X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=SL%2FIC.pm;h=ca37bcb8e42cd3e2bb64410ff280de8374f14917;hb=1663badaaf6535d4d966f9d812560e41c7016a6d;hp=b8815cc59605fc904b7159d606d99f697be47b81;hpb=0732e588191567d85b9bfefd4394b3802f7d9598;p=kivitendo-erp.git

diff --git a/SL/IC.pm b/SL/IC.pm
index b8815cc59..ca37bcb8e 100644
--- a/SL/IC.pm
+++ b/SL/IC.pm
@@ -34,6 +34,8 @@
 
 package IC;
 use Data::Dumper;
+use SL::DBUtils;
+
 sub get_part {
   $main::lxdebug->enter_sub();
 
@@ -42,26 +44,25 @@ sub get_part {
   # connect to db
   my $dbh = $form->dbconnect($myconfig);
 
-  my $query = qq|SELECT p.*,
-                 c1.accno AS inventory_accno,
-		 c2.accno AS income_accno,
-		 c3.accno AS expense_accno,
-		 pg.partsgroup
-	         FROM parts p
-		 LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
-		 LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
-		 LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
-		 LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                 WHERE p.id = $form->{id}|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-  my $ref = $sth->fetchrow_hashref(NAME_lc);
+  my $sth;
+
+  my $query =
+    qq|SELECT p.*,
+         c1.accno AS inventory_accno,
+         c2.accno AS income_accno,
+         c3.accno AS expense_accno,
+         pg.partsgroup
+       FROM parts p
+       LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
+       LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
+       LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
+       LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+       WHERE p.id = ? |;
+  my $ref = selectfirst_hashref_query($form, $dbh, $query, conv_i($form->{id}));
 
   # copy to $form variables
   map { $form->{$_} = $ref->{$_} } (keys %{$ref});
 
-  $sth->finish;
-
   my %oid = ('Pg'     => 'a.oid',
              'Oracle' => 'a.rowid');
 
@@ -71,17 +72,16 @@ sub get_part {
     $form->{item} = 'assembly';
 
     # retrieve assembly items
-    $query = qq|SELECT p.id, p.partnumber, p.description,
-                p.sellprice, p.weight, a.qty, a.bom, p.unit,
-		pg.partsgroup
-                FROM parts p
-		JOIN assembly a ON (a.parts_id = p.id)
-		LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		WHERE a.id = $form->{id}
-		ORDER BY $oid{$myconfig->{dbdriver}}|;
-
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description,
+           p.sellprice, p.weight, a.qty, a.bom, p.unit,
+           pg.partsgroup
+         FROM parts p
+         JOIN assembly a ON (a.parts_id = p.id)
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+         WHERE (a.id = ?)
+         ORDER BY $oid{$myconfig->{dbdriver}}|;
+    $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
 
     $form->{assembly_rows} = 0;
     while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
@@ -101,28 +101,27 @@ sub get_part {
   $form->{amount}{IC_expense} = $form->{expense_accno};
   $form->{amount}{IC_cogs}    = $form->{expense_accno};
 
+  my @pricegroups          = ();
+  my @pricegroups_not_used = ();
+
   # get prices
   $query =
-    qq|SELECT p.parts_id, p.pricegroup_id, p.price, (SELECT pg.pricegroup FROM pricegroup pg WHERE pg.id=p.pricegroup_id) AS pricegroup FROM prices p
-              WHERE parts_id = $form->{id}
-              ORDER by pricegroup|;
-
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  @pricegroups          = ();
-  @pricegroups_not_used = ();
+    qq|SELECT p.parts_id, p.pricegroup_id, p.price,
+         (SELECT pg.pricegroup
+          FROM pricegroup pg
+          WHERE pg.id = p.pricegroup_id) AS pricegroup
+       FROM prices p
+       WHERE (parts_id = ?)
+       ORDER BY pricegroup|;
+  $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
 
   #for pricegroups
   my $i = 1;
-  while (
-         ($form->{"klass_$i"}, $form->{"pricegroup_id_$i"},
+  while (($form->{"klass_$i"}, $form->{"pricegroup_id_$i"},
           $form->{"price_$i"}, $form->{"pricegroup_$i"})
-         = $sth->fetchrow_array
-    ) {
+         = $sth->fetchrow_array()) {
     $form->{"price_$i"} = $form->round_amount($form->{"price_$i"}, 5);
-    $form->{"price_$i"} =
-      $form->format_amount($myconfig, $form->{"price_$i"}, 5);
+    $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);
     push @pricegroups, $form->{"pricegroup_id_$i"};
     $i++;
   }
@@ -130,28 +129,19 @@ sub get_part {
   $sth->finish;
 
   # get pricegroups
-  $query = qq|SELECT p.id, p.pricegroup FROM pricegroup p|;
-
-  $pkq = $dbh->prepare($query);
-  $pkq->execute || $form->dberror($query);
-  while ($pkr = $pkq->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{PRICEGROUPS} }, $pkr;
-  }
-  $pkq->finish;
+  $query = qq|SELECT id, pricegroup FROM pricegroup|;
+  $form->{PRICEGROUPS} = selectall_hashref_query($form, $dbh, $query);
 
   #find not used pricegroups
-  while ($tmp = pop @{ $form->{PRICEGROUPS} }) {
-    my $insert = 0;
-    foreach $item (@pricegroups) {
+  while ($tmp = pop(@{ $form->{PRICEGROUPS} })) {
+    my $in_use = 0;
+    foreach my $item (@pricegroups) {
       if ($item eq $tmp->{id}) {
-
-        #drop
-        $insert = 1;
+        $in_use = 1;
+        last;
       }
     }
-    if ($insert == 0) {
-      push @pricegroups_not_used, $tmp;
-    }
+    push(@pricegroups_not_used, $tmp) unless ($in_use);
   }
 
   # if not used pricegroups are avaible
@@ -160,10 +150,9 @@ sub get_part {
     foreach $name (@pricegroups_not_used) {
       $form->{"klass_$i"} = "$name->{id}";
       $form->{"price_$i"} = $form->round_amount($form->{sellprice}, 5);
-      $form->{"price_$i"} =
-        $form->format_amount($myconfig, $form->{"price_$i"}, 5);
+      $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);
       $form->{"pricegroup_id_$i"} = "$name->{id}";
-      $form->{"pricegroup_$i"}    = "$name->{pricegroup}\n";
+      $form->{"pricegroup_$i"}    = "$name->{pricegroup}";
       $i++;
     }
   }
@@ -175,11 +164,11 @@ sub get_part {
 
     # get makes
     if ($form->{makemodel}) {
-      $query = qq|SELECT m.make, m.model FROM makemodel m
-                  WHERE m.parts_id = $form->{id}|;
-
+      $query = qq|SELECT m.make, m.model FROM makemodel m | .
+               qq|WHERE m.parts_id = ?|;
+      @values = ($form->{id});
       $sth = $dbh->prepare($query);
-      $sth->execute || $form->dberror($query);
+      $sth->execute(@values) || $form->dberror("$query (" . join(', ', @values) . ")");
 
       my $i = 1;
       while (($form->{"make_$i"}, $form->{"model_$i"}) = $sth->fetchrow_array)
@@ -192,15 +181,21 @@ sub get_part {
     }
   }
 
-  # now get accno for taxes
-  $query = qq|SELECT c.accno
-              FROM chart c, partstax pt
-	      WHERE pt.chart_id = c.id
-	      AND pt.parts_id = $form->{id}|;
-
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  # get translations
+  $form->{language_values} = "";
+  $query = qq|SELECT language_id, translation FROM translation WHERE parts_id = ?|;
+  my $trq = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
+  while ($tr = $trq->fetchrow_hashref(NAME_lc)) {
+    $form->{language_values} .= "---+++---".$tr->{language_id}."--++--".$tr->{translation};
+  }
+  $trq->finish;
 
+  # now get accno for taxes
+  $query =
+    qq|SELECT c.accno
+       FROM chart c, partstax pt
+       WHERE (pt.chart_id = c.id) AND (pt.parts_id = ?)|;
+  $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
   while (($key) = $sth->fetchrow_array) {
     $form->{amount}{$key} = $key;
   }
@@ -208,23 +203,36 @@ sub get_part {
   $sth->finish;
 
   # is it an orphan
-  $query = qq|SELECT i.parts_id
-              FROM invoice i
-	      WHERE i.parts_id = $form->{id}
-	    UNION
-	      SELECT o.parts_id
-	      FROM orderitems o
-	      WHERE o.parts_id = $form->{id}
-	    UNION
-	      SELECT a.parts_id
-	      FROM assembly a
-	      WHERE a.parts_id = $form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  ($form->{orphaned}) = $sth->fetchrow_array;
+  $query =
+    qq|SELECT i.parts_id
+       FROM invoice i
+       WHERE (i.parts_id = ?)
+
+       UNION
+
+       SELECT o.parts_id
+       FROM orderitems o
+       WHERE (o.parts_id = ?)
+
+       UNION
+
+       SELECT a.parts_id
+       FROM assembly a
+       WHERE (a.parts_id = ?)|;
+  @values = (conv_i($form->{id}), conv_i($form->{id}), conv_i($form->{id}));
+  ($form->{orphaned}) = selectrow_query($form, $dbh, $query, @values);
   $form->{orphaned} = !$form->{orphaned};
-  $sth->finish;
+
+  $form->{"unit_changeable"} = 1;
+  foreach my $table (qw(invoice assembly orderitems inventory license)) {
+    $query = qq|SELECT COUNT(*) FROM $table WHERE parts_id = ?|;
+    my ($count) = selectrow_query($form, $dbh, $query, conv_i($form->{"id"}));
+
+    if ($count) {
+      $form->{"unit_changeable"} = 0;
+      last;
+    }
+  }
 
   $dbh->disconnect;
 
@@ -235,37 +243,20 @@ sub get_pricegroups {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
+
   my $dbh = $form->dbconnect($myconfig);
-  my $i = 1;
-  my @pricegroups_not_used = ();
 
   # get pricegroups
-  my $query = qq|SELECT p.id, p.pricegroup FROM pricegroup p|;
-
-  my $pkq = $dbh->prepare($query);
-  $pkq->execute || $form->dberror($query);
-  while ($pkr = $pkq->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{PRICEGROUPS} }, $pkr;
-  }
-  $pkq->finish;
-
-  #find not used pricegroups
-  while ($tmp = pop @{ $form->{PRICEGROUPS} }) {
-    push @pricegroups_not_used, $tmp;
-  }
-
-  # if not used pricegroups are avaible
-  if (@pricegroups_not_used) {
+  my $query = qq|SELECT id, pricegroup FROM pricegroup|;
+  my $pricegroups = selectall_hashref_query($form, $dbh, $query);
 
-    foreach $name (@pricegroups_not_used) {
-      $form->{"klass_$i"} = "$name->{id}";
-      $form->{"price_$i"} = $form->round_amount($form->{sellprice}, 5);
-      $form->{"price_$i"} =
-        $form->format_amount($myconfig, $form->{"price_$i"}, 5);
-      $form->{"pricegroup_id_$i"} = "$name->{id}";
-      $form->{"pricegroup_$i"}    = "$name->{pricegroup}\n";
-      $i++;
-    }
+  my $i = 1;
+  foreach $pg (@{ $pricegroups }) {
+    $form->{"klass_$i"} = "$pg->{id}";
+    $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);
+    $form->{"pricegroup_id_$i"} = "$pg->{id}";
+    $form->{"pricegroup_$i"}    = "$pg->{pricegroup}";
+    $i++;
   }
 
   #correct rows
@@ -276,20 +267,27 @@ sub get_pricegroups {
   $main::lxdebug->leave_sub();
 }
 
-
-sub save {
+sub retrieve_buchungsgruppen {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 
-  if ($form->{eur} && ($form->{item} ne 'service')) {
-    $form->{IC} = $form->{IC_expense};
-  }
+  my ($query, $sth);
+
+  my $dbh = $form->dbconnect($myconfig);
+
+  # get buchungsgruppen
+  $query = qq|SELECT id, description FROM buchungsgruppen ORDER BY sortkey|;
+  $form->{BUCHUNGSGRUPPEN} = selectall_hashref_query($form, $dbh, $query);
+
+  $main::lxdebug->leave_sub();
+}
 
-  ($form->{inventory_accno}) = split(/--/, $form->{IC});
-  ($form->{expense_accno})   = split(/--/, $form->{IC_expense});
-  ($form->{income_accno})    = split(/--/, $form->{IC_income});
+sub save {
+  $main::lxdebug->enter_sub();
 
+  my ($self, $myconfig, $form) = @_;
+  my @values;
   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 
@@ -302,57 +300,33 @@ sub save {
   # if there is a $form->{id} then replace the old entry
   # delete all makemodel entries and add the new ones
 
-  # escape '
-  map { $form->{$_} =~ s/\'/\'\'/g } qw(partnumber description notes unit);
-
   # undo amount formatting
   map { $form->{$_} = $form->parse_amount($myconfig, $form->{$_}) }
     qw(rop weight listprice sellprice gv lastcost stock);
 
-  # set date to NULL if nothing entered
-  $form->{priceupdate} =
-    ($form->{priceupdate}) ? qq|'$form->{priceupdate}'| : "NULL";
-
-  $form->{makemodel} = (($form->{make_1}) || ($form->{model_1})) ? 1 : 0;
+  my $makemodel = (($form->{make_1}) || ($form->{model_1})) ? 1 : 0;
 
-  $form->{alternate} = 0;
   $form->{assembly} = ($form->{item} eq 'assembly') ? 1 : 0;
-  $form->{obsolete} *= 1;
-  $form->{shop}     *= 1;
-  $form->{onhand}   *= 1;
-  $form->{ve}       *= 1;
-  $form->{ge}       *= 1;
 
   my ($query, $sth);
 
   if ($form->{id}) {
 
     # get old price
-    $query = qq|SELECT p.sellprice, p.weight
-                FROM parts p
-		WHERE p.id = $form->{id}|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-    my ($sellprice, $weight) = $sth->fetchrow_array;
-    $sth->finish;
+    $query = qq|SELECT sellprice, weight FROM parts WHERE id = ?|;
+    my ($sellprice, $weight) = selectrow_query($form, $dbh, $query, conv_i($form->{id}));
 
     # if item is part of an assembly adjust all assemblies
-    $query = qq|SELECT a.id, a.qty
-                FROM assembly a
-		WHERE a.parts_id = $form->{id}|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+    $query = qq|SELECT id, qty FROM assembly WHERE parts_id = ?|;
+    $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
     while (my ($id, $qty) = $sth->fetchrow_array) {
       &update_assembly($dbh, $form, $id, $qty, $sellprice * 1, $weight * 1);
     }
     $sth->finish;
 
     if ($form->{item} ne 'service') {
-
       # delete makemodel records
-      $query = qq|DELETE FROM makemodel
-		  WHERE parts_id = $form->{id}|;
-      $dbh->do($query) || $form->dberror($query);
+      do_query($form, $dbh, qq|DELETE FROM makemodel WHERE parts_id = ?|, conv_i($form->{id}));
     }
 
     if ($form->{item} eq 'assembly') {
@@ -361,51 +335,33 @@ sub save {
       }
 
       # delete assembly records
-      $query = qq|DELETE FROM assembly
-		  WHERE id = $form->{id}|;
-      $dbh->do($query) || $form->dberror($query);
+      do_query($form, $dbh, qq|DELETE FROM assembly WHERE id = ?|, conv_i($form->{id}));
 
       $form->{onhand} += $form->{stock};
     }
 
     # delete tax records
-    $query = qq|DELETE FROM partstax
-		WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
+    do_query($form, $dbh, qq|DELETE FROM partstax WHERE parts_id = ?|, conv_i($form->{id}));
 
-  } else {
-    my $uid = rand() . time;
-    $uid .= $form->{login};
-
-    $query = qq|SELECT p.id FROM parts p
-                WHERE p.partnumber = '$form->{partnumber}'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
+    # delete translations
+    do_query($form, $dbh, qq|DELETE FROM translation WHERE parts_id = ?|, conv_i($form->{id}));
 
-    if ($form->{id} ne "") {
+  } else {
+    my ($count) = selectrow_query($form, $dbh, qq|SELECT COUNT(*) FROM parts WHERE partnumber = ?|, $form->{partnumber});
+    if ($count) {
       $main::lxdebug->leave_sub();
       return 3;
     }
-    $query = qq|INSERT INTO parts (partnumber, description)
-                VALUES ('$uid', 'dummy')|;
-    $dbh->do($query) || $form->dberror($query);
 
-    $query = qq|SELECT p.id FROM parts p
-                WHERE p.partnumber = '$uid'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
+    ($form->{id}) = selectrow_query($form, $dbh, qq|SELECT nextval('id')|);
+    do_query($form, $dbh, qq|INSERT INTO parts (id, partnumber) VALUES (?, '')|, $form->{id});
 
     $form->{orphaned} = 1;
     $form->{onhand} = $form->{stock} if $form->{item} eq 'assembly';
-    if ($form->{partnumber} eq "" && $form->{inventory_accno} eq "") {
+    if ($form->{partnumber} eq "" && $form->{"item"} eq "service") {
       $form->{partnumber} = $form->update_defaults($myconfig, "servicenumber");
     }
-    if ($form->{partnumber} eq "" && $form->{inventory_accno} ne "") {
+    if ($form->{partnumber} eq "" && $form->{"item"} ne "service") {
       $form->{partnumber} = $form->update_defaults($myconfig, "articlenumber");
     }
 
@@ -413,61 +369,129 @@ sub save {
   my $partsgroup_id = 0;
 
   if ($form->{partsgroup}) {
-    ($partsgroup, $partsgroup_id) = split /--/, $form->{partsgroup};
-  }
-
-  $query = qq|UPDATE parts SET
-	      partnumber = '$form->{partnumber}',
-	      description = '$form->{description}',
-	      makemodel = '$form->{makemodel}',
-	      alternate = '$form->{alternate}',
-	      assembly = '$form->{assembly}',
-	      listprice = $form->{listprice},
-	      sellprice = $form->{sellprice},
-	      lastcost = $form->{lastcost},
-	      weight = $form->{weight},
-	      priceupdate = $form->{priceupdate},
-	      unit = '$form->{unit}',
-	      notes = '$form->{notes}',
-	      rop = $form->{rop},
-	      bin = '$form->{bin}',
-	      inventory_accno_id = (SELECT c.id FROM chart c
-				    WHERE c.accno = '$form->{inventory_accno}'),
-	      income_accno_id = (SELECT c.id FROM chart c
-				 WHERE c.accno = '$form->{income_accno}'),
-	      expense_accno_id = (SELECT c.id FROM chart c
-				  WHERE c.accno = '$form->{expense_accno}'),
-              obsolete = '$form->{obsolete}',
-	      image = '$form->{image}',
-	      drawing = '$form->{drawing}',
-	      shop = '$form->{shop}',
-              ve = '$form->{ve}',
-              gv = '$form->{gv}',
-	      microfiche = '$form->{microfiche}',
-	      partsgroup_id = $partsgroup_id
-	      WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+    ($partsgroup, $partsgroup_id) = split(/--/, $form->{partsgroup});
+  }
+
+  my ($subq_inventory, $subq_expense, $subq_income);
+  if ($form->{"item"} eq "part") {
+    $subq_inventory =
+      qq|(SELECT bg.inventory_accno_id
+          FROM buchungsgruppen bg
+          WHERE bg.id = | . conv_i($form->{"buchungsgruppen_id"}, 'NULL') . qq|)|;
+  } else {
+    $subq_inventory = "NULL";
+  }
+
+  if ($form->{"item"} ne "assembly") {
+    $subq_expense =
+      qq|(SELECT bg.expense_accno_id_0
+          FROM buchungsgruppen bg
+          WHERE bg.id = | . conv_i($form->{"buchungsgruppen_id"}, 'NULL') . qq|)|;
+  } else {
+    $subq_expense = "NULL";
+  }
+
+  $query =
+    qq|UPDATE parts SET
+         partnumber = ?,
+         description = ?,
+         makemodel = ?,
+         alternate = 'f',
+         assembly = ?,
+         listprice = ?,
+         sellprice = ?,
+         lastcost = ?,
+         weight = ?,
+         priceupdate = ?,
+         unit = ?,
+         notes = ?,
+         formel = ?,
+         rop = ?,
+         bin = ?,
+         buchungsgruppen_id = ?,
+         payment_id = ?,
+         inventory_accno_id = $subq_inventory,
+         income_accno_id = (SELECT bg.income_accno_id_0 FROM buchungsgruppen bg WHERE bg.id = ?),
+         expense_accno_id = $subq_expense,
+         obsolete = ?,
+         image = ?,
+         drawing = ?,
+         shop = ?,
+         ve = ?,
+         gv = ?,
+         ean = ?,
+         not_discountable = ?,
+         microfiche = ?,
+         partsgroup_id = ?
+       WHERE id = ?|;
+  @values = ($form->{partnumber},
+             $form->{description},
+             $makemodel ? 't' : 'f',
+             $form->{assembly} ? 't' : 'f',
+             $form->{listprice},
+             $form->{sellprice},
+             $form->{lastcost},
+             $form->{weight},
+             conv_date($form->{priceupdate}),
+             $form->{unit},
+             $form->{notes},
+             $form->{formel},
+             $form->{rop},
+             $form->{bin},
+             conv_i($form->{buchungsgruppen_id}),
+             conv_i($form->{payment_id}),
+             conv_i($form->{buchungsgruppen_id}),
+             $form->{obsolete} ? 't' : 'f',
+             $form->{image},
+             $form->{drawing},
+             $form->{shop} ? 't' : 'f',
+             conv_i($form->{ve}),
+             conv_i($form->{gv}),
+             $form->{ean},
+             $form->{not_discountable} ? 't' : 'f',
+             $form->{microfiche},
+             conv_i($partsgroup_id),
+             conv_i($form->{id})
+  );
+  do_query($form, $dbh, $query, @values);
+
+  # delete translation records
+  do_query($form, $dbh, qq|DELETE FROM translation WHERE parts_id = ?|, conv_i($form->{id}));
+
+  if ($form->{language_values} ne "") {
+    foreach $item (split(/---\+\+\+---/, $form->{language_values})) {
+      my ($language_id, $translation, $longdescription) = split(/--\+\+--/, $item);
+      if ($translation ne "") {
+        $query = qq|INSERT into translation (parts_id, language_id, translation, longdescription)
+                    VALUES ( ?, ?, ?, ? )|;
+        @values = (conv_i($form->{id}), conv_i($language_id), $translation, $longdescription);
+        do_query($form, $dbh, $query, @values);
+      }
+    }
+  }
 
   # delete price records
-  $query = qq|DELETE FROM prices
-              WHERE parts_id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+  do_query($form, $dbh, qq|DELETE FROM prices WHERE parts_id = ?|, conv_i($form->{id}));
 
   # insert price records only if different to sellprice
   for my $i (1 .. $form->{price_rows}) {
     if ($form->{"price_$i"} eq "0") {
-       $form->{"price_$i"} = $form->{sellprice};
+      $form->{"price_$i"} = $form->{sellprice};
     }
-    if ((   $form->{"price_$i"} 
-        || $form->{"klass_$i"}
-        || $form->{"pricegroup_id_$i"}) and $form->{"price_$i"} != $form->{sellprice}) {
-      $klass = $form->parse_amount($myconfig, $form->{"klass_$i"});
+    if (
+        (   $form->{"price_$i"}
+         || $form->{"klass_$i"}
+         || $form->{"pricegroup_id_$i"})
+        and $form->{"price_$i"} != $form->{sellprice}
+      ) {
+      #$klass = $form->parse_amount($myconfig, $form->{"klass_$i"});
       $price = $form->parse_amount($myconfig, $form->{"price_$i"});
       $pricegroup_id =
         $form->parse_amount($myconfig, $form->{"pricegroup_id_$i"});
-      $query = qq|INSERT INTO prices (parts_id, pricegroup_id, price)
-                  VALUES($form->{id},$pricegroup_id,$price)|;
-      $dbh->do($query) || $form->dberror($query);
+      $query = qq|INSERT INTO prices (parts_id, pricegroup_id, price) | .
+               qq|VALUES(?, ?, ?)|;
+      @values = (conv_i($form->{id}), conv_i($pricegroup_id), $price);
+      do_query($form, $dbh, $query, @values);
     }
   }
 
@@ -477,23 +501,22 @@ sub save {
       if (($form->{"make_$i"}) || ($form->{"model_$i"})) {
         map { $form->{"${_}_$i"} =~ s/\'/\'\'/g } qw(make model);
 
-        $query = qq|INSERT INTO makemodel (parts_id, make, model)
-		    VALUES ($form->{id},
-		    '$form->{"make_$i"}', '$form->{"model_$i"}')|;
-        $dbh->do($query) || $form->dberror($query);
+        $query = qq|INSERT INTO makemodel (parts_id, make, model) | .
+		             qq|VALUES (?, ?, ?)|;
+		    @values = (conv_i($form->{id}), $form->{"make_$i"}, $form->{"model_$i"});
+        do_query($form, $dbh, $query, @values);
       }
     }
   }
 
   # insert taxes
-  foreach $item (split / /, $form->{taxaccounts}) {
+  foreach $item (split(/ /, $form->{taxaccounts})) {
     if ($form->{"IC_tax_$item"}) {
-      $query = qq|INSERT INTO partstax (parts_id, chart_id)
-                  VALUES ($form->{id},
-		          (SELECT c.id
-			   FROM chart c
-			   WHERE c.accno = '$item'))|;
-      $dbh->do($query) || $form->dberror($query);
+      $query =
+        qq|INSERT INTO partstax (parts_id, chart_id)
+           VALUES (?, (SELECT id FROM chart WHERE accno = ?))|;
+			@values = (conv_i($form->{id}), $item);
+      do_query($form, $dbh, $query, @values);
     }
   }
 
@@ -505,10 +528,10 @@ sub save {
 
       if ($form->{"qty_$i"} != 0) {
         $form->{"bom_$i"} *= 1;
-        $query = qq|INSERT INTO assembly (id, parts_id, qty, bom)
-		    VALUES ($form->{id}, $form->{"id_$i"},
-		    $form->{"qty_$i"}, '$form->{"bom_$i"}')|;
-        $dbh->do($query) || $form->dberror($query);
+        $query = qq|INSERT INTO assembly (id, parts_id, qty, bom) | .
+		             qq|VALUES (?, ?, ?, ?)|;
+		    @values = (conv_i($form->{id}), conv_i($form->{"id_$i"}), conv_i($form->{"qty_$i"}), $form->{"bom_$i"} ? 't' : 'f');
+        do_query($form, $dbh, $query, @values);
       }
     }
 
@@ -525,11 +548,11 @@ sub save {
     $form->get_employee($dbh);
 
     # add inventory record
-    $query = qq|INSERT INTO inventory (warehouse_id, parts_id, qty,
-                shippingdate, employee_id) VALUES (
-		0, $form->{id}, $form->{stock}, '$shippingdate',
-		$form->{employee_id})|;
-    $dbh->do($query) || $form->dberror($query);
+    $query =
+      qq|INSERT INTO inventory (warehouse_id, parts_id, qty, shippingdate, employee_id)
+         VALUES (0, ?, ?, '$shippingdate', ?)|;
+    @values = (conv_i($form->{id}), $form->{stock}, conv_i($form->{employee_id}));
+    do_query($form, $dbh, $query, @values);
 
   }
 
@@ -542,18 +565,15 @@ sub save {
   # get tax rates and description
   $accno_id =
     ($form->{vc} eq "customer") ? $form->{income_accno} : $vendor_accno;
-  $query = qq|SELECT c.accno, c.description, t.rate, t.taxnumber
-	      FROM chart c, tax t
-	      WHERE c.id=t.chart_id AND t.taxkey in (SELECT taxkey_id from chart where accno = '$accno_id')
-	      ORDER BY c.accno|;
-  $stw = $dbh->prepare($query);
-
-  $stw->execute || $form->dberror($query);
+  $query =
+    qq|SELECT c.accno, c.description, t.rate, t.taxnumber
+       FROM chart c, tax t
+       WHERE (c.id = t.chart_id) AND (t.taxkey IN (SELECT taxkey_id FROM chart where accno = ?))
+       ORDER BY c.accno|;
+  $stw = prepare_execute_query($form, $dbh, $query, $accno_id);
 
   $form->{taxaccount} = "";
   while ($ptr = $stw->fetchrow_hashref(NAME_lc)) {
-
-    #    if ($customertax{$ref->{accno}}) {
     $form->{taxaccount} .= "$ptr->{accno} ";
     if (!($form->{taxaccount2} =~ /$ptr->{accno}/)) {
       $form->{"$ptr->{accno}_rate"}        = $ptr->{rate};
@@ -561,7 +581,6 @@ sub save {
       $form->{"$ptr->{accno}_taxnumber"}   = $ptr->{taxnumber};
       $form->{taxaccount2} .= " $ptr->{accno} ";
     }
-
   }
 
   # commit
@@ -578,24 +597,20 @@ sub update_assembly {
 
   my ($dbh, $form, $id, $qty, $sellprice, $weight) = @_;
 
-  my $query = qq|SELECT a.id, a.qty
-                 FROM assembly a
-		 WHERE a.parts_id = $id|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query = qq|SELECT id, qty FROM assembly WHERE parts_id = ?|;
+  my $sth = prepare_execute_query($form, $dbh, $query, conv_i($id));
 
   while (my ($pid, $aqty) = $sth->fetchrow_array) {
     &update_assembly($dbh, $form, $pid, $aqty * $qty, $sellprice, $weight);
   }
   $sth->finish;
 
-  $query = qq|UPDATE parts
-              SET sellprice = sellprice +
-	          $qty * ($form->{sellprice} - $sellprice),
-                  weight = weight +
-		  $qty * ($form->{weight} - $weight)
-	      WHERE id = $id|;
-  $dbh->do($query) || $form->dberror($query);
+  $query =
+    qq|UPDATE parts SET sellprice = sellprice + ?, weight = weight + ?
+       WHERE id = ?|;
+  @values = ($qty * ($form->{sellprice} - $sellprice),
+             $qty * ($form->{weight} - $weight), conv_i($id));
+  do_query($form, $dbh, $query, @values);
 
   $main::lxdebug->leave_sub();
 }
@@ -608,37 +623,30 @@ sub retrieve_assemblies {
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
-  my $where = '1 = 1';
+  my $where = qq|NOT p.obsolete|;
+  my @values;
 
   if ($form->{partnumber}) {
-    my $partnumber = $form->like(lc $form->{partnumber});
-    $where .= " AND lower(p.partnumber) LIKE '$partnumber'";
+    $where .= qq| AND (p.partnumber ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%');
   }
 
   if ($form->{description}) {
-    my $description = $form->like(lc $form->{description});
-    $where .= " AND lower(p.description) LIKE '$description'";
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@values, '%' . $form->{description} . '%');
   }
-  $where .= " AND NOT p.obsolete = '1'";
 
   # retrieve assembly items
-  my $query = qq|SELECT p.id, p.partnumber, p.description,
-                 p.bin, p.onhand, p.rop,
-		   (SELECT sum(p2.inventory_accno_id)
-		    FROM parts p2, assembly a
-		    WHERE p2.id = a.parts_id
-		    AND a.id = p.id) AS inventory
-                 FROM parts p
- 		 WHERE $where
-		 AND assembly = '1'|;
-
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query =
+    qq|SELECT p.id, p.partnumber, p.description,
+         p.bin, p.onhand, p.rop,
+         (SELECT sum(p2.inventory_accno_id)
+          FROM parts p2, assembly a
+          WHERE (p2.id = a.parts_id) AND (a.id = p.id)) AS inventory
+       FROM parts p
+       WHERE NOT p.obsolete AND p.assembly $where|;
 
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{assembly_items} }, $ref if $ref->{inventory};
-  }
-  $sth->finish;
+  $form->{assembly_items} = selectall_hashref_query($form, $dbh, $query, @values);
 
   $dbh->disconnect;
 
@@ -676,12 +684,11 @@ sub adjust_inventory {
 
   my ($dbh, $form, $id, $qty) = @_;
 
-  my $query = qq|SELECT p.id, p.inventory_accno_id, p.assembly, a.qty
-		 FROM parts p, assembly a
-		 WHERE a.parts_id = p.id
-		 AND a.id = $id|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query =
+    qq|SELECT p.id, p.inventory_accno_id, p.assembly, a.qty
+       FROM parts p, assembly a
+       WHERE (a.parts_id = p.id) AND (a.id = ?)|;
+  my $sth = prepare_execute_query($form, $dbh, $query, conv_i($id));
 
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
 
@@ -700,7 +707,7 @@ sub adjust_inventory {
   $sth->finish;
 
   # update assembly
-  my $rc = $form->update_balance($dbh, "parts", "onhand", qq|id = $id|, $qty);
+  my $rc = $form->update_balance($dbh, "parts", "onhand", qq|id = ?|, $qty, $id);
 
   $main::lxdebug->leave_sub();
 
@@ -711,41 +718,15 @@ sub delete {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
-
+  my @values = (conv_i($form->{id}));
   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 
-  my $query = qq|DELETE FROM parts
- 	         WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
-
-  $query = qq|DELETE FROM partstax
-	      WHERE parts_id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
-
-  # check if it is a part, assembly or service
-  if ($form->{item} ne 'service') {
-    $query = qq|DELETE FROM makemodel
-		WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-  }
-
-  if ($form->{item} eq 'assembly') {
+  my %columns = ( "assembly" => "id", "alternate" => "id", "parts" => "id" );
 
-    # delete inventory
-    $query = qq|DELETE FROM inventory
-                WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-
-    $query = qq|DELETE FROM assembly
-		WHERE id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-  }
-
-  if ($form->{item} eq 'alternate') {
-    $query = qq|DELETE FROM alternate
-		WHERE id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
+  for my $table (qw(prices partstax makemodel inventory assembly parts)) {
+    my $column = defined($columns{$table}) ? $columns{$table} : "parts_id";
+    do_query($form, $dbh, qq|DELETE FROM $table WHERE $column = ?|, @values);
   }
 
   # commit
@@ -764,202 +745,192 @@ sub assembly_item {
 
   my $i = $form->{assembly_rows};
   my $var;
-  my $where = "1 = 1";
+  my $where = qq|1 = 1|;
+  my @values;
 
-  if ($form->{"partnumber_$i"}) {
-    $var = $form->like(lc $form->{"partnumber_$i"});
-    $where .= " AND lower(p.partnumber) LIKE '$var'";
-  }
-  if ($form->{"description_$i"}) {
-    $var = $form->like(lc $form->{"description_$i"});
-    $where .= " AND lower(p.description) LIKE '$var'";
-  }
-  if ($form->{"partsgroup_$i"}) {
-    $var = $form->like(lc $form->{"partsgroup_$i"});
-    $where .= " AND lower(pg.partsgroup) LIKE '$var'";
+  my %columns = ("partnumber" => "p", "description" => "p", "partsgroup" => "pg");
+
+  while (my ($column, $table) = each(%columns)) {
+    next unless ($form->{"${column}_$i"});
+    $where .= qq| AND ${table}.${column} ILIKE ?|;
+    push(@values, '%' . $form->{"${column}_$i"} . '%');
   }
 
   if ($form->{id}) {
-    $where .= " AND NOT p.id = $form->{id}";
+    $where .= qq| AND NOT (p.id = ?)|;
+    push(@values, conv_i($form->{id}));
   }
 
   if ($partnumber) {
-    $where .= " ORDER BY p.partnumber";
+    $where .= qq| ORDER BY p.partnumber|;
   } else {
-    $where .= " ORDER BY p.description";
+    $where .= qq| ORDER BY p.description|;
   }
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
-  my $query = qq|SELECT p.id, p.partnumber, p.description, p.sellprice,
-                 p.weight, p.onhand, p.unit,
-		 pg.partsgroup
-		 FROM parts p
-		 LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		 WHERE $where|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{item_list} }, $ref;
-  }
+  my $query =
+    qq|SELECT p.id, p.partnumber, p.description, p.sellprice, p.weight, p.onhand, p.unit, pg.partsgroup
+       FROM parts p
+       LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+       WHERE $where|;
+  $form->{item_list} = selectall_hashref_query($form, $dbh, $query, @values);
 
-  $sth->finish;
   $dbh->disconnect;
 
   $main::lxdebug->leave_sub();
 }
 
+#
+# Report for Wares.
+# Warning, deep magic ahead.
+# This function gets all parts from the database according to the filters specified
+#
+# filter strings:
+#   partnumber ean description partsgroup serialnumber make model drawing microfiche
+#   transdatefrom transdateto sort
+#
+# exclusives:
+#   itemstatus  = active | onhand | short | obsolete | orphaned
+#   searchitems = part | assembly | service
+#
+# column flags:
+#   l_partnumber l_description l_listprice l_sellprice l_lastcost l_priceupdate l_weight l_unit l_bin l_rop l_image l_drawing l_microfiche l_partsgroup 
+#
+# binary flags:
+#   bought sold onorder ordered rfq quoted onhand short
+#   l_serialnumber l_linetotal l_subtotal l_soldtotal l_deliverydate
+#   revers top100
+#
 sub all_parts {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 
-  my $where = '1 = 1';
-  my $var;
-
-  my $group;
-  my $limit;
+  my $where = qq|1 = 1|;
+  my (@values, $var, $flds, $group, $limit);
 
-  foreach my $item (qw(partnumber drawing microfiche make model)) {
-    if ($form->{$item}) {
-      $var = $form->like(lc $form->{$item});
-
-      # make will build later Bugfix 145
-      if ($item ne 'make') {
-        $where .= " AND lower(p.$item) LIKE '$var'";
-      }
+  foreach my $item (qw(partnumber drawing microfiche ean pg.partsgroup)) {
+    my $column = $item;
+    $column =~ s/.*\.//; # get rid of table prefixes
+    if ($form->{$column}) {
+      $where .= qq| AND ($item ILIKE ?)|;
+      push(@values, "%$form->{$column}%");
     }
   }
 
   # special case for description
-  if ($form->{description}) {
-    unless (   $form->{bought}
-            || $form->{sold}
-            || $form->{onorder}
-            || $form->{ordered}
-            || $form->{rfq}
-            || $form->{quoted}) {
-      $var = $form->like(lc $form->{description});
-      $where .= " AND lower(p.description) LIKE '$var'";
-    }
+  if ($form->{description}
+      && !(   $form->{bought}  || $form->{sold} || $form->{onorder}
+           || $form->{ordered} || $form->{rfq} || $form->{quoted})) {
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@values, "%$form->{description}%");
   }
 
   # special case for serialnumber
-  if ($form->{l_serialnumber}) {
-    if ($form->{serialnumber}) {
-      $var = $form->like(lc $form->{serialnumber});
-      $where .= " AND lower(serialnumber) LIKE '$var'";
-    }
+  if ($form->{l_serialnumber} && $form->{serialnumber}) {
+    $where .= qq| AND (serialnumber ILIKE ?)|;
+    push(@values, "%$form->{serialnumber}%");
   }
 
   if ($form->{searchitems} eq 'part') {
-    $where .= " AND p.inventory_accno_id > 0";
+    $where .= qq| AND (p.inventory_accno_id > 0) |;
   }
+
   if ($form->{searchitems} eq 'assembly') {
     $form->{bought} = "";
-    $where .= " AND p.assembly = '1'";
+    $where .= qq| AND p.assembly|;
   }
-  if ($form->{searchitems} eq 'service') {
-    $where .= " AND p.inventory_accno_id IS NULL AND NOT p.assembly = '1'";
 
+  if ($form->{searchitems} eq 'service') {
+    $where .= qq| AND (p.inventory_accno_id IS NULL) AND NOT (p.assembly = '1')|;
     # irrelevant for services
-    $form->{make} = $form->{model} = "";
+    map { $form->{$_} = '' } qw(make model);
   }
 
   # items which were never bought, sold or on an order
   if ($form->{itemstatus} eq 'orphaned') {
-    $form->{onhand}  = $form->{short}   = 0;
-    $form->{bought}  = $form->{sold}    = 0;
-    $form->{onorder} = $form->{ordered} = 0;
-    $form->{rfq}     = $form->{quoted}  = 0;
+    map { $form->{$_} = 0  } qw(onhand short bought sold onorder ordered rfq quoted);
+    map { $form->{$_} = '' } qw(transdatefrom transdateto);
+
+    $where .=
+      qq| AND (p.onhand = 0)
+          AND p.id NOT IN
+            (
+              SELECT DISTINCT parts_id FROM invoice
+              UNION
+              SELECT DISTINCT parts_id FROM assembly
+              UNION
+              SELECT DISTINCT parts_id FROM orderitems
+            )|;
+  }
 
-    $form->{transdatefrom} = $form->{transdateto} = "";
+  my %status2condition = (
+    active   => " AND (p.obsolete = '0')",
+    obsolete => " AND (p.obsolete = '1')",
+    onhand   => " AND (p.onhand > 0)",
+    short    => " AND (p.onhand < p.rop)",
+  );
+  $where .= $status2condition{$form->{itemstatus}};
 
-    $where .= " AND p.onhand = 0
-                AND p.id NOT IN (SELECT p.id FROM parts p, invoice i
-				 WHERE p.id = i.parts_id)
-		AND p.id NOT IN (SELECT p.id FROM parts p, assembly a
-				 WHERE p.id = a.parts_id)
-                AND p.id NOT IN (SELECT p.id FROM parts p, orderitems o
-				 WHERE p.id = o.parts_id)";
-  }
+  $form->{onhand} = $form->{short} = 0 if ($form->{itemstatus} eq 'obsolete');
 
-  if ($form->{itemstatus} eq 'active') {
-    $where .= " AND p.obsolete = '0'";
-  }
-  if ($form->{itemstatus} eq 'obsolete') {
-    $where .= " AND p.obsolete = '1'";
-    $form->{onhand} = $form->{short} = 0;
-  }
-  if ($form->{itemstatus} eq 'onhand') {
-    $where .= " AND p.onhand > 0";
-  }
-  if ($form->{itemstatus} eq 'short') {
-    $where .= " AND p.onhand < p.rop";
-  }
-  if ($form->{make}) {
-    $var = $form->like(lc $form->{make});
-    $where .= " AND p.id IN (SELECT DISTINCT ON (m.parts_id) m.parts_id
-                           FROM makemodel m WHERE lower(m.make) LIKE '$var')";
-  }
-  if ($form->{model}) {
-    $var = $form->like(lc $form->{model});
-    $where .= " AND p.id IN (SELECT DISTINCT ON (m.parts_id) m.parts_id
-                           FROM makemodel m WHERE lower(m.model) LIKE '$var')";
+  my @subcolumns;
+  foreach my $column (qw(make model)) {
+    push @subcolumns, $column if $form->{$column};
   }
-  if ($form->{partsgroup}) {
-    $var = $form->like(lc $form->{partsgroup});
-    $where .= " AND lower(pg.partsgroup) LIKE '$var'";
+  if (@subcolumns) {
+    $where .= qq| AND p.id IN (SELECT DISTINCT parts_id FROM makemodel WHERE | . (join " AND ", map { "($_ ILIKE ?)"; } @subcolumns) . ")";
+    push @values, map { '%' . $form->{$_} . '%' } @subcolumns;
   }
+
   if ($form->{l_soldtotal}) {
-    $where .= " AND p.id=i.parts_id AND  i.qty >= 0";
-    $group =
-      " GROUP BY  p.id,p.partnumber,p.description,p.onhand,p.unit,p.bin, p.sellprice,p.listprice,p.lastcost,p.priceupdate,pg.partsgroup";
-  }
-  if ($form->{top100}) {
-    $limit = " LIMIT 100";
+    $where .= qq| AND (p.id = i.parts_id) AND (i.qty >= 0)|;
+    $group = qq| GROUP BY p.id, p.partnumber, p.description, p.onhand, p.unit, p.bin, p.sellprice, p.listprice, p.lastcost, p.priceupdate, pg.partsgroup|;
   }
 
-  # tables revers?
-  if ($form->{revers} == 1) {
-    $form->{desc} = " DESC";
-  } else {
-    $form->{desc} = "";
-  }
+  $limit = qq| LIMIT 100| if ($form->{top100});
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
-  my $sortorder = $form->{sort};
-  $sortorder .= $form->{desc};
-  $sortorder = $form->{sort} unless $sortorder;
+  my @sort_cols = qw(id partnumber description partsgroup bin priceupdate onhand
+                     invnumber ordnumber quonumber name drawing microfiche
+                     serialnumber soldtotal deliverydate);
+
+  my $sortorder = "partnumber";
+  $sortorder = $form->{sort} if ($form->{sort} && grep({ $_ eq $form->{sort} } @sort_cols));
+  $sortorder .= " DESC" if ($form->{revers});
 
   my $query = "";
 
   if ($form->{l_soldtotal}) {
     $form->{soldtotal} = 'soldtotal';
     $query =
-      qq|SELECT p.id,p.partnumber,p.description,p.onhand,p.unit,p.bin,p.sellprice,p.listprice,
-		p.lastcost,p.priceupdate,pg.partsgroup,sum(i.qty) as soldtotal FROM parts
-		p LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id), invoice i
-		WHERE $where
-		$group
-		ORDER BY $sortorder
-		$limit|;
+      qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit, 
+           p.bin, p.sellprice, p.listprice, p.lastcost, 
+           p.priceupdate, pg.partsgroup,sum(i.qty) AS soldtotal 
+         FROM parts p 
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id), invoice i
+         WHERE $where
+         $group
+         ORDER BY $sortorder $limit|;
   } else {
-    $query = qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit,
-                 p.bin, p.sellprice, p.listprice, p.lastcost, p.rop, p.weight,
-		 p.priceupdate, p.image, p.drawing, p.microfiche,
-		 pg.partsgroup
-                 FROM parts p
-		 LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-  	         WHERE $where
-		 $group
-	         ORDER BY $sortorder|;
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit,
+           p.bin, p.sellprice, p.listprice, p.lastcost, p.rop, p.weight,
+           p.priceupdate, p.image, p.drawing, p.microfiche,
+           pg.partsgroup
+         FROM parts p
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+         WHERE $where
+         $group
+         ORDER BY $sortorder $limit|;
   }
 
+  my @all_values = @values;
+
   # rebuild query for bought and sold items
   if (   $form->{bought}
       || $form->{sold}
@@ -967,239 +938,402 @@ sub all_parts {
       || $form->{ordered}
       || $form->{rfq}
       || $form->{quoted}) {
-
-    my @a = qw(partnumber description bin priceupdate name);
-
-    push @a, qw(invnumber serialnumber) if ($form->{bought} || $form->{sold});
-    push @a, "ordnumber" if ($form->{onorder} || $form->{ordered});
-    push @a, "quonumber" if ($form->{rfq}     || $form->{quoted});
-
     my $union = "";
     $query = "";
+    @all_values = ();
 
     if ($form->{bought} || $form->{sold}) {
 
+      my @invvalues = @values;
       my $invwhere = "$where";
-      $invwhere .= " AND i.assemblyitem = '0'";
-      $invwhere .= " AND a.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $invwhere .= " AND a.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      $invwhere .= qq| AND i.assemblyitem = '0'|;
+
+      if ($form->{transdatefrom}) {
+        $invwhere .= qq| AND a.transdate >= ?|;
+        push(@invvalues, $form->{transdatefrom});
+      }
+
+      if ($form->{transdateto}) {
+        $invwhere .= qq| AND a.transdate <= ?|;
+        push(@invvalues, $form->{transdateto});
+      }
 
       if ($form->{description}) {
-        $var = $form->like(lc $form->{description});
-        $invwhere .= " AND lower(i.description) LIKE '$var'";
+        $invwhere .= qq| AND i.description ILIKE ?|;
+        push(@invvalues, '%' . $form->{description} . '%');
       }
 
-      my $flds = qq|p.id, p.partnumber, i.description, i.serialnumber,
-                    i.qty AS onhand, i.unit, p.bin, i.sellprice,
-		    p.listprice, p.lastcost, p.rop, p.weight,
-		    p.priceupdate, p.image, p.drawing, p.microfiche,
-		    pg.partsgroup,
-		    a.invnumber, a.ordnumber, a.quonumber, i.trans_id,
-		    ct.name|;
+      $flds =
+        qq|p.id, p.partnumber, i.description, i.serialnumber,
+           i.qty AS onhand, i.unit, p.bin, i.sellprice,
+           p.listprice, p.lastcost, p.rop, p.weight,
+           p.priceupdate, p.image, p.drawing, p.microfiche,
+           pg.partsgroup,
+           a.invnumber, a.ordnumber, a.quonumber, i.trans_id,
+           ct.name, i.deliverydate|;
 
       if ($form->{bought}) {
-        $query = qq|
-	            SELECT $flds, 'ir' AS module, '' AS type,
-		    1 AS exchangerate
-		    FROM invoice i
-		    JOIN parts p ON (p.id = i.parts_id)
-		    JOIN ap a ON (a.id = i.trans_id)
-		    JOIN vendor ct ON (a.vendor_id = ct.id)
-		    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		    WHERE $invwhere|;
-        $union = "
-	          UNION";
+        $query =
+          qq|SELECT $flds, 'ir' AS module, '' AS type, 1 AS exchangerate
+             FROM invoice i
+             JOIN parts p ON (p.id = i.parts_id)
+             JOIN ap a ON (a.id = i.trans_id)
+             JOIN vendor ct ON (a.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $invwhere|;
+
+        $union = qq| UNION |;
+
+        push(@all_values, @invvalues);
       }
 
       if ($form->{sold}) {
-        $query .= qq|$union
-                     SELECT $flds, 'is' AS module, '' AS type,
-		     1 As exchangerate
-		     FROM invoice i
-		     JOIN parts p ON (p.id = i.parts_id)
-		     JOIN ar a ON (a.id = i.trans_id)
-		     JOIN customer ct ON (a.customer_id = ct.id)
-		     LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		     WHERE $invwhere|;
-        $union = "
-	          UNION";
+        $query .=
+          qq|$union
+
+             SELECT $flds, 'is' AS module, '' AS type, 1 As exchangerate
+             FROM invoice i
+             JOIN parts p ON (p.id = i.parts_id)
+             JOIN ar a ON (a.id = i.trans_id)
+             JOIN customer ct ON (a.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $invwhere|;
+        $union = qq| UNION |;
+
+        push(@all_values, @invvalues);
       }
     }
 
     if ($form->{onorder} || $form->{ordered}) {
-      my $ordwhere = "$where
-		     AND o.quotation = '0'";
-      $ordwhere .= " AND o.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $ordwhere .= " AND o.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      my @ordvalues = @values;
+      my $ordwhere = $where . qq| AND o.quotation = '0'|;
 
-      if ($form->{description}) {
-        $var = $form->like(lc $form->{description});
-        $ordwhere .= " AND lower(oi.description) LIKE '$var'";
+      if ($form->{transdatefrom}) {
+        $ordwhere .= qq| AND o.transdate >= ?|;
+        push(@ordvalues, $form->{transdatefrom});
+      }
+
+      if ($form->{transdateto}) {
+        $ordwhere .= qq| AND o.transdate <= ?|;
+        push(@ordvalues, $form->{transdateto});
       }
 
-      $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                 oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
-	         p.listprice, p.lastcost, p.rop, p.weight,
-		 p.priceupdate, p.image, p.drawing, p.microfiche,
-		 pg.partsgroup,
-		 '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-		 ct.name|;
+      if ($form->{description}) {
+        $ordwhere .= qq| AND oi.description ILIKE ?|;
+        push(@ordvalues, '%' . $form->{description} . '%');
+      }
 
       if ($form->{ordered}) {
-        $query .= qq|$union
-                     SELECT $flds, 'oe' AS module, 'sales_order' AS type,
-		    (SELECT buy FROM exchangerate ex
-		     WHERE ex.curr = o.curr
-		     AND ex.transdate = o.transdate) AS exchangerate
-		     FROM orderitems oi
-		     JOIN parts p ON (oi.parts_id = p.id)
-		     JOIN oe o ON (oi.trans_id = o.id)
-		     JOIN customer ct ON (o.customer_id = ct.id)
-		     LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		     WHERE $ordwhere
-		     AND o.customer_id > 0|;
-        $union = "
-	          UNION";
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'sales_order' AS type,
+               (SELECT buy FROM exchangerate ex
+                WHERE ex.curr = o.curr AND ex.transdate = o.transdate) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN customer ct ON (o.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $ordwhere AND (o.customer_id > 0)|;
+        $union = qq| UNION |;
+
+        push(@all_values, @ordvalues);
       }
 
       if ($form->{onorder}) {
-        $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                   oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
-		   p.listprice, p.lastcost, p.rop, p.weight,
-		   p.priceupdate, p.image, p.drawing, p.microfiche,
-		   pg.partsgroup,
-		   '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-		   ct.name|;
-
-        $query .= qq|$union
-	            SELECT $flds, 'oe' AS module, 'purchase_order' AS type,
-		    (SELECT sell FROM exchangerate ex
-		     WHERE ex.curr = o.curr
-		     AND ex.transdate = o.transdate) AS exchangerate
-		    FROM orderitems oi
-		    JOIN parts p ON (oi.parts_id = p.id)
-		    JOIN oe o ON (oi.trans_id = o.id)
-		    JOIN vendor ct ON (o.vendor_id = ct.id)
-		    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		    WHERE $ordwhere
-		    AND o.vendor_id > 0|;
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'purchase_order' AS type,
+               (SELECT sell FROM exchangerate ex
+               WHERE ex.curr = o.curr AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN vendor ct ON (o.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $ordwhere AND (o.vendor_id > 0)|;
+        $union = qq| UNION |;
+
+        push(@all_values, @ordvalues);
       }
 
     }
 
     if ($form->{rfq} || $form->{quoted}) {
-      my $quowhere = "$where
-		     AND o.quotation = '1'";
-      $quowhere .= " AND o.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $quowhere .= " AND o.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      my $quowhere = $where . qq| AND o.quotation = '1'|;
+      my @quovalues = @values;
 
-      if ($form->{description}) {
-        $var = $form->like(lc $form->{description});
-        $quowhere .= " AND lower(oi.description) LIKE '$var'";
+      if ($form->{transdatefrom}) {
+        $quowhere .= qq| AND o.transdate >= ?|;
+        push(@quovalues, $form->{transdatefrom});
       }
 
-      $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                 oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
-	         p.listprice, p.lastcost, p.rop, p.weight,
-		 p.priceupdate, p.image, p.drawing, p.microfiche,
-		 pg.partsgroup,
-		 '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-		 ct.name|;
+      if ($form->{transdateto}) {
+        $quowhere .= qq| AND o.transdate <= ?|;
+        push(@quovalues, $form->{transdateto});
+      }
+
+      if ($form->{description}) {
+        $quowhere .= qq| AND oi.description ILIKE ?|;
+        push(@quovalues, '%' . $form->{description} . '%');
+      }
 
       if ($form->{quoted}) {
-        $query .= qq|$union
-                     SELECT $flds, 'oe' AS module, 'sales_quotation' AS type,
-		    (SELECT buy FROM exchangerate ex
-		     WHERE ex.curr = o.curr
-		     AND ex.transdate = o.transdate) AS exchangerate
-		     FROM orderitems oi
-		     JOIN parts p ON (oi.parts_id = p.id)
-		     JOIN oe o ON (oi.trans_id = o.id)
-		     JOIN customer ct ON (o.customer_id = ct.id)
-		     LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		     WHERE $quowhere
-		     AND o.customer_id > 0|;
-        $union = "
-	          UNION";
+        $query .=
+          qq|$union
+
+             SELECT
+               p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate, 'oe' AS module, 'sales_quotation' AS type,
+               (SELECT buy FROM exchangerate ex
+                WHERE (ex.curr = o.curr) AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN customer ct ON (o.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $quowhere
+             AND o.customer_id > 0|;
+        $union = qq| UNION |;
+
+        push(@all_values, @quovalues);
       }
 
       if ($form->{rfq}) {
-        $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                   oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
-		   p.listprice, p.lastcost, p.rop, p.weight,
-		   p.priceupdate, p.image, p.drawing, p.microfiche,
-		   pg.partsgroup,
-		   '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-		   ct.name|;
-
-        $query .= qq|$union
-	            SELECT $flds, 'oe' AS module, 'request_quotation' AS type,
-		    (SELECT sell FROM exchangerate ex
-		     WHERE ex.curr = o.curr
-		     AND ex.transdate = o.transdate) AS exchangerate
-		    FROM orderitems oi
-		    JOIN parts p ON (oi.parts_id = p.id)
-		    JOIN oe o ON (oi.trans_id = o.id)
-		    JOIN vendor ct ON (o.vendor_id = ct.id)
-		    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-		    WHERE $quowhere
-		    AND o.vendor_id > 0|;
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'request_quotation' AS type,
+               (SELECT sell FROM exchangerate ex
+               WHERE (ex.curr = o.curr) AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN vendor ct ON (o.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $quowhere
+             AND o.vendor_id > 0|;
+
+        push(@all_values, @quovalues);
       }
 
     }
-    $query .= qq|
-		 ORDER BY $sortorder|;
+    $query .= qq| ORDER BY  | . $sortorder;
 
   }
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
 
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{parts} }, $ref;
-  }
-
-  $sth->finish;
+  $form->{parts} = selectall_hashref_query($form, $dbh, $query, @all_values);
 
+  my @assemblies;
   # include individual items for assemblies
   if ($form->{searchitems} eq 'assembly' && $form->{bom}) {
-    foreach $item (@{ $form->{parts} }) {
-      push @assemblies, $item;
-      $query = qq|SELECT p.id, p.partnumber, p.description, a.qty AS onhand,
-                  p.unit, p.bin,
-                  p.sellprice, p.listprice, p.lastcost,
-		  p.rop, p.weight, p.priceupdate,
-		  p.image, p.drawing, p.microfiche
-		  FROM parts p, assembly a
-		  WHERE p.id = a.parts_id
-		  AND a.id = $item->{id}|;
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description, a.qty AS onhand,
+           p.unit, p.bin,
+           p.sellprice, p.listprice, p.lastcost,
+           p.rop, p.weight, p.priceupdate,
+           p.image, p.drawing, p.microfiche
+         FROM parts p, assembly a
+         WHERE (p.id = a.parts_id) AND (a.id = ?)|;
+    $sth = prepare_query($form, $dbh, $query);
 
-      $sth = $dbh->prepare($query);
-      $sth->execute || $form->dberror($query);
+    foreach $item (@{ $form->{parts} }) {
+      push(@assemblies, $item);
+      do_statement($form, $sth, $query, conv_i($item->{id}));
 
-      while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
+      while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
         $ref->{assemblyitem} = 1;
-        push @assemblies, $ref;
+        push(@assemblies, $ref);
       }
       $sth->finish;
 
-      push @assemblies, { id => $item->{id} };
+      push(@assemblies, { id => $item->{id} });
 
     }
 
     # copy assemblies to $form->{parts}
-    @{ $form->{parts} } = @assemblies;
+    $form->{parts} = \@assemblies;
   }
 
   $dbh->disconnect;
   $main::lxdebug->leave_sub();
 }
 
+sub update_prices {
+  $main::lxdebug->enter_sub();
+
+  my ($self, $myconfig, $form) = @_;
+  my @where_values;
+  my $where = '1 = 1';
+  my $var;
+
+  my $group;
+  my $limit;
+
+  my @where_values;
+
+  if ($item ne 'make') {
+    foreach my $item (qw(partnumber drawing microfiche make model pg.partsgroup)) {
+      my $column = $item;
+      $column =~ s/.*\.//;
+      next unless ($form->{$column});
+      $where .= qq| AND $item ILIKE ?|;
+      push(@where_values, '%' . $form->{$column} . '%');
+    }
+  }
+
+  # special case for description
+  if ($form->{description}
+      && !(   $form->{bought}  || $form->{sold} || $form->{onorder}
+           || $form->{ordered} || $form->{rfq} || $form->{quoted})) {
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@where_values, '%' . $form->{description} . '%');
+  }
+
+  # special case for serialnumber
+  if ($form->{l_serialnumber} && $form->{serialnumber}) {
+    $where .= qq| AND serialnumber ILIKE ?|;
+    push(@where_values, '%' . $form->{serialnumber} . '%');
+  }
+
+
+  # items which were never bought, sold or on an order
+  if ($form->{itemstatus} eq 'orphaned') {
+    $form->{onhand}  = $form->{short}   = 0;
+    $form->{bought}  = $form->{sold}    = 0;
+    $form->{onorder} = $form->{ordered} = 0;
+    $form->{rfq}     = $form->{quoted}  = 0;
+
+    $form->{transdatefrom} = $form->{transdateto} = "";
+
+    $where .=
+      qq| AND (p.onhand = 0)
+          AND p.id NOT IN
+            (
+              SELECT DISTINCT parts_id FROM invoice
+              UNION
+              SELECT DISTINCT parts_id FROM assembly
+              UNION
+              SELECT DISTINCT parts_id FROM orderitems
+            )|;
+  }
+
+  if ($form->{itemstatus} eq 'active') {
+    $where .= qq| AND p.obsolete = '0'|;
+  }
+
+  if ($form->{itemstatus} eq 'obsolete') {
+    $where .= qq| AND p.obsolete = '1'|;
+    $form->{onhand} = $form->{short} = 0;
+  }
+
+  if ($form->{itemstatus} eq 'onhand') {
+    $where .= qq| AND p.onhand > 0|;
+  }
+
+  if ($form->{itemstatus} eq 'short') {
+    $where .= qq| AND p.onhand < p.rop|;
+  }
+
+  foreach my $column (qw(make model)) {
+    next unless ($form->{$colum});
+    $where .= qq| AND p.id IN (SELECT DISTINCT parts_id FROM makemodel WHERE $column ILIKE ?|;
+    push(@where_values, '%' . $form->{$column} . '%');
+  }
+
+  # connect to database
+  my $dbh = $form->dbconnect_noauto($myconfig);
+
+  for my $column (qw(sellprice listprice)) {
+    next if ($form->{$column} eq "");
+
+    my $value = $form->parse_amount($myconfig, $form->{$column});
+    my $operator = '+';
+
+    if ($form->{"${column}_type"} eq "percent") {
+      $value = ($value / 100) + 1;
+      $operator = '*';
+    }
+
+    $query =
+      qq|UPDATE parts SET $column = $column $operator ?
+         WHERE id IN
+           (SELECT p.id
+            FROM parts p
+            LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+            WHERE $where)|;
+    do_query($from, $dbh, $query, $value, @where_values);
+  }
+
+  my $q_add =
+    qq|UPDATE prices SET price = price + ?
+       WHERE parts_id IN
+         (SELECT p.id
+          FROM parts p
+          LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+          WHERE $where) AND (pricegroup_id = ?)|;
+  my $sth_add = prepare_query($form, $dbh, $q_add);
+
+  my $q_multiply =
+    qq|UPDATE prices SET price = price * ?
+       WHERE parts_id IN
+         (SELECT p.id
+          FROM parts p
+          LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+          WHERE $where) AND (pricegroup_id = ?)|;
+  my $sth_multiply = prepare_query($form, $dbh, $q_multiply);
+
+  for my $i (1 .. $form->{price_rows}) {
+    next if ($form->{"price_$i"} eq "");
+
+    my $value = $form->parse_amount($myconfig, $form->{"price_$i"});
+
+    if ($form->{"pricegroup_type_$i"} eq "percent") {
+      do_statement($form, $sth_multiply, $q_multiply, ($value / 100) + 1, @where_values, conv_i($form->{"pricegroup_id_$i"}));
+    } else {
+      do_statement($form, $sth_add, $q_add, $value, @where_values, conv_i($form->{"pricegroup_id_$i"}));
+    }
+  }
+
+  $sth_add->finish();
+  $sth_multiply->finish();
+
+  my $rc= $dbh->commit;
+  $dbh->disconnect;
+
+  $main::lxdebug->leave_sub();
+
+  return $rc;
+}
+
 sub create_links {
   $main::lxdebug->enter_sub();
 
@@ -1208,25 +1342,29 @@ sub create_links {
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
+  my @values = ('%' . $module . '%');
+
   if ($form->{id}) {
-    $query = qq|SELECT c.accno, c.description, c.link, c.id,
-			p.inventory_accno_id, p.income_accno_id, p.expense_accno_id
-			FROM chart c, parts p
-			WHERE c.link LIKE '%$module%'
-			AND p.id = $form->{id}
-			ORDER BY c.accno|;
+    $query =
+      qq|SELECT c.accno, c.description, c.link, c.id,
+           p.inventory_accno_id, p.income_accno_id, p.expense_accno_id
+         FROM chart c, parts p
+         WHERE (c.link LIKE ?) AND (p.id = ?)
+         ORDER BY c.accno|;
+    push(@values, conv_i($form->{id}));
+
   } else {
-    $query = qq|SELECT c.accno, c.description, c.link, c.id,
-		d.inventory_accno_id, d.income_accno_id, d.expense_accno_id
-		FROM chart c, defaults d
-		WHERE c.link LIKE '%$module%'
-		ORDER BY c.accno|;
+    $query =
+      qq|SELECT c.accno, c.description, c.link, c.id,
+           d.inventory_accno_id, d.income_accno_id, d.expense_accno_id
+         FROM chart c, defaults d
+         WHERE c.link LIKE ?
+         ORDER BY c.accno|;
   }
 
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $sth = prepare_execute_query($form, $dbh, $query, @values);
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    foreach my $key (split /:/, $ref->{link}) {
+    foreach my $key (split(/:/, $ref->{link})) {
       if ($key =~ /$module/) {
         if (   ($ref->{id} eq $ref->{inventory_accno_id})
             || ($ref->{id} eq $ref->{income_accno_id})
@@ -1235,6 +1373,7 @@ sub create_links {
             { accno       => $ref->{accno},
               description => $ref->{description},
               selected    => "selected" };
+          $form->{"${key}_default"} = "$ref->{accno}--$ref->{description}";
             } else {
           push @{ $form->{"${module}_links"}{$key} },
             { accno       => $ref->{accno},
@@ -1246,23 +1385,14 @@ sub create_links {
   }
   $sth->finish;
 
-  if ($form->{id}) {
-    $query = qq|SELECT weightunit
-                FROM defaults|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+  # get buchungsgruppen
+  $form->{BUCHUNGSGRUPPEN} = selectall_hashref_query($form, $dbh, qq|SELECT id, description FROM buchungsgruppen|);
 
-    ($form->{weightunit}) = $sth->fetchrow_array;
-    $sth->finish;
-
-  } else {
-    $query = qq|SELECT weightunit, current_date
-                FROM defaults|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+  # get payment terms
+  $form->{payment_terms} = selectall_hashref_query($form, $dbh, qq|SELECT id, description FROM payment_terms ORDER BY sortkey|);
 
-    ($form->{weightunit}, $form->{priceupdate}) = $sth->fetchrow_array;
-    $sth->finish;
+  if (!$form->{id}) {
+    ($form->{priceupdate}) = selectrow_query($form, $dbh, qq|SELECT current_date|);
   }
 
   $dbh->disconnect;
@@ -1275,38 +1405,45 @@ sub get_parts {
 
   my ($self, $myconfig, $form, $sortorder) = @_;
   my $dbh   = $form->dbconnect($myconfig);
-  my $order = " p.partnumber";
-  my $where = "1 = 1";
+  my $order = qq| p.partnumber|;
+  my $where = qq|1 = 1|;
+  my @values;
 
   if ($sortorder eq "all") {
-    $where .= " AND p.partnumber LIKE '%$form->{partnumber}%'";
-    $where .= " AND p.description LIKE '%$form->{description}%'";
-  } else {
-    if ($sortorder eq "partnumber") {
-      $where .= " AND p.partnumber LIKE '%$form->{partnumber}%'";
-      $order = qq|p.$sortorder|;
-    }
-    if ($sortorder eq "description") {
-      $where .= " AND p.description LIKE '%$form->{description}%'";
-    }
+    $where .= qq| AND (partnumber ILIKE ?) AND (description ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%', '%' . $form->{description} . '%');
+
+  } elsif ($sortorder eq "partnumber") {
+    $where .= qq| AND (partnumber ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%');
+
+  } elsif ($sortorder eq "description") {
+    $where .= qq| AND (description ILIKE ?)|;
+    push(@values, '%' . $form->{description} . '%');
+    $order = "description";
+
   }
 
   my $query =
-    qq|SELECT p.id, p.partnumber, p.description, p.unit, p.sellprice FROM parts p WHERE $where ORDER BY $order|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $self->dberror($query);
+    qq|SELECT id, partnumber, description, unit, sellprice
+       FROM parts
+       WHERE $where ORDER BY $order|;
+
+  my $sth = prepare_execute_query($form, $dbh, $query, @values);
+
   my $j = 0;
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
     if (($ref->{partnumber} eq "*") && ($ref->{description} eq "")) {
-    } else {
-      $j++;
-      $form->{"id_$j"}          = $ref->{id};
-      $form->{"partnumber_$j"}  = $ref->{partnumber};
-      $form->{"description_$j"} = $ref->{description};
-      $form->{"unit_$j"}        = $ref->{unit};
-      $form->{"sellprice_$j"}   = $ref->{sellprice};
-      $form->{"soldtotal_$j"}   = get_soldtotal($dbh, $ref->{id});
-    }    #fi
+      next;
+    }
+
+    $j++;
+    $form->{"id_$j"}          = $ref->{id};
+    $form->{"partnumber_$j"}  = $ref->{partnumber};
+    $form->{"description_$j"} = $ref->{description};
+    $form->{"unit_$j"}        = $ref->{unit};
+    $form->{"sellprice_$j"}   = $ref->{sellprice};
+    $form->{"soldtotal_$j"}   = get_soldtotal($dbh, $ref->{id});
   }    #while
   $form->{rows} = $j;
   $sth->finish;
@@ -1323,106 +1460,177 @@ sub get_soldtotal {
 
   my ($dbh, $id) = @_;
 
-  my $query =
-    qq|SELECT sum(i.qty) as totalsold FROM invoice i WHERE i.parts_id = $id|;
-
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  my $sum = 0;
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-
-    $sum = $ref->{totalsold};
-  }    #while
-  $sth->finish;
-
-  if ($sum eq undef) {
-    $sum = 0;
-  }    #fi
+  my $query = qq|SELECT sum(qty) FROM invoice WHERE parts_id = ?|;
+  my ($sum) = selectrow_query($form, $dbh, $query, conv_i($id));
+  $sum ||= 0;
 
   $main::lxdebug->leave_sub();
 
   return $sum;
 }    #end get_soldtotal
 
-sub retrieve_item {
+sub retrieve_languages {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
-  my $i     = $form->{rowcount};
-  my $where = "NOT p.obsolete = '1'";
 
-  if ($form->{"partnumber_$i"}) {
-    my $partnumber = $form->like(lc $form->{"partnumber_$i"});
-    $where .= " AND lower(p.partnumber) LIKE '$partnumber'";
-  }
-  if ($form->{"description_$i"}) {
-    my $description = $form->like(lc $form->{"description_$i"});
-    $where .= " AND lower(p.description) LIKE '$description'";
+  # connect to database
+  my $dbh = $form->dbconnect($myconfig);
+
+  my @values;
+  my $where;
+
+  if ($form->{language_values} ne "") {
+    $query =
+      qq|SELECT l.id, l.description, tr.translation, tr.longdescription
+         FROM language l
+         LEFT OUTER JOIN translation tr ON (tr.language_id = l.id) AND (tr.parts_id = ?)|;
+    @values = (conv_i($form->{id}));
+
+  } else {
+    $query = qq|SELECT id, description FROM language|;
   }
 
-  if ($form->{"partsgroup_$i"}) {
-    my $partsgroup = $form->like(lc $form->{"partsgroup_$i"});
-    $where .= " AND lower(pg.partsgroup) LIKE '$partsgroup'";
+  my $languages = selectall_hashref_query($form, $dbh, $query, @values);
+
+  $dbh->disconnect;
+
+  $main::lxdebug->leave_sub();
+
+  return $languages;
+}
+
+sub follow_account_chain {
+  $main::lxdebug->enter_sub(2);
+
+  my ($self, $form, $dbh, $transdate, $accno_id, $accno) = @_;
+
+  my @visited_accno_ids = ($accno_id);
+
+  my ($query, $sth);
+
+  $query =
+    qq|SELECT c.new_chart_id, date($transdate) >= c.valid_from AS is_valid, | .
+    qq|  cnew.accno | .
+    qq|FROM chart c | .
+    qq|LEFT JOIN chart cnew ON c.new_chart_id = cnew.id | .
+    qq|WHERE (c.id = ?) AND NOT c.new_chart_id ISNULL AND (c.new_chart_id > 0)|;
+  $sth = prepare_query($form, $dbh, $query);
+
+  while (1) {
+    do_statement($form, $sth, $query, $accno_id);
+    $ref = $sth->fetchrow_hashref();
+    last unless ($ref && $ref->{"is_valid"} &&
+                 !grep({ $_ == $ref->{"new_chart_id"} } @visited_accno_ids));
+    $accno_id = $ref->{"new_chart_id"};
+    $accno = $ref->{"accno"};
+    push(@visited_accno_ids, $accno_id);
   }
 
-  if ($form->{"description_$i"}) {
-    $where .= " ORDER BY description";
+  $main::lxdebug->leave_sub(2);
+
+  return ($accno_id, $accno);
+}
+
+sub retrieve_accounts {
+  $main::lxdebug->enter_sub(2);
+
+  my ($self, $myconfig, $form, $parts_id, $index) = @_;
+
+  my ($query, $sth, $dbh);
+
+  $form->{"taxzone_id"} *= 1;
+
+  $dbh = $form->dbconnect($myconfig);
+
+  my $transdate = "";
+  if ($form->{type} eq "invoice") {
+    if (($form->{vc} eq "vendor") || !$form->{deliverydate}) {
+      $transdate = $form->{invdate};
+    } else {
+      $transdate = $form->{deliverydate};
+    }
+  } elsif ($form->{type} eq "credit_note") {
+    $transdate = $form->{invdate};
   } else {
-    $where .= " ORDER BY partnumber";
+    $transdate = $form->{transdate};
   }
 
-  # connect to database
-  my $dbh = $form->dbconnect($myconfig);
+  if ($transdate eq "") {
+    $transdate = "current_date";
+  } else {
+    $transdate = $dbh->quote($transdate);
+  }
 
-  my $query = qq|SELECT p.id, p.partnumber, p.description, p.sellprice,
-                        p.listprice,
-                        c1.accno AS inventory_accno,
-			c2.accno AS income_accno,
-			c3.accno AS expense_accno,
-		 p.unit, p.assembly, p.bin, p.onhand, p.notes AS partnotes,
-		 pg.partsgroup
-                 FROM parts p
-		 LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
-		 LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
-		 LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
-		 LEFT JOIN partsgroup pg ON (pg.id = p.partsgroup_id)
-	         WHERE $where|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  #while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
+  $query =
+    qq|SELECT | .
+    qq|  p.inventory_accno_id AS is_part, | .
+    qq|  bg.inventory_accno_id, | .
+    qq|  bg.income_accno_id_$form->{taxzone_id} AS income_accno_id, | .
+    qq|  bg.expense_accno_id_$form->{taxzone_id} AS expense_accno_id, | .
+    qq|  c1.accno AS inventory_accno, | .
+    qq|  c2.accno AS income_accno, | .
+    qq|  c3.accno AS expense_accno | .
+    qq|FROM parts p | .
+    qq|LEFT JOIN buchungsgruppen bg ON p.buchungsgruppen_id = bg.id | .
+    qq|LEFT JOIN chart c1 ON bg.inventory_accno_id = c1.id | .
+    qq|LEFT JOIN chart c2 ON bg.income_accno_id_$form->{taxzone_id} = c2.id | .
+    qq|LEFT JOIN chart c3 ON bg.expense_accno_id_$form->{taxzone_id} = c3.id | .
+    qq|WHERE p.id = ?|;
+  my $ref = selectfirst_hashref_query($form, $dbh, $query, $parts_id);
+
+  if (!$ref) {
+    $dbh->disconnect();
+    return $main::lxdebug->leave_sub(2);
+  }
 
-  # get tax rates and description
-  #$accno_id = ($form->{vc} eq "customer") ? $ref->{income_accno} : $ref->{inventory_accno};
-  #$query = qq|SELECT c.accno, c.description, t.rate, t.taxnumber
-  #	      FROM chart c, tax t
-  #	      WHERE c.id=t.chart_id AND t.taxkey in (SELECT taxkey_id from chart where accno = '$accno_id')
-  #	      ORDER BY accno|;
-  # $stw = $dbh->prepare($query);
-  #$stw->execute || $form->dberror($query);
+  $ref->{"inventory_accno_id"} = undef unless ($ref->{"is_part"});
 
-  #$ref->{taxaccounts} = "";
-  #while ($ptr = $stw->fetchrow_hashref(NAME_lc)) {
+  my %accounts;
+  foreach my $type (qw(inventory income expense)) {
+    next unless ($ref->{"${type}_accno_id"});
+    ($accounts{"${type}_accno_id"}, $accounts{"${type}_accno"}) =
+      $self->follow_account_chain($form, $dbh, $transdate,
+                                  $ref->{"${type}_accno_id"},
+                                  $ref->{"${type}_accno"});
+  }
 
-  #   $form->{"$ptr->{accno}_rate"} = $ptr->{rate};
-  #  $form->{"$ptr->{accno}_description"} = $ptr->{description};
-  #   $form->{"$ptr->{accno}_taxnumber"} = $ptr->{taxnumber};
-  #   $form->{taxaccounts} .= "$ptr->{accno} ";
-  #   $ref->{taxaccounts} .= "$ptr->{accno} ";
+  map({ $form->{"${_}_accno_$index"} = $accounts{"${_}_accno"} }
+      qw(inventory income expense));
 
-  #}
+  my $inc_exp = $form->{"vc"} eq "customer" ? "income" : "expense";
+  my $accno_id = $accounts{"${inc_exp}_accno_id"};
 
-  #$stw->finish;
-  #chop $ref->{taxaccounts};
+  $query =
+    qq|SELECT c.accno, t.taxdescription AS description, t.rate, t.taxnumber | .
+    qq|FROM tax t | .
+    qq|LEFT JOIN chart c ON c.id = t.chart_id | .
+    qq|WHERE t.id IN | .
+    qq|  (SELECT tk.tax_id | .
+    qq|   FROM taxkeys tk | .
+    qq|   WHERE tk.chart_id = ? AND startdate <= | . quote_db_date($transdate) .
+    qq|   ORDER BY startdate DESC LIMIT 1) |;
+  $ref = selectfirst_hashref_query($form, $dbh, $query, $accno_id);
+
+  unless ($ref) {
+    $main::lxdebug->leave_sub(2);
+    return;
+  }
 
-  push @{ $form->{item_list} }, $ref;
+  $form->{"taxaccounts_$index"} = $ref->{"accno"};
+  if ($form->{"taxaccounts"} !~ /$ref->{accno}/) {
+    $form->{"taxaccounts"} .= "$ref->{accno} ";
+  }
+  map({ $form->{"$ref->{accno}_${_}"} = $ref->{$_}; }
+      qw(rate description taxnumber));
 
-  #}
-  $sth->finish;
-  $dbh->disconnect;
+#   $main::lxdebug->message(0, "formvars: rate " . $form->{"$ref->{accno}_rate"} .
+#                           " description " . $form->{"$ref->{accno}_description"} .
+#                           " taxnumber " . $form->{"$ref->{accno}_taxnumber"} .
+#                           " || taxaccounts_$index " . $form->{"taxaccounts_$index"} .
+#                           " || taxaccounts " . $form->{"taxaccounts"});
 
-  $main::lxdebug->leave_sub();
+  $main::lxdebug->leave_sub(2);
 }
 
 1;