Kosmetik

[kivitendo-erp.git] / SL / IC.pm

diff --git a/SL/IC.pm b/SL/IC.pm
index fd8a23061f5b208d89b3b6fb09d706d40ab077ab..f69e98ce2ded8e530d56ff4debeed67ca4c44354 100644 (file)
--- a/SL/IC.pm
+++ b/SL/IC.pm
@@ -34,6 +34,8 @@
 
 package IC;
 use Data::Dumper;
 
 package IC;
 use Data::Dumper;

+use SL::DBUtils;
+

 sub get_part {
   $main::lxdebug->enter_sub();
 
 sub get_part {
   $main::lxdebug->enter_sub();
 


@@ -42,26 +44,25 @@ sub get_part {
   # connect to db
   my $dbh = $form->dbconnect($myconfig);
 
   # connect to db
   my $dbh = $form->dbconnect($myconfig);
 

-  my $query = qq|SELECT p.*,
-                 c1.accno AS inventory_accno,
-                c2.accno AS income_accno,
-                c3.accno AS expense_accno,
-                pg.partsgroup
-                FROM parts p
-                LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
-                LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
-                LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
-                LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                 WHERE p.id = $form->{id}|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-  my $ref = $sth->fetchrow_hashref(NAME_lc);
+  my $sth;
+
+  my $query =
+    qq|SELECT p.*,
+         c1.accno AS inventory_accno,
+         c2.accno AS income_accno,
+         c3.accno AS expense_accno,
+         pg.partsgroup
+       FROM parts p
+       LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
+       LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
+       LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
+       LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+       WHERE p.id = ? |;
+  my $ref = selectfirst_hashref_query($form, $dbh, $query, conv_i($form->{id}));

 
   # copy to $form variables
   map { $form->{$_} = $ref->{$_} } (keys %{$ref});
 
 
   # copy to $form variables
   map { $form->{$_} = $ref->{$_} } (keys %{$ref});
 

-  $sth->finish;
-

   my %oid = ('Pg'     => 'a.oid',
              'Oracle' => 'a.rowid');
 
   my %oid = ('Pg'     => 'a.oid',
              'Oracle' => 'a.rowid');
 


@@ -71,17 +72,16 @@ sub get_part {
     $form->{item} = 'assembly';
 
     # retrieve assembly items
     $form->{item} = 'assembly';
 
     # retrieve assembly items

-    $query = qq|SELECT p.id, p.partnumber, p.description,
-                p.sellprice, p.weight, a.qty, a.bom, p.unit,
-               pg.partsgroup
-                FROM parts p
-               JOIN assembly a ON (a.parts_id = p.id)
-               LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-               WHERE a.id = $form->{id}
-               ORDER BY $oid{$myconfig->{dbdriver}}|;
-
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description,
+           p.sellprice, p.weight, a.qty, a.bom, p.unit,
+           pg.partsgroup
+         FROM parts p
+         JOIN assembly a ON (a.parts_id = p.id)
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+         WHERE (a.id = ?)
+         ORDER BY $oid{$myconfig->{dbdriver}}|;
+    $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));

 
     $form->{assembly_rows} = 0;
     while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
 
     $form->{assembly_rows} = 0;
     while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {


@@ -101,28 +101,27 @@ sub get_part {
   $form->{amount}{IC_expense} = $form->{expense_accno};
   $form->{amount}{IC_cogs}    = $form->{expense_accno};
 
   $form->{amount}{IC_expense} = $form->{expense_accno};
   $form->{amount}{IC_cogs}    = $form->{expense_accno};
 

+  my @pricegroups          = ();
+  my @pricegroups_not_used = ();
+

   # get prices
   $query =
   # get prices
   $query =

-    qq|SELECT p.parts_id, p.pricegroup_id, p.price, (SELECT pg.pricegroup FROM pricegroup pg WHERE pg.id=p.pricegroup_id) AS pricegroup FROM prices p
-              WHERE parts_id = $form->{id}
-              ORDER by pricegroup|;
-
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  @pricegroups          = ();
-  @pricegroups_not_used = ();
+    qq|SELECT p.parts_id, p.pricegroup_id, p.price,
+         (SELECT pg.pricegroup
+          FROM pricegroup pg
+          WHERE pg.id = p.pricegroup_id) AS pricegroup
+       FROM prices p
+       WHERE (parts_id = ?)
+       ORDER BY pricegroup|;
+  $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));

 
   #for pricegroups
   my $i = 1;
 
   #for pricegroups
   my $i = 1;

-  while (
-         ($form->{"klass_$i"}, $form->{"pricegroup_id_$i"},
+  while (($form->{"klass_$i"}, $form->{"pricegroup_id_$i"},

           $form->{"price_$i"}, $form->{"pricegroup_$i"})
           $form->{"price_$i"}, $form->{"pricegroup_$i"})

-         = $sth->fetchrow_array
-    ) {
+         = $sth->fetchrow_array()) {

     $form->{"price_$i"} = $form->round_amount($form->{"price_$i"}, 5);
     $form->{"price_$i"} = $form->round_amount($form->{"price_$i"}, 5);

-    $form->{"price_$i"} =
-      $form->format_amount($myconfig, $form->{"price_$i"}, 5);
+    $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);

     push @pricegroups, $form->{"pricegroup_id_$i"};
     $i++;
   }
     push @pricegroups, $form->{"pricegroup_id_$i"};
     $i++;
   }


@@ -130,28 +129,19 @@ sub get_part {
   $sth->finish;
 
   # get pricegroups
   $sth->finish;
 
   # get pricegroups

-  $query = qq|SELECT p.id, p.pricegroup FROM pricegroup p|;
-
-  $pkq = $dbh->prepare($query);
-  $pkq->execute || $form->dberror($query);
-  while ($pkr = $pkq->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{PRICEGROUPS} }, $pkr;
-  }
-  $pkq->finish;
+  $query = qq|SELECT id, pricegroup FROM pricegroup|;
+  $form->{PRICEGROUPS} = selectall_hashref_query($form, $dbh, $query);

 
   #find not used pricegroups
 
   #find not used pricegroups

-  while ($tmp = pop @{ $form->{PRICEGROUPS} }) {
-    my $insert = 0;
-    foreach $item (@pricegroups) {
+  while ($tmp = pop(@{ $form->{PRICEGROUPS} })) {
+    my $in_use = 0;
+    foreach my $item (@pricegroups) {

       if ($item eq $tmp->{id}) {
       if ($item eq $tmp->{id}) {

-
-        #drop
-        $insert = 1;
+        $in_use = 1;
+        last;

       }
     }
       }
     }

-    if ($insert == 0) {
-      push @pricegroups_not_used, $tmp;
-    }
+    push(@pricegroups_not_used, $tmp) unless ($in_use);

   }
 
   # if not used pricegroups are avaible
   }
 
   # if not used pricegroups are avaible


@@ -160,8 +150,7 @@ sub get_part {
     foreach $name (@pricegroups_not_used) {
       $form->{"klass_$i"} = "$name->{id}";
       $form->{"price_$i"} = $form->round_amount($form->{sellprice}, 5);
     foreach $name (@pricegroups_not_used) {
       $form->{"klass_$i"} = "$name->{id}";
       $form->{"price_$i"} = $form->round_amount($form->{sellprice}, 5);

-      $form->{"price_$i"} =
-        $form->format_amount($myconfig, $form->{"price_$i"}, 5);
+      $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);

       $form->{"pricegroup_id_$i"} = "$name->{id}";
       $form->{"pricegroup_$i"}    = "$name->{pricegroup}";
       $i++;
       $form->{"pricegroup_id_$i"} = "$name->{id}";
       $form->{"pricegroup_$i"}    = "$name->{pricegroup}";
       $i++;


@@ -175,11 +164,11 @@ sub get_part {
 
     # get makes
     if ($form->{makemodel}) {
 
     # get makes
     if ($form->{makemodel}) {

-      $query = qq|SELECT m.make, m.model FROM makemodel m
-                  WHERE m.parts_id = $form->{id}|;
-
+      $query = qq|SELECT m.make, m.model FROM makemodel m | .
+               qq|WHERE m.parts_id = ?|;
+      @values = ($form->{id});

       $sth = $dbh->prepare($query);
       $sth = $dbh->prepare($query);

-      $sth->execute || $form->dberror($query);
+      $sth->execute(@values) || $form->dberror("$query (" . join(', ', @values) . ")");

 
       my $i = 1;
       while (($form->{"make_$i"}, $form->{"model_$i"}) = $sth->fetchrow_array)
 
       my $i = 1;
       while (($form->{"make_$i"}, $form->{"model_$i"}) = $sth->fetchrow_array)


@@ -192,15 +181,21 @@ sub get_part {
     }
   }
 
     }
   }
 

-  # now get accno for taxes
-  $query = qq|SELECT c.accno
-              FROM chart c, partstax pt
-             WHERE pt.chart_id = c.id
-             AND pt.parts_id = $form->{id}|;
-
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  # get translations
+  $form->{language_values} = "";
+  $query = qq|SELECT language_id, translation FROM translation WHERE parts_id = ?|;
+  my $trq = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));
+  while ($tr = $trq->fetchrow_hashref(NAME_lc)) {
+    $form->{language_values} .= "---+++---".$tr->{language_id}."--++--".$tr->{translation};
+  }
+  $trq->finish;

 
 

+  # now get accno for taxes
+  $query =
+    qq|SELECT c.accno
+       FROM chart c, partstax pt
+       WHERE (pt.chart_id = c.id) AND (pt.parts_id = ?)|;
+  $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));

   while (($key) = $sth->fetchrow_array) {
     $form->{amount}{$key} = $key;
   }
   while (($key) = $sth->fetchrow_array) {
     $form->{amount}{$key} = $key;
   }


@@ -208,23 +203,36 @@ sub get_part {
   $sth->finish;
 
   # is it an orphan
   $sth->finish;
 
   # is it an orphan

-  $query = qq|SELECT i.parts_id
-              FROM invoice i
-             WHERE i.parts_id = $form->{id}
-           UNION
-             SELECT o.parts_id
-             FROM orderitems o
-             WHERE o.parts_id = $form->{id}
-           UNION
-             SELECT a.parts_id
-             FROM assembly a
-             WHERE a.parts_id = $form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  ($form->{orphaned}) = $sth->fetchrow_array;
+  $query =
+    qq|SELECT i.parts_id
+       FROM invoice i
+       WHERE (i.parts_id = ?)
+
+       UNION
+
+       SELECT o.parts_id
+       FROM orderitems o
+       WHERE (o.parts_id = ?)
+
+       UNION
+
+       SELECT a.parts_id
+       FROM assembly a
+       WHERE (a.parts_id = ?)|;
+  @values = (conv_i($form->{id}), conv_i($form->{id}), conv_i($form->{id}));
+  ($form->{orphaned}) = selectrow_query($form, $dbh, $query, @values);

   $form->{orphaned} = !$form->{orphaned};
   $form->{orphaned} = !$form->{orphaned};

-  $sth->finish;
+
+  $form->{"unit_changeable"} = 1;
+  foreach my $table (qw(invoice assembly orderitems inventory license)) {
+    $query = qq|SELECT COUNT(*) FROM $table WHERE parts_id = ?|;
+    my ($count) = selectrow_query($form, $dbh, $query, conv_i($form->{"id"}));
+
+    if ($count) {
+      $form->{"unit_changeable"} = 0;
+      last;
+    }
+  }

 
   $dbh->disconnect;
 
 
   $dbh->disconnect;
 


@@ -235,37 +243,20 @@ sub get_pricegroups {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;

+

   my $dbh = $form->dbconnect($myconfig);
   my $dbh = $form->dbconnect($myconfig);

-  my $i = 1;
-  my @pricegroups_not_used = ();

 
   # get pricegroups
 
   # get pricegroups

-  my $query = qq|SELECT p.id, p.pricegroup FROM pricegroup p|;
-
-  my $pkq = $dbh->prepare($query);
-  $pkq->execute || $form->dberror($query);
-  while ($pkr = $pkq->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{PRICEGROUPS} }, $pkr;
-  }
-  $pkq->finish;
-
-  #find not used pricegroups
-  while ($tmp = pop @{ $form->{PRICEGROUPS} }) {
-    push @pricegroups_not_used, $tmp;
-  }
-
-  # if not used pricegroups are avaible
-  if (@pricegroups_not_used) {
+  my $query = qq|SELECT id, pricegroup FROM pricegroup|;
+  my $pricegroups = selectall_hashref_query($form, $dbh, $query);

 
 

-    foreach $name (@pricegroups_not_used) {
-      $form->{"klass_$i"} = "$name->{id}";
-      $form->{"price_$i"} = $form->round_amount($form->{sellprice}, 5);
-      $form->{"price_$i"} =
-        $form->format_amount($myconfig, $form->{"price_$i"}, 5);
-      $form->{"pricegroup_id_$i"} = "$name->{id}";
-      $form->{"pricegroup_$i"}    = "$name->{pricegroup}";
-      $i++;
-    }
+  my $i = 1;
+  foreach $pg (@{ $pricegroups }) {
+    $form->{"klass_$i"} = "$pg->{id}";
+    $form->{"price_$i"} = $form->format_amount($myconfig, $form->{"price_$i"}, -2);
+    $form->{"pricegroup_id_$i"} = "$pg->{id}";
+    $form->{"pricegroup_$i"}    = "$pg->{pricegroup}";
+    $i++;

   }
 
   #correct rows
   }
 
   #correct rows


@@ -276,20 +267,27 @@ sub get_pricegroups {
   $main::lxdebug->leave_sub();
 }
 
   $main::lxdebug->leave_sub();
 }
 

-
-sub save {
+sub retrieve_buchungsgruppen {

   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 

-  if ($form->{eur} && ($form->{item} ne 'service')) {
-    $form->{IC} = $form->{IC_expense};
-  }
+  my ($query, $sth);
+
+  my $dbh = $form->dbconnect($myconfig);
+
+  # get buchungsgruppen
+  $query = qq|SELECT id, description FROM buchungsgruppen ORDER BY sortkey|;
+  $form->{BUCHUNGSGRUPPEN} = selectall_hashref_query($form, $dbh, $query);

 
 

-  ($form->{inventory_accno}) = split(/--/, $form->{IC});
-  ($form->{expense_accno})   = split(/--/, $form->{IC_expense});
-  ($form->{income_accno})    = split(/--/, $form->{IC_income});
+  $main::lxdebug->leave_sub();
+}
+
+sub save {
+  $main::lxdebug->enter_sub();

 
 

+  my ($self, $myconfig, $form) = @_;
+  my @values;

   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 
   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 


@@ -302,57 +300,33 @@ sub save {
   # if there is a $form->{id} then replace the old entry
   # delete all makemodel entries and add the new ones
 
   # if there is a $form->{id} then replace the old entry
   # delete all makemodel entries and add the new ones
 

-  # escape '
-  map { $form->{$_} =~ s/\'/\'\'/g } qw(partnumber description notes unit);
-

   # undo amount formatting
   map { $form->{$_} = $form->parse_amount($myconfig, $form->{$_}) }
     qw(rop weight listprice sellprice gv lastcost stock);
 
   # undo amount formatting
   map { $form->{$_} = $form->parse_amount($myconfig, $form->{$_}) }
     qw(rop weight listprice sellprice gv lastcost stock);
 

-  # set date to NULL if nothing entered
-  $form->{priceupdate} =
-    ($form->{priceupdate}) ? qq|'$form->{priceupdate}'| : "NULL";
-
-  $form->{makemodel} = (($form->{make_1}) || ($form->{model_1})) ? 1 : 0;
+  my $makemodel = (($form->{make_1}) || ($form->{model_1})) ? 1 : 0;

 
 

-  $form->{alternate} = 0;

   $form->{assembly} = ($form->{item} eq 'assembly') ? 1 : 0;
   $form->{assembly} = ($form->{item} eq 'assembly') ? 1 : 0;

-  $form->{obsolete} *= 1;
-  $form->{shop}     *= 1;
-  $form->{onhand}   *= 1;
-  $form->{ve}       *= 1;
-  $form->{ge}       *= 1;

 
   my ($query, $sth);
 
   if ($form->{id}) {
 
     # get old price
 
   my ($query, $sth);
 
   if ($form->{id}) {
 
     # get old price

-    $query = qq|SELECT p.sellprice, p.weight
-                FROM parts p
-               WHERE p.id = $form->{id}|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-    my ($sellprice, $weight) = $sth->fetchrow_array;
-    $sth->finish;
+    $query = qq|SELECT sellprice, weight FROM parts WHERE id = ?|;
+    my ($sellprice, $weight) = selectrow_query($form, $dbh, $query, conv_i($form->{id}));

 
     # if item is part of an assembly adjust all assemblies
 
     # if item is part of an assembly adjust all assemblies

-    $query = qq|SELECT a.id, a.qty
-                FROM assembly a
-               WHERE a.parts_id = $form->{id}|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+    $query = qq|SELECT id, qty FROM assembly WHERE parts_id = ?|;
+    $sth = prepare_execute_query($form, $dbh, $query, conv_i($form->{id}));

     while (my ($id, $qty) = $sth->fetchrow_array) {
       &update_assembly($dbh, $form, $id, $qty, $sellprice * 1, $weight * 1);
     }
     $sth->finish;
 
     if ($form->{item} ne 'service') {
     while (my ($id, $qty) = $sth->fetchrow_array) {
       &update_assembly($dbh, $form, $id, $qty, $sellprice * 1, $weight * 1);
     }
     $sth->finish;
 
     if ($form->{item} ne 'service') {

-

       # delete makemodel records
       # delete makemodel records

-      $query = qq|DELETE FROM makemodel
-                 WHERE parts_id = $form->{id}|;
-      $dbh->do($query) || $form->dberror($query);
+      do_query($form, $dbh, qq|DELETE FROM makemodel WHERE parts_id = ?|, conv_i($form->{id}));

     }
 
     if ($form->{item} eq 'assembly') {
     }
 
     if ($form->{item} eq 'assembly') {


@@ -361,51 +335,33 @@ sub save {
       }
 
       # delete assembly records
       }
 
       # delete assembly records

-      $query = qq|DELETE FROM assembly
-                 WHERE id = $form->{id}|;
-      $dbh->do($query) || $form->dberror($query);
+      do_query($form, $dbh, qq|DELETE FROM assembly WHERE id = ?|, conv_i($form->{id}));

 
       $form->{onhand} += $form->{stock};
     }
 
     # delete tax records
 
       $form->{onhand} += $form->{stock};
     }
 
     # delete tax records

-    $query = qq|DELETE FROM partstax
-               WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
+    do_query($form, $dbh, qq|DELETE FROM partstax WHERE parts_id = ?|, conv_i($form->{id}));

 
 

-  } else {
-    my $uid = rand() . time;
-    $uid .= $form->{login};
-
-    $query = qq|SELECT p.id FROM parts p
-                WHERE p.partnumber = '$form->{partnumber}'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
+    # delete translations
+    do_query($form, $dbh, qq|DELETE FROM translation WHERE parts_id = ?|, conv_i($form->{id}));

 
 

-    if ($form->{id} ne "") {
+  } else {
+    my ($count) = selectrow_query($form, $dbh, qq|SELECT COUNT(*) FROM parts WHERE partnumber = ?|, $form->{partnumber});
+    if ($count) {

       $main::lxdebug->leave_sub();
       return 3;
     }
       $main::lxdebug->leave_sub();
       return 3;
     }

-    $query = qq|INSERT INTO parts (partnumber, description)
-                VALUES ('$uid', 'dummy')|;
-    $dbh->do($query) || $form->dberror($query);

 
 

-    $query = qq|SELECT p.id FROM parts p
-                WHERE p.partnumber = '$uid'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
+    ($form->{id}) = selectrow_query($form, $dbh, qq|SELECT nextval('id')|);
+    do_query($form, $dbh, qq|INSERT INTO parts (id, partnumber) VALUES (?, '')|, $form->{id});

 
     $form->{orphaned} = 1;
     $form->{onhand} = $form->{stock} if $form->{item} eq 'assembly';
 
     $form->{orphaned} = 1;
     $form->{onhand} = $form->{stock} if $form->{item} eq 'assembly';

-    if ($form->{partnumber} eq "" && $form->{inventory_accno} eq "") {
+    if ($form->{partnumber} eq "" && $form->{"item"} eq "service") {

       $form->{partnumber} = $form->update_defaults($myconfig, "servicenumber");
     }
       $form->{partnumber} = $form->update_defaults($myconfig, "servicenumber");
     }

-    if ($form->{partnumber} eq "" && $form->{inventory_accno} ne "") {
+    if ($form->{partnumber} eq "" && $form->{"item"} ne "service") {

       $form->{partnumber} = $form->update_defaults($myconfig, "articlenumber");
     }
 
       $form->{partnumber} = $form->update_defaults($myconfig, "articlenumber");
     }
 


@@ -413,61 +369,129 @@ sub save {
   my $partsgroup_id = 0;
 
   if ($form->{partsgroup}) {
   my $partsgroup_id = 0;
 
   if ($form->{partsgroup}) {

-    ($partsgroup, $partsgroup_id) = split /--/, $form->{partsgroup};
+    ($partsgroup, $partsgroup_id) = split(/--/, $form->{partsgroup});

   }
 
   }
 

-  $query = qq|UPDATE parts SET
-             partnumber = '$form->{partnumber}',
-             description = '$form->{description}',
-             makemodel = '$form->{makemodel}',
-             alternate = '$form->{alternate}',
-             assembly = '$form->{assembly}',
-             listprice = $form->{listprice},
-             sellprice = $form->{sellprice},
-             lastcost = $form->{lastcost},
-             weight = $form->{weight},
-             priceupdate = $form->{priceupdate},
-             unit = '$form->{unit}',
-             notes = '$form->{notes}',
-             rop = $form->{rop},
-             bin = '$form->{bin}',
-             inventory_accno_id = (SELECT c.id FROM chart c
-                                   WHERE c.accno = '$form->{inventory_accno}'),
-             income_accno_id = (SELECT c.id FROM chart c
-                                WHERE c.accno = '$form->{income_accno}'),
-             expense_accno_id = (SELECT c.id FROM chart c
-                                 WHERE c.accno = '$form->{expense_accno}'),
-              obsolete = '$form->{obsolete}',
-             image = '$form->{image}',
-             drawing = '$form->{drawing}',
-             shop = '$form->{shop}',
-              ve = '$form->{ve}',
-              gv = '$form->{gv}',
-             microfiche = '$form->{microfiche}',
-             partsgroup_id = $partsgroup_id
-             WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+  my ($subq_inventory, $subq_expense, $subq_income);
+  if ($form->{"item"} eq "part") {
+    $subq_inventory =
+      qq|(SELECT bg.inventory_accno_id
+          FROM buchungsgruppen bg
+          WHERE bg.id = | . conv_i($form->{"buchungsgruppen_id"}, 'NULL') . qq|)|;
+  } else {
+    $subq_inventory = "NULL";
+  }
+
+  if ($form->{"item"} ne "assembly") {
+    $subq_expense =
+      qq|(SELECT bg.expense_accno_id_0
+          FROM buchungsgruppen bg
+          WHERE bg.id = | . conv_i($form->{"buchungsgruppen_id"}, 'NULL') . qq|)|;
+  } else {
+    $subq_expense = "NULL";
+  }
+
+  $query =
+    qq|UPDATE parts SET
+         partnumber = ?,
+         description = ?,
+         makemodel = ?,
+         alternate = 'f',
+         assembly = ?,
+         listprice = ?,
+         sellprice = ?,
+         lastcost = ?,
+         weight = ?,
+         priceupdate = ?,
+         unit = ?,
+         notes = ?,
+         formel = ?,
+         rop = ?,
+         bin = ?,
+         buchungsgruppen_id = ?,
+         payment_id = ?,
+         inventory_accno_id = $subq_inventory,
+         income_accno_id = (SELECT bg.income_accno_id_0 FROM buchungsgruppen bg WHERE bg.id = ?),
+         expense_accno_id = $subq_expense,
+         obsolete = ?,
+         image = ?,
+         drawing = ?,
+         shop = ?,
+         ve = ?,
+         gv = ?,
+         ean = ?,
+         not_discountable = ?,
+         microfiche = ?,
+         partsgroup_id = ?
+       WHERE id = ?|;
+  @values = ($form->{partnumber},
+             $form->{description},
+             $makemodel ? 't' : 'f',
+             $form->{assembly} ? 't' : 'f',
+             $form->{listprice},
+             $form->{sellprice},
+             $form->{lastcost},
+             $form->{weight},
+             conv_date($form->{priceupdate}),
+             $form->{unit},
+             $form->{notes},
+             $form->{formel},
+             $form->{rop},
+             $form->{bin},
+             conv_i($form->{buchungsgruppen_id}),
+             conv_i($form->{payment_id}),
+             conv_i($form->{buchungsgruppen_id}),
+             $form->{obsolete} ? 't' : 'f',
+             $form->{image},
+             $form->{drawing},
+             $form->{shop} ? 't' : 'f',
+             conv_i($form->{ve}),
+             conv_i($form->{gv}),
+             $form->{ean},
+             $form->{not_discountable} ? 't' : 'f',
+             $form->{microfiche},
+             conv_i($partsgroup_id),
+             conv_i($form->{id})
+  );
+  do_query($form, $dbh, $query, @values);
+
+  # delete translation records
+  do_query($form, $dbh, qq|DELETE FROM translation WHERE parts_id = ?|, conv_i($form->{id}));
+
+  if ($form->{language_values} ne "") {
+    foreach $item (split(/---\+\+\+---/, $form->{language_values})) {
+      my ($language_id, $translation, $longdescription) = split(/--\+\+--/, $item);
+      if ($translation ne "") {
+        $query = qq|INSERT into translation (parts_id, language_id, translation, longdescription)
+                    VALUES ( ?, ?, ?, ? )|;
+        @values = (conv_i($form->{id}), conv_i($language_id), $translation, $longdescription);
+        do_query($form, $dbh, $query, @values);
+      }
+    }
+  }

 
   # delete price records
 
   # delete price records

-  $query = qq|DELETE FROM prices
-              WHERE parts_id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+  do_query($form, $dbh, qq|DELETE FROM prices WHERE parts_id = ?|, conv_i($form->{id}));

 
   # insert price records only if different to sellprice
   for my $i (1 .. $form->{price_rows}) {
     if ($form->{"price_$i"} eq "0") {
 
   # insert price records only if different to sellprice
   for my $i (1 .. $form->{price_rows}) {
     if ($form->{"price_$i"} eq "0") {

-       $form->{"price_$i"} = $form->{sellprice};
+      $form->{"price_$i"} = $form->{sellprice};

     }
     }

-    if ((   $form->{"price_$i"} 
-        || $form->{"klass_$i"}
-        || $form->{"pricegroup_id_$i"}) and $form->{"price_$i"} != $form->{sellprice}) {
-      $klass = $form->parse_amount($myconfig, $form->{"klass_$i"});
+    if (
+        (   $form->{"price_$i"}
+         || $form->{"klass_$i"}
+         || $form->{"pricegroup_id_$i"})
+        and $form->{"price_$i"} != $form->{sellprice}
+      ) {
+      #$klass = $form->parse_amount($myconfig, $form->{"klass_$i"});

       $price = $form->parse_amount($myconfig, $form->{"price_$i"});
       $pricegroup_id =
         $form->parse_amount($myconfig, $form->{"pricegroup_id_$i"});
       $price = $form->parse_amount($myconfig, $form->{"price_$i"});
       $pricegroup_id =
         $form->parse_amount($myconfig, $form->{"pricegroup_id_$i"});

-      $query = qq|INSERT INTO prices (parts_id, pricegroup_id, price)
-                  VALUES($form->{id},$pricegroup_id,$price)|;
-      $dbh->do($query) || $form->dberror($query);
+      $query = qq|INSERT INTO prices (parts_id, pricegroup_id, price) | .
+               qq|VALUES(?, ?, ?)|;
+      @values = (conv_i($form->{id}), conv_i($pricegroup_id), $price);
+      do_query($form, $dbh, $query, @values);

     }
   }
 
     }
   }
 


@@ -477,23 +501,22 @@ sub save {
       if (($form->{"make_$i"}) || ($form->{"model_$i"})) {
         map { $form->{"${_}_$i"} =~ s/\'/\'\'/g } qw(make model);
 
       if (($form->{"make_$i"}) || ($form->{"model_$i"})) {
         map { $form->{"${_}_$i"} =~ s/\'/\'\'/g } qw(make model);
 

-        $query = qq|INSERT INTO makemodel (parts_id, make, model)
-                   VALUES ($form->{id},
-                   '$form->{"make_$i"}', '$form->{"model_$i"}')|;
-        $dbh->do($query) || $form->dberror($query);
+        $query = qq|INSERT INTO makemodel (parts_id, make, model) | .
+                            qq|VALUES (?, ?, ?)|;
+                   @values = (conv_i($form->{id}), $form->{"make_$i"}, $form->{"model_$i"});
+        do_query($form, $dbh, $query, @values);

       }
     }
   }
 
   # insert taxes
       }
     }
   }
 
   # insert taxes

-  foreach $item (split / /, $form->{taxaccounts}) {
+  foreach $item (split(/ /, $form->{taxaccounts})) {

     if ($form->{"IC_tax_$item"}) {
     if ($form->{"IC_tax_$item"}) {

-      $query = qq|INSERT INTO partstax (parts_id, chart_id)
-                  VALUES ($form->{id},
-                         (SELECT c.id
-                          FROM chart c
-                          WHERE c.accno = '$item'))|;
-      $dbh->do($query) || $form->dberror($query);
+      $query =
+        qq|INSERT INTO partstax (parts_id, chart_id)
+           VALUES (?, (SELECT id FROM chart WHERE accno = ?))|;
+                       @values = (conv_i($form->{id}), $item);
+      do_query($form, $dbh, $query, @values);

     }
   }
 
     }
   }
 


@@ -505,10 +528,10 @@ sub save {
 
       if ($form->{"qty_$i"} != 0) {
         $form->{"bom_$i"} *= 1;
 
       if ($form->{"qty_$i"} != 0) {
         $form->{"bom_$i"} *= 1;

-        $query = qq|INSERT INTO assembly (id, parts_id, qty, bom)
-                   VALUES ($form->{id}, $form->{"id_$i"},
-                   $form->{"qty_$i"}, '$form->{"bom_$i"}')|;
-        $dbh->do($query) || $form->dberror($query);
+        $query = qq|INSERT INTO assembly (id, parts_id, qty, bom) | .
+                            qq|VALUES (?, ?, ?, ?)|;
+                   @values = (conv_i($form->{id}), conv_i($form->{"id_$i"}), conv_i($form->{"qty_$i"}), $form->{"bom_$i"} ? 't' : 'f');
+        do_query($form, $dbh, $query, @values);

       }
     }
 
       }
     }
 


@@ -525,11 +548,11 @@ sub save {
     $form->get_employee($dbh);
 
     # add inventory record
     $form->get_employee($dbh);
 
     # add inventory record

-    $query = qq|INSERT INTO inventory (warehouse_id, parts_id, qty,
-                shippingdate, employee_id) VALUES (
-               0, $form->{id}, $form->{stock}, '$shippingdate',
-               $form->{employee_id})|;
-    $dbh->do($query) || $form->dberror($query);
+    $query =
+      qq|INSERT INTO inventory (warehouse_id, parts_id, qty, shippingdate, employee_id)
+         VALUES (0, ?, ?, '$shippingdate', ?)|;
+    @values = (conv_i($form->{id}), $form->{stock}, conv_i($form->{employee_id}));
+    do_query($form, $dbh, $query, @values);

 
   }
 
 
   }
 


@@ -542,18 +565,15 @@ sub save {
   # get tax rates and description
   $accno_id =
     ($form->{vc} eq "customer") ? $form->{income_accno} : $vendor_accno;
   # get tax rates and description
   $accno_id =
     ($form->{vc} eq "customer") ? $form->{income_accno} : $vendor_accno;

-  $query = qq|SELECT c.accno, c.description, t.rate, t.taxnumber
-             FROM chart c, tax t
-             WHERE c.id=t.chart_id AND t.taxkey in (SELECT taxkey_id from chart where accno = '$accno_id')
-             ORDER BY c.accno|;
-  $stw = $dbh->prepare($query);
-
-  $stw->execute || $form->dberror($query);
+  $query =
+    qq|SELECT c.accno, c.description, t.rate, t.taxnumber
+       FROM chart c, tax t
+       WHERE (c.id = t.chart_id) AND (t.taxkey IN (SELECT taxkey_id FROM chart where accno = ?))
+       ORDER BY c.accno|;
+  $stw = prepare_execute_query($form, $dbh, $query, $accno_id);

 
   $form->{taxaccount} = "";
   while ($ptr = $stw->fetchrow_hashref(NAME_lc)) {
 
   $form->{taxaccount} = "";
   while ($ptr = $stw->fetchrow_hashref(NAME_lc)) {

-
-    #    if ($customertax{$ref->{accno}}) {

     $form->{taxaccount} .= "$ptr->{accno} ";
     if (!($form->{taxaccount2} =~ /$ptr->{accno}/)) {
       $form->{"$ptr->{accno}_rate"}        = $ptr->{rate};
     $form->{taxaccount} .= "$ptr->{accno} ";
     if (!($form->{taxaccount2} =~ /$ptr->{accno}/)) {
       $form->{"$ptr->{accno}_rate"}        = $ptr->{rate};


@@ -561,7 +581,6 @@ sub save {
       $form->{"$ptr->{accno}_taxnumber"}   = $ptr->{taxnumber};
       $form->{taxaccount2} .= " $ptr->{accno} ";
     }
       $form->{"$ptr->{accno}_taxnumber"}   = $ptr->{taxnumber};
       $form->{taxaccount2} .= " $ptr->{accno} ";
     }

-

   }
 
   # commit
   }
 
   # commit


@@ -578,24 +597,20 @@ sub update_assembly {
 
   my ($dbh, $form, $id, $qty, $sellprice, $weight) = @_;
 
 
   my ($dbh, $form, $id, $qty, $sellprice, $weight) = @_;
 

-  my $query = qq|SELECT a.id, a.qty
-                 FROM assembly a
-                WHERE a.parts_id = $id|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query = qq|SELECT id, qty FROM assembly WHERE parts_id = ?|;
+  my $sth = prepare_execute_query($form, $dbh, $query, conv_i($id));

 
   while (my ($pid, $aqty) = $sth->fetchrow_array) {
     &update_assembly($dbh, $form, $pid, $aqty * $qty, $sellprice, $weight);
   }
   $sth->finish;
 
 
   while (my ($pid, $aqty) = $sth->fetchrow_array) {
     &update_assembly($dbh, $form, $pid, $aqty * $qty, $sellprice, $weight);
   }
   $sth->finish;
 

-  $query = qq|UPDATE parts
-              SET sellprice = sellprice +
-                 $qty * ($form->{sellprice} - $sellprice),
-                  weight = weight +
-                 $qty * ($form->{weight} - $weight)
-             WHERE id = $id|;
-  $dbh->do($query) || $form->dberror($query);
+  $query =
+    qq|UPDATE parts SET sellprice = sellprice + ?, weight = weight + ?
+       WHERE id = ?|;
+  @values = ($qty * ($form->{sellprice} - $sellprice),
+             $qty * ($form->{weight} - $weight), conv_i($id));
+  do_query($form, $dbh, $query, @values);

 
   $main::lxdebug->leave_sub();
 }
 
   $main::lxdebug->leave_sub();
 }


@@ -608,37 +623,30 @@ sub retrieve_assemblies {
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 

-  my $where = '1 = 1';
+  my $where = qq|NOT p.obsolete|;
+  my @values;

 
   if ($form->{partnumber}) {
 
   if ($form->{partnumber}) {

-    my $partnumber = $form->like(lc $form->{partnumber});
-    $where .= " AND lower(p.partnumber) LIKE '$partnumber'";
+    $where .= qq| AND (p.partnumber ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%');

   }
 
   if ($form->{description}) {
   }
 
   if ($form->{description}) {

-    my $description = $form->like(lc $form->{description});
-    $where .= " AND lower(p.description) LIKE '$description'";
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@values, '%' . $form->{description} . '%');

   }
   }

-  $where .= " AND NOT p.obsolete = '1'";

 
   # retrieve assembly items
 
   # retrieve assembly items

-  my $query = qq|SELECT p.id, p.partnumber, p.description,
-                 p.bin, p.onhand, p.rop,
-                  (SELECT sum(p2.inventory_accno_id)
-                   FROM parts p2, assembly a
-                   WHERE p2.id = a.parts_id
-                   AND a.id = p.id) AS inventory
-                 FROM parts p
-                WHERE $where
-                AND assembly = '1'|;
-
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query =
+    qq|SELECT p.id, p.partnumber, p.description,
+         p.bin, p.onhand, p.rop,
+         (SELECT sum(p2.inventory_accno_id)
+          FROM parts p2, assembly a
+          WHERE (p2.id = a.parts_id) AND (a.id = p.id)) AS inventory
+       FROM parts p
+       WHERE NOT p.obsolete AND p.assembly $where|;

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{assembly_items} }, $ref if $ref->{inventory};
-  }
-  $sth->finish;
+  $form->{assembly_items} = selectall_hashref_query($form, $dbh, $query, @values);

 
   $dbh->disconnect;
 
 
   $dbh->disconnect;
 


@@ -676,12 +684,11 @@ sub adjust_inventory {
 
   my ($dbh, $form, $id, $qty) = @_;
 
 
   my ($dbh, $form, $id, $qty) = @_;
 

-  my $query = qq|SELECT p.id, p.inventory_accno_id, p.assembly, a.qty
-                FROM parts p, assembly a
-                WHERE a.parts_id = p.id
-                AND a.id = $id|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query =
+    qq|SELECT p.id, p.inventory_accno_id, p.assembly, a.qty
+       FROM parts p, assembly a
+       WHERE (a.parts_id = p.id) AND (a.id = ?)|;
+  my $sth = prepare_execute_query($form, $dbh, $query, conv_i($id));

 
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
 
 
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
 


@@ -700,7 +707,7 @@ sub adjust_inventory {
   $sth->finish;
 
   # update assembly
   $sth->finish;
 
   # update assembly

-  my $rc = $form->update_balance($dbh, "parts", "onhand", qq|id = $id|, $qty);
+  my $rc = $form->update_balance($dbh, "parts", "onhand", qq|id = ?|, $qty, $id);

 
   $main::lxdebug->leave_sub();
 
 
   $main::lxdebug->leave_sub();
 


@@ -711,41 +718,15 @@ sub delete {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;

-
+  my @values = (conv_i($form->{id}));

   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 
   # connect to database, turn off AutoCommit
   my $dbh = $form->dbconnect_noauto($myconfig);
 

-  my $query = qq|DELETE FROM parts
-                WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
-
-  $query = qq|DELETE FROM partstax
-             WHERE parts_id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
-
-  # check if it is a part, assembly or service
-  if ($form->{item} ne 'service') {
-    $query = qq|DELETE FROM makemodel
-               WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-  }
-
-  if ($form->{item} eq 'assembly') {
-
-    # delete inventory
-    $query = qq|DELETE FROM inventory
-                WHERE parts_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-
-    $query = qq|DELETE FROM assembly
-               WHERE id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-  }
+  my %columns = ( "assembly" => "id", "alternate" => "id", "parts" => "id" );

 
 

-  if ($form->{item} eq 'alternate') {
-    $query = qq|DELETE FROM alternate
-               WHERE id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
+  for my $table (qw(prices partstax makemodel inventory assembly parts)) {
+    my $column = defined($columns{$table}) ? $columns{$table} : "parts_id";
+    do_query($form, $dbh, qq|DELETE FROM $table WHERE $column = ?|, @values);

   }
 
   # commit
   }
 
   # commit


@@ -764,202 +745,192 @@ sub assembly_item {
 
   my $i = $form->{assembly_rows};
   my $var;
 
   my $i = $form->{assembly_rows};
   my $var;

-  my $where = "1 = 1";
+  my $where = qq|1 = 1|;
+  my @values;

 
 

-  if ($form->{"partnumber_$i"}) {
-    $var = $form->like(lc $form->{"partnumber_$i"});
-    $where .= " AND lower(p.partnumber) LIKE '$var'";
-  }
-  if ($form->{"description_$i"}) {
-    $var = $form->like(lc $form->{"description_$i"});
-    $where .= " AND lower(p.description) LIKE '$var'";
-  }
-  if ($form->{"partsgroup_$i"}) {
-    $var = $form->like(lc $form->{"partsgroup_$i"});
-    $where .= " AND lower(pg.partsgroup) LIKE '$var'";
+  my %columns = ("partnumber" => "p", "description" => "p", "partsgroup" => "pg");
+
+  while (my ($column, $table) = each(%columns)) {
+    next unless ($form->{"${column}_$i"});
+    $where .= qq| AND ${table}.${column} ILIKE ?|;
+    push(@values, '%' . $form->{"${column}_$i"} . '%');

   }
 
   if ($form->{id}) {
   }
 
   if ($form->{id}) {

-    $where .= " AND NOT p.id = $form->{id}";
+    $where .= qq| AND NOT (p.id = ?)|;
+    push(@values, conv_i($form->{id}));

   }
 
   if ($partnumber) {
   }
 
   if ($partnumber) {

-    $where .= " ORDER BY p.partnumber";
+    $where .= qq| ORDER BY p.partnumber|;

   } else {
   } else {

-    $where .= " ORDER BY p.description";
+    $where .= qq| ORDER BY p.description|;

   }
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
   }
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 

-  my $query = qq|SELECT p.id, p.partnumber, p.description, p.sellprice,
-                 p.weight, p.onhand, p.unit,
-                pg.partsgroup
-                FROM parts p
-                LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                WHERE $where|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{item_list} }, $ref;
-  }
+  my $query =
+    qq|SELECT p.id, p.partnumber, p.description, p.sellprice, p.weight, p.onhand, p.unit, pg.partsgroup
+       FROM parts p
+       LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+       WHERE $where|;
+  $form->{item_list} = selectall_hashref_query($form, $dbh, $query, @values);

 
 

-  $sth->finish;

   $dbh->disconnect;
 
   $main::lxdebug->leave_sub();
 }
 
   $dbh->disconnect;
 
   $main::lxdebug->leave_sub();
 }
 

+#
+# Report for Wares.
+# Warning, deep magic ahead.
+# This function gets all parts from the database according to the filters specified
+#
+# filter strings:
+#   partnumber ean description partsgroup serialnumber make model drawing microfiche
+#   transdatefrom transdateto sort
+#
+# exclusives:
+#   itemstatus  = active | onhand | short | obsolete | orphaned
+#   searchitems = part | assembly | service
+#
+# column flags:
+#   l_partnumber l_description l_listprice l_sellprice l_lastcost l_priceupdate l_weight l_unit l_bin l_rop l_image l_drawing l_microfiche l_partsgroup 
+#
+# binary flags:
+#   bought sold onorder ordered rfq quoted onhand short
+#   l_serialnumber l_linetotal l_subtotal l_soldtotal l_deliverydate
+#   revers top100
+#

 sub all_parts {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 
 sub all_parts {
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
 

-  my $where = '1 = 1';
-  my $var;
-
-  my $group;
-  my $limit;
-
-  foreach my $item (qw(partnumber drawing microfiche make model)) {
-    if ($form->{$item}) {
-      $var = $form->like(lc $form->{$item});
+  my $where = qq|1 = 1|;
+  my (@values, $var, $flds, $group, $limit);

 
 

-      # make will build later Bugfix 145
-      if ($item ne 'make') {
-        $where .= " AND lower(p.$item) LIKE '$var'";
-      }
+  foreach my $item (qw(partnumber drawing microfiche ean pg.partsgroup)) {
+    my $column = $item;
+    $column =~ s/.*\.//; # get rid of table prefixes
+    if ($form->{$column}) {
+      $where .= qq| AND ($item ILIKE ?)|;
+      push(@values, "%$form->{$column}%");

     }
   }
 
   # special case for description
     }
   }
 
   # special case for description

-  if ($form->{description}) {
-    unless (   $form->{bought}
-            || $form->{sold}
-            || $form->{onorder}
-            || $form->{ordered}
-            || $form->{rfq}
-            || $form->{quoted}) {
-      $var = $form->like(lc $form->{description});
-      $where .= " AND lower(p.description) LIKE '$var'";
-    }
+  if ($form->{description}
+      && !(   $form->{bought}  || $form->{sold} || $form->{onorder}
+           || $form->{ordered} || $form->{rfq} || $form->{quoted})) {
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@values, "%$form->{description}%");

   }
 
   # special case for serialnumber
   }
 
   # special case for serialnumber

-  if ($form->{l_serialnumber}) {
-    if ($form->{serialnumber}) {
-      $var = $form->like(lc $form->{serialnumber});
-      $where .= " AND lower(serialnumber) LIKE '$var'";
-    }
+  if ($form->{l_serialnumber} && $form->{serialnumber}) {
+    $where .= qq| AND (serialnumber ILIKE ?)|;
+    push(@values, "%$form->{serialnumber}%");

   }
 
   if ($form->{searchitems} eq 'part') {
   }
 
   if ($form->{searchitems} eq 'part') {

-    $where .= " AND p.inventory_accno_id > 0";
+    $where .= qq| AND (p.inventory_accno_id > 0) |;

   }
   }

+

   if ($form->{searchitems} eq 'assembly') {
     $form->{bought} = "";
   if ($form->{searchitems} eq 'assembly') {
     $form->{bought} = "";

-    $where .= " AND p.assembly = '1'";
+    $where .= qq| AND p.assembly|;

   }
   }

-  if ($form->{searchitems} eq 'service') {
-    $where .= " AND p.inventory_accno_id IS NULL AND NOT p.assembly = '1'";

 
 

+  if ($form->{searchitems} eq 'service') {
+    $where .= qq| AND (p.inventory_accno_id IS NULL) AND NOT (p.assembly = '1')|;

     # irrelevant for services
     # irrelevant for services

-    $form->{make} = $form->{model} = "";
+    map { $form->{$_} = '' } qw(make model);

   }
 
   # items which were never bought, sold or on an order
   if ($form->{itemstatus} eq 'orphaned') {
   }
 
   # items which were never bought, sold or on an order
   if ($form->{itemstatus} eq 'orphaned') {

-    $form->{onhand}  = $form->{short}   = 0;
-    $form->{bought}  = $form->{sold}    = 0;
-    $form->{onorder} = $form->{ordered} = 0;
-    $form->{rfq}     = $form->{quoted}  = 0;
+    map { $form->{$_} = 0  } qw(onhand short bought sold onorder ordered rfq quoted);
+    map { $form->{$_} = '' } qw(transdatefrom transdateto);
+
+    $where .=
+      qq| AND (p.onhand = 0)
+          AND p.id NOT IN
+            (
+              SELECT DISTINCT parts_id FROM invoice
+              UNION
+              SELECT DISTINCT parts_id FROM assembly
+              UNION
+              SELECT DISTINCT parts_id FROM orderitems
+            )|;
+  }

 
 

-    $form->{transdatefrom} = $form->{transdateto} = "";
+  my %status2condition = (
+    active   => " AND (p.obsolete = '0')",
+    obsolete => " AND (p.obsolete = '1')",
+    onhand   => " AND (p.onhand > 0)",
+    short    => " AND (p.onhand < p.rop)",
+  );
+  $where .= $status2condition{$form->{itemstatus}};

 
 

-    $where .= " AND p.onhand = 0
-                AND p.id NOT IN (SELECT p.id FROM parts p, invoice i
-                                WHERE p.id = i.parts_id)
-               AND p.id NOT IN (SELECT p.id FROM parts p, assembly a
-                                WHERE p.id = a.parts_id)
-                AND p.id NOT IN (SELECT p.id FROM parts p, orderitems o
-                                WHERE p.id = o.parts_id)";
-  }
+  $form->{onhand} = $form->{short} = 0 if ($form->{itemstatus} eq 'obsolete');

 
 

-  if ($form->{itemstatus} eq 'active') {
-    $where .= " AND p.obsolete = '0'";
-  }
-  if ($form->{itemstatus} eq 'obsolete') {
-    $where .= " AND p.obsolete = '1'";
-    $form->{onhand} = $form->{short} = 0;
-  }
-  if ($form->{itemstatus} eq 'onhand') {
-    $where .= " AND p.onhand > 0";
+  my @subcolumns;
+  foreach my $column (qw(make model)) {
+    push @subcolumns, $column if $form->{$column};

   }
   }

-  if ($form->{itemstatus} eq 'short') {
-    $where .= " AND p.onhand < p.rop";
-  }
-  if ($form->{make}) {
-    $var = $form->like(lc $form->{make});
-    $where .= " AND p.id IN (SELECT DISTINCT ON (m.parts_id) m.parts_id
-                           FROM makemodel m WHERE lower(m.make) LIKE '$var')";
-  }
-  if ($form->{model}) {
-    $var = $form->like(lc $form->{model});
-    $where .= " AND p.id IN (SELECT DISTINCT ON (m.parts_id) m.parts_id
-                           FROM makemodel m WHERE lower(m.model) LIKE '$var')";
-  }
-  if ($form->{partsgroup}) {
-    $var = $form->like(lc $form->{partsgroup});
-    $where .= " AND lower(pg.partsgroup) LIKE '$var'";
+  if (@subcolumns) {
+    $where .= qq| AND p.id IN (SELECT DISTINCT parts_id FROM makemodel WHERE | . (join " AND ", map { "($_ ILIKE ?)"; } @subcolumns) . ")";
+    push @values, map { '%' . $form->{$_} . '%' } @subcolumns;

   }
   }

+

   if ($form->{l_soldtotal}) {
   if ($form->{l_soldtotal}) {

-    $where .= " AND p.id=i.parts_id AND  i.qty >= 0";
-    $group =
-      " GROUP BY  p.id,p.partnumber,p.description,p.onhand,p.unit,p.bin, p.sellprice,p.listprice,p.lastcost,p.priceupdate,pg.partsgroup";
-  }
-  if ($form->{top100}) {
-    $limit = " LIMIT 100";
+    $where .= qq| AND (p.id = i.parts_id) AND (i.qty >= 0)|;
+    $group = qq| GROUP BY p.id, p.partnumber, p.description, p.onhand, p.unit, p.bin, p.sellprice, p.listprice, p.lastcost, p.priceupdate, pg.partsgroup|;

   }
 
   }
 

-  # tables revers?
-  if ($form->{revers} == 1) {
-    $form->{desc} = " DESC";
-  } else {
-    $form->{desc} = "";
-  }
+  $limit = qq| LIMIT 100| if ($form->{top100});

 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 

-  my $sortorder = $form->{sort};
-  $sortorder .= $form->{desc};
-  $sortorder = $form->{sort} if $form->{sort};
+  my @sort_cols = qw(id partnumber description partsgroup bin priceupdate onhand
+                     invnumber ordnumber quonumber name drawing microfiche
+                     serialnumber soldtotal deliverydate);
+
+  my $sortorder = "partnumber";
+  $sortorder = $form->{sort} if ($form->{sort} && grep({ $_ eq $form->{sort} } @sort_cols));
+  $sortorder .= " DESC" if ($form->{revers});

 
   my $query = "";
 
   if ($form->{l_soldtotal}) {
     $form->{soldtotal} = 'soldtotal';
     $query =
 
   my $query = "";
 
   if ($form->{l_soldtotal}) {
     $form->{soldtotal} = 'soldtotal';
     $query =

-      qq|SELECT p.id,p.partnumber,p.description,p.onhand,p.unit,p.bin,p.sellprice,p.listprice,
-               p.lastcost,p.priceupdate,pg.partsgroup,sum(i.qty) as soldtotal FROM parts
-               p LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id), invoice i
-               WHERE $where
-               $group
-               ORDER BY $sortorder
-               $limit|;
+      qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit, 
+           p.bin, p.sellprice, p.listprice, p.lastcost, 
+           p.priceupdate, pg.partsgroup,sum(i.qty) AS soldtotal 
+         FROM parts p 
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id), invoice i
+         WHERE $where
+         $group
+         ORDER BY $sortorder $limit|;

   } else {
   } else {

-    $query = qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit,
-                 p.bin, p.sellprice, p.listprice, p.lastcost, p.rop, p.weight,
-                p.priceupdate, p.image, p.drawing, p.microfiche,
-                pg.partsgroup
-                 FROM parts p
-                LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                WHERE $where
-                $group
-                ORDER BY $sortorder|;
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description, p.onhand, p.unit,
+           p.bin, p.sellprice, p.listprice, p.lastcost, p.rop, p.weight,
+           p.priceupdate, p.image, p.drawing, p.microfiche,
+           pg.partsgroup
+         FROM parts p
+         LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+         WHERE $where
+         $group
+         ORDER BY $sortorder $limit|;

   }
 
   }
 

+  my @all_values = @values;
+

   # rebuild query for bought and sold items
   if (   $form->{bought}
       || $form->{sold}
   # rebuild query for bought and sold items
   if (   $form->{bought}
       || $form->{sold}


@@ -967,237 +938,397 @@ sub all_parts {
       || $form->{ordered}
       || $form->{rfq}
       || $form->{quoted}) {
       || $form->{ordered}
       || $form->{rfq}
       || $form->{quoted}) {

-
-    my @a = qw(partnumber description bin priceupdate name);
-
-    push @a, qw(invnumber serialnumber) if ($form->{bought} || $form->{sold});
-    push @a, "ordnumber" if ($form->{onorder} || $form->{ordered});
-    push @a, "quonumber" if ($form->{rfq}     || $form->{quoted});
-

     my $union = "";
     $query = "";
     my $union = "";
     $query = "";

+    @all_values = ();

 
     if ($form->{bought} || $form->{sold}) {
 
 
     if ($form->{bought} || $form->{sold}) {
 

+      my @invvalues = @values;

       my $invwhere = "$where";
       my $invwhere = "$where";

-      $invwhere .= " AND i.assemblyitem = '0'";
-      $invwhere .= " AND a.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $invwhere .= " AND a.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      $invwhere .= qq| AND i.assemblyitem = '0'|;
+
+      if ($form->{transdatefrom}) {
+        $invwhere .= qq| AND a.transdate >= ?|;
+        push(@invvalues, $form->{transdatefrom});
+      }
+
+      if ($form->{transdateto}) {
+        $invwhere .= qq| AND a.transdate <= ?|;
+        push(@invvalues, $form->{transdateto});
+      }

 
       if ($form->{description}) {
 
       if ($form->{description}) {

-        $var = $form->like(lc $form->{description});
-        $invwhere .= " AND lower(i.description) LIKE '$var'";
+        $invwhere .= qq| AND i.description ILIKE ?|;
+        push(@invvalues, '%' . $form->{description} . '%');

       }
 
       }
 

-      my $flds = qq|p.id, p.partnumber, i.description, i.serialnumber,
-                    i.qty AS onhand, i.unit, p.bin, i.sellprice,
-                   p.listprice, p.lastcost, p.rop, p.weight,
-                   p.priceupdate, p.image, p.drawing, p.microfiche,
-                   pg.partsgroup,
-                   a.invnumber, a.ordnumber, a.quonumber, i.trans_id,
-                   ct.name|;
+      $flds =
+        qq|p.id, p.partnumber, i.description, i.serialnumber,
+           i.qty AS onhand, i.unit, p.bin, i.sellprice,
+           p.listprice, p.lastcost, p.rop, p.weight,
+           p.priceupdate, p.image, p.drawing, p.microfiche,
+           pg.partsgroup,
+           a.invnumber, a.ordnumber, a.quonumber, i.trans_id,
+           ct.name, i.deliverydate|;

 
       if ($form->{bought}) {
 
       if ($form->{bought}) {

-        $query = qq|
-                   SELECT $flds, 'ir' AS module, '' AS type,
-                   1 AS exchangerate
-                   FROM invoice i
-                   JOIN parts p ON (p.id = i.parts_id)
-                   JOIN ap a ON (a.id = i.trans_id)
-                   JOIN vendor ct ON (a.vendor_id = ct.id)
-                   LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                   WHERE $invwhere|;
-        $union = "
-                 UNION";
+        $query =
+          qq|SELECT $flds, 'ir' AS module, '' AS type, 1 AS exchangerate
+             FROM invoice i
+             JOIN parts p ON (p.id = i.parts_id)
+             JOIN ap a ON (a.id = i.trans_id)
+             JOIN vendor ct ON (a.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $invwhere|;
+
+        $union = qq| UNION |;
+
+        push(@all_values, @invvalues);

       }
 
       if ($form->{sold}) {
       }
 
       if ($form->{sold}) {

-        $query .= qq|$union
-                     SELECT $flds, 'is' AS module, '' AS type,
-                    1 As exchangerate
-                    FROM invoice i
-                    JOIN parts p ON (p.id = i.parts_id)
-                    JOIN ar a ON (a.id = i.trans_id)
-                    JOIN customer ct ON (a.customer_id = ct.id)
-                    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                    WHERE $invwhere|;
-        $union = "
-                 UNION";
+        $query .=
+          qq|$union
+
+             SELECT $flds, 'is' AS module, '' AS type, 1 As exchangerate
+             FROM invoice i
+             JOIN parts p ON (p.id = i.parts_id)
+             JOIN ar a ON (a.id = i.trans_id)
+             JOIN customer ct ON (a.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $invwhere|;
+        $union = qq| UNION |;
+
+        push(@all_values, @invvalues);

       }
     }
 
     if ($form->{onorder} || $form->{ordered}) {
       }
     }
 
     if ($form->{onorder} || $form->{ordered}) {

-      my $ordwhere = "$where
-                    AND o.quotation = '0'";
-      $ordwhere .= " AND o.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $ordwhere .= " AND o.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      my @ordvalues = @values;
+      my $ordwhere = $where . qq| AND o.quotation = '0'|;

 
 

-      if ($form->{description}) {
-        $var = $form->like(lc $form->{description});
-        $ordwhere .= " AND lower(oi.description) LIKE '$var'";
+      if ($form->{transdatefrom}) {
+        $ordwhere .= qq| AND o.transdate >= ?|;
+        push(@ordvalues, $form->{transdatefrom});

       }
 
       }
 

-      $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                 oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
-                p.listprice, p.lastcost, p.rop, p.weight,
-                p.priceupdate, p.image, p.drawing, p.microfiche,
-                pg.partsgroup,
-                '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-                ct.name|;
+      if ($form->{transdateto}) {
+        $ordwhere .= qq| AND o.transdate <= ?|;
+        push(@ordvalues, $form->{transdateto});
+      }
+
+      if ($form->{description}) {
+        $ordwhere .= qq| AND oi.description ILIKE ?|;
+        push(@ordvalues, '%' . $form->{description} . '%');
+      }

 
       if ($form->{ordered}) {
 
       if ($form->{ordered}) {

-        $query .= qq|$union
-                     SELECT $flds, 'oe' AS module, 'sales_order' AS type,
-                   (SELECT buy FROM exchangerate ex
-                    WHERE ex.curr = o.curr
-                    AND ex.transdate = o.transdate) AS exchangerate
-                    FROM orderitems oi
-                    JOIN parts p ON (oi.parts_id = p.id)
-                    JOIN oe o ON (oi.trans_id = o.id)
-                    JOIN customer ct ON (o.customer_id = ct.id)
-                    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                    WHERE $ordwhere
-                    AND o.customer_id > 0|;
-        $union = "
-                 UNION";
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'sales_order' AS type,
+               (SELECT buy FROM exchangerate ex
+                WHERE ex.curr = o.curr AND ex.transdate = o.transdate) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN customer ct ON (o.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $ordwhere AND (o.customer_id > 0)|;
+        $union = qq| UNION |;
+
+        push(@all_values, @ordvalues);

       }
 
       if ($form->{onorder}) {
       }
 
       if ($form->{onorder}) {

-        $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                   oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
-                  p.listprice, p.lastcost, p.rop, p.weight,
-                  p.priceupdate, p.image, p.drawing, p.microfiche,
-                  pg.partsgroup,
-                  '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-                  ct.name|;
-
-        $query .= qq|$union
-                   SELECT $flds, 'oe' AS module, 'purchase_order' AS type,
-                   (SELECT sell FROM exchangerate ex
-                    WHERE ex.curr = o.curr
-                    AND ex.transdate = o.transdate) AS exchangerate
-                   FROM orderitems oi
-                   JOIN parts p ON (oi.parts_id = p.id)
-                   JOIN oe o ON (oi.trans_id = o.id)
-                   JOIN vendor ct ON (o.vendor_id = ct.id)
-                   LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                   WHERE $ordwhere
-                   AND o.vendor_id > 0|;
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'purchase_order' AS type,
+               (SELECT sell FROM exchangerate ex
+               WHERE ex.curr = o.curr AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN vendor ct ON (o.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $ordwhere AND (o.vendor_id > 0)|;
+        $union = qq| UNION |;
+
+        push(@all_values, @ordvalues);

       }
 
     }
 
     if ($form->{rfq} || $form->{quoted}) {
       }
 
     }
 
     if ($form->{rfq} || $form->{quoted}) {

-      my $quowhere = "$where
-                    AND o.quotation = '1'";
-      $quowhere .= " AND o.transdate >= '$form->{transdatefrom}'"
-        if $form->{transdatefrom};
-      $quowhere .= " AND o.transdate <= '$form->{transdateto}'"
-        if $form->{transdateto};
+      my $quowhere = $where . qq| AND o.quotation = '1'|;
+      my @quovalues = @values;

 
 

-      if ($form->{description}) {
-        $var = $form->like(lc $form->{description});
-        $quowhere .= " AND lower(oi.description) LIKE '$var'";
+      if ($form->{transdatefrom}) {
+        $quowhere .= qq| AND o.transdate >= ?|;
+        push(@quovalues, $form->{transdatefrom});

       }
 
       }
 

-      $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                 oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
-                p.listprice, p.lastcost, p.rop, p.weight,
-                p.priceupdate, p.image, p.drawing, p.microfiche,
-                pg.partsgroup,
-                '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-                ct.name|;
+      if ($form->{transdateto}) {
+        $quowhere .= qq| AND o.transdate <= ?|;
+        push(@quovalues, $form->{transdateto});
+      }
+
+      if ($form->{description}) {
+        $quowhere .= qq| AND oi.description ILIKE ?|;
+        push(@quovalues, '%' . $form->{description} . '%');
+      }

 
       if ($form->{quoted}) {
 
       if ($form->{quoted}) {

-        $query .= qq|$union
-                     SELECT $flds, 'oe' AS module, 'sales_quotation' AS type,
-                   (SELECT buy FROM exchangerate ex
-                    WHERE ex.curr = o.curr
-                    AND ex.transdate = o.transdate) AS exchangerate
-                    FROM orderitems oi
-                    JOIN parts p ON (oi.parts_id = p.id)
-                    JOIN oe o ON (oi.trans_id = o.id)
-                    JOIN customer ct ON (o.customer_id = ct.id)
-                    LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                    WHERE $quowhere
-                    AND o.customer_id > 0|;
-        $union = "
-                 UNION";
+        $query .=
+          qq|$union
+
+             SELECT
+               p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate, 'oe' AS module, 'sales_quotation' AS type,
+               (SELECT buy FROM exchangerate ex
+                WHERE (ex.curr = o.curr) AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN customer ct ON (o.customer_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $quowhere
+             AND o.customer_id > 0|;
+        $union = qq| UNION |;
+
+        push(@all_values, @quovalues);

       }
 
       if ($form->{rfq}) {
       }
 
       if ($form->{rfq}) {

-        $flds = qq|p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
-                   oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
-                  p.listprice, p.lastcost, p.rop, p.weight,
-                  p.priceupdate, p.image, p.drawing, p.microfiche,
-                  pg.partsgroup,
-                  '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
-                  ct.name|;
-
-        $query .= qq|$union
-                   SELECT $flds, 'oe' AS module, 'request_quotation' AS type,
-                   (SELECT sell FROM exchangerate ex
-                    WHERE ex.curr = o.curr
-                    AND ex.transdate = o.transdate) AS exchangerate
-                   FROM orderitems oi
-                   JOIN parts p ON (oi.parts_id = p.id)
-                   JOIN oe o ON (oi.trans_id = o.id)
-                   JOIN vendor ct ON (o.vendor_id = ct.id)
-                   LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
-                   WHERE $quowhere
-                   AND o.vendor_id > 0|;
+        $query .=
+          qq|$union
+
+             SELECT p.id, p.partnumber, oi.description, oi.serialnumber AS serialnumber,
+               oi.qty * -1 AS onhand, oi.unit, p.bin, oi.sellprice,
+               p.listprice, p.lastcost, p.rop, p.weight,
+               p.priceupdate, p.image, p.drawing, p.microfiche,
+               pg.partsgroup,
+               '' AS invnumber, o.ordnumber, o.quonumber, oi.trans_id,
+               ct.name, NULL AS deliverydate,
+               'oe' AS module, 'request_quotation' AS type,
+               (SELECT sell FROM exchangerate ex
+               WHERE (ex.curr = o.curr) AND (ex.transdate = o.transdate)) AS exchangerate
+             FROM orderitems oi
+             JOIN parts p ON (oi.parts_id = p.id)
+             JOIN oe o ON (oi.trans_id = o.id)
+             JOIN vendor ct ON (o.vendor_id = ct.id)
+             LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+             WHERE $quowhere
+             AND o.vendor_id > 0|;
+
+        push(@all_values, @quovalues);

       }
 
     }
       }
 
     }

-    $query .= qq|
-                ORDER BY $sortorder|;
+    $query .= qq| ORDER BY  | . $sortorder;

 
   }
 
   }

-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{parts} }, $ref;
-  }
-
-  $sth->finish;
+  $form->{parts} = selectall_hashref_query($form, $dbh, $query, @all_values);

 
 

+  my @assemblies;

   # include individual items for assemblies
   if ($form->{searchitems} eq 'assembly' && $form->{bom}) {
   # include individual items for assemblies
   if ($form->{searchitems} eq 'assembly' && $form->{bom}) {

-    foreach $item (@{ $form->{parts} }) {
-      push @assemblies, $item;
-      $query = qq|SELECT p.id, p.partnumber, p.description, a.qty AS onhand,
-                  p.unit, p.bin,
-                  p.sellprice, p.listprice, p.lastcost,
-                 p.rop, p.weight, p.priceupdate,
-                 p.image, p.drawing, p.microfiche
-                 FROM parts p, assembly a
-                 WHERE p.id = a.parts_id
-                 AND a.id = $item->{id}|;
+    $query =
+      qq|SELECT p.id, p.partnumber, p.description, a.qty AS onhand,
+           p.unit, p.bin,
+           p.sellprice, p.listprice, p.lastcost,
+           p.rop, p.weight, p.priceupdate,
+           p.image, p.drawing, p.microfiche
+         FROM parts p, assembly a
+         WHERE (p.id = a.parts_id) AND (a.id = ?)|;
+    $sth = prepare_query($form, $dbh, $query);

 
 

-      $sth = $dbh->prepare($query);
-      $sth->execute || $form->dberror($query);
+    foreach $item (@{ $form->{parts} }) {
+      push(@assemblies, $item);
+      do_statement($form, $sth, $query, conv_i($item->{id}));

 
 

-      while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
+      while ($ref = $sth->fetchrow_hashref(NAME_lc)) {

         $ref->{assemblyitem} = 1;
         $ref->{assemblyitem} = 1;

-        push @assemblies, $ref;
+        push(@assemblies, $ref);

       }
       $sth->finish;
       }
       $sth->finish;

+    }

 
 

-      push @assemblies, { id => $item->{id} };
+    # copy assemblies to $form->{parts}
+    $form->{parts} = \@assemblies;
+  }

 
 

+  $dbh->disconnect;
+  $main::lxdebug->leave_sub();
+}
+
+sub update_prices {
+  $main::lxdebug->enter_sub();
+
+  my ($self, $myconfig, $form) = @_;
+  my @where_values;
+  my $where = '1 = 1';
+  my $var;
+
+  my $group;
+  my $limit;
+
+  my @where_values;
+
+  if ($item ne 'make') {
+    foreach my $item (qw(partnumber drawing microfiche make model pg.partsgroup)) {
+      my $column = $item;
+      $column =~ s/.*\.//;
+      next unless ($form->{$column});
+      $where .= qq| AND $item ILIKE ?|;
+      push(@where_values, '%' . $form->{$column} . '%');

     }
     }

+  }

 
 

-    # copy assemblies to $form->{parts}
-    @{ $form->{parts} } = @assemblies;
+  # special case for description
+  if ($form->{description}
+      && !(   $form->{bought}  || $form->{sold} || $form->{onorder}
+           || $form->{ordered} || $form->{rfq} || $form->{quoted})) {
+    $where .= qq| AND (p.description ILIKE ?)|;
+    push(@where_values, '%' . $form->{description} . '%');
+  }
+
+  # special case for serialnumber
+  if ($form->{l_serialnumber} && $form->{serialnumber}) {
+    $where .= qq| AND serialnumber ILIKE ?|;
+    push(@where_values, '%' . $form->{serialnumber} . '%');
+  }
+
+
+  # items which were never bought, sold or on an order
+  if ($form->{itemstatus} eq 'orphaned') {
+    $form->{onhand}  = $form->{short}   = 0;
+    $form->{bought}  = $form->{sold}    = 0;
+    $form->{onorder} = $form->{ordered} = 0;
+    $form->{rfq}     = $form->{quoted}  = 0;
+
+    $form->{transdatefrom} = $form->{transdateto} = "";
+
+    $where .=
+      qq| AND (p.onhand = 0)
+          AND p.id NOT IN
+            (
+              SELECT DISTINCT parts_id FROM invoice
+              UNION
+              SELECT DISTINCT parts_id FROM assembly
+              UNION
+              SELECT DISTINCT parts_id FROM orderitems
+            )|;
+  }
+
+  if ($form->{itemstatus} eq 'active') {
+    $where .= qq| AND p.obsolete = '0'|;
+  }
+
+  if ($form->{itemstatus} eq 'obsolete') {
+    $where .= qq| AND p.obsolete = '1'|;
+    $form->{onhand} = $form->{short} = 0;
+  }
+
+  if ($form->{itemstatus} eq 'onhand') {
+    $where .= qq| AND p.onhand > 0|;

   }
 
   }
 

+  if ($form->{itemstatus} eq 'short') {
+    $where .= qq| AND p.onhand < p.rop|;
+  }
+
+  foreach my $column (qw(make model)) {
+    next unless ($form->{$colum});
+    $where .= qq| AND p.id IN (SELECT DISTINCT parts_id FROM makemodel WHERE $column ILIKE ?|;
+    push(@where_values, '%' . $form->{$column} . '%');
+  }
+
+  # connect to database
+  my $dbh = $form->dbconnect_noauto($myconfig);
+
+  for my $column (qw(sellprice listprice)) {
+    next if ($form->{$column} eq "");
+
+    my $value = $form->parse_amount($myconfig, $form->{$column});
+    my $operator = '+';
+
+    if ($form->{"${column}_type"} eq "percent") {
+      $value = ($value / 100) + 1;
+      $operator = '*';
+    }
+
+    $query =
+      qq|UPDATE parts SET $column = $column $operator ?
+         WHERE id IN
+           (SELECT p.id
+            FROM parts p
+            LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+            WHERE $where)|;
+    do_query($from, $dbh, $query, $value, @where_values);
+  }
+
+  my $q_add =
+    qq|UPDATE prices SET price = price + ?
+       WHERE parts_id IN
+         (SELECT p.id
+          FROM parts p
+          LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+          WHERE $where) AND (pricegroup_id = ?)|;
+  my $sth_add = prepare_query($form, $dbh, $q_add);
+
+  my $q_multiply =
+    qq|UPDATE prices SET price = price * ?
+       WHERE parts_id IN
+         (SELECT p.id
+          FROM parts p
+          LEFT JOIN partsgroup pg ON (p.partsgroup_id = pg.id)
+          WHERE $where) AND (pricegroup_id = ?)|;
+  my $sth_multiply = prepare_query($form, $dbh, $q_multiply);
+
+  for my $i (1 .. $form->{price_rows}) {
+    next if ($form->{"price_$i"} eq "");
+
+    my $value = $form->parse_amount($myconfig, $form->{"price_$i"});
+
+    if ($form->{"pricegroup_type_$i"} eq "percent") {
+      do_statement($form, $sth_multiply, $q_multiply, ($value / 100) + 1, @where_values, conv_i($form->{"pricegroup_id_$i"}));
+    } else {
+      do_statement($form, $sth_add, $q_add, $value, @where_values, conv_i($form->{"pricegroup_id_$i"}));
+    }
+  }
+
+  $sth_add->finish();
+  $sth_multiply->finish();
+
+  my $rc= $dbh->commit;

   $dbh->disconnect;
   $dbh->disconnect;

+

   $main::lxdebug->leave_sub();
   $main::lxdebug->leave_sub();

+
+  return $rc;

 }
 
 sub create_links {
 }
 
 sub create_links {


@@ -1208,25 +1339,29 @@ sub create_links {
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 

+  my @values = ('%' . $module . '%');
+

   if ($form->{id}) {
   if ($form->{id}) {

-    $query = qq|SELECT c.accno, c.description, c.link, c.id,
-                       p.inventory_accno_id, p.income_accno_id, p.expense_accno_id
-                       FROM chart c, parts p
-                       WHERE c.link LIKE '%$module%'
-                       AND p.id = $form->{id}
-                       ORDER BY c.accno|;
+    $query =
+      qq|SELECT c.accno, c.description, c.link, c.id,
+           p.inventory_accno_id, p.income_accno_id, p.expense_accno_id
+         FROM chart c, parts p
+         WHERE (c.link LIKE ?) AND (p.id = ?)
+         ORDER BY c.accno|;
+    push(@values, conv_i($form->{id}));
+

   } else {
   } else {

-    $query = qq|SELECT c.accno, c.description, c.link, c.id,
-               d.inventory_accno_id, d.income_accno_id, d.expense_accno_id
-               FROM chart c, defaults d
-               WHERE c.link LIKE '%$module%'
-               ORDER BY c.accno|;
+    $query =
+      qq|SELECT c.accno, c.description, c.link, c.id,
+           d.inventory_accno_id, d.income_accno_id, d.expense_accno_id
+         FROM chart c, defaults d
+         WHERE c.link LIKE ?
+         ORDER BY c.accno|;

   }
 
   }
 

-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $sth = prepare_execute_query($form, $dbh, $query, @values);

   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {

-    foreach my $key (split /:/, $ref->{link}) {
+    foreach my $key (split(/:/, $ref->{link})) {

       if ($key =~ /$module/) {
         if (   ($ref->{id} eq $ref->{inventory_accno_id})
             || ($ref->{id} eq $ref->{income_accno_id})
       if ($key =~ /$module/) {
         if (   ($ref->{id} eq $ref->{inventory_accno_id})
             || ($ref->{id} eq $ref->{income_accno_id})


@@ -1235,6 +1370,7 @@ sub create_links {
             { accno       => $ref->{accno},
               description => $ref->{description},
               selected    => "selected" };
             { accno       => $ref->{accno},
               description => $ref->{description},
               selected    => "selected" };

+          $form->{"${key}_default"} = "$ref->{accno}--$ref->{description}";

             } else {
           push @{ $form->{"${module}_links"}{$key} },
             { accno       => $ref->{accno},
             } else {
           push @{ $form->{"${module}_links"}{$key} },
             { accno       => $ref->{accno},


@@ -1246,23 +1382,14 @@ sub create_links {
   }
   $sth->finish;
 
   }
   $sth->finish;
 

-  if ($form->{id}) {
-    $query = qq|SELECT weightunit
-                FROM defaults|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
+  # get buchungsgruppen
+  $form->{BUCHUNGSGRUPPEN} = selectall_hashref_query($form, $dbh, qq|SELECT id, description FROM buchungsgruppen|);

 
 

-    ($form->{weightunit}) = $sth->fetchrow_array;
-    $sth->finish;
+  # get payment terms
+  $form->{payment_terms} = selectall_hashref_query($form, $dbh, qq|SELECT id, description FROM payment_terms ORDER BY sortkey|);

 
 

-  } else {
-    $query = qq|SELECT weightunit, current_date
-                FROM defaults|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    ($form->{weightunit}, $form->{priceupdate}) = $sth->fetchrow_array;
-    $sth->finish;
+  if (!$form->{id}) {
+    ($form->{priceupdate}) = selectrow_query($form, $dbh, qq|SELECT current_date|);

   }
 
   $dbh->disconnect;
   }
 
   $dbh->disconnect;


@@ -1275,38 +1402,45 @@ sub get_parts {
 
   my ($self, $myconfig, $form, $sortorder) = @_;
   my $dbh   = $form->dbconnect($myconfig);
 
   my ($self, $myconfig, $form, $sortorder) = @_;
   my $dbh   = $form->dbconnect($myconfig);

-  my $order = " p.partnumber";
-  my $where = "1 = 1";
+  my $order = qq| p.partnumber|;
+  my $where = qq|1 = 1|;
+  my @values;

 
   if ($sortorder eq "all") {
 
   if ($sortorder eq "all") {

-    $where .= " AND p.partnumber LIKE '%$form->{partnumber}%'";
-    $where .= " AND p.description LIKE '%$form->{description}%'";
-  } else {
-    if ($sortorder eq "partnumber") {
-      $where .= " AND p.partnumber LIKE '%$form->{partnumber}%'";
-      $order = qq|p.$sortorder|;
-    }
-    if ($sortorder eq "description") {
-      $where .= " AND p.description LIKE '%$form->{description}%'";
-    }
+    $where .= qq| AND (partnumber ILIKE ?) AND (description ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%', '%' . $form->{description} . '%');
+
+  } elsif ($sortorder eq "partnumber") {
+    $where .= qq| AND (partnumber ILIKE ?)|;
+    push(@values, '%' . $form->{partnumber} . '%');
+
+  } elsif ($sortorder eq "description") {
+    $where .= qq| AND (description ILIKE ?)|;
+    push(@values, '%' . $form->{description} . '%');
+    $order = "description";
+

   }
 
   my $query =
   }
 
   my $query =

-    qq|SELECT p.id, p.partnumber, p.description, p.unit, p.sellprice FROM parts p WHERE $where ORDER BY $order|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $self->dberror($query);
+    qq|SELECT id, partnumber, description, unit, sellprice
+       FROM parts
+       WHERE $where ORDER BY $order|;
+
+  my $sth = prepare_execute_query($form, $dbh, $query, @values);
+

   my $j = 0;
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
     if (($ref->{partnumber} eq "*") && ($ref->{description} eq "")) {
   my $j = 0;
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
     if (($ref->{partnumber} eq "*") && ($ref->{description} eq "")) {

-    } else {
-      $j++;
-      $form->{"id_$j"}          = $ref->{id};
-      $form->{"partnumber_$j"}  = $ref->{partnumber};
-      $form->{"description_$j"} = $ref->{description};
-      $form->{"unit_$j"}        = $ref->{unit};
-      $form->{"sellprice_$j"}   = $ref->{sellprice};
-      $form->{"soldtotal_$j"}   = get_soldtotal($dbh, $ref->{id});
-    }    #fi
+      next;
+    }
+
+    $j++;
+    $form->{"id_$j"}          = $ref->{id};
+    $form->{"partnumber_$j"}  = $ref->{partnumber};
+    $form->{"description_$j"} = $ref->{description};
+    $form->{"unit_$j"}        = $ref->{unit};
+    $form->{"sellprice_$j"}   = $ref->{sellprice};
+    $form->{"soldtotal_$j"}   = get_soldtotal($dbh, $ref->{id});

   }    #while
   $form->{rows} = $j;
   $sth->finish;
   }    #while
   $form->{rows} = $j;
   $sth->finish;


@@ -1323,106 +1457,174 @@ sub get_soldtotal {
 
   my ($dbh, $id) = @_;
 
 
   my ($dbh, $id) = @_;
 

-  my $query =
-    qq|SELECT sum(i.qty) as totalsold FROM invoice i WHERE i.parts_id = $id|;
-
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  my $sum = 0;
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-
-    $sum = $ref->{totalsold};
-  }    #while
-  $sth->finish;
-
-  if ($sum eq undef) {
-    $sum = 0;
-  }    #fi
+  my $query = qq|SELECT sum(qty) FROM invoice WHERE parts_id = ?|;
+  my ($sum) = selectrow_query($form, $dbh, $query, conv_i($id));
+  $sum ||= 0;

 
   $main::lxdebug->leave_sub();
 
   return $sum;
 }    #end get_soldtotal
 
 
   $main::lxdebug->leave_sub();
 
   return $sum;
 }    #end get_soldtotal
 

-sub retrieve_item {
+sub retrieve_languages {

   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;
   $main::lxdebug->enter_sub();
 
   my ($self, $myconfig, $form) = @_;

-  my $i     = $form->{rowcount};
-  my $where = "NOT p.obsolete = '1'";

 
 

-  if ($form->{"partnumber_$i"}) {
-    my $partnumber = $form->like(lc $form->{"partnumber_$i"});
-    $where .= " AND lower(p.partnumber) LIKE '$partnumber'";
-  }
-  if ($form->{"description_$i"}) {
-    my $description = $form->like(lc $form->{"description_$i"});
-    $where .= " AND lower(p.description) LIKE '$description'";
-  }
+  # connect to database
+  my $dbh = $form->dbconnect($myconfig);

 
 

-  if ($form->{"partsgroup_$i"}) {
-    my $partsgroup = $form->like(lc $form->{"partsgroup_$i"});
-    $where .= " AND lower(pg.partsgroup) LIKE '$partsgroup'";
-  }
+  my @values;
+  my $where;
+
+  if ($form->{language_values} ne "") {
+    $query =
+      qq|SELECT l.id, l.description, tr.translation, tr.longdescription
+         FROM language l
+         LEFT OUTER JOIN translation tr ON (tr.language_id = l.id) AND (tr.parts_id = ?)|;
+    @values = (conv_i($form->{id}));

 
 

-  if ($form->{"description_$i"}) {
-    $where .= " ORDER BY description";

   } else {
   } else {

-    $where .= " ORDER BY partnumber";
+    $query = qq|SELECT id, description FROM language|;

   }
 
   }
 

-  # connect to database
-  my $dbh = $form->dbconnect($myconfig);
+  my $languages = selectall_hashref_query($form, $dbh, $query, @values);

 
 

-  my $query = qq|SELECT p.id, p.partnumber, p.description, p.sellprice,
-                        p.listprice,
-                        c1.accno AS inventory_accno,
-                       c2.accno AS income_accno,
-                       c3.accno AS expense_accno,
-                p.unit, p.assembly, p.bin, p.onhand, p.notes AS partnotes,
-                pg.partsgroup
-                 FROM parts p
-                LEFT JOIN chart c1 ON (p.inventory_accno_id = c1.id)
-                LEFT JOIN chart c2 ON (p.income_accno_id = c2.id)
-                LEFT JOIN chart c3 ON (p.expense_accno_id = c3.id)
-                LEFT JOIN partsgroup pg ON (pg.id = p.partsgroup_id)
-                WHERE $where|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  #while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
+  $dbh->disconnect;

 
 

-  # get tax rates and description
-  #$accno_id = ($form->{vc} eq "customer") ? $ref->{income_accno} : $ref->{inventory_accno};
-  #$query = qq|SELECT c.accno, c.description, t.rate, t.taxnumber
-  #          FROM chart c, tax t
-  #          WHERE c.id=t.chart_id AND t.taxkey in (SELECT taxkey_id from chart where accno = '$accno_id')
-  #          ORDER BY accno|;
-  # $stw = $dbh->prepare($query);
-  #$stw->execute || $form->dberror($query);
+  $main::lxdebug->leave_sub();

 
 

-  #$ref->{taxaccounts} = "";
-  #while ($ptr = $stw->fetchrow_hashref(NAME_lc)) {
+  return $languages;
+}

 
 

-  #   $form->{"$ptr->{accno}_rate"} = $ptr->{rate};
-  #  $form->{"$ptr->{accno}_description"} = $ptr->{description};
-  #   $form->{"$ptr->{accno}_taxnumber"} = $ptr->{taxnumber};
-  #   $form->{taxaccounts} .= "$ptr->{accno} ";
-  #   $ref->{taxaccounts} .= "$ptr->{accno} ";
+sub follow_account_chain {
+  $main::lxdebug->enter_sub(2);

 
 

-  #}
+  my ($self, $form, $dbh, $transdate, $accno_id, $accno) = @_;

 
 

-  #$stw->finish;
-  #chop $ref->{taxaccounts};
+  my @visited_accno_ids = ($accno_id);

 
 

-  push @{ $form->{item_list} }, $ref;
+  my ($query, $sth);

 
 

-  #}
-  $sth->finish;
-  $dbh->disconnect;
+  $query =
+    qq|SELECT c.new_chart_id, date($transdate) >= c.valid_from AS is_valid, | .
+    qq|  cnew.accno | .
+    qq|FROM chart c | .
+    qq|LEFT JOIN chart cnew ON c.new_chart_id = cnew.id | .
+    qq|WHERE (c.id = ?) AND NOT c.new_chart_id ISNULL AND (c.new_chart_id > 0)|;
+  $sth = prepare_query($form, $dbh, $query);
+
+  while (1) {
+    do_statement($form, $sth, $query, $accno_id);
+    $ref = $sth->fetchrow_hashref();
+    last unless ($ref && $ref->{"is_valid"} &&
+                 !grep({ $_ == $ref->{"new_chart_id"} } @visited_accno_ids));
+    $accno_id = $ref->{"new_chart_id"};
+    $accno = $ref->{"accno"};
+    push(@visited_accno_ids, $accno_id);
+  }

 
 

-  $main::lxdebug->leave_sub();
+  $main::lxdebug->leave_sub(2);
+
+  return ($accno_id, $accno);
+}
+
+sub retrieve_accounts {
+  $main::lxdebug->enter_sub(2);
+
+  my ($self, $myconfig, $form, $parts_id, $index) = @_;
+
+  my ($query, $sth, $dbh);
+
+  $form->{"taxzone_id"} *= 1;
+
+  $dbh = $form->get_standard_dbh($myconfig);
+
+  my $transdate = "";
+  if ($form->{type} eq "invoice") {
+    if (($form->{vc} eq "vendor") || !$form->{deliverydate}) {
+      $transdate = $form->{invdate};
+    } else {
+      $transdate = $form->{deliverydate};
+    }
+  } elsif (($form->{type} eq "credit_note") || ($form->{script} eq 'ir.pl')) {
+    $transdate = $form->{invdate};
+  } else {
+    $transdate = $form->{transdate};
+  }
+
+  if ($transdate eq "") {
+    $transdate = "current_date";
+  } else {
+    $transdate = $dbh->quote($transdate);
+  }
+
+  $query =
+    qq|SELECT | .
+    qq|  p.inventory_accno_id AS is_part, | .
+    qq|  bg.inventory_accno_id, | .
+    qq|  bg.income_accno_id_$form->{taxzone_id} AS income_accno_id, | .
+    qq|  bg.expense_accno_id_$form->{taxzone_id} AS expense_accno_id, | .
+    qq|  c1.accno AS inventory_accno, | .
+    qq|  c2.accno AS income_accno, | .
+    qq|  c3.accno AS expense_accno | .
+    qq|FROM parts p | .
+    qq|LEFT JOIN buchungsgruppen bg ON p.buchungsgruppen_id = bg.id | .
+    qq|LEFT JOIN chart c1 ON bg.inventory_accno_id = c1.id | .
+    qq|LEFT JOIN chart c2 ON bg.income_accno_id_$form->{taxzone_id} = c2.id | .
+    qq|LEFT JOIN chart c3 ON bg.expense_accno_id_$form->{taxzone_id} = c3.id | .
+    qq|WHERE p.id = ?|;
+  my $ref = selectfirst_hashref_query($form, $dbh, $query, $parts_id);
+
+  return $main::lxdebug->leave_sub(2) if (!$ref);
+
+  $ref->{"inventory_accno_id"} = undef unless ($ref->{"is_part"});
+
+  my %accounts;
+  foreach my $type (qw(inventory income expense)) {
+    next unless ($ref->{"${type}_accno_id"});
+    ($accounts{"${type}_accno_id"}, $accounts{"${type}_accno"}) =
+      $self->follow_account_chain($form, $dbh, $transdate,
+                                  $ref->{"${type}_accno_id"},
+                                  $ref->{"${type}_accno"});
+  }
+
+  map({ $form->{"${_}_accno_$index"} = $accounts{"${_}_accno"} }
+      qw(inventory income expense));
+
+  my $inc_exp = $form->{"vc"} eq "customer" ? "income" : "expense";
+  my $accno_id = $accounts{"${inc_exp}_accno_id"};
+
+  $query =
+    qq|SELECT c.accno, t.taxdescription AS description, t.rate, t.taxnumber | .
+    qq|FROM tax t | .
+    qq|LEFT JOIN chart c ON c.id = t.chart_id | .
+    qq|WHERE t.id IN | .
+    qq|  (SELECT tk.tax_id | .
+    qq|   FROM taxkeys tk | .
+    qq|   WHERE tk.chart_id = ? AND startdate <= | . quote_db_date($transdate) .
+    qq|   ORDER BY startdate DESC LIMIT 1) |;
+  $ref = selectfirst_hashref_query($form, $dbh, $query, $accno_id);
+
+  unless ($ref) {
+    $main::lxdebug->leave_sub(2);
+    return;
+  }
+
+  $form->{"taxaccounts_$index"} = $ref->{"accno"};
+  if ($form->{"taxaccounts"} !~ /$ref->{accno}/) {
+    $form->{"taxaccounts"} .= "$ref->{accno} ";
+  }
+  map({ $form->{"$ref->{accno}_${_}"} = $ref->{$_}; }
+      qw(rate description taxnumber));
+
+#   $main::lxdebug->message(0, "formvars: rate " . $form->{"$ref->{accno}_rate"} .
+#                           " description " . $form->{"$ref->{accno}_description"} .
+#                           " taxnumber " . $form->{"$ref->{accno}_taxnumber"} .
+#                           " || taxaccounts_$index " . $form->{"taxaccounts_$index"} .
+#                           " || taxaccounts " . $form->{"taxaccounts"});
+
+  $main::lxdebug->leave_sub(2);

 }
 
 1;
 }
 
 1;