From acd5f840f29e9f172888f2ed65634cff260e95ba Mon Sep 17 00:00:00 2001
From: root <root@pittpc-crm.localDomain>
Date: Fri, 17 May 2019 17:56:04 -0400
Subject: [PATCH] Edit Expense now deletes old receipt and adds new receipt
 when attached

---
 edit_expense_modal.php |  3 ++-
 post.php               | 16 ++++++++++++++--
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/edit_expense_modal.php b/edit_expense_modal.php
index 0140e927..13ffc7eb 100644
--- a/edit_expense_modal.php
+++ b/edit_expense_modal.php
@@ -7,9 +7,10 @@
           <span aria-hidden="true">&times;</span>
         </button>
       </div>
-      <form action="post.php" method="post" autocomplete="off">
+      <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
         <div class="modal-body bg-white">
           <input type="hidden" name="expense_id" value="<?php echo $expense_id; ?>">
+          <input type="hidden" name="expense_receipt" value="<?php echo $expense_receipt; ?>">
           <div class="form-row"> 
             <div class="form-group col-md">
               <label>Date</label>
diff --git a/post.php b/post.php
index eb0ab61c..6880873f 100644
--- a/post.php
+++ b/post.php
@@ -641,8 +641,20 @@ if(isset($_POST['edit_expense'])){
     $category = intval($_POST['category']);
     $description = strip_tags(mysqli_real_escape_string($mysqli,$_POST['description']));
     $reference = strip_tags(mysqli_real_escape_string($mysqli,$_POST['reference']));
+    $receipt = strip_tags(mysqli_real_escape_string($mysqli,$_POST['expense_receipt']));
 
-    mysqli_query($mysqli,"UPDATE expenses SET expense_date = '$date', expense_amount = '$amount', account_id = $account, vendor_id = $vendor, category_id = $category, expense_description = '$description', expense_reference = '$reference' expense_updated_at = NOW() WHERE expense_id = $expense_id");
+    if($_FILES['file']['tmp_name']!='') {
+        $path = "uploads/expenses/$vendor/";
+        $path = $path . basename( $_FILES['file']['name']);
+        $file_name = basename($path);
+        move_uploaded_file($_FILES['file']['tmp_name'], $path);
+        //remove old receipt
+        unlink($receipt);
+    }else{
+        $path = $receipt;
+    }
+
+    mysqli_query($mysqli,"UPDATE expenses SET expense_date = '$date', expense_amount = '$amount', account_id = $account, vendor_id = $vendor, category_id = $category, expense_description = '$description', expense_reference = '$reference', expense_receipt = '$path', expense_updated_at = NOW() WHERE expense_id = $expense_id");
 
     $_SESSION['alert_message'] = "Expense modified";
     
@@ -978,7 +990,7 @@ if(isset($_GET['delete_invoice'])){
         $payment_id = $row['payment_id'];
         mysqli_query($mysqli,"DELETE FROM payments WHERE payment_id = $payment_id");
     }
-    
+
     $_SESSION['alert_message'] = "Invoice deleted";
     
     header("Location: " . $_SERVER["HTTP_REFERER"]);