- |
+
+
+ |
+ |
 ?>)
@@ -243,6 +252,9 @@ require __DIR__ . '/includes/header.php';
+
+
+
@@ -533,6 +545,37 @@ function deleteItem(sku) {
}
});
}
+
+function toggleAllCheckboxes(source) {
+ const checkboxes = document.querySelectorAll(".item-checkbox");
+ for (let i = 0; i < checkboxes.length; i++) {
+ checkboxes[i].checked = source.checked;
+ }
+}
+
+function printBulkLabels() {
+ const checkboxes = document.querySelectorAll(".item-checkbox:checked");
+ if (checkboxes.length === 0) {
+ Swal.fire('', '', 'warning inaly);
+ return;
+ }
+
+ let skus = [];
+ checkboxes.forEach((cb) => skus.push(cb.value));
+
+ const form = document.createElement('form');
+ form.method = 'POST';
+ form.action = 'print_labels.php';
+
+ const input = document.createElement('input');
+ input.type = 'hidden';
+ input.name = 'skus';
+ input.value = skus.join(\",\");
+
+ form.appendChild(input);
+ document.body.appendChild(form);
+ form.submit();
+}
-
\ No newline at end of file
+
\ No newline at end of file
diff --git a/suppliers.php b/suppliers.php
index b6cd5e5..6da55f0 100644
--- a/suppliers.php
+++ b/suppliers.php
@@ -1,6 +1,6 @@
prepare("INSERT INTO users (username, password, role, branch_code, name_ar, name_en) VALUES (?, ?, ?, ?, ?, ?)");
- $stmt->execute([$username, $hash, $role, $branch_code, $name_ar, $name_en]);
+ $stmt = db()->prepare("INSERT INTO users (username, password, role, branch_code, name_ar, name_en, permissions) VALUES (?, ?, ?, ?, ?, ?, ?)");
+ $perms = isset($_POST["permissions"]) ? json_encode($_POST["permissions"]) : "{}";
+ $stmt->execute([$username, $hash, $role, $branch_code, $name_ar, $name_en, $perms]);
set_flash('success', tr('تمت إضافة المستخدم بنجاح.', 'User added successfully.'));
} catch (PDOException $e) {
set_flash('error', tr('حدث خطأ، قد يكون اسم المستخدم موجوداً مسبقاً.', 'Error occurred, username might already exist.'));
@@ -34,6 +36,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
}
if ($action === 'edit') {
+ if (!has_permission('users', 'edit')) { set_flash('error', tr('ليس لديك صلاحية', 'No permission')); redirect_to('users.php'); }
$id = (int)($_POST['id'] ?? 0);
$username = trim($_POST['username'] ?? '');
$name_ar = trim($_POST['name_ar'] ?? '');
@@ -46,11 +49,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
try {
if ($password) {
$hash = password_hash($password, PASSWORD_DEFAULT);
- $stmt = db()->prepare("UPDATE users SET username=?, password=?, role=?, branch_code=?, name_ar=?, name_en=? WHERE id=?");
- $stmt->execute([$username, $hash, $role, $branch_code, $name_ar, $name_en, $id]);
+ $stmt = db()->prepare("UPDATE users SET username=?, password=?, role=?, branch_code=?, name_ar=?, name_en=?, permissions=? WHERE id=?");
+ $perms = isset($_POST["permissions"]) ? json_encode($_POST["permissions"]) : "{}";
+ $stmt->execute([$username, $hash, $role, $branch_code, $name_ar, $name_en, $perms, $id]);
} else {
- $stmt = db()->prepare("UPDATE users SET username=?, role=?, branch_code=?, name_ar=?, name_en=? WHERE id=?");
- $stmt->execute([$username, $role, $branch_code, $name_ar, $name_en, $id]);
+ $stmt = db()->prepare("UPDATE users SET username=?, role=?, branch_code=?, name_ar=?, name_en=?, permissions=? WHERE id=?");
+ $perms = isset($_POST["permissions"]) ? json_encode($_POST["permissions"]) : "{}";
+ $stmt->execute([$username, $role, $branch_code, $name_ar, $name_en, $perms, $id]);
}
set_flash('success', tr('تم تعديل المستخدم بنجاح.', 'User updated successfully.'));
} catch (PDOException $e) {
@@ -61,6 +66,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
}
if ($action === 'delete') {
+ if (!has_permission('users', 'del')) { set_flash('error', tr('ليس لديك صلاحية', 'No permission')); redirect_to('users.php'); }
$id = (int)($_POST['id'] ?? 0);
if ($id && $id !== $user['id']) {
$stmt = db()->prepare("DELETE FROM users WHERE id=?");
@@ -103,9 +109,11 @@ require __DIR__ . '/includes/header.php';
+
+
|
@@ -149,15 +155,13 @@ require __DIR__ . '/includes/header.php';