Library/user_roles.php at master · matej-oliva/Library · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
<?php

    require_once 'include/user.php';
    require 'admin_required.php';

    $userID = $_GET['userID'];

    $query = $db->prepare(
        'SELECT library_users.name as userName, library_users.email as userEmail
        FROM library_users
        WHERE user_id = '.$userID.'');

    $query->execute();

    $userInfo = $query->fetch();
    if(empty($userInfo)){
        echo '<div class="alert alert-info">Uživatel nebyl nalezen.</div>';
    }else{
        $name = $userInfo['userName'];
        $email = $userInfo['userEmail'];
    };

    $allUsersQuery = $db->prepare(
        'SELECT library_users.name as userName, library_users.email as email
        FROM library_users');

    $allUsersQuery->execute();
    $user_list = $allUsersQuery->fetchAll(PDO::FETCH_ASSOC);

    $roles_query = $db->prepare(
        'SELECT DISTINCT library_roles.name AS roleName, library_roles.role_id AS roleID
        FROM library_roles
        ORDER BY name DESC');

    $roles_query->execute();

    $roles_list = $roles_query->fetchAll(PDO::FETCH_ASSOC);
    if(empty($roles_list)){
        echo '<div class="alert alert-info">Nebyly nalezeny žádné role.</div>';
    };

    $errors=[];
    if(!empty($_POST)){
        #region zpracovani formulare

        $role_id=trim(@$_POST['role_picker']);
        if(!is_numeric($role_id)){
            $errors['role']='Pole je povinné';
        }

        if(empty($errors)){
            if ($_SERVER["REQUEST_METHOD"] == "POST") {
                #region uprava autora

                    $delQuery=$db->prepare('UPDATE library_users SET role_id =? WHERE user_id=?;');
                    $delQuery->execute(array(
                        $role_id,
                        $userID
                    ));
                    header('Location: user_mgmt.php');
                    exit();
                #endregion uprava autora
            };
        }
    }

    $pageTitle="Změna role";
    include 'include/header.php';
?>

<div class="row">
    <h2 class="col mx-3 my-3">Změna role uživatele</h2>
</div>

    <div class="new_book-form pt-5 w-25">
        <form method="POST">
            <h2 class="text-center mb-4 pl-5">Vyberte novou roli uživatele</h2>
            <div class="form-group">
                <div class="input-group">
                    <span class="input-group-addon col"><i class="fa fa-user"></i></span>
                    <input id="name" type="text" disabled class="form-control text-center col w-75<?php echo(!empty($errors['name']) ? ' is-invalid' : ''); ?>" name="name" placeholder="název knihy" value="<?php echo htmlspecialchars(@$name);?>"/>
                    <?php
                        echo (!empty($errors['name'])?'<div class="invalid-feedback">'.$errors['name'].'</div>':'');
                    ?>
                </div>
            </div>
            <div class="form-group">
                	<div class="input-group">
                        <span class="input-group-addon col"><i class="fa fa-user-tie"></i></span>
                        <select name="role_picker" id="role_picker" class="form-control custom-picker selectpicker col w-75" data-size="5" data-dropup-auto="false" required>
                                    <option value="<?php if(!empty($_POST)){echo htmlspecialchars(@$role_picker);}?>">
                                    ---Vyberte roli---
                                    </option>
                                    <?php
                                        if(!empty($roles_list)){
                                            foreach($roles_list as $role){
                                                echo '<option value="' . $role['roleID'] . '"';
                                                if ($role['roleID'] == @$_POST['roleID']) {
                                                    echo ' selected="selected" ';
                                                }
                                                echo '>' . htmlspecialchars($role['roleName']).'</option>';
                                            }
                                        }
                                    ?>
                                </select>
                        <?php
                            echo (!empty($errors['role'])?'<div class="invalid-feedback">'.$errors['role'].'</div>':'');
                        ?>
                    </div>
                </div>
            <div class="form-group">
                <div class="input-group">
                    <a href="user_mgmt.php" class="col btn btn-outline-secondary mr-2">Zrušit</a>
                    <button type="submit" class="btn btn-info col form-control ml-2">Změnit</button>
                </div>
            </div>
        </form>
    </div>

<?php
    include 'include/footer.php';
?>