Dear Experts
I am new ASP (as i from Oracle Technology) and i have very urgent requirement (quick fix is required)
I should be able to hide this URL or make it non-editable. I have inserted the code and please let me know if there is a way to get this done.
Can you please assist me here.. Thanks
<!--#INCLUDE FILE = "connect.asp" --><%menu="INVOICES VIEW"%><!--#INCLUDE FILE="logscreen.asp" --><!--#INCLUDE FILE = "header.asp" --><script type="text/javascript" language="javascript">
function messboxfun() {
alert('BULK credit notes cannot be opened from COMIT web. \nPlease use COMIT Application.');
}
function messboxfun1() {
alert('BULK/DROP/BBS Invoices cannot be opened from COMIT web. \nPlease use COMIT Application.');
}
function md(e) {
try { if (event.button == 2 || event.button == 3) return false; }
catch (e) { if (e.which == 3) return false; }
}
document.oncontextmenu = function () { return false; }
document.ondragstart = function () { return false; }
document.onmousedown = md;
</script><%
'kiruthika on 28-feb-2013 TFS#56339-comit web - make available invoice and credit note accuracy
Function URLDecode(str)
str = Replace(str, "+", " ")
For i = 1 To Len(str)
sT = Mid(str, i, 1)
If sT = "%" Then
If i+2 < Len(str) Then
sR = sR & _
Chr(CLng("&H" & Mid(str, i+1, 2)))
i = i+2
End If
Else
sR = sR & sT
End If
Next
URLDecode = sR
End Function
orgname=URLDecode(request("orgname"))
contname=URLDecode(request("contname"))
shipadd1=URLDecode(request("shipadd1"))
shipadd2=URLDecode(request("shipadd2"))
shipadd3=URLDecode(request("shipadd3"))
phone=URLDecode(request("phone"))
emailadd=request("emailadd")
sql = "select no, due_date, customer_po_number from "
sql = sql & " (select invo.no||'' as NO, invo.due_date, invo.customer_po_number from ar_transactions artr, invoices invo where artr.acco_no=" & Request("ano") & " and invo.invoice_type in ('SUB','BOOK') and artr.invo_no = invo.no and artr.inin_no is null and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= invo.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.invo_no = artr.invo_no) "
sql = sql & " UNION "
sql = sql & " select invo.no||'-'||inin.suffix as NO, inin.due_date, invo.customer_po_number from ar_transactions artr, invoices invo, invoice_installments inin where artr.acco_no=" & Request("ano") & " and invo.invoice_type in ('SUB','BOOK') and artr.inin_no = inin.no and inin.invo_no = invo.no and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= inin.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.inin_no = artr.inin_no)) "
sql = sql & " ORDER BY DUE_DATE DESC"
Set rsExe = Server.CreateObject("ADODB.Recordset")
rsExe.Open sql, oscar8iconn , adOpenStatic, adLockReadOnly
sql = "select no, due_date, customer_po_number from "
sql = sql & " (select invo.no||'' as NO, invo.due_date, invo.customer_po_number from ar_transactions artr, invoices invo where artr.acco_no=" & Request("ano") & " and invo.invoice_type not in ('SUB','BOOK') and artr.invo_no = invo.no and artr.inin_no is null and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= invo.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.invo_no = artr.invo_no) "
sql = sql & " UNION "
sql = sql & " select invo.no||'-'||inin.suffix as NO, inin.due_date, invo.customer_po_number from ar_transactions artr, invoices invo, invoice_installments inin where artr.acco_no=" & Request("ano") & " and invo.invoice_type not in ('SUB','BOOK') and artr.inin_no = inin.no and inin.invo_no = invo.no and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= inin.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.inin_no = artr.inin_no)) "
sql = sql & " ORDER BY DUE_DATE DESC"
Set rsExe4 = Server.CreateObject("ADODB.Recordset")
rsExe4.Open sql, oscar8iconn , adOpenStatic, adLockReadOnly
sql = "select no, due_date, customer_po_number from "
sql = sql & " (select cn.no||'' as NO, cn.transaction_date as due_date,invo.customer_po_number from ar_transactions artr,invoices invo, credit_notes cn where artr.acco_no=" & Request("ano") & " and cn.bucn_no is null and artr.crno_no = cn.no and artr.inin_no is null and customer_po_number is null and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= cn.transaction_date and Exists(select max(no) from ar_transactions artr1 where artr1.crno_no = artr.crno_no) "
sql = sql & " UNION "
sql = sql & " select cn.no||'-'||inin.suffix as NO, inin.due_date, invo.customer_po_number from ar_transactions artr, invoices invo, invoice_installments inin ,credit_notes cn where artr.acco_no=" & Request("ano") & " and artr.inin_no = inin.no and inin.crno_no = cn.no and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= inin.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.inin_no = artr.inin_no)) "
sql = sql & " ORDER BY DUE_DATE DESC"
Set rsExe1 = Server.CreateObject("ADODB.Recordset")
rsExe1.Open sql, oscar8iconn , adOpenStatic, adLockReadOnly
sql = "select no, due_date, customer_po_number from "
sql = sql & " (select cn.no||'' as NO, cn.transaction_date as due_date,invo.customer_po_number from ar_transactions artr,invoices invo, credit_notes cn where artr.acco_no=" & Request("ano") & " and cn.bucn_no is not null and artr.crno_no = cn.no and artr.inin_no is null and customer_po_number is null and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= cn.transaction_date and Exists(select max(no) from ar_transactions artr1 where artr1.crno_no = artr.crno_no) "
sql = sql & " UNION "
sql = sql & " select cn.no||'-'||inin.suffix as NO, inin.due_date, invo.customer_po_number from ar_transactions artr, invoices invo, invoice_installments inin ,credit_notes cn where artr.acco_no=" & Request("ano") & " and artr.inin_no = inin.no and inin.crno_no = cn.no and add_months(to_date(to_char('01-'||to_char(sysdate,'MON')||'-'||to_char(sysdate,'YYYY')),'DD-MON-YYYY'),-24) <= inin.due_date and Exists(select max(no) from ar_transactions artr1 where artr1.inin_no = artr.inin_no)) "
sql = sql & " ORDER BY DUE_DATE DESC"
Set rsExe2 = Server.CreateObject("ADODB.Recordset")
rsExe2.Open sql, oscar8iconn , adOpenStatic, adLockReadOnly
c = 0
if not rsExe.EOF then
do while not rsExe.EOF
c = c + 1
rsExe.MoveNext
loop
rsExe.MoveFirst
end if
d = 0
if not rsExe1.EOF then
do while not rsExe1.EOF
d = d + 1
rsExe1.MoveNext
loop
rsExe1.MoveFirst
end if
d1 = 0
if not rsExe2.EOF then
do while not rsExe2.EOF
d1= d1 + 1
rsExe2.MoveNext
loop
rsExe2.MoveFirst
end if
c1 = 0
if not rsExe4.EOF then
do while not rsExe4.EOF
c1= c1 + 1
rsExe4.MoveNext
loop
rsExe4.MoveFirst
end if
%><html><head><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Invoice List</title></head><body><div align="center"><center><table width="780" cellspacing="0" cellpadding="0" border="0"><tr><td width="100%"> </td></tr><tr><td colspan="1" align="center"><font face="Arial" size="3" color="#000000"><strong>Invoice List</strong></font></td></tr><tr><td colspan="1" align="center" valign="top" bgcolor="#183058"><font face="Arial" color="#FFFFFF"><strong>Account Profile: <%=Request ("ano")%></strong></font></td></tr><td colspan="1"><table width="100%" border="0"><tr><td width="17%" height="19"><font face="Arial" size="2"><strong>Company Name:</strong></font></td><td width="35%" height="19" bgcolor="#CCCCCC"><font face="Arial" size="2"><%=orgname%></font></td><td width="14%" height="19"><font face="Arial" size="2"><strong>Contact Name:</strong></font></td><td width="34%" height="19" bgcolor="#CCCCCC"><font face="Arial" size="2"><%=contname%></font></td></tr><tr><td colspan="1" height="19"><font face="Arial" size="2"><strong>Shipping Address:</strong></font></td><td colspan="3" height="19" bgcolor="#CCCCCC"><%=shipadd1%> <%=shipadd2%> <%=shipadd3%></font></td></tr><tr><td colspan="1" height="19"><font face="Arial" size="2"><strong>Office Phone:</strong></font></td><td colspan="1" height="19" bgcolor="#CCCCCC"><%=phone%></td><td colspan="1" height="19"><font face="Arial" size="2"><strong>Email:</strong></font></td><td colspan="1" height="19" bgcolor="#CCCCCC"><a href="mailto:<%=emailadd%>"><%=emailadd%></a></td></tr></table></td></tr></table></center></div><hr width="780"><% IF c <= 0 and d <= 0 and d1 <= 0 and c1<=0 THEN %><hr width="780" color="#FFFFFF"><hr width="780" color="#FFFFFF"><hr width="780" color="#FFFFFF"><div align="center"><center><table width="780" cellpadding="0" cellspacing="1" border="0"><tr><td width="100%" align="center"><font face="Arial" size="4" color="#FF0000">Empty Page, No Invoice List.</font></td></tr></table></center></div><% ELSE %><center><table border="1" width="780" bordercolor="#006699" bordercolordark="#FFFFFF" bordercolorlight="#006699"><tr><td width="260" bgcolor="#006699" align="center"><font color="#FFFFFF" face="Arial" size="1">Invoice/Credit Note No.</font></td><td width="260" bgcolor="#006699" align="center"><font color="#FFFFFF" face="Arial" size="1">Due Date</font></td><td width="260" bgcolor="#006699" align="center"><font color="#FFFFFF" face="Arial" size="1">PO Number</font></td><% VAR = 1 %></tr><%if c > 0 then %><% do while not RsExe.EOF %><tr><% IF VAR = 1 THEN %><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><a href="Invoice.aspx?aid=<%=request("ano")%>&invno=<%=rsExe("NO").value%>&uid=<%=Session("user_id")%>&sid=<%=session.sessionID%>&menu=<%=menu%>" target="_top">Invoice#<%= rsExe("NO").value %></A></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><%= rsExe("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"> <%= rsExe("CUSTOMER_PO_NUMBER").value %></font></td></tr><% VAR = 2 %><% else %><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><a href="Invoice.aspx?aid=<%=request("ano")%>&invno=<%=rsExe("NO").value%>&uid=<%=Session("user_id")%>&sid=<%=session.sessionID%>&menu=<%=menu%>" target="_top">Invoice#<%= rsExe("NO").value %></A></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><%= rsExe("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"> <%= rsExe("CUSTOMER_PO_NUMBER").value %></font></td><% VAR = 1 %><% end if %><% RsExe.MoveNext
loop %><%end if %><%if c1 > 0 then %><% do while not RsExe4.EOF %><tr><% IF VAR = 1 THEN %><td colspan="1" align="center" bgcolor="#C0C0C0"><font face="Arial" size="1"><input type="submit" name="Form1a" value="Invoice#<%= rsExe4("NO").value %>"
style="width:100%; height:15px; font-family:Arial; font-size:8pt; background-color:transparent; color:#0000FF;text-decoration:underline; border:0px;"
onclick="messboxfun1()"></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><%= rsExe4("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"> <%= rsExe4("CUSTOMER_PO_NUMBER").value %></font></td></tr><% VAR = 2 %><% else %><td colspan="1" align="center" bgcolor="#FFFFFF"><font face="Arial" size="1"><input type="submit" name="Form1a" value="Invoice#<%= rsExe4("NO").value %>"
style="width:100%; height:15px; font-family:Arial; font-size:8pt; background-color:transparent; color:#0000FF;text-decoration:underline; border:0px;"
onclick="messboxfun1()"></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><%= rsExe4("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"> <%= rsExe4("CUSTOMER_PO_NUMBER").value %></font></td><% VAR = 1 %><% end if %><% RsExe4.MoveNext
loop %><%end if %><%if d > 0 then %><% do while not RsExe1.EOF %><tr><% IF VAR = 1 THEN %><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><a href="icAdjustment.aspx?aid=<%=request("ano")%>&crno_no=<%=rsExe1("NO").value%>&uid=<%=Session("user_id")%>&sid=<%=session.sessionID%>&menu=<%=menu%>" target="_top">icAdjustment#<%= rsExe1("NO").value %></A></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><%= rsExe1("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"> <%= rsExe1("CUSTOMER_PO_NUMBER").value %></font></td></tr><% VAR = 2 %><% else %><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><a href="icAdjustment.aspx?aid=<%=request("ano")%>&crno_no=<%=rsExe1("NO").value%>&uid=<%=Session("user_id")%>&sid=<%=session.sessionID%>&menu=<%=menu%>" target="_top">icAdjustment#<%= rsExe1("NO").value %></A></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><%= rsExe1("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"> <%= rsExe1("CUSTOMER_PO_NUMBER").value %></font></td><% VAR = 1 %><% end if %><% RsExe1.MoveNext
loop %><%end if %><%if d1 > 0 then %><% do while not RsExe2.EOF %><tr><% IF VAR = 1 THEN %><td colspan="1" align="center" bgcolor="#C0C0C0"><font face="Arial" size="1"><input type="submit" name="Form1a" value="icAdjustment#<%=rsExe2("NO")%>"
style="width:100%; height:15px; font-family:Arial; font-size:8pt; background-color:transparent; color:#0000FF;text-decoration:underline; border:0px;"
onclick="messboxfun()"></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"><%= rsExe2("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#C0C0C0" align="center"><font face="Arial" size="1"> <%= rsExe2("CUSTOMER_PO_NUMBER").value %></font></td></tr><% VAR = 2 %><% else %><td colspan="1" align="center" bgcolor="#FFFFFF"><font face="Arial" size="1"><input type="submit" name="Form1a" value="icAdjustment#<%=rsExe2("NO")%>"
style="width:100%; height:15px; font-family:Arial; font-size:8pt; background-color:transparent; color:#0000FF;text-decoration:underline; border:0px;"
onclick="messboxfun()"></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"><%= rsExe2("DUE_DATE").value %></font></td><td colspan="1" bgcolor="#FFFFFF" align="center"><font face="Arial" size="1"> <%= rsExe2("CUSTOMER_PO_NUMBER").value %></font></td><% VAR = 1 %><% end if %><% RsExe2.MoveNext
loop %><%end if %></table></center><% END IF %><br /><!--#INCLUDE FILE="footer.htm" --></body></html>