From 33631ac48cd91bf9bee1cd7f25f2f23fc640cb65 Mon Sep 17 00:00:00 2001
From: mark <mark>
Date: Wed, 1 Feb 2012 05:30:16 +0000
Subject: print customer statements on the fly, #15864

---
 httemplate/view/cust_main_statement-pdf.cgi | 39 +++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100755 httemplate/view/cust_main_statement-pdf.cgi

(limited to 'httemplate/view/cust_main_statement-pdf.cgi')

diff --git a/httemplate/view/cust_main_statement-pdf.cgi b/httemplate/view/cust_main_statement-pdf.cgi
new file mode 100755
index 000000000..7a0e19838
--- /dev/null
+++ b/httemplate/view/cust_main_statement-pdf.cgi
@@ -0,0 +1,39 @@
+<%doc>
+Like view/cust_statement-pdf.cgi, but for viewing/printing the implicit 
+statement containing all of a customer's invoices.  Slightly redundant.
+I don't see the need to create an equivalent to view/cust_statement.html 
+for this case, but one can be added if necessary.
+</%doc>
+<% $pdf %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('View invoices');
+
+#untaint statement
+my($query) = $cgi->keywords;
+$query =~ /^((.+)-)?(\d+)$/;
+my $templatename = $2 || 'statement'; #XXX configure... via event??  eh..
+my $custnum = $3;
+
+my $cust_main = qsearchs({
+  'select'    => 'cust_main.*',
+  'table'     => 'cust_main',
+  'hashref'   => { 'custnum' => $custnum },
+  'extra_sql' => ' AND '. $FS::CurrentUser::CurrentUser->agentnums_sql,
+});
+die "Customer #$custnum not found!" unless $cust_main;
+
+my $cust_statement = FS::cust_statement->new({
+  'custnum'       => $custnum,
+  'statementnum'  => 'ALL', #magic
+  '_date'         => time,
+});
+
+my $pdf = $cust_statement->print_pdf( '', $templatename );
+
+http_header('Content-Type' => 'application/pdf' );
+http_header('Content-Length' => length($pdf) );
+http_header('Cache-control' => 'max-age=60' );
+
+</%init>
-- 
cgit v1.2.1