Mercurial > bms / file diff

--- a/www/includes/db_inventory_fermentables.php	Mon Aug 13 23:01:25 2018 +0200
+++ b/www/includes/db_inventory_fermentables.php	Thu Aug 16 16:01:13 2018 +0200
@@ -17,7 +17,7 @@
 	$sql  = "INSERT INTO `inventory_fermentables` SET name='" . mysqli_real_escape_string($connect, $_GET['name']);
 	$sql .= "', type='" . $_GET['type'];
 	$sql .= "', yield='" . $_GET['yield'];
-	$sql .= "', color='" . ebc_to_srm($_GET['color']);
+	$sql .= "', color='" . $_GET['color'];
 	($_GET['add_after_boil'] == 'true') ? $sql .= "', add_after_boil='1" : $sql .= "', add_after_boil='0";
 	$sql .= "', origin='" . mysqli_real_escape_string($connect, $_GET['origin']);
 	$sql .= "', supplier='" . mysqli_real_escape_string($connect, $_GET['supplier']);
@@ -37,11 +37,14 @@
 	$sql .= "', cost='" . $_GET['cost'];
 	$sql .= "', production_date='" . $_GET['production_date'];
 	$sql .= "', tht_date='" . $_GET['tht_date'];
-	$sql .= "', supplier_rec='" . $_GET['supplier_rec'];
+	//$sql .= "', supplier_rec='" . $_GET['supplier_rec'];
 	$sql .= "';";
-	error_log("\"$sql\"");
-	$result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect));
-	error_log("result " . $result);
+	$result = mysqli_query($connect, $sql);
+	if (! $result) {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect));
+	} else {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: inserted ".$_GET['name']);
+	}
 	echo $result;
 
 } else if (isset($_GET['update'])) {
@@ -49,7 +52,7 @@
 	$sql  = "UPDATE `inventory_fermentables` SET name='" . mysqli_real_escape_string($connect, $_GET['name']);
 	$sql .= "', type='" . $_GET['type'];
 	$sql .= "', yield='" . $_GET['yield'];
-	$sql .= "', color='" . ebc_to_srm($_GET['color']);
+	$sql .= "', color='" . $_GET['color'];
 	($_GET['add_after_boil'] == 'true') ? $sql .= "', add_after_boil='1" : $sql .= "', add_after_boil='0";
 	$sql .= "', origin='" . mysqli_real_escape_string($connect, $_GET['origin']);
 	$sql .= "', supplier='" . mysqli_real_escape_string($connect, $_GET['supplier']);
@@ -69,19 +72,25 @@
 	$sql .= "', cost='" . $_GET['cost'];
 	$sql .= "', production_date='" . $_GET['production_date'];
 	$sql .= "', tht_date='" . $_GET['tht_date'];
-	$sql .= "', supplier_rec='" . $_GET['supplier_rec'];
+	//$sql .= "', supplier_rec='" . $_GET['supplier_rec'];
 	$sql .= "' WHERE record='" . $_GET['record'] . "';";
-	error_log("\"$sql\"");
-	$result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect));
-	error_log("result " . $result);
+	$result = mysqli_query($connect, $sql);
+	if (! $result) {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect));
+	} else {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: updated record ".$_GET['record']);
+	}
 	echo $result;
 
 } else if (isset($_GET['delete'])) {
 	// DELETE COMMAND
 	$sql = "DELETE FROM `inventory_fermentables` WHERE record='".$_GET['record']."';";
-	error_log("\"$sql\"");
-	$result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect));
-	error_log("result " . $result);
+	$result = mysqli_query($connect, $sql);
+	if (! $result) {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect));
+	} else {
+		syslog(LOG_NOTICE, "db_inventory_fermentables: deleted record ".$_GET['record']);
+	}
 	echo $result;
 
 } else {