Revize 8fc55000

Bug #8639 Metoda insert

application/model/DB.php

@@ -65 +65 @@
         }
     }
 
+    function getUser($username) {
+        $this->stmt = $this->pdo->prepare('SELECT id, username, password, role FROM users WHERE username = :username');
+        $this->stmt->bindParam(':username', $username);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function createUser($userDetails) {
+        $this->stmt = $this->pdo->prepare('INSERT INTO users (username, password, role) VALUES (:username, :password, :role)');
+        $password = password_hash($userDetails['username'], PASSWORD_DEFAULT);
+        $this->stmt->bindParam(':username', $userDetails['username']);
+        $this->stmt->bindParam(':password',$password);
+        $this->stmt->bindParam(':role',$userDetails['role']);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function updateUserRole($userId, $role) {
+        $this->stmt = $this->pdo->prepare("UPDATE users SET role = :role WHERE id = :userId");
+        $this->stmt->bindParam(':role', $role);
+        $this->stmt->bindParam(':userId',$userId);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+    function deleteUser($userId) {
+        $this->stmt = $this->pdo->prepare("DELETE from users WHERE id = :userId");
+        $this->stmt->bindParam(':userId',$userId);
+        $this->stmt->execute();
+        return $this->stmt->fetchAll();
+    }
+
+
+
 function update(){
     $query = "SELECT id FROM dd_lemma
               WHERE lemma = :lemma;";
@@ -382 +416 @@
 }
 
 function insert(){
+  print_r($_POST);
 // ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| Tabulka dd_lemma |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
     $query = "SELECT id FROM dd_lemma
               WHERE lemma = :lemma;";
@@ -606 +641 @@
     if (array_key_exists("wordform_id", $_POST) && $_POST['wordform_id'] != "") {
         $query = "SELECT * FROM dd_manuscript WHERE ";
         $query .= " wordform_id = :wordform_id ;";
-    }
 
-    $this->stmt = $this->pdo->prepare($query);
-    if (array_key_exists("wordform_id", $_POST) && $_POST['wordform_id'] != "") {
-        $this->stmt->bindParam(':wordform_id', $_POST['wordform_id'], PDO::PARAM_INT);
-    }
-    $this->stmt->execute();
-    $result = $this->stmt->fetchAll();
+        $this->stmt = $this->pdo->prepare($query);
+            if (array_key_exists("wordform_id", $_POST) && $_POST['wordform_id'] != "") {
+                $this->stmt->bindParam(':wordform_id', $_POST['wordform_id'], PDO::PARAM_INT);
+            }
+            $this->stmt->execute();
+            $result = $this->stmt->fetchAll();
 
-    $to_insert = [];
-    $contained = [];
-    $found = false;
-    $integerIDs = [];
+            $to_insert = [];
+            $contained = [];
+            $found = false;
+            $integerIDs = [];
+
+            foreach ($result as $res) {
+                $integerIDs = array_map('intval', explode(',', $_POST['manuscript']));
+                foreach ($integerIDs as $new_value){
+                    if($new_value == $res['manuscript']){
+                        $found = true;
+                        array_push($contained, $new_value);
+                    }
+                }
+                if($found == false){
+                    array_push($to_delete, $res);
+                }
+                $found = false;
+            }
+            $to_insert = array_diff($integerIDs, $contained);
+            foreach ($to_insert as $id_to_insert){
+                $query = "INSERT INTO dd_manuscript VALUES ( ";
+                $query .= " :wordform_id , ";
+                $query .= " " . $id_to_insert . " ); ";
 
-    foreach ($result as $res) {
-        $integerIDs = array_map('intval', explode(',', $_POST['manuscript']));
-        foreach ($integerIDs as $new_value){
-            if($new_value == $res['manuscript']){
-                $found = true;
-                array_push($contained, $new_value);
+                $this->stmt = $this->pdo->prepare($query);
+                if (array_key_exists("wordform_id", $_POST) && $_POST['wordform_id'] != "") {
+                    $this->stmt->bindParam(':wordform_id', $_POST['wordform_id'], PDO::PARAM_INT);
+                }
+                $this->stmt->execute();
             }
-        }
-        if($found == false){
-            array_push($to_delete, $res);
-        }
-        $found = false;
     }
-    $to_insert = array_diff($integerIDs, $contained);
-    foreach ($to_insert as $id_to_insert){
-        $query = "INSERT INTO dd_manuscript VALUES ( ";
-        $query .= " :wordform_id , ";
-        $query .= " " . $id_to_insert . " ); ";
 
-        $this->stmt = $this->pdo->prepare($query);
-        if (array_key_exists("wordform_id", $_POST) && $_POST['wordform_id'] != "") {
-            $this->stmt->bindParam(':wordform_id', $_POST['wordform_id'], PDO::PARAM_INT);
-        }
-        $this->stmt->execute();
-    }
+
 }
 
 function remove(){
@@ -690 +727 @@
 
 // (D) DATABASE SETTINGS - CHANGE TO YOUR OWN!
 define('DB_HOST', 'localhost');
-define('DB_NAME', 'dalimil2');
+define('DB_NAME', 'dalim2');
 define('DB_CHARSET', 'utf8');
 define('DB_USER', 'postgres');
-define('DB_PASSWORD', 'ahavole');
+define('DB_PASSWORD', 'a');