X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;ds=sidebyside;f=WEB-INF%2Flib%2FttPredefinedExpenseHelper.class.php;h=16dff2840c38ebd34cad46719f10a0aa146e25ad;hb=f58ab716cb0cc4b8be8e48723b345bfab29697a6;hp=c292870fb9a483e9db01c3aff11bb5422dfb95df;hpb=45c855269d952873285f7a835e82fc2b3eff3971;p=timetracker.git diff --git a/WEB-INF/lib/ttPredefinedExpenseHelper.class.php b/WEB-INF/lib/ttPredefinedExpenseHelper.class.php index c292870f..16dff284 100644 --- a/WEB-INF/lib/ttPredefinedExpenseHelper.class.php +++ b/WEB-INF/lib/ttPredefinedExpenseHelper.class.php @@ -39,7 +39,7 @@ class ttPredefinedExpenseHelper { $mdb2 = getConnection(); $sql = "select id, name, cost from tt_predefined_expenses - where id = $id and group_id = $user->group_id"; + where id = $id and group_id = ".$user->getGroup(); $res = $mdb2->query($sql); if (!is_a($res, 'PEAR_Error')) { $val = $res->fetchRow(); @@ -58,7 +58,7 @@ class ttPredefinedExpenseHelper { $mdb2 = getConnection(); - $sql = "delete from tt_predefined_expenses where id = $id and group_id = $user->group_id"; + $sql = "delete from tt_predefined_expenses where id = $id and group_id = ".$user->getGroup(); $affected = $mdb2->exec($sql); if (is_a($affected, 'PEAR_Error')) return false; @@ -73,14 +73,15 @@ class ttPredefinedExpenseHelper { $mdb2 = getConnection(); - $group_id = (int) $fields['group_id']; + $group_id = $user->getGroup(); + $org_id = $user->org_id; $name = $fields['name']; $cost = $fields['cost']; if ('.' != $user->decimal_mark) $cost = str_replace($user->decimal_mark, '.', $cost); - $sql = "insert into tt_predefined_expenses (group_id, name, cost) - values ($group_id, ".$mdb2->quote($name).", ".$mdb2->quote($cost).")"; + $sql = "insert into tt_predefined_expenses (group_id, org_id, name, cost)". + " values ($group_id, $org_id, ".$mdb2->quote($name).", ".$mdb2->quote($cost).")"; $affected = $mdb2->exec($sql); if (is_a($affected, 'PEAR_Error')) return false; @@ -95,15 +96,16 @@ class ttPredefinedExpenseHelper { $mdb2 = getConnection(); + $group_id = $user->getGroup(); + $org_id = $user->org_id; $predefined_expense_id = (int) $fields['id']; - $group_id = (int) $fields['group_id']; $name = $fields['name']; $cost = $fields['cost']; if ('.' != $user->decimal_mark) $cost = str_replace($user->decimal_mark, '.', $cost); $sql = "update tt_predefined_expenses set name = ".$mdb2->quote($name).", cost = ".$mdb2->quote($cost). - " where id = $predefined_expense_id and group_id = $group_id"; + " where id = $predefined_expense_id and group_id = $group_id and org_id = $org_id"; $affected = $mdb2->exec($sql); return (!is_a($affected, 'PEAR_Error')); }