diff --git a/htdocs/comm/prospect/prospects.php b/htdocs/comm/prospect/prospects.php index 944cb653e81..ee11ecbb43e 100644 --- a/htdocs/comm/prospect/prospects.php +++ b/htdocs/comm/prospect/prospects.php @@ -36,14 +36,8 @@ $user->getrights('fichinter'); $user->getrights('commande'); $user->getrights('projet'); -if ($_GET["action"] == 'cstc') -{ - $sql = "UPDATE ".MAIN_DB_PREFIX."societe SET fk_stcomm = ".$_GET["pstcomm"]; - $sql .= " WHERE idp = ".$_GET["pid"]; - $db->query($sql); -} - // Sécurité accés client +$socidp=0; if ($user->societe_id > 0) { $action = ''; @@ -51,9 +45,12 @@ if ($user->societe_id > 0) } $socname=isset($_GET["socname"])?$_GET["socname"]:$_POST["socname"]; +$stcomm=isset($_GET["stcomm"])?$_GET["stcomm"]:$_POST["stcomm"]; $sortfield = isset($_GET["sortfield"])?$_GET["sortfield"]:$_POST["sortfield"]; $sortorder = isset($_GET["sortorder"])?$_GET["sortorder"]:$_POST["sortorder"]; $page=isset($_GET["page"])?$_GET["page"]:$_POST["page"]; +if (! $sortorder) $sortorder="ASC"; +if (! $sortfield) $sortfield="s.nom"; $page = $user->page_param["page"]; if ($page == -1) { $page = 0 ; } @@ -62,137 +59,153 @@ $offset = $conf->liste_limit * $page ; $pageprev = $page - 1; $pagenext = $page + 1; + + +/* + * Actions + */ +if ($_GET["action"] == 'cstc') +{ + $sql = "UPDATE ".MAIN_DB_PREFIX."societe SET fk_stcomm = ".$_GET["pstcomm"]; + $sql .= " WHERE idp = ".$_GET["pid"]; + $db->query($sql); +} + + +/* + * Affichage liste + */ + $sql = "SELECT s.idp, s.nom, s.ville, ".$db->pdate("s.datec")." as datec, ".$db->pdate("s.datea")." as datea, st.libelle as stcomm, s.prefix_comm, s.fk_stcomm "; $sql .= ", d.nom as departement"; -$sql .= " FROM ".MAIN_DB_PREFIX."societe as s, ".MAIN_DB_PREFIX."c_stcomm as st"; +$sql .= " FROM ".MAIN_DB_PREFIX."c_stcomm as st, ".MAIN_DB_PREFIX."societe as s"; $sql .= " LEFT join ".MAIN_DB_PREFIX."c_departements as d on d.rowid = s.fk_departement"; $sql .= " WHERE s.fk_stcomm = st.id AND s.client=2"; -if ($_GET["stcomm"]) +if (isset($_GET["stcomm"])) { - $sql .= " AND s.fk_stcomm=".$_GET["stcomm"]; + $sql .= " AND s.fk_stcomm=".$_GET["stcomm"]; } if ($user->societe_id) { - $sql .= " AND s.idp = " .$user->societe_id; + $sql .= " AND s.idp = " .$user->societe_id; } if ($_GET["search_nom"]) { - $sql .= " AND lower(s.nom) like '%".strtolower($_GET["search_nom"])."%'"; + $sql .= " AND lower(s.nom) like '%".strtolower($_GET["search_nom"])."%'"; } if ($_GET["search_ville"]) { - $sql .= " AND lower(s.ville) like '%".strtolower($_GET["search_ville"])."%'"; + $sql .= " AND lower(s.ville) like '%".strtolower($_GET["search_ville"])."%'"; } if ($socname) { - $sql .= " AND lower(s.nom) like '%".strtolower($socname)."%'"; - $sortfield = "lower(s.nom)"; - $sortorder = "ASC"; + $sql .= " AND lower(s.nom) like '%".strtolower($socname)."%'"; + $sortfield = "lower(s.nom)"; + $sortorder = "ASC"; } -if (! $sortorder) $sortorder="ASC"; -if (! $sortfield) $sortfield="s.nom"; - $sql .= " ORDER BY $sortfield $sortorder, s.nom ASC "; $sql .= $db->plimit($conf->liste_limit+1, $offset); $resql = $db->query($sql); if ($resql) { - $num = $db->num_rows($resql); + $num = $db->num_rows($resql); - if ($num == 1 && $socname) + if ($num == 1 && $socname) { - $obj = $db->fetch_object($resql); - Header("Location: fiche.php?socid=".$obj->idp); + $obj = $db->fetch_object($resql); + Header("Location: fiche.php?socid=".$obj->idp); + exit: } - else + else { - llxHeader(); + llxHeader(); } - $urladd="page=$page&stcomm=$stcomm"; + $urladd="page=$page"; + if (isset($stcomm)) $urladd.="&stcomm=".$stcomm; - print_barre_liste($langs->trans("ListOfProspects"), $page, "prospects.php",'&stcomm='.$_GET["stcomm"],"","",'',$num); + print_barre_liste($langs->trans("ListOfProspects"), $page, "prospects.php",'&stcomm='.$_GET["stcomm"],"","",'',$num); - $i = 0; - - print '
| '; - print " |