rmtk/functions_show.php at master · TanelVari/rmtk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
<?php

/*** show_start_page ***/
function show_start_page(){

    if (!isset($_SESSION['username'])){
        header("Location: ?page=login");
        die();
    }

    global $connection;

    $borrowers = array();

    $sql = "
            SELECT tvari_kodu_books.*, tvari_kodu_users.name
            FROM (tvari_kodu_books
            LEFT JOIN tvari_kodu_users ON tvari_kodu_users.id = tvari_kodu_books.borrower)
            WHERE tvari_kodu_books.borrower IS NOT NULL AND tvari_kodu_books.borrow_date IS NOT NULL
            ";
    //echo $sql;
    $result = mysqli_query($connection, $sql);

    if ($result){
        while ($row = mysqli_fetch_assoc($result)){
            $borrowers[] = $row;
        }
    }

    include_once('views/start_page.php');
}

/*** show_infrastructure_page ***/
function show_infrastructure_page(){
    global $connection;

    check_admin_permissions();
    $infra = array();

    $sql = "SELECT DISTINCT * FROM tvari_kodu_rooms ORDER BY id";
    $result = mysqli_query($connection, $sql);

    while ($row = mysqli_fetch_assoc($result)){
        $infra[$row["name"]]["id"] = $row["id"];
    }

    $sql = "
            SELECT tvari_kodu_bookcases.id, tvari_kodu_bookcases.description, tvari_kodu_rooms.name
            FROM tvari_kodu_bookcases
            INNER JOIN tvari_kodu_rooms ON tvari_kodu_bookcases.room = tvari_kodu_rooms.id
            ";
    $result = mysqli_query($connection, $sql);

    while ($row = mysqli_fetch_assoc($result)){
        $infra[$row["name"]]["bookcases"][$row["id"]] = $row;
    }

    $sql = "
            SELECT tvari_kodu_bookcases.id, tvari_kodu_shelves.id AS 'shelf_id', tvari_kodu_categories.category, tvari_kodu_categories.color_id, tvari_kodu_systems.description AS 'category_description', tvari_kodu_shelves.shelf_nr, tvari_kodu_rooms.name
            FROM ((((tvari_kodu_shelves
            INNER JOIN tvari_kodu_bookcases ON tvari_kodu_bookcases.id = tvari_kodu_shelves.bookcase)
            INNER JOIN  tvari_kodu_categories ON tvari_kodu_categories.id = tvari_kodu_shelves.category)
            INNER JOIN tvari_kodu_rooms ON tvari_kodu_rooms.id = tvari_kodu_bookcases.room)
            INNER JOIN tvari_kodu_systems ON tvari_kodu_systems.id = tvari_kodu_categories.system)
            ORDER BY shelf_nr
            ";
    $result = mysqli_query($connection, $sql);

    while ($row = mysqli_fetch_assoc($result)){
        $infra[$row["name"]]["bookcases"][$row["id"]]["shelves"][] = $row;
    }

    include_once('views/infra_page.php');

    /*
    echo "<pre>";
    print_r($infra);
    echo "</pre>";
    */
}

/*** do_search ***/
function do_search(){
    global $connection;

    check_admin_permissions();

    $search_results = array();

    if ($_SERVER['REQUEST_METHOD'] == 'POST'
            && !empty($_POST['search'])
            && !empty($_POST['keyword'])){

        $keyword = mysqli_real_escape_string($connection, htmlspecialchars($_POST['keyword']));

        $sql = "SELECT * FROM tvari_kodu_books WHERE title LIKE '%".$keyword."%' OR author LIKE '%".$keyword."%'";
        $result = mysqli_query($connection, $sql);

        while ($row = mysqli_fetch_assoc($result)){
            $search_results[] = $row;
        }

        include_once('views/start_page.php');

    } else {
        header("Location: ?page=start");
        die();
    }
}

/*** show_category ***/
function show_category(){
    global $connection;

    check_admin_permissions();

    $category_search_results = array();

    if ($_SERVER['REQUEST_METHOD'] == 'POST'
        && !empty($_POST['search_category'])
        && !empty($_POST['category'])){

        $category = mysqli_real_escape_string($connection, htmlspecialchars($_POST['category']));

        $sql = "
                SELECT tvari_kodu_books.*, tvari_kodu_categories.category AS 'book_category'
                FROM tvari_kodu_books
                INNER JOIN tvari_kodu_categories ON tvari_kodu_categories.id = tvari_kodu_books.category
                WHERE tvari_kodu_books.category = ".$category;
        $result = mysqli_query($connection, $sql);

        while ($row = mysqli_fetch_assoc($result)){
            $category_search_results[] = $row;
        }

        include_once('views/start_page.php');

    } else {
        header("Location: ?page=start");
        die();
    }
}

?>