<?php

session_start();

////////////////////////////////////////////// Database Connector /////////////////////////////////////////////////////////////
require_once("connectioni.php");


////////////////////////////////////////////// Write XML ////////////////////////////////////////////////////////////////////
header('Content-Type: text/xml');
date_default_timezone_set('Asia/Colombo');


/////////////////////////////////////// GetValue //////////////////////////////////////////////////////////////////////////
///////////////////////////////////// Registration /////////////////////////////////////////////////////////////////////////


if ($_GET["Command"] == "setitem") {

    $sql_invpara = "SELECT * from invpara";
    $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
    $row_invpara = mysqli_fetch_array($result_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;

    $ResponseXML .= "";
    $ResponseXML .= "<salesdetails>";

    $sqlt = "SELECT * from s_mas where  STK_NO='" . $_GET["itemd_hidden"] . "'";
    $resultt = mysqli_query($GLOBALS['dbinv'], $sqlt);
    if ($row = mysqli_fetch_array($resultt)) {
        $ResponseXML .= "<STK_NO><![CDATA[" . $row['STK_NO'] . "]]></STK_NO>";
        $ResponseXML .= "<DESCRIPT><![CDATA[" . $row['DESCRIPT'] . "]]></DESCRIPT>";

        if ($_GET["vatmethod"] == "non") {
            $SELLING = $row['SELLING'];
        } else {
            $SELLING = $row['SELLING'] / ($vatrate + 1);
        }

        $ResponseXML .= "<SELLING><![CDATA[" . number_format($SELLING, 2, ".", ",") . "]]></SELLING>";

        $sql_qty = "select QTYINHAND from s_submas where STK_NO='" . $_GET['itemd_hidden'] . "' AND STO_CODE='" . $_GET["department"] . "'";
        $result_qty = mysqli_query($GLOBALS['dbinv'], $sql_qty);
        if ($row_qty = mysqli_fetch_array($result_qty)) {
            if (is_null($row_qty["QTYINHAND"]) == false) {
                $ResponseXML .= "<qtyinhand><![CDATA[" . $row_qty["QTYINHAND"] . "]]></qtyinhand>";
            } else {
                $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
            }
        } else {
            $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
        }
    }

    $ResponseXML .= " </salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "add_address") {
    //echo "Regt=".$Regt."RegimentNo=".RegimentNo."Command=".$Command;


    /* 		$sql="Select * from tmp_army_no where edu= '".$_GET['edu']."'";
      $result =mysqli_query($GLOBALS['dbinv'],$sql) ;
      if($row = mysqli_fetch_array($result)){
      $ResponseXML .= "exist";



      }	else { */

    //	$ResponseXML .= "";
    //$ResponseXML .= "<ArmyDetails>";

    /* 	$sql1="Select * from mas_educational_qualifications where str_Educational_Qualification= '".$_GET['edu']."'";
      $result1 =mysqli_query($GLOBALS['dbinv'],$sql1) ;
      $row1 = mysqli_fetch_array($result1);
      $ResponseXML .=  $row1["int_Educational_Qulifications"]; */

    $sqlt = "Select * from customer_mast where id ='" . $_GET['customerid'] . "'";

    $resultt = mysqli_query($GLOBALS['dbinv'], $sqlt);
    if ($rowt = mysqli_fetch_array($resultt)) {
        echo $rowt["str_address"];
    }
}


if ($_GET["Command"] == "chk_number") {
    $sql = "select * from vendor where CODE = '" . trim($_GET["txt_cuscode"]) . "'";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    if ($row = mysqli_fetch_array($result)) {
        echo "included";
    } else {
        echo "no";
    }
}


if ($_GET["Command"] == "new_inv") {

    if ($_SESSION["dev"] != "") {

        $_SESSION["print"] = 0;
        $_SESSION["save_sales_inv"] = 1;
        /* 	$sql="Select CAS_INV_NO_m from invpara";
          $result =mysqli_query($GLOBALS['dbinv'],$sql) ;
          $row = mysqli_fetch_array($result);
          $tmpinvno="000000".$row["CAS_INV_NO_m"];
          $lenth=strlen($tmpinvno);
          $invno="INV".substr($tmpinvno, $lenth-7);
          echo $invno; */

        /* 	$sql="Select SPINV, CRE_INV_NO, CAS_INV_NO from invpara";
          $result =mysqli_query($GLOBALS['dbinv'],$sql) ;
          $row = mysqli_fetch_array($result);
          $tmpinvno="000000".$row["CAS_INV_NO_m"];
          $lenth=strlen($tmpinvno);
          //echo $tmpinvno;
          $invno=trim("CRI/ ").substr($tmpinvno, $lenth-7);
          $_SESSION["invno"]=$invno; */

        $_SESSION["brand"] = "";

        if ($_SESSION['company'] == "THT") {
            $sql = "Select SPINV from tmpinvpara";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);
            $row = mysqli_fetch_array($result);
            $_SESSION["tmp_no_salinv"] = "CRI/" . $row["SPINV"];
            //echo $_SESSION["tmp_no_salinv"];
            $sql = "delete from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);

            $sql = "update tmpinvpara set SPINV=SPINV+1";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);


            $sql = "Select SPINV, CRE_INV_NO, CAS_INV_NO from invpara";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);
            $row = mysqli_fetch_array($result);
            if ($_SESSION['dev'] == "1") {

                $tmpinvno = "000000" . ($row["SPINV"] + 1);
                $lenth = strlen($tmpinvno);

                $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/5";
                $_SESSION["invno"] = $invno;
                $txtdono = $row["CAS_INV_NO"] + 1;
            } else {

                $tmpinvno = "000000" . ($row["SPINV"] + 1);
                $lenth = strlen($tmpinvno);

                $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
                $_SESSION["invno"] = $invno;
                $txtdono = $row["CRE_INV_NO"] + 1;
            }
        } else if ($_SESSION['company'] == "BEN") {
            $sql = "Select SPINV from tmpinvpara";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);
            $row = mysqli_fetch_array($result);
            $_SESSION["tmp_no_salinv"] = "CRI/" . $row["SPINV"];
            //echo $_SESSION["tmp_no_salinv"];
            $sql = "delete from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);

            $sql = "update tmpinvpara set SPINV=SPINV+1";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);


            $sql = "Select SPINV, SPINV1, CAS_INV_NO_m, CAS_INV_NO from invpara";
            //echo $sql;
            $result = mysqli_query($GLOBALS['dbinv'], $sql);
            $row = mysqli_fetch_array($result);

            if ($_SESSION['dev'] == "1") {
                $tmpinvno = "000000" . ($row["SPINV1"] + 1);
                $lenth = strlen($tmpinvno);

                $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/10";
                $_SESSION["invno"] = $invno;
                $txtdono = $row["CAS_INV_NO_m"] + 1;
            } else {
                $tmpinvno = "000000" . ($row["SPINV"] + 1);
                $lenth = strlen($tmpinvno);

                $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
                $_SESSION["invno"] = $invno;
                $txtdono = $row["CAS_INV_NO"] + 1;
            }
        }
        header('Content-Type: text/xml');
        echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

        $ResponseXML = "";
        $ResponseXML .= "<salesdetails>";

        $ResponseXML .= "<invno><![CDATA[" . $invno . "]]></invno>";
        $ResponseXML .= "<txtdono><![CDATA[" . $txtdono . "]]></txtdono>";
        $ResponseXML .= "<sdate><![CDATA[" . date("Y-m-d") . "]]></sdate>";
        $ResponseXML .= "<chq_validity><![CDATA[yes]]></chq_validity>";

        $ResponseXML .= "</salesdetails>";
        echo $ResponseXML;
    } else {
        $ResponseXML = "<salesdetails>";

        $ResponseXML .= "<chq_validity><![CDATA[no]]></chq_validity>";

        $ResponseXML .= "</salesdetails>";
        echo $ResponseXML;
    }
}


if ($_GET["Command"] == "cancel_inv") {
    include('connectioni.php');

    $sql = "select last_update from invpara";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    $row = mysqli_fetch_array($result);

    $sqlinv = "select * from s_salma where REF_NO='" . $_GET["invno"] . "'";
    $resultinv = mysqli_query($GLOBALS['dbinv'], $sqlinv);
    if ($rowinv = mysqli_fetch_array($resultinv)) {
        if (date("Y-m") !== date("Y-m", strtotime($rowinv["SDATE"]))) {
            echo 'Not in Current Month Can not Cancel';
            exit();
        }
        if (($rowinv["TOTPAY"] == 0) and ($rowinv["SDATE"] > $row["last_update"])) {

            //try {

            $sql_status = 0;

            mysqli_query($GLOBALS['dbinv'], "SET AUTOCOMMIT=0");
            mysqli_query($GLOBALS['dbinv'], "START TRANSACTION");

            $sql2 = "update s_salma set CANCELL='1' where REF_NO='" . $_GET["invno"] . "'";
            $result2 = mysqli_query($GLOBALS['dbinv'], $sql2);
            if ($result2 != 1) {
                $sql_status = 1;
            }

            $sql2 = "update vendor set CUR_BAL=CUR_BAL-" . $rowinv["GRAND_TOT"] . " where CODE='" . $_GET["customer_code"] . "'";
            $result2 = mysqli_query($GLOBALS['dbinv'], $sql2);
            if ($result2 != 1) {
                $sql_status = 1;
            }

            $sql2 = "update br_trn set credit=credit-" . $rowinv["GRAND_TOT"] . " where cus_code='" . $_GET["customer_code"] . "' and Rep='" . $_GET["salesrep"] . "'";
            $result2 = mysqli_query($GLOBALS['dbinv'], $sql2);

            if ($result2 != 1) {
                $sql_status = 1;
            }

            $sqltmp = "select * from s_invo where REF_NO='" . $_GET['invno'] . "' ";
            $resulttmp = mysqli_query($GLOBALS['dbinv'], $sqltmp);
            while ($rowtmp = mysqli_fetch_array($resulttmp)) {
                $sql2 = "update s_invo set CANCELL='1' where REF_NO='" . $_GET['invno'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }

                $sql2 = "update s_mas set QTYINHAND=QTYINHAND+" . $rowtmp["QTY"] . " where STK_NO='" . $rowtmp['STK_NO'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }

                $sql2 = "update s_submas set QTYINHAND=QTYINHAND+" . $rowtmp["QTY"] . " where STO_CODE='" . $rowinv["DEPARTMENT"] . "' and STK_NO='" . $rowtmp['STK_NO'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }

                $sql2 = "delete from s_trn where REFNO='" . $_GET['invno'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }

                $sql2 = "delete from s_trn_all where REFNO='" . $_GET['invno'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }
                //echo $sql2;
                $sql2 = "delete from s_led where REF_NO='" . $_GET['invno'] . "'";
                $resul2 = mysqli_query($GLOBALS['dbinv'], $sql2);
                if ($result2 != 1) {
                    $sql_status = 1;
                }
            }


            $sql2 = "insert into entry_log(refno, username, docname, trnType, stime, sdate) values ('" . $_GET['invno'] . "', '" . $_SESSION["CURRENT_USER"] . "', 'Invoice', 'Cancel', '" . date("Y-m-d H:i:s") . "', '" . date("Y-m-d") . "')";
            $result2 = mysqli_query($GLOBALS['dbinv'], $sql2);
            if ($result2 != 1) {
                $sql_status = 1;
            }


            if ($sql_status == 0) {

                mysqli_query($GLOBALS['dbinv'], "COMMIT");
                echo "Canceled";
            } else {

                mysqli_query($GLOBALS['dbinv'], "ROLLBACK");
                echo "Error has occured. Not Canceled";
            }
        } else {
            echo "Can't Cancel";
        }
    }
}


if ($_GET["Command"] == "chk_ad") {
    if ($_GET["chk"] == "false") {
        $chk = 0;
    } else {
        $chk = 1;
    }
    $sql = "update tmp_inv_data set ad='" . $chk . "' where id=" . $_GET["id"] . " and str_code='" . $_GET['itemcode'] . "' and tmp_no= '" . $_SESSION["tmp_no_salinv"] . "'";
    //echo $sql;
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
}


if ($_GET["Command"] == "add_tmp") {

    if ($_SESSION["tmp_no_salinv"] != "") {
        $department = $_GET["department"];

        $ResponseXML .= "";
        $ResponseXML .= "<salesdetails>";

        $rate = str_replace(",", "", $_GET["rate"]);
        $actual_selling = str_replace(",", "", $_GET["actual_selling"]);

        $qty = str_replace(",", "", $_GET["qty"]);
        $discount = str_replace(",", "", $_GET["discount"]);
        $subtotal = str_replace(",", "", $_GET["subtotal"]);

        if ($_GET['ad'] == "true") {
            $ad = "1";
        } else {
            $ad = "0";
        }

        $sql = "Insert into tmp_inv_data (str_invno, str_code, str_description, cur_rate, cur_qty, dis_per, cur_discount, cur_subtot, actual_selling, brand, tmp_no)values 
			('" . $_GET['invno'] . "', '" . $_GET['itemcode'] . "', '" . $_GET['item'] . "', " . $rate . ", " . $qty . ", " . $_GET["discountper"] . ", " . $discount . ", " . $subtotal . ", " . $actual_selling . ", '" . $_GET['brand'] . "', '" . $_SESSION["tmp_no_salinv"] . "') ";

        $result = mysqli_query($GLOBALS['dbinv'], $sql);


        $ResponseXML .= "<sales_table><![CDATA[ <table><tr>
                              <td width=\"0\"  background=\"\" ><font color=\"#FFFFFF\"></font></td>
							  <td width=\"100\"  background=\"\" ><font color=\"#FFFFFF\">Code</font></td>
                              <td width=\"300\"  background=\"\"><font color=\"#FFFFFF\">Description</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate</font></td>
							  <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\"></font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Qty</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Discount</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Sub Total</font></td>
							   <td  background=\"\"><font color=\"#FFFFFF\">AD</font></td>
							  
                            </tr>";

        $i = 1;
        $sql = "Select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        while ($row = mysqli_fetch_array($result)) {

            $id = "id" . $i;
            $code = "code" . $i;
            $itemd = "itemd" . $i;
            $rate = "rate" . $i;
            $actual_selling = "actual_selling" . $i;
            $qty = "qty" . $i;
            $discountper = "discountper" . $i;
            $subtotal = "subtotal" . $i;
            $discount = "discount" . $i;
            $ad = "ad" . $i;

            $ResponseXML .= "<tr>                              
                             <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $id . "'>" . $row['id'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $code . "'>" . $row['str_code'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $itemd . "'>" . $row['str_description'] . "</div></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $rate . "\" id=\"" . $rate . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" /></td>
							  <td align=right ><input type=\"text\"  class=\"text_purchase3\" name=\"" . $actual_selling . "\" id=\"" . $actual_selling . "\" size=\"15\"  value=\"" . number_format($row['actual_selling'], 2, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"   /></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $qty . "\" id=\"" . $qty . "\" size=\"15\"  value=\"" . number_format($row['cur_qty'], 0, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" />    </td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $discountper . "'>" . $_GET["discountper"] . "</div><input type=\"hidden\"  class=\"text_purchase3\" name=\"" . $discount . "\" id=\"" . $discount . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"    /></td>
							 
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $subtotal . "'>" . number_format($row['cur_subtot'], 2, ".", ",") . "</div></td>
							
							 <td ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=" . $row['str_code'] . "  name=" . $row['str_code'] . " onClick=\"del_item('" . $row['id'] . "');\"></td>";

            include_once("connectioni.php");

            $sqlqty = mysqli_query($GLOBALS['dbinv'], "select QTYINHAND from s_submas where STK_NO='" . $row['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'") or die(mysqli_error());
            if ($rowqty = mysqli_fetch_array($sqlqty)) {
                $qty = number_format($rowqty['QTYINHAND'], 0, ".", ",");
            } else {
                $qty = 0;
            }

            if ($row['ad'] == "1") {
                $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "' checked></td>";
            } else {
                $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "'></td>";
            }


            $ResponseXML .= "<td  >" . $qty . "</td>
						
							
							 
                            </tr>";
            $i = $i + 1;
        }

        $ResponseXML .= "   </table>]]></sales_table>";

        $ResponseXML .= "<item_count><![CDATA[" . $i . "]]></item_count>";

        $sql = "Select sum(cur_subtot) as tot_sub, sum(cur_discount) as tot_dis from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $row = mysqli_fetch_array($result);
        $ResponseXML .= "<subtot><![CDATA[" . number_format($row['tot_sub'], 2, ".", ",") . "]]></subtot>";
        $ResponseXML .= "<tot_dis><![CDATA[" . number_format($row['tot_dis'], 2, ".", ",") . "]]></tot_dis>";

        $sql_invpara = "SELECT * from invpara";
        $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
        $row_invpara = mysqli_fetch_array($result_invpara);

        $vatrate = $row_invpara["vatrate"] / 100;

        if ($_GET["vatmethod"] == "vat") {
            $tax = $row['tot_sub'] * $vatrate;
            $taxf = number_format($tax, 2, ".", ",");

            $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
            $strvatrate = "Tax (VAT " . $row_invpara["vatrate"] . "%)";
            $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

            $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
            $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
        } else if ($_GET["vatmethod"] == "svat") {
            $tax = $row['tot_sub'] * $vatrate;
            $taxf = number_format($tax, 2, ".", ",");

            $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
            $strvatrate = "Tax (SVAT " . $row_invpara["vatrate"] . "%)";
            $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

            $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
            $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
        } else if ($_GET["vatmethod"] == "evat") {
            $tax = $row['tot_sub'] * $vatrate;
            $taxf = number_format($tax, 2, ".", ",");

            $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
            $strvatrate = "Tax (EVAT " . $row_invpara["vatrate"] . "%)";
            $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

            $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
            $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
        } else if ($_GET["vatmethod"] == "non") {
            //$tax=number_format($row['tot_sub']*$vatrate, 2, ".", ",");
            $ResponseXML .= "<tax><![CDATA[0.00]]></tax>";
            $ResponseXML .= "<taxname><![CDATA[Tax]]></taxname>";

            $invtot = number_format($row['tot_sub'], 2, ".", ",");
            $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
        }
        $ResponseXML .= "<chq_validity><![CDATA[yes]]></chq_validity>";
        $ResponseXML .= " </salesdetails>";

        //	}	


        echo $ResponseXML;
    } else {

        $ResponseXML = " <salesdetails>";

        $ResponseXML .= "<chq_validity><![CDATA[no]]></chq_validity>";

        $ResponseXML .= " </salesdetails>";


        echo $ResponseXML;
    }
}


if ($_GET["Command"] == "add_tmp_edit_rate") {


    if ($_SESSION["dev"] == "") {
        $ResponseXML = "";
        $ResponseXML .= "<salesdetails>";
        $ResponseXML .= "<chq_validity><![CDATA[no]]></chq_validity>";
        $ResponseXML .= "</salesdetails>";

        exit($ResponseXML);
    }
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $department = $_GET["department"];

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";


    //$sql="delete from tmp_inv_data where id='".$_GET['id']."' and str_code='".$_GET['itemcode']."' and tmp_no='".$_SESSION["tmp_no_salinv"]."' ";
    //$result =mysqli_query($GLOBALS['dbinv'],$sql) ; 
    //echo $_GET['rate'];
    //echo $_GET['qty'];
    $rate = str_replace(",", "", $_GET["rate"]);
    $actual_selling = str_replace(",", "", $_GET["actual_selling"]);
    $qty = str_replace(",", "", $_GET["qty"]);
    $discount = str_replace(",", "", $_GET["discount"]);
    $subtotal = str_replace(",", "", $_GET["subtotal"]);

    $ResponseXML .= "<chq_validity><![CDATA[yes]]></chq_validity>";
    //$sql="Insert into tmp_inv_data (str_invno, str_code, str_description, cur_rate, cur_qty, dis_per, cur_discount, cur_subtot, brand, tmp_no, actual_selling)values 
    //('".$_GET['invno']."', '".$_GET['itemcode']."', '".$_GET['item']."', ".$rate.", ".$qty.", ".$_GET["discountper"].", ".$discount.", ".$subtotal.", '".$_GET['brand']."', '".$_SESSION["tmp_no_salinv"]."', ".$actual_selling.") ";

    $sql = "update tmp_inv_data set cur_rate=" . $rate . ", cur_qty=" . $qty . ", dis_per=" . $_GET["discountper"] . ", cur_discount=" . $discount . ", cur_subtot=" . $subtotal . ", actual_selling=" . $actual_selling . " where id='" . $_GET['id'] . "'";
    //('".$_GET['invno']."', '".$_GET['itemcode']."', '".$_GET['item']."', , , , , , , '".$_SESSION["tmp_no_salinv"]."', ) ";
    //echo $sql;
    $result = mysqli_query($GLOBALS['dbinv'], $sql);


    $ResponseXML .= "<sales_table><![CDATA[ <table><tr>
                              <td width=\"50\"  background=\"\" ><font color=\"#FFFFFF\">ID</font></td>
							  <td width=\"100\"  background=\"\" ><font color=\"#FFFFFF\">Code</font></td>
                              <td width=\"300\"  background=\"\"><font color=\"#FFFFFF\">Description</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate</font></td>
							  <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate With VAT</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Qty</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Discount</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Sub Total</font></td>
							  <td></td>
							  <td width=\"50\"  background=\"\"><font color=\"#FFFFFF\">AD</font></td>
							  <td width=\"70\">Qty In Hand</td>
                            </tr>";

    $i = 1;
    $sql = "Select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "' order by id";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    while ($row = mysqli_fetch_array($result)) {

        $id = "id" . $i;
        $code = "code" . $i;
        $itemd = "itemd" . $i;
        $rate = "rate" . $i;
        $actual_selling = "actual_selling" . $i;
        $qty = "qty" . $i;
        $discountper = "discountper" . $i;
        $subtotal = "subtotal" . $i;
        $discount = "discount" . $i;
        $ad = "ad" . $i;

        $ResponseXML .= "<tr>                              
                             <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $id . "'>" . $row['id'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $code . "'>" . $row['str_code'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $itemd . "'>" . $row['str_description'] . "</div></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $rate . "\" id=\"" . $rate . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\" disabled onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" /></td>
							 <td align=right ><input type=\"text\"  class=\"text_purchase3\" name=\"" . $actual_selling . "\" id=\"" . $actual_selling . "\" size=\"15\"  value=\"" . number_format($row['actual_selling'], 2, ".", ",") . "\" onblur=\"calc1_table('" . $i . "');\" /></td>
							  <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $qty . "\" id=\"" . $qty . "\" size=\"15\"  value=\"" . number_format($row['cur_qty'], 0, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" />    </td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $discountper . "'>" . number_format($_GET["discountper"], 6, ".", ",") . "</div><input type=\"hidden\"  class=\"text_purchase3\" name=\"" . $discount . "\" id=\"" . $discount . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"    /></td>
							 
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $subtotal . "'>" . number_format($row['cur_subtot'], 2, ".", ",") . "</div></td>";
        // <td><input type=\"checkbox\" onClick=\"chk_ad('".$i."');\" name='".$ad."' id='".$ad."'></td>
        $ResponseXML .= " <td ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=" . $row['str_code'] . "  name=" . $row['str_code'] . " onClick=\"del_item('" . $row['id'] . "');\"></td>";

        include_once("connectioni.php");

        $sqlqty = mysqli_query($GLOBALS['dbinv'], "select QTYINHAND from s_submas where STK_NO='" . $row['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'") or die(mysqli_error());
        if ($rowqty = mysqli_fetch_array($sqlqty)) {
            $qty = number_format($rowqty['QTYINHAND'], 0, ".", ",");
        } else {
            $qty = 0;
        }

        if ($row['ad'] == "1") {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "' checked></td>";
        } else {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "'></td>";
        }


        $ResponseXML .= "<td  >" . $qty . "</td>
						
							
							 
                            </tr>";
        $i = $i + 1;
    }

    $ResponseXML .= "   </table>]]></sales_table>";

    $ResponseXML .= "<item_count><![CDATA[" . $i . "]]></item_count>";

    $sql = "Select sum(cur_subtot) as tot_sub, sum(cur_discount) as tot_dis from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    $row = mysqli_fetch_array($result);
    $ResponseXML .= "<subtot><![CDATA[" . number_format($row['tot_sub'], 2, ".", ",") . "]]></subtot>";
    $ResponseXML .= "<tot_dis><![CDATA[" . number_format($row['tot_dis'], 2, ".", ",") . "]]></tot_dis>";

    $sql_invpara = "SELECT * from invpara";
    $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
    $row_invpara = mysqli_fetch_array($result_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;

    if ($_GET["vatmethod"] == "vat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (VAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "svat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (SVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "evat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (EVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "non") {
        //$tax=number_format($row['tot_sub']*$vatrate, 2, ".", ",");
        $ResponseXML .= "<tax><![CDATA[0.00]]></tax>";
        $ResponseXML .= "<taxname><![CDATA[Tax]]></taxname>";

        $invtot = number_format($row['tot_sub'], 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    }

    $ResponseXML .= " </salesdetails>";

    //	}	


    echo $ResponseXML;
}


if ($_GET["Command"] == "add_tmp_edit_discount") {

    if ($_SESSION["dev"] == "") {
        $ResponseXML = "<salesdetails>";
        $ResponseXML .= "<chq_validity><![CDATA[no]]></chq_validity>";
        $ResponseXML .= "</salesdetails>";
        exit($ResponseXML);
    }
    $department = $_GET["department"];

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";
    $ResponseXML .= "<chq_validity><![CDATA[yes]]></chq_validity>";

    //$sql="delete from tmp_inv_data where tmp_no='".$_SESSION["tmp_no_salinv"]."' ";
    //$ResponseXML .= $sql;
    //$result =mysqli_query($GLOBALS['dbinv'],$sql) ; 
    //echo $_GET['rate'];
    //echo $_GET['qty'];
    //echo "count :".$_GET["item_count"];
    $i = 1;
    while ($_GET["item_count"] > $i) {


        $id = "id" . $i;
        $code = "code" . $i;
        $itemd = "itemd" . $i;
        $discountper = "discountper" . $i;
        $srate = "rate" . $i;
        $rate = str_replace(",", "", $_GET[$srate]);

        $sactual_selling = "actual_selling" . $i;
        $actual_selling = str_replace(",", "", $_GET[$sactual_selling]);

        $sqty = "qty" . $i;
        $qty = str_replace(",", "", $_GET[$sqty]);
        $sdiscount = "discount" . $i;
        $discount = str_replace(",", "", $_GET[$sdiscount]);
        $ssubtotal = "subtotal" . $i;
        $subtotal = str_replace(",", "", $_GET[$ssubtotal]);
        $ad = "ad" . $i;

        if ($_GET[$ad] == "true") {
            $ad_val = "1";
        } else {
            $ad_val = "0";
        }

        //$sql="Insert into tmp_inv_data (str_invno, str_code, str_description, cur_rate, cur_qty, dis_per, cur_discount, cur_subtot, brand, actual_selling, tmp_no, ad)values 
        //('".$_GET['invno']."', '".$_GET[$code]."', '".$_GET[$itemd]."', ".$rate.", ".$qty.", ".$_GET[$discountper].", ".$discount.", ".$subtotal.", '".$_GET['brand']."', '".$actual_selling."', '".$_SESSION["tmp_no_salinv"]."', '".$ad_val."') ";

        $sql = "update tmp_inv_data set cur_rate=" . $rate . ", cur_qty=" . $qty . ", dis_per=" . $_GET[$discountper] . ", cur_discount=" . $discount . ", cur_subtot=" . $subtotal . ", actual_selling='" . $actual_selling . "', ad='" . $ad_val . "' where id=" . $_GET[$id];
        //echo $sql;
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $i = $i + 1;
    }
    $ResponseXML .= "<sales_table><![CDATA[ <table><tr>
                              <td width=\"50\"  background=\"\" ><font color=\"#FFFFFF\">ID</font></td>
							  <td width=\"100\"  background=\"\" ><font color=\"#FFFFFF\">Code</font></td>
                              <td width=\"300\"  background=\"\"><font color=\"#FFFFFF\">Description</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate</font></td>
							  <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate With VAT</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Qty</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Discount</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Sub Total</font></td>
							  <td></td>
							  <td width=\"50\"  background=\"\"><font color=\"#FFFFFF\">AD</font></td>
							  <td width=\"70\">Qty In Hand</td>
							  
                            </tr>";

    $i = 1;
    $sql = "Select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "' order by id";

    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    while ($row = mysqli_fetch_array($result)) {

        $id = "id" . $i;
        $code = "code" . $i;
        $itemd = "itemd" . $i;
        $rate = "rate" . $i;
        $actual_selling = "actual_selling" . $i;
        $qty = "qty" . $i;
        $discountper = "discountper" . $i;
        $subtotal = "subtotal" . $i;
        $discount = "discount" . $i;
        $ad = "ad" . $i;

        $ResponseXML .= "<tr>                              
                             <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $id . "'>" . $row['id'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $code . "'>" . $row['str_code'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $itemd . "'>" . $row['str_description'] . "</div></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $rate . "\" id=\"" . $rate . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"  disabled onkeypress=\"keyset('credper',event);\" /></td>
							 <td align=right ><input type=\"text\"  class=\"text_purchase3\" name=\"" . $actual_selling . "\" id=\"" . $actual_selling . "\" size=\"15\"  value=\"" . number_format($row['actual_selling'], 2, ".", ",") . "\" onblur=\"calc1_table('" . $i . "');\"  /></td>
							  <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $qty . "\" id=\"" . $qty . "\" size=\"15\"  value=\"" . number_format($row['cur_qty'], 0, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" />    </td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $discountper . "'>" . number_format($row["dis_per"], 6, ".", ",") . "</div><input type=\"hidden\"  class=\"text_purchase3\" name=\"" . $discount . "\" id=\"" . $discount . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"    /></td>
							 
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $subtotal . "'>" . number_format($row['cur_subtot'], 2, ".", ",") . "</div></td>";
        // <td><input type=\"checkbox\" onClick=\"chk_ad('".$i."');\" name='".$ad."' id='".$ad."'></td>
        $ResponseXML .= " <td ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=" . $row['str_code'] . "  name=" . $row['str_code'] . " onClick=\"del_item('" . $row['id'] . "');\"></td>";


        include_once("connectioni.php");

        $sqlqty = mysqli_query($GLOBALS['dbinv'], "select QTYINHAND from s_submas where STK_NO='" . $row['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'") or die(mysqli_error());
        if ($rowqty = mysqli_fetch_array($sqlqty)) {
            $qty = number_format($rowqty['QTYINHAND'], 0, ".", ",");
        } else {
            $qty = 0;
        }

        if ($row['ad'] == "1") {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "' checked></td>";
        } else {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "'></td>";
        }


        $ResponseXML .= "<td  >" . $qty . "</td>
							
							 
                            </tr>";
        $i = $i + 1;
    }

    $ResponseXML .= "   </table>]]></sales_table>";

    $ResponseXML .= "<item_count><![CDATA[" . $i . "]]></item_count>";

    $sql = "Select sum(cur_subtot) as tot_sub, sum(cur_discount) as tot_dis from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";

    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    $row = mysqli_fetch_array($result);
    $ResponseXML .= "<subtot><![CDATA[" . number_format($row['tot_sub'], 2, ".", ",") . "]]></subtot>";
    $ResponseXML .= "<tot_dis><![CDATA[" . number_format($row['tot_dis'], 2, ".", ",") . "]]></tot_dis>";

    $sql_invpara = "SELECT * from invpara";
    $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
    $row_invpara = mysqli_fetch_array($result_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;

    if ($_GET["vatmethod"] == "vat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (VAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "svat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (SVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "evat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (EVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "non") {
        //$tax=number_format($row['tot_sub']*$vatrate, 2, ".", ",");
        $ResponseXML .= "<tax><![CDATA[0.00]]></tax>";
        $ResponseXML .= "<taxname><![CDATA[Tax]]></taxname>";

        $invtot = number_format($row['tot_sub'], 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    }

    $ResponseXML .= " </salesdetails>";

    //	}	


    echo $ResponseXML;
}

if ($_GET["Command"] == "disp_qty") {
    include_once("connectioni.php");

    $sqlqty = mysqli_query($GLOBALS['dbinv'], "select QTYINHAND from s_submas where STK_NO='" . $_GET["it_code"] . "' AND STO_CODE='" . $_GET["department"] . "'") or die(mysqli_error());
    if ($rowqty = mysqli_fetch_array($sqlqty)) {
        $qty = $rowqty['QTYINHAND'];
    } else {
        $qty = 0;
    }
    echo $qty;
}

if ($_GET["Command"] == "setord") {


    if ($_SESSION['company'] == "THT") {
        $sql = "Select SPINV from tmpinvpara";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $row = mysqli_fetch_array($result);


        $sql = "Select SPINV, CRE_INV_NO, CAS_INV_NO from invpara";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $row = mysqli_fetch_array($result);
        if ($_SESSION['dev'] == "1") {

            $tmpinvno = "000000" . ($row["SPINV"] + 1);
            $lenth = strlen($tmpinvno);

            $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/5";
            $_SESSION["invno"] = $invno;
            $txtdono = $row["CAS_INV_NO"] + 1;
        } else {

            $tmpinvno = "000000" . ($row["SPINV"] + 1);
            $lenth = strlen($tmpinvno);

            $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
            $_SESSION["invno"] = $invno;
            $txtdono = $row["CRE_INV_NO"] + 1;
        }
    } else if ($_SESSION['company'] == "BEN") {
        $sql = "Select SPINV from tmpinvpara";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $row = mysqli_fetch_array($result);
        //$_SESSION["tmp_no_salinv"]="CRI/".$row["SPINV"];
        //echo $_SESSION["tmp_no_salinv"];
        //$sql="delete from tmp_inv_data where tmp_no='".$_SESSION["tmp_no_salinv"]."'";
        //$result =mysqli_query($GLOBALS['dbinv'],$sql) ; 
        //$sql="update tmpinvpara set SPINV=SPINV+1";
        //$result =mysqli_query($GLOBALS['dbinv'],$sql) ; 


        $sql = "Select SPINV, SPINV1, CAS_INV_NO_m, CAS_INV_NO from invpara";
        //echo $sql;
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
        $row = mysqli_fetch_array($result);

        if ($_SESSION['dev'] == "1") {
            $tmpinvno = "000000" . ($row["SPINV1"] + 1);
            $lenth = strlen($tmpinvno);

            $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/10";
            $_SESSION["invno"] = $invno;
            $txtdono = $row["CAS_INV_NO_m"] + 1;
        } else {
            $tmpinvno = "000000" . ($row["SPINV"] + 1);
            $lenth = strlen($tmpinvno);

            $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
            $_SESSION["invno"] = $invno;
            $txtdono = $row["CAS_INV_NO"] + 1;
        }
    }

    include_once("connectioni.php");


    $_SESSION["custno"] = $_GET['custno'];
    $_SESSION["brand"] = $_GET["brand"];
    $_SESSION["department"] = $_GET["department"];


    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";

    $ResponseXML .= "<invno><![CDATA[" . $invno . "]]></invno>";
    $ResponseXML .= "<txtdono><![CDATA[" . $txtdono . "]]></txtdono>";

    $cuscode = $_GET["custno"];
    $salesrep = $_GET["salesrep"];
    $brand = $_GET["brand"];

    //		$ResponseXML .= "<salesord><![CDATA[".$salesord1."]]></salesord>";
    //Call SETLIMIT ====================================================================


    $OutpDAMT = 0;
    $OutREtAmt = 0;
    $OutInvAmt = 0;
    $InvClass = "";

    $sqlclass = mysqli_query($GLOBALS['dbinv'], "select class from brand_mas where barnd_name='" . trim($brand) . "'") or die(mysqli_error());
    if ($rowclass = mysqli_fetch_array($sqlclass)) {
        if (is_null($rowclass["class"]) == false) {
            $InvClass = $rowclass["class"];
        }
    }

    $sqloutinv = mysqli_query($GLOBALS['dbinv'], "select sum(GRAND_TOT-TOTPAY) as totout from view_s_salma where GRAND_TOT>TOTPAY and CANCELL='0' and C_CODE='" . trim($cuscode) . "' and SAL_EX='" . trim($salesrep) . "' and class='" . $InvClass . "'") or die(mysqli_error());
    if ($rowoutinv = mysqli_fetch_array($sqloutinv)) {
        if (is_null($rowoutinv["totout"]) == false) {
            $OutInvAmt = $rowoutinv["totout"];
        }
    }

//$sqlinvcheq = mysqli_query($GLOBALS['dbinv'],"SELECT * FROM s_invcheq WHERE che_date>'".$_GET["invdate"]."' AND cus_code='".trim($cuscode)."' and trn_type='REC' and sal_ex='".trim($salesrep)."'") or die(mysqli_error());
    $sqlinvcheq = mysqli_query($GLOBALS['dbinv'], "SELECT sum(che_amount) as che_amount FROM s_invcheq WHERE che_date>'" . $_GET["invdate"] . "' AND cus_code='" . trim($cuscode) . "' and sal_ex='" . trim($salesrep) . "'") or die(mysqli_error());
//echo "SELECT * FROM s_invcheq WHERE che_date>'".$_GET["invdate"]."' AND cus_code='".trim($cuscode)."' and trn_type='REC' and sal_ex='".trim($salesrep)."'";
    while ($rowinvcheq = mysqli_fetch_array($sqlinvcheq)) {
        $OutpDAMT = $OutpDAMT + $rowinvcheq["che_amount"];
    }


    $pend_ret_set = 0;

    $sqlinvcheq = mysqli_query($GLOBALS['dbinv'], "SELECT sum(che_amount) as  che_amount FROM s_invcheq WHERE che_date >'" . $_GET["invdate"] . "' AND cus_code='" . trim($cuscode) . "' and trn_type='RET'") or die(mysqli_error());
    if ($rowinvcheq = mysqli_fetch_array($sqlinvcheq)) {
        if (is_null($rowinvcheq["che_amount"]) == false) {
            $pend_ret_set = $rowinvcheq["che_amount"];
        }
    }


    $sqlcheq = mysqli_query($GLOBALS['dbinv'], "Select sum(CR_CHEVAL-PAID) as tot from s_cheq where CR_C_CODE='" . trim($cuscode) . "'  and CR_CHEVAL-PAID>0 and CR_FLAG='0' and S_REF='" . trim($salesrep) . "'") or die(mysqli_error());
    if ($rowcheq = mysqli_fetch_array($sqlcheq)) {
        if (is_null($rowcheq["tot"]) == false) {
            $OutREtAmt = $rowcheq["tot"];
        } else {
            $OutREtAmt = 0;
        }
    }


    $d = date("Y-m-d");

    $date = date('Y-m-d', strtotime($d . ' -60 days'));

    $sql_rssal = mysqli_query($GLOBALS['dbinv'], "Select sum(GRAND_TOT - TOTPAY) as out1 from s_salma where C_CODE = '" . trim($cuscode) . "' and (SDATE < '" . $date . "') and GRAND_TOT - TOTPAY > 1 and CANCELL = '0'") or die(mysqli_error());

    if ($row_rssal = mysqli_fetch_array($sql_rssal)) {

        if (is_null($row_rssal["out1"]) == false) {
            $rtxover60 = number_format($row_rssal["out1"], 2, ".", ",");
        }
    }


    $ResponseXML .= "<sales_table_acc><![CDATA[ <table  border=0  cellspacing=0>
						<tr><td><input type=\"text\"  class=\"label_purchase\" value=\"Outstanding Invoice Amount\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . number_format($OutInvAmt, 2, ".", ",") . "\" disabled=\"disabled\"/></td></tr>
						 <td><input type=\"text\"  class=\"label_purchase\" value=\"Return Cheque Amount\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . number_format($OutREtAmt, 2, ".", ",") . "\" disabled=\"disabled\"/></td></tr>
						 <td><input type=\"text\"  class=\"label_purchase\" value=\"Pending Cheque Amount\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . number_format($OutpDAMT, 2, ".", ",") . "\" disabled=\"disabled\"/></td></tr>
						 <td><input type=\"text\"  class=\"label_purchase\" value=\"PSD Cheque Settlments\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . number_format($pend_ret_set, 2, ".", ",") . "\" disabled=\"disabled\"/></td></tr>
						 <td><input type=\"text\"  class=\"label_purchase\" value=\"Over 60 Outstandings\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . $rtxover60 . "\" disabled=\"disabled\"/></td></tr>
						 <td><input type=\"text\"  class=\"label_purchase\" value=\"Total\" disabled=\"disabled\"/></td><td><input type=\"text\"  class=\"label_purchase\" value=\"" . number_format($OutInvAmt + $OutREtAmt + $OutpDAMT + $pend_ret_set, 2, ".", ",") . "\" disabled=\"disabled\"/></td></tr>
						 </table></table>]]></sales_table_acc>";


    //echo "select * from br_trn where Rep='".trim($salesrep)."' and brand='".trim($InvClass)."' and cus_code='" .trim($cuscode)."'";			      

    $sqlbr_trn = mysqli_query($GLOBALS['dbinv'], "select * from br_trn where Rep='" . trim($salesrep) . "' and brand='" . trim($InvClass) . "' and cus_code='" . trim($cuscode) . "'") or die(mysqli_error());
    if ($rowbr_trn = mysqli_fetch_array($sqlbr_trn)) {

        if (is_null($rowbr_trn["credit_lim"]) == false) {
            $crLmt = $rowbr_trn["credit_lim"];
        } else {
            $crLmt = 0;
        }


        if (is_null($rowbr_trn["tmpLmt"]) == false) {
            $tmpLmt = $rowbr_trn["tmpLmt"];
        } else {
            $tmpLmt = 0;
        }

        if (is_null($rowbr_trn["tmpLmt"]) == false) {
            if ($rowbr_trn["Day"] == date("Y-m-d")) {
                $tmpLmt = $rowbr_trn["tmpLmt"];
            } else {

                $sql_invcls = mysqli_query($GLOBALS['dbinv'], "select * from brand_mas where barnd_name='" . trim($_GET["brand"]) . "'") or die(mysqli_error());
                if ($row_invcls = mysqli_fetch_array($sql_invcls)) {
                    $sql_upbr = mysqli_query($GLOBALS['dbinv'], "update br_trn set tmpLmt= '0'   where cus_code='" . trim($cuscode) . "' and brand='" . trim($row_invcls["class"]) . "' and Rep='" . trim($salesrep) . "'") or die(mysqli_error());
                }
                $tmpLmt = 0;
            }
        } else {
            $tmpLmt = 0;
        }

        //echo "cat ".$rowbr_trn["CAT"];
        if (is_null($rowbr_trn["CAT"]) == false) {
            $cuscat = trim($rowbr_trn["CAT"]);
            if ($cuscat == "A") {
                $m = 2.5;
            }
            if ($cuscat == "B") {
                $m = 2.5;
            }
            if ($cuscat == "C") {
                $m = 1;
            }
            if ($cuscat == "D") {
                $m = 0;
            }

            $txt_crelimi = 0;
            $txt_crebal = 0;
            $txt_crelimi = number_format($crLmt, 2, ".", ",");
        } else {
            $txt_crelimi = 0;
            $txt_crebal = 0;
        }

        $crebal = $crLmt * $m + $tmpLmt - $OutInvAmt - $OutREtAmt - $OutpDAMT - $pend_ret_set;


        $txt_crebal = $crLmt * $m - $OutInvAmt - $OutREtAmt - $OutpDAMT - $pend_ret_set;
        $creditbalance = $OutInvAmt + $OutREtAmt + $OutpDAMT;
    }

    $invqty = 0;
    $rtnqty = 0;

    $Mon = date("m", strtotime(date("Y-m-d")));
    $Yer = date("Y", strtotime(date("Y-m-d")));
    $sql_inv = "Select sum(Qty) as totQty from viewinv where  Cus_CODE = '" . trim($cuscode) . "' and s_Brand = '" . $brand . "' and month(SDATE) = '" . $Mon . "' and year(SDATE) = '" . $Yer . "' and cancel_m = '0' and stk_no <> 'A0350' and stk_no <> 'A0351' and stk_no <> 'A0352' and stk_no <> 'A0353' and stk_no <> 'A0354' and stk_no <> 'L0531' AND stk_no <> 'T3520' AND stk_no <> 'T3522' and stk_no <> 'A0356' and price <> 0 and stk_no <> 'AL001' and stk_no <> 'AL002' and stk_no <> 'AL003' and stk_no <> 'AL004' and stk_no <> 'AL005' and stk_no <> 'AL006' and stk_no <> 'AL007' and stk_no <> 'AL008' and stk_no <> 'AL009' and dis_per <> 100";
    $sql_grn = " Select sum(Qty) as totQty from viewcrntrn where  C_CODE = '" . trim($cuscode) . "' and Brand = '" . $brand . "' and month(SDATE) = '" . $Mon . "' and year(SDATE) = '" . $Yer . "' and cancell = '0' and stk_no <> 'A0350' and stk_no <> 'A0351' and stk_no <> 'A0352' and stk_no <> 'A0353' and stk_no <> 'A0354' and stk_no <> 'L0531' AND stk_no <> 'T3520' AND stk_no <> 'T3522' and stk_no <> 'A0356'  and stk_no <> 'AL001' and stk_no <> 'AL002' and stk_no <> 'AL003' and stk_no <> 'AL004' and stk_no <> 'AL005' and stk_no <> 'AL006' and stk_no <> 'AL007' and stk_no <> 'AL008' and stk_no <> 'AL009'";
    $res_inv = mysqli_query($GLOBALS['dbinv'], $sql_inv);
    if ($row_inv = mysqli_fetch_array($res_inv)) {
        if (!is_null($row_inv['totQty'])) {
            $invqty = $row_inv['totQty'];
        }
    }
    $res_grn = mysqli_query($GLOBALS['dbinv'], $sql_grn);
    if ($row_grn = mysqli_fetch_array($res_grn)) {
        if (!is_null($row_grn['totQty'])) {
            $rtnqty = $row_grn['totQty'];
        }
    }


    $netqty = $invqty - $rtnqty;

    $ResponseXML .= "<netqty><![CDATA[" . $netqty . "]]></netqty>";

    $ResponseXML .= "<txt_crelimi><![CDATA[" . $txt_crelimi . "]]></txt_crelimi>";
    $ResponseXML .= "<txt_crebal><![CDATA[" . number_format($txt_crebal, "2", ".", ",") . "]]></txt_crebal>";

    $ResponseXML .= "<creditbalance><![CDATA[" . number_format($txt_crebal, "2", ".", ",") . "]]></creditbalance>";
    $ResponseXML .= "<crebal><![CDATA[" . number_format($crebal, "2", ".", ",") . "]]></crebal>";


    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}


if ($_GET["Command"] == "del_item") {


    $ResponseXML .= "";
    $ResponseXML .= "<salesdetails>";


    $sql = "delete from tmp_inv_data where id='" . $_GET['code'] . "' and tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";

    $result = mysqli_query($GLOBALS['dbinv'], $sql);

    $ResponseXML .= "<sales_table><![CDATA[ <table><tr>
                              <td width=\"50\"  background=\"\" ><font color=\"#FFFFFF\">ID</font></td>
							  <td width=\"100\"  background=\"\" ><font color=\"#FFFFFF\">Code</font></td>
                              <td width=\"300\"  background=\"\"><font color=\"#FFFFFF\">Description</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate</font></td>
							  <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Rate With VAT</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Qty</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Discount</font></td>
                              <td width=\"100\"  background=\"\"><font color=\"#FFFFFF\">Sub Total</font></td>
							  <td></td>
							  <td width=\"50\"  background=\"\"><font color=\"#FFFFFF\">AD</font></td>
							  <td width=\"70\">Qty In Hand</td>
                            </tr>";

    $i = 1;
    $sql = "Select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    while ($row = mysqli_fetch_array($result)) {

        $id = "id" . $i;
        $code = "code" . $i;
        $itemd = "itemd" . $i;
        $rate = "rate" . $i;
        $actual_selling = "actual_selling" . $i;
        $qty = "qty" . $i;
        $discountper = "discountper" . $i;
        $subtotal = "subtotal" . $i;
        $discount = "discount" . $i;
        $ad = "ad" . $i;

        $ResponseXML .= "<tr>
                             
							 
							  <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $id . "'>" . $row['id'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $code . "'>" . $row['str_code'] . "</div></td>
							 <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $itemd . "'>" . $row['str_description'] . "</div></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $rate . "\" id=\"" . $rate . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" /></td>
							  <td align=right ><input type=\"text\"  class=\"text_purchase3\" name=\"" . $actual_selling . "\" id=\"" . $actual_selling . "\" size=\"15\"  value=\"" . number_format($row['actual_selling'], 2, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"   /></td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><input type=\"text\"  class=\"text_purchase3\" name=\"" . $qty . "\" id=\"" . $qty . "\" size=\"15\"  value=\"" . number_format($row['cur_qty'], 0, ".", ",") . "\"  onblur=\"calc1_table('" . $i . "');\"  onkeypress=\"keyset('credper',event);\" />    </td>
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $discountper . "'>" . $row["dis_per"] . "</div><input type=\"hidden\"  class=\"text_purchase3\" name=\"" . $discount . "\" id=\"" . $discount . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"    /></td>
							 
							 <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $subtotal . "'>" . number_format($row['cur_subtot'], 2, ".", ",") . "</div></td>
							
							 <td ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=" . $row['str_code'] . "  name=" . $row['str_code'] . " onClick=\"del_item('" . $row['id'] . "');\"></td>";

        include_once("connectioni.php");

        $sqlqty = mysqli_query($GLOBALS['dbinv'], "select QTYINHAND from s_submas where STK_NO='" . $row['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'") or die(mysqli_error());
        if ($rowqty = mysqli_fetch_array($sqlqty)) {
            $qty = number_format($rowqty['QTYINHAND'], 0, ".", ",");
        } else {
            $qty = 0;
        }

        if ($row['ad'] == "1") {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "' checked></td>";
        } else {
            $ResponseXML .= "<td><input type=\"checkbox\" onClick=\"chk_ad('" . $i . "');\" name='" . $ad . "' id='" . $ad . "'></td>";
        }


        $ResponseXML .= "<td  >" . $qty . "</td>
							 
						
                    </tr>";

        $i = $i + 1;
    }

    $ResponseXML .= "   </table>]]></sales_table>";

    $sql = "Select sum(cur_subtot) as tot_sub, sum(cur_discount) as tot_dis from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    $row = mysqli_fetch_array($result);
    $ResponseXML .= "<subtot><![CDATA[" . number_format($row['tot_sub'], 2, ".", ",") . "]]></subtot>";
    $ResponseXML .= "<tot_dis><![CDATA[" . number_format($row['tot_dis'], 2, ".", ",") . "]]></tot_dis>";

    $sql_invpara = "SELECT * from invpara";
    $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
    $row_invpara = mysqli_fetch_array($result_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;

    if ($_GET["vatmethod"] == "vat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (VAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "svat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (SVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "evat") {
        $tax = $row['tot_sub'] * $vatrate;
        $taxf = number_format($tax, 2, ".", ",");

        $ResponseXML .= "<tax><![CDATA[" . $taxf . "]]></tax>";
        $strvatrate = "Tax (EVAT " . $row_invpara["vatrate"] . "%)";
        $ResponseXML .= "<taxname><![CDATA[" . $strvatrate . "]]></taxname>";

        $invtot = number_format($row['tot_sub'] + $tax, 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    } else if ($_GET["vatmethod"] == "non") {
        //$tax=number_format($row['tot_sub']*$vatrate, 2, ".", ",");
        $ResponseXML .= "<tax><![CDATA[0.00]]></tax>";
        $ResponseXML .= "<taxname><![CDATA[Tax]]></taxname>";

        $invtot = number_format($row['tot_sub'], 2, ".", ",");
        $ResponseXML .= "<invtot><![CDATA[" . $invtot . "]]></invtot>";
    }

    $ResponseXML .= " </salesdetails>";


    //	}	


    echo $ResponseXML;
}


if ($_GET["Command"] == "save_item") {

    if (($_SESSION["tmp_no_salinv"] == "") or ($_SESSION["dev"] == "")) {
        exit("no");
    }

    include('connectioni.php');

    $sqltmp = "select * from invpara";
    $resulttmp = mysqli_query($GLOBALS['dbinv'], $sqltmp);
    $rowtmp = mysqli_fetch_array($resulttmp);

    if ($rowtmp["form_loc"] == "1") {
        exit("no");
    }

    $tmpsubtot = 0;
    $tot_dis_per = 0;


    $sqltmp1 = "select dis_per from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "' group by dis_per";

    $resulttmp = mysqli_query($GLOBALS['dbinv'], $sqltmp1);
    if (mysqli_num_rows($resulttmp) > 1) {
        exit("err1");
    }


    $sqltmp = "select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
    $resulttmp = mysqli_query($GLOBALS['dbinv'], $sqltmp);
    while ($rowtmp = mysqli_fetch_array($resulttmp)) {

        $dis_per = $rowtmp["cur_rate"] * $rowtmp["cur_qty"] * $rowtmp["dis_per"] * 0.01;

        $tot_dis_per = $tot_dis_per + $dis_per;

        $tmpsubtot = $tmpsubtot + (($rowtmp["cur_rate"] * $rowtmp["cur_qty"]) - $dis_per);
    }

    $vat = "";
    if (($_GET["vatmethod"] == "vat") or ($_GET["vatmethod"] == "svat") or ($_GET["vatmethod"] == "evat")) {
        $vat = "1";
    } else {
        $vat = "0";
    }

    $sql_invpara = "SELECT * from invpara";
    $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
    $row_invpara = mysqli_fetch_array($result_invpara);


    if ($vat == "1") {
        $vat_value = $tmpsubtot * $row_invpara["vatrate"] / 100;
    } else {
        $vat_value = 0;
    }

    $grand_tot = $tmpsubtot + $vat_value;

    $form_subtot = str_replace(",", "", $_GET["subtot"]);
    //echo $form_subtot."/".$tmpsubtot;
    if (number_format($form_subtot, 0, ".", "") != number_format($tmpsubtot, 0, ".", "")) {
        if (number_format($form_subtot, 2, ".", "") != number_format($tmpsubtot, 2, ".", "")) {
            exit("err1");
        }
    }


    $form_disc = str_replace(",", "", $_GET["totdiscount"]);
    //echo $form_disc."/".$tot_dis_per;
    //echo number_format($form_disc, 2, ".", "")."/".number_format($tot_dis_per, 2, ".", "");
    if (number_format($form_disc, 0, ".", "") != number_format($tot_dis_per, 0, ".", "")) {
        if (number_format($form_disc, 2, ".", "") != number_format($tot_dis_per, 2, ".", "")) {
            exit("err2");
        }
    }

    $form_tax = str_replace(",", "", $_GET["tax"]);
    //echo $form_tax."/".$vat_value;
    if (number_format($form_tax, 0, ".", "") != number_format($vat_value, 0, ".", "")) {

        if (number_format($form_tax, 2, ".", "") != number_format($vat_value, 2, ".", "")) {
            //echo number_format($form_tax, 0, ".", "") . "-" . number_format($vat_value, 0, ".", "");
            exit("err3");
        }
    }

    $form_invtot = str_replace(",", "", $_GET["invtot"]);
    //echo $form_invtot."/".$grand_tot;
    //echo number_format($form_invtot, 2, ".", "")."/".number_format($grand_tot, 2, ".", "");
    if (number_format($form_invtot, 0, ".", "") != number_format($grand_tot, 0, ".", "")) {
        if (number_format($form_invtot, 2, ".", "") != number_format($grand_tot, 2, ".", "")) {
            exit("err4" . "-" . number_format($form_invtot, 0, ".", ""));
        }
    }


    /*

      $form_subtot=str_replace(",", "", $_GET["subtot"]);

      if (number_format($form_subtot, 0, ".", "")!=number_format($tmpsubtot, 0, ".", "")){
      exit("err1");
      }


      $form_disc=str_replace(",", "", $_GET["totdiscount"]);
      if (number_format($form_disc, 0, ".", "")!=number_format($tot_dis_per, 0, ".", "")){
      exit("err2");
      }

      $form_tax=str_replace(",", "", $_GET["tax"]);
      if (number_format($form_tax, 0, ".", "")!=number_format($vat_value, 0, ".", "")){
      exit("err3");
      }

      $form_invtot=str_replace(",", "", $_GET["invtot"]);
      //echo $form_invtot."/".$grand_tot;
      if (number_format($form_invtot, 0, ".", "")!=number_format($grand_tot, 0, ".", "")){
      exit("err4");
      }

     */

    if ($_SESSION["save_sales_inv"] == 1) {

        $_SESSION["brand"] = "";


        $insuf_qty = "";
        $sqltmp1 = "select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
        $resulttmp1 = mysqli_query($GLOBALS['dbinv'], $sqltmp1);
        if ($rowtmp1 = mysqli_fetch_array($resulttmp1)) {

        } else {
            exit("Empty Items List. Cannot Save!!!");
        }
        $resulttmp1 = mysqli_query($GLOBALS['dbinv'], $sqltmp1);

        while ($rowtmp1 = mysqli_fetch_array($resulttmp1)) {
            $sqlqty1 = "select QTYINHAND from s_submas where STK_NO='" . $rowtmp1['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'";
            $resultqty1 = mysqli_query($GLOBALS['dbinv'], $sqlqty1);

            if ($rowqty1 = mysqli_fetch_array($resultqty1)) {
                if ($rowqty1["QTYINHAND"] < $rowtmp1["cur_qty"]) {

                    $sqlqty2 = "select * from s_adtrn where REF_NO='" . $_GET["salesord1"] . "' AND STK_NO='" . $rowtmp1['str_code'] . "'";
                    $resultqty2 = mysqli_query($GLOBALS['dbinv'], $sqlqty2);
                    if ($rowqty2 = mysqli_fetch_array($resultqty2)) {

                    } else {
                        $insuf_qty = $rowtmp1['str_code'];
                    }
                }
            }
        }


        if ($insuf_qty == "") {

            $ResponseXML .= "";
            $ResponseXML .= "<salesdetails>";


            $cre_balance = str_replace(",", "", $_GET["balance"]);
            $totdiscount = str_replace(",", "", $_GET["totdiscount"]);
            $subtot = str_replace(",", "", $_GET["subtot"]);
            $invtot = str_replace(",", "", $_GET["invtot"]);
            $tax = str_replace(",", "", $_GET["tax"]);

            // Insert s_salma ============================================================ 

            $sql = "select * from vendor where CODE = '" . trim($_GET["customercode"]) . "'";
            $result = mysqli_query($GLOBALS['dbinv'], $sql);
            if ($row = mysqli_fetch_array($result)) {
                if ($row["blacklist"] == "1") {
                    $sqlapp = "select * from s_cusordmas where ref_no='" . trim($_GET["salesord1"]) . "'";
                    $resultapp = mysqli_query($GLOBALS['dbinv'], $sqlapp);
                    if ($rowapp = mysqli_fetch_array($resultapp)) {
                        if ($rowapp["approveby"] == "0") {
                            exit("Invoice Facilitey Stoped for This Customer,Please Invoice For Approved Sales Order");
                        } else {
                            exit("Invoice Facilitey Stoped for This Customer,Please Invoice For Approved Sales Order");
                        }
                        $_SESSION["print"] = 0;
                    }
                }
            }


///////////////////////////   Call checkcreditlimit

            $InvClass = "";
            $sqlclass = "select class from brand_mas where barnd_name='" . trim($_GET["brand"]) . "'";
            $result = mysqli_query($GLOBALS['dbinv'], $sqlclass);
            if ($rowclass = mysqli_fetch_array($result)) {
                if (is_null($rowclass["class"]) == false) {
                    $InvClass = $rowclass["class"];
                }
            }

            $sql_brtrn = "select * from br_trn where Rep='" . trim($_GET["salesrep"]) . "' and brand='" . trim($InvClass) . "' and cus_code='" . trim($_GET["customercode"]) . "'";
            //echo $sql_brtrn;
            $result_brtrn = mysqli_query($GLOBALS['dbinv'], $sql_brtrn);
            $row_brtrn = mysqli_fetch_array($result_brtrn);
            $cuscat = trim($row_brtrn["CAT"]);

            if (trim($_GET["customercode"]) != "") {
                if ($cuscat == "A") {
                    if ($invtot > $cre_balance) {
                        $ResponseXML .= "<msg_crelimi><![CDATA[Credit Limit Exceed1]]></msg_crelimi>";
                    } else {
                        $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";
                    }
                }

                if ($cuscat == "B") {
                    if ($invtot > $cre_balance) {
                        $ResponseXML .= "<msg_crelimi><![CDATA[Credit Limit Exceed2]]></msg_crelimi>";
                    } else {
                        $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";
                    }
                }

                if ($cuscat == "C") {
                    if ($invtot > $cre_balance) {
                        $ResponseXML .= "<msg_crelimi><![CDATA[Credit Limit Exceed3]]></msg_crelimi>";
                    } else {
                        $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";
                    }
                }

                if ($cuscat == "D") {
                    $ResponseXML .= "<msg_crelimi><![CDATA[Customer Deleted]]></msg_crelimi>";
                }

                if (($cuscat != "D") and ($cuscat != "A") and ($cuscat != "B") and ($cuscat != "C")) {
                    $ResponseXML .= "<msg_crelimi><![CDATA[Customer Catogory Not Entered]]></msg_crelimi>";
                }
            } else {
                $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";
            }


            //============
            $vat = "";
            if (($_GET["vatmethod"] == "vat") or ($_GET["vatmethod"] == "svat") or ($_GET["vatmethod"] == "evat")) {
                $vat = "1";
            } else {
                $vat = "0";
            }


            $svat = 0;
            if ($_GET["vatmethod"] == "svat") {
                $svat = str_replace(",", "", $_GET["tax"]);
            }


            //================discount


            $d1 = str_replace(",", "", $_GET["discount_org1"]);
            $d2 = str_replace(",", "", $_GET["discount_org2"]);
            $d3 = str_replace(",", "", $_GET["discount_org3"]);

            if ($d1 == "") {
                $d1 = 0;
            }
            if ($d2 == "") {
                $d2 = 0;
            }
            if ($d3 == "") {
                $d3 = 0;
            }


            $d = 100 - (100 - $d3) * (100 - $d2) * (100 - $d1) / 100;
            //===============================================

            $cre_balance = str_replace(",", "", $_GET["balance"]);
            $totdiscount = str_replace(",", "", $_GET["totdiscount"]);
            $subtot = str_replace(",", "", $_GET["subtot"]);
            $invtot = str_replace(",", "", $_GET["invtot"]);
            $tax = str_replace(",", "", $_GET["tax"]);

            $sql_invpara = "SELECT * from invpara";
            $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
            $row_invpara = mysqli_fetch_array($result_invpara);

            $mvatrate = $row_invpara["vatrate"];

            $customername = str_replace("~", "&", $_GET["customername"]);
            $cus_address = str_replace("~", "&", $_GET["cus_address"]);

            $sql_status = 0;

            mysqli_query($GLOBALS['dbinv'], "SET AUTOCOMMIT=0");
            mysqli_query($GLOBALS['dbinv'], "START TRANSACTION");

            if ($_SESSION['company'] == "THT") {


                $sql = "Select SPINV, CRE_INV_NO, CAS_INV_NO from invpara";
                $result = mysqli_query($GLOBALS['dbinv'], $sql);
                $row = mysqli_fetch_array($result);
                if ($_SESSION['dev'] == "1") {

                    $tmpinvno = "000000" . ($row["SPINV"] + 1);
                    $lenth = strlen($tmpinvno);

                    $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/5";
                    $_SESSION["invno"] = $invno;
                    $txtdono = $row["CAS_INV_NO"] + 1;
                } else {

                    $tmpinvno = "000000" . ($row["SPINV"] + 1);
                    $lenth = strlen($tmpinvno);

                    $invno = trim("CRI/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
                    $_SESSION["invno"] = $invno;
                    $txtdono = $row["CRE_INV_NO"] + 1;
                }
            } else if ($_SESSION['company'] == "BEN") {


                $sql = "Select SPINV, SPINV1, CAS_INV_NO_m, CAS_INV_NO from invpara";
                $result = mysqli_query($GLOBALS['dbinv'], $sql);
                $row = mysqli_fetch_array($result);

                if ($_SESSION['dev'] == "1") {
                    $tmpinvno = "000000" . ($row["SPINV1"] + 1);
                    $lenth = strlen($tmpinvno);

                    $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/10";
                    $_SESSION["invno"] = $invno;
                    $txtdono = $row["CAS_INV_NO_m"] + 1;
                } else {
                    $tmpinvno = "000000" . ($row["SPINV"] + 1);
                    $lenth = strlen($tmpinvno);

                    $invno = trim("BEN/CR/ ") . substr($tmpinvno, $lenth - 6) . "/" . $_GET["salesrep"];
                    $_SESSION["invno"] = $invno;
                    $txtdono = $row["CAS_INV_NO"] + 1;
                }
            }


            $sqlisalma_q = "select REF_NO from s_salma where REF_NO='" . $invno . "'";
            $resultsalma_q = mysqli_query($GLOBALS['dbinv'], $sqlisalma_q);
            if ($rowsalma_q = mysqli_fetch_array($resultsalma_q)) {
                exit("Invoice No Already Exist !!!");
            }


            if ($_SESSION['dev'] == "1") {
                $sqlisalma = "Update invpara  set SPINV1=SPINV1+1";
                $resultsalma = mysqli_query($GLOBALS['dbinv'], $sqlisalma);
                if ($resultsalma != 1) {
                    $sql_status = 1;
                }
            }

            if ($_SESSION['dev'] == "0") {
                $sqlisalma = "Update invpara  set SPINV=SPINV+1";
                $resultsalma = mysqli_query($GLOBALS['dbinv'], $sqlisalma);
                if ($resultsalma != 1) {
                    $sql_status = 1;
                }
            }


            $sqlisalma = "Insert into s_salma  (REF_NO, TRN_TYPE, SDATE, C_CODE, Brand, CUS_NAME, VAT, VAT_VAL, TYPE, DISCOU, AMOUNT, GRAND_TOT,  TOTPAY, ORD_NO, ORD_DA,  DEPARTMENT, SAL_EX, BTT, cre_pe, GST, DIS, DIS1, DIS2, SVAT, Account, TOTPAY1, REMARK, REQ_DATE, CANCELL, DEV, tmp_no, DIS_RUP, CASH, SETTLED, DES_CAT, Accname, Costcenter, RET_AMO, Comm, red, seri_no, points, LOCK1, deliin, vat_no, s_vat_no, C_ADD1,c_code1) values('" . $invno . "', 'INV', '" . $_GET["invdate"] . "', '" . trim($_GET["customercode"]) . "', '" . trim($_GET["brand"]) . "', '" . trim($customername) . "','" . $vat . "', " . $tax . ", '" . $_GET["paymethod"] . "'," . $totdiscount . ", " . $subtot . " , " . $invtot . ", 0, '" . trim($_GET["salesord1"]) . "', '" . $_GET["deldate"] . "', '" . trim($_GET["department"]) . "', '" . trim($_GET["salesrep"]) . "', " . $tax . ", " . $_GET["credper"] . " , " . $mvatrate . ", " . $d1 . ", " . $d2 . ", " . $d3 . ", '" . $svat . "', 'NOTAUTH', '1',  '" . $invno . "', '" . $_GET["deldate"] . "', '0', '" . $_SESSION['dev'] . "', '" . $_SESSION["tmp_no_salinv"] . "', 0, 0, '0', 'N', 'OFFICE', '" . $_GET['promotion'] . "', 0, 'N', '0', '', '0', '0', '', '" . trim($_GET["vat1"]) . "', '" . trim($_GET["vat2"]) . "', '" . $cus_address . "','" . $_GET['c_subcode'] . "')";
            //echo $sqlisalma;
            $resultsalma = mysqli_query($GLOBALS['dbinv'], $sqlisalma);
            if ($resultsalma == false) {
                $sql_status = 2;
            }


            //==============Update credit limit==========================================
            //$sqlisalma="update vendor set CUR_BAL= CUR_BAL+".$invtot." where CODE='".trim($_GET["customercode"])."'";
            //$resultsalma=mysqli_query($GLOBALS['dbinv'],$sqlisalma);
            //if ($resultsalma!=1){ $sql_status=1; }

            $sql_invpara = "SELECT * from invpara";
            $result_invpara = mysqli_query($GLOBALS['dbinv'], $sql_invpara);
            $row_invpara = mysqli_fetch_array($result_invpara);


            //$sqlisalma="update br_trn set credit= credit+".$invtot." where cus_code='".trim($_GET["customercode"])."'";
            //$resultsalma=mysqli_query($GLOBALS['dbinv'],$sqlisalma);

            $sqltmp = "select * from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
            //echo $sqltmp;
            $resulttmp = mysqli_query($GLOBALS['dbinv'], $sqltmp);
            while ($rowtmp = mysqli_fetch_array($resulttmp)) {
                $dis_per = $rowtmp["cur_rate"] * $rowtmp["cur_qty"] * $rowtmp["dis_per"] * 0.01;

                $sqlmas = "select * from s_mas where STK_NO='" . trim($rowtmp["str_code"]) . "'";
                $resultmas = mysqli_query($GLOBALS['dbinv'], $sqlmas);
                $rowmas = mysqli_fetch_array($resultmas);

                $sql_invo = "Insert into s_invo  (REF_NO, SDATE, STK_NO, DESCRIPT, PART_NO, COST, PRICE, QTY, DEPARTMENT, DIS_per, DIS_rs, REP, TAX_PER, BRAND, vatrate, Print_dis1, Print_dis2, Print_dis3, subtot, ret_qty, DEV, CANCELL, c_code, seri_no, ad) values ('" . $invno . "', '" . $_GET["invdate"] . "', '" . trim($rowtmp["str_code"]) . "', '" . trim($rowtmp["str_description"]) . "', '" . $rowmas["PART_NO"] . "', " . $rowmas["COST"] . ", " . $rowtmp["actual_selling"] . ", " . $rowtmp["cur_qty"] . ", '" . $department . "', '" . $rowtmp["dis_per"] . "', " . $dis_per . ", '" . $_GET["salesrep"] . "', '" . $row_invpara["vatrate"] . "', '" . $_GET["brand"] . "', " . $mvatrate . ", " . $d1 . ", " . $d2 . ", " . $d3 . ", " . $rowtmp["cur_subtot"] . ", '0', '', '0', '', '', '" . $rowtmp["ad"] . "')";
                //echo $sql_invo;
                $result_invo = mysqli_query($GLOBALS['dbinv'], $sql_invo);
                if ($result_invo != 1) {
                    $sql_status = 3;
                }


                // if ($_GET["txtad"]!="AD"){

                $sqls_trn = "Insert into s_trn (STK_NO, SDATE, REFNO, QTY, LEDINDI, DEPARTMENT, Dev, seri_no, SAL_EX, ACTIVE, DONO) values('" . trim($rowtmp["str_code"]) . "','" . $_GET["invdate"] . "','" . trim($invno) . "', " . $rowtmp["cur_qty"] . ", 'INV', '" . trim($_GET["department"]) . "', '" . $_SESSION['dev'] . "', '', '', '1', '')";
                $results_trn = mysqli_query($GLOBALS['dbinv'], $sqls_trn);
                if ($results_trn != 1) {
                    $sql_status = 4;
                }


                $sqls_trn = "Insert into s_trn_all (STK_NO, SDATE, REFNO, QTY, LEDINDI, DEPARTMENT, Dev, seri_no, SAL_EX, ACTIVE, DONO, cuscode, cusname, brand) values('" . trim($rowtmp["str_code"]) . "','" . $_GET["invdate"] . "','" . trim($invno) . "', " . (-1 * $rowtmp["cur_qty"]) . ", 'INV', '" . trim($_GET["department"]) . "', '" . $_SESSION['dev'] . "', '', '" . trim($_GET["salesrep"]) . "', '1', '', '" . trim($_GET["customercode"]) . "', '" . trim($customername) . "', '" . $_GET["brand"] . "')";
                //echo $sqls_trn;
                $results_trn = mysqli_query($GLOBALS['dbinv'], $sqls_trn);
                if ($results_trn != 1) {
                    $sql_status = 5;
                }


                $sqls_mas = "update s_mas set QTYINHAND= QTYINHAND-" . $rowtmp["cur_qty"] . " where STK_NO='" . trim($rowtmp["str_code"]) . "'";
                $results_mas = mysqli_query($GLOBALS['dbinv'], $sqls_mas);
                if ($results_mas != 1) {
                    $sql_status = 6;
                }


                // Call upsales(dtdate, Val(MSFlexGrid1.TextMatrix(i, 3)), Trim(MSFlexGrid1.TextMatrix(i, 0)))
                //m_STK_NO = Trim(MSFlexGrid1.TextMatrix(i, 0))
                //M_STOCODE = Trim(Mid(Me.com_dep, 1, 5))

                $sqls_submas = "update s_submas set QTYINHAND=QTYINHAND- " . $rowtmp["cur_qty"] . " where STK_NO= '" . trim($rowtmp["str_code"]) . "' and STO_CODE= '" . trim($_GET["department"]) . "'";
                //echo $sqls_submas;
                $results_submas = mysqli_query($GLOBALS['dbinv'], $sqls_submas);
                if ($results_submas != 1) {
                    $sql_status = 7;
                }

                $sqls_submas = "update s_submas_ad set QTYINHAND=QTYINHAND- " . $rowtmp["cur_qty"] . " where STK_NO= '" . trim($rowtmp["str_code"]) . "' and STO_CODE= '" . trim($_GET["department"]) . "'";
                //echo $sqls_submas;
                $results_submas = mysqli_query($GLOBALS['dbinv'], $sqls_submas);
                if ($results_submas != 1) {
                    $sql_status = 8;
                }
            }
            //}


            $sqlpara = "delete from tmp_inv_data where tmp_no='" . $_SESSION["tmp_no_salinv"] . "'";
            $resultpara = mysqli_query($GLOBALS['dbinv'], $sqlpara);
            if ($resultpara != 1) {
                $sql_status = 9;
            }

            $sqls_submas = "Insert into s_led(REF_NO, SDATE, C_CODE, AMOUNT, FLAG, DEPARTMENT) values('" . trim($invno) . "', '" . $_GET["invdate"] . "', '" . trim($_GET["customercode"]) . "', " . $invtot . ", 'INV', '" . $_GET["department"] . "')";
            $results_submas = mysqli_query($GLOBALS['dbinv'], $sqls_submas);
            if ($results_submas != 1) {
                $sql_status = 10;
            }

            if ($_SESSION['dev'] == "1") {
                $sqlpara = "update invpara set CAS_INV_NO=CAS_INV_NO+1";
                $resultpara = mysqli_query($GLOBALS['dbinv'], $sqlpara);
                if ($resultpara != 1) {
                    $sql_status = 11;
                }
            }

            if ($_SESSION['dev'] == "0") {
                $sqlpara = "update invpara set CRE_INV_NO=CRE_INV_NO+1";
                $resultpara = mysqli_query($GLOBALS['dbinv'], $sqlpara);
                if ($resultpara != 1) {
                    $sql_status = 12;
                }
            }

            $sqlpara = "update vendor set temp_limit= '0'  where CODE='" . trim($_GET["customercode"]) . "'";
            $resultpara = mysqli_query($GLOBALS['dbinv'], $sqlpara);
            if ($resultpara != 1) {
                $sql_status = 13;
            }


            $sqlbrand = "select * from brand_mas where barnd_name='" . trim($_GET["brand"]) . "'";
            $resultbrand = mysqli_query($GLOBALS['dbinv'], $sqlbrand);
            //if ($resultbrand!=1){ $sql_status=14; }

            if ($rowbrand = mysqli_fetch_array($resultbrand)) {
                $sqlbr_trn = "update br_trn set tmplmt= '0'   where cus_code='" . trim($_GET["customercode"]) . "' and brand='" . trim($rowbrand["class"]) . "' and Rep='" . trim($_GET["salesrep"]) . "'";

                $resultbr_trn = mysqli_query($GLOBALS['dbinv'], $sqlbr_trn);
                if ($resultbr_trn != 1) {
                    $sql_status = 15;
                }
            }


            $sqlbr_trn = "update s_cusordmas set INVNO= '" . $invno . "' where  REF_NO='" . $_GET["ordno"] . "'";
            $resultbr_trn = mysqli_query($GLOBALS['dbinv'], $sqlbr_trn);
            if ($resultbr_trn != 1) {
                $sql_status = 16;
            }

            $sqlbr_trn = "update s_admas set INVNO= '" . $invno . "' where  REF_NO='" . $_GET["ordno"] . "'";
            $resultbr_trn = mysqli_query($GLOBALS['dbinv'], $sqlbr_trn);
            if ($resultbr_trn != 1) {
                $sql_status = 17;
            }

            $sqlbrand = "insert into entry_log(refno, username, docname, trnType, stime, sdate) values ('" . trim($invno) . "', '" . $_SESSION["CURRENT_USER"] . "', 'Invoice', 'Save', '" . date("Y-m-d H:i:s") . "', '" . date("Y-m-d") . "')";
            $resultbrand = mysqli_query($GLOBALS['dbinv'], $sqlbrand);
            if ($resultbrand != 1) {
                $sql_status = 18;
            }

            if ($sql_status == 0) {
                mysqli_query($GLOBALS['dbinv'], "COMMIT");
            } else {
                mysqli_query($GLOBALS['dbinv'], "ROLLBACK");
            }

            /////////////////////////////////////////////////////////////////////////


            $_SESSION["print"] = 1;
            $_SESSION["save_sales_inv"] = 0;
            if ($sql_status == 0) {
                $ResponseXML .= "<Saved><![CDATA[Saved]]></Saved>";
            } else {
                echo $sql_status;
                $ResponseXML .= "<Saved><![CDATA[no" . $sql_status . "]]></Saved>";
            }
            $ResponseXML .= "<invno><![CDATA[" . $invno . "]]></invno>";
            $ResponseXML .= "<company><![CDATA[" . $_SESSION['company'] . "]]></company>";

            //echo "Saved";
        } else {
            $ResponseXML .= "";
            $ResponseXML .= "<salesdetails>";
            $ResponseXML .= "<Saved><![CDATA[insuficent]]></Saved>";
            $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";

            //echo "insuficent";
        }
    } else {
        $ResponseXML .= "";
        $ResponseXML .= "<salesdetails>";
        $ResponseXML .= "<msg_crelimi><![CDATA[no]]></msg_crelimi>";
        $ResponseXML .= "<Saved><![CDATA[no]]></Saved>";

        //echo "no";
    }


    $ResponseXML .= " </salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "check_print") {

    echo $_SESSION["print"];
}


if ($_GET["Command"] == "tmp_crelimit") {
    echo "abc";
    $crLmt = 0;
    $cat = "";

    $rep = trim(substr($_GET["Com_rep1"], 0, 5));

    $sql = "select * from br_trn where rep='" . $rep . "' and cus_code='" . trim($_GET["txt_cuscode"]) . "' and brand='" . trim($_GET["cmbbrand1"]) . "'";
    echo $sql;
    $result = mysqli_query($GLOBALS['dbinv'], $sql);
    if ($row = mysqli_fetch_array($result)) {
        $crLmt = $row["credit_lim"];
        if (is_null($row["cat"]) == false) {
            $cat = trim($row["cat"]);
        } else {
            $crLmt = 0;
        }
    }
    /* 	
      $_SESSION["CURRENT_DOC"] = 66     //document ID
      //$_SESSION["VIEW_DOC"] = true      //  view current document
      $_SESSION["FEED_DOC"] = true      //  save  current document
      //$_SESSION["MOD_DOC"] = true       //   delete   current document
      //$_SESSION["PRINT_DOC"] = true     // get additional print   of  current document
      //$_SESSION["PRICE_EDIT"]= true     // edit selling price
      $_SESSION["CHECK_USER"] = true    // check user permission again
      $crLmt = $crLmt;
      setlocale(LC_MONETARY, "en_US");
      $CrTmpLmt = number_format($_GET["txt_tmeplimit"], 2, ".", ",");

      $REFNO = trim($_GET["txt_cuscode"]) ;

      $AUTH_USER="tmpuser";

      $sql = "insert into tmpCrLmt (sdate, stime, username, tmpLmt, class, rep, cuscode, crLmt, cat) values
      ('".date("Y-m-d")."','".date("H:i:s", time())."' ,'".$AUTH_USER."',".$CrTmpLmt." ,'".trim($_GET["cmbbrand1"])."','".$rep."','".trim($_GET["txt_cuscode"])."',".$crLmt.",'".$cat"' )";
      $result =mysqli_query($GLOBALS['dbinv'],$sql) ;

      $sql = "select * from  br_trn where cus_code='".trim($_GET["txt_cuscode"])."' and rep='".$rep."' and brand='".$_GET["cmbbrand1"]."'";
      $result =mysqli_query($GLOBALS['dbinv'],$sql) ;
      if ($row = mysqli_fetch_array($result)) {
      $sqlbrtrn= "insert into br_trn (cus_code, rep, credit_lim, brand, tmplmt) values ('".trim($_GET["txt_cuscode"])."','".$rep."','0','".trim($_GET["cmbbrand1"])."',".$CrTmpLmt." )";
      $resultbrtrn =mysqli_query($GLOBALS['dbinv'],$sqlbrtrn);

      } else {

      $sqlbrtrn= "update br_trn set tmplmt= ".$CrTmpLmt."  where cus_code='".trim($_GET["txt_cuscode"])."' and rep='".$rep."' and brand='".$_GET["cmbbrand1"]."' ";
      $resultbrtrn =mysqli_query($GLOBALS['dbinv'],$sqlbrtrn);

      //	$sqlbrtrn= "update vendor set temp_limit= ".$CrTmpLmt."  where code='".trim($_GET["txt_cuscode"])."' "
      }

      If ($_GET["Check1"] == 1) {
      $sqlblack= "update vendor set blacklist= '1'  where code='".trim($_GET["txt_cuscode"])."' ";
      $resultblack =mysqli_query($GLOBALS['dbinv'],$sqlblack);
      } else {
      $sqlblack= "update vendor set blacklist= '0'  where code='".trim($_GET["txt_cuscode"])."' ";
      $resultblack =mysqli_query($GLOBALS['dbinv'],$sqlblack);
      }

      echo "Tempory limit updated"; */
}
//2020.02.27 prawee
if ($_GET["Command"] == "add_tmp_p1") {
    if ($_GET['Command1'] == "add") {

        $rate = str_replace(",", "", $_GET["rate"]);

        $actual_selling = str_replace(",", "", $_GET["rate"]);
        $qty = str_replace(",", "", $_GET["qty"]);
        $subtotal = str_replace(",", "", $_GET["subtotal"]);
        $subtotal1 = str_replace(",", "", $_GET["subtotal"]);


        $subtotal2 = $rate - ($rate * $_GET["discountper"] / 100);

        if ($subtotal1 = !$subtotal2) {
            if (($subtotal1 != 1) && ($subtotal2 != 0)) {
                //echo $subtotal1; 
                exit('Error');
            }
        }


        $sql = "Insert into tmp_inv_data (str_invno, str_code, str_description, cur_rate, cur_qty, dis_per,  cur_subtot,  brand, tmp_no,actual_selling)values 
		 	('" . $_GET['invno'] . "', '" . $_GET['itemcode'] . "', '" . $_GET['item'] . "', " . $rate . ", " . $qty . ", " . $_GET["discountper"] . ", " . $subtotal . ", '" . $_GET['brand'] . "', '" . $_GET['tmpno'] . "'," . $rate . ") ";

        $result = mysqli_query($GLOBALS['dbinv'], $sql);
    }

    if ($_GET['Command1'] == "del") {

        $sql = "delete from tmp_inv_data where id='" . $_GET['id'] . "'";
        $result = mysqli_query($GLOBALS['dbinv'], $sql);
    }


    $sql = "update tmp_inv_data set dis_per ='" . $_GET["discountper"] . "' where tmp_no='" . $_GET['tmpno'] . "' ";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);


    $sql = "update tmp_inv_data set cur_subtot=(cur_rate-(cur_rate*dis_per/100))*cur_qty where tmp_no='" . $_GET['tmpno'] . "' ";
    $result = mysqli_query($GLOBALS['dbinv'], $sql);


    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";
    $ResponseXML .= "<sql><![CDATA[" . $sql . "]]></sql>";
    $ResponseXML .= "<sales_table><![CDATA[ <table class=\"table\">     
			<tr>
                        <th style=\"width: 100px;\">Item Code</th>
                        <th style=\"width: 10px;\"></th>
                        <th style=\"width: 450px;\">Description</th>
                        <th style=\"width: 120px;text-align: right;\">Price</th>
                        <th style=\"width: 120px;text-align: right;\">Qty</th>
                        <th style=\"width: 120px;text-align: right;\">%</th>
                        <th style=\"width: 120px;text-align: right;\">SubTotal</th>
                        <th></th>
                        <th></th>
                        </tr>";

    $i = 1;
    $mtot = 0;
    $mtot2 = 0;
    $mtot1 = 0;
    $sql = "Select * from tmp_inv_data where tmp_no='" . $_GET['tmpno'] . "'";
    $resulttmp = mysqli_query($GLOBALS['dbinv'], $sql);
    while ($row = mysqli_fetch_array($resulttmp)) {

        $id = "id" . $i;
        $code = "code" . $i;
        $itemd = "itemd" . $i;
        $rate = "rate" . $i;

        $qty = "qty" . $i;
        $discountper = "discountper" . $i;
        $subtotal = "subtotal" . $i;
        $discount = "discount" . $i;


        $ResponseXML .= "<tr>                              
                             
                         <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $code . "'>" . $row['str_code'] . "</div></td>
                         <td></td>
                         <td onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $itemd . "'>" . $row['str_description'] . "</div></td>
                         <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $rate . "'>" . number_format($row['cur_rate'], 2, ".", ",") . "</div></td>
                         <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $qty . "'>" . number_format($row['cur_qty'], 0, ".", ",") . "</div></td>
                         <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $discountper . "'>" . $row["dis_per"] . "</div><input type=\"hidden\"  name=\"" . $discount . "\" id=\"" . $discount . "\" size=\"15\"  value=\"" . number_format($row['cur_rate'], 2, ".", ",") . "\"    /></td>
                         <td align=right onClick=\"disp_qty('" . $row['str_code'] . "');\"><div id='" . $subtotal . "'>" . number_format($row['cur_subtot'], 2, ".", ",") . "</div></td>
                         <td><a class=\"btn btn-danger btn-xs\"  onClick=\"del_item('" . $row['id'] . "');\"><span class='fa fa-remove'></a></td>";

        $sql = "select QTYINHAND from s_submas where STK_NO='" . $row['str_code'] . "' AND STO_CODE='" . $_GET["department"] . "'";
        $result_q = mysqli_query($GLOBALS['dbinv'], $sql);
        if ($row_q = mysqli_fetch_array($result_q)) {
            $qty = number_format($row_q['QTYINHAND'], 0, ".", ",");
        } else {
            $qty = 0;
        }


        $mtot = $mtot + $row['cur_subtot'];
        $mtot1 = $mtot1 + $row['cur_subtot'];


        $mtot2 = $mtot2 + ($row['cur_rate'] * $row['cur_qty']);


        $ResponseXML .= "<td>" . $qty . "</td>
						
							
							 
                            </tr>";
        $i = $i + 1;
    }
    $ResponseXML .= "   </table>]]></sales_table>";

    $ResponseXML .= "<item_count><![CDATA[" . $i . "]]></item_count>";
    $ResponseXML .= "<Command1><![CDATA[" . $_GET['Command1'] . "]]></Command1>";

    $sql1 = "select vatrate from invpara";
    $result1 = mysqli_query($GLOBALS['dbinv'], $sql1);
    $row1 = mysqli_fetch_array($result1);

    if ($_GET['vatmethod'] != "non") {
        $mtot1 = $mtot1 / (1 + ($row1['vatrate'] / 100));
    } else {
        $mtot1 = $mtot;
    }

    $mtax = $mtot - $mtot1;
    $mdis = $mtot2 - $mtot;
    $ResponseXML .= "<subtot><![CDATA[" . number_format($mtot1, 2, ".", "") . "]]></subtot>";


    $ResponseXML .= "<totdiscount><![CDATA[" . number_format($mdis, 2, ".", "") . "]]></totdiscount>";
    $ResponseXML .= "<tax><![CDATA[" . number_format($mtax, 2, ".", "") . "]]></tax>";
    $ResponseXML .= "<invtot><![CDATA[" . number_format($mtot, 2, ".", "") . "]]></invtot>";

    $ResponseXML .= " </salesdetails>";


    echo $ResponseXML;
}

mysqli_close($GLOBALS['dbinv']);
mysqli_close($GLOBALS['dbacc']);
?>