blob: aaded9f5824a91e4c7d06e5c73bdaf9c8ee49660 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
<% include('/elements/header-popup.html', $success_msg ) %>
<SCRIPT TYPE="text/javascript">
<% $js %>
</SCRIPT>
</BODY>
</HTML>
<%init>
die "access denied"
unless $FS::CurrentUser::CurrentUser->access_right('Import');
$cgi->param('action') =~ /^(confirm|cancel)$/ or die 'illegal action';
my $action = $1;
my $success_msg = '';
my $error = '';
my $js = 'window.top.location.reload();';
$cgi->param('ordernum') =~ /^(\d+)$/ or die 'illegal ordernum';
my $ordernum = $1;
my $did_order = qsearchs( {
'table' => 'did_order',
'hashref' => { 'ordernum' => $ordernum },
} );
die "No order $ordernum" unless $did_order;
if ( $action eq 'confirm' ) {
my $confirmed = '';
my $sucess_msg = 'DID order confirmed';
$confirmed = parse_datetime($cgi->param('confirmed'))
if $cgi->param('confirmed') && $cgi->param('confirmed') !~ /^\d+$/;
$confirmed = $1
if $cgi->param('confirmed') && $cgi->param('confirmed') =~ /^(\d+)$/;
die "invalid confirmation date" unless $confirmed;
$did_order->confirmed($confirmed);
$did_order->vendor_order_id($cgi->param('vendor_order_id'));
$error = $did_order->replace;
if ( $error ) {
$cgi->param('error', $error);
print $cgi->redirect(popurl(1). "did_order_confirm.html?". $cgi->query_string );
}
}
elsif ( $action eq 'cancel' ) {
my $sucess_msg = 'DID order cancelled';
$error = $did_order->delete;
$js = "window.location.href = '${p}browse/did_order.html'";
}
</%init>
|