X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=WEB-INF%2Flib%2FttPredefinedExpenseHelper.class.php;h=8ec8ccfee9da96833d2dff56b5b03b70cb452d45;hb=f787edd7045299de3885c052d243b446f7324ea0;hp=670e061c459010c8ffaebe13da2cb2c8d0d1e4aa;hpb=f8292d356ef3ac53b2bb1183dd462f7c453c20e5;p=timetracker.git diff --git a/WEB-INF/lib/ttPredefinedExpenseHelper.class.php b/WEB-INF/lib/ttPredefinedExpenseHelper.class.php index 670e061c..8ec8ccfe 100644 --- a/WEB-INF/lib/ttPredefinedExpenseHelper.class.php +++ b/WEB-INF/lib/ttPredefinedExpenseHelper.class.php @@ -31,21 +31,21 @@ class ttPredefinedExpenseHelper { // get - gets predefined expense details. - static function get($id) - { + static function get($id) { global $user; - $replaceDecimalMark = ('.' != $user->decimal_mark); - $mdb2 = getConnection(); - $sql = "select id, name, cost from tt_predefined_expenses - where id = $id and group_id = ".$user->getGroup(); + $group_id = $user->getGroup(); + $org_id = $user->org_id; + + $sql = "select id, name, cost from tt_predefined_expenses". + " where id = $id and group_id = $group_id and org_id = $org_id"; $res = $mdb2->query($sql); if (!is_a($res, 'PEAR_Error')) { $val = $res->fetchRow(); if ($val && $val['id']) { - if ($replaceDecimalMark) - $val['cost'] = str_replace('.', $user->decimal_mark, $val['cost']); + if ('.' != $user->getDecimalMark()) + $val['cost'] = str_replace('.', $user->getDecimalMark(), $val['cost']); return $val; } } @@ -55,10 +55,13 @@ class ttPredefinedExpenseHelper { // delete - deletes a predefined expense from tt_predefined_expenses table. static function delete($id) { global $user; - $mdb2 = getConnection(); - $sql = "delete from tt_predefined_expenses where id = $id and group_id = ".$user->getGroup(); + $group_id = $user->getGroup(); + $org_id = $user->org_id; + + $sql = "delete from tt_predefined_expenses". + " where id = $id and group_id = $group_id and org_id = $org_id"; $affected = $mdb2->exec($sql); if (is_a($affected, 'PEAR_Error')) return false; @@ -77,7 +80,7 @@ class ttPredefinedExpenseHelper { $name = $fields['name']; $cost = $fields['cost']; if ('.' != $user->getDecimalMark()) - $cost = str_replace($user->getDecimalMark, '.', $cost); + $cost = str_replace($user->getDecimalMark(), '.', $cost); $sql = "insert into tt_predefined_expenses (group_id, org_id, name, cost)". " values ($group_id, $org_id, ".$mdb2->quote($name).", ".$mdb2->quote($cost).")"; @@ -89,19 +92,18 @@ class ttPredefinedExpenseHelper { } // update function - updates a predefined expense in database. - static function update($fields) - { + static function update($fields) { global $user; - $mdb2 = getConnection(); $group_id = $user->getGroup(); $org_id = $user->org_id; + $predefined_expense_id = (int) $fields['id']; $name = $fields['name']; $cost = $fields['cost']; - if ('.' != $user->decimal_mark) - $cost = str_replace($user->decimal_mark, '.', $cost); + if ('.' != $user->getDecimalMark()) + $cost = str_replace($user->getDecimalMark(), '.', $cost); $sql = "update tt_predefined_expenses set name = ".$mdb2->quote($name).", cost = ".$mdb2->quote($cost). " where id = $predefined_expense_id and group_id = $group_id and org_id = $org_id";