Revize ad5ad0be

Enhancement #8757 Refactoring, server-side

application/controller/DeleteUserController.php

@@ -5 +5 @@
 
 if (array_key_exists("loggedIn", $_SESSION) && $_SESSION['loggedIn'] == "true" && array_key_exists("role", $_SESSION) && $_SESSION['role'] == "admin") {
     $DB = new DB();
-    $result = $DB->deleteUser($_POST['userId']);
+    $results = $DB->select("SELECT id, username, role from USERS WHERE role = 'admin'", array());
+    if (sizeof($results) == 1) { //at least one admin must still exist
+        if ($results[0]["id"] != $_POST['userId']) {
+            $result = $DB->deleteUser($_POST['userId']);
+        }
+    } else if (sizeof($results) > 1) {
+        $result = $DB->deleteUser($_POST['userId']);
+    }
 }

application/controller/UpdateUserRoleController.php

@@ -4 +4 @@
 
 if (array_key_exists("loggedIn", $_SESSION) && $_SESSION['loggedIn'] == "true" && array_key_exists("role", $_SESSION) && $_SESSION['role'] == "admin") {
     $DB = new DB();
-
-    $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+    $results = $DB->select("SELECT id, username, role from USERS WHERE role = 'admin'", array());
+    if (sizeof($results) == 1) { //at least one admin must still exist
+        if ($results[0]["id"] != $_POST['userId']) {
+            $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+        }
+    } else if (sizeof($results) > 1) {
+        $results = $DB->updateUserRole($_POST["userId"], $_POST["role"]);
+    }
 
     echo json_encode(count($results) == 0 ? null : $results);
 }

application/view/contents/userContent.php

@@ -1 +1 @@
 <?php
 if (isset($_SESSION['role']) && $_SESSION['role'] == "admin") {
+    $loggedUserId = $_SESSION['id'];
     echo "<script>
         //what to do when page renders
         window.onload = function() {
@@ -42 +43 @@
                             result += \"<tr>\";
                             result += \"<td>\" + item.username + \"</td>\";
                             result += \"<td>\" + item.role + \"</td>\";
-                            (item.role !== \"admin\") ? (result += \"<td class='action-td'>\" +
+                            
+                            if (item['id'] != \"$loggedUserId\") {
+                            result += \"<td class='action-td'>\" +
                                 \"<button class='btn ml-1' title='Upravit'  data-toggle='modal' data-target='#edit-modal' data-pseudo-id='\" + id + \"' data-title='Upravit uživatele'><i class='fa fa-pencil'></i></button>\" +
                                 \"<button class='btn ml-1' title='Odstranit'  data-toggle='modal' data-target='#remove-modal' data-pseudo-id='\" + id + \"'><i class='fa fa-trash'></i></button>\" +
-                                \"</td>\") : result += \"<td class='action-td'/>\";
+                                \"</td>\"} else {result += \"<td></td>\"}
+                                
+                              
                             result += \"</tr>\";
                         });
                         document.getElementById(\"search-table\").innerHTML = result;