thetool/application/OrderJournal/OrderJournalController.php

<?php

class OrderJournalController extends mfBaseController {
  
  protected function init() {
    $this->needlogin=true;
    $me = new User();
    $me->loadMe();
    $this->me = $me;
    $this->layout()->set("me",$me);
    
    if(!$me->is(["Admin", "salespartner"])) {
      $this->redirect("Dashboard");
    }
  }
  
  protected function saveAction() {
    if(!$this->me->is(["Admin", "salespartner"])) {
      $this->layout()->setFlash("Keine Berechtigung", "error");
      $this->redirect("Dashboard");
    }
    
    $r = $this->request;
    $order_id = $r->order_id;
    if(!is_numeric($order_id) || $order_id < 1) {
      $this->layout()->setFlash("Bestellung nicht gefunden!", "error");
      $this->redirect("Order");
    }
    
    $order = new Order($order_id);
    if(!$order->id) {
      $this->layout()->setFlash("Bestellung nicht gefunden!", "error");
      $this->redirect("Order");
    }
    
    $text = trim(htmlentities($r->text));
    if(!$text) {
      $this->layout()->setFlash("Bitte Text eingeben", "error");
      $this->redirect("Order", "Index", [], "order=".$order_id);
    }
    
    
    
    $journal = new OrderJournal();
    $journal->order_id = $order_id;
    $journal->text = $text;
    $journal->create_by = $this->me->id;
    $journal->edit_by = $this->me->id;
    
    if(!$journal->save()) {
      $this->layout()->setFlash("Fehler beim speichern!", "error");
      $this->redirect("Order", "Index", [], "order=".$order_id);
    }
            
    $this->layout()->setFlash("Journaleintrag gespeichert", "success");
    $this->redirect("Order", "Index", [], "order=".$order_id);
  }
  
  
  
}