2){ $client_phone = substr($row['client_phone'],0,3)."-".substr($row['client_phone'],3,3)."-".substr($row['client_phone'],6,4); } $client_website = $row['client_website']; $sql_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE quote_id = $quote_id ORDER BY item_id ASC"); while($row = mysqli_fetch_array($sql_items)){ $item_id = $row['item_id']; $item_name = $row['item_name']; $item_description = $row['item_description']; $item_quantity = $row['item_quantity']; $item_price = $row['item_price']; $item_subtotal = $row['item_price']; $item_tax = $row['item_tax']; $item_total = $row['item_total']; $total_tax = $item_tax + $total_tax; $sub_total = $item_price * $item_quantity + $sub_total; $items .= " $item_name $item_description $item_quantity $$item_price $$item_tax $$item_total "; } $html = '
Date: '.$quote_date.'
TO:

'.$client_name.'
'.$client_address.'
'.$client_city.' '.$client_state.' '.$client_zip.'

'.$client_email.'
'.$client_phone.'		  

'.$items.'
Product Description Qty Price Tax Total

Notes

'.$quote_note.' 		Subtotal: $ '.number_format($sub_total,2).'
Tax: $ '.number_format($total_tax,2).'
Total: $ '.number_format($quote_amount,2).'
'.$config_quote_footer.'
'; $mpdf = new \Mpdf\Mpdf([ 'margin_left' => 5, 'margin_right' => 5, 'margin_top' => 48, 'margin_bottom' => 25, 'margin_header' => 10, 'margin_footer' => 10 ]); $mpdf->SetProtection(array('print')); $mpdf->SetTitle("$config_company_name - Quote"); $mpdf->SetAuthor("$config_company_name"); $mpdf->SetWatermarkText("Quote"); $mpdf->showWatermarkText = true; $mpdf->watermark_font = 'DejaVuSansCondensed'; $mpdf->watermarkTextAlpha = 0.1; $mpdf->SetDisplayMode('fullpage'); $mpdf->WriteHTML($html); $mpdf->Output(); } if(isset($_GET['email_quote'])){ $quote_id = intval($_GET['email_quote']); $sql = mysqli_query($mysqli,"SELECT * FROM quotes, clients WHERE quotes.client_id = clients.client_id AND quotes.quote_id = $quote_id" ); $row = mysqli_fetch_array($sql); $quote_id = $row['quote_id']; $quote_number = $row['quote_number']; $quote_status = $row['quote_status']; $quote_date = $row['quote_date']; $quote_amount = $row['quote_amount']; $quote_note = $row['quote_note']; $quote_url_key = $row['quote_url_key']; $client_id = $row['client_id']; $client_name = $row['client_name']; $client_address = $row['client_address']; $client_city = $row['client_city']; $client_state = $row['client_state']; $client_zip = $row['client_zip']; $client_email = $row['client_email']; $client_phone = $row['client_phone']; if(strlen($client_phone)>2){ $client_phone = substr($row['client_phone'],0,3)."-".substr($row['client_phone'],3,3)."-".substr($row['client_phone'],6,4); } $client_website = $row['client_website']; $base_url = $_SERVER['HTTP_HOST'] . dirname($_SERVER['REQUEST_URI']); $mail = new PHPMailer(true); try{ //Mail Server Settings //$mail->SMTPDebug = 2; // Enable verbose debug output $mail->isSMTP(); // Set mailer to use SMTP $mail->Host = $config_smtp_host; // Specify main and backup SMTP servers $mail->SMTPAuth = true; // Enable SMTP authentication $mail->Username = $config_smtp_username; // SMTP username $mail->Password = $config_smtp_password; // SMTP password $mail->SMTPSecure = 'tls'; // Enable TLS encryption, `ssl` also accepted $mail->Port = $config_smtp_port; // TCP port to connect to //Recipients $mail->setFrom($config_mail_from_email, $config_mail_from_name); $mail->addAddress("$client_email", "$client_name"); // Add a recipient // Attachments //$mail->addAttachment('/var/tmp/file.tar.gz'); // Add attachments //$mail->addAttachment('/tmp/image.jpg', 'new.jpg'); // Optional name //$mail->addAttachment("uploads/$quote_date-$config_company_name-Quote$quote_number.pdf"); // Optional name // Content $mail->isHTML(true); // Set email format to HTML $mail->Subject = "Quote"; $mail->Body = "Hello $client_name,

Thank you for your inquiry, we are pleased to provide you with the following estimate.


Total Cost: $$quote_amount


View and accept your estimate online here


~
$config_company_name
$config_company_phone"; $mail->send(); echo 'Message has been sent'; mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Sent', history_description = 'Emailed Quote!', history_created_at = NOW(), quote_id = $quote_id"); //Don't change the status to sent if the status is anything but draft if($quote_status == 'Draft'){ mysqli_query($mysqli,"UPDATE quotes SET quote_status = 'Sent', quote_updated_at = NOW() WHERE quote_id = $quote_id"); } $_SESSION['alert_message'] = "Quote has been sent"; header("Location: " . $_SERVER["HTTP_REFERER"]); } catch (Exception $e) { echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}"; } } if(isset($_POST['add_recurring'])){ $client = intval($_POST['client']); $frequency = strip_tags(mysqli_real_escape_string($mysqli,$_POST['frequency'])); $start_date = strip_tags(mysqli_real_escape_string($mysqli,$_POST['start_date'])); $category = intval($_POST['category']); mysqli_query($mysqli,"INSERT INTO recurring SET recurring_frequency = '$frequency', recurring_next_date = '$start_date', category_id = $category, recurring_status = 1, recurring_created_at = NOW(), client_id = $client"); $recurring_id = mysqli_insert_id($mysqli); mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_description = 'Recurring Invoice created!', history_created_at = NOW(), recurring_id = $recurring_id"); $_SESSION['alert_message'] = "Recurring Invoice added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_recurring'])){ $recurring_id = intval($_GET['delete_recurring']); mysqli_query($mysqli,"DELETE FROM recurring WHERE recurring_id = $recurring_id"); //Delete Items Associated with the Recurring $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE recurring_id = $recurring_id"); while($row = mysqli_fetch_array($sql)){; $item_id = $row['item_id']; mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id"); } //Delete History Associated with the Invoice $sql = mysqli_query($mysqli,"SELECT * FROM history WHERE recurring_id = $recurring_id"); while($row = mysqli_fetch_array($sql)){; $history_id = $row['history_id']; mysqli_query($mysqli,"DELETE FROM history WHERE history_id = $history_id"); } $_SESSION['alert_message'] = "Recurring Invoice deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['recurring_activate'])){ $recurring_id = intval($_GET['recurring_activate']); mysqli_query($mysqli,"UPDATE recurring SET recurring_status = 1 WHERE recurring_id = $recurring_id"); $_SESSION['alert_message'] = "Recurring Invoice Activated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['recurring_deactivate'])){ $recurring_id = intval($_GET['recurring_deactivate']); mysqli_query($mysqli,"UPDATE recurring SET recurring_status = 0 WHERE recurring_id = $recurring_id"); $_SESSION['alert_message'] = "Recurring Invoice Deactivated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['save_recurring'])){ $recurring_id = intval($_POST['recurring_id']); if(isset($_POST['name'])){ $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $description = strip_tags(mysqli_real_escape_string($mysqli,$_POST['description'])); $qty = $_POST['qty']; $price = $_POST['price']; $tax = $_POST['tax']; $subtotal = $price * $qty; $tax = $subtotal * $tax; $total = $subtotal + $tax; mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$name', item_description = '$description', item_quantity = $qty, item_price = '$price', item_subtotal = '$subtotal', item_tax = '$tax', item_total = '$total', item_created_at = NOW(), recurring_id = $recurring_id"); //Update Invoice Balances $sql = mysqli_query($mysqli,"SELECT * FROM recurring WHERE recurring_id = $recurring_id"); $row = mysqli_fetch_array($sql); $new_recurring_amount = $row['recurring_amount'] + $total; mysqli_query($mysqli,"UPDATE recurring SET recurring_amount = '$new_recurring_amount', recurring_updated_at = NOW()WHERE recurring_id = $recurring_id"); } if(isset($_POST['recurring_note'])){ $recurring_note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['recurring_note'])); mysqli_query($mysqli,"UPDATE recurring SET recurring_note = '$recurring_note', recurring_updated_at = NOW() WHERE recurring_id = $recurring_id"); } $_SESSION['alert_message'] = "Recurring Invoice Updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_recurring_item'])){ $item_id = intval($_GET['delete_recurring_item']); $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_id = $item_id"); $row = mysqli_fetch_array($sql); $recurring_id = $row['recurring_id']; $item_subtotal = $row['item_subtotal']; $item_tax = $row['item_tax']; $item_total = $row['item_total']; $sql = mysqli_query($mysqli,"SELECT * FROM recurring WHERE recurring_id = $recurring_id"); $row = mysqli_fetch_array($sql); $new_recurring_amount = $row['recurring_amount'] - $item_total; mysqli_query($mysqli,"UPDATE recurring SET recurring_amount = '$new_recurring_amount', recurring_updated_at = NOW() WHERE recurring_id = $recurring_id"); mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id"); $_SESSION['alert_message'] = "Item deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['mark_invoice_sent'])){ $invoice_id = intval($_GET['mark_invoice_sent']); mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Sent', history_description = 'INVOICE marked sent', history_created_at = NOW(), invoice_id = $invoice_id"); $_SESSION['alert_message'] = "Invoice marked sent"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['cancel_invoice'])){ $invoice_id = intval($_GET['cancel_invoice']); mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Cancelled', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Cancelled', history_description = 'INVOICE cancelled!', history_created_at = NOW(), invoice_id = $invoice_id"); $_SESSION['alert_message'] = "Invoice cancelled"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_invoice'])){ $invoice_id = intval($_GET['delete_invoice']); mysqli_query($mysqli,"DELETE FROM invoices WHERE invoice_id = $invoice_id"); //Delete Items Associated with the Invoice $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE invoice_id = $invoice_id"); while($row = mysqli_fetch_array($sql)){; $item_id = $row['item_id']; mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id"); } //Delete History Associated with the Invoice $sql = mysqli_query($mysqli,"SELECT * FROM history WHERE invoice_id = $invoice_id"); while($row = mysqli_fetch_array($sql)){; $history_id = $row['history_id']; mysqli_query($mysqli,"DELETE FROM history WHERE history_id = $history_id"); } //Delete Payments Associated with the Invoice $sql = mysqli_query($mysqli,"SELECT * FROM payments WHERE invoice_id = $invoice_id"); while($row = mysqli_fetch_array($sql)){; $payment_id = $row['payment_id']; mysqli_query($mysqli,"DELETE FROM payments WHERE payment_id = $payment_id"); } $_SESSION['alert_message'] = "Invoice deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['save_invoice'])){ $invoice_id = intval($_POST['invoice_id']); if(isset($_POST['name'])){ $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $description = strip_tags(mysqli_real_escape_string($mysqli,$_POST['description'])); $qty = $_POST['qty']; $price = $_POST['price']; $tax = $_POST['tax']; $subtotal = $price * $qty; $tax = $subtotal * $tax; $total = $subtotal + $tax; mysqli_query($mysqli,"INSERT INTO invoice_items SET item_name = '$name', item_description = '$description', item_quantity = $qty, item_price = '$price', item_subtotal = '$subtotal', item_tax = '$tax', item_total = '$total', item_created_at = NOW(), invoice_id = $invoice_id"); //Update Invoice Balances $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql); $new_invoice_amount = $row['invoice_amount'] + $total; mysqli_query($mysqli,"UPDATE invoices SET invoice_amount = '$new_invoice_amount', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); $_SESSION['alert_message'] = "Item added"; } if(isset($_POST['invoice_note'])){ $invoice_note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['invoice_note'])); mysqli_query($mysqli,"UPDATE invoices SET invoice_note = '$invoice_note', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); $_SESSION['alert_message'] = "Notes added"; } header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_invoice_item'])){ $item_id = intval($_GET['delete_invoice_item']); $sql = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE item_id = $item_id"); $row = mysqli_fetch_array($sql); $invoice_id = $row['invoice_id']; $item_subtotal = $row['item_subtotal']; $item_tax = $row['item_tax']; $item_total = $row['item_total']; $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql); $new_invoice_amount = $row['invoice_amount'] - $item_total; mysqli_query($mysqli,"UPDATE invoices SET invoice_amount = '$new_invoice_amount', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); mysqli_query($mysqli,"DELETE FROM invoice_items WHERE item_id = $item_id"); $_SESSION['alert_message'] = "Item deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_payment'])){ $invoice_id = intval($_POST['invoice_id']); $balance = $_POST['balance']; $date = strip_tags(mysqli_real_escape_string($mysqli,$_POST['date'])); $amount = $_POST['amount']; $account = intval($_POST['account']); $payment_method = strip_tags(mysqli_real_escape_string($mysqli,$_POST['payment_method'])); $reference = strip_tags(mysqli_real_escape_string($mysqli,$_POST['reference'])); $email_receipt = intval($_POST['email_receipt']); //Check to see if amount entered is greater than the balance of the invoice if($amount > $balance){ $_SESSION['alert_message'] = "Payment is more than the balance"; header("Location: " . $_SERVER["HTTP_REFERER"]); }else{ mysqli_query($mysqli,"INSERT INTO payments SET payment_date = '$date', payment_amount = '$amount', account_id = $account, payment_method = '$payment_method', payment_reference = '$reference', payment_created_at = NOW(), invoice_id = $invoice_id"); //Add up all the payments for the invoice and get the total amount paid to the invoice $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS payments_amount FROM payments WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql_total_payments_amount); $total_payments_amount = $row['payments_amount']; //Get the invoice total $sql = mysqli_query($mysqli,"SELECT * FROM invoices, clients WHERE invoices.client_id = clients.client_id AND invoices.invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql); $invoice_amount = $row['invoice_amount']; $invoice_number = $row['invoice_number']; $client_name = $row['client_name']; $client_email = $row['client_email']; //Calculate the Invoice balance $invoice_balance = $invoice_amount - $total_payments_amount; //Format Amount $formatted_amount = number_format($amount,2); $formatted_invoice_balance = number_format($invoice_balance,2); //Determine if invoice has been paid then set the status accordingly if($invoice_balance == 0){ $invoice_status = "Paid"; if($email_receipt == 1){ $mail = new PHPMailer(true); try { //Mail Server Settings //$mail->SMTPDebug = 2; // Enable verbose debug output $mail->isSMTP(); // Set mailer to use SMTP $mail->Host = $config_smtp_host; // Specify main and backup SMTP servers $mail->SMTPAuth = true; // Enable SMTP authentication $mail->Username = $config_smtp_username; // SMTP username $mail->Password = $config_smtp_password; // SMTP password $mail->SMTPSecure = 'tls'; // Enable TLS encryption, `ssl` also accepted $mail->Port = $config_smtp_port; // TCP port to connect to //Recipients $mail->setFrom($config_mail_from_email, $config_mail_from_name); $mail->addAddress("$client_email", "$client_name"); // Add a recipient // Content $mail->isHTML(true); // Set email format to HTML $mail->Subject = "Payment Recieved"; $mail->Body = "Hello $client_name,

We have recieved your payment in the amount of $$formatted_amount and it has been applied to your account. Please keep this email as a receipt for your records.

Amount: $$formatted_amount
Balance: $formatted_invoice_balance

Thank you for your business!


~
$config_company_name
$config_company_phone"; $mail->send(); echo 'Message has been sent'; mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Sent', history_description = 'Emailed Receipt!', history_created_at = NOW(), invoice_id = $invoice_id"); } catch (Exception $e) { echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}"; } } }else{ $invoice_status = "Partial"; if($email_receipt == 1){ $mail = new PHPMailer(true); try { //Mail Server Settings //$mail->SMTPDebug = 2; // Enable verbose debug output $mail->isSMTP(); // Set mailer to use SMTP $mail->Host = $config_smtp_host; // Specify main and backup SMTP servers $mail->SMTPAuth = true; // Enable SMTP authentication $mail->Username = $config_smtp_username; // SMTP username $mail->Password = $config_smtp_password; // SMTP password $mail->SMTPSecure = 'tls'; // Enable TLS encryption, `ssl` also accepted $mail->Port = $config_smtp_port; // TCP port to connect to //Recipients $mail->setFrom($config_mail_from_email, $config_mail_from_name); $mail->addAddress("$client_email", "$client_name"); // Add a recipient // Content $mail->isHTML(true); // Set email format to HTML $mail->Subject = "Payment Recieved"; $mail->Body = "Hello $client_name,

We have recieved your payment in the amount of $$formatted_amount and it has been applied to your account. Please keep this email as a receipt for your records.

Amount: $$formatted_amount
Balance: $formatted_invoice_balance

Thank you for your business!


~
$config_company_name
$config_company_phone"; $mail->send(); echo 'Message has been sent'; mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Sent', history_description = 'Emailed Receipt!', history_created_at = NOW(), invoice_id = $invoice_id"); } catch (Exception $e) { echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}"; } } } //Update Invoice Status mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status' invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); //Add Payment to History mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = '$invoice_status', history_description = 'INVOICE payment added', history_created_at = NOW(), invoice_id = $invoice_id"); $_SESSION['alert_message'] = "Payment added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } } if(isset($_GET['delete_payment'])){ $payment_id = intval($_GET['delete_payment']); $sql = mysqli_query($mysqli,"SELECT * FROM payments WHERE payment_id = $payment_id"); $row = mysqli_fetch_array($sql); $invoice_id = $row['invoice_id']; $deleted_payment_amount = $row['payment_amount']; //Add up all the payments for the invoice and get the total amount paid to the invoice $sql_total_payments_amount = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS total_payments_amount FROM payments WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql_total_payments_amount); $total_payments_amount = $row['total_payments_amount']; //Get the invoice total $sql = mysqli_query($mysqli,"SELECT * FROM invoices WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql); $invoice_amount = $row['invoice_amount']; //Calculate the Invoice balance $invoice_balance = $invoice_amount - $total_payments_amount + $deleted_payment_amount; //Determine if invoice has been paid if($invoice_balance == 0){ $invoice_status = "Paid"; }else{ $invoice_status = "Partial"; } //Update Invoice Status mysqli_query($mysqli,"UPDATE invoices SET invoice_status = '$invoice_status', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); //Add Payment to History mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = '$invoice_status', history_description = 'INVOICE payment deleted', history_created_at = NOW(), invoice_id = $invoice_id"); mysqli_query($mysqli,"DELETE FROM payments WHERE payment_id = $payment_id"); $_SESSION['alert_message'] = "Payment deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['email_invoice'])){ $invoice_id = intval($_GET['email_invoice']); $sql = mysqli_query($mysqli,"SELECT * FROM invoices, clients WHERE invoices.client_id = clients.client_id AND invoices.invoice_id = $invoice_id" ); $row = mysqli_fetch_array($sql); $invoice_id = $row['invoice_id']; $invoice_number = $row['invoice_number']; $invoice_status = $row['invoice_status']; $invoice_date = $row['invoice_date']; $invoice_due = $row['invoice_due']; $invoice_amount = $row['invoice_amount']; $invoice_url_key = $row['invoice_url_key']; $client_id = $row['client_id']; $client_name = $row['client_name']; $client_address = $row['client_address']; $client_city = $row['client_city']; $client_state = $row['client_state']; $client_zip = $row['client_zip']; $client_email = $row['client_email']; $client_phone = $row['client_phone']; if(strlen($client_phone)>2){ $client_phone = substr($row['client_phone'],0,3)."-".substr($row['client_phone'],3,3)."-".substr($row['client_phone'],6,4); } $client_website = $row['client_website']; $base_url = $_SERVER['HTTP_HOST'] . dirname($_SERVER['REQUEST_URI']); $sql_payments = mysqli_query($mysqli,"SELECT * FROM payments, accounts WHERE payments.account_id = accounts.account_id AND payments.invoice_id = $invoice_id ORDER BY payments.payment_id DESC"); //Add up all the payments for the invoice and get the total amount paid to the invoice $sql_amount_paid = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql_amount_paid); $amount_paid = $row['amount_paid']; $balance = $invoice_amount - $amount_paid; $mail = new PHPMailer(true); try{ //Mail Server Settings //$mail->SMTPDebug = 2; // Enable verbose debug output $mail->isSMTP(); // Set mailer to use SMTP $mail->Host = $config_smtp_host; // Specify main and backup SMTP servers $mail->SMTPAuth = true; // Enable SMTP authentication $mail->Username = $config_smtp_username; // SMTP username $mail->Password = $config_smtp_password; // SMTP password $mail->SMTPSecure = 'tls'; // Enable TLS encryption, `ssl` also accepted $mail->Port = $config_smtp_port; // TCP port to connect to //Recipients $mail->setFrom($config_mail_from_email, $config_mail_from_name); $mail->addAddress("$client_email", "$client_name"); // Add a recipient // Content $mail->isHTML(true); // Set email format to HTML if($invoice_status == 'Paid'){ $mail->Subject = "Invoice $invoice_number Copy"; $mail->Body = "Hello $client_name,

Please click on the link below to see your invoice marked paid.

Invoice Link


~
$config_company_name
Automated Billing Department
$config_company_phone"; }else{ $mail->Subject = "Invoice $invoice_number"; $mail->Body = "Hello $client_name,

Please view the details of the invoice below.

Invoice: $invoice_number
Issue Date: $invoice_date
Total: $$invoice_amount
Balance Due: $$balance
Due Date: $invoice_due


To view your invoice online click here


~
$config_company_name
$config_company_phone"; //$mail->AltBody = 'This is the body in plain text for non-HTML mail clients'; } $mail->send(); echo 'Message has been sent'; mysqli_query($mysqli,"INSERT INTO history SET history_date = CURDATE(), history_status = 'Sent', history_description = 'Emailed Invoice!', history_created_at = NOW(), invoice_id = $invoice_id"); //Don't chnage the status to sent if the status is anything but draf if($invoice_status == 'Draft'){ mysqli_query($mysqli,"UPDATE invoices SET invoice_status = 'Sent', invoice_updated_at = NOW() WHERE invoice_id = $invoice_id"); } $_SESSION['alert_message'] = "Invoice has been sent"; header("Location: " . $_SERVER["HTTP_REFERER"]); } catch (Exception $e) { echo "poop"; } } if(isset($_GET['pdf_invoice'])){ $invoice_id = intval($_GET['pdf_invoice']); $sql = mysqli_query($mysqli,"SELECT * FROM invoices, clients WHERE invoices.client_id = clients.client_id AND invoices.invoice_id = $invoice_id" ); $row = mysqli_fetch_array($sql); $invoice_id = $row['invoice_id']; $invoice_number = $row['invoice_number']; $invoice_status = $row['invoice_status']; $invoice_date = $row['invoice_date']; $invoice_due = $row['invoice_due']; $invoice_amount = $row['invoice_amount']; $invoice_note = $row['invoice_note']; $invoice_category_id = $row['category_id']; $client_id = $row['client_id']; $client_name = $row['client_name']; $client_address = $row['client_address']; $client_city = $row['client_city']; $client_state = $row['client_state']; $client_zip = $row['client_zip']; $client_email = $row['client_email']; $client_phone = $row['client_phone']; if(strlen($client_phone)>2){ $client_phone = substr($row['client_phone'],0,3)."-".substr($row['client_phone'],3,3)."-".substr($row['client_phone'],6,4); } $client_website = $row['client_website']; $sql_payments = mysqli_query($mysqli,"SELECT * FROM payments, accounts WHERE payments.account_id = accounts.account_id AND payments.invoice_id = $invoice_id ORDER BY payments.payment_id DESC"); //Add up all the payments for the invoice and get the total amount paid to the invoice $sql_amount_paid = mysqli_query($mysqli,"SELECT SUM(payment_amount) AS amount_paid FROM payments WHERE invoice_id = $invoice_id"); $row = mysqli_fetch_array($sql_amount_paid); $amount_paid = $row['amount_paid']; $balance = $invoice_amount - $amount_paid; $sql_items = mysqli_query($mysqli,"SELECT * FROM invoice_items WHERE invoice_id = $invoice_id ORDER BY item_id ASC"); while($row = mysqli_fetch_array($sql_items)){ $item_id = $row['item_id']; $item_name = $row['item_name']; $item_description = $row['item_description']; $item_quantity = $row['item_quantity']; $item_price = $row['item_price']; $item_subtotal = $row['item_price']; $item_tax = $row['item_tax']; $item_total = $row['item_total']; $total_tax = $item_tax + $total_tax; $sub_total = $item_price * $item_quantity + $sub_total; $invoice_items .= " $item_name $item_description $item_quantity $$item_price $$item_tax $$item_total "; } $html = '
Date: '.$invoice_date.'
Due: '.$invoice_due.'
BILL TO:

'.$client_name.'
'.$client_address.'
'.$client_city.' '.$client_state.' '.$client_zip.'

'.$client_email.'
'.$client_phone.'		  

'.$invoice_items.'
Product Description Qty Price Tax Total

Notes

'.$invoice_note.' 		Subtotal: $ '.number_format($sub_total,2).'
Tax: $ '.number_format($total_tax,2).'
Total: $ '.number_format($invoice_amount,2).'
Paid: $ '.number_format($amount_paid,2).'
Balance: $ '.number_format($balance,2).'
'.$config_invoice_footer.'
'; $mpdf = new \Mpdf\Mpdf([ 'margin_left' => 5, 'margin_right' => 5, 'margin_top' => 48, 'margin_bottom' => 25, 'margin_header' => 10, 'margin_footer' => 10 ]); $mpdf->SetProtection(array('print')); $mpdf->SetTitle("$config_company_name - Invoice"); $mpdf->SetAuthor("$config_company_name"); if($invoice_status == 'Paid'){ $mpdf->SetWatermarkText("Paid"); } $mpdf->showWatermarkText = true; $mpdf->watermark_font = 'DejaVuSansCondensed'; $mpdf->watermarkTextAlpha = 0.1; $mpdf->SetDisplayMode('fullpage'); $mpdf->WriteHTML($html); $mpdf->Output(); } if(isset($_POST['add_contact'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $title = strip_tags(mysqli_real_escape_string($mysqli,$_POST['title'])); $phone = strip_tags(mysqli_real_escape_string($mysqli,$_POST['phone'])); $phone = preg_replace("/[^0-9]/", '',$phone); $email = strip_tags(mysqli_real_escape_string($mysqli,$_POST['email'])); if($_FILES['file']['tmp_name']!='') { $path = "uploads/clients/$client_id/"; $path = $path . time() . basename( $_FILES['file']['name']); $file_name = basename($path); move_uploaded_file($_FILES['file']['tmp_name'], $path); } mysqli_query($mysqli,"INSERT INTO contacts SET contact_name = '$name', contact_title = '$title', contact_phone = '$phone', contact_email = '$email', contact_photo = '$path', contact_created_at = NOW(), client_id = $client_id"); $_SESSION['alert_message'] = "Contact added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_contact'])){ $contact_id = intval($_POST['contact_id']); $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $title = strip_tags(mysqli_real_escape_string($mysqli,$_POST['title'])); $phone = strip_tags(mysqli_real_escape_string($mysqli,$_POST['phone'])); $phone = preg_replace("/[^0-9]/", '',$phone); $email = strip_tags(mysqli_real_escape_string($mysqli,$_POST['email'])); $path = strip_tags(mysqli_real_escape_string($mysqli,$_POST['current_avatar_path'])); if($_FILES['file']['tmp_name']!='') { $path = "uploads/clients/$client_id/"; $path = $path . time() . basename( $_FILES['file']['name']); $file_name = basename($path); move_uploaded_file($_FILES['file']['tmp_name'], $path); } mysqli_query($mysqli,"UPDATE contacts SET contact_name = '$name', contact_title = '$title', contact_phone = '$phone', contact_email = '$email', contact_photo = '$path', contact_updated_at = NOW() WHERE contact_id = $contact_id"); $_SESSION['alert_message'] = "Contact updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_contact'])){ $contact_id = intval($_GET['delete_contact']); mysqli_query($mysqli,"DELETE FROM contacts WHERE contact_id = $contact_id"); $_SESSION['alert_message'] = "Contact deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_location'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $address = strip_tags(mysqli_real_escape_string($mysqli,$_POST['address'])); $city = strip_tags(mysqli_real_escape_string($mysqli,$_POST['city'])); $state = strip_tags(mysqli_real_escape_string($mysqli,$_POST['state'])); $zip = strip_tags(mysqli_real_escape_string($mysqli,$_POST['zip'])); $phone = strip_tags(mysqli_real_escape_string($mysqli,$_POST['phone'])); $phone = preg_replace("/[^0-9]/", '',$phone); $hours = strip_tags(mysqli_real_escape_string($mysqli,$_POST['hours'])); mysqli_query($mysqli,"INSERT INTO locations SET location_name = '$name', location_address = '$address', location_city = '$city', location_state = '$state', location_zip = '$zip', location_phone = '$phone', location_hours = '$hours', location_created_at = NOW(), client_id = $client_id"); $_SESSION['alert_message'] = "Location added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_location'])){ $location_id = intval($_POST['location_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $address = strip_tags(mysqli_real_escape_string($mysqli,$_POST['address'])); $city = strip_tags(mysqli_real_escape_string($mysqli,$_POST['city'])); $state = strip_tags(mysqli_real_escape_string($mysqli,$_POST['state'])); $zip = strip_tags(mysqli_real_escape_string($mysqli,$_POST['zip'])); $phone = strip_tags(mysqli_real_escape_string($mysqli,$_POST['phone'])); $phone = preg_replace("/[^0-9]/", '',$phone); $hours = strip_tags(mysqli_real_escape_string($mysqli,$_POST['hours'])); mysqli_query($mysqli,"UPDATE locations SET location_name = '$name', location_address = '$address', location_city = '$city', location_state = '$state', location_zip = '$zip', location_phone = '$phone', location_hours = '$hours', location_updated_at = NOW() WHERE location_id = $location_id"); $_SESSION['alert_message'] = "Location updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_location'])){ $location_id = intval($_GET['delete_location']); mysqli_query($mysqli,"DELETE FROM locations WHERE location_id = $location_id"); $_SESSION['alert_message'] = "Location deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_asset'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $type = strip_tags(mysqli_real_escape_string($mysqli,$_POST['type'])); $make = strip_tags(mysqli_real_escape_string($mysqli,$_POST['make'])); $model = strip_tags(mysqli_real_escape_string($mysqli,$_POST['model'])); $serial = strip_tags(mysqli_real_escape_string($mysqli,$_POST['serial'])); $ip = strip_tags(mysqli_real_escape_string($mysqli,$_POST['ip'])); $location = intval($_POST['location']); $vendor = intval($_POST['vendor']); $contact = intval($_POST['contact']); $network = intval($_POST['network']); $purchase_date = strip_tags(mysqli_real_escape_string($mysqli,$_POST['purchase_date'])); $warranty_expire = strip_tags(mysqli_real_escape_string($mysqli,$_POST['warranty_expire'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); mysqli_query($mysqli,"INSERT INTO assets SET asset_name = '$name', asset_type = '$type', asset_make = '$make', asset_model = '$model', asset_serial = '$serial', asset_ip = '$ip', location_id = $location, vendor_id = $vendor, contact_id = $contact, asset_purchase_date = '$purchase_date', asset_warranty_expire = '$warranty_expire', asset_note = '$note', asset_created_at = NOW(), network_id = $network, client_id = $client_id"); if(!empty($_POST['username'])) { $asset_id = mysqli_insert_id($mysqli); $username = strip_tags(mysqli_real_escape_string($mysqli,$_POST['username'])); $password = strip_tags(mysqli_real_escape_string($mysqli,$_POST['password'])); $description = "$type - $name"; mysqli_query($mysqli,"INSERT INTO logins SET login_description = '$description', login_username = '$username', login_password = '$password', login_created_at = NOW(), asset_id = $asset_id, client_id = $client_id"); } $_SESSION['alert_message'] = "Asset added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_asset'])){ $asset_id = intval($_POST['asset_id']); $login_id = intval($_POST['login_id']); $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $type = strip_tags(mysqli_real_escape_string($mysqli,$_POST['type'])); $make = strip_tags(mysqli_real_escape_string($mysqli,$_POST['make'])); $model = strip_tags(mysqli_real_escape_string($mysqli,$_POST['model'])); $serial = strip_tags(mysqli_real_escape_string($mysqli,$_POST['serial'])); $ip = strip_tags(mysqli_real_escape_string($mysqli,$_POST['ip'])); $location = intval($_POST['location']); $vendor = intval($_POST['vendor']); $contact = intval($_POST['contact']); $network = intval($_POST['network']); $purchase_date = strip_tags(mysqli_real_escape_string($mysqli,$_POST['purchase_date'])); $warranty_expire = strip_tags(mysqli_real_escape_string($mysqli,$_POST['warranty_expire'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); $username = strip_tags(mysqli_real_escape_string($mysqli,$_POST['username'])); $password = strip_tags(mysqli_real_escape_string($mysqli,$_POST['password'])); $description = "$type - $name"; mysqli_query($mysqli,"UPDATE assets SET asset_name = '$name', asset_type = '$type', asset_make = '$make', asset_model = '$model', asset_serial = '$serial', asset_ip = '$ip', location_id = $location, vendor_id = $vendor, contact_id = $contact, asset_purchase_date = '$purchase_date', asset_warranty_expire = '$warranty_expire', asset_note = '$note', asset_updated_at = NOW(), network_id = $network WHERE asset_id = $asset_id"); //If login exists then update the login if($login_id > 0){ mysqli_query($mysqli,"UPDATE logins SET login_description = '$description', login_username = '$username', login_password = '$password', login_updated_at = NOW() WHERE login_id = $login_id"); }else{ //If Username is filled in then add a login if(!empty($_POST['username'])) { mysqli_query($mysqli,"INSERT INTO logins SET login_description = '$description', login_username = '$username', login_password = '$password', login_created_at = NOW(), asset_id = $asset_id, client_id = $client_id"); } } $_SESSION['alert_message'] = "Asset updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_asset'])){ $asset_id = intval($_GET['delete_asset']); mysqli_query($mysqli,"DELETE FROM assets WHERE asset_id = $asset_id"); $_SESSION['alert_message'] = "Asset deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_login'])){ $client_id = intval($_POST['client_id']); $description = strip_tags(mysqli_real_escape_string($mysqli,$_POST['description'])); $web_link = strip_tags(mysqli_real_escape_string($mysqli,$_POST['web_link'])); $username = strip_tags(mysqli_real_escape_string($mysqli,$_POST['username'])); $password = strip_tags(mysqli_real_escape_string($mysqli,$_POST['password'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); $vendor_id = intval($_POST['vendor']); $asset_id = intval($_POST['asset']); $application_id = intval($_POST['application']); mysqli_query($mysqli,"INSERT INTO logins SET login_description = '$description', login_web_link = '$web_link', login_username = '$username', login_password = '$password', login_note = '$note', login_created_at = NOW(), vendor_id = $vendor_id, asset_id = $asset_id, application_id = $application_id, client_id = $client_id"); $_SESSION['alert_message'] = "Login added"; header("Location: client.php?client_id=$client_id&tab=logins"); } if(isset($_POST['edit_login'])){ $login_id = intval($_POST['login_id']); $description = strip_tags(mysqli_real_escape_string($mysqli,$_POST['description'])); $web_link = strip_tags(mysqli_real_escape_string($mysqli,$_POST['web_link'])); $username = strip_tags(mysqli_real_escape_string($mysqli,$_POST['username'])); $password = strip_tags(mysqli_real_escape_string($mysqli,$_POST['password'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); mysqli_query($mysqli,"UPDATE logins SET login_description = '$description', login_web_link = '$web_link', login_username = '$username', login_password = '$password', login_note = '$note', login_updated_at = NOW() WHERE login_id = $login_id"); $_SESSION['alert_message'] = "Login updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_login'])){ $login_id = intval($_GET['delete_login']); mysqli_query($mysqli,"DELETE FROM logins WHERE login_id = $login_id"); $_SESSION['alert_message'] = "Login deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_file'])){ $client_id = intval($_POST['client_id']); $new_name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['new_name'])); if($_FILES['file']['tmp_name']!='') { $path = "uploads/clients/$client_id/"; $path = $path . basename( $_FILES['file']['name']); $file_name = basename($path); move_uploaded_file($_FILES['file']['tmp_name'], $path); $ext = pathinfo($path); $ext = $ext['extension']; } mysqli_query($mysqli,"INSERT INTO files SET file_name = '$path', file_ext = '$ext', file_created_at = NOW(), client_id = $client_id"); $_SESSION['alert_message'] = "File uploaded"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_file'])){ $file_id = intval($_GET['delete_file']); $sql_file = mysqli_query($mysqli,"SELECT * FROM files WHERE file_id = $file_id"); $row = mysqli_fetch_array($sql_file); $file_name = $row['file_name']; unlink($file_name); mysqli_query($mysqli,"DELETE FROM files WHERE file_id = $file_id"); $_SESSION['alert_message'] = "File deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_note'])){ $client_id = intval($_POST['client_id']); $subject = strip_tags(mysqli_real_escape_string($mysqli,$_POST['subject'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); mysqli_query($mysqli,"INSERT INTO notes SET note_subject = '$subject', note_body = '$note', note_created_at = NOW(), client_id = $client_id"); $_SESSION['alert_message'] = "Note added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_note'])){ $note_id = intval($_POST['note_id']); $subject = strip_tags(mysqli_real_escape_string($mysqli,$_POST['subject'])); $note = strip_tags(mysqli_real_escape_string($mysqli,$_POST['note'])); mysqli_query($mysqli,"UPDATE notes SET note_subject = '$subject', note_body = '$note', note_updated_at = NOW() WHERE note_id = $note_id"); $_SESSION['alert_message'] = "Note updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_note'])){ $note_id = intval($_GET['delete_note']); mysqli_query($mysqli,"DELETE FROM notes WHERE note_id = $note_id"); $_SESSION['alert_message'] = "Note deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_network'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $network = strip_tags(mysqli_real_escape_string($mysqli,$_POST['network'])); $gateway = strip_tags(mysqli_real_escape_string($mysqli,$_POST['gateway'])); $dhcp_range = strip_tags(mysqli_real_escape_string($mysqli,$_POST['dhcp_range'])); $location_id = intval($_POST['location']); mysqli_query($mysqli,"INSERT INTO networks SET network_name = '$name', network = '$network', network_gateway = '$gateway', network_dhcp_range = '$dhcp_range', network_created_at = NOW(), location_id = $location_id, client_id = $client_id"); $_SESSION['alert_message'] = "Network added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_network'])){ $network_id = intval($_POST['network_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $network = strip_tags(mysqli_real_escape_string($mysqli,$_POST['network'])); $gateway = strip_tags(mysqli_real_escape_string($mysqli,$_POST['gateway'])); $dhcp_range = strip_tags(mysqli_real_escape_string($mysqli,$_POST['dhcp_range'])); $location_id = intval($_POST['location']); mysqli_query($mysqli,"UPDATE networks SET network_name = '$name', network = '$network', network_gateway = '$gateway', network_dhcp_range = '$dhcp_range', network_updated_at = NOW(), location_id = $location_id WHERE network_id = $network_id"); $_SESSION['alert_message'] = "Network updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_network'])){ $network_id = intval($_GET['delete_network']); mysqli_query($mysqli,"DELETE FROM networks WHERE network_id = $network_id"); $_SESSION['alert_message'] = "Network deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_domain'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $registrar = intval($_POST['registrar']); $webhost = intval($_POST['webhost']); $expire = strip_tags(mysqli_real_escape_string($mysqli,$_POST['expire'])); mysqli_query($mysqli,"INSERT INTO domains SET domain_name = '$name', domain_registrar = $registrar, domain_webhost = $webhost, domain_expire = '$expire', domain_created_at = NOW(), client_id = $client_id"); $_SESSION['alert_message'] = "Domain added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_domain'])){ $domain_id = intval($_POST['domain_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $registrar = intval($_POST['registrar']); $webhost = intval($_POST['webhost']); $expire = strip_tags(mysqli_real_escape_string($mysqli,$_POST['expire'])); mysqli_query($mysqli,"UPDATE domains SET domain_name = '$name', domain_registrar = $registrar, domain_webhost = $webhost, domain_expire = '$expire', domain_updated_at = NOW() WHERE domain_id = $domain_id"); $_SESSION['alert_message'] = "Domain updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_domain'])){ $domain_id = intval($_GET['delete_domain']); mysqli_query($mysqli,"DELETE FROM domains WHERE domain_id = $domain_id"); $_SESSION['alert_message'] = "Domain deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['add_software'])){ $client_id = intval($_POST['client_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $type = strip_tags(mysqli_real_escape_string($mysqli,$_POST['type'])); $license = strip_tags(mysqli_real_escape_string($mysqli,$_POST['license'])); mysqli_query($mysqli,"INSERT INTO software SET software_name = '$name', software_type = '$type', software_license = '$license', software_created_at = NOW(), client_id = $client_id"); if(!empty($_POST['username'])) { $software_id = mysqli_insert_id($mysqli); $username = strip_tags(mysqli_real_escape_string($mysqli,$_POST['username'])); $password = strip_tags(mysqli_real_escape_string($mysqli,$_POST['password'])); mysqli_query($mysqli,"INSERT INTO logins SET login_username = '$username', login_password = '$password', software_id = $software_id, login_created_at = NOW(), client_id = $client_id"); } $_SESSION['alert_message'] = "Software added"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_POST['edit_software'])){ $software_id = intval($_POST['software_id']); $name = strip_tags(mysqli_real_escape_string($mysqli,$_POST['name'])); $type = strip_tags(mysqli_real_escape_string($mysqli,$_POST['type'])); $license = strip_tags(mysqli_real_escape_string($mysqli,$_POST['license'])); mysqli_query($mysqli,"UPDATE software SET software_name = '$name', software_type = '$type', software_license = '$license', software_updated_at = NOW() WHERE software_id = $software_id"); $_SESSION['alert_message'] = "Software updated"; header("Location: " . $_SERVER["HTTP_REFERER"]); } if(isset($_GET['delete_software'])){ $software_id = intval($_GET['delete_software']); mysqli_query($mysqli,"DELETE FROM software WHERE software_id = $software_id"); $_SESSION['alert_message'] = "Software deleted"; header("Location: " . $_SERVER["HTTP_REFERER"]); } ?>