AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-06-03 16:48:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

API: Add some missing end points

Browse Source
This commit is contained in:
johnnyq
2026-04-11 18:21:03 -04:00
parent 1e02322382
commit c4ba2bc326
45 changed files with 1570 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

68
api/v1/products/product_model.php Normal file
View File

@@ -0,0 +1,68 @@
<?php
// Variable assignment from POST (or: blank/from DB is updating)
// Note: products are not scoped to a client_id
if (isset($_POST['product_name'])) {
$name = sanitizeInput($_POST['product_name']);
} elseif ($product_row) {
$name = mysqli_real_escape_string($mysqli, $product_row['product_name']);
} else {
$name = '';
}
if (isset($_POST['product_description'])) {
$description = sanitizeInput($_POST['product_description']);
} elseif ($product_row) {
$description = mysqli_real_escape_string($mysqli, $product_row['product_description']);
} else {
$description = '';
}
if (isset($_POST['product_price'])) {
$price = floatval($_POST['product_price']);
} elseif ($product_row) {
$price = $product_row['product_price'];
} else {
$price = 0;
}
if (isset($_POST['product_cost'])) {
$cost = floatval($_POST['product_cost']);
} elseif ($product_row) {
$cost = $product_row['product_cost'];
} else {
$cost = 0;
}
if (isset($_POST['product_taxable'])) {
$taxable = intval($_POST['product_taxable']);
} elseif ($product_row) {
$taxable = $product_row['product_taxable'];
} else {
$taxable = 0;
}
if (isset($_POST['product_type'])) {
$type = sanitizeInput($_POST['product_type']);
} elseif ($product_row) {
$type = mysqli_real_escape_string($mysqli, $product_row['product_type']);
} else {
$type = '';
}
if (isset($_POST['product_identifier'])) {
$identifier = sanitizeInput($_POST['product_identifier']);
} elseif ($product_row) {
$identifier = mysqli_real_escape_string($mysqli, $product_row['product_identifier']);
} else {
$identifier = '';
}
if (isset($_POST['product_notes'])) {
$notes = sanitizeInput($_POST['product_notes']);
} elseif ($product_row) {
$notes = mysqli_real_escape_string($mysqli, $product_row['product_notes']);
} else {
$notes = '';
}