Date-Input-Felder durch 'L.date_tag's ersetzt

[mfinanz.git] / SL / CT.pm

diff --git a/SL/CT.pm b/SL/CT.pm
index c61f5a4501b03c64695213d83c08ce792b608612..fabc3cac875a14cc6a76dccbb8e308be8eb67d15 100644 (file)
--- a/SL/CT.pm
+++ b/SL/CT.pm
@@ -36,471 +36,373 @@
 #======================================================================
 
 package CT;
 #======================================================================
 
 package CT;

+

 use Data::Dumper;
 
 use Data::Dumper;
 

+use SL::Common;
+use SL::CVar;
+use SL::DBUtils;
+use SL::FU;
+use SL::Notes;
+use SL::TransNumber;
+
+use strict;

 
 sub get_tuple {
   $main::lxdebug->enter_sub();
 
 
 sub get_tuple {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
+  my ( $self, $myconfig, $form ) = @_;
+
+  my $cv = $form->{db} eq "customer" ? "customer" : "vendor";

 
   my $dbh   = $form->dbconnect($myconfig);
 
   my $dbh   = $form->dbconnect($myconfig);

-  my $query = qq|SELECT ct.*, b.id AS business, cp.*
-                 FROM $form->{db} ct
-                LEFT JOIN business b on ct.business_id = b.id
-                 LEFT JOIN contacts cp on ct.id = cp.cp_cv_id
-                WHERE ct.id = $form->{id}  order by cp.cp_id limit 1|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query =
+    qq|SELECT ct.*, b.id AS business, cp.* | .
+    qq|FROM $cv ct | .
+    qq|LEFT JOIN business b ON (ct.business_id = b.id) | .
+    qq|LEFT JOIN contacts cp ON (ct.id = cp.cp_cv_id) | .
+    qq|WHERE (ct.id = ?) | .
+    qq|ORDER BY cp.cp_id LIMIT 1|;
+  my $sth = prepare_execute_query($form, $dbh, $query, $form->{id});

 
 

-  my $ref = $sth->fetchrow_hashref(NAME_lc);
+  my $ref = $sth->fetchrow_hashref("NAME_lc");

 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 
 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 

-  $sth->finish;
-  if ($form->{salesman_id}) {
-    my $query = qq|SELECT ct.name AS salesman
-                  FROM $form->{db} ct
-                  WHERE ct.id = $form->{salesman_id}|;
-    my $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    my ($ref) = $sth->fetchrow_array();
-
-    $form->{salesman} = $ref;
+  # remove any trailing whitespace
+  $form->{curr} =~ s/\s*$//;

 
 

-    $sth->finish;
-  }
-
-  # check if it is orphaned
-  my $arap = ($form->{db} eq 'customer') ? "ar" : "ap";
-  $query = qq|SELECT a.id
-              FROM $arap a
-             JOIN $form->{db} ct ON (a.$form->{db}_id = ct.id)
-             WHERE ct.id = $form->{id}
-           UNION
-             SELECT a.id
-             FROM oe a
-             JOIN $form->{db} ct ON (a.$form->{db}_id = ct.id)
-             WHERE ct.id = $form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  unless ($sth->fetchrow_array) {
-    $form->{status} = "orphaned";
-  }

   $sth->finish;
   $sth->finish;

-
-  # get tax labels
-  $query = qq|SELECT c.accno, c.description
-              FROM chart c
-             JOIN tax t ON (t.chart_id = c.id)
-             WHERE c.link LIKE '%CT_tax%'
-             ORDER BY c.accno|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    $form->{taxaccounts} .= "$ref->{accno} ";
-    $form->{tax}{ $ref->{accno} }{description} = $ref->{description};
+  if ( $form->{salesman_id} ) {
+    my $query =
+      qq|SELECT ct.name AS salesman | .
+      qq|FROM $cv ct | .
+      qq|WHERE ct.id = ?|;
+    ($form->{salesman}) =
+      selectrow_query($form, $dbh, $query, $form->{salesman_id});

   }
   }

-  $sth->finish;
-  chop $form->{taxaccounts};

 
 

-  # get taxes for customer/vendor
-  $query = qq|SELECT c.accno
-              FROM chart c
-             JOIN $form->{db}tax t ON (t.chart_id = c.id)
-             WHERE t.$form->{db}_id = $form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my ($employee_id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $form->{login});
+  $query =
+    qq|SELECT n.*, n.itime::DATE AS created_on,
+         e.name AS created_by_name, e.login AS created_by_login
+       FROM notes n
+       LEFT JOIN employee e ON (n.created_by = e.id)
+       WHERE (n.trans_id = ?) AND (n.trans_module = 'ct')|;
+  $form->{NOTES} = selectall_hashref_query($form, $dbh, $query, conv_i($form->{id}));

 
 

-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    $form->{tax}{ $ref->{accno} }{taxable} = 1;
+  $query =
+    qq|SELECT fu.follow_up_date, fu.done AS follow_up_done, e.name AS created_for_name, e.name AS created_for_login
+       FROM follow_ups fu
+       LEFT JOIN employee e ON (fu.created_for_user = e.id)
+       WHERE (fu.note_id = ?)
+         AND NOT COALESCE(fu.done, FALSE)
+         AND (   (fu.created_by = ?)
+              OR (fu.created_by IN (SELECT DISTINCT what FROM follow_up_access WHERE who = ?)))|;
+  $sth = prepare_query($form, $dbh, $query);
+
+  foreach my $note (@{ $form->{NOTES} }) {
+    do_statement($form, $sth, $query, conv_i($note->{id}), conv_i($note->{created_by}), conv_i($employee_id));
+    $ref = $sth->fetchrow_hashref();
+
+    map { $note->{$_} = $ref->{$_} } keys %{ $ref } if ($ref);

   }
   }

-  $sth->finish;

 
 

-  # get business types
-  $query = qq|SELECT id, description
-              FROM business
-             ORDER BY 1|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  $sth->finish();

 
 

-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{all_business} }, $ref;
+  if ($form->{edit_note_id}) {
+    $query =
+      qq|SELECT n.id AS NOTE_id, n.subject AS NOTE_subject, n.body AS NOTE_body,
+           fu.id AS FU_id, fu.follow_up_date AS FU_date, fu.done AS FU_done, fu.created_for_user AS FU_created_for_user
+         FROM notes n
+         LEFT JOIN follow_ups fu ON ((n.id = fu.note_id) AND NOT COALESCE(fu.done, FALSE))
+         WHERE n.id = ?|;
+    $ref = selectfirst_hashref_query($form, $dbh, $query, conv_i($form->{edit_note_id}));
+
+    if ($ref) {
+      foreach my $key (keys %{ $ref }) {
+        my $new_key       =  $key;
+        $new_key          =~ s/^([^_]+)/\U$1\E/;
+        $form->{$new_key} =  $ref->{$key};
+      }
+    }

   }
   }

-  $sth->finish;
-
-  # get tax zones
-  $query = qq|SELECT id, description
-              FROM tax_zones|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{TAXZONE} }, $ref;
+  # check if it is orphaned
+  my $arap      = ( $form->{db} eq 'customer' ) ? "ar" : "ap";
+  my $num_args  = 2;
+  my $makemodel = '';
+  if ($form->{db} eq 'vendor') {
+    $makemodel = qq| UNION SELECT 1 FROM makemodel mm WHERE mm.make = ?|;
+    $num_args++;

   }
   }

-  $sth->finish;

 
 

+  $query =
+    qq|SELECT a.id | .
+    qq|FROM $arap a | .
+    qq|JOIN $cv ct ON (a.${cv}_id = ct.id) | .
+    qq|WHERE ct.id = ? | .
+    qq|UNION | .
+    qq|SELECT a.id | .
+    qq|FROM oe a | .
+    qq|JOIN $cv ct ON (a.${cv}_id = ct.id) | .
+    qq|WHERE ct.id = ?|
+    . $makemodel;
+  my ($dummy) = selectrow_query($form, $dbh, $query, (conv_i($form->{id})) x $num_args);
+
+  $form->{status} = "orphaned" unless ($dummy);

 
 

-  # get shipto address
-  $query = qq|SELECT id, shiptoname
-              FROM shipto WHERE trans_id=$form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
+  $dbh->disconnect;

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{SHIPTO} }, $ref;
-  }
-  $sth->finish;
+  $main::lxdebug->leave_sub();
+}

 
 

+sub populate_drop_down_boxes {
+  $main::lxdebug->enter_sub();

 
 

-  # get contacts
-  $query = qq|SELECT cp_id, cp_name
-              FROM contacts WHERE cp_cv_id=$form->{id}|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my ($self, $myconfig, $form, $provided_dbh) = @_;
+  my $query;

 
 

+  my $dbh = $provided_dbh ? $provided_dbh : $form->dbconnect($myconfig);

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{CONTACTS} }, $ref;
-  }
-  $sth->finish;
+  # get business types
+  $query = qq|SELECT id, description FROM business ORDER BY id|;
+  $form->{all_business} = selectall_hashref_query($form, $dbh, $query);

 
 

-  # get languages
-  $query = qq|SELECT id, description
-              FROM language
-             ORDER BY 1|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  # get shipto address
+  $query =
+    qq|SELECT shipto_id, shiptoname, shiptodepartment_1, shiptostreet, shiptocity
+       FROM shipto
+       WHERE (trans_id = ?) AND (module = 'CT')|;
+  $form->{SHIPTO} = selectall_hashref_query($form, $dbh, $query, $form->{id});

 
 

-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{languages} }, $ref;
-  }
-  $sth->finish;
+  # get contacts
+  $query  = qq|SELECT cp_id, cp_name, cp_givenname FROM contacts WHERE cp_cv_id = ? ORDER BY cp_name|;
+  $form->{CONTACTS} = selectall_hashref_query($form, $dbh, $query, $form->{id});

 
   # get languages
 
   # get languages

-  $query = qq|SELECT id, description
-              FROM payment_terms
-             ORDER BY 1|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  $query = qq|SELECT id, description FROM language ORDER BY id|;
+  $form->{languages} = selectall_hashref_query($form, $dbh, $query);

 
 

-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{payment_terms} }, $ref;
-  }
-  $sth->finish;
+  # get payment terms
+  $query = qq|SELECT id, description FROM payment_terms ORDER BY sortkey|;
+  $form->{payment_terms} = selectall_hashref_query($form, $dbh, $query);

 
 

-  $dbh->disconnect;
+  $dbh->disconnect() unless ($provided_dbh);

 
   $main::lxdebug->leave_sub();
 }
 
 
   $main::lxdebug->leave_sub();
 }
 

-## LINET

 sub query_titles_and_greetings {
   $main::lxdebug->enter_sub();
 
 sub query_titles_and_greetings {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
-  my (%tmp,  $ref);
+  my ( $self, $myconfig, $form ) = @_;
+  my ( %tmp,  $ref, $query );

 
   my $dbh = $form->dbconnect($myconfig);
 
   $query =
 
   my $dbh = $form->dbconnect($myconfig);
 
   $query =

-    "SELECT DISTINCT(c.cp_greeting) FROM contacts c WHERE c.cp_greeting LIKE '%'";
-  $sth = $dbh->prepare($query);
-  $sth->execute() || $form->dberror($query);
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    next unless ($ref->{cp_greeting} =~ /[a-zA-Z]/);
-    $tmp{ $ref->{cp_greeting} } = 1;
-  }
-  $sth->finish();
-
-  @{ $form->{GREETINGS} } = sort(keys(%tmp));
-
-  %tmp = ();
+    qq|SELECT DISTINCT(greeting) | .
+    qq|FROM customer | .
+    qq|WHERE greeting ~ '[a-zA-Z]' | .
+    qq|UNION | .
+    qq|SELECT DISTINCT(greeting) | .
+    qq|FROM vendor | .
+    qq|WHERE greeting ~ '[a-zA-Z]' | .
+    qq|ORDER BY greeting|;
+
+  map({ $tmp{$_} = 1; } selectall_array_query($form, $dbh, $query));
+  $form->{COMPANY_GREETINGS} = [ sort(keys(%tmp)) ];

 
   $query =
 
   $query =

-    "SELECT greeting FROM customer UNION select greeting FROM vendor";
-  $sth = $dbh->prepare($query);
-  $sth->execute() || $form->dberror($query);
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    next unless ($ref->{greeting} =~ /[a-zA-Z]/);
-    $tmp{ $ref->{greeting} } = 1;
-  }
-  $sth->finish();
-
-  @{ $form->{COMPANY_GREETINGS} } = sort(keys(%tmp));
-
-  %tmp = ();
-
-  $query =
-    "SELECT DISTINCT(c.cp_title) FROM contacts c WHERE c.cp_title LIKE '%'";
-  $sth = $dbh->prepare($query);
-  $sth->execute() || $form->dberror($query);
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    next unless ($ref->{cp_title} =~ /[a-zA-Z]/);
-    $tmp{ $ref->{cp_title} } = 1;
-  }
-  $sth->finish();
-
-  @{ $form->{TITLES} } = sort(keys(%tmp));
-
-  %tmp = ();
+    qq|SELECT DISTINCT(cp_title) | .
+    qq|FROM contacts | .
+    qq|WHERE cp_title ~ '[a-zA-Z]'|;
+  $form->{TITLES} = [ selectall_array_query($form, $dbh, $query) ];

 
   $query =
 
   $query =

-    "SELECT DISTINCT(c.cp_abteilung) FROM contacts c WHERE c.cp_abteilung LIKE '%'";
-  $sth = $dbh->prepare($query);
-  $sth->execute() || $form->dberror($query);
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    $tmp{ $ref->{cp_abteilung} } = 1;
-  }
-  $sth->finish();
-
-  @{ $form->{DEPARTMENT} } = sort(keys(%tmp));
+    qq|SELECT DISTINCT(cp_abteilung) | .
+    qq|FROM contacts | .
+    qq|WHERE cp_abteilung ~ '[a-zA-Z]'|;
+  $form->{DEPARTMENT} = [ selectall_array_query($form, $dbh, $query) ];

 
   $dbh->disconnect();
   $main::lxdebug->leave_sub();
 }
 
   $dbh->disconnect();
   $main::lxdebug->leave_sub();
 }

-## /LINET
-
-sub taxaccounts {
-  $main::lxdebug->enter_sub();
-
-  my ($self, $myconfig, $form) = @_;
-
-  my $dbh = $form->dbconnect($myconfig);
-
-  # get tax labels
-  my $query = qq|SELECT accno, description
-                 FROM chart c, tax t
-                WHERE c.link LIKE '%CT_tax%'
-                AND c.id = t.chart_id
-                ORDER BY accno|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  my $ref = ();
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    $form->{taxaccounts} .= "$ref->{accno} ";
-    $form->{tax}{ $ref->{accno} }{description} = $ref->{description};
-  }
-  $sth->finish;
-  chop $form->{taxaccounts};
-
-  # this is just for the selection for type of business
-  $query = qq|SELECT id, description
-              FROM business|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{all_business} }, $ref;
-  }
-  $sth->finish;
-  # get languages
-  $query = qq|SELECT id, description
-              FROM language
-             ORDER BY 1|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{languages} }, $ref;
-  }
-  $sth->finish;
-
-  # get payment terms
-  $query = qq|SELECT id, description
-              FROM payment_terms
-             ORDER BY 1|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-  while ($ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{payment_terms} }, $ref;
-  }
-  $sth->finish;
-
-  # get taxkeys and description
-  $query = qq|SELECT id, description
-              FROM tax_zones|;
-  $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-
-
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{TAXZONE} }, $ref;
-  }
-  $sth->finish;
-
-
-  $dbh->disconnect;
-
-  $main::lxdebug->leave_sub();
-}

 
 sub save_customer {
   $main::lxdebug->enter_sub();
 
 
 sub save_customer {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
+  my ( $self, $myconfig, $form ) = @_;

 
   # set pricegroup to default
 
   # set pricegroup to default

-  if ($form->{klass}) { }
-  else { $form->{klass} = 0; }
+  $form->{klass} = 0 unless ($form->{klass});

 
   # connect to database
 
   # connect to database

-  my $dbh = $form->dbconnect($myconfig);
-##LINET
-  map({
-      $form->{"cp_${_}"} = $form->{"selected_cp_${_}"}
-        if ($form->{"selected_cp_${_}"});
-  } qw(title greeting abteilung));
+  my $dbh = $form->get_standard_dbh;
+
+  map( {
+    $form->{"cp_${_}"} = $form->{"selected_cp_${_}"}
+    if ( $form->{"selected_cp_${_}"} );
+       } qw(title greeting abteilung) );

   $form->{"greeting"} = $form->{"selected_company_greeting"}
   $form->{"greeting"} = $form->{"selected_company_greeting"}

-        if ($form->{"selected_company_greeting"});
-  #
-  # escape '
-  map { $form->{$_} =~ s/\'/\'\'/g }
-    qw(customernumber name street zipcode city country homepage contact notes cp_title cp_greeting language pricegroup);
-##/LINET
+  if ( $form->{"selected_company_greeting"} );
+

   # assign value discount, terms, creditlimit
   # assign value discount, terms, creditlimit

-  $form->{discount} = $form->parse_amount($myconfig, $form->{discount});
+  $form->{discount} = $form->parse_amount( $myconfig, $form->{discount} );

   $form->{discount} /= 100;
   $form->{discount} /= 100;

-  $form->{terms}       *= 1;
-  $form->{taxincluded} *= 1;
-  $form->{obsolete}    *= 1;
-  $form->{business}    *= 1;
-  $form->{salesman_id} *= 1;
-  $form->{language_id} *= 1;
-  $form->{payment_id} *= 1;
-  $form->{taxzone_id} *= 1;
-  $form->{creditlimit} = $form->parse_amount($myconfig, $form->{creditlimit});
-
-  my ($query, $sth);
-
-  if ($form->{id}) {
-    $query = qq|DELETE FROM customertax
-                WHERE customer_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
-
-#     $query = qq|DELETE FROM shipto
-#                 WHERE trans_id = $form->{id} AND module = 'CT'|;
-#     $dbh->do($query) || $form->dberror($query);
-  } else {
-    my $uid = rand() . time;
+  $form->{creditlimit} = $form->parse_amount( $myconfig, $form->{creditlimit} );

 
 

-    $uid .= $form->{login};
+  my ( $query, $sth, $f_id );

 
 

-    $uid = substr($uid, 2, 75);
+  if ( $form->{id} ) {
+    $query = qq|SELECT id FROM customer WHERE customernumber = ?|;
+    ($f_id) = selectrow_query($form, $dbh, $query, $form->{customernumber});

 
 

-    $query = qq|INSERT INTO customer (name)
-                VALUES ('$uid')|;
-    $dbh->do($query) || $form->dberror($query);
-
-    $query = qq|SELECT c.id FROM customer c
-                WHERE c.name = '$uid'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
-    if (!$form->{customernumber} && $form->{business}) {
-      $form->{customernumber} =
-        $form->update_business($myconfig, $form->{business});
-    }
-    if (!$form->{customernumber}) {
-      $form->{customernumber} =
-        $form->update_defaults($myconfig, "customernumber");
+    if (($f_id ne $form->{id}) && ($f_id ne "")) {
+      $main::lxdebug->leave_sub();
+      return 3;

     }
 
     }
 

+  } else {
+    my $customernumber      = SL::TransNumber->new(type        => 'customer',
+                                                   dbh         => $dbh,
+                                                   number      => $form->{customernumber},
+                                                   business_id => $form->{business},
+                                                   save        => 1);
+    $form->{customernumber} = $customernumber->create_unique unless $customernumber->is_unique;
+
+    $query = qq|SELECT nextval('id')|;
+    ($form->{id}) = selectrow_query($form, $dbh, $query);
+
+    $query = qq|INSERT INTO customer (id, name) VALUES (?, '')|;
+    do_query($form, $dbh, $query, $form->{id});
+  }
+
+  $query = qq|UPDATE customer SET | .
+    qq|customernumber = ?, | .
+    qq|name = ?, | .
+    qq|greeting = ?, | .
+    qq|department_1 = ?, | .
+    qq|department_2 = ?, | .
+    qq|street = ?, | .
+    qq|zipcode = ?, | .
+    qq|city = ?, | .
+    qq|country = ?, | .
+    qq|homepage = ?, | .
+    qq|contact = ?, | .
+    qq|phone = ?, | .
+    qq|fax = ?, | .
+    qq|email = ?, | .
+    qq|cc = ?, | .
+    qq|bcc = ?, | .
+    qq|notes = ?, | .
+    qq|discount = ?, | .
+    qq|creditlimit = ?, | .
+    qq|terms = ?, | .
+    qq|business_id = ?, | .
+    qq|taxnumber = ?, | .
+    qq|language = ?, | .
+    qq|account_number = ?, | .
+    qq|bank_code = ?, | .
+    qq|bank = ?, | .
+    qq|iban = ?, | .
+    qq|bic = ?, | .
+    qq|obsolete = ?, | .
+    qq|direct_debit = ?, | .
+    qq|ustid = ?, | .
+    qq|username = ?, | .
+    qq|salesman_id = ?, | .
+    qq|language_id = ?, | .
+    qq|payment_id = ?, | .
+    qq|taxzone_id = ?, | .
+    qq|user_password = ?, | .
+    qq|c_vendor_id = ?, | .
+    qq|klass = ?, | .
+    qq|curr = ? | .
+    qq|WHERE id = ?|;
+  my @values = (
+    $form->{customernumber},
+    $form->{name},
+    $form->{greeting},
+    $form->{department_1},
+    $form->{department_2},
+    $form->{street},
+    $form->{zipcode},
+    $form->{city},
+    $form->{country},
+    $form->{homepage},
+    $form->{contact},
+    $form->{phone},
+    $form->{fax},
+    $form->{email},
+    $form->{cc},
+    $form->{bcc},
+    $form->{notes},
+    $form->{discount},
+    $form->{creditlimit},
+    conv_i($form->{terms}),
+    conv_i($form->{business}),
+    $form->{taxnumber},
+    $form->{language},
+    $form->{account_number},
+    $form->{bank_code},
+    $form->{bank},
+    $form->{iban},
+    $form->{bic},
+    $form->{obsolete} ? 't' : 'f',
+    $form->{direct_debit} ? 't' : 'f',
+    $form->{ustid},
+    $form->{username},
+    conv_i($form->{salesman_id}),
+    conv_i($form->{language_id}),
+    conv_i($form->{payment_id}),
+    conv_i($form->{taxzone_id}, 0),
+    $form->{user_password},
+    $form->{c_vendor_id},
+    conv_i($form->{klass}),
+    substr($form->{currency}, 0, 3),
+    $form->{id}
+    );
+  do_query( $form, $dbh, $query, @values );
+
+  $query = undef;
+  my @columns = qw(cp_title cp_givenname cp_name cp_email cp_phone1 cp_phone2 cp_abteilung cp_fax
+                   cp_mobile1 cp_mobile2 cp_satphone cp_satfax cp_project cp_privatphone cp_privatemail cp_birthday cp_gender
+                   cp_street cp_zipcode cp_city);
+  @values     = map { $_ eq 'cp_gender' ? ($form->{$_} eq 'f' ? 'f' : 'm') : $form->{$_} } @columns;
+
+  if ( $form->{cp_id} ) {
+    $query = qq|UPDATE contacts SET | . join(', ', map { "${_} = ?" } @columns) . qq| WHERE cp_id = ?|;
+    push @values, $form->{cp_id};
+
+  } elsif ( $form->{cp_name} || $form->{cp_givenname} ) {
+    $query = qq|INSERT INTO contacts (| . join(', ', 'cp_cv_id', @columns) . qq|) VALUES (?, | . join(', ', ('?') x scalar(@columns)) . qq|)|;
+    unshift @values, $form->{id};

   }
   }

+  do_query( $form, $dbh, $query, @values ) if ($query);
+
+  # add shipto
+  $form->add_shipto( $dbh, $form->{id}, "CT" );

 
 

-  $query = qq|UPDATE customer SET
-              customernumber = '$form->{customernumber}',
-             name = '$form->{name}',
-              greeting = '$form->{greeting}',
-              department_1 = '$form->{department_1}',
-              department_2 = '$form->{department_2}',
-             street = '$form->{street}',
-             zipcode = '$form->{zipcode}',
-             city = '$form->{city}',
-             country = '$form->{country}',
-             homepage = '$form->{homepage}',
-             contact = '$form->{contact}',
-             phone = '$form->{phone}',
-             fax = '$form->{fax}',
-             email = '$form->{email}',
-             cc = '$form->{cc}',
-             bcc = '$form->{bcc}',
-             notes = '$form->{notes}',
-             discount = $form->{discount},
-             creditlimit = $form->{creditlimit},
-             terms = $form->{terms},
-             taxincluded = '$form->{taxincluded}',
-             business_id = $form->{business},
-             taxnumber = '$form->{taxnumber}',
-             sic_code = '$form->{sic}',
-              language = '$form->{language}',
-              account_number = '$form->{account_number}',
-              bank_code = '$form->{bank_code}',
-              bank = '$form->{bank}',
-              obsolete = '$form->{obsolete}',
-              ustid = '$form->{ustid}',
-              username = '$form->{username}',
-              salesman_id = '$form->{salesman_id}',
-              language_id = '$form->{language_id}',
-              payment_id = '$form->{payment_id}',
-              taxzone_id = '$form->{taxzone_id}',
-              user_password = | . $dbh->quote($form->{user_password}) . qq|,
-              c_vendor_id = '$form->{c_vendor_id}',
-              klass = '$form->{klass}'
-             WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+  $self->_save_note('dbh' => $dbh);
+  $self->_delete_selected_notes('dbh' => $dbh);

 
 

+  CVar->save_custom_variables('dbh'       => $dbh,
+                              'module'    => 'CT',
+                              'trans_id'  => $form->{id},
+                              'variables' => $form,
+                              'always_valid' => 1);

   if ($form->{cp_id}) {
   if ($form->{cp_id}) {

-    $query = qq|UPDATE contacts SET
-               cp_greeting = '$form->{cp_greeting}',
-               cp_title = '$form->{cp_title}',
-               cp_givenname = '$form->{cp_givenname}',
-               cp_name = '$form->{cp_name}',
-               cp_email = '$form->{cp_email}',
-               cp_phone1 = '$form->{cp_phone1}',
-               cp_phone2 = '$form->{cp_phone2}',
-                cp_abteilung = | . $dbh->quote($form->{cp_abteilung}) . qq|,
-                cp_fax = | . $dbh->quote($form->{cp_fax}) . qq|,
-                cp_mobile1 = | . $dbh->quote($form->{cp_mobile1}) . qq|,
-                cp_mobile2 = | . $dbh->quote($form->{cp_mobile2}) . qq|,
-                cp_satphone = | . $dbh->quote($form->{cp_satphone}) . qq|,
-                cp_satfax = | . $dbh->quote($form->{cp_satfax}) . qq|,
-                cp_project = | . $dbh->quote($form->{cp_project}) . qq|,
-                cp_privatphone = | . $dbh->quote($form->{cp_privatphone}) . qq|,
-                cp_privatemail = | . $dbh->quote($form->{cp_privatemail}) . qq|,
-                cp_birthday = | . $dbh->quote($form->{cp_birthday}) . qq|
-               WHERE cp_id = $form->{cp_id}|;
-  } elsif ($form->{cp_name} || $form->{cp_givenname}) {
-    $query =
-      qq|INSERT INTO contacts ( cp_cv_id, cp_greeting, cp_title, cp_givenname, cp_name, cp_email, cp_phone1, cp_phone2, cp_abteilung, cp_fax, cp_mobile1, cp_mobile2, cp_satphone, cp_satfax, cp_project, cp_privatphone, cp_privatemail, cp_birthday)
-                 VALUES ($form->{id}, '$form->{cp_greeting}','$form->{cp_title}','$form->{cp_givenname}','$form->{cp_name}','$form->{cp_email}','$form->{cp_phone1}','$form->{cp_phone2}', '$form->{cp_abteilung}', | . $dbh->quote($form->{cp_fax}) . qq|,| . $dbh->quote($form->{cp_mobile1}) . qq|,| . $dbh->quote($form->{cp_mobile2}) . qq|,| . $dbh->quote($form->{cp_satphone}) . qq|,| . $dbh->quote($form->{cp_satfax}) . qq|,| . $dbh->quote($form->{cp_project}) . qq|,| . $dbh->quote($form->{cp_privatphone}) . qq|,| . $dbh->quote($form->{cp_privatemail}) . qq|,| . $dbh->quote($form->{cp_birthday}) . qq|)|;
-  }
-  $dbh->do($query) || $form->dberror($query);
-
-  # save taxes
-  foreach $item (split / /, $form->{taxaccounts}) {
-    if ($form->{"tax_$item"}) {
-      $query = qq|INSERT INTO customertax (customer_id, chart_id)
-                 VALUES ($form->{id}, (SELECT c.id
-                                       FROM chart c
-                                       WHERE c.accno = '$item'))|;
-      $dbh->do($query) || $form->dberror($query);
-    }
+    CVar->save_custom_variables('dbh'       => $dbh,
+                                'module'    => 'Contacts',
+                                'trans_id'  => $form->{cp_id},
+                                'variables' => $form,
+                                'name_prefix'  => 'cp',
+                                'always_valid' => 1);

   }
   }

-  print(STDERR "SHIPTO_ID $form->{shipto_id}\n");
-  # add shipto
-  $form->add_shipto($dbh, $form->{id}, "CT");

 
 

-  $rc = $dbh->disconnect;
+  my $rc = $dbh->commit();

 
   $main::lxdebug->leave_sub();
   return $rc;
 
   $main::lxdebug->leave_sub();
   return $rc;


@@ -509,140 +411,215 @@ sub save_customer {
 sub save_vendor {
   $main::lxdebug->enter_sub();
 
 sub save_vendor {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
+  my ( $self, $myconfig, $form ) = @_;

 
 

+  $form->{taxzone_id} *= 1;

   # connect to database
   # connect to database

-  my $dbh = $form->dbconnect($myconfig);
-##LINET
-  map({
-      $form->{"cp_${_}"} = $form->{"selected_cp_${_}"}
-        if ($form->{"selected_cp_${_}"});
-  } qw(title greeting abteilung));
+  my $dbh = $form->get_standard_dbh;
+
+  map( {
+    $form->{"cp_${_}"} = $form->{"selected_cp_${_}"}
+    if ( $form->{"selected_cp_${_}"} );
+       } qw(title greeting abteilung) );

   $form->{"greeting"} = $form->{"selected_company_greeting"}
   $form->{"greeting"} = $form->{"selected_company_greeting"}

-        if ($form->{"selected_company_greeting"});
-  # escape '
-  map { $form->{$_} =~ s/\'/\'\'/g }
-    qw(vendornumber name street zipcode city country homepage contact notes cp_title cp_greeting language);
-##/LINET
-  $form->{discount} = $form->parse_amount($myconfig, $form->{discount});
+  if ( $form->{"selected_company_greeting"} );
+
+  $form->{discount} = $form->parse_amount( $myconfig, $form->{discount} );

   $form->{discount} /= 100;
   $form->{discount} /= 100;

-  $form->{terms}       *= 1;
-  $form->{taxincluded} *= 1;
-  $form->{obsolete}    *= 1;
-  $form->{business}    *= 1;
-  $form->{payment_id}    *= 1;
-  $form->{language_id}    *= 1;
-  $form->{taxzone_id}    *= 1;
-  $form->{creditlimit} = $form->parse_amount($myconfig, $form->{creditlimit});
+  $form->{creditlimit} = $form->parse_amount( $myconfig, $form->{creditlimit} );

 
   my $query;
 
 
   my $query;
 

-  if ($form->{id}) {
-    $query = qq|DELETE FROM vendortax
-                WHERE vendor_id = $form->{id}|;
-    $dbh->do($query) || $form->dberror($query);
+  if (!$form->{id}) {
+    $query = qq|SELECT nextval('id')|;
+    ($form->{id}) = selectrow_query($form, $dbh, $query);

 
 

-    $query = qq|DELETE FROM shipto
-                WHERE trans_id = $form->{id} AND module = 'CT'|;
-    $dbh->do($query) || $form->dberror($query);
-  } else {
-    my $uid = time;
-    $uid .= $form->{login};
-    my $uid = rand() . time;
-    $uid .= $form->{login};
-    $uid = substr($uid, 2, 75);
-    $query = qq|INSERT INTO vendor (name)
-                VALUES ('$uid')|;
-    $dbh->do($query) || $form->dberror($query);
-
-    $query = qq|SELECT v.id FROM vendor v
-                WHERE v.name = '$uid'|;
-    $sth = $dbh->prepare($query);
-    $sth->execute || $form->dberror($query);
-
-    ($form->{id}) = $sth->fetchrow_array;
-    $sth->finish;
-    if (!$form->{vendornumber}) {
-      $form->{vendornumber} =
-        $form->update_defaults($myconfig, "vendornumber");
-    }
+    $query = qq|INSERT INTO vendor (id, name) VALUES (?, '')|;
+    do_query($form, $dbh, $query, $form->{id});

 
 

+    my $vendornumber      = SL::TransNumber->new(type   => 'vendor',
+                                                 dbh    => $dbh,
+                                                 number => $form->{vendornumber},
+                                                 save   => 1);
+    $form->{vendornumber} = $vendornumber->create_unique unless $vendornumber->is_unique;

   }
 
   }
 

-##LINET
-  $query = qq|UPDATE vendor SET
-              vendornumber = '$form->{vendornumber}',
-             name = '$form->{name}',
-              greeting = '$form->{greeting}',
-              department_1 = '$form->{department_1}',
-              department_2 = '$form->{department_2}',
-             street = '$form->{street}',
-             zipcode = '$form->{zipcode}',
-             city = '$form->{city}',
-             country = '$form->{country}',
-             homepage = '$form->{homepage}',
-             contact = '$form->{contact}',
-             phone = '$form->{phone}',
-             fax = '$form->{fax}',
-             email = '$form->{email}',
-             cc = '$form->{cc}',
-             bcc = '$form->{bcc}',
-             notes = '$form->{notes}',
-             terms = $form->{terms},
-             discount = $form->{discount},
-             creditlimit = $form->{creditlimit},
-             taxincluded = '$form->{taxincluded}',
-             gifi_accno = '$form->{gifi_accno}',
-             business_id = $form->{business},
-             taxnumber = '$form->{taxnumber}',
-             sic_code = '$form->{sic}',
-              language = '$form->{language}',
-              account_number = '$form->{account_number}',
-              bank_code = '$form->{bank_code}',
-              bank = '$form->{bank}',
-              obsolete = '$form->{obsolete}',
-              ustid = '$form->{ustid}',
-              payment_id = '$form->{payment_id}',
-              taxzone_id = '$form->{taxzone_id}',
-              language_id = '$form->{language_id}',
-              username = '$form->{username}',
-              user_password = '$form->{user_password}',
-              v_customer_id = '$form->{v_customer_id}'
-             WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
-
-  if ($form->{cp_id}) {
-    $query = qq|UPDATE contacts SET
-               cp_greeting = '$form->{cp_greeting}',
-               cp_title = '$form->{cp_title}',
-               cp_givenname = '$form->{cp_givenname}',
-               cp_name = '$form->{cp_name}',
-               cp_email = '$form->{cp_email}',
-               cp_phone1 = '$form->{cp_phone1}',
-               cp_phone2 = '$form->{cp_phone2}'
-               WHERE cp_id = $form->{cp_id}|;
-  } elsif ($form->{cp_name} || $form->{cp_givenname}) {
+  $query =
+    qq|UPDATE vendor SET | .
+    qq|  vendornumber = ?, | .
+    qq|  name = ?, | .
+    qq|  greeting = ?, | .
+    qq|  department_1 = ?, | .
+    qq|  department_2 = ?, | .
+    qq|  street = ?, | .
+    qq|  zipcode = ?, | .
+    qq|  city = ?, | .
+    qq|  country = ?, | .
+    qq|  homepage = ?, | .
+    qq|  contact = ?, | .
+    qq|  phone = ?, | .
+    qq|  fax = ?, | .
+    qq|  email = ?, | .
+    qq|  cc = ?, | .
+    qq|  bcc = ?, | .
+    qq|  notes = ?, | .
+    qq|  terms = ?, | .
+    qq|  discount = ?, | .
+    qq|  creditlimit = ?, | .
+    qq|  business_id = ?, | .
+    qq|  taxnumber = ?, | .
+    qq|  language = ?, | .
+    qq|  account_number = ?, | .
+    qq|  bank_code = ?, | .
+    qq|  bank = ?, | .
+    qq|  iban = ?, | .
+    qq|  bic = ?, | .
+    qq|  obsolete = ?, | .
+    qq|  direct_debit = ?, | .
+    qq|  ustid = ?, | .
+    qq|  payment_id = ?, | .
+    qq|  taxzone_id = ?, | .
+    qq|  language_id = ?, | .
+    qq|  username = ?, | .
+    qq|  user_password = ?, | .
+    qq|  v_customer_id = ?, | .
+    qq|  curr = ? | .
+    qq|WHERE id = ?|;
+  my @values = (
+    $form->{vendornumber},
+    $form->{name},
+    $form->{greeting},
+    $form->{department_1},
+    $form->{department_2},
+    $form->{street},
+    $form->{zipcode},
+    $form->{city},
+    $form->{country},
+    $form->{homepage},
+    $form->{contact},
+    $form->{phone},
+    $form->{fax},
+    $form->{email},
+    $form->{cc},
+    $form->{bcc},
+    $form->{notes},
+    conv_i($form->{terms}),
+    $form->{discount},
+    $form->{creditlimit},
+    conv_i($form->{business}),
+    $form->{taxnumber},
+    $form->{language},
+    $form->{account_number},
+    $form->{bank_code},
+    $form->{bank},
+    $form->{iban},
+    $form->{bic},
+    $form->{obsolete} ? 't' : 'f',
+    $form->{direct_debit} ? 't' : 'f',
+    $form->{ustid},
+    conv_i($form->{payment_id}),
+    conv_i($form->{taxzone_id}, 0),
+    conv_i( $form->{language_id}),
+    $form->{username},
+    $form->{user_password},
+    $form->{v_customer_id},
+    substr($form->{currency}, 0, 3),
+    $form->{id}
+    );
+  do_query($form, $dbh, $query, @values);
+
+  $query = undef;
+  if ( $form->{cp_id} ) {
+    $query = qq|UPDATE contacts SET | .
+      qq|cp_title = ?,  | .
+      qq|cp_givenname = ?, | .
+      qq|cp_name = ?, | .
+      qq|cp_email = ?, | .
+      qq|cp_phone1 = ?, | .
+      qq|cp_phone2 = ?, | .
+      qq|cp_abteilung = ?, | .
+      qq|cp_fax = ?, | .
+      qq|cp_mobile1 = ?, | .
+      qq|cp_mobile2 = ?, | .
+      qq|cp_satphone = ?, | .
+      qq|cp_satfax = ?, | .
+      qq|cp_project = ?, | .
+      qq|cp_privatphone = ?, | .
+      qq|cp_privatemail = ?, | .
+      qq|cp_birthday = ?, | .
+      qq|cp_gender = ? | .
+      qq|WHERE cp_id = ?|;
+    @values = (
+      $form->{cp_title},
+      $form->{cp_givenname},
+      $form->{cp_name},
+      $form->{cp_email},
+      $form->{cp_phone1},
+      $form->{cp_phone2},
+      $form->{cp_abteilung},
+      $form->{cp_fax},
+      $form->{cp_mobile1},
+      $form->{cp_mobile2},
+      $form->{cp_satphone},
+      $form->{cp_satfax},
+      $form->{cp_project},
+      $form->{cp_privatphone},
+      $form->{cp_privatemail},
+      $form->{cp_birthday},
+      $form->{cp_gender} eq 'f' ? 'f' : 'm',
+      $form->{cp_id}
+      );
+  } elsif ( $form->{cp_name} || $form->{cp_givenname} ) {

     $query =
     $query =

-      qq|INSERT INTO contacts ( cp_cv_id, cp_greeting, cp_title, cp_givenname, cp_name, cp_email, cp_phone1, cp_phone2)
-                 VALUES ($form->{id}, '$form->{cp_greeting}','$form->{cp_title}','$form->{cp_givenname}','$form->{cp_name}','$form->{cp_email}','$form->{cp_phone1}','$form->{cp_phone2}')|;
-  }
-  $dbh->do($query) || $form->dberror($query);
-
-  # save taxes
-  foreach $item (split / /, $form->{taxaccounts}) {
-    if ($form->{"tax_$item"}) {
-      $query = qq|INSERT INTO vendortax (vendor_id, chart_id)
-                 VALUES ($form->{id}, (SELECT c.id
-                                       FROM chart c
-                                       WHERE c.accno = '$item'))|;
-      $dbh->do($query) || $form->dberror($query);
-    }
+      qq|INSERT INTO contacts ( cp_cv_id, cp_title, cp_givenname,  | .
+      qq|  cp_name, cp_email, cp_phone1, cp_phone2, cp_abteilung, cp_fax, cp_mobile1, | .
+      qq|  cp_mobile2, cp_satphone, cp_satfax, cp_project, cp_privatphone, cp_privatemail, | .
+      qq|  cp_birthday, cp_gender) | .
+      qq|VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)|;
+    @values = (
+      $form->{id},
+      $form->{cp_title},
+      $form->{cp_givenname},
+      $form->{cp_name},
+      $form->{cp_email},
+      $form->{cp_phone1},
+      $form->{cp_phone2},
+      $form->{cp_abteilung},
+      $form->{cp_fax},
+      $form->{cp_mobile1},
+      $form->{cp_mobile2},
+      $form->{cp_satphone},
+      $form->{cp_satfax},
+      $form->{cp_project},
+      $form->{cp_privatphone},
+      $form->{cp_privatemail},
+      $form->{cp_birthday},
+      $form->{cp_gender}
+      );

   }
   }

+  do_query($form, $dbh, $query, @values) if ($query);

 
   # add shipto
 
   # add shipto

-  $form->add_shipto($dbh, $form->{id});
+  $form->add_shipto( $dbh, $form->{id}, "CT" );

 
 

-  $rc = $dbh->disconnect;
+  $self->_save_note('dbh' => $dbh);
+  $self->_delete_selected_notes('dbh' => $dbh);
+
+  CVar->save_custom_variables('dbh'       => $dbh,
+                              'module'    => 'CT',
+                              'trans_id'  => $form->{id},
+                              'variables' => $form,
+                              'always_valid' => 1);
+  if ($form->{cp_id}) {
+    CVar->save_custom_variables('dbh'       => $dbh,
+                                'module'    => 'Contacts',
+                                'trans_id'  => $form->{cp_id},
+                                'variables' => $form,
+                                'name_prefix'  => 'cp',
+                                'always_valid' => 1);
+  }
+
+  my $rc = $dbh->commit();

 
   $main::lxdebug->leave_sub();
   return $rc;
 
   $main::lxdebug->leave_sub();
   return $rc;


@@ -651,15 +628,14 @@ sub save_vendor {
 sub delete {
   $main::lxdebug->enter_sub();
 
 sub delete {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
-
+  my ( $self, $myconfig, $form ) = @_;

   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
   # delete vendor
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
   # delete vendor

-  my $query = qq|DELETE FROM $form->{db}
-                WHERE id = $form->{id}|;
-  $dbh->do($query) || $form->dberror($query);
+  my $cv = $form->{db} eq "customer" ? "customer" : "vendor";
+  my $query = qq|DELETE FROM $cv WHERE id = ?|;
+  do_query($form, $dbh, $query, $form->{id});

 
   $dbh->disconnect;
 
 
   $dbh->disconnect;
 


@@ -669,123 +645,182 @@ sub delete {
 sub search {
   $main::lxdebug->enter_sub();
 
 sub search {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
+  my ( $self, $myconfig, $form ) = @_;

 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 
 
   # connect to database
   my $dbh = $form->dbconnect($myconfig);
 

+  my $cv = $form->{db} eq "customer" ? "customer" : "vendor";
+

   my $where = "1 = 1";
   my $where = "1 = 1";

-  $form->{sort} = "name" unless ($form->{sort});
+  my @values;
+
+  my %allowed_sort_columns =
+    map { $_, 1 } qw(
+      id customernumber vendornumber name contact phone fax email street
+      taxnumber business invnumber ordnumber quonumber zipcode city
+    );
+  my $sortorder    = $form->{sort} && $allowed_sort_columns{$form->{sort}} ? $form->{sort} : "name";
+  $form->{sort} = $sortorder;
+  my $sortdir   = !defined $form->{sortdir} ? 'ASC' : $form->{sortdir} ? 'ASC' : 'DESC';
+
+  if ($sortorder !~ /(business|id)/ && 1 >= scalar grep { $form->{$_} } qw(l_ordnumber l_quonumber l_invnumber )) {
+    $sortorder  = "lower($sortorder) ${sortdir}";
+  } else {
+    $sortorder .= " ${sortdir}";
+  }

 
 

-  if ($form->{"$form->{db}number"}) {
-    my $companynumber = $form->like(lc $form->{"$form->{db}number"});
-    $where .= " AND lower(ct.$form->{db}number) LIKE '$companynumber'";
+  if ($form->{"${cv}number"}) {
+    $where .= " AND ct.${cv}number ILIKE ?";
+    push(@values, '%' . $form->{"${cv}number"} . '%');

   }
   }

-  if ($form->{name}) {
-    my $name = $form->like(lc $form->{name});
-    $where .= " AND lower(ct.name) LIKE '$name'";
+
+  foreach my $key (qw(name contact email)) {
+    if ($form->{$key}) {
+      $where .= " AND ct.$key ILIKE ?";
+      push(@values, '%' . $form->{$key} . '%');
+    }

   }
   }

-  if ($form->{contact}) {
-    my $contact = $form->like(lc $form->{contact});
-    $where .= " AND lower(ct.contact) LIKE '$contact'";
+
+  if ($form->{cp_name}) {
+    $where .= " AND ct.id IN (SELECT cp_cv_id FROM contacts WHERE lower(cp_name) LIKE lower(?))";
+    push @values, '%' . $form->{cp_name} . '%';

   }
   }

-  if ($form->{email}) {
-    my $email = $form->like(lc $form->{email});
-    $where .= " AND lower(ct.email) LIKE '$email'";
+
+  if ($form->{addr_city}) {
+    $where .= " AND ((lower(ct.city) LIKE lower(?))
+                     OR
+                     (ct.id IN (
+                        SELECT trans_id
+                        FROM shipto
+                        WHERE (module = 'CT')
+                          AND (lower(shiptocity) LIKE lower(?))
+                      ))
+                     )";
+    push @values, ('%' . $form->{addr_city} . '%') x 2;

   }
 
   }
 

-  if ($form->{status} eq 'orphaned') {
-    $where .= qq| AND ct.id NOT IN (SELECT o.$form->{db}_id
-                                    FROM oe o, $form->{db} cv
-                                   WHERE cv.id = o.$form->{db}_id)|;
-    if ($form->{db} eq 'customer') {
-      $where .= qq| AND ct.id NOT IN (SELECT a.customer_id
-                                      FROM ar a, customer cv
-                                     WHERE cv.id = a.customer_id)|;
+  if ( $form->{status} eq 'orphaned' ) {
+    $where .=
+      qq| AND ct.id NOT IN | .
+      qq|   (SELECT o.${cv}_id FROM oe o, $cv cv WHERE cv.id = o.${cv}_id)|;
+    if ($cv eq 'customer') {
+      $where .=
+        qq| AND ct.id NOT IN | .
+        qq| (SELECT a.customer_id FROM ar a, customer cv | .
+        qq|  WHERE cv.id = a.customer_id)|;

     }
     }

-    if ($form->{db} eq 'vendor') {
-      $where .= qq| AND ct.id NOT IN (SELECT a.vendor_id
-                                      FROM ap a, vendor cv
-                                     WHERE cv.id = a.vendor_id)|;
+    if ($cv eq 'vendor') {
+      $where .=
+        qq| AND ct.id NOT IN | .
+        qq| (SELECT a.vendor_id FROM ap a, vendor cv | .
+        qq|  WHERE cv.id = a.vendor_id)|;

     }
     $form->{l_invnumber} = $form->{l_ordnumber} = $form->{l_quonumber} = "";
   }
 
     }
     $form->{l_invnumber} = $form->{l_ordnumber} = $form->{l_quonumber} = "";
   }
 

-  my $query = qq|SELECT ct.*, b.description AS business
-                 FROM $form->{db} ct
-             LEFT JOIN business b ON (ct.business_id = b.id)
-                 WHERE $where|;
+  if ($form->{obsolete} eq "Y") {
+    $where .= qq| AND obsolete|;
+  } elsif ($form->{obsolete} eq "N") {
+    $where .= qq| AND NOT obsolete|;
+  }

 
 

+  if ($form->{business_id}) {
+    $where .= qq| AND (business_id = ?)|;
+    push(@values, conv_i($form->{business_id}));
+  }
+
+  # Nur Kunden finden, bei denen ich selber der Verkäufer bin
+  # Gilt nicht für Lieferanten
+  if ($cv eq 'customer' &&   !$main::auth->assert('customer_vendor_all_edit', 1)) {
+    $where .= qq| AND ct.salesman_id = (select id from employee where login= ?)|;
+    push(@values, $form->{login});
+  }
+
+  my ($cvar_where, @cvar_values) = CVar->build_filter_query('module'         => 'CT',
+                                                            'trans_id_field' => 'ct.id',
+                                                            'filter'         => $form);
+
+  if ($cvar_where) {
+    $where .= qq| AND ($cvar_where)|;
+    push @values, @cvar_values;
+  }
+
+  if ($form->{addr_street}) {
+    $where .= qq| AND (street ILIKE ?)|;
+    push @values, '%' . $form->{addr_street} . '%';
+  }
+
+  if ($form->{addr_zipcode}) {
+    $where .= qq| AND (zipcode ILIKE ?)|;
+    push @values, $form->{addr_zipcode} . '%';
+  }
+
+  my $query =
+    qq|SELECT ct.*, b.description AS business | .
+    qq|FROM $cv ct | .
+    qq|LEFT JOIN business b ON (ct.business_id = b.id) | .
+    qq|WHERE $where|;
+
+  my @saved_values = @values;

   # redo for invoices, orders and quotations
   if ($form->{l_invnumber} || $form->{l_ordnumber} || $form->{l_quonumber}) {
   # redo for invoices, orders and quotations
   if ($form->{l_invnumber} || $form->{l_ordnumber} || $form->{l_quonumber}) {

-

     my ($ar, $union, $module);
     $query = "";
 
     if ($form->{l_invnumber}) {
     my ($ar, $union, $module);
     $query = "";
 
     if ($form->{l_invnumber}) {

-      $ar     = ($form->{db} eq 'customer') ? 'ar' : 'ap';
-      $module = ($ar         eq 'ar')       ? 'is' : 'ir';
-
-      $query = qq|SELECT ct.*, b.description AS business,
-                  a.invnumber, a.ordnumber, a.quonumber, a.id AS invid,
-                 '$module' AS module, 'invoice' AS formtype,
-                 (a.amount = a.paid) AS closed
-                 FROM $form->{db} ct
-               JOIN $ar a ON (a.$form->{db}_id = ct.id)
-               LEFT JOIN business b ON (ct.business_id = b.id)
-                 WHERE $where
-                 AND a.invoice = '1'|;
-
-      $union = qq|
-              UNION|;
-
+      my $ar = $cv eq 'customer' ? 'ar' : 'ap';
+      my $module = $ar eq 'ar' ? 'is' : 'ir';
+
+      $query =
+        qq|SELECT ct.*, b.description AS business, | .
+        qq|  a.invnumber, a.ordnumber, a.quonumber, a.id AS invid, | .
+        qq|  '$module' AS module, 'invoice' AS formtype, | .
+        qq|  (a.amount = a.paid) AS closed | .
+        qq|FROM $cv ct | .
+        qq|JOIN $ar a ON (a.${cv}_id = ct.id) | .
+        qq|LEFT JOIN business b ON (ct.business_id = b.id) | .
+        qq|WHERE $where AND (a.invoice = '1')|;
+
+      $union = qq|UNION|;

     }
 
     }
 

-    if ($form->{l_ordnumber}) {
-      $query .= qq|$union
-                  SELECT ct.*, b.description AS business,
-                 ' ' AS invnumber, o.ordnumber, o.quonumber, o.id AS invid,
-                 'oe' AS module, 'order' AS formtype,
-                 o.closed
-                 FROM $form->{db} ct
-               JOIN oe o ON (o.$form->{db}_id = ct.id)
-               LEFT JOIN business b ON (ct.business_id = b.id)
-                 WHERE $where
-                 AND o.quotation = '0'|;
-
-      $union = qq|
-              UNION|;
+    if ( $form->{l_ordnumber} ) {
+      if ($union eq "UNION") {
+        push(@values, @saved_values);
+      }
+      $query .=
+        qq| $union | .
+        qq|SELECT ct.*, b.description AS business,| .
+        qq|  ' ' AS invnumber, o.ordnumber, o.quonumber, o.id AS invid, | .
+        qq|  'oe' AS module, 'order' AS formtype, o.closed | .
+        qq|FROM $cv ct | .
+        qq|JOIN oe o ON (o.${cv}_id = ct.id) | .
+        qq|LEFT JOIN business b ON (ct.business_id = b.id) | .
+        qq|WHERE $where AND (o.quotation = '0')|;
+
+      $union = qq|UNION|;

     }
 
     }
 

-    if ($form->{l_quonumber}) {
-      $query .= qq|$union
-                  SELECT ct.*, b.description AS business,
-                 ' ' AS invnumber, o.ordnumber, o.quonumber, o.id AS invid,
-                 'oe' AS module, 'quotation' AS formtype,
-                 o.closed
-                 FROM $form->{db} ct
-               JOIN oe o ON (o.$form->{db}_id = ct.id)
-               LEFT JOIN business b ON (ct.business_id = b.id)
-                 WHERE $where
-                 AND o.quotation = '1'|;
-
+    if ( $form->{l_quonumber} ) {
+      if ($union eq "UNION") {
+        push(@values, @saved_values);
+      }
+      $query .=
+        qq| $union | .
+        qq|SELECT ct.*, b.description AS business, | .
+        qq|  ' ' AS invnumber, o.ordnumber, o.quonumber, o.id AS invid, | .
+        qq|  'oe' AS module, 'quotation' AS formtype, o.closed | .
+        qq|FROM $cv ct | .
+        qq|JOIN oe o ON (o.${cv}_id = ct.id) | .
+        qq|LEFT JOIN business b ON (ct.business_id = b.id) | .
+        qq|WHERE $where AND (o.quotation = '1')|;

     }
   }
 
     }
   }
 

-  $query .= qq|
-                ORDER BY $form->{sort}|;
+  $query .= qq| ORDER BY $sortorder|;

 
 

-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
-##LINET
-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    $ref->{address} = "";
-    map { $ref->{address} .= "$ref->{$_} "; } qw(street zipcode city country);
-    push @{ $form->{CT} }, $ref;
-  }
-##/LINET
-  $sth->finish;
-  $dbh->disconnect;
+  $form->{CT} = selectall_hashref_query($form, $dbh, $query, @values);

 
   $main::lxdebug->leave_sub();
 }
 
   $main::lxdebug->leave_sub();
 }


@@ -793,40 +828,52 @@ sub search {
 sub get_contact {
   $main::lxdebug->enter_sub();
 
 sub get_contact {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
-  my $dbh   = $form->dbconnect($myconfig);
-  my $query = qq|SELECT c.*
-                 FROM contacts c
-                WHERE c.cp_id = $form->{cp_id}  order by c.cp_id limit 1|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my ( $self, $myconfig, $form ) = @_;
+
+  die 'Missing argument: cp_id' unless $::form->{cp_id};

 
 

-  my $ref = $sth->fetchrow_hashref(NAME_lc);
+  my $dbh   = $form->dbconnect($myconfig);
+  my $query =
+    qq|SELECT * FROM contacts c | .
+    qq|WHERE cp_id = ? ORDER BY cp_id limit 1|;
+  my $sth = prepare_execute_query($form, $dbh, $query, $form->{cp_id});
+  my $ref = $sth->fetchrow_hashref("NAME_lc");

 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 
 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 

+  $query = qq|SELECT COUNT(cp_id) AS used FROM (
+    SELECT cp_id FROM oe UNION
+    SELECT cp_id FROM ar UNION
+    SELECT cp_id FROM ap UNION
+    SELECT cp_id FROM delivery_orders
+  ) AS cpid WHERE cp_id = ? OR ? = 0|;
+  ($form->{cp_used}) = selectfirst_array_query($form, $dbh, $query, ($form->{cp_id})x2);
+

   $sth->finish;
   $dbh->disconnect;
 
   $main::lxdebug->leave_sub();
 }
 
   $sth->finish;
   $dbh->disconnect;
 
   $main::lxdebug->leave_sub();
 }
 

-

 sub get_shipto {
   $main::lxdebug->enter_sub();
 
 sub get_shipto {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
+  my ( $self, $myconfig, $form ) = @_;

   my $dbh   = $form->dbconnect($myconfig);
   my $dbh   = $form->dbconnect($myconfig);

-  my $query = qq|SELECT s.*
-                 FROM shipto s
-                WHERE s.id = $form->{shipto_id}  order by s.id limit 1|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  my $query = qq|SELECT * FROM shipto WHERE shipto_id = ?|;
+  my $sth = prepare_execute_query($form, $dbh, $query, $form->{shipto_id});

 
 

-  my $ref = $sth->fetchrow_hashref(NAME_lc);
+  my $ref = $sth->fetchrow_hashref("NAME_lc");

 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 
 
   map { $form->{$_} = $ref->{$_} } keys %$ref;
 

+  $query = qq|SELECT COUNT(shipto_id) AS used FROM (
+    SELECT shipto_id FROM oe UNION
+    SELECT shipto_id FROM ar UNION
+    SELECT shipto_id FROM delivery_orders
+  ) AS stid WHERE shipto_id = ? OR ? = 0|;
+  ($form->{shiptoused}) = selectfirst_array_query($form, $dbh, $query, ($form->{shipto_id})x2);
+

   $sth->finish;
   $dbh->disconnect;
 
   $sth->finish;
   $dbh->disconnect;
 


@@ -836,62 +883,364 @@ sub get_shipto {
 sub get_delivery {
   $main::lxdebug->enter_sub();
 
 sub get_delivery {
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
-  my $dbh   = $form->dbconnect($myconfig);
-  $where = " WHERE 1=1 ";
-  if ($form->{shipto_id}) {
-    $where .= "AND ar.shipto_id=$form->{shipto_id} ";
+  my ( $self, $myconfig, $form ) = @_;
+  my $dbh = $form->dbconnect($myconfig);
+
+  my $arap = $form->{db} eq "vendor" ? "ap" : "ar";
+  my $db = $form->{db} eq "customer" ? "customer" : "vendor";
+  my $qty_sign = $form->{db} eq 'vendor' ? ' * -1 AS qty' : '';
+
+  my $where = " WHERE 1=1 ";
+  my @values;
+
+  if ($form->{shipto_id} && ($arap eq "ar")) {
+    $where .= "AND ${arap}.shipto_id = ?";
+    push(@values, $form->{shipto_id});
+  } else {
+    $where .= "AND ${arap}.${db}_id = ?";
+    push(@values, $form->{id});

   }
   }

+

   if ($form->{from}) {
   if ($form->{from}) {

-    $where .= "AND ar.transdate >= '$form->{from}' ";
+    $where .= "AND ${arap}.transdate >= ?";
+    push(@values, conv_date($form->{from}));

   }
   if ($form->{to}) {
   }
   if ($form->{to}) {

-    $where .= "AND ar.transdate <= '$form->{to}' ";
+    $where .= "AND ${arap}.transdate <= ?";
+    push(@values, conv_date($form->{to}));

   }
   }

+  my $query =
+    qq|SELECT s.shiptoname, i.qty $qty_sign, | .
+    qq|  ${arap}.id, ${arap}.transdate, ${arap}.invnumber, ${arap}.ordnumber, | .
+    qq|  i.description, i.unit, i.sellprice, | .
+    qq|  oe.id AS oe_id, invoice | .
+    qq|FROM $arap | .
+    qq|LEFT JOIN shipto s ON | .
+    ($arap eq "ar"
+     ? qq|(ar.shipto_id = s.shipto_id) |
+     : qq|(ap.id = s.trans_id) |) .
+    qq|LEFT JOIN invoice i ON (${arap}.id = i.trans_id) | .
+    qq|LEFT join parts p ON (p.id = i.parts_id) | .
+    qq|LEFT JOIN oe ON (oe.ordnumber = ${arap}.ordnumber AND NOT ${arap}.ordnumber = '') | .
+    $where .
+    qq|ORDER BY ${arap}.transdate DESC LIMIT 15|;
+
+  $form->{DELIVERY} = selectall_hashref_query($form, $dbh, $query, @values);
+
+  $dbh->disconnect;

 
 

-  my $query = qq|select shiptoname, adr_code, ar.transdate, ar.invnumber, ar.ordnumber, invoice.description, qty, invoice.unit FROM ar LEFT join shipto ON (ar.shipto_id=shipto.id) LEFT join invoice on (ar.id=invoice.trans_id) LEFT join parts ON (parts.id=invoice.parts_id) LEFT join adr ON (parts.adr_id=adr.id) $where ORDER BY ar.transdate DESC LIMIT 15|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  $main::lxdebug->leave_sub();
+}
+
+sub _save_note {
+  $main::lxdebug->enter_sub();
+
+  my $self   = shift;
+  my %params = @_;

 
 

+  my $form   = $main::form;

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{DELIVERY} }, $ref;
+  Common::check_params(\%params, 'dbh');
+
+  if (!$form->{NOTE_subject}) {
+    $main::lxdebug->leave_sub();
+    return;
+  }
+
+  my $dbh = $params{dbh};
+
+  my %follow_up;
+  my %note = (
+    'id'           => $form->{NOTE_id},
+    'subject'      => $form->{NOTE_subject},
+    'body'         => $form->{NOTE_body},
+    'trans_id'     => $form->{id},
+    'trans_module' => 'ct',
+  );
+
+  $note{id} = Notes->save(%note);
+
+  if ($form->{FU_date}) {
+    %follow_up = (
+      'id'               => $form->{FU_id},
+      'note_id'          => $note{id},
+      'follow_up_date'   => $form->{FU_date},
+      'created_for_user' => $form->{FU_created_for_user},
+      'done'             => $form->{FU_done} ? 1 : 0,
+      'subject'          => $form->{NOTE_subject},
+      'body'             => $form->{NOTE_body},
+      'LINKS'            => [
+        {
+          'trans_id'     => $form->{id},
+          'trans_type'   => $form->{db} eq 'customer' ? 'customer' : 'vendor',
+          'trans_info'   => $form->{name},
+        },
+      ],
+    );
+
+    $follow_up{id} = FU->save(%follow_up);
+
+  } elsif ($form->{FU_id}) {
+    do_query($form, $dbh, qq|DELETE FROM follow_up_links WHERE follow_up_id = ?|, conv_i($form->{FU_id}));
+    do_query($form, $dbh, qq|DELETE FROM follow_ups      WHERE id = ?|,           conv_i($form->{FU_id}));

   }
   }

-  $sth->finish;
-  $dbh->disconnect;
+
+  delete @{$form}{grep { /^NOTE_|^FU_/ } keys %{ $form }};

 
   $main::lxdebug->leave_sub();
 }
 
 
   $main::lxdebug->leave_sub();
 }
 

-sub adr {
+sub _delete_selected_notes {

   $main::lxdebug->enter_sub();
 
   $main::lxdebug->enter_sub();
 

-  my ($self, $myconfig, $form) = @_;
-  my $dbh   = $form->dbconnect($myconfig);
-  $where = " WHERE 1=1 ";
-  if ($form->{from}) {
-    $where .= "AND ar.transdate >= '$form->{from}' ";
+  my $self   = shift;
+  my %params = @_;
+
+  Common::check_params(\%params, 'dbh');
+
+  my $form = $main::form;
+  my $dbh  = $params{dbh};
+
+  foreach my $i (1 .. $form->{NOTES_rowcount}) {
+    next unless ($form->{"NOTE_delete_$i"} && $form->{"NOTE_id_$i"});
+
+    Notes->delete('dbh' => $params{dbh},
+                  'id'  => $form->{"NOTE_id_$i"});

   }
   }

-  if ($form->{to}) {
-    $where .= "AND ar.transdate <= '$form->{to}' ";
+
+  $main::lxdebug->leave_sub();
+}
+
+# TODO: remove in 2.7.0 stable
+sub delete_shipto {
+  $main::lxdebug->enter_sub();
+
+  my $self      = shift;
+  my $shipto_id = shift;
+
+  my $form      = $main::form;
+  my %myconfig  = %main::myconfig;
+  my $dbh       = $form->get_standard_dbh(\%myconfig);
+
+  do_query($form, $dbh, qq|UPDATE shipto SET trans_id = NULL WHERE shipto_id = ?|, $shipto_id);
+
+  $dbh->commit();
+
+  $main::lxdebug->leave_sub();
+}
+
+# TODO: remove in 2.7.0 stable
+sub delete_contact {
+  $main::lxdebug->enter_sub();
+
+  my $self      = shift;
+  my $cp_id     = shift;
+
+  my $form      = $main::form;
+  my %myconfig  = %main::myconfig;
+  my $dbh       = $form->get_standard_dbh(\%myconfig);
+
+  do_query($form, $dbh, qq|UPDATE contacts SET cp_cv_id = NULL WHERE cp_id = ?|, $cp_id);
+
+  $dbh->commit();
+
+  $main::lxdebug->leave_sub();
+}
+
+sub get_bank_info {
+  $main::lxdebug->enter_sub();
+
+  my $self     = shift;
+  my %params   = @_;
+
+  Common::check_params(\%params, qw(vc id));
+
+  my $myconfig = \%main::myconfig;
+  my $form     = $main::form;
+
+  my $dbh      = $params{dbh} || $form->get_standard_dbh($myconfig);
+
+  my $table        = $params{vc} eq 'customer' ? 'customer' : 'vendor';
+  my @ids          = ref $params{id} eq 'ARRAY' ? @{ $params{id} } : ($params{id});
+  my $placeholders = join ", ", ('?') x scalar @ids;
+  my $query        = qq|SELECT id, name, account_number, bank, bank_code, iban, bic
+                        FROM ${table}
+                        WHERE id IN (${placeholders})|;
+
+  my $result       = selectall_hashref_query($form, $dbh, $query, map { conv_i($_) } @ids);
+
+  if (ref $params{id} eq 'ARRAY') {
+    $result = { map { $_->{id} => $_ } @{ $result } };
+  } else {
+    $result = $result->[0] || { 'id' => $params{id} };

   }
   }

-  if ($form->{year}) {
-    $where = " WHERE ar.transdate >= '$form->{year}-01-01' AND ar.transdate <= '$form->{year}-12-31' ";
+
+  $main::lxdebug->leave_sub();
+
+  return $result;
+}
+
+sub parse_excel_file {
+  $main::lxdebug->enter_sub();
+
+  my ($self, $myconfig, $form) = @_;
+  my $locale = $main::locale;
+
+  $form->{formname}   = 'sales_quotation';
+  $form->{type}   = 'sales_quotation';
+  $form->{format} = 'excel';
+  $form->{media}  = 'screen';
+  $form->{quonumber} = 1;
+
+
+  # $form->{"notes"} will be overridden by the customer's/vendor's "notes" field. So save it here.
+  $form->{ $form->{"formname"} . "notes" } = $form->{"notes"};
+
+  my $inv                  = "quo";
+  my $due                  = "req";
+  $form->{"${inv}date"} = $form->{transdate};
+  $form->{label}        = $locale->text('Quotation');
+  my $numberfld            = "sqnumber";
+  my $order                = 1;
+
+  # assign number
+  $form->{what_done} = $form->{formname};
+
+  map({ delete($form->{$_}); } grep(/^cp_/, keys(%{ $form })));
+
+  my $output_dateformat = $myconfig->{"dateformat"};
+  my $output_numberformat = $myconfig->{"numberformat"};
+  my $output_longdates = 1;
+
+  # map login user variables
+  map { $form->{"login_$_"} = $myconfig->{$_} } ("name", "email", "fax", "tel", "company");
+
+  # format item dates
+  for my $field (qw(transdate_oe deliverydate_oe)) {
+    map {
+      $form->{$field}[$_] = $locale->date($myconfig, $form->{$field}[$_], 1);
+    } 0 .. $#{ $form->{$field} };
+  }
+
+  if ($form->{shipto_id}) {
+    $form->get_shipto($myconfig);

   }
 
   }
 

-  my $query = qq|select adr_code, adr_description, sum(base_qty), parts.unit from ar LEFT join invoice on (ar.id=invoice.trans_id) LEFT join parts ON (invoice.parts_id=parts.id) LEFT join adr ON (adr.id=parts.adr_id) $where GROUP BY adr_code,adr_description,parts.unit|;
-  my $sth = $dbh->prepare($query);
-  $sth->execute || $form->dberror($query);
+  $form->{notes} =~ s/^\s+//g;

 
 

+  $form->{templates} = $myconfig->{templates};

 
 

-  while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
-    push @{ $form->{ADR} }, $ref;
+  delete $form->{printer_command};
+
+  $form->get_employee_info($myconfig);
+
+  my ($cvar_date_fields, $cvar_number_fields) = CVar->get_field_format_list('module' => 'CT', 'prefix' => 'vc_');
+
+  if (scalar @{ $cvar_date_fields }) {
+    format_dates($output_dateformat, $output_longdates, @{ $cvar_date_fields });

   }
   }

-  $sth->finish;
-  $dbh->disconnect;
+
+  while (my ($precision, $field_list) = each %{ $cvar_number_fields }) {
+    reformat_numbers($output_numberformat, $precision, @{ $field_list });
+  }
+
+  $form->{excel} = 1;
+  my $extension            = 'xls';
+
+  $form->{IN}         = "$form->{formname}.${extension}";
+
+  delete $form->{OUT};
+
+  $form->parse_template($myconfig);

 
   $main::lxdebug->leave_sub();
 }
 
 
   $main::lxdebug->leave_sub();
 }
 

-1;
+sub search_contacts {
+  $::lxdebug->enter_sub;
+
+  my $self      = shift;
+  my %params    = @_;
+
+  my $dbh       = $params{dbh} || $::form->get_standard_dbh;
+  my $vc        = $params{db} eq 'customer' ? 'customer' : 'vendor';
+
+  my %sortspecs = (
+    'cp_name'   => 'cp_name, cp_givenname',
+    'vcname'    => 'vcname, cp_name, cp_givenname',
+    'vcnumber'  => 'vcnumber, cp_name, cp_givenname',
+    );
+
+  my %sortcols  = map { $_ => 1 } qw(cp_name cp_givenname cp_phone1 cp_phone2 cp_mobile1 cp_email cp_street cp_zipcode cp_city vcname vcnumber);
+
+  my $order_by  = $sortcols{$::form->{sort}} ? $::form->{sort} : 'cp_name';
+  $::form->{sort} = $order_by;
+  $order_by     = $sortspecs{$order_by} if ($sortspecs{$order_by});
+
+  my $sortdir   = $::form->{sortdir} ? 'ASC' : 'DESC';
+  $order_by     =~ s/,/ ${sortdir},/g;
+  $order_by    .= " $sortdir";
+
+  my @where_tokens = ();
+  my @values;
+
+  if ($params{search_term}) {
+    my @tokens;
+    push @tokens,
+      'cp.cp_name      ILIKE ?',
+      'cp.cp_givenname ILIKE ?',
+      'cp.cp_email     ILIKE ?';
+    push @values, ('%' . $params{search_term} . '%') x 3;
+
+    if (($params{search_term} =~ m/\d/) && ($params{search_term} !~ m/[^\d \(\)+\-]/)) {
+      my $number =  $params{search_term};
+      $number    =~ s/[^\d]//g;
+      $number    =  join '[ /\(\)+\-]*', split(m//, $number);
+
+      push @tokens, map { "($_ ~ '$number')" } qw(cp_phone1 cp_phone2 cp_mobile1 cp_mobile2);
+    }
+
+    push @where_tokens, map { "($_)" } join ' OR ', @tokens;
+  }
+
+  my ($cvar_where, @cvar_values) = CVar->build_filter_query('module'         => 'Contacts',
+                                                            'trans_id_field' => 'cp.cp_id',
+                                                            'filter'         => $params{filter});
+
+  if ($cvar_where) {
+    push @where_tokens, $cvar_where;
+    push @values, @cvar_values;
+  }
+
+  if (my $filter = $params{filter}) {
+    for (qw(name title givenname email project abteilung)) {
+      next unless $filter->{"cp_$_"};
+      add_token(\@where_tokens, \@values, col =>  "cp.cp_$_", val => $filter->{"cp_$_"}, method => 'ILIKE', esc => 'substr');
+    }
+
+    push @where_tokens, 'cp.cp_cv_id IS NOT NULL' if $filter->{status} eq 'active';
+    push @where_tokens, 'cp.cp_cv_id IS NULL'     if $filter->{status} eq 'orphaned';
+  }
+
+  my $where = @where_tokens ? 'WHERE ' . join ' AND ', @where_tokens : '';
+
+  my $query     = qq|SELECT cp.*,
+                       COALESCE(c.id,             v.id)           AS vcid,
+                       COALESCE(c.name,           v.name)         AS vcname,
+                       COALESCE(c.customernumber, v.vendornumber) AS vcnumber,
+                       CASE WHEN c.name IS NULL THEN 'vendor' ELSE 'customer' END AS db
+                     FROM contacts cp
+                     LEFT JOIN customer c ON (cp.cp_cv_id = c.id)
+                     LEFT JOIN vendor v   ON (cp.cp_cv_id = v.id)
+                     $where
+                     ORDER BY $order_by|;
+
+  my $contacts  = selectall_hashref_query($::form, $dbh, $query, @values);
+
+  $::lxdebug->leave_sub;

 
 

+  return @{ $contacts };
+}
+
+
+1;