Files
itflow/agent/modals/client/client_statement.php
johnnyq be002b6f29 Roles stage 4: the money on invoices goes by Financial with Sales at Read through billingMoneyCan and enforceBillingMoney, so taking payments one at a time, by saved card or as a batch, changing them and emailing receipts, reminders and statements need write access to Financial, and deleting or refunding a payment needs full access, with the old Sales rules for reminders, statements and receipts still accepted; invoice, invoice list, Income and payment quick looks offer only what the role can do, the reminder window offers only the reminder to a role that cannot send the invoice, a reminder for a draft or with nothing owed still needs Sales, and Income bulk Set Category on payments needs Sales as it changes the invoice; database 3.1.8 gives the built-in Accountant full access to Financial when it still has its shipped levels, and new installs seed it that way; calendar events for a client follow the role's Clients level through calendarEventCan, Read to see, Modify to add, change, move, skip or send, Full to delete or Modify for the agent who added it, events an agent is on always show, events with no client stay open to everyone, and the calendar, dashboard and calendar links leave out other agents' client events for roles without Clients, with New event, the client picker and dragging following the same rule; the API now sets PHP and MySQL to ITFlow's timezone so what it creates, API ticket SLA times and key expiry go by local time, and inc_set_timezone.php only writes the session when one is open and no longer leaves its result and row variables behind; changelog updated
2026-10-17 21:52:10 -04:00

236 lines
9.6 KiB
PHP

<?php
/*
* Send a client's statement - their invoices for a period, open ones only or
* paid too - to the contacts picked, with a note and the PDF, or download
* it. ?client_id=. Posts send_statement.
*/
require_once '../../../includes/modal_header.php';
enforceBillingMoney('statement');
$client_id = intval($_GET['client_id']);
enforceClientAccess();
$sql = mysqli_query($mysqli, "SELECT client_currency_code, client_name FROM clients WHERE client_id = $client_id LIMIT 1");
$row = mysqli_fetch_assoc($sql);
$client_name = escapeHtml($row['client_name']);
$client_currency_code = escapeHtml($row['client_currency_code']);
if (empty($client_currency_code)) {
$client_currency_code = $session_company_currency;
}
// What the client owes right now, shown as context so the agent knows roughly
// what is about to go out. Deliberately not filtered by the date range below -
// this is the standing balance, not a preview of the statement.
$row = mysqli_fetch_assoc(mysqli_query(
$mysqli,
"SELECT IFNULL(SUM(invoice_amount), 0) - IFNULL(SUM(amount_paid), 0) AS balance,
COUNT(invoice_id) AS invoice_count FROM invoices
LEFT JOIN (
SELECT payment_invoice_id, SUM(payment_amount) AS amount_paid FROM payments
WHERE payment_archived_at IS NULL
GROUP BY payment_invoice_id
) AS invoice_payments ON payment_invoice_id = invoice_id
WHERE invoice_client_id = $client_id
AND invoice_status NOT IN ('Draft', 'Cancelled', 'Non-Billable')"
));
$outstanding_balance = floatval($row['balance']);
// Statement recipients follow the invoice rules - a statement is a billing
// document, so the same people who would get the invoice get the statement.
$sql_contacts = mysqli_query(
$mysqli,
"SELECT contact_billing, contact_email, contact_id, contact_photo, contact_name, contact_primary, contact_title
FROM contacts
WHERE contact_client_id = $client_id
AND contact_archived_at IS NULL
AND contact_email IS NOT NULL
AND contact_email != ''
" . documentContactFilterSql('invoice') . "
ORDER BY contact_primary DESC, contact_billing DESC, contact_name ASC"
);
$contact_count = mysqli_num_rows($sql_contacts);
$default_contact_ids = [];
$sql_defaults = mysqli_query(
$mysqli,
"SELECT contact_id FROM contacts
WHERE contact_client_id = $client_id
AND contact_archived_at IS NULL
AND contact_email IS NOT NULL
AND contact_email != ''
" . documentDefaultContactFilterSql('invoice')
);
while ($row = mysqli_fetch_assoc($sql_defaults)) {
$default_contact_ids[] = intval($row['contact_id']);
}
ob_start();
?>
<div class="modal-header bg-dark">
<h5 class="modal-title text-white">
<i class="fa fa-fw fa-file-alt me-2"></i>Send Account Statement
<span class="fw-normal text-white-50 ms-1"><?= $client_name ?></span>
</h5>
<button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal"></button>
</div>
<form action="post.php" method="post" autocomplete="off" id="clientStatement<?= $client_id ?>">
<input type="hidden" name="csrf_token" value="<?= $_SESSION['csrf_token'] ?>">
<input type="hidden" name="client_id" value="<?= $client_id ?>">
<div class="modal-body">
<?php if ($contact_count == 0) { ?>
<p class="text-muted mb-0">
This client has no primary or billing contact with an email address, so there is
nobody to send a statement to. Flag a contact as billing first.
</p>
<?php } else { ?>
<div class="alert alert-secondary">
<i class="fa fa-fw fa-balance-scale me-2"></i>Current outstanding balance:
<strong><?= numfmt_format_currency($currency_format, $outstanding_balance, $client_currency_code) ?></strong>
</div>
<h6 class="text-bold">Statement Options</h6>
<div class="row g-2">
<div class="col-sm-6 mb-3">
<label>From</label>
<div class="input-group">
<span class="input-group-text"><i class="fa fa-fw fa-calendar"></i></span>
<input type="date" class="form-control" name="dtf" max="2999-12-31" data-statement-option>
</div>
<small class="text-muted">Leave blank for all history</small>
</div>
<div class="col-sm-6 mb-3">
<label>To</label>
<div class="input-group">
<span class="input-group-text"><i class="fa fa-fw fa-calendar"></i></span>
<input type="date" class="form-control" name="dtt" max="2999-12-31" value="<?= date("Y-m-d") ?>" data-statement-option>
</div>
</div>
</div>
<div class="mb-3">
<div class="form-check">
<input type="checkbox" class="form-check-input" id="statementIncludePaid" name="include_paid" value="1" data-statement-option>
<label class="form-check-label" for="statementIncludePaid">
Include paid invoices
<span class="text-muted">- off means outstanding items only</span>
</label>
</div>
</div>
<a class="btn btn-sm btn-outline-secondary mb-1" href="post.php?export_client_statement_pdf=<?= $client_id ?>&amp;csrf_token=<?= $_SESSION['csrf_token'] ?>" target="_blank" data-statement-pdf>
<i class="fas fa-fw fa-file-pdf me-1"></i>Download PDF
</a>
<hr>
<h6 class="text-bold">Email Options</h6>
<label class="mb-2">Send to <strong class="text-danger">*</strong></label>
<div class="list-group mb-0">
<?php
while ($row = mysqli_fetch_assoc($sql_contacts)) {
$contact_id = intval($row['contact_id']);
$contact_name = escapeHtml($row['contact_name']);
$contact_email = escapeHtml($row['contact_email']);
$contact_title = escapeHtml($row['contact_title']);
$contact_checked = in_array($contact_id, $default_contact_ids, true);
?>
<label class="list-group-item d-flex align-items-center gap-2" for="statementContact<?= $contact_id ?>">
<input type="checkbox" class="form-check-input flex-shrink-0 m-0" name="contacts[]"
id="statementContact<?= $contact_id ?>" value="<?= $contact_id ?>"
<?php if ($contact_checked) { echo "checked"; } ?>>
<?= contactAvatar($client_id, $contact_id, $row['contact_name'], $row['contact_photo'], 'sm') ?>
<span class="min-w-0">
<span class="d-flex flex-wrap align-items-center column-gap-1">
<strong><?= $contact_name ?></strong>
<?= contactFlagPills($row, false) ?>
<?php if ($contact_title) { ?><span class="text-body-secondary small"><?= $contact_title ?></span><?php } ?>
</span>
<span class="d-block small text-body-secondary text-truncate"><?= $contact_email ?></span>
</span>
</label>
<?php
}
?>
</div>
<label class="form-label mt-3">Message <span class="text-body-secondary fw-normal small">in the email, above the statement</span></label>
<div class="input-group mb-3">
<span class="input-group-text align-items-start pt-2"><i class="fas fa-fw fa-comment"></i></span>
<textarea class="form-control" name="note" rows="2" maxlength="2000" placeholder="Optional - a word of your own"></textarea>
</div>
<div class="form-check form-switch mb-0">
<input class="form-check-input" type="checkbox" role="switch" name="attach_pdf" value="1" id="statementPdf<?= $client_id ?>" <?= billingReminderRules()['attach_pdf'] ? 'checked' : '' ?>>
<label class="form-check-label" for="statementPdf<?= $client_id ?>">Attach the statement as a PDF</label>
</div>
<?php } ?>
</div>
<div class="modal-footer">
<?php if ($contact_count > 0) { ?>
<button type="submit" name="send_statement" class="btn btn-primary text-bold">
<i class="fa fa-fw fa-paper-plane me-2"></i>Send Statement
</button>
<?php } ?>
<button type="button" class="btn btn-light" data-bs-dismiss="modal">
<i class="fa fa-fw fa-times me-2"></i>Cancel
</button>
</div>
</form>
<script>
(function () {
// Download PDF follows the period and options picked
var form = document.getElementById('clientStatement<?= $client_id ?>');
if (!form || form.dataset.wired) {
return;
}
form.dataset.wired = '1';
var link = form.querySelector('[data-statement-pdf]');
if (!link) {
return;
}
var base = link.getAttribute('href');
function update() {
var url = base;
form.querySelectorAll('[data-statement-option]').forEach(function (input) {
if (input.type === 'checkbox' ? input.checked : input.value) {
url += '&' + encodeURIComponent(input.name) + '=' + encodeURIComponent(input.type === 'checkbox' ? '1' : input.value);
}
});
link.setAttribute('href', url);
}
form.addEventListener('change', update);
update();
})();
</script>
<?php
require_once '../../../includes/modal_footer.php';