Update: 2026-05-04 01:52:13

2026-05-04 01:52:13 +03:00
parent 08106ac4ea
commit 282f33ca3a
4 changed files with 89 additions and 0 deletions
--- a/app/modules_app/invoices/upload.php
+++ b/app/modules_app/invoices/upload.php
@@ -14,6 +14,13 @@ $allowedRoles = ['admin', 'accountant', 'employee'];
 if (!in_array($decoded['role'], $allowedRoles)) {
    json_error('Unauthorized to upload invoices', 403);
 }
+// 2. Validate Request
+$data = input();
+$companyId = $data['company_id'] ?? null;
+
+if (!$companyId || !isset($_FILES['invoice'])) {
+    json_error('Company ID and invoice file are required', 422);
+}

 // 3. Permission Check
 $tenantId = $decoded['tenant_id'];