank_number,
|
|
'bank_name' => $request->bank_name,
|
|
'bank_recipient' => $request->bank_recipient,
|
|
'logo' => ($request->logo ? $request->logo : ''),
|
|
'payterm' => $request->payterm
|
|
]);
|
|
}
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function deleteCompany(Request $request) { // /api/rpc/invoice/company/delete
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancompany'] == 1 && $valid['inv_manuser'] == 1) {
|
|
DB::table('inv_company')->where('id', $request->id)->delete();
|
|
DB::table('inv_company_users')->where('company_id', $request->id)->delete();
|
|
|
|
return 'Done.';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
// Contacts
|
|
public function getContacts(Request $request) { // /api/rpc/invoice/contacts/getcontacts
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancontact'] == 1) {
|
|
return DB::table('inv_contacts')
|
|
->select('*')
|
|
->get();
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function getContact($id, Request $request) { // /api/rpc/invoice/contacts/getcontact/id
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancontact'] == 1) {
|
|
$get = DB::table('inv_contacts')
|
|
->select('*')
|
|
->where('id', $id)
|
|
->get();
|
|
|
|
$emp = DB::table('inv_employers')
|
|
->select('id')
|
|
->where('contact_id', $id)
|
|
->get();
|
|
|
|
$cus = DB::table('inv_clients')
|
|
->select('id')
|
|
->where('contact_id', $id)
|
|
->get();
|
|
|
|
$res = array();
|
|
|
|
foreach($get as $g) {
|
|
$res[] = array(
|
|
'id' => $g->id,
|
|
'name' => $g->name,
|
|
'address' => $g->address,
|
|
'postcode' => $g->postcode,
|
|
'town' => $g->town,
|
|
'country' => $g->country,
|
|
'phone' => $g->phone,
|
|
'email' => $g->email,
|
|
'isEmployer' => ($emp->count() ? true : false),
|
|
'isCustomer' => ($cus->count() ? true : false)
|
|
);
|
|
}
|
|
|
|
return $res;
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function newContact(Request $request) { // /api/rpc/invoice/contacts/new
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancontact'] == 1) {
|
|
$add = DB::table('inv_contacts')
|
|
->insertGetId([
|
|
'name' => $request->name,
|
|
'address' => $request->address,
|
|
'postcode' => $request->postcode,
|
|
'town' => $request->town,
|
|
'country' => $request->country,
|
|
'phone' => $request->phone,
|
|
'email' => $request->email
|
|
]);
|
|
|
|
if ($request->isCustomer) {
|
|
DB::table('inv_clients')
|
|
->insert([
|
|
'contact_id' => $add
|
|
]);
|
|
}
|
|
|
|
if ($request->isEmployer) {
|
|
DB::table('inv_employers')
|
|
->insert([
|
|
'contact_id' => $add
|
|
]);
|
|
}
|
|
|
|
return $add;
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function editContact(Request $request) { // /api/rpc/invoice/contacts/edit
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancontact'] == 1) {
|
|
DB::table('inv_contacts')
|
|
->where('id', $request->id)
|
|
->update([
|
|
'name' => $request->name,
|
|
'address' => $request->address,
|
|
'postcode' => $request->postcode,
|
|
'town' => $request->town,
|
|
'country' => $request->country,
|
|
'phone' => $request->phone,
|
|
'email' => $request->email
|
|
]);
|
|
|
|
$emp = DB::table('inv_employers')
|
|
->select('id')
|
|
->where('contact_id', $request->id)
|
|
->get();
|
|
|
|
$cus = DB::table('inv_clients')
|
|
->select('id')
|
|
->where('contact_id', $request->id)
|
|
->get();
|
|
|
|
if ($emp->count()) {
|
|
if (!$request->isEmployer) {
|
|
DB::table('inv_employers')->where('contact_id', $request->id)->delete();
|
|
}
|
|
}
|
|
else {
|
|
if ($request->isEmployer) {
|
|
DB::table('inv_employers')
|
|
->where('id', $request->id)
|
|
->insert([
|
|
'contact_id' => $request->id
|
|
]);
|
|
}
|
|
}
|
|
|
|
if ($cus->count()) {
|
|
if (!$request->isCustomer) {
|
|
DB::table('inv_clients')->where('contact_id', $request->id)->delete();
|
|
}
|
|
}
|
|
else {
|
|
if ($request->isCustomer) {
|
|
DB::table('inv_clients')
|
|
->where('id', $request->id)
|
|
->insert([
|
|
'contact_id' => $request->id
|
|
]);
|
|
}
|
|
}
|
|
|
|
return 'Success!';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function deleteContact(Request $request) { // /api/rpc/invoice/contacts/delete
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_mancontact'] == 1) {
|
|
DB::table('inv_contacts')->where('id', $request->id)->delete();
|
|
DB::table('inv_employers')->where('contact_id', $request->id)->delete();
|
|
DB::table('inv_clients')->where('contact_id', $request->id)->delete();
|
|
|
|
return 'Done.';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
// Invoices
|
|
public function getInvoices() { // /api/rpc/invoice/invoices/getinvoices
|
|
return DB::table('inv_invoices')
|
|
->select('*')
|
|
->get();
|
|
}
|
|
|
|
public function getInvoice($id) { // /api/rpc/invoice/invoices/getinvoice/id
|
|
return DB::table('inv_invoices')
|
|
->select('*')
|
|
->where('id', $id)
|
|
->get();
|
|
}
|
|
|
|
public function newInvoice(Request $request) { // /api/rpc/invoice/invoices/new
|
|
return '';
|
|
}
|
|
|
|
public function editInvoice(Request $request) { // /api/rpc/invoice/invoices/edit
|
|
return '';
|
|
}
|
|
|
|
public function deleteInvoice(Request $request) { // /api/rpc/invoice/invoices/delete
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_makeinvoice'] == 1) {
|
|
DB::table('inv_invoices')->where('id', $request->id)->delete();
|
|
|
|
return 'Done.';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
// Services
|
|
public function getServices() { // /api/rpc/invoice/service/getservices
|
|
return DB::table('inv_services')
|
|
->select('*')
|
|
->get();
|
|
}
|
|
|
|
public function getService($id) { // /api/rpc/invoice/services/getservice/id
|
|
return DB::table('inv_services')
|
|
->select('*')
|
|
->where('id', $id)
|
|
->get();
|
|
}
|
|
|
|
public function newService(Request $request) { // /api/rpc/invoice/services/new
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_makeinvoice'] == 1) {
|
|
$add = DB::table('inv_services')
|
|
->insertGetId([
|
|
'name' => $request->name,
|
|
'rate' => $request->rate
|
|
]);
|
|
|
|
return $add;
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function editService(Request $request) { // /api/rpc/invoice/services/edit
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_makeinvoice'] == 1) {
|
|
DB::table('inv_services')
|
|
->where('id', $request->id)
|
|
->update([
|
|
'name' => $request->name,
|
|
'rate' => $request->rate
|
|
]);
|
|
|
|
return 'Success!';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
|
|
public function deleteService(Request $request) { // /api/rpc/invoice/services/delete
|
|
$check = $this->objAuth->checkLegit($request->username, $request->password);
|
|
|
|
if ($check == 0) {
|
|
return 'Err!';
|
|
}
|
|
else {
|
|
$valid = $this->objAuth->getPermissions($request->username, $request->password);
|
|
|
|
if ($valid['inv_makeinvoice'] == 1) {
|
|
DB::table('inv_services')->where('id', $request->id)->delete();
|
|
|
|
return 'Done.';
|
|
}
|
|
else {
|
|
return 'Permission denied.';
|
|
}
|
|
}
|
|
}
|
|
}
|