diff --git a/agent/post/invoice.php b/agent/post/invoice.php
index d6061460..e1d43d1d 100644
--- a/agent/post/invoice.php
+++ b/agent/post/invoice.php
@@ -1,7 +1,7 @@
$invoice_prefix$invoice_number");
-
- redirect("recurring_invoice.php?recurring_invoice_id=$recurring_invoice_id");
-
-}
-
-if (isset($_POST['add_recurring_invoice'])) {
-
- $client_id = intval($_POST['client']);
- $frequency = sanitizeInput($_POST['frequency']);
- $start_date = sanitizeInput($_POST['start_date']);
- $category = intval($_POST['category']);
- $scope = sanitizeInput($_POST['scope']);
-
- //Get the last Recurring Number and add 1 for the new Recurring number
- $recurring_invoice_number = $config_recurring_invoice_next_number;
- $new_config_recurring_invoice_next_number = $config_recurring_invoice_next_number + 1;
- mysqli_query($mysqli,"UPDATE settings SET config_recurring_invoice_next_number = $new_config_recurring_invoice_next_number WHERE company_id = 1");
-
- mysqli_query($mysqli,"INSERT INTO recurring_invoices SET recurring_invoice_prefix = '$config_recurring_invoice_prefix', recurring_invoice_number = $recurring_invoice_number, recurring_invoice_scope = '$scope', recurring_invoice_frequency = '$frequency', recurring_invoice_next_date = '$start_date', recurring_invoice_category_id = $category, recurring_invoice_status = 1, recurring_invoice_currency_code = '$session_company_currency', recurring_invoice_client_id = $client_id");
-
- $recurring_invoice_id = mysqli_insert_id($mysqli);
-
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Active', history_description = 'Recurring Invoice created', history_recurring_invoice_id = $recurring_invoice_id");
-
- logAction("Recurring Invoice", "Create", "$session_name created recurring invoice $config_recurring_invoice_prefix$recurring_invoice_number - $scope", $client_id, $recurring_invoice_id);
-
- flash_alert("Recurring Invoice $config_recurring_invoice_prefix$recurring_invoice_number created");
-
- redirect("recurring_invoice.php?recurring_invoice_id=$recurring_invoice_id");
-
-}
-
-if (isset($_POST['edit_recurring_invoice'])) {
-
- $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
- $frequency = sanitizeInput($_POST['frequency']);
- $next_date = sanitizeInput($_POST['next_date']);
- $category = intval($_POST['category']);
- $scope = sanitizeInput($_POST['scope']);
- $status = intval($_POST['status']);
- $recurring_invoice_discount = floatval($_POST['recurring_invoice_discount']);
-
- // Get Recurring Invoice Details and Client ID for Logging
- $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- //Calculate new total
- $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
- $recurring_invoice_amount = 0;
- while($row = mysqli_fetch_array($sql)) {
- $item_total = floatval($row['item_total']);
- $recurring_invoice_amount = $recurring_invoice_amount + $item_total;
- }
- $recurring_invoice_amount = $recurring_invoice_amount - $recurring_invoice_discount;
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_scope = '$scope', recurring_invoice_frequency = '$frequency', recurring_invoice_next_date = '$next_date', recurring_invoice_category_id = $category, recurring_invoice_discount_amount = $recurring_invoice_discount, recurring_invoice_amount = $recurring_invoice_amount, recurring_invoice_status = $status WHERE recurring_invoice_id = $recurring_invoice_id");
-
- mysqli_query($mysqli,"INSERT INTO history SET history_status = '$status', history_description = 'Recurring Invoice edited', history_recurring_invoice_id = $recurring_invoice_id");
-
- logAction("Recurring Invoice", "Edit", "$session_name edited recurring invoice $recurring_invoice_prefix$recurring_invoice_number - $scope", $client_id, $recurring_invoice_id);
-
- flash_alert("Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number edited");
-
- redirect();
-
-}
-
-if (isset($_GET['delete_recurring_invoice'])) {
-
- $recurring_invoice_id = intval($_GET['delete_recurring_invoice']);
-
- // Get Recurring Invoice Details and Client ID for Logging
- $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_scope, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $recurring_invoice_scope = sanitizeInput($row['recurring_invoice_scope']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- mysqli_query($mysqli,"DELETE FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
-
- //Delete Items Associated with the Recurring
- $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
- while($row = mysqli_fetch_array($sql)) {
- $item_id = intval($row['item_id']);
- mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id");
- }
-
- //Delete History Associated with the Invoice
- $sql = mysqli_query($mysqli,"SELECT * FROM history WHERE history_recurring_invoice_id = $recurring_invoice_id");
- while($row = mysqli_fetch_array($sql)) {
- $history_id = intval($row['history_id']);
- mysqli_query($mysqli,"DELETE FROM history WHERE history_id = $history_id");
- }
-
- logAction("Recurring Invoice", "Delete", "$session_name deleted recurring invoice $recurring_invoice_prefix$recurring_invoice_number - $recurring_invoice_scope", $client_id);
-
- flash_alert("Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number deleted", 'error');
-
- redirect();
-
-}
-
-if (isset($_POST['add_recurring_invoice_item'])) {
-
- $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
- $name = sanitizeInput($_POST['name']);
- $description = sanitizeInput($_POST['description']);
- $qty = floatval($_POST['qty']);
- $price = floatval($_POST['price']);
- $tax_id = intval($_POST['tax_id']);
- $item_order = intval($_POST['item_order']);
-
- $subtotal = $price * $qty;
-
- if ($tax_id > 0) {
- $sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE tax_id = $tax_id");
- $row = mysqli_fetch_array($sql);
- $tax_percent = floatval($row['tax_percent']);
- $tax_amount = $subtotal * $tax_percent / 100;
- } else {
- $tax_amount = 0;
- }
-
- $total = $subtotal + $tax_amount;
-
- mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$name', item_description = '$description', item_quantity = $qty, item_price = $price, item_subtotal = $subtotal, item_tax = $tax_amount, item_total = $total, item_tax_id = $tax_id, item_order = $item_order, item_recurring_invoice_id = $recurring_invoice_id");
-
-
- $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_discount = floatval($row['recurring_invoice_discount_amount']);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- //add up all the items
- $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
- $recurring_invoice_amount = 0;
- while($row = mysqli_fetch_array($sql)) {
- $item_total = floatval($row['item_total']);
- $recurring_invoice_amount = $recurring_invoice_amount + $item_total;
- }
- $recurring_invoice_amount = $recurring_invoice_amount - $recurring_invoice_discount;
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $recurring_invoice_amount WHERE recurring_invoice_id = $recurring_invoice_id");
-
- logAction("Recurring Invoice", "Edit", "$session_name added item $name to recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
-
- flash_alert("Item $name added to Recurring Invoice");
-
- redirect();
-
-}
-
-if (isset($_POST['recurring_invoice_note'])) {
-
- $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
- $note = sanitizeInput($_POST['note']);
-
- // Get Recurring details for logging
- $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_note = '$note' WHERE recurring_invoice_id = $recurring_invoice_id");
-
- logAction("Recurring Invoice", "Edit", "$session_name added note to recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
-
- flash_alert("Notes added");
-
- redirect();
-
-}
-
-if (isset($_GET['delete_recurring_invoice_item'])) {
-
- $item_id = intval($_GET['delete_recurring_invoice_item']);
-
- $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_id = $item_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_id = intval($row['item_recurring_invoice_id']);
- $item_name = sanitizeInput($row['item_name']);
- $item_subtotal = floatval($row['item_subtotal']);
- $item_tax = floatval($row['item_tax']);
- $item_total = floatval($row['item_total']);
-
- $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- $new_recurring_invoice_amount = floatval($row['recurring_invoice_amount']) - $item_total;
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $new_recurring_invoice_amount WHERE recurring_invoice_id = $recurring_invoice_id");
-
- mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id");
-
- logAction("Recurring Invoice", "Edit", "$session_name removed item $item_name from recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id);
-
- flash_alert("Item $item_name removed", 'error');
-
- redirect();
-
-}
-
if (isset($_GET['mark_invoice_sent'])) {
$invoice_id = intval($_GET['mark_invoice_sent']);
@@ -755,847 +496,6 @@ if (isset($_GET['delete_invoice_item'])) {
}
-if (isset($_POST['add_payment'])) {
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $invoice_id = intval($_POST['invoice_id']);
- $balance = floatval($_POST['balance']);
- $date = sanitizeInput($_POST['date']);
- $amount = floatval($_POST['amount']);
- $account = intval($_POST['account']);
- $currency_code = sanitizeInput($_POST['currency_code']);
- $payment_method = sanitizeInput($_POST['payment_method']);
- $reference = sanitizeInput($_POST['reference']);
- $email_receipt = intval($_POST['email_receipt']);
-
- //Check to see if amount entered is greater than the balance of the invoice
- if ($amount > $balance) {
- flash_alert("Payment can not be more than the balance", 'error');
- redirect();
- } else {
- mysqli_query($mysqli,"INSERT INTO payments SET payment_date = '$date', payment_amount = $amount, payment_currency_code = '$currency_code', payment_account_id = $account, payment_method = '$payment_method', payment_reference = '$reference', payment_invoice_id = $invoice_id");
-
- // Get Payment ID for reference
- $payment_id = mysqli_insert_id($mysqli);
-
- //Add up all the payments for the invoice and get the total amount paid to the invoice
- $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS payments_amount FROM payments WHERE payment_invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql_total_payments_amount);
- $total_payments_amount = floatval($row['payments_amount']);
-
- //Get the invoice total
- $sql = mysqli_query($mysqli,"SELECT * FROM invoices
- LEFT JOIN clients ON invoice_client_id = client_id
- LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
- WHERE invoice_id = $invoice_id"
- );
-
- $row = mysqli_fetch_array($sql);
- $invoice_amount = floatval($row['invoice_amount']);
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_url_key = sanitizeInput($row['invoice_url_key']);
- $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
- $client_id = intval($row['client_id']);
- $client_name = sanitizeInput($row['client_name']);
- $contact_name = sanitizeInput($row['contact_name']);
- $contact_email = sanitizeInput($row['contact_email']);
- $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
- $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
- $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
-
- $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
- $row = mysqli_fetch_array($sql);
-
- $company_name = sanitizeInput($row['company_name']);
- $company_country = sanitizeInput($row['company_country']);
- $company_address = sanitizeInput($row['company_address']);
- $company_city = sanitizeInput($row['company_city']);
- $company_state = sanitizeInput($row['company_state']);
- $company_zip = sanitizeInput($row['company_zip']);
- $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
- $company_email = sanitizeInput($row['company_email']);
- $company_website = sanitizeInput($row['company_website']);
- $company_logo = sanitizeInput($row['company_logo']);
-
- // Sanitize Config vars from get_settings.php
- $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
- $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
-
- //Calculate the Invoice balance
- $invoice_balance = $invoice_amount - $total_payments_amount;
-
- $email_data = [];
-
- //Determine if invoice has been paid then set the status accordingly
- if ($invoice_balance == 0) {
-
- $invoice_status = "Paid";
-
- if ($email_receipt == 1) {
-
- $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
- $body = "Hello $contact_name,
We have received your payment in full for the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Payment Method: $payment_method
Payment Reference: $reference
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
-
- // Queue Mail
- $email = [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $contact_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body
- ];
-
- $email_data[] = $email;
-
- // Add email to queue
- if (!empty($email)) {
- addToMailQueue($email_data);
- }
-
- // Get Email ID for reference
- $email_id = mysqli_insert_id($mysqli);
-
- // Email Logging
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
- logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
-
- }
-
- } else {
-
- $invoice_status = "Partial";
-
- if ($email_receipt == 1) {
-
- $subject = "Partial Payment Received - Invoice $invoice_prefix$invoice_number";
- $body = "Hello $contact_name,
We have received partial payment in the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " and it has been applied to invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Payment Method: $payment_method
Payment Reference: $reference
Invoice Balance: " . numfmt_format_currency($currency_format, $invoice_balance, $invoice_currency_code) . "
Thank you for your business!
~
$company_name - Billing
$config_invoice_from_email
$company_phone";
-
- // Queue Mail
- $email = [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $contact_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body
- ];
-
- $email_data[] = $email;
-
- // Add email to queue
- if (!empty($email)) {
- addToMailQueue($email_data);
- }
-
- // Get Email ID for reference
- $email_id = mysqli_insert_id($mysqli);
-
- // Email Logging
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
- logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
-
- }
-
- }
-
- //Update Invoice Status
- mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
-
- //Add Payment to History
- mysqli_query($mysqli,"INSERT INTO history SET history_status = '$invoice_status', history_description = 'Payment added', history_invoice_id = $invoice_id");
-
- logAction("Invoice", "Payment", "Payment amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
-
- customAction('invoice_pay', $invoice_id);
-
- flash_alert("Payment amount " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " added");
-
- redirect();
-
- }
-
-}
-
-/*
-Apply Credit Not ready for use 2025-08-27 - JQ
-
-if (isset($_POST['apply_credit'])) {
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $invoice_id = intval($_POST['invoice_id']);
- $credit_amount_applied = floatval($_POST['credit_amount_applied']);
-
- $sql = mysqli_query($mysqli, "SELECT * FROM invoices LEFT JOIN clients ON invoice_client_id = client_id WHERE invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql);
-
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_status = sanitizeInput($row['invoice_status']);
- $invoice_credit_amount = floatval($row['invoice_credit_amount']);
- $invoice_amount = floatval('invoice_amount');
- $client_id = intval($row['invoice_client_id']);
-
- // Get Credit Balance
- $sql_credit_balance = mysqli_query($mysqli, "SELECT SUM(credit_amount) AS credit_balance FROM credits WHERE credit_client_id = $client_id");
- $row = mysqli_fetch_array($sql_credit_balance);
-
- $credit_balance = floatval($row['credit_balance']);
-
- // Get Invoice Balance
- $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE payment_invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql_amount_paid);
- $amount_paid = floatval($row['amount_paid']);
-
- $invoice_balance = $invoice_amount - $amount_paid;
-
- // Get Credit Tally applied to invoice
- $sql_credit_tally = mysqli_query($mysqli, "SELECT SUM(credit_tally) AS credit_balance FROM credits WHERE credit_invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql_credit_tally);
-
- $credit_tally = floatval($row['credit_tally']);
-
- // Check to see if amount entered is greater than the balance of the invoice
- if ($credit_amount_applied > $invoice_balance) {
- flash_alert("Credit can not be more than the balance", 'alert');
- redirect();
- }
-
- // Check to see if amount entered is greater than the credit balance
- if ($credit_amount_applied > $credit_balance) {
- flash_alert("Credit can not be more than the available credit", 'alert');
- redirect();
- }
-
- // Insert a new credit usage record linked to the invoice
- mysqli_query($mysqli, "
- INSERT INTO credits SET
- credit_amount = -$amount,
- credit_type = 'usage',
- credit_created_by = $session_user_id,
- credit_client_id = $client_id,
- credit_invoice_id = $invoice_id
- ");
-
- $new_invoice_amount = $invoice_amount - $credit_amount_applied;
-
- // Calculate updated invoice credit sum
- $result = mysqli_query($mysqli, "
- SELECT SUM(credit_amount) AS credit_total
- FROM credits
- WHERE credit_invoice_id = $invoice_id
- ");
- $total_credit_applied = floatval(mysqli_fetch_assoc($result)['credit_total']);
-
- // Get invoice amount
- $invoice_amount = floatval(getFieldByID('invoices', $invoice_id, 'invoice_amount'));
-
- // Determine new status
- $invoice_due = $invoice_amount + $total_credit_applied;
- $invoice_status = ($invoice_due <= 0) ? 'Paid' : 'Partial';
-
- // Update the invoice credit amount
- mysqli_query($mysqli, "
- UPDATE invoices
- SET invoice_credit_amount = $total_credit_applied
- WHERE invoice_id = $invoice_id
- ");
-
- // Update invoice status only (not invoice_credit_amount)
- mysqli_query($mysqli, "UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
-
- // Log credit application in history
- mysqli_query($mysqli, "
- INSERT INTO history SET
- history_status = '$invoice_status',
- history_description = 'Credit applied',
- history_invoice_id = $invoice_id
- ");
-
- logAction("Invoice", "Payment", "Credit " . numfmt_format_currency($currency_format, $amount, $session_company_currency) . " applied to invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
-
- customAction('invoice_pay', $invoice_id);
-
- flash_alert("Credit amount " . numfmt_format_currency($currency_format, $amount, $session_company_currency) . " applied");
-
- redirect();
-
-}
-
-*/
-
-if (isset($_POST['add_payment_stripe'])) {
-
- validateCSRFToken($_POST['csrf_token']);
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $invoice_id = intval($_POST['invoice_id']);
- $saved_payment_id = intval($_POST['saved_payment_id']);
-
- // Get invoice details
- $sql = mysqli_query($mysqli,"SELECT * FROM invoices
- LEFT JOIN clients ON invoice_client_id = client_id
- LEFT JOIN contacts ON client_id = contact_client_id AND contact_primary = 1
- WHERE invoice_id = $invoice_id"
- );
- $row = mysqli_fetch_array($sql);
- $invoice_number = intval($row['invoice_number']);
- $invoice_status = sanitizeInput($row['invoice_status']);
- $invoice_amount = floatval($row['invoice_amount']);
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_url_key = sanitizeInput($row['invoice_url_key']);
- $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
- $client_id = intval($row['client_id']);
- $client_name = sanitizeInput($row['client_name']);
- $contact_name = sanitizeInput($row['contact_name']);
- $contact_email = sanitizeInput($row['contact_email']);
- $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
- $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
- $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
-
- // Get ITFlow company details
- $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
- $row = mysqli_fetch_array($sql);
- $company_name = sanitizeInput($row['company_name']);
- $company_country = sanitizeInput($row['company_country']);
- $company_address = sanitizeInput($row['company_address']);
- $company_city = sanitizeInput($row['company_city']);
- $company_state = sanitizeInput($row['company_state']);
- $company_zip = sanitizeInput($row['company_zip']);
- $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
- $company_email = sanitizeInput($row['company_email']);
- $company_website = sanitizeInput($row['company_website']);
-
- // Sanitize Config vars from get_settings.php
- $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
- $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
-
- // Get Client Payment Details
- $sql = mysqli_query($mysqli, "SELECT * FROM client_saved_payment_methods LEFT JOIN payment_providers ON saved_payment_provider_id = payment_provider_id LEFT JOIN client_payment_provider ON saved_payment_client_id = client_id WHERE saved_payment_id = $saved_payment_id LIMIT 1");
- $row = mysqli_fetch_array($sql);
-
- $public_key = sanitizeInput($row['payment_provider_public_key']);
- $private_key = sanitizeInput($row['payment_provider_private_key']);
- $account_id = intval($row['payment_provider_account']);
- $expense_category_id = intval($row['payment_provider_expense_category']);
- $expense_vendor_id = intval($row['payment_provider_expense_vendor']);
- $expense_percentage_fee = floatval($row['payment_provider_expense_percentage_fee']);
- $expense_flat_fee = floatval($row['payment_provider_expense_flat_fee']);
- $payment_provider_client = sanitizeInput($row['payment_provider_client']);
- $saved_payment_method = sanitizeInput($row['saved_payment_provider_method']);
- $saved_payment_description = sanitizeInput($row['saved_payment_description']);
-
- // Sanity checks
- if (!$payment_provider_client || !$saved_payment_method) {
- flash_alert("Stripe not enabled or no client card saved", 'error');
- redirect();
- } elseif ($invoice_status !== 'Sent' && $invoice_status !== 'Viewed') {
- flash_alert("Invalid invoice state (draft/partial/paid/not billable)", 'error');
- redirect();
- } elseif ($invoice_amount == 0) {
- flash_alert("Invalid invoice amount", 'error');
- redirect();
- }
-
- // Initialize Stripe
- require_once __DIR__ . '/../../plugins/stripe-php/init.php';
- $stripe = new \Stripe\StripeClient($private_key);
-
- $balance_to_pay = round($invoice_amount, 2);
- $pi_description = "ITFlow: $client_name payment of $invoice_currency_code $balance_to_pay for $invoice_prefix$invoice_number";
-
- // Create a payment intent
- try {
- $payment_intent = $stripe->paymentIntents->create([
- 'amount' => intval($balance_to_pay * 100), // Times by 100 as Stripe expects values in cents
- 'currency' => $invoice_currency_code,
- 'customer' => $payment_provider_client,
- 'payment_method' => $saved_payment_method,
- 'off_session' => true,
- 'confirm' => true,
- 'description' => $pi_description,
- 'metadata' => [
- 'itflow_client_id' => $client_id,
- 'itflow_client_name' => $client_name,
- 'itflow_invoice_number' => $invoice_prefix . $invoice_number,
- 'itflow_invoice_id' => $invoice_id,
- ]
- ]);
-
- // Get details from PI
- $pi_id = sanitizeInput($payment_intent->id);
- $pi_date = date('Y-m-d', $payment_intent->created);
- $pi_amount_paid = floatval(($payment_intent->amount_received / 100));
- $pi_currency = strtoupper(sanitizeInput($payment_intent->currency));
- $pi_livemode = $payment_intent->livemode;
-
- } catch (Exception $e) {
- $error = $e->getMessage();
- error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number: $error");
- logApp("Stripe", "error", "Exception during PI for invoice ID $invoice_id: $error");
- }
-
- if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) {
-
- // Update Invoice Status
- mysqli_query($mysqli, "UPDATE invoices SET invoice_status = 'Paid' WHERE invoice_id = $invoice_id");
-
- // Add Payment to History
- mysqli_query($mysqli, "INSERT INTO payments SET payment_date = '$pi_date', payment_amount = $pi_amount_paid, payment_currency_code = '$pi_currency', payment_account_id = $account_id, payment_method = 'Stripe', payment_reference = 'Stripe - $pi_id', payment_invoice_id = $invoice_id");
- mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Paid', history_description = 'Online Payment added (agent)', history_invoice_id = $invoice_id");
-
- // Email receipt
- if (!empty($config_smtp_host)) {
- $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
- $body = "Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
-
- // Queue Mail
- $data = [
- [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $contact_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body,
- ]
- ];
-
- // Email the internal notification address too
- if (!empty($config_invoice_paid_notification_email)) {
- $subject = "Payment Received - $client_name - Invoice $invoice_prefix$invoice_number";
- $body = "Hello,
This is a notification that an invoice has been paid in ITFlow. Below is a copy of the receipt sent to the client:-
--------
Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
-
- $data[] = [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $config_invoice_paid_notification_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body,
- ];
- }
-
- $mail = addToMailQueue($data);
-
- // Email Logging
- $email_id = mysqli_insert_id($mysqli);
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
- logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
- }
-
- // Log info
- $extended_log_desc = '';
- if (!$pi_livemode) {
- $extended_log_desc = '(DEV MODE)';
- }
-
- // Create Stripe payment gateway fee as an expense (if configured)
- if ($expense_vendor_id > 0 && $expense_category_id > 0) {
- $gateway_fee = round($invoice_amount * $expense_percentage_fee + $expense_flat_fee, 2);
- mysqli_query($mysqli,"INSERT INTO expenses SET expense_date = '$pi_date', expense_amount = $gateway_fee, expense_currency_code = '$invoice_currency_code', expense_account_id = $account_id, expense_vendor_id = $expense_vendor_id, expense_client_id = $client_id, expense_category_id = $expense_category_id, expense_description = 'Stripe Transaction for Invoice $invoice_prefix$invoice_number In the Amount of $balance_to_pay', expense_reference = 'Stripe - $pi_id $extended_log_desc'");
- }
-
- // Notify/log
- appNotify("Invoice Paid", "Invoice $invoice_prefix$invoice_number automatically paid", "/agent/invoice.php?invoice_id=$invoice_id", $client_id);
- logAction("Invoice", "Payment", "$session_name initiated Stripe payment amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number - $pi_id $extended_log_desc", $client_id, $invoice_id);
- customAction('invoice_pay', $invoice_id);
-
- flash_alert("Payment amount " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added");
-
- redirect();
-
- } else {
- mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Payment failed', history_description = 'Stripe pay failed due to payment error', history_invoice_id = $invoice_id");
-
- logAction("Invoice", "Payment", "Failed online payment amount of invoice $invoice_prefix$invoice_number due to Stripe payment error", $client_id, $invoice_id);
- flash_alert("Payment failed", 'error');
-
- redirect();
- }
-
-}
-
-/*
-if (isset($_GET['add_payment_stripe'])) {
-
- validateCSRFToken($_GET['csrf_token']);
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $invoice_id = intval($_GET['invoice_id']);
-
- // Get invoice details
- $sql = mysqli_query($mysqli,"SELECT * FROM invoices
- LEFT JOIN clients ON invoice_client_id = client_id
- LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
- WHERE invoice_id = $invoice_id"
- );
- $row = mysqli_fetch_array($sql);
- $invoice_number = intval($row['invoice_number']);
- $invoice_status = sanitizeInput($row['invoice_status']);
- $invoice_amount = floatval($row['invoice_amount']);
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_url_key = sanitizeInput($row['invoice_url_key']);
- $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
- $client_id = intval($row['client_id']);
- $client_name = sanitizeInput($row['client_name']);
- $contact_name = sanitizeInput($row['contact_name']);
- $contact_email = sanitizeInput($row['contact_email']);
- $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
- $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
- $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
-
- // Get ITFlow company details
- $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
- $row = mysqli_fetch_array($sql);
- $company_name = sanitizeInput($row['company_name']);
- $company_country = sanitizeInput($row['company_country']);
- $company_address = sanitizeInput($row['company_address']);
- $company_city = sanitizeInput($row['company_city']);
- $company_state = sanitizeInput($row['company_state']);
- $company_zip = sanitizeInput($row['company_zip']);
- $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
- $company_email = sanitizeInput($row['company_email']);
- $company_website = sanitizeInput($row['company_website']);
-
- // Sanitize Config vars from get_settings.php
- $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
- $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
-
- // Get Client Stripe details
- $stripe_client_details = mysqli_fetch_array(mysqli_query($mysqli, "SELECT * FROM client_stripe WHERE client_id = $client_id LIMIT 1"));
- $stripe_id = sanitizeInput($stripe_client_details['stripe_id']);
- $stripe_pm = sanitizeInput($stripe_client_details['stripe_pm']);
-
- // Sanity checks
- if (!$config_stripe_enable || !$stripe_id || !$stripe_pm) {
- flash_alert("Stripe not enabled or no client card saved", 'error');
- redirect();
- } elseif ($invoice_status !== 'Sent' && $invoice_status !== 'Viewed') {
- flash_alert("Invalid invoice state (draft/partial/paid/not billable)", 'error');
- redirect();
- } elseif ($invoice_amount == 0) {
- flash_alert("Invalid invoice amount", 'error');
- redirect();
- }
-
- // Initialize Stripe
- require_once __DIR__ . '/../plugins/stripe-php/init.php';
- $stripe = new \Stripe\StripeClient($config_stripe_secret);
-
- $balance_to_pay = round($invoice_amount, 2);
- $pi_description = "ITFlow: $client_name payment of $invoice_currency_code $balance_to_pay for $invoice_prefix$invoice_number";
-
- // Create a payment intent
- try {
- $payment_intent = $stripe->paymentIntents->create([
- 'amount' => intval($balance_to_pay * 100), // Times by 100 as Stripe expects values in cents
- 'currency' => $invoice_currency_code,
- 'customer' => $stripe_id,
- 'payment_method' => $stripe_pm,
- 'off_session' => true,
- 'confirm' => true,
- 'description' => $pi_description,
- 'metadata' => [
- 'itflow_client_id' => $client_id,
- 'itflow_client_name' => $client_name,
- 'itflow_invoice_number' => $invoice_prefix . $invoice_number,
- 'itflow_invoice_id' => $invoice_id,
- ]
- ]);
-
- // Get details from PI
- $pi_id = sanitizeInput($payment_intent->id);
- $pi_date = date('Y-m-d', $payment_intent->created);
- $pi_amount_paid = floatval(($payment_intent->amount_received / 100));
- $pi_currency = strtoupper(sanitizeInput($payment_intent->currency));
- $pi_livemode = $payment_intent->livemode;
-
- } catch (Exception $e) {
- $error = $e->getMessage();
- error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number: $error");
- logApp("Stripe", "error", "Exception during PI for invoice ID $invoice_id: $error");
- }
-
- if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) {
-
- // Update Invoice Status
- mysqli_query($mysqli, "UPDATE invoices SET invoice_status = 'Paid' WHERE invoice_id = $invoice_id");
-
- // Add Payment to History
- mysqli_query($mysqli, "INSERT INTO payments SET payment_date = '$pi_date', payment_amount = $pi_amount_paid, payment_currency_code = '$pi_currency', payment_account_id = $config_stripe_account, payment_method = 'Stripe', payment_reference = 'Stripe - $pi_id', payment_invoice_id = $invoice_id");
- mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Paid', history_description = 'Online Payment added (agent)', history_invoice_id = $invoice_id");
-
- // Email receipt
- if (!empty($config_smtp_host)) {
- $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
- $body = "Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
-
- // Queue Mail
- $data = [
- [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $contact_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body,
- ]
- ];
-
- // Email the internal notification address too
- if (!empty($config_invoice_paid_notification_email)) {
- $subject = "Payment Received - $client_name - Invoice $invoice_prefix$invoice_number";
- $body = "Hello,
This is a notification that an invoice has been paid in ITFlow. Below is a copy of the receipt sent to the client:-
--------
Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
-
- $data[] = [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $config_invoice_paid_notification_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body,
- ];
- }
-
- $mail = addToMailQueue($data);
-
- // Email Logging
- $email_id = mysqli_insert_id($mysqli);
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
- logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
- }
-
- // Log info
- $extended_log_desc = '';
- if (!$pi_livemode) {
- $extended_log_desc = '(DEV MODE)';
- }
-
- // Create Stripe payment gateway fee as an expense (if configured)
- if ($config_stripe_expense_vendor > 0 && $config_stripe_expense_category > 0) {
- $gateway_fee = round($invoice_amount * $config_stripe_percentage_fee + $config_stripe_flat_fee, 2);
- mysqli_query($mysqli,"INSERT INTO expenses SET expense_date = '$pi_date', expense_amount = $gateway_fee, expense_currency_code = '$invoice_currency_code', expense_account_id = $config_stripe_account, expense_vendor_id = $config_stripe_expense_vendor, expense_client_id = $client_id, expense_category_id = $config_stripe_expense_category, expense_description = 'Stripe Transaction for Invoice $invoice_prefix$invoice_number In the Amount of $balance_to_pay', expense_reference = 'Stripe - $pi_id $extended_log_desc'");
- }
-
- // Notify/log
- appNotify("Invoice Paid", "Invoice $invoice_prefix$invoice_number automatically paid", "invoice.php?invoice_id=$invoice_id", $client_id);
- logAction("Invoice", "Payment", "$session_name initiated Stripe payment amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number - $pi_id $extended_log_desc", $client_id, $invoice_id);
- customAction('invoice_pay', $invoice_id);
-
- flash_alert("Payment amount " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added");
-
- redirect();
-
- } else {
- mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Payment failed', history_description = 'Stripe pay failed due to payment error', history_invoice_id = $invoice_id");
-
- logAction("Invoice", "Payment", "Failed online payment amount of invoice $invoice_prefix$invoice_number due to Stripe payment error", $client_id, $invoice_id);
- flash_alert("Payment failed", 'error');
-
- redirect();
- }
-
-}
-*/
-
-if (isset($_POST['add_bulk_payment'])) {
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $client_id = intval($_POST['client_id']);
- $date = sanitizeInput($_POST['date']);
- $bulk_payment_amount = floatval($_POST['amount']);
- $bulk_payment_amount_static = floatval($_POST['amount']);
- $total_account_balance = floatval($_POST['balance']);
- $account = intval($_POST['account']);
- $currency_code = sanitizeInput($_POST['currency_code']);
- $payment_method = sanitizeInput($_POST['payment_method']);
- $reference = sanitizeInput($_POST['reference']);
- $email_receipt = intval($_POST['email_receipt']);
-
- // Check if bulk_payment_amount exceeds total_account_balance
- if ($bulk_payment_amount > $total_account_balance) {
- flash_alert("Payment exceeds Client Balance.", 'error');
- redirect();
- }
-
- // Get Invoices
- $sql_invoices = "SELECT * FROM invoices
- WHERE invoice_status != 'Draft'
- AND invoice_status != 'Paid'
- AND invoice_status != 'Cancelled'
- AND invoice_client_id = $client_id
- ORDER BY invoice_number ASC";
- $result_invoices = mysqli_query($mysqli, $sql_invoices);
-
- // Loop Through Each Invoice
- while ($row = mysqli_fetch_array($result_invoices)) {
- $invoice_id = intval($row['invoice_id']);
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_amount = floatval($row['invoice_amount']);
- $invoice_url_key = sanitizeInput($row['invoice_url_key']);
- $invoice_balance_query = "SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE payment_invoice_id = $invoice_id";
- $result_amount_paid = mysqli_query($mysqli, $invoice_balance_query);
- $row_amount_paid = mysqli_fetch_array($result_amount_paid);
- $amount_paid = floatval($row_amount_paid['amount_paid']);
- $invoice_balance = $invoice_amount - $amount_paid;
-
- if ($bulk_payment_amount <= 0) {
- break; // Exit the loop if no payment amount is left
- }
-
- if ($bulk_payment_amount >= $invoice_balance) {
- $payment_amount = $invoice_balance;
- $invoice_status = "Paid";
- } else {
- $payment_amount = $bulk_payment_amount;
- $invoice_status = "Partial";
- }
-
- // Subtract the payment amount from the bulk payment amount
- $bulk_payment_amount -= $payment_amount;
-
- // Get Invoice Remain Balance
- $remaining_invoice_balance = $invoice_balance - $payment_amount;
-
- // Add Payment
- $payment_query = "INSERT INTO payments (payment_date, payment_amount, payment_currency_code, payment_account_id, payment_method, payment_reference, payment_invoice_id) VALUES ('{$date}', {$payment_amount}, '{$currency_code}', {$account}, '{$payment_method}', '{$reference}', {$invoice_id})";
- mysqli_query($mysqli, $payment_query);
- $payment_id = mysqli_insert_id($mysqli);
-
- // Update Invoice Status
- $update_invoice_query = "UPDATE invoices SET invoice_status = '{$invoice_status}' WHERE invoice_id = {$invoice_id}";
- mysqli_query($mysqli, $update_invoice_query);
-
- // Add Payment to History
- $history_description = "Payment added";
- $add_history_query = "INSERT INTO history (history_status, history_description, history_invoice_id) VALUES ('{$invoice_status}', '{$history_description}', {$invoice_id})";
- mysqli_query($mysqli, $add_history_query);
-
- // Add to Email Body Invoice Portion
- $email_body_invoices .= "
Invoice $invoice_prefix$invoice_number - Outstanding Amount: " . numfmt_format_currency($currency_format, $invoice_balance, $currency_code) . " - Payment Applied: " . numfmt_format_currency($currency_format, $payment_amount, $currency_code) . " - New Balance: " . numfmt_format_currency($currency_format, $remaining_invoice_balance, $currency_code);
-
- customAction('invoice_pay', $invoice_id);
-
- } // End Invoice Loop
-
- // Send Email
- if ($email_receipt == 1) {
-
- // Get Client / Contact Info
- $sql_client = mysqli_query($mysqli,"SELECT * FROM clients
- LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id
- AND contact_primary = 1
- WHERE client_id = $client_id"
- );
-
- $row = mysqli_fetch_array($sql_client);
- $client_name = sanitizeInput($row['client_name']);
- $contact_name = sanitizeInput($row['contact_name']);
- $contact_email = sanitizeInput($row['contact_email']);
-
- $sql_company = mysqli_query($mysqli,"SELECT company_name, company_phone, company_phone_country_code FROM companies WHERE company_id = 1");
- $row = mysqli_fetch_array($sql_company);
-
- $company_name = sanitizeInput($row['company_name']);
- $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
-
- // Sanitize Config vars from get_settings.php
- $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
- $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
-
- $subject = "Payment Received - Multiple Invoices";
- $body = "Hello $contact_name,
Thank you for your payment of " . numfmt_format_currency($currency_format, $bulk_payment_amount_static, $currency_code) . " We\'ve applied your payment to the following invoices, updating their balances accordingly:
$email_body_invoices
We appreciate your continued business!
Sincerely,
$company_name - Billing
$config_invoice_from_email
$company_phone";
-
- // Queue Mail
- mysqli_query($mysqli, "INSERT INTO email_queue SET email_recipient = '$contact_email', email_recipient_name = '$contact_name', email_from = '$config_invoice_from_email', email_from_name = '$config_invoice_from_name', email_subject = '$subject', email_content = '$body'");
-
- // Get Email ID for reference
- $email_id = mysqli_insert_id($mysqli);
-
- // Email Logging
- logAction("Payment", "Email", "Bulk Payment receipt for multiple Invoices queued to $contact_email Email ID: $email_id", $client_id);
-
- $alert_message .= "Email receipt queued and ";
-
- } // End Email
-
- logAction("Invoice", "Payment", "Bulk Payment amount of " . numfmt_format_currency($currency_format, $bulk_payment_amount_static, $currency_code) . " applied to multiple invoices", $client_id);
-
- flash_alert("$alert_message Bulk Payment added");
-
- redirect();
-
-}
-
-if (isset($_GET['delete_payment'])) {
-
- enforceUserPermission('module_sales', 2);
- enforceUserPermission('module_financial', 2);
-
- $payment_id = intval($_GET['delete_payment']);
-
- $sql = mysqli_query($mysqli,"SELECT * FROM payments WHERE payment_id = $payment_id");
- $row = mysqli_fetch_array($sql);
- $invoice_id = intval($row['payment_invoice_id']);
- $deleted_payment_amount = floatval($row['payment_amount']);
-
- //Add up all the payments for the invoice and get the total amount paid to the invoice
- $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments_amount FROM payments WHERE payment_invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql_total_payments_amount);
- $total_payments_amount = floatval($row['total_payments_amount']);
-
- // Get the invoice total and details
- $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_id = $invoice_id");
- $row = mysqli_fetch_array($sql);
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $client_id = intval($row['invoice_client_id']);
- $invoice_amount = floatval($row['invoice_amount']);
-
- //Calculate the Invoice balance
- $invoice_balance = $invoice_amount - $total_payments_amount + $deleted_payment_amount;
-
- //Determine if invoice has been paid
- if ($invoice_balance == 0) {
- $invoice_status = "Paid";
- } else {
- $invoice_status = "Partial";
- }
-
- //Update Invoice Status
- mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
-
- //Add Payment to History
- mysqli_query($mysqli,"INSERT INTO history SET history_status = '$invoice_status', history_description = 'Payment deleted', history_invoice_id = $invoice_id");
-
- mysqli_query($mysqli,"DELETE FROM payments WHERE payment_id = $payment_id");
-
- logAction("Invoice", "Edit", "$session_name deleted Payment on Invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
-
- flash_alert("Payment deleted", 'error');
- if ($config_stripe_enable) {
- flash_alert("Payment deleted - Stripe payments must be manually refunded in Stripe", 'error');
- }
-
- redirect();
-
-}
-
if (isset($_GET['email_invoice'])) {
$invoice_id = intval($_GET['email_invoice']);
@@ -1722,212 +622,6 @@ if (isset($_GET['email_invoice'])) {
}
-if (isset($_GET['force_recurring'])) {
-
- $recurring_invoice_id = intval($_GET['force_recurring']);
-
- $sql_recurring_invoices = mysqli_query($mysqli,"SELECT * FROM recurring_invoices, clients WHERE client_id = recurring_invoice_client_id AND recurring_invoice_id = $recurring_invoice_id");
-
- $row = mysqli_fetch_array($sql_recurring_invoices);
- $recurring_invoice_id = intval($row['recurring_invoice_id']);
- $recurring_invoice_scope = sanitizeInput($row['recurring_invoice_scope']);
- $recurring_invoice_frequency = sanitizeInput($row['recurring_invoice_frequency']);
- $recurring_invoice_status = sanitizeInput($row['recurring_invoice_status']);
- $recurring_invoice_last_sent = sanitizeInput($row['recurring_invoice_last_sent']);
- $recurring_invoice_next_date = sanitizeInput($row['recurring_invoice_next_date']);
- $recurring_invoice_discount_amount = floatval($row['recurring_invoice_discount_amount']);
- $recurring_invoice_amount = floatval($row['recurring_invoice_amount']);
- $recurring_invoice_currency_code = sanitizeInput($row['recurring_invoice_currency_code']);
- $recurring_invoice_note = sanitizeInput($row['recurring_invoice_note']);
- $category_id = intval($row['recurring_invoice_category_id']);
- $client_id = intval($row['recurring_invoice_client_id']);
- $client_net_terms = intval($row['client_net_terms']);
-
- //Get the last Invoice Number and add 1 for the new invoice number
- $new_invoice_number = $config_invoice_next_number;
- $new_config_invoice_next_number = $config_invoice_next_number + 1;
- mysqli_query($mysqli,"UPDATE settings SET config_invoice_next_number = $new_config_invoice_next_number WHERE company_id = 1");
-
- //Generate a unique URL key for clients to access
- $url_key = randomString(156);
-
- mysqli_query($mysqli,"INSERT INTO invoices SET invoice_prefix = '$config_invoice_prefix', invoice_number = $new_invoice_number, invoice_scope = '$recurring_invoice_scope', invoice_date = CURDATE(), invoice_due = DATE_ADD(CURDATE(), INTERVAL $client_net_terms day), invoice_discount_amount = $recurring_invoice_discount_amount, invoice_amount = $recurring_invoice_amount, invoice_currency_code = '$recurring_invoice_currency_code', invoice_note = '$recurring_invoice_note', invoice_category_id = $category_id, invoice_status = 'Sent', invoice_url_key = '$url_key', invoice_recurring_invoice_id = $recurring_invoice_id, invoice_client_id = $client_id");
-
- $new_invoice_id = mysqli_insert_id($mysqli);
-
- //Copy Items from original invoice to new invoice
- $sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id ORDER BY item_id ASC");
-
- while($row = mysqli_fetch_array($sql_invoice_items)) {
- $item_id = intval($row['item_id']);
- $item_name = sanitizeInput($row['item_name']);
- $item_description = sanitizeInput($row['item_description']);
- $item_quantity = floatval($row['item_quantity']);
- $item_price = floatval($row['item_price']);
- $item_subtotal = floatval($row['item_subtotal']);
- $item_order = intval($row['item_order']);
- $tax_id = intval($row['item_tax_id']);
-
- //Recalculate Item Tax since Tax percents can change.
- if ($tax_id > 0) {
- $sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE tax_id = $tax_id");
- $row = mysqli_fetch_array($sql);
- $tax_percent = floatval($row['tax_percent']);
- $item_tax_amount = $item_subtotal * $tax_percent / 100;
- } else {
- $item_tax_amount = 0;
- }
-
- $item_total = $item_subtotal + $item_tax_amount;
-
- //Update Recurring Items with new tax
- mysqli_query($mysqli,"UPDATE invoice_items SET item_tax = $item_tax_amount, item_total = $item_total, item_tax_id = $tax_id, item_order = $item_order WHERE item_id = $item_id");
-
- mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$item_name', item_description = '$item_description', item_quantity = $item_quantity, item_price = $item_price, item_subtotal = $item_subtotal, item_tax = $item_tax_amount, item_total = $item_total, item_tax_id = $tax_id, item_invoice_id = $new_invoice_id");
- }
-
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Invoice Generated from Recurring!', history_invoice_id = $new_invoice_id");
-
- //Update Recurring Balances by tallying up recurring items also update recurring dates
- $sql_recurring_invoice_total = mysqli_query($mysqli,"SELECT SUM(item_total) AS recurring_invoice_total FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql_recurring_invoice_total);
- $new_recurring_invoice_amount = floatval($row['recurring_invoice_total']) - $recurring_invoice_discount_amount;
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $new_recurring_invoice_amount, recurring_invoice_last_sent = CURDATE(), recurring_invoice_next_date = DATE_ADD(CURDATE(), INTERVAL 1 $recurring_invoice_frequency) WHERE recurring_invoice_id = $recurring_invoice_id");
-
- //Also update the newly created invoice with the new amounts
- mysqli_query($mysqli,"UPDATE invoices SET invoice_amount = $new_recurring_invoice_amount WHERE invoice_id = $new_invoice_id");
-
- if ($config_recurring_auto_send_invoice == 1) {
- $sql = mysqli_query($mysqli,"SELECT * FROM invoices
- LEFT JOIN clients ON invoice_client_id = client_id
- LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
- WHERE invoice_id = $new_invoice_id"
- );
- $row = mysqli_fetch_array($sql);
-
- $invoice_prefix = sanitizeInput($row['invoice_prefix']);
- $invoice_number = intval($row['invoice_number']);
- $invoice_scope = sanitizeInput($row['invoice_scope']);
- $invoice_date = sanitizeInput($row['invoice_date']);
- $invoice_due = sanitizeInput($row['invoice_due']);
- $invoice_amount = floatval($row['invoice_amount']);
- $invoice_url_key = sanitizeInput($row['invoice_url_key']);
- $client_id = intval($row['client_id']);
- $client_name = sanitizeInput($row['client_name']);
- $contact_name = sanitizeInput($row['contact_name']);
- $contact_email = sanitizeInput($row['contact_email']);
- $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
- $contact_extension = intval($row['contact_extension']);
- $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
-
- $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
- $row = mysqli_fetch_array($sql);
- $company_name = sanitizeInput($row['company_name']);
- $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
- $company_email = sanitizeInput($row['company_email']);
- $company_website = sanitizeInput($row['company_website']);
-
- // Sanitize Config Vars
- $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
- $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
-
- // Email to client
-
- $subject = "Invoice $invoice_prefix$invoice_number";
- $body = "Hello $contact_name,
An invoice regarding \"$invoice_scope\" has been generated. Please view the details below.
Invoice: $invoice_prefix$invoice_number
Issue Date: $invoice_date
Total: $$invoice_amount
Due Date: $invoice_due
To view your invoice, please click here.
--
$company_name - Billing
$company_phone";
-
-
- $data = [
- [
- 'from' => $config_invoice_from_email,
- 'from_name' => $config_invoice_from_name,
- 'recipient' => $contact_email,
- 'recipient_name' => $contact_name,
- 'subject' => $subject,
- 'body' => $body
- ]
- ];
- $mail = addToMailQueue($data);
-
- if ($mail === true) {
- // Add send history
- mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Force Emailed Invoice!', history_invoice_id = $new_invoice_id");
-
- // Update Invoice Status to Sent
- mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent', invoice_client_id = $client_id WHERE invoice_id = $new_invoice_id");
-
- } else {
- // Error reporting
- appNotify("Mail", "Failed to send email to $contact_email");
-
- logAction("Mail", "Error", "Failed to send email to $contact_email regarding $subject. $mail");
-
- }
-
- } //End Recurring Invoices Loop
-
- logAction("Invoice", "Create", "$session_name forced recurring invoice into an invoice", $client_id, $new_invoice_id);
-
- customAction('invoice_create', $new_invoice_id);
-
- flash_alert("Recurring Invoice Forced");
-
- redirect();
-
-}
-
-if (isset($_POST['set_recurring_payment'])) {
-
- $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
- $saved_payment_id = intval($_POST['saved_payment_id']);
-
- // Get Recurring Invoice Info for logging and alerting
- $sql = mysqli_query($mysqli, "SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $client_id = intval($row['recurring_invoice_client_id']);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $recurring_invoice_currency_code = sanitizeInput($row['recurring_invoice_currency_code']);
- $recurring_invoice_amount = floatval($row['recurring_invoice_amount']);
-
- if ($saved_payment_id) {
-
- // Get Payment provider and method
- $sql = mysqli_query($mysqli, "
- SELECT * FROM payment_providers
- LEFT JOIN client_saved_payment_methods ON saved_payment_provider_id = payment_provider_id
- WHERE saved_payment_id = $saved_payment_id
- ");
-
- $row = mysqli_fetch_array($sql);
-
- $provider_id = intval($row['payment_provider_id']);
- $provider_name = sanitizeInput($row['payment_provider_name']);
- $account_id = intval($row['payment_provider_account']);
- $saved_payment_description = sanitizeInput($row['saved_payment_description']);
-
- mysqli_query($mysqli, "DELETE FROM recurring_payments WHERE recurring_payment_recurring_invoice_id = $recurring_invoice_id");
- mysqli_query($mysqli,"INSERT INTO recurring_payments SET recurring_payment_currency_code = '$recurring_invoice_currency_code', recurring_payment_account_id = $account_id, recurring_payment_method = 'Credit Card', recurring_payment_recurring_invoice_id = $recurring_invoice_id, recurring_payment_saved_payment_id = $saved_payment_id");
- // Get Payment ID for reference
- $recurring_payment_id = mysqli_insert_id($mysqli);
-
- logAction("Recurring Invoice", "Auto Payment", "$session_name created Auto Pay for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number in the amount of " . numfmt_format_currency($currency_format, $recurring_invoice_amount, $recurring_invoice_currency_code), $client_id, $recurring_invoice_id);
-
- flash_alert("Automatic Payment $saved_payment_description enabled for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number");
- } else {
- // Delete
- mysqli_query($mysqli, "DELETE FROM recurring_payments WHERE recurring_payment_recurring_invoice_id = $recurring_invoice_id");
-
- logAction("Recurring Invoice", "Auto Payment", "$session_name removed Auto Pay for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number in the amount of " . numfmt_format_currency($currency_format, $recurring_invoice_amount, $recurring_invoice_currency_code), $client_id, $recurring_invoice_id);
-
- flash_alert("Automatic Payment Disabled for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number", 'error');
- }
-
- redirect();
-
-}
-
if (isset($_POST['export_invoices_csv'])) {
enforceUserPermission('module_sales');
@@ -1993,135 +687,6 @@ if (isset($_POST['export_invoices_csv'])) {
}
-if (isset($_POST['export_client_recurring_invoice_csv'])) {
-
- $client_id = intval($_POST['client_id']);
-
- //get records from database
- $sql = mysqli_query($mysqli,"SELECT client_name FROM clients WHERE client_id = $client_id");
- $row = mysqli_fetch_array($sql);
-
- $client_name = $row['client_name'];
-
- $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_client_id = $client_id ORDER BY recurring_invoice_number ASC");
-
- $num_rows = mysqli_num_rows($sql);
-
- if ($num_rows > 0) {
- $delimiter = ",";
- $filename = $client_name . "-Recurring Invoices-" . date('Y-m-d') . ".csv";
-
- //create a file pointer
- $f = fopen('php://memory', 'w');
-
- //set column headers
- $fields = array('Recurring Number', 'Scope', 'Amount', 'Frequency', 'Date Created');
- fputcsv($f, $fields, $delimiter);
-
- //output each row of the data, format line as csv and write to file pointer
- while($row = $sql->fetch_assoc()) {
- $lineData = array($row['recurring_invoice_prefix'] . $row['recurring_invoice_number'], $row['recurring_invoice_scope'], $row['recurring_invoice_amount'], ucwords($row['recurring_invoice_frequency'] . "ly"), $row['recurring_invoice_created_at']);
- fputcsv($f, $lineData, $delimiter);
- }
-
- //move back to beginning of file
- fseek($f, 0);
-
- //set headers to download file rather than displayed
- header('Content-Type: text/csv');
- header('Content-Disposition: attachment; filename="' . $filename . '";');
-
- //output all remaining data on a file pointer
- fpassthru($f);
- }
-
- logAction("Recurring Invoice", "Export", "$session_name exported $num_rows recurring invoices to CSV file");
-
- exit;
-
-}
-
-if (isset($_POST['export_payments_csv'])) {
-
- if (isset($_POST['client_id'])) {
- $client_id = intval($_POST['client_id']);
- $client_query = "AND invoice_client_id = $client_id";
- $client_name = getFieldById('clients', $client_id, 'client_name');
- $file_name_prepend = "$client_name-";
- } else {
- $client_query = '';
- $client_name = '';
- $file_name_prepend = "$session_company_name-";
- }
-
- $sql = mysqli_query($mysqli,"SELECT * FROM payments, invoices WHERE payment_invoice_id = invoice_id $client_query ORDER BY payment_date ASC");
-
- $num_rows = mysqli_num_rows($sql);
-
- if ($num_rows > 0) {
- $delimiter = ",";
- $enclosure = '"';
- $escape = '\\'; // backslash
- $filename = sanitize_filename($file_name_prepend . "Payments-" . date('Y-m-d_H-i-s') . ".csv");
-
- //create a file pointer
- $f = fopen('php://memory', 'w');
-
- //set column headers
- $fields = array('Payment Date', 'Invoice Date', 'Invoice Number', 'Invoice Amount', 'Payment Amount', 'Payment Method', 'Referrence');
- fputcsv($f, $fields, $delimiter, $enclosure, $escape);
-
- //output each row of the data, format line as csv and write to file pointer
- while($row = $sql->fetch_assoc()){
- $lineData = array($row['payment_date'], $row['invoice_date'], $row['invoice_prefix'] . $row['invoice_number'], $row['invoice_amount'], $row['payment_amount'], $row['payment_method'], $row['payment_reference']);
- fputcsv($f, $lineData, $delimiter, $enclosure, $escape);
- }
-
- //move back to beginning of file
- fseek($f, 0);
-
- //set headers to download file rather than displayed
- header('Content-Type: text/csv');
- header('Content-Disposition: attachment; filename="' . $filename . '";');
-
- //output all remaining data on a file pointer
- fpassthru($f);
- }
-
- logAction("Payments", "Export", "$session_name exported $num_rows payments to CSV file");
-
- exit;
-
-}
-
-if (isset($_GET['recurring_invoice_email_notify'])) {
-
- $recurring_invoice_email_notify = intval($_GET['recurring_invoice_email_notify']);
- $recurring_invoice_id = intval($_GET['recurring_invoice_id']);
-
- $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
- $row = mysqli_fetch_array($sql);
- $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
- $recurring_invoice_number = intval($row['recurring_invoice_number']);
- $client_id = intval($row['recurring_invoice_client_id']);
-
- mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_email_notify = $recurring_invoice_email_notify WHERE recurring_invoice_id = $recurring_invoice_id");
-
- // Wording
- if ($recurring_invoice_email_notify) {
- $notify_wording = "On";
- } else {
- $notify_wording = "Off";
- }
-
- logAction("Recurring Invoice", "Edit", "$session_name turned $notify_wording Email Notifications for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
-
- flash_alert("Email Notifications $notify_wording", 'error');
-
- redirect();
-
-}
-
if (isset($_POST['link_invoice_to_ticket'])) {
$invoice_id = intval($_POST['invoice_id']);
diff --git a/agent/post/payment.php b/agent/post/payment.php
new file mode 100644
index 00000000..0b799ed1
--- /dev/null
+++ b/agent/post/payment.php
@@ -0,0 +1,901 @@
+ $balance) {
+ flash_alert("Payment can not be more than the balance", 'error');
+ redirect();
+ } else {
+ mysqli_query($mysqli,"INSERT INTO payments SET payment_date = '$date', payment_amount = $amount, payment_currency_code = '$currency_code', payment_account_id = $account, payment_method = '$payment_method', payment_reference = '$reference', payment_invoice_id = $invoice_id");
+
+ // Get Payment ID for reference
+ $payment_id = mysqli_insert_id($mysqli);
+
+ //Add up all the payments for the invoice and get the total amount paid to the invoice
+ $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS payments_amount FROM payments WHERE payment_invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql_total_payments_amount);
+ $total_payments_amount = floatval($row['payments_amount']);
+
+ //Get the invoice total
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoices
+ LEFT JOIN clients ON invoice_client_id = client_id
+ LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
+ WHERE invoice_id = $invoice_id"
+ );
+
+ $row = mysqli_fetch_array($sql);
+ $invoice_amount = floatval($row['invoice_amount']);
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_url_key = sanitizeInput($row['invoice_url_key']);
+ $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
+ $client_id = intval($row['client_id']);
+ $client_name = sanitizeInput($row['client_name']);
+ $contact_name = sanitizeInput($row['contact_name']);
+ $contact_email = sanitizeInput($row['contact_email']);
+ $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
+ $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
+ $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
+ $row = mysqli_fetch_array($sql);
+
+ $company_name = sanitizeInput($row['company_name']);
+ $company_country = sanitizeInput($row['company_country']);
+ $company_address = sanitizeInput($row['company_address']);
+ $company_city = sanitizeInput($row['company_city']);
+ $company_state = sanitizeInput($row['company_state']);
+ $company_zip = sanitizeInput($row['company_zip']);
+ $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
+ $company_email = sanitizeInput($row['company_email']);
+ $company_website = sanitizeInput($row['company_website']);
+ $company_logo = sanitizeInput($row['company_logo']);
+
+ // Sanitize Config vars from get_settings.php
+ $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
+ $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
+
+ //Calculate the Invoice balance
+ $invoice_balance = $invoice_amount - $total_payments_amount;
+
+ $email_data = [];
+
+ //Determine if invoice has been paid then set the status accordingly
+ if ($invoice_balance == 0) {
+
+ $invoice_status = "Paid";
+
+ if ($email_receipt == 1) {
+
+ $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello $contact_name,
We have received your payment in full for the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Payment Method: $payment_method
Payment Reference: $reference
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
+
+ // Queue Mail
+ $email = [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $contact_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body
+ ];
+
+ $email_data[] = $email;
+
+ // Add email to queue
+ if (!empty($email)) {
+ addToMailQueue($email_data);
+ }
+
+ // Get Email ID for reference
+ $email_id = mysqli_insert_id($mysqli);
+
+ // Email Logging
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
+ logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
+
+ }
+
+ } else {
+
+ $invoice_status = "Partial";
+
+ if ($email_receipt == 1) {
+
+ $subject = "Partial Payment Received - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello $contact_name,
We have received partial payment in the amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " and it has been applied to invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . "
Payment Method: $payment_method
Payment Reference: $reference
Invoice Balance: " . numfmt_format_currency($currency_format, $invoice_balance, $invoice_currency_code) . "
Thank you for your business!
~
$company_name - Billing
$config_invoice_from_email
$company_phone";
+
+ // Queue Mail
+ $email = [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $contact_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body
+ ];
+
+ $email_data[] = $email;
+
+ // Add email to queue
+ if (!empty($email)) {
+ addToMailQueue($email_data);
+ }
+
+ // Get Email ID for reference
+ $email_id = mysqli_insert_id($mysqli);
+
+ // Email Logging
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
+ logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
+
+ }
+
+ }
+
+ //Update Invoice Status
+ mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
+
+ //Add Payment to History
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = '$invoice_status', history_description = 'Payment added', history_invoice_id = $invoice_id");
+
+ logAction("Invoice", "Payment", "Payment amount of " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
+
+ customAction('invoice_pay', $invoice_id);
+
+ flash_alert("Payment amount " . numfmt_format_currency($currency_format, $amount, $invoice_currency_code) . " added");
+
+ redirect();
+
+ }
+
+}
+
+/*
+Apply Credit Not ready for use 2025-08-27 - JQ
+
+if (isset($_POST['apply_credit'])) {
+
+ enforceUserPermission('module_sales', 2);
+ enforceUserPermission('module_financial', 2);
+
+ $invoice_id = intval($_POST['invoice_id']);
+ $credit_amount_applied = floatval($_POST['credit_amount_applied']);
+
+ $sql = mysqli_query($mysqli, "SELECT * FROM invoices LEFT JOIN clients ON invoice_client_id = client_id WHERE invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql);
+
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_status = sanitizeInput($row['invoice_status']);
+ $invoice_credit_amount = floatval($row['invoice_credit_amount']);
+ $invoice_amount = floatval('invoice_amount');
+ $client_id = intval($row['invoice_client_id']);
+
+ // Get Credit Balance
+ $sql_credit_balance = mysqli_query($mysqli, "SELECT SUM(credit_amount) AS credit_balance FROM credits WHERE credit_client_id = $client_id");
+ $row = mysqli_fetch_array($sql_credit_balance);
+
+ $credit_balance = floatval($row['credit_balance']);
+
+ // Get Invoice Balance
+ $sql_amount_paid = mysqli_query($mysqli, "SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE payment_invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql_amount_paid);
+ $amount_paid = floatval($row['amount_paid']);
+
+ $invoice_balance = $invoice_amount - $amount_paid;
+
+ // Get Credit Tally applied to invoice
+ $sql_credit_tally = mysqli_query($mysqli, "SELECT SUM(credit_tally) AS credit_balance FROM credits WHERE credit_invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql_credit_tally);
+
+ $credit_tally = floatval($row['credit_tally']);
+
+ // Check to see if amount entered is greater than the balance of the invoice
+ if ($credit_amount_applied > $invoice_balance) {
+ flash_alert("Credit can not be more than the balance", 'alert');
+ redirect();
+ }
+
+ // Check to see if amount entered is greater than the credit balance
+ if ($credit_amount_applied > $credit_balance) {
+ flash_alert("Credit can not be more than the available credit", 'alert');
+ redirect();
+ }
+
+ // Insert a new credit usage record linked to the invoice
+ mysqli_query($mysqli, "
+ INSERT INTO credits SET
+ credit_amount = -$amount,
+ credit_type = 'usage',
+ credit_created_by = $session_user_id,
+ credit_client_id = $client_id,
+ credit_invoice_id = $invoice_id
+ ");
+
+ $new_invoice_amount = $invoice_amount - $credit_amount_applied;
+
+ // Calculate updated invoice credit sum
+ $result = mysqli_query($mysqli, "
+ SELECT SUM(credit_amount) AS credit_total
+ FROM credits
+ WHERE credit_invoice_id = $invoice_id
+ ");
+ $total_credit_applied = floatval(mysqli_fetch_assoc($result)['credit_total']);
+
+ // Get invoice amount
+ $invoice_amount = floatval(getFieldByID('invoices', $invoice_id, 'invoice_amount'));
+
+ // Determine new status
+ $invoice_due = $invoice_amount + $total_credit_applied;
+ $invoice_status = ($invoice_due <= 0) ? 'Paid' : 'Partial';
+
+ // Update the invoice credit amount
+ mysqli_query($mysqli, "
+ UPDATE invoices
+ SET invoice_credit_amount = $total_credit_applied
+ WHERE invoice_id = $invoice_id
+ ");
+
+ // Update invoice status only (not invoice_credit_amount)
+ mysqli_query($mysqli, "UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
+
+ // Log credit application in history
+ mysqli_query($mysqli, "
+ INSERT INTO history SET
+ history_status = '$invoice_status',
+ history_description = 'Credit applied',
+ history_invoice_id = $invoice_id
+ ");
+
+ logAction("Invoice", "Payment", "Credit " . numfmt_format_currency($currency_format, $amount, $session_company_currency) . " applied to invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
+
+ customAction('invoice_pay', $invoice_id);
+
+ flash_alert("Credit amount " . numfmt_format_currency($currency_format, $amount, $session_company_currency) . " applied");
+
+ redirect();
+
+}
+
+*/
+
+if (isset($_POST['add_payment_stripe'])) {
+
+ validateCSRFToken($_POST['csrf_token']);
+
+ enforceUserPermission('module_sales', 2);
+ enforceUserPermission('module_financial', 2);
+
+ $invoice_id = intval($_POST['invoice_id']);
+ $saved_payment_id = intval($_POST['saved_payment_id']);
+
+ // Get invoice details
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoices
+ LEFT JOIN clients ON invoice_client_id = client_id
+ LEFT JOIN contacts ON client_id = contact_client_id AND contact_primary = 1
+ WHERE invoice_id = $invoice_id"
+ );
+ $row = mysqli_fetch_array($sql);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_status = sanitizeInput($row['invoice_status']);
+ $invoice_amount = floatval($row['invoice_amount']);
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_url_key = sanitizeInput($row['invoice_url_key']);
+ $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
+ $client_id = intval($row['client_id']);
+ $client_name = sanitizeInput($row['client_name']);
+ $contact_name = sanitizeInput($row['contact_name']);
+ $contact_email = sanitizeInput($row['contact_email']);
+ $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
+ $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
+ $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
+
+ // Get ITFlow company details
+ $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
+ $row = mysqli_fetch_array($sql);
+ $company_name = sanitizeInput($row['company_name']);
+ $company_country = sanitizeInput($row['company_country']);
+ $company_address = sanitizeInput($row['company_address']);
+ $company_city = sanitizeInput($row['company_city']);
+ $company_state = sanitizeInput($row['company_state']);
+ $company_zip = sanitizeInput($row['company_zip']);
+ $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
+ $company_email = sanitizeInput($row['company_email']);
+ $company_website = sanitizeInput($row['company_website']);
+
+ // Sanitize Config vars from get_settings.php
+ $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
+ $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
+
+ // Get Client Payment Details
+ $sql = mysqli_query($mysqli, "SELECT * FROM client_saved_payment_methods LEFT JOIN payment_providers ON saved_payment_provider_id = payment_provider_id LEFT JOIN client_payment_provider ON saved_payment_client_id = client_id WHERE saved_payment_id = $saved_payment_id LIMIT 1");
+ $row = mysqli_fetch_array($sql);
+
+ $public_key = sanitizeInput($row['payment_provider_public_key']);
+ $private_key = sanitizeInput($row['payment_provider_private_key']);
+ $account_id = intval($row['payment_provider_account']);
+ $expense_category_id = intval($row['payment_provider_expense_category']);
+ $expense_vendor_id = intval($row['payment_provider_expense_vendor']);
+ $expense_percentage_fee = floatval($row['payment_provider_expense_percentage_fee']);
+ $expense_flat_fee = floatval($row['payment_provider_expense_flat_fee']);
+ $payment_provider_client = sanitizeInput($row['payment_provider_client']);
+ $saved_payment_method = sanitizeInput($row['saved_payment_provider_method']);
+ $saved_payment_description = sanitizeInput($row['saved_payment_description']);
+
+ // Sanity checks
+ if (!$payment_provider_client || !$saved_payment_method) {
+ flash_alert("Stripe not enabled or no client card saved", 'error');
+ redirect();
+ } elseif ($invoice_status !== 'Sent' && $invoice_status !== 'Viewed') {
+ flash_alert("Invalid invoice state (draft/partial/paid/not billable)", 'error');
+ redirect();
+ } elseif ($invoice_amount == 0) {
+ flash_alert("Invalid invoice amount", 'error');
+ redirect();
+ }
+
+ // Initialize Stripe
+ require_once __DIR__ . '/../../plugins/stripe-php/init.php';
+ $stripe = new \Stripe\StripeClient($private_key);
+
+ $balance_to_pay = round($invoice_amount, 2);
+ $pi_description = "ITFlow: $client_name payment of $invoice_currency_code $balance_to_pay for $invoice_prefix$invoice_number";
+
+ // Create a payment intent
+ try {
+ $payment_intent = $stripe->paymentIntents->create([
+ 'amount' => intval($balance_to_pay * 100), // Times by 100 as Stripe expects values in cents
+ 'currency' => $invoice_currency_code,
+ 'customer' => $payment_provider_client,
+ 'payment_method' => $saved_payment_method,
+ 'off_session' => true,
+ 'confirm' => true,
+ 'description' => $pi_description,
+ 'metadata' => [
+ 'itflow_client_id' => $client_id,
+ 'itflow_client_name' => $client_name,
+ 'itflow_invoice_number' => $invoice_prefix . $invoice_number,
+ 'itflow_invoice_id' => $invoice_id,
+ ]
+ ]);
+
+ // Get details from PI
+ $pi_id = sanitizeInput($payment_intent->id);
+ $pi_date = date('Y-m-d', $payment_intent->created);
+ $pi_amount_paid = floatval(($payment_intent->amount_received / 100));
+ $pi_currency = strtoupper(sanitizeInput($payment_intent->currency));
+ $pi_livemode = $payment_intent->livemode;
+
+ } catch (Exception $e) {
+ $error = $e->getMessage();
+ error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number: $error");
+ logApp("Stripe", "error", "Exception during PI for invoice ID $invoice_id: $error");
+ }
+
+ if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) {
+
+ // Update Invoice Status
+ mysqli_query($mysqli, "UPDATE invoices SET invoice_status = 'Paid' WHERE invoice_id = $invoice_id");
+
+ // Add Payment to History
+ mysqli_query($mysqli, "INSERT INTO payments SET payment_date = '$pi_date', payment_amount = $pi_amount_paid, payment_currency_code = '$pi_currency', payment_account_id = $account_id, payment_method = 'Stripe', payment_reference = 'Stripe - $pi_id', payment_invoice_id = $invoice_id");
+ mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Paid', history_description = 'Online Payment added (agent)', history_invoice_id = $invoice_id");
+
+ // Email receipt
+ if (!empty($config_smtp_host)) {
+ $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
+
+ // Queue Mail
+ $data = [
+ [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $contact_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body,
+ ]
+ ];
+
+ // Email the internal notification address too
+ if (!empty($config_invoice_paid_notification_email)) {
+ $subject = "Payment Received - $client_name - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello,
This is a notification that an invoice has been paid in ITFlow. Below is a copy of the receipt sent to the client:-
--------
Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
+
+ $data[] = [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $config_invoice_paid_notification_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body,
+ ];
+ }
+
+ $mail = addToMailQueue($data);
+
+ // Email Logging
+ $email_id = mysqli_insert_id($mysqli);
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
+ logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
+ }
+
+ // Log info
+ $extended_log_desc = '';
+ if (!$pi_livemode) {
+ $extended_log_desc = '(DEV MODE)';
+ }
+
+ // Create Stripe payment gateway fee as an expense (if configured)
+ if ($expense_vendor_id > 0 && $expense_category_id > 0) {
+ $gateway_fee = round($invoice_amount * $expense_percentage_fee + $expense_flat_fee, 2);
+ mysqli_query($mysqli,"INSERT INTO expenses SET expense_date = '$pi_date', expense_amount = $gateway_fee, expense_currency_code = '$invoice_currency_code', expense_account_id = $account_id, expense_vendor_id = $expense_vendor_id, expense_client_id = $client_id, expense_category_id = $expense_category_id, expense_description = 'Stripe Transaction for Invoice $invoice_prefix$invoice_number In the Amount of $balance_to_pay', expense_reference = 'Stripe - $pi_id $extended_log_desc'");
+ }
+
+ // Notify/log
+ appNotify("Invoice Paid", "Invoice $invoice_prefix$invoice_number automatically paid", "/agent/invoice.php?invoice_id=$invoice_id", $client_id);
+ logAction("Invoice", "Payment", "$session_name initiated Stripe payment amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number - $pi_id $extended_log_desc", $client_id, $invoice_id);
+ customAction('invoice_pay', $invoice_id);
+
+ flash_alert("Payment amount " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added");
+
+ redirect();
+
+ } else {
+ mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Payment failed', history_description = 'Stripe pay failed due to payment error', history_invoice_id = $invoice_id");
+
+ logAction("Invoice", "Payment", "Failed online payment amount of invoice $invoice_prefix$invoice_number due to Stripe payment error", $client_id, $invoice_id);
+ flash_alert("Payment failed", 'error');
+
+ redirect();
+ }
+
+}
+
+/*
+if (isset($_GET['add_payment_stripe'])) {
+
+ validateCSRFToken($_GET['csrf_token']);
+
+ enforceUserPermission('module_sales', 2);
+ enforceUserPermission('module_financial', 2);
+
+ $invoice_id = intval($_GET['invoice_id']);
+
+ // Get invoice details
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoices
+ LEFT JOIN clients ON invoice_client_id = client_id
+ LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
+ WHERE invoice_id = $invoice_id"
+ );
+ $row = mysqli_fetch_array($sql);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_status = sanitizeInput($row['invoice_status']);
+ $invoice_amount = floatval($row['invoice_amount']);
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_url_key = sanitizeInput($row['invoice_url_key']);
+ $invoice_currency_code = sanitizeInput($row['invoice_currency_code']);
+ $client_id = intval($row['client_id']);
+ $client_name = sanitizeInput($row['client_name']);
+ $contact_name = sanitizeInput($row['contact_name']);
+ $contact_email = sanitizeInput($row['contact_email']);
+ $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
+ $contact_extension = preg_replace("/[^0-9]/", '',$row['contact_extension']);
+ $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
+
+ // Get ITFlow company details
+ $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
+ $row = mysqli_fetch_array($sql);
+ $company_name = sanitizeInput($row['company_name']);
+ $company_country = sanitizeInput($row['company_country']);
+ $company_address = sanitizeInput($row['company_address']);
+ $company_city = sanitizeInput($row['company_city']);
+ $company_state = sanitizeInput($row['company_state']);
+ $company_zip = sanitizeInput($row['company_zip']);
+ $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
+ $company_email = sanitizeInput($row['company_email']);
+ $company_website = sanitizeInput($row['company_website']);
+
+ // Sanitize Config vars from get_settings.php
+ $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
+ $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
+
+ // Get Client Stripe details
+ $stripe_client_details = mysqli_fetch_array(mysqli_query($mysqli, "SELECT * FROM client_stripe WHERE client_id = $client_id LIMIT 1"));
+ $stripe_id = sanitizeInput($stripe_client_details['stripe_id']);
+ $stripe_pm = sanitizeInput($stripe_client_details['stripe_pm']);
+
+ // Sanity checks
+ if (!$config_stripe_enable || !$stripe_id || !$stripe_pm) {
+ flash_alert("Stripe not enabled or no client card saved", 'error');
+ redirect();
+ } elseif ($invoice_status !== 'Sent' && $invoice_status !== 'Viewed') {
+ flash_alert("Invalid invoice state (draft/partial/paid/not billable)", 'error');
+ redirect();
+ } elseif ($invoice_amount == 0) {
+ flash_alert("Invalid invoice amount", 'error');
+ redirect();
+ }
+
+ // Initialize Stripe
+ require_once __DIR__ . '/../plugins/stripe-php/init.php';
+ $stripe = new \Stripe\StripeClient($config_stripe_secret);
+
+ $balance_to_pay = round($invoice_amount, 2);
+ $pi_description = "ITFlow: $client_name payment of $invoice_currency_code $balance_to_pay for $invoice_prefix$invoice_number";
+
+ // Create a payment intent
+ try {
+ $payment_intent = $stripe->paymentIntents->create([
+ 'amount' => intval($balance_to_pay * 100), // Times by 100 as Stripe expects values in cents
+ 'currency' => $invoice_currency_code,
+ 'customer' => $stripe_id,
+ 'payment_method' => $stripe_pm,
+ 'off_session' => true,
+ 'confirm' => true,
+ 'description' => $pi_description,
+ 'metadata' => [
+ 'itflow_client_id' => $client_id,
+ 'itflow_client_name' => $client_name,
+ 'itflow_invoice_number' => $invoice_prefix . $invoice_number,
+ 'itflow_invoice_id' => $invoice_id,
+ ]
+ ]);
+
+ // Get details from PI
+ $pi_id = sanitizeInput($payment_intent->id);
+ $pi_date = date('Y-m-d', $payment_intent->created);
+ $pi_amount_paid = floatval(($payment_intent->amount_received / 100));
+ $pi_currency = strtoupper(sanitizeInput($payment_intent->currency));
+ $pi_livemode = $payment_intent->livemode;
+
+ } catch (Exception $e) {
+ $error = $e->getMessage();
+ error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number: $error");
+ logApp("Stripe", "error", "Exception during PI for invoice ID $invoice_id: $error");
+ }
+
+ if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) {
+
+ // Update Invoice Status
+ mysqli_query($mysqli, "UPDATE invoices SET invoice_status = 'Paid' WHERE invoice_id = $invoice_id");
+
+ // Add Payment to History
+ mysqli_query($mysqli, "INSERT INTO payments SET payment_date = '$pi_date', payment_amount = $pi_amount_paid, payment_currency_code = '$pi_currency', payment_account_id = $config_stripe_account, payment_method = 'Stripe', payment_reference = 'Stripe - $pi_id', payment_invoice_id = $invoice_id");
+ mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Paid', history_description = 'Online Payment added (agent)', history_invoice_id = $invoice_id");
+
+ // Email receipt
+ if (!empty($config_smtp_host)) {
+ $subject = "Payment Received - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
+
+ // Queue Mail
+ $data = [
+ [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $contact_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body,
+ ]
+ ];
+
+ // Email the internal notification address too
+ if (!empty($config_invoice_paid_notification_email)) {
+ $subject = "Payment Received - $client_name - Invoice $invoice_prefix$invoice_number";
+ $body = "Hello,
This is a notification that an invoice has been paid in ITFlow. Below is a copy of the receipt sent to the client:-
--------
Hello $contact_name,
We have received online payment for the amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " for invoice $invoice_prefix$invoice_number. Please keep this email as a receipt for your records.
Amount Paid: " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . "
Thank you for your business!
--
$company_name - Billing Department
$config_invoice_from_email
$company_phone";
+
+ $data[] = [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $config_invoice_paid_notification_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body,
+ ];
+ }
+
+ $mail = addToMailQueue($data);
+
+ // Email Logging
+ $email_id = mysqli_insert_id($mysqli);
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Payment Receipt sent to mail queue ID: $email_id!', history_invoice_id = $invoice_id");
+ logAction("Invoice", "Payment", "Payment receipt for invoice $invoice_prefix$invoice_number queued to $contact_email Email ID: $email_id", $client_id, $invoice_id);
+ }
+
+ // Log info
+ $extended_log_desc = '';
+ if (!$pi_livemode) {
+ $extended_log_desc = '(DEV MODE)';
+ }
+
+ // Create Stripe payment gateway fee as an expense (if configured)
+ if ($config_stripe_expense_vendor > 0 && $config_stripe_expense_category > 0) {
+ $gateway_fee = round($invoice_amount * $config_stripe_percentage_fee + $config_stripe_flat_fee, 2);
+ mysqli_query($mysqli,"INSERT INTO expenses SET expense_date = '$pi_date', expense_amount = $gateway_fee, expense_currency_code = '$invoice_currency_code', expense_account_id = $config_stripe_account, expense_vendor_id = $config_stripe_expense_vendor, expense_client_id = $client_id, expense_category_id = $config_stripe_expense_category, expense_description = 'Stripe Transaction for Invoice $invoice_prefix$invoice_number In the Amount of $balance_to_pay', expense_reference = 'Stripe - $pi_id $extended_log_desc'");
+ }
+
+ // Notify/log
+ appNotify("Invoice Paid", "Invoice $invoice_prefix$invoice_number automatically paid", "invoice.php?invoice_id=$invoice_id", $client_id);
+ logAction("Invoice", "Payment", "$session_name initiated Stripe payment amount of " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added to invoice $invoice_prefix$invoice_number - $pi_id $extended_log_desc", $client_id, $invoice_id);
+ customAction('invoice_pay', $invoice_id);
+
+ flash_alert("Payment amount " . numfmt_format_currency($currency_format, $invoice_amount, $invoice_currency_code) . " added");
+
+ redirect();
+
+ } else {
+ mysqli_query($mysqli, "INSERT INTO history SET history_status = 'Payment failed', history_description = 'Stripe pay failed due to payment error', history_invoice_id = $invoice_id");
+
+ logAction("Invoice", "Payment", "Failed online payment amount of invoice $invoice_prefix$invoice_number due to Stripe payment error", $client_id, $invoice_id);
+ flash_alert("Payment failed", 'error');
+
+ redirect();
+ }
+
+}
+*/
+
+if (isset($_POST['add_bulk_payment'])) {
+
+ enforceUserPermission('module_sales', 2);
+ enforceUserPermission('module_financial', 2);
+
+ $client_id = intval($_POST['client_id']);
+ $date = sanitizeInput($_POST['date']);
+ $bulk_payment_amount = floatval($_POST['amount']);
+ $bulk_payment_amount_static = floatval($_POST['amount']);
+ $total_account_balance = floatval($_POST['balance']);
+ $account = intval($_POST['account']);
+ $currency_code = sanitizeInput($_POST['currency_code']);
+ $payment_method = sanitizeInput($_POST['payment_method']);
+ $reference = sanitizeInput($_POST['reference']);
+ $email_receipt = intval($_POST['email_receipt']);
+
+ // Check if bulk_payment_amount exceeds total_account_balance
+ if ($bulk_payment_amount > $total_account_balance) {
+ flash_alert("Payment exceeds Client Balance.", 'error');
+ redirect();
+ }
+
+ // Get Invoices
+ $sql_invoices = "SELECT * FROM invoices
+ WHERE invoice_status != 'Draft'
+ AND invoice_status != 'Paid'
+ AND invoice_status != 'Cancelled'
+ AND invoice_client_id = $client_id
+ ORDER BY invoice_number ASC";
+ $result_invoices = mysqli_query($mysqli, $sql_invoices);
+
+ // Loop Through Each Invoice
+ while ($row = mysqli_fetch_array($result_invoices)) {
+ $invoice_id = intval($row['invoice_id']);
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_amount = floatval($row['invoice_amount']);
+ $invoice_url_key = sanitizeInput($row['invoice_url_key']);
+ $invoice_balance_query = "SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE payment_invoice_id = $invoice_id";
+ $result_amount_paid = mysqli_query($mysqli, $invoice_balance_query);
+ $row_amount_paid = mysqli_fetch_array($result_amount_paid);
+ $amount_paid = floatval($row_amount_paid['amount_paid']);
+ $invoice_balance = $invoice_amount - $amount_paid;
+
+ if ($bulk_payment_amount <= 0) {
+ break; // Exit the loop if no payment amount is left
+ }
+
+ if ($bulk_payment_amount >= $invoice_balance) {
+ $payment_amount = $invoice_balance;
+ $invoice_status = "Paid";
+ } else {
+ $payment_amount = $bulk_payment_amount;
+ $invoice_status = "Partial";
+ }
+
+ // Subtract the payment amount from the bulk payment amount
+ $bulk_payment_amount -= $payment_amount;
+
+ // Get Invoice Remain Balance
+ $remaining_invoice_balance = $invoice_balance - $payment_amount;
+
+ // Add Payment
+ $payment_query = "INSERT INTO payments (payment_date, payment_amount, payment_currency_code, payment_account_id, payment_method, payment_reference, payment_invoice_id) VALUES ('{$date}', {$payment_amount}, '{$currency_code}', {$account}, '{$payment_method}', '{$reference}', {$invoice_id})";
+ mysqli_query($mysqli, $payment_query);
+ $payment_id = mysqli_insert_id($mysqli);
+
+ // Update Invoice Status
+ $update_invoice_query = "UPDATE invoices SET invoice_status = '{$invoice_status}' WHERE invoice_id = {$invoice_id}";
+ mysqli_query($mysqli, $update_invoice_query);
+
+ // Add Payment to History
+ $history_description = "Payment added";
+ $add_history_query = "INSERT INTO history (history_status, history_description, history_invoice_id) VALUES ('{$invoice_status}', '{$history_description}', {$invoice_id})";
+ mysqli_query($mysqli, $add_history_query);
+
+ // Add to Email Body Invoice Portion
+ $email_body_invoices .= "
Invoice $invoice_prefix$invoice_number - Outstanding Amount: " . numfmt_format_currency($currency_format, $invoice_balance, $currency_code) . " - Payment Applied: " . numfmt_format_currency($currency_format, $payment_amount, $currency_code) . " - New Balance: " . numfmt_format_currency($currency_format, $remaining_invoice_balance, $currency_code);
+
+ customAction('invoice_pay', $invoice_id);
+
+ } // End Invoice Loop
+
+ // Send Email
+ if ($email_receipt == 1) {
+
+ // Get Client / Contact Info
+ $sql_client = mysqli_query($mysqli,"SELECT * FROM clients
+ LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id
+ AND contact_primary = 1
+ WHERE client_id = $client_id"
+ );
+
+ $row = mysqli_fetch_array($sql_client);
+ $client_name = sanitizeInput($row['client_name']);
+ $contact_name = sanitizeInput($row['contact_name']);
+ $contact_email = sanitizeInput($row['contact_email']);
+
+ $sql_company = mysqli_query($mysqli,"SELECT company_name, company_phone, company_phone_country_code FROM companies WHERE company_id = 1");
+ $row = mysqli_fetch_array($sql_company);
+
+ $company_name = sanitizeInput($row['company_name']);
+ $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
+
+ // Sanitize Config vars from get_settings.php
+ $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
+ $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
+
+ $subject = "Payment Received - Multiple Invoices";
+ $body = "Hello $contact_name,
Thank you for your payment of " . numfmt_format_currency($currency_format, $bulk_payment_amount_static, $currency_code) . " We\'ve applied your payment to the following invoices, updating their balances accordingly:
$email_body_invoices
We appreciate your continued business!
Sincerely,
$company_name - Billing
$config_invoice_from_email
$company_phone";
+
+ // Queue Mail
+ mysqli_query($mysqli, "INSERT INTO email_queue SET email_recipient = '$contact_email', email_recipient_name = '$contact_name', email_from = '$config_invoice_from_email', email_from_name = '$config_invoice_from_name', email_subject = '$subject', email_content = '$body'");
+
+ // Get Email ID for reference
+ $email_id = mysqli_insert_id($mysqli);
+
+ // Email Logging
+ logAction("Payment", "Email", "Bulk Payment receipt for multiple Invoices queued to $contact_email Email ID: $email_id", $client_id);
+
+ $alert_message .= "Email receipt queued and ";
+
+ } // End Email
+
+ logAction("Invoice", "Payment", "Bulk Payment amount of " . numfmt_format_currency($currency_format, $bulk_payment_amount_static, $currency_code) . " applied to multiple invoices", $client_id);
+
+ flash_alert("$alert_message Bulk Payment added");
+
+ redirect();
+
+}
+
+if (isset($_GET['delete_payment'])) {
+
+ enforceUserPermission('module_sales', 2);
+ enforceUserPermission('module_financial', 2);
+
+ $payment_id = intval($_GET['delete_payment']);
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM payments WHERE payment_id = $payment_id");
+ $row = mysqli_fetch_array($sql);
+ $invoice_id = intval($row['payment_invoice_id']);
+ $deleted_payment_amount = floatval($row['payment_amount']);
+
+ //Add up all the payments for the invoice and get the total amount paid to the invoice
+ $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments_amount FROM payments WHERE payment_invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql_total_payments_amount);
+ $total_payments_amount = floatval($row['total_payments_amount']);
+
+ // Get the invoice total and details
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_id = $invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $client_id = intval($row['invoice_client_id']);
+ $invoice_amount = floatval($row['invoice_amount']);
+
+ //Calculate the Invoice balance
+ $invoice_balance = $invoice_amount - $total_payments_amount + $deleted_payment_amount;
+
+ //Determine if invoice has been paid
+ if ($invoice_balance == 0) {
+ $invoice_status = "Paid";
+ } else {
+ $invoice_status = "Partial";
+ }
+
+ //Update Invoice Status
+ mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status' WHERE invoice_id = $invoice_id");
+
+ //Add Payment to History
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = '$invoice_status', history_description = 'Payment deleted', history_invoice_id = $invoice_id");
+
+ mysqli_query($mysqli,"DELETE FROM payments WHERE payment_id = $payment_id");
+
+ logAction("Invoice", "Edit", "$session_name deleted Payment on Invoice $invoice_prefix$invoice_number", $client_id, $invoice_id);
+
+ flash_alert("Payment deleted", 'error');
+ if ($config_stripe_enable) {
+ flash_alert("Payment deleted - Stripe payments must be manually refunded in Stripe", 'error');
+ }
+
+ redirect();
+
+}
+
+if (isset($_POST['export_payments_csv'])) {
+
+ if (isset($_POST['client_id'])) {
+ $client_id = intval($_POST['client_id']);
+ $client_query = "AND invoice_client_id = $client_id";
+ $client_name = getFieldById('clients', $client_id, 'client_name');
+ $file_name_prepend = "$client_name-";
+ } else {
+ $client_query = '';
+ $client_name = '';
+ $file_name_prepend = "$session_company_name-";
+ }
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM payments, invoices WHERE payment_invoice_id = invoice_id $client_query ORDER BY payment_date ASC");
+
+ $num_rows = mysqli_num_rows($sql);
+
+ if ($num_rows > 0) {
+ $delimiter = ",";
+ $enclosure = '"';
+ $escape = '\\'; // backslash
+ $filename = sanitize_filename($file_name_prepend . "Payments-" . date('Y-m-d_H-i-s') . ".csv");
+
+ //create a file pointer
+ $f = fopen('php://memory', 'w');
+
+ //set column headers
+ $fields = array('Payment Date', 'Invoice Date', 'Invoice Number', 'Invoice Amount', 'Payment Amount', 'Payment Method', 'Referrence');
+ fputcsv($f, $fields, $delimiter, $enclosure, $escape);
+
+ //output each row of the data, format line as csv and write to file pointer
+ while($row = $sql->fetch_assoc()){
+ $lineData = array($row['payment_date'], $row['invoice_date'], $row['invoice_prefix'] . $row['invoice_number'], $row['invoice_amount'], $row['payment_amount'], $row['payment_method'], $row['payment_reference']);
+ fputcsv($f, $lineData, $delimiter, $enclosure, $escape);
+ }
+
+ //move back to beginning of file
+ fseek($f, 0);
+
+ //set headers to download file rather than displayed
+ header('Content-Type: text/csv');
+ header('Content-Disposition: attachment; filename="' . $filename . '";');
+
+ //output all remaining data on a file pointer
+ fpassthru($f);
+ }
+
+ logAction("Payments", "Export", "$session_name exported $num_rows payments to CSV file");
+
+ exit;
+
+}
diff --git a/agent/post/recurring_invoice.php b/agent/post/recurring_invoice.php
new file mode 100644
index 00000000..a2334a31
--- /dev/null
+++ b/agent/post/recurring_invoice.php
@@ -0,0 +1,548 @@
+$invoice_prefix$invoice_number");
+
+ redirect("recurring_invoice.php?recurring_invoice_id=$recurring_invoice_id");
+
+}
+
+if (isset($_POST['add_recurring_invoice'])) {
+
+ $client_id = intval($_POST['client']);
+ $frequency = sanitizeInput($_POST['frequency']);
+ $start_date = sanitizeInput($_POST['start_date']);
+ $category = intval($_POST['category']);
+ $scope = sanitizeInput($_POST['scope']);
+
+ //Get the last Recurring Number and add 1 for the new Recurring number
+ $recurring_invoice_number = $config_recurring_invoice_next_number;
+ $new_config_recurring_invoice_next_number = $config_recurring_invoice_next_number + 1;
+ mysqli_query($mysqli,"UPDATE settings SET config_recurring_invoice_next_number = $new_config_recurring_invoice_next_number WHERE company_id = 1");
+
+ mysqli_query($mysqli,"INSERT INTO recurring_invoices SET recurring_invoice_prefix = '$config_recurring_invoice_prefix', recurring_invoice_number = $recurring_invoice_number, recurring_invoice_scope = '$scope', recurring_invoice_frequency = '$frequency', recurring_invoice_next_date = '$start_date', recurring_invoice_category_id = $category, recurring_invoice_status = 1, recurring_invoice_currency_code = '$session_company_currency', recurring_invoice_client_id = $client_id");
+
+ $recurring_invoice_id = mysqli_insert_id($mysqli);
+
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Active', history_description = 'Recurring Invoice created', history_recurring_invoice_id = $recurring_invoice_id");
+
+ logAction("Recurring Invoice", "Create", "$session_name created recurring invoice $config_recurring_invoice_prefix$recurring_invoice_number - $scope", $client_id, $recurring_invoice_id);
+
+ flash_alert("Recurring Invoice $config_recurring_invoice_prefix$recurring_invoice_number created");
+
+ redirect("recurring_invoice.php?recurring_invoice_id=$recurring_invoice_id");
+
+}
+
+if (isset($_POST['edit_recurring_invoice'])) {
+
+ $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
+ $frequency = sanitizeInput($_POST['frequency']);
+ $next_date = sanitizeInput($_POST['next_date']);
+ $category = intval($_POST['category']);
+ $scope = sanitizeInput($_POST['scope']);
+ $status = intval($_POST['status']);
+ $recurring_invoice_discount = floatval($_POST['recurring_invoice_discount']);
+
+ // Get Recurring Invoice Details and Client ID for Logging
+ $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ //Calculate new total
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
+ $recurring_invoice_amount = 0;
+ while($row = mysqli_fetch_array($sql)) {
+ $item_total = floatval($row['item_total']);
+ $recurring_invoice_amount = $recurring_invoice_amount + $item_total;
+ }
+ $recurring_invoice_amount = $recurring_invoice_amount - $recurring_invoice_discount;
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_scope = '$scope', recurring_invoice_frequency = '$frequency', recurring_invoice_next_date = '$next_date', recurring_invoice_category_id = $category, recurring_invoice_discount_amount = $recurring_invoice_discount, recurring_invoice_amount = $recurring_invoice_amount, recurring_invoice_status = $status WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = '$status', history_description = 'Recurring Invoice edited', history_recurring_invoice_id = $recurring_invoice_id");
+
+ logAction("Recurring Invoice", "Edit", "$session_name edited recurring invoice $recurring_invoice_prefix$recurring_invoice_number - $scope", $client_id, $recurring_invoice_id);
+
+ flash_alert("Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number edited");
+
+ redirect();
+
+}
+
+if (isset($_GET['delete_recurring_invoice'])) {
+
+ $recurring_invoice_id = intval($_GET['delete_recurring_invoice']);
+
+ // Get Recurring Invoice Details and Client ID for Logging
+ $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_scope, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $recurring_invoice_scope = sanitizeInput($row['recurring_invoice_scope']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ mysqli_query($mysqli,"DELETE FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ //Delete Items Associated with the Recurring
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
+ while($row = mysqli_fetch_array($sql)) {
+ $item_id = intval($row['item_id']);
+ mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id");
+ }
+
+ //Delete History Associated with the Invoice
+ $sql = mysqli_query($mysqli,"SELECT * FROM history WHERE history_recurring_invoice_id = $recurring_invoice_id");
+ while($row = mysqli_fetch_array($sql)) {
+ $history_id = intval($row['history_id']);
+ mysqli_query($mysqli,"DELETE FROM history WHERE history_id = $history_id");
+ }
+
+ logAction("Recurring Invoice", "Delete", "$session_name deleted recurring invoice $recurring_invoice_prefix$recurring_invoice_number - $recurring_invoice_scope", $client_id);
+
+ flash_alert("Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number deleted", 'error');
+
+ redirect();
+
+}
+
+if (isset($_POST['add_recurring_invoice_item'])) {
+
+ $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
+ $name = sanitizeInput($_POST['name']);
+ $description = sanitizeInput($_POST['description']);
+ $qty = floatval($_POST['qty']);
+ $price = floatval($_POST['price']);
+ $tax_id = intval($_POST['tax_id']);
+ $item_order = intval($_POST['item_order']);
+
+ $subtotal = $price * $qty;
+
+ if ($tax_id > 0) {
+ $sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE tax_id = $tax_id");
+ $row = mysqli_fetch_array($sql);
+ $tax_percent = floatval($row['tax_percent']);
+ $tax_amount = $subtotal * $tax_percent / 100;
+ } else {
+ $tax_amount = 0;
+ }
+
+ $total = $subtotal + $tax_amount;
+
+ mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$name', item_description = '$description', item_quantity = $qty, item_price = $price, item_subtotal = $subtotal, item_tax = $tax_amount, item_total = $total, item_tax_id = $tax_id, item_order = $item_order, item_recurring_invoice_id = $recurring_invoice_id");
+
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_discount = floatval($row['recurring_invoice_discount_amount']);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ //add up all the items
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
+ $recurring_invoice_amount = 0;
+ while($row = mysqli_fetch_array($sql)) {
+ $item_total = floatval($row['item_total']);
+ $recurring_invoice_amount = $recurring_invoice_amount + $item_total;
+ }
+ $recurring_invoice_amount = $recurring_invoice_amount - $recurring_invoice_discount;
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $recurring_invoice_amount WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ logAction("Recurring Invoice", "Edit", "$session_name added item $name to recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
+
+ flash_alert("Item $name added to Recurring Invoice");
+
+ redirect();
+
+}
+
+if (isset($_POST['recurring_invoice_note'])) {
+
+ $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
+ $note = sanitizeInput($_POST['note']);
+
+ // Get Recurring details for logging
+ $sql = mysqli_query($mysqli,"SELECT recurring_invoice_prefix, recurring_invoice_number, recurring_invoice_client_id FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_note = '$note' WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ logAction("Recurring Invoice", "Edit", "$session_name added note to recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
+
+ flash_alert("Notes added");
+
+ redirect();
+
+}
+
+if (isset($_GET['delete_recurring_invoice_item'])) {
+
+ $item_id = intval($_GET['delete_recurring_invoice_item']);
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_id = $item_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_id = intval($row['item_recurring_invoice_id']);
+ $item_name = sanitizeInput($row['item_name']);
+ $item_subtotal = floatval($row['item_subtotal']);
+ $item_tax = floatval($row['item_tax']);
+ $item_total = floatval($row['item_total']);
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ $new_recurring_invoice_amount = floatval($row['recurring_invoice_amount']) - $item_total;
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $new_recurring_invoice_amount WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id");
+
+ logAction("Recurring Invoice", "Edit", "$session_name removed item $item_name from recurring invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id);
+
+ flash_alert("Item $item_name removed", 'error');
+
+ redirect();
+
+}
+
+if (isset($_GET['force_recurring'])) {
+
+ $recurring_invoice_id = intval($_GET['force_recurring']);
+
+ $sql_recurring_invoices = mysqli_query($mysqli,"SELECT * FROM recurring_invoices, clients WHERE client_id = recurring_invoice_client_id AND recurring_invoice_id = $recurring_invoice_id");
+
+ $row = mysqli_fetch_array($sql_recurring_invoices);
+ $recurring_invoice_id = intval($row['recurring_invoice_id']);
+ $recurring_invoice_scope = sanitizeInput($row['recurring_invoice_scope']);
+ $recurring_invoice_frequency = sanitizeInput($row['recurring_invoice_frequency']);
+ $recurring_invoice_status = sanitizeInput($row['recurring_invoice_status']);
+ $recurring_invoice_last_sent = sanitizeInput($row['recurring_invoice_last_sent']);
+ $recurring_invoice_next_date = sanitizeInput($row['recurring_invoice_next_date']);
+ $recurring_invoice_discount_amount = floatval($row['recurring_invoice_discount_amount']);
+ $recurring_invoice_amount = floatval($row['recurring_invoice_amount']);
+ $recurring_invoice_currency_code = sanitizeInput($row['recurring_invoice_currency_code']);
+ $recurring_invoice_note = sanitizeInput($row['recurring_invoice_note']);
+ $category_id = intval($row['recurring_invoice_category_id']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+ $client_net_terms = intval($row['client_net_terms']);
+
+ //Get the last Invoice Number and add 1 for the new invoice number
+ $new_invoice_number = $config_invoice_next_number;
+ $new_config_invoice_next_number = $config_invoice_next_number + 1;
+ mysqli_query($mysqli,"UPDATE settings SET config_invoice_next_number = $new_config_invoice_next_number WHERE company_id = 1");
+
+ //Generate a unique URL key for clients to access
+ $url_key = randomString(156);
+
+ mysqli_query($mysqli,"INSERT INTO invoices SET invoice_prefix = '$config_invoice_prefix', invoice_number = $new_invoice_number, invoice_scope = '$recurring_invoice_scope', invoice_date = CURDATE(), invoice_due = DATE_ADD(CURDATE(), INTERVAL $client_net_terms day), invoice_discount_amount = $recurring_invoice_discount_amount, invoice_amount = $recurring_invoice_amount, invoice_currency_code = '$recurring_invoice_currency_code', invoice_note = '$recurring_invoice_note', invoice_category_id = $category_id, invoice_status = 'Sent', invoice_url_key = '$url_key', invoice_recurring_invoice_id = $recurring_invoice_id, invoice_client_id = $client_id");
+
+ $new_invoice_id = mysqli_insert_id($mysqli);
+
+ //Copy Items from original invoice to new invoice
+ $sql_invoice_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id ORDER BY item_id ASC");
+
+ while($row = mysqli_fetch_array($sql_invoice_items)) {
+ $item_id = intval($row['item_id']);
+ $item_name = sanitizeInput($row['item_name']);
+ $item_description = sanitizeInput($row['item_description']);
+ $item_quantity = floatval($row['item_quantity']);
+ $item_price = floatval($row['item_price']);
+ $item_subtotal = floatval($row['item_subtotal']);
+ $item_order = intval($row['item_order']);
+ $tax_id = intval($row['item_tax_id']);
+
+ //Recalculate Item Tax since Tax percents can change.
+ if ($tax_id > 0) {
+ $sql = mysqli_query($mysqli,"SELECT * FROM taxes WHERE tax_id = $tax_id");
+ $row = mysqli_fetch_array($sql);
+ $tax_percent = floatval($row['tax_percent']);
+ $item_tax_amount = $item_subtotal * $tax_percent / 100;
+ } else {
+ $item_tax_amount = 0;
+ }
+
+ $item_total = $item_subtotal + $item_tax_amount;
+
+ //Update Recurring Items with new tax
+ mysqli_query($mysqli,"UPDATE invoice_items SET item_tax = $item_tax_amount, item_total = $item_total, item_tax_id = $tax_id, item_order = $item_order WHERE item_id = $item_id");
+
+ mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$item_name', item_description = '$item_description', item_quantity = $item_quantity, item_price = $item_price, item_subtotal = $item_subtotal, item_tax = $item_tax_amount, item_total = $item_total, item_tax_id = $tax_id, item_invoice_id = $new_invoice_id");
+ }
+
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Invoice Generated from Recurring!', history_invoice_id = $new_invoice_id");
+
+ //Update Recurring Balances by tallying up recurring items also update recurring dates
+ $sql_recurring_invoice_total = mysqli_query($mysqli,"SELECT SUM(item_total) AS recurring_invoice_total FROM invoice_items WHERE item_recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql_recurring_invoice_total);
+ $new_recurring_invoice_amount = floatval($row['recurring_invoice_total']) - $recurring_invoice_discount_amount;
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_amount = $new_recurring_invoice_amount, recurring_invoice_last_sent = CURDATE(), recurring_invoice_next_date = DATE_ADD(CURDATE(), INTERVAL 1 $recurring_invoice_frequency) WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ //Also update the newly created invoice with the new amounts
+ mysqli_query($mysqli,"UPDATE invoices SET invoice_amount = $new_recurring_invoice_amount WHERE invoice_id = $new_invoice_id");
+
+ if ($config_recurring_auto_send_invoice == 1) {
+ $sql = mysqli_query($mysqli,"SELECT * FROM invoices
+ LEFT JOIN clients ON invoice_client_id = client_id
+ LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
+ WHERE invoice_id = $new_invoice_id"
+ );
+ $row = mysqli_fetch_array($sql);
+
+ $invoice_prefix = sanitizeInput($row['invoice_prefix']);
+ $invoice_number = intval($row['invoice_number']);
+ $invoice_scope = sanitizeInput($row['invoice_scope']);
+ $invoice_date = sanitizeInput($row['invoice_date']);
+ $invoice_due = sanitizeInput($row['invoice_due']);
+ $invoice_amount = floatval($row['invoice_amount']);
+ $invoice_url_key = sanitizeInput($row['invoice_url_key']);
+ $client_id = intval($row['client_id']);
+ $client_name = sanitizeInput($row['client_name']);
+ $contact_name = sanitizeInput($row['contact_name']);
+ $contact_email = sanitizeInput($row['contact_email']);
+ $contact_phone = sanitizeInput(formatPhoneNumber($row['contact_phone'], $row['contact_phone_country_code']));
+ $contact_extension = intval($row['contact_extension']);
+ $contact_mobile = sanitizeInput(formatPhoneNumber($row['contact_mobile'], $row['contact_mobile_country_code']));
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM companies WHERE company_id = 1");
+ $row = mysqli_fetch_array($sql);
+ $company_name = sanitizeInput($row['company_name']);
+ $company_phone = sanitizeInput(formatPhoneNumber($row['company_phone'], $row['company_phone_country_code']));
+ $company_email = sanitizeInput($row['company_email']);
+ $company_website = sanitizeInput($row['company_website']);
+
+ // Sanitize Config Vars
+ $config_invoice_from_email = sanitizeInput($config_invoice_from_email);
+ $config_invoice_from_name = sanitizeInput($config_invoice_from_name);
+
+ // Email to client
+
+ $subject = "Invoice $invoice_prefix$invoice_number";
+ $body = "Hello $contact_name,
An invoice regarding \"$invoice_scope\" has been generated. Please view the details below.
Invoice: $invoice_prefix$invoice_number
Issue Date: $invoice_date
Total: $$invoice_amount
Due Date: $invoice_due
To view your invoice, please click here.
--
$company_name - Billing
$company_phone";
+
+
+ $data = [
+ [
+ 'from' => $config_invoice_from_email,
+ 'from_name' => $config_invoice_from_name,
+ 'recipient' => $contact_email,
+ 'recipient_name' => $contact_name,
+ 'subject' => $subject,
+ 'body' => $body
+ ]
+ ];
+ $mail = addToMailQueue($data);
+
+ if ($mail === true) {
+ // Add send history
+ mysqli_query($mysqli,"INSERT INTO history SET history_status = 'Sent', history_description = 'Force Emailed Invoice!', history_invoice_id = $new_invoice_id");
+
+ // Update Invoice Status to Sent
+ mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent', invoice_client_id = $client_id WHERE invoice_id = $new_invoice_id");
+
+ } else {
+ // Error reporting
+ appNotify("Mail", "Failed to send email to $contact_email");
+
+ logAction("Mail", "Error", "Failed to send email to $contact_email regarding $subject. $mail");
+
+ }
+
+ } //End Recurring Invoices Loop
+
+ logAction("Invoice", "Create", "$session_name forced recurring invoice into an invoice", $client_id, $new_invoice_id);
+
+ customAction('invoice_create', $new_invoice_id);
+
+ flash_alert("Recurring Invoice Forced");
+
+ redirect();
+
+}
+
+if (isset($_POST['set_recurring_payment'])) {
+
+ $recurring_invoice_id = intval($_POST['recurring_invoice_id']);
+ $saved_payment_id = intval($_POST['saved_payment_id']);
+
+ // Get Recurring Invoice Info for logging and alerting
+ $sql = mysqli_query($mysqli, "SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $client_id = intval($row['recurring_invoice_client_id']);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $recurring_invoice_currency_code = sanitizeInput($row['recurring_invoice_currency_code']);
+ $recurring_invoice_amount = floatval($row['recurring_invoice_amount']);
+
+ if ($saved_payment_id) {
+
+ // Get Payment provider and method
+ $sql = mysqli_query($mysqli, "
+ SELECT * FROM payment_providers
+ LEFT JOIN client_saved_payment_methods ON saved_payment_provider_id = payment_provider_id
+ WHERE saved_payment_id = $saved_payment_id
+ ");
+
+ $row = mysqli_fetch_array($sql);
+
+ $provider_id = intval($row['payment_provider_id']);
+ $provider_name = sanitizeInput($row['payment_provider_name']);
+ $account_id = intval($row['payment_provider_account']);
+ $saved_payment_description = sanitizeInput($row['saved_payment_description']);
+
+ mysqli_query($mysqli, "DELETE FROM recurring_payments WHERE recurring_payment_recurring_invoice_id = $recurring_invoice_id");
+ mysqli_query($mysqli,"INSERT INTO recurring_payments SET recurring_payment_currency_code = '$recurring_invoice_currency_code', recurring_payment_account_id = $account_id, recurring_payment_method = 'Credit Card', recurring_payment_recurring_invoice_id = $recurring_invoice_id, recurring_payment_saved_payment_id = $saved_payment_id");
+ // Get Payment ID for reference
+ $recurring_payment_id = mysqli_insert_id($mysqli);
+
+ logAction("Recurring Invoice", "Auto Payment", "$session_name created Auto Pay for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number in the amount of " . numfmt_format_currency($currency_format, $recurring_invoice_amount, $recurring_invoice_currency_code), $client_id, $recurring_invoice_id);
+
+ flash_alert("Automatic Payment $saved_payment_description enabled for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number");
+ } else {
+ // Delete
+ mysqli_query($mysqli, "DELETE FROM recurring_payments WHERE recurring_payment_recurring_invoice_id = $recurring_invoice_id");
+
+ logAction("Recurring Invoice", "Auto Payment", "$session_name removed Auto Pay for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number in the amount of " . numfmt_format_currency($currency_format, $recurring_invoice_amount, $recurring_invoice_currency_code), $client_id, $recurring_invoice_id);
+
+ flash_alert("Automatic Payment Disabled for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number", 'error');
+ }
+
+ redirect();
+
+}
+
+if (isset($_POST['export_client_recurring_invoice_csv'])) {
+
+ $client_id = intval($_POST['client_id']);
+
+ //get records from database
+ $sql = mysqli_query($mysqli,"SELECT client_name FROM clients WHERE client_id = $client_id");
+ $row = mysqli_fetch_array($sql);
+
+ $client_name = $row['client_name'];
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_client_id = $client_id ORDER BY recurring_invoice_number ASC");
+
+ $num_rows = mysqli_num_rows($sql);
+
+ if ($num_rows > 0) {
+ $delimiter = ",";
+ $filename = $client_name . "-Recurring Invoices-" . date('Y-m-d') . ".csv";
+
+ //create a file pointer
+ $f = fopen('php://memory', 'w');
+
+ //set column headers
+ $fields = array('Recurring Number', 'Scope', 'Amount', 'Frequency', 'Date Created');
+ fputcsv($f, $fields, $delimiter);
+
+ //output each row of the data, format line as csv and write to file pointer
+ while($row = $sql->fetch_assoc()) {
+ $lineData = array($row['recurring_invoice_prefix'] . $row['recurring_invoice_number'], $row['recurring_invoice_scope'], $row['recurring_invoice_amount'], ucwords($row['recurring_invoice_frequency'] . "ly"), $row['recurring_invoice_created_at']);
+ fputcsv($f, $lineData, $delimiter);
+ }
+
+ //move back to beginning of file
+ fseek($f, 0);
+
+ //set headers to download file rather than displayed
+ header('Content-Type: text/csv');
+ header('Content-Disposition: attachment; filename="' . $filename . '";');
+
+ //output all remaining data on a file pointer
+ fpassthru($f);
+ }
+
+ logAction("Recurring Invoice", "Export", "$session_name exported $num_rows recurring invoices to CSV file");
+
+ exit;
+
+}
+
+if (isset($_GET['recurring_invoice_email_notify'])) {
+
+ $recurring_invoice_email_notify = intval($_GET['recurring_invoice_email_notify']);
+ $recurring_invoice_id = intval($_GET['recurring_invoice_id']);
+
+ $sql = mysqli_query($mysqli,"SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id");
+ $row = mysqli_fetch_array($sql);
+ $recurring_invoice_prefix = sanitizeInput($row['recurring_invoice_prefix']);
+ $recurring_invoice_number = intval($row['recurring_invoice_number']);
+ $client_id = intval($row['recurring_invoice_client_id']);
+
+ mysqli_query($mysqli,"UPDATE recurring_invoices SET recurring_invoice_email_notify = $recurring_invoice_email_notify WHERE recurring_invoice_id = $recurring_invoice_id");
+
+ // Wording
+ if ($recurring_invoice_email_notify) {
+ $notify_wording = "On";
+ } else {
+ $notify_wording = "Off";
+ }
+
+ logAction("Recurring Invoice", "Edit", "$session_name turned $notify_wording Email Notifications for Recurring Invoice $recurring_invoice_prefix$recurring_invoice_number", $client_id, $recurring_invoice_id);
+
+ flash_alert("Email Notifications $notify_wording", 'error');
+
+ redirect();
+
+}