Avoid also to modify a full flight.

[Project_webapp.git] / includes / modify.php

<?php
global $is_logged_in;
if (!$is_logged_in) {
    echo "Please login first. <br>";
    $_SESSION['login_referer'] = $_SERVER['HTTP_REFERER'];
    redirect("index.php?page=login", 2);
    include('footer.html');
    exit();
}
$flight_id = filter_input(INPUT_GET, "flight_id", FILTER_SANITIZE_STRING);
$class_name = filter_input(INPUT_GET, "class_name", FILTER_SANITIZE_STRING);
$client_id = get_client_id($_SESSION['email']);
echo "<h1> Modification de la re&#769;servation sur le vol $flight_id </h2>\n";
global $connection;
$sql_pquery = "select NumCl, NumVol, Classe, NbPlaces
               from RESERVATIONS
       		   where NumCl = ? and NumVol = ? and Classe = ?";
$connection->prepare_query($sql_pquery);
$connection->prepared_query_bind_param("iss", array($client_id, $flight_id, $class_name));
$connection->run_prepared_query();
$connection->get_pquery_result();
$rows = $connection->get_result_array();
$connection->close_prepared_query();
$sql_pquery = "select CapAv, sum(NbPlaces) as BookedPlaces
               from RESERVATIONS, VOLS, AVIONS
       		   where RESERVATIONS.NumVol = VOLS.NumVol and AVIONS.NumAv = VOLS.NumAv and
               RESERVATIONS.NumVol = ?
               group by RESERVATIONS.NumVol";
$connection->prepare_query($sql_pquery);
$connection->prepared_query_bind_param("s", array($flight_id));
$connection->run_prepared_query();
$connection->get_pquery_result();
$rows_cap = $connection->get_result_array();
$connection->close_prepared_query();
//var_dump($rows_cap);
$booked_places = $rows_cap[0]['BookedPlaces'];
if (is_null($booked_places)) {
    $booked_places = 0;
}
if (isset($rows_cap[0]['CapAv']) && isset($booked_places)) {
    $free_places = $rows_cap[0]['CapAv'] - $booked_places;
} else {
    $free_places = "Inconnu";
}
?>
<p> Nombre de places libres : <?php echo $free_places ?> </p>
<form action="index.php" id="modify" method="post">
  <input type="hidden" name="form" value="modify" />
  <input type="hidden" name="flight_id" value="<?php echo $rows[0]['NumVol'] ?>" />
  <input type="hidden" name="previous_class_name" value="<?php echo $rows[0]['Classe'] ?>" />
  <?php
  if ($free_places !== 0 || $free_places === "Inconnu") {
      echo "  <label> Nombre de place(s) : </label>\n";
      echo "  <input type=\"number\" name=\"nb_place\" min=\"1\" max=\"9\" value=\"" . $rows[0]['NbPlaces'] . "\" required/>\n";
  }
  ?>
  <label> Classe : </label>
  <select size="1" name="class_name" required>
   <optgroup label="Se&#769;lectionner une classe">
  <?php
  $sql_pquery = "select distinct Classe from DEFCLASSES where NumVol = ? order by Classe";
  global $connection;
  $connection->prepare_query($sql_pquery);
  $connection->prepared_query_bind_param("s", array($flight_id));
  $connection->run_prepared_query();
  $connection->get_pquery_result();
  $classes = $connection->get_result_array();
  $connection->close_prepared_query();
  foreach ($classes as $class) {
      if (strcmp($class[0], $rows[0]['Classe']) === 0) {
          echo "<option value=\"$class[0]\" selected>$class[0]</option>\n";
      } else {
          echo "<option value=\"$class[0]\">$class[0]</option>\n";
      }
  }
  ?>
   </optgroup>
  </select>
  <input type="submit" value="Valider">
</form>