All Invoices Report [support]

[carlwhat]

hi,
i just started looking at this module for a specific need. while it does get installed on the admin side; i would still cleanse the $orderStatus variable prior to its use. from:

$orderStatus = $_GET['status']; 

to

$orderStatus = zen_db_prepare_input($_GET['status']); 

or perhaps making use of the bindVars instead.

i have a need to print a range of invoices; i am not sure if others have a need for that. which seems like easy enough to do. however, on first glance, this does look to be like a valuable module. thanks!

[lat9]

Good point, carlwhat, I'll add that to the plugin's change-list. I'm not as concerned about the sanitizing since it's on the admin side.

[carlwhat]

lat9,
which one was the good point: adding an invoice range? or sanitizing the $_GET variables?

i agree, the sanitizing is not as big a concern as it is on the admin side. the invoice range is for what i needed the module. i suppose the tricky part is what invoices to include, as we have a cancelled order status which we do not want to see; but then all of other statuses we do.

i suppose the selection process could go on and on...

in addition, we implemented the super_orders and super_invoices module, so i needed to modify the formatting of the invoice to match that...

that said, a very helpful starting point for me. thanks again for this contribution.

best.

[lat9]

carlwhat, I was responding to the need to sanitize the $_GET variable (just using a simple integer-cast is sufficient).

I'll add the order-range specification as a change-request to the plugin.

[terraGirl]

Just a quick query if there's an updated version for 1.5.5a in the pipeline? Thank you for making this available!

[lat9]

Just a quick query if there's an updated version for 1.5.5a in the pipeline? Thank you for making this available!

Should be good-to-go! That's one of the benefits (usually) of a no-core-file-overwrites plugin.

[DrByte]

Hi lat9,
I just submitted an update (called it 2.5) which allows the storeowner to optionally update all the selected orders' status after generating the report.
It involved rearranging a couple things between files.

And the foreach which loops thru orders is v1.5.5 specific. I guess it could be changed to a "while !EOF, MoveNext()" if really needed on older versions.

https://www.zen-cart.com/downloads.php?do=file&id=1083