<?php

/*
  include_once("config.inc.php");
  include_once("DBConnector1.php");
  $letters = $_GET['letters'];

  $sql="SELECT * FROM mast_family where name like '".$letters."%'";
  $result =$db->RunQuery($sql);


  while($row = mysqli_fetch_array($result))
  {

  echo $row["name"];

  }

 */


session_start();





if ($_GET["Command"]=="pass_itno"){
        include_once("connectioni.php");
	header('Content-Type: text/xml'); 
	echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";
			
			$ResponseXML = "";
			$ResponseXML .= "<salesdetails>";
			
			if ($_GET["brand"] != ""){	
			//echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
				$sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'") or die(mysqli_error());
				} else {
				$sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='".$_GET['itno']."'") or die(mysqli_error());
				}
				if($row = mysqli_fetch_array($sql)){
				
					
					$ResponseXML .= "<str_code><![CDATA[".$row['STK_NO']."]]></str_code>";
					$ResponseXML .= "<str_description><![CDATA[".$row['DESCRIPT']."]]></str_description>";
					$ResponseXML .= "<str_partno><![CDATA[".$row['COST']."]]></str_partno>";
					//$ResponseXML .= "<str_selpri><![CDATA[".$row['SELLING']."]]></str_selpri>";
					
					
				/*	if ($_GET["vatmethod"]=="non"){
     					if (is_null($row["SELLING"])==false){
							$selpri = number_format($row["SELLING"]);
   						} 
						
					}else {
						$mvatrate=12;
						
      					if (is_null($row["SELLING"])==false){
							$selpri = number_format($row["SELLING"] / (1 + ($mvatrate / 100)), 2, ".", ",");
   						} 
					}*/
					
					
				//	$ResponseXML .= "<str_selpri><![CDATA[".$selpri."]]></str_selpri>";
					
					$department=trim(substr($_GET["department"], 0, 2));
					
					//echo "select QTYINHAND from s_submas where STK_NO='".$_GET['itno']."' AND STO_CODE='".$department."'";
					$sql = mysqli_query($GLOBALS['dbinv'],"select QTYINHAND from s_submas where STK_NO='".$_GET['itno']."' AND STO_CODE='01'") or die(mysqli_error());
					if($row = mysqli_fetch_array($sql)){
						if (is_null($row["QTYINHAND"])==false){
							$ResponseXML .= "<qtyinhand><![CDATA[".$row["QTYINHAND"]."]]></qtyinhand>";
						}  else {
							$ResponseXML .= "<qtyinhand><![CDATA[0]]></qtyinhand>";
						}
					}  else {
							$ResponseXML .= "<qtyinhand><![CDATA[0]]></qtyinhand>";
						}
				
					//================discount
				/*	$d1=0;
					if (is_numeric($_GET["discount1"])==true){
						$d1=$_GET["discount1"];
					} else {
						$d1=0;
					}
					
					$d2=0;
					if (is_numeric($_GET["discount2"])==true){
						$d2=$_GET["discount2"];
					} else {
						$d2=0;
					}
					
					$d3=0;
					if (is_numeric($_GET["discount3"])==true){
						$d3=$_GET["discount3"];
					} else {
						$d3=0;
					}
   										
   					$d = 100 - (100 - $d2) * (100 - $d1) / 100;
  				 	$ResponseXML .= "<dis><![CDATA[".$d."]]></dis>";*/
				}				
			
				 
			
	
				$ResponseXML .= "</salesdetails>";	
				echo $ResponseXML;
				
			
	
}	


if ($_GET["Command"] == "search_item") {
    include_once("connectioni.php");

//	if(isset($_GET['itemname'])){
//		$letters = $_GET['itemname'];
    //$letters = $_GET['letters'];
//		$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
//	$res = mysqli_query($GLOBALS['dbinv'],"SELECT * FROM mast_family where name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //$res = mysqli_query($GLOBALS['dbinv'],"SELECT distinct trn_involved.str_name FROM trn_involved where str_name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //SELECT * FROM occupation_details where str_first_name like 'k%'
//echo $res;

    $ResponseXML .= "";
    //$ResponseXML .= "<invdetails>";



    $ResponseXML .= "<table width=\"735\" border=\"0\" class=\"form-matrix-table\">
                            <tr>
                              <td width=\"121\"  background=\"images/headingbg.gif\" ><font color=\"#FFFFFF\">Item No</font></td>
                              <td width=\"424\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Item Description</font></td>
							  <td width=\"200\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Brand</font></td>
							  <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Gen No</font></td>
							  <td width=\"80\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Substitute</font></td>
							  <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Cost</font></td>
							  <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Selling</font></td>
							  <td width=\"50\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Job No</font></td>
							  <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Stock In Hand</font></td>";
    if($_GET["mstatus2"]=='inv_item')
    $ResponseXML .= "<td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Stock Value</font></td>";

    $ResponseXML .= "</tr>";

    if ($_GET["checkbox"] == "true") {
        if ($_GET["mstatus"] == "itno") {
            $letters = $_GET['itno'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' and QTYINHAND>0 and BRAND_NAME='" . $_SESSION["brand"] . "' order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
            }
        } else if ($_GET["mstatus"] == "itemname") {
            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' and BRAND_NAME='" . $_SESSION["brand"] . "' and QTYINHAND>0 order by STK_NO limit 50")or die(mysqli_error($GLOBALS['dbinv']));
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
            }
        } else {

            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' and BRAND_NAME='" . $_SESSION["brand"] . "' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
            }
        }
    } else {

        if ($_GET["mstatus"] == "itno") {
            $letters = $_GET['itno'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO") or die(mysqli_error($GLOBALS['dbinv']));
                //echo "SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO";
            }
        } else if ($_GET["mstatus"] == "itemname") {
            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO ")or die(mysqli_error($GLOBALS['dbinv']));
                //echo "SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO limit 50";
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
                //echo "SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO limit 50";
            }
        } else if ($_GET["mstatus"] == "brand") {
            $letters = $_GET['brand'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME like  '$letters%' order by STK_NO ")or die(mysqli_error($GLOBALS['dbinv']));
                //echo "SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO limit 50";
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME like  '$letters%' order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
                //echo "SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO limit 50";
            }
        } else if ($_GET["mstatus"] == "jobno") {

            $letters = $_GET['jobno'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where jobno like  '$letters%' order by STK_NO") or die(mysqli_error($GLOBALS['dbinv']));
            //echo "SELECT * from s_mas where jobno like  '$letters%' order by STK_NO";
        } else if ($_GET["mstatus"] == "itemname_brand") {
            $letters1 = $_GET['itemname'];
            $letters2 = $_GET['brand'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where PART_NO like  '$letters1%' and BRAND_NAME like  '$letters2%' order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
            //echo "SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO limit 50";
        } else {

            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
            if (isset($_SESSION["brand"]) == true) {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where PART_NO like  '$letters%'  order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
            } else {
                $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where PART_NO like  '$letters%' order by STK_NO ") or die(mysqli_error($GLOBALS['dbinv']));
            }
        }
    }
//    echo $sql;
    while ($row = mysqli_fetch_array($sql)) {

        if ($_GET["mstatus2"] == "purord_item") {
            $ResponseXML .= "<tr>
                              <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno_purord('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";
        } else if ($_GET["mstatus2"] == "grn_item") {
            $ResponseXML .= "<tr>
                              <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno_grn('" . $row['STK_NO'] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";
        } else if ($_GET["mstatus2"] == "inv_item") {

            if (($_GET["mstatus"] == "itno") or ( $_GET["mstatus"] == "itemname") or ( $_GET["mstatus"] == "brand") or ( $_GET["mstatus"] == "jobno") or ( $_GET["mstatus"] == "itemname_brand")) {

                if ($_GET['checkProblem'] == 'false') {
                    $brName = $row['BRAND_NAME'];
                    $problemBrands = ($brName == 'Dag Customer' || $brName == 'Dag Custormer' || $brName == 'Dag CustomeDag Customerr' || $brName == 'Dag Sale' || $brName == 'Rebuild Customer' || $brName == 'rebuild sale');
                }

                if (!($problemBrands && ($row['QTYINHAND'] == '0'))) {
                    $ResponseXML .= "<tr>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";

                    if ($row['QTYINHAND'] > -1) {
                        $stockValue = $row['COST'] * $row['QTYINHAND'];
                        $stockTotal += $stockValue;
                        $itemTotal += $row['QTYINHAND'];
                        $ResponseXML .= "<td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($stockValue, 2, ".", "") . "</td>";
                    } else {
                        $ResponseXML .= "<td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right></td>";
                    }

                    $ResponseXML .= "</tr>";
                }
            }
        } else if ($_GET["mstatus2"] == "bin_card") {

            if (($_GET["mstatus"] == "itno") or ( $_GET["mstatus"] == "itemname") or ( $_GET["mstatus"] == "brand") or ( $_GET["mstatus"] == "jobno") or ( $_GET["mstatus"] == "itemname_brand")) {
                $ResponseXML .= "<tr>
                              <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno_bin('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";



                $ResponseXML .= "</tr>";
            }
        } else if ($_GET["mstatus2"] == "claim_item") {

            if (($_GET["mstatus"] == "itno") or ( $_GET["mstatus"] == "itemname") or ( $_GET["mstatus"] == "brand") or ( $_GET["mstatus"] == "jobno") or ( $_GET["mstatus"] == "itemname_brand")) {
                $ResponseXML .= "<tr>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";



                $ResponseXML .= "</tr>";
            }
        } else {
            if ($_SESSION["stname"] == "weekly_order") {

                $ResponseXML .= "<tr>               
                              <td onclick=\"itno_weekly('" . $row['STK_NO'] . "');\">" . $row['STK_NO'] . "</td>
                              <td onclick=\"itno_weekly('" . $row['STK_NO'] . "');\">" . $row['DESCRIPT'] . "</td>
							  <td onclick=\"itno_weekly('" . $row['STK_NO'] . "');\">" . $row['BRAND_NAME'] . "</td>
							  
							  <td onclick=\"itno_weekly('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>
							  <td onclick=\"itno_weekly('" . $row['STK_NO'] . "');\">" . $row['QTYINHAND'] . "</td>";


                $ResponseXML .= "</tr>";
            } else if (($_GET["mstatus"] == "itno") or ( $_GET["mstatus"] == "itemname") or ( $_GET["mstatus"] == "brand") or ( $_GET["mstatus"] == "jobno") or ( $_GET["mstatus"] == "itemname_brand")) {
                $ResponseXML .= "<tr>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['GEN_NO'] . "</td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['COST'], 2, ".", ",") . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['SELLING'], 2, ".", ",") . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=left>" . $row['jobno'] . "</td>
							   <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\" align=right>" . number_format($row['QTYINHAND'], 0, ".", "") . "</td>";



                $ResponseXML .= "</tr>";
            } else if ($_GET["mstatus2"] == "claim_item") {

                $ResponseXML .= "<tr>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['PART_NO'] . " " . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['SUBSTITUTE'] . "</td>";
                /* 	  $department=$_SESSION["department"];

                  $sql1 = mysqli_query($GLOBALS['dbinv'],"select QTYINHAND from s_submas where STK_NO='".$row['STK_NO']."' AND STO_CODE='".$department."'") or die(mysqli_error($GLOBALS['dbinv'])) or die(mysqli_error($GLOBALS['dbinv']));
                  if($row1 = mysqli_fetch_array($sql1)){
                  $ResponseXML .= "<td bgcolor=\"#222222\" onclick=\"itno('".$row['STK_NO']."');\">".$row1['QTYINHAND']."</a></td>";
                  }	else {
                  $ResponseXML .= "<td bgcolor=\"#222222\" onclick=\"itno('".$row['STK_NO']."');\">0</a></td>";
                  } */

                $ResponseXML .= "</tr>";
            }
        }
    }
    if($itemTotal > 0){
        $ResponseXML .= "<tr><td colspan='8'></td>";
        $ResponseXML .= "<td align='right'>" . number_format($itemTotal, 0, ".", "") . "</td>";
        $ResponseXML .= "<td align='right'>" . number_format($stockTotal, 2, ".", "") . "</td></tr>";
    }

    $ResponseXML .= "   </table>";


    echo $ResponseXML;
    //}
}


if ($_GET["Command"] == "search_item_cliaim") {

//	if(isset($_GET['itemname'])){
//		$letters = $_GET['itemname'];
    //$letters = $_GET['letters'];
//		$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
//	$res = mysqli_query($GLOBALS['dbinv'],"SELECT * FROM mast_family where name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //$res = mysqli_query($GLOBALS['dbinv'],"SELECT distinct trn_involved.str_name FROM trn_involved where str_name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //SELECT * FROM occupation_details where str_first_name like 'k%'
//echo $res;

    $ResponseXML .= "";
    //$ResponseXML .= "<invdetails>";



    $ResponseXML .= "<table width=\"735\" border=\"0\" class=\"form-matrix-table\">
                            <tr>
                              <td width=\"121\"  background=\"images/headingbg.gif\" ><font color=\"#FFFFFF\">Item No</font></td>
                              <td width=\"424\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Item Description</font></td>
						
                             
   							</tr>";



    if ($_GET["mstatus"] == "itno") {
        $letters = $_GET['itno'];
        //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
        if ($_GET["brand"] == "All") {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME='" . $_GET["brand"] . "' and STK_NO like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        }
        //echo "SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO";
    } else if ($_GET["mstatus"] == "itemname") {
        $letters = $_GET['itemname'];
        //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
        if ($_GET["brand"] == "All") {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME='" . $_GET["brand"] . "' and DESCRIPT like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        }
    } else {

        $letters = $_GET['itemname'];
        //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
        if ($_GET["brand"] == "All") {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else {
            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME='" . $_GET["brand"] . "' and DESCRIPT like  '$letters%' order by DESCRIPT limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        }
    }

    //echo $sql;
    while ($row = mysqli_fetch_array($sql)) {

        if ($_GET["mstatus2"] == "claim_item") {

            $ResponseXML .= "<tr>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno_claim('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['QTYINHAND'] . "</td>";
            /* 	  $department=$_SESSION["department"];

              $sql1 = mysqli_query($GLOBALS['dbinv'],"select QTYINHAND from s_submas where STK_NO='".$row['STK_NO']."' AND STO_CODE='".$department."'") or die(mysqli_error($GLOBALS['dbinv'])) or die(mysqli_error($GLOBALS['dbinv']));
              if($row1 = mysqli_fetch_array($sql1)){
              $ResponseXML .= "<td bgcolor=\"#222222\" onclick=\"itno('".$row['STK_NO']."');\">".$row1['QTYINHAND']."</a></td>";
              }	else {
              $ResponseXML .= "<td bgcolor=\"#222222\" onclick=\"itno('".$row['STK_NO']."');\">0</a></td>";
              } */

            $ResponseXML .= "</tr>";
        } else if ($_GET["mstatus2"] == "grn_item") {

            $ResponseXML .= "<tr>               
                              <td onclick=\"itno_grn('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno_grn('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno_grn('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</a></td>
							  <td onclick=\"itno_grn('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['QTYINHAND'] . "</a></td>";
        } else {

            $ResponseXML .= "<tr>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['DESCRIPT'] . "</a></td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['BRAND_NAME'] . "</td>
							  <td onclick=\"itno('" . $row['STK_NO'] . "', '" . $_GET["stname"] . "');\">" . $row['QTYINHAND'] . "</td>";


            $ResponseXML .= "</tr>";
        }
    }

    $ResponseXML .= "   </table>";


    echo $ResponseXML;
    //}
}

if ($_GET["Command"] == "search_item_item_mast") {

//	if(isset($_GET['itemname'])){
//		$letters = $_GET['itemname'];
    //$letters = $_GET['letters'];
//		$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);
//	$res = mysqli_query($GLOBALS['dbinv'],"SELECT * FROM mast_family where name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //$res = mysqli_query($GLOBALS['dbinv'],"SELECT distinct trn_involved.str_name FROM trn_involved where str_name like '".$letters."%'") or die(mysqli_error($GLOBALS['dbinv']));
    //SELECT * FROM occupation_details where str_first_name like 'k%'
//echo $res;

    $ResponseXML .= "";
    //$ResponseXML .= "<invdetails>";



    $ResponseXML .= "<table width=\"735\" border=\"0\" class=\"form-matrix-table\">
                            <tr>
                              <td width=\"121\"  background=\"images/headingbg.gif\" ><font color=\"#FFFFFF\">Item No</font></td>
                              <td width=\"424\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Item Description</font></td>
								<td width=\"176\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\"><b>Genuine No</b></font></td>
                              <td width=\"176\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\"><b>Part No</b></font></td>
                              <td width=\"176\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\"><b>Model</b></font></td>
							   <td width=\"176\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\"><b>QTY in Hand</b></font></td>
                             
   							</tr>";


    if ($_GET["checkbox"] == "true") {
        if ($_GET["mstatus"] == "itno") {
            $letters = $_GET['itno'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else if ($_GET["mstatus"] == "itemname") {
            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else if ($_GET["mstatus"] == "model") {

            $letters = $_GET['model'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else {
            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' and QTYINHAND>0 order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        }
    } else {

        if ($_GET["mstatus"] == "itno") {
            $letters = $_GET['itno'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO") or die(mysqli_error($GLOBALS['dbinv']));
            //echo "SELECT * from s_mas where STK_NO like  '$letters%' order by STK_NO";
        } else if ($_GET["mstatus"] == "itemname") {
            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else if ($_GET["mstatus"] == "model") {

            $letters = $_GET['model'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where BRAND_NAME like  '$letters%' order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        } else {

            $letters = $_GET['itemname'];
            //$letters = preg_replace("/[^a-z0-9 ]/si","",$letters);

            $sql = mysqli_query($GLOBALS['dbinv'],"SELECT * from s_mas where DESCRIPT like  '$letters%' order by STK_NO limit 50") or die(mysqli_error($GLOBALS['dbinv']));
        }
    }
    //echo $sql;
    while ($row = mysqli_fetch_array($sql)) {

        $ResponseXML .= "<tr>               
                              <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['STK_NO'] . "</a></td>
                              <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['DESCRIPT'] . "</a></td>
                              <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['GEN_NO'] . "</a></td>
                              <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['PART_NO'] . "</a></td>
							  <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['BRAND_NAME'] . "</a></td>
							  <td onclick=\"itemno('" . $row['STK_NO'] . "');\">" . $row['QTYINHAND'] . "</a></td>
                            </tr>";
    }

    $ResponseXML .= "   </table>";


    echo $ResponseXML;
    //}
}


if ($_GET["Command"] == "pass_invno") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";

    /* 		$ResponseXML .= "<sales_table><![CDATA[ <table><tr>
      <td width=\"100\"  background=\"images/headingbg.gif\" ><font color=\"#FFFFFF\">Code</font></td>
      <td width=\"300\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Description</font></td>
      <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Rate</font></td>
      <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Qty</font></td>
      <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Discount</font></td>
      <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Sub Total</font></td>
      </tr>";


      $sql = mysqli_query($GLOBALS['dbinv'],"select * from inv_data where str_invno='".$_GET['invno']."'") or die(mysqli_error($GLOBALS['dbinv']));
      while($row = mysqli_fetch_array($sql)){

      $sql1 = mysqli_query($GLOBALS['dbinv'],"Insert into tmp_inv_data (str_invno, str_code, str_description, cur_rate, cur_qty, cur_discount, cur_subtot)values ('".$_GET['invno']."', '".$_GET['itemcode']."', '".$_GET['item']."', '".$_GET['rate']."', '".$_GET['qty']."', '".$_GET['discount']."', '".$_GET['subtotal']."') ") or die(mysqli_error($GLOBALS['dbinv']));

      $ResponseXML .= "<tr>

      <td bgcolor=\"#222222\" >".$row['str_code']."</a></td>
      <td bgcolor=\"#222222\" >".$row['str_description']."</a></td>
      <td bgcolor=\"#222222\" >".$row['cur_rate']."</a></td>
      <td bgcolor=\"#222222\" >".$row['cur_qty']."</a></td>
      <td bgcolor=\"#222222\" >".$row['cur_discount']."</a></td>
      <td bgcolor=\"#222222\" >".$row['cur_subtot']."</a></td>
      <td bgcolor=\"#222222\" ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=".$row['str_code']."  name=".$row['str_code']." onClick=\"del_item('".$row['str_code']."');\"></td>

      </tr>";
      }

      $ResponseXML .= "   </table>]]></sales_table>"; */

    $sql = mysqli_query($GLOBALS['dbinv'],"Select * from inv_mast where str_invoiceno='" . $_GET['invno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    if ($row = mysqli_fetch_array($sql)) {

        $ResponseXML .= "<str_invoiceno><![CDATA[" . $row['str_invoiceno'] . "]]></str_invoiceno>";
        $ResponseXML .= "<str_crecash><![CDATA[" . $row['str_crecash'] . "]]></str_crecash>";
        $ResponseXML .= "<str_customecode><![CDATA[" . $row['str_customecode'] . "]]></str_customecode>";

        $sqlcustomer = mysqli_query($GLOBALS['dbinv'],"Select * from customer_mast where id='" . $row['str_customecode'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
        if ($rowcustomer = mysqli_fetch_array($sqlcustomer)) {
            $ResponseXML .= "<str_customername><![CDATA[" . $rowcustomer['str_customername'] . "]]></str_customername>";
            $ResponseXML .= "<str_address><![CDATA[" . $rowcustomer['str_address'] . "]]></str_address>";
        }
        $ResponseXML .= "<str_vatno1><![CDATA[" . $row['str_vatno1'] . "]]></str_vatno1>";
        $ResponseXML .= "<str_vatno2><![CDATA[" . $row['str_vatno2'] . "]]></str_vatno2>";
        $ResponseXML .= "<str_salesrep><![CDATA[" . $row['str_salesrep'] . "]]></str_salesrep>";
        $ResponseXML .= "<str_salesorder1><![CDATA[" . $row['str_salesorder1'] . "]]></str_salesorder1>";
        $ResponseXML .= "<str_salesorder2><![CDATA[" . $row['str_salesorder2'] . "]]></str_salesorder2>";
        $ResponseXML .= "<dte_deliverdate><![CDATA[" . $row['dte_deliverdate'] . "]]></dte_deliverdate>";
        $ResponseXML .= "<str_orderno1><![CDATA[" . $row['str_orderno1'] . "]]></str_orderno1>";
        $ResponseXML .= "<str_orderno2><![CDATA[" . $row['str_orderno2'] . "]]></str_orderno2>";
        $ResponseXML .= "<cur_credit><![CDATA[" . $row['cur_credit'] . "]]></cur_credit>";
        $ResponseXML .= "<cur_balance><![CDATA[" . $row['cur_balance'] . "]]></cur_balance>";
        $ResponseXML .= "<str_department><![CDATA[" . $row['str_department'] . "]]></str_department>";
        $ResponseXML .= "<str_brand><![CDATA[" . $row['str_brand'] . "]]></str_brand>";
        $ResponseXML .= "<str_vat><![CDATA[" . $row['str_vat'] . "]]></str_vat>";
        $ResponseXML .= "<cur_discount1><![CDATA[" . $row['cur_discount1'] . "]]></cur_discount1>";
        $ResponseXML .= "<cur_discount2><![CDATA[" . $row['cur_discount2'] . "]]></cur_discount2>";
        $ResponseXML .= "<cur_subtotal><![CDATA[" . $row['cur_subtotal'] . "]]></cur_subtotal>";
        $ResponseXML .= "<cur_discount><![CDATA[" . $row['cur_discount'] . "]]></cur_discount>";
        $ResponseXML .= "<cur_tax><![CDATA[" . $row['cur_tax'] . "]]></cur_tax>";
        $ResponseXML .= "<cur_invoiceval><![CDATA[" . $row['cur_invoiceval'] . "]]></cur_invoiceval>";
    }


    $ResponseXML .= "<sales_table><![CDATA[ <table><tr>
                              <td width=\"100\"  background=\"images/headingbg.gif\" ><font color=\"#FFFFFF\">Code</font></td>
                              <td width=\"300\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Description</font></td>
                              <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Rate</font></td>
                              <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Qty</font></td>
                              <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Discount</font></td>
                              <td width=\"100\"  background=\"images/headingbg.gif\"><font color=\"#FFFFFF\">Sub Total</font></td>
                            </tr>";


    $sql_data = mysqli_query($GLOBALS['dbinv'],"delete from tmp_inv_data where str_invno='" . $_GET['invno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    $sql_data = mysqli_query($GLOBALS['dbinv'],"Select * from inv_data where str_invno='" . $_GET['invno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    while ($row = mysqli_fetch_array($sql_data)) {
        $sql_itdata = mysqli_query($GLOBALS['dbinv'],"Select * from item_mast where str_code='" . $row['str_code'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
        $rowit = mysqli_fetch_array($sql_itdata);


        $sql_tmp = mysqli_query($GLOBALS['dbinv'],"Insert into tmp_inv_data(str_invno, str_code, str_description, cur_rate, cur_qty, cur_discount, cur_subtot) values ( '" . $row['str_invno'] . "', '" . $row['str_code'] . "', '" . $rowit['str_description'] . "', " . $row['cur_rate'] . ", " . $row['cur_qty'] . ", " . $row['cur_discount'] . ", " . $row['cur_subtot'] . ")") or die(mysqli_error($GLOBALS['dbinv']));




        $ResponseXML .= "<tr>
                              
                             <td bgcolor=\"#222222\" >" . $row['str_code'] . "</a></td>
  							<td bgcolor=\"#222222\" >" . $rowit['str_description'] . "</a></td>
							 <td bgcolor=\"#222222\" >" . $row['cur_rate'] . "</a></td>
							 <td bgcolor=\"#222222\" >" . $row['cur_qty'] . "</a></td>
							 <td bgcolor=\"#222222\" >" . $row['cur_discount'] . "</a></td>
							 <td bgcolor=\"#222222\" >" . $row['cur_subtot'] . "</a></td>
							 <td bgcolor=\"#222222\" ><img src=\"images/delete_01.png\" width=\"20\" height=\"20\" id=" . $row['str_code'] . "  name=" . $row['str_code'] . " onClick=\"del_item('" . $row['str_code'] . "');\"></td>
							 
                            </tr>";
    }

    $ResponseXML .= "   </table>]]></sales_table>";

    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "pass_itno_defect") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";


    //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
    $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "' ") or die(mysqli_error($GLOBALS['dbinv']));

    if ($row = mysqli_fetch_array($sql)) {


        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<BRAND_NAME><![CDATA[" . $row['BRAND_NAME'] . "]]></BRAND_NAME>";
        $ResponseXML .= "<str_description><![CDATA[" . $row['DESCRIPT'] . "]]></str_description>";
        $ResponseXML .= "<PART_NO><![CDATA[" . $row['PART_NO'] . "]]></PART_NO>";
    }

    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "pass_itno_undeliver") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";


    //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
    $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "' ") or die(mysqli_error($GLOBALS['dbinv']));

    if ($row = mysqli_fetch_array($sql)) {


        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<BRAND_NAME><![CDATA[" . $row['BRAND_NAME'] . "]]></BRAND_NAME>";
        $ResponseXML .= "<str_description><![CDATA[" . $row['DESCRIPT'] . "]]></str_description>";
        $ResponseXML .= "<PART_NO><![CDATA[" . $row['PART_NO'] . "]]></PART_NO>";
        $ResponseXML .= "<COST><![CDATA[" . $row['COST'] . "]]></COST>";
    }

    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "pass_itno_claim") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";


    //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
    $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "' ") or die(mysqli_error($GLOBALS['dbinv']));

    if ($row = mysqli_fetch_array($sql)) {


        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<BRAND_NAME><![CDATA[" . $row['BRAND_NAME'] . "]]></BRAND_NAME>";
        $ResponseXML .= "<str_description><![CDATA[" . $row['DESCRIPT'] . "]]></str_description>";
        $ResponseXML .= "<PART_NO><![CDATA[" . $row['PART_NO'] . "]]></PART_NO>";
        $ResponseXML .= "<NSD><![CDATA[" . $row['NSD'] . "]]></NSD>";
    }

    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "pass_itno_quot") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $sql_invpara = mysqli_query($GLOBALS['dbinv'],"SELECT * from invpara") or die(mysqli_error($GLOBALS['dbinv']));
    $row_invpara = mysqli_fetch_array($sql_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;



    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";

    if ($_GET["brand"] != "") {
        //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
        $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "' and BRAND_NAME='" . $_GET["brand"] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    } else {
        //echo "Select * from s_mas where STK_NO='".$_GET['itno']."'";
        $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    }
    if ($row = mysqli_fetch_array($sql)) {


        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<str_description><![CDATA[" . $row['DESCRIPT'] . "]]></str_description>";

        if ($_GET["vatmethod"] == "non") {
            $SELLING = $row['SELLING'];
        } else {
            $SELLING = $row['SELLING'] / ($vatrate + 1);
        }
        $ResponseXML .= "<str_selpri><![CDATA[" . number_format($SELLING, 2, ".", "") . "]]></str_selpri>";

        $ResponseXML .= "<str_partno><![CDATA[" . $row["PART_NO"] . "]]></str_partno>";


        $department = trim(substr($_GET["department"], 0, 2));


        $sql = mysqli_query($GLOBALS['dbinv'],"select QTYINHAND from s_submas where STK_NO='" . $_GET['itno'] . "' AND STO_CODE='" . $department . "'") or die(mysqli_error($GLOBALS['dbinv']));
        if ($row = mysqli_fetch_array($sql)) {
            if (is_null($row["QTYINHAND"]) == false) {
                $ResponseXML .= "<qtyinhand><![CDATA[" . $row["QTYINHAND"] . "]]></qtyinhand>";
            } else {
                $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
            }
        } else {
            $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
        }
    }




    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}

if ($_GET["Command"] == "pass_itno_weekly") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $sql_invpara = mysqli_query($GLOBALS['dbinv'],"SELECT * from invpara") or die(mysqli_error($GLOBALS['dbinv']));
    $row_invpara = mysqli_fetch_array($sql_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;



    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";

    if ($_GET["brand"] != "") {
        //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
        $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "' and BRAND_NAME='" . $_GET["brand"] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    } else {
        //echo "Select * from s_mas where STK_NO='".$_GET['itno']."'";
        $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    }
    if ($row = mysqli_fetch_array($sql)) {


        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<str_description><![CDATA[" . $row['DESCRIPT'] . "]]></str_description>";

        if ($_GET["vatmethod"] == "non") {
            $SELLING = $row['SELLING'];
        } else {
            $SELLING = $row['SELLING'] / ($vatrate + 1);
        }
        $ResponseXML .= "<str_selpri><![CDATA[" . number_format($SELLING, 2, ".", "") . "]]></str_selpri>";

        $ResponseXML .= "<str_partno><![CDATA[" . $row["PART_NO"] . "]]></str_partno>";


        $department = trim(substr($_GET["department"], 0, 2));


        $sql = mysqli_query($GLOBALS['dbinv'],"select QTYINHAND from s_submas where STK_NO='" . $_GET['itno'] . "' AND STO_CODE='" . $department . "'") or die(mysqli_error($GLOBALS['dbinv']));
        if ($row = mysqli_fetch_array($sql)) {
            if (is_null($row["QTYINHAND"]) == false) {
                $ResponseXML .= "<qtyinhand><![CDATA[" . $row["QTYINHAND"] . "]]></qtyinhand>";
            } else {
                $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
            }
        } else {
            $ResponseXML .= "<qtyinhand><![CDATA[]]></qtyinhand>";
        }
    }




    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}


if ($_GET["Command"] == "pass_itno_purord") {
    header('Content-Type: text/xml');
    echo "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n";

    $sql_invpara = mysqli_query($GLOBALS['dbinv'],"SELECT * from invpara") or die(mysqli_error($GLOBALS['dbinv']));
    $row_invpara = mysqli_fetch_array($sql_invpara);

    $vatrate = $row_invpara["vatrate"] / 100;

    $ResponseXML = "";
    $ResponseXML .= "<salesdetails>";

    //	if ($_GET["brand"] != ""){	
    //echo "Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'";
    //		$sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='".$_GET['itno']."' and BRAND_NAME='".$_GET["brand"]."'") or die(mysqli_error($GLOBALS['dbinv']));
    //	} else {
    //echo "Select * from s_mas where STK_NO='".$_GET['itno']."'";
    $sql = mysqli_query($GLOBALS['dbinv'],"Select * from s_mas where STK_NO='" . $_GET['itno'] . "'") or die(mysqli_error($GLOBALS['dbinv']));
    //	}
    if ($row = mysqli_fetch_array($sql)) {

        $desc = $row['PART_NO'] . " " . $row['DESCRIPT'] . " " . $row['GEN_NO'] . " " . $row['SUBSTITUTE'];
        $ResponseXML .= "<str_code><![CDATA[" . $row['STK_NO'] . "]]></str_code>";
        $ResponseXML .= "<str_description><![CDATA[" . $desc . "]]></str_description>";
        $ResponseXML .= "<str_partno><![CDATA[" . $row["PART_NO"] . "]]></str_partno>";

        //$ResponseXML .= "<str_status><![CDATA[yes]]></str_status>";
    }// else {
    //	$ResponseXML .= "<str_status><![CDATA[no]]></str_status>";
    //}				




    $ResponseXML .= "</salesdetails>";
    echo $ResponseXML;
}



?>
