PK

<?php
		session_start();
		require_once '../common/common.php';
		require_once '../common/secure.php';
		include("connection.php");
		//print_r($_POST);
		
		if($_GET['mod']=='incomecat' || $_POST['mod']=='incomecat')
		{
			if($_POST['action']=='edit')
			{	
				$sql="UPDATE income SET name='".$_POST['name']."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: income_cat_list.php");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql="DELETE FROM income WHERE id='".$_GET['id']."'";
				$res=mysql_query($sql);
				$sql2="DELETE FROM income_criteria WHERE inc_id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				$sql3="DELETE FROM income_sub WHERE inc_id='".$_GET['id']."'";
				$res3=mysql_query($sql3);
				if($res && $res2 && $res3)
				{
					header("Location: income_cat_list.php");
				}
				else
				{
					echo "delete Error" ;
				}
			}
		}
		if($_GET['mod']=='incsubcat' || $_POST['mod']=='incsubcat')
		{
		
			if($_POST['action']=='edit')
			{	
				$sql="UPDATE income_sub SET name='".$_POST['name']."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: income_subcat_list.php");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql3="DELETE FROM income_sub WHERE id='".$_GET['id']."'";
				$res3=mysql_query($sql3);
				$sql2="DELETE FROM income_criteria WHERE inc_sub_id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				//if($res && $res2)
				//{
					header("Location: income_subcat_list.php");
				//}
			}
		}
		
		if($_GET['mod']=='expcat' || $_POST['mod']=='expcat')
		{
			if($_POST['action']=='edit')
			{	
				$sql="UPDATE expenditure SET name='".$_POST['name']."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: expenditure_cat_list.php");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql="DELETE FROM expenditure WHERE id='".$_GET['id']."'";
				$res=mysql_query($sql);
				$sql2="DELETE FROM expenditure_criteria WHERE exp_id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				$sql3="DELETE FROM expenditure_sub WHERE exp_id='".$_GET['id']."'";
				$res3=mysql_query($sql3);
				if($res && $res2 && $res3)
				{
					header("Location: expenditure_cat_list.php");
				}
				else
				{
					echo "delete Error" ;
				}
			}
		}
		
		if($_GET['mod']=='expsubcat' || $_POST['mod']=='expsubcat')
		{
		
			if($_POST['action']=='edit')
			{	
				$sql="UPDATE expenditure_sub SET name='".$_POST['name']."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: expenditure_subcat_list.php");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql3="DELETE FROM expenditure_sub WHERE id='".$_GET['id']."'";
				$res3=mysql_query($sql3);
				$sql2="DELETE FROM expenditure_criteria WHERE exp_sub_id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				//if($res && $res2)
				//{
					header("Location: expenditure_subcat_list.php");
				//}
			}
		}
		if($_POST['mod']=="expcriteria" || $_GET['mod']=="expcriteria")
		{
			if($_POST['action']=='edit')
			{	
				$grandtotal=$_POST['amount']+(($_POST['amount']*$_POST['tax'])/100);
				
				$sql="UPDATE expenditure_criteria SET details='".$_POST['details']."',tax='".$_POST['tax']."',amount='".$_POST['amount']."',grandtotal='".$grandtotal."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: accounts.php?searchin=expenditure&action=edit&tmpkey=1");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql2="DELETE FROM expenditure_criteria WHERE id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				//if($res2)
				//{
					header("Location: accounts.php?searchin=expenditure&action=edit&tmpkey=1");
				//}
			}	
		}
		if($_POST['mod']=="inccriteria" || $_GET['mod']=="inccriteria")
		{
			if($_POST['action']=='edit')
			{	
				$sql="UPDATE income_criteria SET details='".$_POST['details']."',amount='".$_POST['amount']."' WHERE id='".$_POST['id']."'";
				$res=mysql_query($sql);
				if($res)
				{
					header("Location: accounts.php?searchin=income&action=edit&tmpkey=1");
				}
				else
				{
					echo "Updation Error";
				}
			}
			if($_GET['action']=='del')
			{
				$sql2="DELETE FROM income_criteria WHERE id='".$_GET['id']."'";
				$res2=mysql_query($sql2);
				//if($res2)
				//{
					header("Location: accounts.php?searchin=income&action=edit&tmpkey=1");
				//}
			}	
		}
?>

PK 99