Enhanced PHP File Manager

⬆️ Go Up (..)

📊 Server Information

Server:

LiteSpeed

System:

Linux 5.14.0-503.34.1.el9_5.x86_64

PHP Version:

8.2.30

User:

u329947844

Directory:

/home/u329947844/domains/ecommer.in/public_html/billing/pawn

Free Space:

10.27 TB

🔧 Quick Actions

✏️ Editing: save_common.php

<?php
header('Content-Type: application/json');
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: POST');
header('Access-Control-Allow-Headers: Content-Type');

require_once('includes/db.php');

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    exit(0);
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Method not allowed']);
    exit;
}

$input = json_decode(file_get_contents('php://input'), true);

if (!$input) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Invalid JSON input']);
    exit;
}

// Validate required fields
if (empty($input['customer_name'])) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Customer name is required', 'error_code' => 'MISSING_CUSTOMER']);
    exit;
}

if (empty($input['business_id'])) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'Business selection is required', 'error_code' => 'MISSING_BUSINESS']);
    exit;
}

if (empty($input['items']) || !is_array($input['items'])) {
    http_response_code(400);
    echo json_encode(['success' => false, 'message' => 'No items in cart', 'error_code' => 'EMPTY_CART']);
    exit;
}

// Start transaction
mysqli_begin_transaction($conn);

try {
    // 1. Check if customer exists, create if not
    $customer_name = mysqli_real_escape_string($conn, $input['customer_name']);
    $customer_phone = !empty($input['customer_phone']) ? mysqli_real_escape_string($conn, $input['customer_phone']) : '';
    
    $customer_check_sql = "SELECT id FROM customers WHERE name = '{$customer_name}'";
    if (!empty($customer_phone)) {
        $customer_check_sql .= " AND phone = '{$customer_phone}'";
    }
    $customer_check_sql .= " LIMIT 1";
    
    $customer_result = mysqli_query($conn, $customer_check_sql);
    
    if (mysqli_num_rows($customer_result) > 0) {
        $customer_row = mysqli_fetch_assoc($customer_result);
        $customer_id = $customer_row['id'];
    } else {
        // Create new customer
        $customer_sql = "INSERT INTO customers (name, phone, created_at) 
                         VALUES ('{$customer_name}', '{$customer_phone}', NOW())";
        if (!mysqli_query($conn, $customer_sql)) {
            throw new Exception('Failed to create customer: ' . mysqli_error($conn));
        }
        $customer_id = mysqli_insert_id($conn);
    }
    
    // 2. Generate invoice number
    $service_type = $input['service_type'] ?? 'product';
    $invoice_prefix = $service_type === 'service' ? 'SRV' : 'INV';
    $invoice_number = $invoice_prefix . date('YmdHis') . rand(100, 999);
    
    // 3. Get business details
    $business_id = intval($input['business_id']);
    $business_sql = "SELECT business_name, gst_num FROM gst_details WHERE id = {$business_id}";
    $business_result = mysqli_query($conn, $business_sql);
    
    if (!$business_result || mysqli_num_rows($business_result) === 0) {
        throw new Exception('Business not found');
    }
    
    $business_row = mysqli_fetch_assoc($business_result);
    $business_name = mysqli_real_escape_string($conn, $business_row['business_name']);
    $gst_number = mysqli_real_escape_string($conn, $business_row['gst_num'] ?? '');
    
    // 4. Create invoice
    $subtotal = floatval($input['subtotal'] ?? 0);
    $total_item_discount = floatval($input['total_item_discount'] ?? 0);
    $discount = floatval($input['discount'] ?? 0);
    $discount_type = mysqli_real_escape_string($conn, $input['discount_type'] ?? 'percent');
    $total = floatval($input['total'] ?? 0);
    $cash_received = floatval($input['cash_received'] ?? 0);
    $change_given = floatval($input['change_given'] ?? 0);
    $payment_method = mysqli_real_escape_string($conn, $input['payment_method'] ?? 'cash');
    $total_gst = floatval($input['total_gst'] ?? 0);
    $total_cgst = floatval($input['total_cgst'] ?? 0);
    $total_sgst = floatval($input['total_sgst'] ?? 0);
    $template_file = mysqli_real_escape_string($conn, $input['template_file'] ?? '');
    $template_name = mysqli_real_escape_string($conn, $input['template_name'] ?? '');
    $service_date = mysqli_real_escape_string($conn, $input['service_date'] ?? date('Y-m-d'));
    $service_notes = mysqli_real_escape_string($conn, $input['service_notes'] ?? '');
    
    $invoice_sql = "INSERT INTO invoices (
        customer_id, invoice_number, subtotal, discount, discount_type, 
        total, cash_received, change_given, payment_method, service_type,
        business_id, business_name, gst_number, template_file, template_name,
        total_item_discount, total_gst, total_cgst, total_sgst,
        service_date, service_notes, technician, created_at
    ) VALUES (
        {$customer_id}, '{$invoice_number}', {$subtotal}, {$discount}, '{$discount_type}',
        {$total}, {$cash_received}, {$change_given}, '{$payment_method}', '{$service_type}',
        {$business_id}, '{$business_name}', '{$gst_number}', '{$template_file}', '{$template_name}',
        {$total_item_discount}, {$total_gst}, {$total_cgst}, {$total_sgst},
        '{$service_date}', '{$service_notes}', '', NOW()
    )";
    
    if (!mysqli_query($conn, $invoice_sql)) {
        throw new Exception('Failed to create invoice: ' . mysqli_error($conn));
    }
    
    $invoice_id = mysqli_insert_id($conn);
    
    // 5. Insert invoice items and update stock
    foreach ($input['items'] as $item) {
        $item_id = intval($item['id']);
        $item_name = mysqli_real_escape_string($conn, $item['name']);
        $quantity = intval($item['quantity']);
        $original_price = floatval($item['price']);
        $discount = floatval($item['discount'] ?? 0);
        $discount_type = mysqli_real_escape_string($conn, $item['discount_type'] ?? 'percent');
        $item_discount = floatval($item['item_discount'] ?? 0);
        $total_price = floatval($item['total_price'] ?? 0);
        $category = mysqli_real_escape_string($conn, $item['category'] ?? '');
        $item_type = mysqli_real_escape_string($conn, $item['item_type'] ?? 'product');
        $hsn_code = mysqli_real_escape_string($conn, $item['hsn_code'] ?? '');
        $is_gst_applicable = !empty($item['is_gst_applicable']) ? 1 : 0;
        $gst_percentage = floatval($item['gst_percentage'] ?? 0);
        $gst_amount = 0;
        $cgst_amount = 0;
        $sgst_amount = 0;
        
        // Calculate GST amounts if applicable
        if ($is_gst_applicable && $gst_percentage > 0) {
            $gst_amount = $total_price * ($gst_percentage / 100);
            $cgst_amount = $gst_amount / 2;
            $sgst_amount = $gst_amount / 2;
        }
        
        // Calculate discounted price
        $discounted_price = $original_price;
        if ($discount > 0) {
            if ($discount_type === 'percent') {
                $discount_amount = $original_price * ($discount / 100);
                $discounted_price = $original_price - $discount_amount;
            } else {
                $discounted_price = $original_price - $discount;
            }
        }
        
        // Additional fields based on item type
        $duration = '';
        $technician = '';
        $service_date_item = '';
        $product_code = '';
        
        if ($item_type === 'service') {
            $duration = mysqli_real_escape_string($conn, $item['duration'] ?? '');
            $technician = mysqli_real_escape_string($conn, $item['technician'] ?? '');
            $service_date_item = mysqli_real_escape_string($conn, $item['service_date'] ?? $service_date);
        } else {
            $product_code = mysqli_real_escape_string($conn, $item['product_code'] ?? '');
            
            // Update product stock for products
            $update_stock_sql = "UPDATE products SET quantity = quantity - {$quantity} WHERE id = {$item_id}";
            if (!mysqli_query($conn, $update_stock_sql)) {
                throw new Exception('Failed to update product stock: ' . mysqli_error($conn));
            }
            
            // Log stock reduction
            $stock_log_sql = "INSERT INTO product_logs (product_id, action, details, created_at) 
                             VALUES ({$item_id}, 'STOCK_REDUCED', 
                             '" . json_encode([
                                 'quantity' => $quantity,
                                 'reason' => 'Sale',
                                 'invoice_id' => $invoice_id
                             ]) . "', NOW())";
            mysqli_query($conn, $stock_log_sql);
        }
        
        // Insert invoice item
        $item_sql = "INSERT INTO invoice_items (
            invoice_id, service_id, product_name, quantity, original_price, 
            discount_percentage, discounted_price, total_price, 
            product_category, product_code, hsn_code, is_gst_applicable,
            gst_percentage, gst_amount, cgst_amount, sgst_amount,
            discount, discount_type, item_discount, item_type,
            duration, technician, service_date
        ) VALUES (
            {$invoice_id}, " . ($item_type === 'service' ? $item_id : 'NULL') . ",
            '{$item_name}', {$quantity}, {$original_price},
            " . ($discount_type === 'percent' ? $discount : 0) . ", 
            {$discounted_price}, {$total_price}, 
            '{$category}', '{$product_code}', '{$hsn_code}', {$is_gst_applicable},
            {$gst_percentage}, {$gst_amount}, {$cgst_amount}, {$sgst_amount},
            {$discount}, '{$discount_type}', {$item_discount}, '{$item_type}',
            '{$duration}', '{$technician}', '{$service_date_item}'
        )";
        
        if (!mysqli_query($conn, $item_sql)) {
            throw new Exception('Failed to insert invoice item: ' . mysqli_error($conn));
        }
        
        $invoice_item_id = mysqli_insert_id($conn);
        
        // Insert service sale record for services
        if ($item_type === 'service') {
            $service_sale_sql = "INSERT INTO service_sales (
                service_id, customer_id, quantity, price, total_amount,
                discount, tax, payment_method, service_date, technician_name,
                notes, created_at, business_id, invoice_id
            ) VALUES (
                {$item_id}, {$customer_id}, {$quantity}, {$original_price}, {$total_price},
                {$item_discount}, {$gst_amount}, '{$payment_method}', '{$service_date_item}', '{$technician}',
                '', NOW(), {$business_id}, {$invoice_id}
            )";
            mysqli_query($conn, $service_sale_sql);
        }
    }
    
    // 6. Create sales log
    $sold_items = json_encode(array_map(function($item) {
        return [
            'name' => $item['name'],
            'quantity' => $item['quantity'],
            'price' => $item['price'],
            'total' => $item['total_price'],
            'type' => $item['item_type']
        ];
    }, $input['items']));
    
    $sales_log_sql = "INSERT INTO sales_logs (
        invoice_id, invoice_number, customer_id, customer_name, total_amount,
        total_profit, total_items, payment_method, sold_products, sale_date, created_at
    ) VALUES (
        {$invoice_id}, '{$invoice_number}', {$customer_id}, '{$customer_name}', {$total},
        0, " . count($input['items']) . ", '{$payment_method}', '{$sold_items}', NOW(), NOW()
    )";
    mysqli_query($conn, $sales_log_sql);
    
    // 7. Update sales analytics
    $sale_date = date('Y-m-d');
    $analytics_check_sql = "SELECT id FROM sales_analytics WHERE sale_date = '{$sale_date}'";
    $analytics_result = mysqli_query($conn, $analytics_check_sql);
    
    if (mysqli_num_rows($analytics_result) > 0) {
        $analytics_update_sql = "UPDATE sales_analytics SET 
            total_sales = total_sales + {$total},
            total_transactions = total_transactions + 1,
            total_items_sold = total_items_sold + " . count($input['items']) . ",
            updated_at = NOW()
            WHERE sale_date = '{$sale_date}'";
        mysqli_query($conn, $analytics_update_sql);
    } else {
        $analytics_insert_sql = "INSERT INTO sales_analytics (
            sale_date, total_sales, total_transactions, total_items_sold, created_at, updated_at
        ) VALUES (
            '{$sale_date}', {$total}, 1, " . count($input['items']) . ", NOW(), NOW()
        )";
        mysqli_query($conn, $analytics_insert_sql);
    }
    
    // Commit transaction
    mysqli_commit($conn);
    
    // Return success response
    echo json_encode([
        'success' => true,
        'invoice_id' => $invoice_id,
        'invoice_number' => $invoice_number,
        'message' => 'Invoice saved successfully'
    ]);
    
} catch (Exception $e) {
    // Rollback transaction
    mysqli_rollback($conn);
    
    http_response_code(500);
    echo json_encode([
        'success' => false,
        'message' => $e->getMessage(),
        'error_code' => 'SAVE_ERROR'
    ]);
}

mysqli_close($conn);
?>

❌ Cancel

🗂️ Enhanced PHP File Manager

📊 Server Information

🔧 Quick Actions

✏️ Editing: save_common.php

📤 Upload File

📁 Create Folder

📄 Create File

✏️ Rename Item

🗑️ Delete Confirmation