Added Bulk Delete Expenses Option

itflow-org · Sep 13, 2024 · 07df444 · 07df444
1 parent 6bb56f7
commit 07df444
Show file tree

Hide file tree

Showing 2 changed files with 45 additions and 0 deletions.
diff --git a/expenses.php b/expenses.php
@@ -105,6 +105,13 @@
                                     <a class="dropdown-item" href="#" data-toggle="modal" data-target="#bulkEditClientModal">
                                         <i class="fas fa-fw fa-user mr-2"></i>Set Client
                                     </a>
+                                    <?php if ($session_user_role == 3) { ?>
+                                    <div class="dropdown-divider"></div>
+                                    <button class="dropdown-item text-danger text-bold"
+                                            type="submit" form="bulkActions" name="bulk_delete_expenses">
+                                        <i class="fas fa-fw fa-trash mr-2"></i>Delete
+                                    </button>
+                                    <?php } ?>
                                 </div>
                             </div>
                         </div>

diff --git a/post/expense.php b/post/expense.php
@@ -215,6 +215,44 @@
     header("Location: " . $_SERVER["HTTP_REFERER"]);
 }
 
+if (isset($_POST['bulk_delete_expenses'])) {
+    validateAdminRole();
+    validateCSRFToken($_POST['csrf_token']);
+
+    $count = 0; // Default 0
+    $expense_ids = $_POST['expense_ids']; // Get array of expense IDs to be deleted
+    $client_id = intval($_POST['client_id']);
+
+    if (!empty($expense_ids)) {
+
+        // Cycle through array and delete each expense
+        foreach ($expense_ids as $expense_id) {
+
+            $expense_id = intval($expense_id);
+
+            $sql = mysqli_query($mysqli,"SELECT * FROM expenses WHERE expense_id = $expense_id");
+            $row = mysqli_fetch_array($sql);
+            $expense_receipt = sanitizeInput($row['expense_receipt']);
+
+            unlink("uploads/expenses/$expense_receipt");
+
+            mysqli_query($mysqli, "DELETE FROM expenses WHERE expense_id = $expense_id");
+            mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Expense', log_action = 'Delete', log_description = '$session_name deleted a expense (bulk)', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $expense_id");
+
+            $count++;
+        }
+
+        // Logging
+        mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Expense', log_action = 'Delete', log_description = '$session_name bulk deleted $count expenses', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+
+        $_SESSION['alert_type'] = "error";
+        $_SESSION['alert_message'] = "Deleted $count expense(s)";
+
+    }
+
+    header("Location: " . $_SERVER["HTTP_REFERER"]);
+}
+
 if (isset($_POST['export_expenses_csv'])) {
     $date_from = sanitizeInput($_POST['date_from']);
     $date_to = sanitizeInput($_POST['date_to']);