dolibarr/htdocs/webservices/server_order.php

<?php
/* Copyright (C) 2006-2016	Laurent Destailleur	<eldy@users.sourceforge.net>
 * Copyright (C) 2012		JF FERRY			<jfefe@aternatik.fr>
 * Copyright (C) 2012		Regis Houssin		<regis.houssin@inodbox.com>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

/**
 *       \file       htdocs/webservices/server_order.php
 *       \brief      File that is entry point to call Dolibarr WebServices
 */

if (! defined("NOCSRFCHECK")) define("NOCSRFCHECK",'1');

require '../master.inc.php';
require_once NUSOAP_PATH.'/nusoap.php';        // Include SOAP
require_once DOL_DOCUMENT_ROOT.'/core/lib/ws.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/extrafields.class.php';
require_once DOL_DOCUMENT_ROOT."/commande/class/commande.class.php";


dol_syslog("Call Dolibarr webservices interfaces");

$langs->load("main");

// Enable and test if module web services is enabled
if (empty($conf->global->MAIN_MODULE_WEBSERVICES))
{
	$langs->load("admin");
	dol_syslog("Call Dolibarr webservices interfaces with module webservices disabled");
	print $langs->trans("WarningModuleNotActive",'WebServices').'.<br><br>';
	print $langs->trans("ToActivateModule");
	exit;
}

// Create the soap Object
$server = new nusoap_server();
$server->soap_defencoding='UTF-8';
$server->decode_utf8=false;
$ns='http://www.dolibarr.org/ns/';
$server->configureWSDL('WebServicesDolibarrOrder',$ns);
$server->wsdl->schemaTargetNamespace=$ns;


// Define WSDL Authentication object
$server->wsdl->addComplexType(
		'authentication',
		'complexType',
		'struct',
		'all',
		'',
		array(
				'dolibarrkey' => array('name'=>'dolibarrkey','type'=>'xsd:string'),
				'sourceapplication' => array('name'=>'sourceapplication','type'=>'xsd:string'),
				'login' => array('name'=>'login','type'=>'xsd:string'),
				'password' => array('name'=>'password','type'=>'xsd:string'),
				'entity' => array('name'=>'entity','type'=>'xsd:string')
		)
);
// Define WSDL Return object
$server->wsdl->addComplexType(
		'result',
		'complexType',
		'struct',
		'all',
		'',
		array(
				'result_code' => array('name'=>'result_code','type'=>'xsd:string'),
				'result_label' => array('name'=>'result_label','type'=>'xsd:string'),
		)
);

$line_fields = array(
	'id' => array('name'=>'id','type'=>'xsd:string'),
	'type' => array('name'=>'type','type'=>'xsd:int'),
	'fk_commande' => array('name'=>'fk_commande','type'=>'xsd:int'),
	'fk_parent_line' => array('name'=>'fk_parent_line','type'=>'xsd:int'),
	'desc' => array('name'=>'desc','type'=>'xsd:string'),
	'qty' => array('name'=>'qty','type'=>'xsd:double'),
	'price' => array('name'=>'price','type'=>'xsd:double'),
	'unitprice' => array('name'=>'unitprice','type'=>'xsd:double'),
	'vat_rate' => array('name'=>'vat_rate','type'=>'xsd:double'),

	'remise' => array('name'=>'remise','type'=>'xsd:double'),
	'remise_percent' => array('name'=>'remise_percent','type'=>'xsd:double'),

	'total_net' => array('name'=>'total_net','type'=>'xsd:double'),
	'total_vat' => array('name'=>'total_vat','type'=>'xsd:double'),
	'total' => array('name'=>'total','type'=>'xsd:double'),

	'date_start' => array('name'=>'date_start','type'=>'xsd:date'),
	'date_end' => array('name'=>'date_end','type'=>'xsd:date'),

	// From product
	'product_id' => array('name'=>'product_id','type'=>'xsd:int'),
	'product_ref' => array('name'=>'product_ref','type'=>'xsd:string'),
	'product_label' => array('name'=>'product_label','type'=>'xsd:string'),
	'product_desc' => array('name'=>'product_desc','type'=>'xsd:string')
);


//Retreive all extrafield for thirdsparty
// fetch optionals attributes and labels
$extrafields=new ExtraFields($db);
$extralabels=$extrafields->fetch_name_optionals_label('commandedet',true);
$extrafield_line_array=null;
if (is_array($extrafields) && count($extrafields)>0) {
	$extrafield_line_array = array();
}
foreach($extrafields->attribute_label as $key=>$label)
{
	//$value=$object->array_options["options_".$key];
	$type =$extrafields->attribute_type[$key];
	if ($type=='date' || $type=='datetime') {$type='xsd:dateTime';}
	else {$type='xsd:string';}
	$extrafield_line_array['options_'.$key]=array('name'=>'options_'.$key,'type'=>$type);
}
if (is_array($extrafield_line_array)) $line_fields=array_merge($line_fields,$extrafield_line_array);

// Define other specific objects
$server->wsdl->addComplexType(
		'line',
		'complexType',
		'struct',
		'all',
		'',
		$line_fields
);

/*$server->wsdl->addComplexType(
		'LinesArray',
		'complexType',
		'array',
		'',
		'SOAP-ENC:Array',
		array(),
		array(
				array(
						'ref'=>'SOAP-ENC:arrayType',
						'wsdl:arrayType'=>'tns:line[]'
				)
		),
		'tns:line'
);*/
$server->wsdl->addComplexType(
		'LinesArray2',
		'complexType',
		'array',
		'sequence',
		'',
		array(
				'line' => array(
						'name' => 'line',
						'type' => 'tns:line',
						'minOccurs' => '0',
						'maxOccurs' => 'unbounded'
				)
		)
);

$order_fields = array(
	'id' => array('name'=>'id','type'=>'xsd:string'),
	'ref' => array('name'=>'ref','type'=>'xsd:string'),
	'ref_client' => array('name'=>'ref_client','type'=>'xsd:string'),
	'ref_ext' => array('name'=>'ref_ext','type'=>'xsd:string'),
	'ref_int' => array('name'=>'ref_int','type'=>'xsd:string'),
	'thirdparty_id' => array('name'=>'thirdparty_id','type'=>'xsd:int'),
	'status' => array('name'=>'status','type'=>'xsd:int'),
	'billed' => array('name'=>'billed','type'=>'xsd:string'),
	'total_net' => array('name'=>'total_net','type'=>'xsd:double'),
	'total_vat' => array('name'=>'total_vat','type'=>'xsd:double'),
	'total_localtax1' => array('name'=>'total_localtax1','type'=>'xsd:double'),
	'total_localtax2' => array('name'=>'total_localtax2','type'=>'xsd:double'),
	'total' => array('name'=>'total','type'=>'xsd:double'),
	'date' => array('name'=>'date','type'=>'xsd:date'),
	'date_creation' => array('name'=>'date_creation','type'=>'xsd:dateTime'),
	'date_validation' => array('name'=>'date_validation','type'=>'xsd:dateTime'),
	'date_modification' => array('name'=>'date_modification','type'=>'xsd:dateTime'),
	'remise' => array('name'=>'remise','type'=>'xsd:string'),
	'remise_percent' => array('name'=>'remise_percent','type'=>'xsd:string'),
	'remise_absolue' => array('name'=>'remise_absolue','type'=>'xsd:string'),
	'source' => array('name'=>'source','type'=>'xsd:string'),
	'note_private' => array('name'=>'note_private','type'=>'xsd:string'),
	'note_public' => array('name'=>'note_public','type'=>'xsd:string'),
	'project_id' => array('name'=>'project_id','type'=>'xsd:string'),

	'mode_reglement_id' => array('name'=>'mode_reglement_id','type'=>'xsd:string'),
	'mode_reglement_code' => array('name'=>'mode_reglement_code','type'=>'xsd:string'),
	'mode_reglement' => array('name'=>'mode_reglement','type'=>'xsd:string'),
	'cond_reglement_id' => array('name'=>'cond_reglement_id','type'=>'xsd:string'),
	'cond_reglement_code' => array('name'=>'cond_reglement_code','type'=>'xsd:string'),
	'cond_reglement' => array('name'=>'cond_reglement','type'=>'xsd:string'),
	'cond_reglement_doc' => array('name'=>'cond_reglement_doc','type'=>'xsd:string'),

	'date_livraison' => array('name'=>'date_livraison','type'=>'xsd:date'),
	'fk_delivery_address' => array('name'=>'fk_delivery_address','type'=>'xsd:int'),
	'demand_reason_id' => array('name'=>'demand_reason_id','type'=>'xsd:string'),

	'lines' => array('name'=>'lines','type'=>'tns:LinesArray2')
);

//Retreive all extrafield for thirdsparty
// fetch optionals attributes and labels
$extrafields=new ExtraFields($db);
$extralabels=$extrafields->fetch_name_optionals_label('commande',true);
$extrafield_array=null;
if (is_array($extrafields) && count($extrafields)>0) {
	$extrafield_array = array();
}
foreach($extrafields->attribute_label as $key=>$label)
{
	//$value=$object->array_options["options_".$key];
	$type =$extrafields->attribute_type[$key];
	if ($type=='date' || $type=='datetime') {$type='xsd:dateTime';}
	else {$type='xsd:string';}
	$extrafield_array['options_'.$key]=array('name'=>'options_'.$key,'type'=>$type);
}
if (is_array($extrafield_array)) $order_fields=array_merge($order_fields,$extrafield_array);

$server->wsdl->addComplexType(
		'order',
		'complexType',
		'struct',
		'all',
		'',
		$order_fields
);

/*
$server->wsdl->addComplexType(
		'OrdersArray',
		'complexType',
		'array',
		'',
		'SOAP-ENC:Array',
		array(),
		array(
				array(
						'ref'=>'SOAP-ENC:arrayType',
						'wsdl:arrayType'=>'tns:order[]'
				)
		),
		'tns:order'
);*/
$server->wsdl->addComplexType(
		'OrdersArray2',
		'complexType',
		'array',
		'sequence',
		'',
		array(
				'order' => array(
						'name' => 'order',
						'type' => 'tns:order',
						'minOccurs' => '0',
						'maxOccurs' => 'unbounded'
				)
		)
);



// 5 styles: RPC/encoded, RPC/literal, Document/encoded (not WS-I compliant), Document/literal, Document/literal wrapped
// Style merely dictates how to translate a WSDL binding to a SOAP message. Nothing more. You can use either style with any programming model.
// http://www.ibm.com/developerworks/webservices/library/ws-whichwsdl/
$styledoc='rpc';       // rpc/document (document is an extend into SOAP 1.0 to support unstructured messages)
$styleuse='encoded';   // encoded/literal/literal wrapped
// Better choice is document/literal wrapped but literal wrapped not supported by nusoap.

// Register WSDL
$server->register(
		'getOrder',
		array('authentication'=>'tns:authentication','id'=>'xsd:string','ref'=>'xsd:string','ref_ext'=>'xsd:string'), // Entry values
		array('result'=>'tns:result','order'=>'tns:order'),	// Exit values
		$ns,
		$ns.'#getOrder',
		$styledoc,
		$styleuse,
		'WS to get a particular invoice'
);

$server->register(
		'getOrdersForThirdParty',
		array('authentication'=>'tns:authentication','idthirdparty'=>'xsd:string'),	// Entry values
		array('result'=>'tns:result','orders'=>'tns:OrdersArray2'),	// Exit values
		$ns,
		$ns.'#getOrdersForThirdParty',
		$styledoc,
		$styleuse,
		'WS to get all orders of a third party'
);

$server->register(
		'createOrder',
		array('authentication'=>'tns:authentication','order'=>'tns:order'),	// Entry values
		array('result'=>'tns:result','id'=>'xsd:string','ref'=>'xsd:string'),	// Exit values
		$ns,
		$ns.'#createOrder',
		$styledoc,
		$styleuse,
		'WS to create an order'
);

$server->register(
		'updateOrder',
		array('authentication'=>'tns:authentication','order'=>'tns:order'),	// Entry values
		array('result'=>'tns:result','id'=>'xsd:string','ref'=>'xsd:string','ref_ext'=>'xsd:string'),	// Exit values
		$ns,
		$ns.'#updateOrder',
		$styledoc,
		$styleuse,
		'WS to update an order'
);

$server->register(
		'validOrder',
		array('authentication'=>'tns:authentication','id'=>'xsd:string','id_warehouse'=>'xsd:string'),  // Entry values
		array('result'=>'tns:result'),	// Exit values
		$ns,
		$ns.'#validOrder',
		$styledoc,
		$styleuse,
		'WS to valid an order'
);

/**
 * Get order from id, ref or ref_ext.
 *
 * @param	array		$authentication		Array of authentication information
 * @param	int			$id					Id
 * @param	string		$ref				Ref
 * @param	string		$ref_ext			Ref_ext
 * @return	array							Array result
 */
function getOrder($authentication,$id='',$ref='',$ref_ext='')
{
	global $db,$conf,$langs;

	dol_syslog("Function: getOrder login=".$authentication['login']." id=".$id." ref=".$ref." ref_ext=".$ref_ext);

	if ($authentication['entity']) $conf->entity=$authentication['entity'];

	// Init and check authentication
	$objectresp=array();
	$errorcode='';$errorlabel='';
	$error=0;

	$fuser=check_authentication($authentication,$error,$errorcode,$errorlabel);

	if ($fuser->societe_id) $socid=$fuser->societe_id;

	// Check parameters
	if (! $error && (($id && $ref) || ($id && $ref_ext) || ($ref && $ref_ext)))
	{
		$error++;
		$errorcode='BAD_PARAMETERS'; $errorlabel="Parameter id, ref and ref_ext can't be both provided. You must choose one or other but not both.";
	}

	if (! $error)
	{
		$fuser->getrights();

		if ($fuser->rights->commande->lire)
		{
			$order=new Commande($db);
			$result=$order->fetch($id,$ref,$ref_ext);
			if ($result > 0)
			{
				// Security for external user
				if( $socid && ( $socid != $order->socid) )
				{
					$error++;
					$errorcode='PERMISSION_DENIED'; $errorlabel=$order->socid.'User does not have permission for this request';
				}

				if(!$error)
				{

					$linesresp=array();
					$i=0;
					foreach($order->lines as $line)
					{
						//var_dump($line); exit;
						$linesresp[]=array(
						'id'=>$line->rowid,
						'fk_commande'=>$line->fk_commande,
						'fk_parent_line'=>$line->fk_parent_line,
						'desc'=>$line->desc,
						'qty'=>$line->qty,
						'price'=>$line->price,
						'unitprice'=>$line->subprice,
						'vat_rate'=>$line->tva_tx,
						'remise'=>$line->remise,
						'remise_percent'=>$line->remise_percent,
						'product_id'=>$line->fk_product,
						'product_type'=>$line->product_type,
						'total_net'=>$line->total_ht,
						'total_vat'=>$line->total_tva,
						'total'=>$line->total_ttc,
						'date_start'=>$line->date_start,
						'date_end'=>$line->date_end,
						'product_ref'=>$line->product_ref,
						'product_label'=>$line->product_label,
						'product_desc'=>$line->product_desc
						);
						$i++;
					}

					// Create order
					$objectresp = array(
					'result'=>array('result_code'=>'OK', 'result_label'=>''),
					'order'=>array(
					'id' => $order->id,
					'ref' => $order->ref,
					'ref_client' => $order->ref_client,
					'ref_ext' => $order->ref_ext,
					'ref_int' => $order->ref_int,
					'thirdparty_id' => $order->socid,
					'status' => $order->statut,

					'total_net' => $order->total_ht,
					'total_vat' => $order->total_tva,
					'total_localtax1' => $order->total_localtax1,
					'total_localtax2' => $order->total_localtax2,
					'total' => $order->total_ttc,
					'project_id' => $order->fk_project,

					'date' => $order->date_commande?dol_print_date($order->date_commande,'dayrfc'):'',
					'date_creation' => $invoice->date_creation?dol_print_date($invoice->date_creation,'dayhourrfc'):'',
					'date_validation' => $invoice->date_validation?dol_print_date($invoice->date_creation,'dayhourrfc'):'',
					'date_modification' => $invoice->datem?dol_print_date($invoice->datem,'dayhourrfc'):'',

					'remise' => $order->remise,
					'remise_percent' => $order->remise_percent,
					'remise_absolue' => $order->remise_absolue,

					'source' => $order->source,
					'billed' => $order->billed,
					'note_private' => $order->note_private,
					'note_public' => $order->note_public,
					'cond_reglement_id' => $order->cond_reglement_id,
					'cond_reglement_code' => $order->cond_reglement_code,
					'cond_reglement' => $order->cond_reglement,
					'mode_reglement_id' => $order->mode_reglement_id,
					'mode_reglement_code' => $order->mode_reglement_code,
					'mode_reglement' => $order->mode_reglement,

					'date_livraison' => $order->date_livraison,
					'fk_delivery_address' => $order->fk_delivery_address,

					'demand_reason_id' => $order->demand_reason_id,
					'demand_reason_code' => $order->demand_reason_code,

					'lines' => $linesresp
					));
				}
			}
			else
			{
				$error++;
				$errorcode='NOT_FOUND'; $errorlabel='Object not found for id='.$id.' nor ref='.$ref.' nor ref_ext='.$ref_ext;
			}
		}
		else
		{
			$error++;
			$errorcode='PERMISSION_DENIED'; $errorlabel='User does not have permission for this request';
		}
	}

	if ($error)
	{
		$objectresp = array('result'=>array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}

	return $objectresp;
}


/**
 * Get list of orders for third party
 *
 * @param	array		$authentication		Array of authentication information
 * @param	int			$idthirdparty		Id of thirdparty
 * @return	array							Array result
 */
function getOrdersForThirdParty($authentication,$idthirdparty)
{
	global $db,$conf,$langs;

	dol_syslog("Function: getOrdersForThirdParty login=".$authentication['login']." idthirdparty=".$idthirdparty);

	if ($authentication['entity']) $conf->entity=$authentication['entity'];

	// Init and check authentication
	$objectresp=array();
	$errorcode='';$errorlabel='';
	$error=0;
	$fuser=check_authentication($authentication,$error,$errorcode,$errorlabel);

	if ($fuser->societe_id) $socid=$fuser->societe_id;

	// Check parameters
	if (! $error && empty($idthirdparty))
	{
		$error++;
		$errorcode='BAD_PARAMETERS'; $errorlabel='Parameter id is not provided';
	}

	if (! $error)
	{
		$linesorders=array();

		$sql.='SELECT c.rowid as orderid';
		$sql.=' FROM '.MAIN_DB_PREFIX.'commande as c';
		$sql.=" WHERE c.entity = ".$conf->entity;
		if ($idthirdparty != 'all' ) $sql.=" AND c.fk_soc = ".$db->escape($idthirdparty);


		$resql=$db->query($sql);
		if ($resql)
		{
			$num=$db->num_rows($resql);
			$i=0;
			while ($i < $num)
			{
				// En attendant remplissage par boucle
				$obj=$db->fetch_object($resql);

				$order=new Commande($db);
				$order->fetch($obj->orderid);

				// Sécurité pour utilisateur externe
				if( $socid && ( $socid != $order->socid) )
				{
					$error++;
					$errorcode='PERMISSION_DENIED'; $errorlabel=$order->socid.' User does not have permission for this request';
				}

				if(!$error)
				{

					// Define lines of invoice
					$linesresp=array();
					foreach($order->lines as $line)
					{
						$linesresp[]=array(
						'id'=>$line->rowid,
						'type'=>$line->product_type,
						'fk_commande'=>$line->fk_commande,
						'fk_parent_line'=>$line->fk_parent_line,
						'desc'=>$line->desc,
						'qty'=>$line->qty,
						'price'=>$line->price,
						'unitprice'=>$line->subprice,
						'tva_tx'=>$line->tva_tx,
						'remise'=>$line->remise,
						'remise_percent'=>$line->remise_percent,
						'total_net'=>$line->total_ht,
						'total_vat'=>$line->total_tva,
						'total'=>$line->total_ttc,
						'date_start'=>$line->date_start,
						'date_end'=>$line->date_end,
						'product_id'=>$line->fk_product,
						'product_ref'=>$line->product_ref,
						'product_label'=>$line->product_label,
						'product_desc'=>$line->product_desc
						);
					}

					// Now define invoice
					$linesorders[]=array(
					'id' => $order->id,
					'ref' => $order->ref,
					'ref_client' => $order->ref_client,
					'ref_ext' => $order->ref_ext,
					'ref_int' => $order->ref_int,
					'socid' => $order->socid,
					'status' => $order->statut,

					'total_net' => $order->total_ht,
					'total_vat' => $order->total_tva,
					'total_localtax1' => $order->total_localtax1,
					'total_localtax2' => $order->total_localtax2,
					'total' => $order->total_ttc,
					'project_id' => $order->fk_project,

					'date' => $order->date_commande?dol_print_date($order->date_commande,'dayrfc'):'',

					'remise' => $order->remise,
					'remise_percent' => $order->remise_percent,
					'remise_absolue' => $order->remise_absolue,

					'source' => $order->source,
					'billed' => $order->billed,
					'note_private' => $order->note_private,
					'note_public' => $order->note_public,
					'cond_reglement_id' => $order->cond_reglement_id,
					'cond_reglement' => $order->cond_reglement,
					'cond_reglement_doc' => $order->cond_reglement_doc,
					'cond_reglement_code' => $order->cond_reglement_code,
					'mode_reglement_id' => $order->mode_reglement_id,
					'mode_reglement' => $order->mode_reglement,
					'mode_reglement_code' => $order->mode_reglement_code,

					'date_livraison' => $order->date_livraison,

					'demand_reason_id' => $order->demand_reason_id,
					'demand_reason_code' => $order->demand_reason_code,

					'lines' => $linesresp
					);
				}
				$i++;
			}

			$objectresp=array(
			'result'=>array('result_code'=>'OK', 'result_label'=>''),
			'orders'=>$linesorders

			);
		}
		else
		{
			$error++;
			$errorcode=$db->lasterrno(); $errorlabel=$db->lasterror();
		}
	}

	if ($error)
	{
		$objectresp = array('result'=>array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}

	return $objectresp;
}


/**
 * Create order
 *
 * @param	array		$authentication		Array of authentication information
 * @param	array		$order				Order info
 * @return	int								Id of new order
 */
function createOrder($authentication,$order)
{
	global $db,$conf,$langs;

	include_once DOL_DOCUMENT_ROOT.'/core/lib/date.lib.php';

	$now=dol_now();

	dol_syslog("Function: createOrder login=".$authentication['login']." socid :".$order['socid']);

	if ($authentication['entity']) $conf->entity=$authentication['entity'];

	// Init and check authentication
	$objectresp=array();
	$errorcode='';$errorlabel='';
	$error=0;
	$fuser=check_authentication($authentication,$error,$errorcode,$errorlabel);

	// Check parameters


	if (! $error)
	{
		$newobject=new Commande($db);
		$newobject->socid=$order['thirdparty_id'];
		$newobject->type=$order['type'];
		$newobject->ref_ext=$order['ref_ext'];
		$newobject->date=dol_stringtotime($order['date'],'dayrfc');
		$newobject->date_lim_reglement=dol_stringtotime($order['date_due'],'dayrfc');
		$newobject->note_private=$order['note_private'];
		$newobject->note_public=$order['note_public'];
		$newobject->statut=Commande::STATUS_DRAFT;	// We start with status draft
		$newobject->billed=$order['billed'];
		$newobject->fk_project=$order['project_id'];
		$newobject->fk_delivery_address=$order['fk_delivery_address'];
		$newobject->cond_reglement_id=$order['cond_reglement_id'];
		$newobject->demand_reason_id=$order['demand_reason_id'];
		$newobject->date_creation=$now;

		// Retrieve all extrafield for order
		// fetch optionals attributes and labels
		$extrafields=new ExtraFields($db);
		$extralabels=$extrafields->fetch_name_optionals_label('commandet',true);
		foreach($extrafields->attribute_label as $key=>$label)
		{
			$key='options_'.$key;
			$newobject->array_options[$key]=$order[$key];
		}

		// Trick because nusoap does not store data with same structure if there is one or several lines
		$arrayoflines=array();
		if (isset($order['lines']['line'][0])) $arrayoflines=$order['lines']['line'];
		else $arrayoflines=$order['lines'];

		foreach($arrayoflines as $key => $line)
		{
			// $key can be 'line' or '0','1',...
			$newline=new OrderLine($db);

			$newline->type=$line['type'];
			$newline->desc=$line['desc'];
			$newline->fk_product=$line['product_id'];
			$newline->tva_tx=$line['vat_rate'];
			$newline->qty=$line['qty'];
			$newline->price=$line['price'];
			$newline->subprice=$line['unitprice'];
			$newline->total_ht=$line['total_net'];
			$newline->total_tva=$line['total_vat'];
			$newline->total_ttc=$line['total'];
			$newline->date_start=$line['date_start'];
			$newline->date_end=$line['date_end'];

			// Retrieve all extrafield for lines
			// fetch optionals attributes and labels
			$extrafields=new ExtraFields($db);
			$extralabels=$extrafields->fetch_name_optionals_label('commandedet',true);
			foreach($extrafields->attribute_label as $key=>$label)
			{
				$key='options_'.$key;
				$newline->array_options[$key]=$line[$key];
			}

			$newobject->lines[]=$newline;
		}


		$db->begin();
		dol_syslog("Webservice server_order:: order creation start", LOG_DEBUG);
		$result=$newobject->create($fuser);
		dol_syslog('Webservice server_order:: order creation done with $result='.$result, LOG_DEBUG);
		if ($result < 0)
		{
			dol_syslog("Webservice server_order:: order creation failed", LOG_ERR);
			$error++;
		}

		if ($order['status'] == 1)   // We want order to have status validated
		{
			dol_syslog("Webservice server_order:: order validation start", LOG_DEBUG);
			$result=$newobject->valid($fuser);
			if ($result < 0)
			{
				dol_syslog("Webservice server_order:: order validation failed", LOG_ERR);
				$error++;
			}
		}

		if ($result >= 0)
		{
			dol_syslog("Webservice server_order:: order creation & validation succeeded, commit", LOG_DEBUG);
			$db->commit();
			$objectresp=array('result'=>array('result_code'=>'OK', 'result_label'=>''),'id'=>$newobject->id,'ref'=>$newobject->ref);
		}
		else
		{
			dol_syslog("Webservice server_order:: order creation or validation failed, rollback", LOG_ERR);
			$db->rollback();
			$error++;
			$errorcode='KO';
			$errorlabel=$newobject->error;
		}
	}

	if ($error)
	{
		$objectresp = array('result'=>array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}

	return $objectresp;
}


/**
 * Valid an order
 *
 * @param	array		$authentication		Array of authentication information
 * @param	int			$id					Id of order to validate
 * @param	int			$id_warehouse		Id of warehouse to use for stock decrease
 * @return	array							Array result
 */
function validOrder($authentication,$id='',$id_warehouse=0)
{
	global $db,$conf,$langs;

	dol_syslog("Function: validOrder login=".$authentication['login']." id=".$id." ref=".$ref." ref_ext=".$ref_ext);

	// Init and check authentication
	$objectresp=array();
	$errorcode='';$errorlabel='';
	$error=0;
	if ($authentication['entity']) $conf->entity=$authentication['entity'];
	$fuser=check_authentication($authentication,$error,$errorcode,$errorlabel);

	if (! $error)
	{
		$fuser->getrights();

		if ($fuser->rights->commande->lire)
		{
			$order=new Commande($db);
			$result=$order->fetch($id,$ref,$ref_ext);

			$order->fetch_thirdparty();
			$db->begin();
			if ($result > 0)
			{

				$result=$order->valid($fuser,$id_warehouse);

				if ($result	>= 0)
				{
					// Define output language
					$outputlangs = $langs;
					$order->generateDocument($order->modelpdf, $outputlangs);
				}
				else
				{
					$db->rollback();
					$error++;
					$errorcode='KO';
					$errorlabel=$newobject->error;
				}
			}
			else
			{
				$db->rollback();
				$error++;
				$errorcode='KO';
				$errorlabel=$newobject->error;
			}
		}
		else
		{
			$db->rollback();
			$error++;
			$errorcode='KO';
			$errorlabel=$newobject->error;
		}
	}

	if ($error)
	{
		$objectresp = array('result'=>array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}
	else
	{
		$db->commit();
		$objectresp= array('result'=>array('result_code'=>'OK', 'result_label'=>''));
	}

	return $objectresp;
}

/**
 * Update an order
 *
 * @param	array		$authentication		Array of authentication information
 * @param	array		$order				Order info
 * @return	array							Array result
 */
function updateOrder($authentication,$order)
{
	global $db,$conf,$langs;

	$now=dol_now();

	dol_syslog("Function: updateOrder login=".$authentication['login']);

	if ($authentication['entity']) $conf->entity=$authentication['entity'];

	// Init and check authentication
	$objectresp=array();
	$errorcode='';$errorlabel='';
	$error=0;
	$fuser=check_authentication($authentication,$error,$errorcode,$errorlabel);
	// Check parameters
	if (empty($order['id']) && empty($order['ref']) && empty($order['ref_ext']))	{
		$error++; $errorcode='KO'; $errorlabel="Order id or ref or ref_ext is mandatory.";
	}

	if (! $error)
	{
		$objectfound=false;

		include_once DOL_DOCUMENT_ROOT.'/core/lib/company.lib.php';

		$object=new Commande($db);
		$result=$object->fetch($order['id'],(empty($order['id'])?$order['ref']:''),(empty($order['id']) && empty($order['ref'])?$order['ref_ext']:''));

		if (!empty($object->id)) {

			$objectfound=true;

			$db->begin();

			if (isset($order['status']))
			{
				if ($order['status'] == -1) $result=$object->cancel($fuser);
				if ($order['status'] == 1)
				{
					$result=$object->valid($fuser);
					if ($result	>= 0)
					{
						// Define output language
						$outputlangs = $langs;
						$object->generateDocument($order->modelpdf, $outputlangs);
					}
				}
				if ($order['status'] == 0)  $result=$object->set_reopen($fuser);
				if ($order['status'] == 3)  $result=$object->cloture($fuser);
			}

			if (isset($order['billed']))
			{
				if ($order['billed'])   $result=$object->classifyBilled($fuser);
				if (! $order['billed']) $result=$object->classifyUnBilled($fuser);
			}

			//Retreive all extrafield for object
			// fetch optionals attributes and labels
			$extrafields=new ExtraFields($db);
			$extralabels=$extrafields->fetch_name_optionals_label('commande',true);
			foreach($extrafields->attribute_label as $key=>$label)
			{
				$key='options_'.$key;
				if (isset($order[$key]))
				{
					$result=$object->setValueFrom($key, $order[$key], 'commande_extrafields');
				}
			}

			if ($result <= 0) {
				$error++;
			}
		}

		if ((! $error) && ($objectfound))
		{
			$db->commit();
			$objectresp=array(
					'result'=>array('result_code'=>'OK', 'result_label'=>''),
					'id'=>$object->id,
					'ref'=>$object->ref,
					'ref_ext'=>$object->ref_ext
			);
		}
		elseif ($objectfound)
		{
			$db->rollback();
			$error++;
			$errorcode='KO';
			$errorlabel=$object->error;
		} else {
			$error++;
			$errorcode='NOT_FOUND';
			$errorlabel='Order id='.$order['id'].' ref='.$order['ref'].' ref_ext='.$order['ref_ext'].' cannot be found';
		}
	}

	if ($error)
	{
		$objectresp = array('result'=>array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}

	return $objectresp;
}


// Return the results.
$server->service(file_get_contents("php://input"));