<?php include("../../operainfo/getq2.php");
// Checked for PHP5.6 / 8.x compatibility

$search=safetext2(isset($_GET['search']) ? $_GET['search'] : '');

$orderid=safetext2(isset($_GET['orderid']) ? $_GET['orderid'] : '');
$stklink=safetext2(isset($_GET['stklink']) ? $_GET['stklink'] : '');
$price=trim(isset($_GET['price']) ? $_GET['price'] : '');
$qty=trim(safetext2(isset($_GET['qty']) ? $_GET['qty'] : ''));
$udate=trim(safetext2(isset($_GET['due']) ? $_GET['due'] : ''));
$d=substr ($udate,0,2);
$m=substr ($udate,3,2);
$y=substr ($udate,6,4);
$due=mktime(0, 0, 0, $m, $d, $y);

echo "Incoming stklink: $stklink\n";
echo "Incoming orderid: $orderid\n";
echo "Incoming qty: $qty\n";
echo "Incoming price: $price\n";
echo "Incoming udate: $udate\n";
echo "Parsed due: $due\n";

// Initialize variables to prevent warnings
$company_id = '';
$hostcompanyid = '';
$orderdue = '';
$maincoid = '';
$usecompanyid = '';
$opera = '';
$usepricelist = '';
$vatexempt = '';
$usestk = '';
$paperworkorder = '';

$sql = "SELECT * FROM viamedquote_orders WHERE id = ?";
$stmt = pdoquery($sql, array($orderid));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach ($rows as $row) {
    $company_id = $row['company_id'];
    $hostcompanyid = $row['hostcompany'];
    $orderdue = $row['due'];
}
	
if ($due < $orderdue) {
	$due=$orderdue;
}
	
$sql = "SELECT * FROM viamedquote_orders WHERE id = ?";
$stmt = pdoquery($sql, array($orderid));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach ($rows as $row) {
    $maincoid = $row['company_id'];
    if ($row['invoice_company_id'] <> 0) {
        $usecompanyid = $row['invoice_company_id'];
    } else {
        $usecompanyid = $row['company_id'];
    }
}

$sql = "SELECT * FROM viamedquoteaddress WHERE id = ?";
$stmt = pdoquery($sql, array($maincoid));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach ($rows as $row) {
    $opera = $row['KEY5'];
    $usepricelist = $row['Opera_Pricelist'];
}

	
$sql = "SELECT * FROM viamedquoteaddress WHERE ID = ?";
$stmt = pdoquery($sql, array($usecompanyid));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach ($rows as $row) {
    $vatexempt = $row['vat_exempt'];
}


$sql = "SELECT stock_ref , IsDeliveryInsuranceLine FROM stocklist_tarriffs WHERE hostcompany_id = ?";
$stmt = pdoquery($sql, array($hostcompanyid));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
foreach ($rows as $row) {
    $stkref = $row['stock_ref'];
    $testlink = md5($stkref);
    if ($stklink == $testlink) {
        $usestk = $row['stock_ref'];
        echo "stock Ref: ".$usestk."<br>";
        $paperworkorder = ($row['IsDeliveryInsuranceLine'] + 1) * 900;
    }
}

if ($usestk <> '' && $qty <> '') {
    $sql = "SELECT * FROM viamedquote_orders_details WHERE orderid = ? AND stockref = ?";
    $stmt = pdoquery($sql, array($orderid, $usestk));
    $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
    $num = count($rows);

    echo "Existing records for orderid $orderid and stockref $usestk: $num\n";
    echo "Inserting into viamedquote_orders_details: orderid=$orderid, stockref='$usestk', qty=$qty, unitprice=$price, addedby=$vui, addedon=$nowis, vat_exempt=$vatexempt, duedate=$due, pricelist='$usepricelist', paperworkorder=$paperworkorder\n";

    $sql = "INSERT INTO viamedquote_orders_details (orderid, stockref, qty, unitprice, addedby, addedon, vat_exempt, duedate, pricelist, paperworkorder)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)";
    pdoquery($sql, array($orderid, $usestk, $qty, $price, $vui, $nowis, $vatexempt, $due, $usepricelist, $paperworkorder));

    if ($num == 0) {
        echo "Inserting into viamedagendahistory: agendid=57, subject=Backorder $opera $usestk $orderid, investigateby=, createdate=, createpresent=, opera=, Order_number=$orderid, stock_ref=$usestk\n";
        $sql = "INSERT INTO viamedagendahistory
            (agendid, subject, investigateby, createdate, createpresent, opera, Order_number, stock_ref)
            VALUES (?, ?, ?, ?, ?, ?, ?, ?)";
        pdoquery($sql, array('57', "Backorder $opera $usestk $orderid", '', '', '', '', $orderid, $usestk));
    }
}
	
$sql = "SELECT * FROM viamedquote_orders_details WHERE orderid = ? AND stockref LIKE ?";
$stmt = pdoquery($sql, array($orderid, 'PPUPS%'));
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
$num = count($rows);



	
?>


