needlogin=true; $me = new User(); $me->loadMe(); $this->me = $me; $this->layout()->set("me",$me); if(!$me->is(["Admin", "salespartner"])) { $this->redirect("Dashboard"); } } protected function saveAction() { if(!$this->me->is(["Admin", "salespartner"])) { $this->layout()->setFlash("Keine Berechtigung", "error"); $this->redirect("Dashboard"); } $r = $this->request; $order_id = $r->order_id; if(!is_numeric($order_id) || $order_id < 1) { $this->layout()->setFlash("Bestellung nicht gefunden!", "error"); $this->redirect("Order"); } $order = new Order($order_id); if(!$order->id) { $this->layout()->setFlash("Bestellung nicht gefunden!", "error"); $this->redirect("Order"); } $text = trim(htmlentities($r->text)); if(!$text) { $this->layout()->setFlash("Bitte Text eingeben", "error"); $this->redirect("Order", "Index", [], "order=".$order_id); } $journal = new OrderJournal(); $journal->order_id = $order_id; $journal->text = $text; $journal->create_by = $this->me->id; $journal->edit_by = $this->me->id; if(!$journal->save()) { $this->layout()->setFlash("Fehler beim speichern!", "error"); $this->redirect("Order", "Index", [], "order=".$order_id); } $this->layout()->setFlash("Journaleintrag gespeichert", "success"); $this->redirect("Order", "Index", [], "order=".$order_id); } }