<?php
//function for form - menu definition happens in admin.php
// this is also a basic structure for adding to a db:
// table of records / add form / edit when resaving, edit from table, delete from table
//table: df_suppliers
    function df_suppliers_form() {

        global $wpdb;

        if (!current_user_can('manage_options'))  {
         wp_die( __('You do not have sufficient permissions to access this page.') );
        }


        //wrap in wordpress
        $html .= "
        <div class='wrap'>
        ";


        $html .= "
            <h2>Suppliers <form method='post' action='admin.php?page=wpsc-edit-suppliers'>
                <input type='hidden' name='supid' value='NULL'>
                <input type='submit' name='addsup' value='Add New' class='button-secondary'>
            </form></h2>

        ";

        //check if we are adding / saving a supplier
        //validate
        if ( (isset($_POST['addsup'])) || (isset($_POST['addsupform'])) || (isset($_GET['editsup'])) || (isset($_GET['delsup'])) ) { // we are asking for the form or submitting the form or asking to edit or asking to delete.

            if (isset($_POST['addsup'])) {
                $supid = $_POST['supid'];
            }

            if (isset($_POST['addsupform'])) { //we are submiting
                //validate
                $supid = $_POST['supid'];
                $supcode = $_POST['supcode'];
                $supname = $_POST['supname'];
                $supvat = $_POST['supvat'];
                $supphaddr1 = $_POST['supphaddr1'];
                $supphaddr2 = $_POST['supphaddr2'];
                $supphaddr3 = $_POST['supphaddr3'];
                $supphcode = $_POST['supphcode'];
                $suppoaddr1 = $_POST['suppoaddr1'];
                $suppoaddr2 = $_POST['suppoaddr2'];
                $suppoaddr3 = $_POST['suppoaddr3'];
                $suppocode = $_POST['suppocode'];
                $suptel = $_POST['suptel'];
                $supemail = $_POST['supemail'];
                $supbholder = $_POST['supbholder'];
                if (isset($_POST['supbtype'])) {
                    $supbtype = $_POST['supbtype'];
                }
                else {
                    $supbtype = "";
                }
                $supbacc = $_POST['supbacc'];
                $supbbank = $_POST['supbbank'];
                $supbbn = $_POST['supbbn'];
                $supbbc = $_POST['supbbc'];

                $errors = array();
                $errors[0] = "";
                $errcounter = 0;

                if ($supcode == "") {
                    $errors[$errcounter] = "Please supply a Supplier code<br>";
                    $errcounter ++;
                }

                if ($supname == "") {
                    $errors[$errcounter] = "Please supply a Supplier name<br>";
                    $errcounter ++;
                }

                if ($supphaddr1 == "") {
                    $errors[$errcounter] = "Please supply a Supplier Physical Address line 1<br>";
                    $errcounter ++;
                }

                if ($supphaddr2 == "") {
                    $errors[$errcounter] = "Please supply a Supplier Physical Address line 2<br>";
                    $errcounter ++;
                }

                if ($supphaddr3 == "") {
                    $errors[$errcounter] = "Please supply a Supplier Physical Address line 3<br>";
                    $errcounter ++;
                }

                if ($supphcode == "") {
                    $errors[$errcounter] = "Please supply a Supplier Physical Postal code<br>";
                    $errcounter ++;
                }

                if ($suptel == "") {
                    $errors[$errcounter] = "Please supply a Supplier Address Telephone number<br>";
                    $errcounter ++;
                }

                if ($supemail == "") {
                    $errors[$errcounter] = "Please supply a Supplier Email address<br>";
                    $errcounter ++;
                }

                if ($errors[0] != "") {
                    $html .= "
                        <br><div class='updated fade'><br>
                    ";
                    foreach ($errors as $error) {
                        $html .= $error;
                    }
                    $html .= "
                    <br>
                    </div>
                    ";
                }
                else {
                    //save the supplier
                    //if we are inserting
                    if ($supid == "NULL") { //we are inserting
                        $wpdb->insert(
                                'df_suppliers',
                                array(
                                    'supcode'=>$supcode, 'supname'=>$supname,
                                    'supvat'=>$supvat, 'supphaddr1'=>$supphaddr1,
                                    'supphaddr2'=>$supphaddr2, 'supphaddr3'=> $supphaddr3,
                                    'supphcode'=>$supphcode, 'suppoaddr1'=>$suppoaddr1,
                                    'suppoaddr2'=>$suppoaddr2, 'suppoaddr3'=> $suppoaddr3,
                                    'suppocode'=>$suppocode, 'suptel'=>$suptel,
                                    'supemail'=>$supemail, 'supbholder'=>$supbholder, 'supbtype'=>$supbtype,
                                    'supbacc'=>$supbacc, 'supbbank'=>$supbbank, 'supbbn'=>$supbbn,
                                    'supbbc'=>$supbbc
                                )
                        );
                        $supid = $wpdb->insert_id;

                    }
                    else {// we are updating
                        $wpdb->update(
                                'df_suppliers',
                                 array(
                                    'supcode'=>$supcode, 'supname'=>$supname,
                                    'supvat'=>$supvat, 'supphaddr1'=>$supphaddr1,
                                    'supphaddr2'=>$supphaddr2, 'supphaddr3'=> $supphaddr3,
                                    'supphcode'=>$supphcode, 'suppoaddr1'=>$suppoaddr1,
                                    'suppoaddr2'=>$suppoaddr2, 'suppoaddr3'=> $suppoaddr3,
                                    'suppocode'=>$suppocode,'suptel'=>$suptel,
                                    'supemail'=>$supemail, 'supbholder'=>$supbholder, 'supbtype'=>$supbtype,
                                    'supbacc'=>$supbacc, 'supbbank'=>$supbbank, 'supbbn'=>$supbbn,
                                    'supbbc'=>$supbbc
                                ),
                                array(
                                    'supid'=>$supid
                                )
                        );
                    }
                    $html .= "
                        <br><div class='updated fade'><br>Supplier successfully saved!<br><br></div>
                    ";
                }
            }

            if ( (isset($_POST['addsup'])) || (isset($_POST['addsupform'])) ) {// draw the form - empty or with data
                include('supplierform.php');
                $html .= $form;
            }

            if (isset($_GET['editsup'])) { //now handle edit
                // lookup record and throw form
                $supid = $_GET['editsup'];
                $myrow = $wpdb->get_row("SELECT * FROM df_suppliers WHERE supid = $supid");
                foreach ($myrow as $key => $value) {
                    if (is_null($value)) {
                        $row[$key] = "";
                    }
                }
                $supcode = $myrow->supcode;
                $supname = $myrow->supname;
                $supvat = $myrow->supvat;
                $supphaddr1 = $myrow->supphaddr1;
                $supphaddr2 = $myrow->supphaddr2;
                $supphaddr3 = $myrow->supphaddr3;
                $supphcode = $myrow->supphcode;
                $suppoaddr1 = $myrow->suppoaddr1;
                $suppoaddr2 = $myrow->suppoaddr2;
                $suppoaddr3 = $myrow->suppoaddr3;
                $suppocode = $myrow->suppocode;
                $suptel = $myrow->suptel;
                $supemail = $myrow->supemail;
                $supbholder = $myrow->supbholder;
                $supbtype = $myrow->supbtype;
                $supbacc = $myrow->supbacc;
                $supbbank = $myrow->supbbank;
                $supbbn = $myrow->supbbn;
                $supbbc = $myrow->supbbc;

                include('supplierform.php');
                $html .= $form;
            }

            if (isset($_GET['delsup'])) { //now handle delete
                $supid = $_GET['delsup'];
                if(isset($_GET['deldo'])) { // we have already confirmed
                    //delete record ... don't throw form
                    $wpdb->query(
                        "DELETE FROM df_suppliers WHERE supid = $supid"
                    );
                    //throw message that we deleted
                    $html .= "
                    <div class='updated fade'>
                    <br>
                    The supplier was deleted!
                    <br><br>
                    </div>
                    ";
                }
                else {//we need to confirm first
                    //ask confirmation message - throw form
                    $html .= "
                    <br>
                    <div class='updated fade'>
                    <br>
                    <h3>Are you sure you want to delete the supplier data below?</h3><br>
                    (note: going forward, once hooked up to products, I won't allow deleting if there are products tied to this supplier!<br>
                    ... also I'll make a 'by supplier' view of products available under Products to easier see which products are tied to which supplier)
                    <br><br>
                    <a href='admin.php?page=wpsc-edit-suppliers&delsup=$supid&deldo=1'>Yes, delete it!</a> | <a href='admin.php?page=wpsc-edit-suppliers'>No, don't delete it!</a>
                    <br><br>
                    </div>
                    ";
                    //lookup the record we are prompting to delete
                    $myrow = $wpdb->get_row("SELECT * FROM df_suppliers WHERE supid = $supid");
                    foreach ($myrow as $key => $value) {
                        if (is_null($value)) {
                            $row[$key] = "";
                        }
                    }
                    $supcode = $myrow->supcode;
                    $supname = $myrow->supname;
                    $supvat = $myrow->supvat;
                    $supphaddr1 = $myrow->supphaddr1;
                    $supphaddr2 = $myrow->supphaddr2;
                    $supphaddr3 = $myrow->supphaddr3;
                    $supphcode = $myrow->supphcode;
                    $suppoaddr1 = $myrow->suppoaddr1;
                    $suppoaddr2 = $myrow->suppoaddr2;
                    $suppoaddr3 = $myrow->suppoaddr3;
                    $suppocode = $myrow->suppocode;
                    $suptel = $myrow->suptel;
                    $supemail = $myrow->supemail;
                    $supbholder = $myrow->supbholder;
                    $supbtype = $myrow->supbtype;
                    $supbacc = $myrow->supbacc;
                    $supbbank = $myrow->supbbank;
                    $supbbn = $myrow->supbbn;
                    $supbbc = $myrow->supbbc;
                    include('supplierformwithoutsave.php');
                    $html .= $form;
                }
            }
        }


        //draw table with actions - if we are not drawing form or submitting filled form
        $myrows = $wpdb->get_results("SELECT * FROM df_suppliers");
        if (count($myrows) > 0) {
            // draw the table
            $html .= "
            <br><br>
            <table class='widefat'>
            <thead>
                <tr>
                    <th>Code</th>
                    <th>Name</th>
                    <th>Email</th>
                    <th>Telephone</th>
                </tr>
            </thead>
            <tfoot>
                <tr>
                <th>Code</th>
                <th>Name</th>
                <th>Email</th>
                <th>Telephone</th>
                </tr>
            </tfoot>
            <tbody>
            ";
            foreach ($myrows as $row) {
                foreach ($row as $key => $value) {
                    if (is_null($value)) {
                        $row[$key] = "";
                    }
                }
                $html .= "
                    <tr>
                    <td>
                    $row->supcode<br>
                    <a href='admin.php?page=wpsc-edit-suppliers&editsup=$row->supid'>View or Edit</a> | <a href='admin.php?page=wpsc-edit-suppliers&delsup=$row->supid'>Delete</a>                  </td>
                    <td>$row->supname</td>
                    <td>$row->supemail</td>
                    <td>$row->suptel</td>
                    </tr>
                ";

            }
            $html .= "
            </tbody>
            </table>
            ";

        }




        //end wrap in wordpress
        $html .= "
            </div>
        ";

        echo $html;
    }
?>