stuff-sharing/edititem.php at master · cs2102-stuff-sharing/stuff-sharing · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
<?php
  session_start();

  include('db.php');
  include('header.php');
  if(!isset($_SESSION['key']))
  {
  	header("Location: /stuff-sharing/login.php?error=NOT_LOGIN");
  }
  else
  {
	$email = pg_escape_string($connection,$_SESSION['key']);
    $query = "SELECT firstName, lastName, userpoint FROM users where email='".$email."'";
    $result = pg_query($connection,$query) or die('Query failed:'.pg_last_error());
    $row = pg_fetch_row($result);
  }

	if(isset($_SESSION['edititemid']))
	{
		$edititemid = pg_escape_string($connection,$_SESSION['edititemid']);
		$itemresult = pg_query($connection,"SELECT i.itemName,i.itemId,i.itemCategory,i.itemDescription, i.ownerEmail
		FROM ItemList i WHERE i.itemid = '".$edititemid."'");
		if(!$itemresult)
		{
			$message = "Something seems to be wrong, please try later";
		}
		else
		{
			$rowContent = pg_fetch_row($itemresult);
			$itemName = $rowContent[0];
			$itemId = $rowContent[1];
			$itemCategory = $rowContent[2];
			$itemDescription = $rowContent[3];
      if($rowContent[4] != $email)
      {
        header("Location: /stuff-sharing/error.php");
      }
		}
	}

  if(isset($_POST['action']) && $_POST['action'] == "edititem")
  {
  	$newItemName = pg_escape_string($connection,$_POST['itemName']);
  	$newItemDescription = pg_escape_string($connection,$_POST['itemDescription']);
  	$newItemCategory = pg_escape_string($connection,$_POST['itemCategory']);
  	$editItemQuery = "UPDATE ItemList SET itemName='".$newItemName."', itemDescription='".$newItemDescription."', itemCategory='".$newItemCategory."'
		WHERE itemId = '".$itemId."'";
	  $editItemResult = pg_query($connection, $editItemQuery);

		if($editItemResult){
			echo ("
			<div class=\"alert alert-info\">
				<a href=\"#\" class=\"close\" data-dismiss=\"alert\" aria-label=\"close\">&times;</a>
				Item updated!
			</div>
					");
		}
  }

?>

<body>
    <?php
      include('navbar.php');
    ?>

<div class="container">
  <div class="row">
    <div class="col-md-4 col-md-offset-4">
      <div class="panel panel-default">
        <div class="panel-heading">
          <h3 class="panel-title">Edit Item Page</h3>
        </div>
        <div class="panel-body">
          <?php
            if(isset($message))
            {
              echo '<div class="alert alert-danger" role="alert">
                      <span class="glyphicon glyphicon-exclamation-sign" aria-hidden="true"></span>
                      <span class="sr-only">Error:</span>' .
                      $message .
                    '</div>';
            }
          ?>
          <form action="edititem.php" method="post">
            <fieldset>
              <div class="form-group">
                <input class="form-control" id="item-name" name="itemName" type="text" placeholder="Item Name" value = "<?php echo $itemName;?>" autofocus>
              </div>
              <div class="form-group">
                <input class="form-control" id="item-description" name="itemDescription" type="text" placeholder="Item Description" value = "<?php echo $itemDescription;?>">
              </div>
              <div class="form-group">
                <select class="form-control" id="categories" name="itemCategory">
                	  <option value = 'Home' <?php if($itemCategory == 'Home') {echo "selected = \"selected\" ";}?> >Home Use</option>
                    <option value = 'Phone' <?php if($itemCategory == 'Phone') {echo "selected = \"selected\" ";}?> >Phone</option>
                    <option value = 'School' <?php if($itemCategory == 'School') {echo "selected = \"selected\" ";}?> >School Use</option>
                    <option value = 'Personal' <?php if($itemCategory == 'Personal') {echo "selected = \"selected\" ";}?> >Personal Use</option>
                    <option value = 'Other' <?php if($itemCategory == 'Other') {echo "selected = \"selected\" ";}?> >Other</option>
              </div>
              <div class="form-group">
                <input class="form-control" name="action" type="hidden" value="edititem" />
              </div>
              <button type="submit" class="btn btn-success btn-block">edit item</button>

            </fieldset>
          </form>
        </div>
      </div>
    </div>
  </div>
</div>
</body>