From c49f721926f5d76a8eef80bd5174d68b5a151442 Mon Sep 17 00:00:00 2001
From: =?utf8?q?J=C3=A9r=C3=B4me=20Benoit?= <jerome.benoit@piment-noir.org>
Date: Fri, 19 Jan 2018 22:57:10 +0100
Subject: [PATCH] Add the reservation modification feature.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jérôme Benoit <jerome.benoit@piment-noir.org>
---
 includes/booking.php          |  0
 includes/config-example.php   |  3 ++-
 includes/formmodify.php       | 17 +++++++++++++
 includes/formreservations.php |  5 +---
 includes/modify.php           | 45 +++++++++++++++++++++++++++++++++++
 includes/reservations.php     |  2 +-
 js/airpolytech.js             |  2 +-
 7 files changed, 67 insertions(+), 7 deletions(-)
 delete mode 100644 includes/booking.php
 create mode 100644 includes/formmodify.php
 create mode 100644 includes/modify.php

diff --git a/includes/booking.php b/includes/booking.php
deleted file mode 100644
index e69de29..0000000
diff --git a/includes/config-example.php b/includes/config-example.php
index a7edf02..ed4bf15 100644
--- a/includes/config-example.php
+++ b/includes/config-example.php
@@ -14,7 +14,8 @@
          'reservations',
          'booking',
          'search',
-         'account'
+         'account',
+         'modify'
      )
  );
 
diff --git a/includes/formmodify.php b/includes/formmodify.php
new file mode 100644
index 0000000..20e53f6
--- /dev/null
+++ b/includes/formmodify.php
@@ -0,0 +1,17 @@
+<?php
+$form_flight_id = filter_input(INPUT_POST, "flight_id", FILTER_SANITIZE_STRING);
+$form_nb_place = filter_input(INPUT_POST, "nb_place", FILTER_VALIDATE_INT);
+$form_class_name = filter_input(INPUT_POST, "class_name", FILTER_SANITIZE_STRING);
+
+global $connection;
+$client_id = get_client_id($_SESSION['email']);
+$sql_pquery = "update RESERVATIONS
+                   set NbPlaces = ?, Classe = ?
+                   where NumCl = ? and NumVol = ?";
+$connection->prepare_query($sql_pquery);
+$connection->prepared_query_bind_param("isis", array($form_nb_place, $form_class_name, $client_id, $form_flight_id));
+$connection->run_prepared_query();
+$connection->close_prepared_query();
+echo "Modifications enregistre&#769;es. <br>";
+redirect("index.php?page=reservations", 3);
+?>
diff --git a/includes/formreservations.php b/includes/formreservations.php
index 4bca04c..0698900 100644
--- a/includes/formreservations.php
+++ b/includes/formreservations.php
@@ -1,12 +1,9 @@
 <?php
 $form_flight_id = filter_input(INPUT_POST, "flight_id", FILTER_SANITIZE_STRING);
 $form_class_name = filter_input(INPUT_POST, "class_name", FILTER_SANITIZE_STRING);
-$form_modify = filter_input(INPUT_POST, "modify", FILTER_SANITIZE_STRING);
 $form_cancel = filter_input(INPUT_POST, "cancel", FILTER_SANITIZE_STRING);
 
-if (isset($form_modify) && isset($form_flight_id) && isset($form_class_name)) {
-    echo $form_modify;
-} elseif (isset($form_cancel) && isset($form_flight_id) && isset($form_class_name)) {
+if (isset($form_cancel) && isset($form_flight_id) && isset($form_class_name)) {
     $client_id = get_client_id($_SESSION['email']);
     global $connection;
     $sql_pquery = "delete from RESERVATIONS
diff --git a/includes/modify.php b/includes/modify.php
new file mode 100644
index 0000000..aeb9741
--- /dev/null
+++ b/includes/modify.php
@@ -0,0 +1,45 @@
+<?php
+$flight_id = filter_input(INPUT_GET, "flight_id", FILTER_SANITIZE_STRING);
+$class_name = filter_input(INPUT_GET, "class_name", FILTER_SANITIZE_STRING);
+$client_id = get_client_id($_SESSION['email']);
+echo "<h1> Modification de la re&#769;servation sur le vol $flight_id</h2>\n";
+global $connection;
+$sql_pquery = "select NumCl, NumVol, Classe, NbPlaces
+               from RESERVATIONS
+       		   where NumCl = ? and NumVol = ? and Classe = ?";
+$connection->prepare_query($sql_pquery);
+$connection->prepared_query_bind_param("iss", array($client_id, $flight_id, $class_name));
+$connection->run_prepared_query();
+$connection->get_pquery_result();
+$rows = $connection->get_result_array();
+$connection->close_prepared_query();
+?>
+<form action="index.php" id="modify" method="post">
+  <input type="hidden" name="form" value="modify" />
+  <input type="hidden" name="flight_id" value="<?php echo $rows[0]['NumVol'] ?>" />
+  <label> Nombre de place(s) : </label>
+  <input type="number" name="nb_place" min="1" max="9" value="<?php echo $rows[0]['NbPlaces'] ?>" required/>
+  <label> Classe : </label>
+  <select size="1" name="class_name" required>
+   <optgroup label="Se&#769;lectionner une classe">
+  <?php
+  $sql_pquery = "select distinct Classe from DEFCLASSES where NumVol = ?";
+  global $connection;
+  $connection->prepare_query($sql_pquery);
+  $connection->prepared_query_bind_param("s", array($flight_id));
+  $connection->run_prepared_query();
+  $connection->get_pquery_result();
+  $classes = $connection->get_result_array();
+  $connection->close_prepared_query();
+  foreach ($classes as $class) {
+      if (strcmp($class[0], $rows[0]['Classe']) === 0) {
+          echo "<option value=\"$class[0]\" selected>$class[0]</option>\n";
+      } else {
+          echo "<option value=\"$class[0]\">$class[0]</option>\n";
+      }
+  }
+  ?>
+   </optgroup>
+  </select>
+  <input type="submit" value="Valider">
+</form>
diff --git a/includes/reservations.php b/includes/reservations.php
index 4314867..0416bd5 100644
--- a/includes/reservations.php
+++ b/includes/reservations.php
@@ -58,7 +58,7 @@ if (empty($rows)) {
                           <input type=\"hidden\" name=\"form\" value=\"reservations\" />
                           <input type=\"hidden\" name=\"flight_id\" value=\"" . $row['NumVol'] . "\" />
                           <input type=\"hidden\" name=\"class_name\" value=\"" . $row['Classe'] . "\" />
-                          <input type=\"submit\" name=\"modify\" value=\"Modifier\">
+                          <input type=\"button\" name=\"modify\" value=\"Modifier\" onClick=\"location.href='index.php?page=modify&flight_id=" . $row['NumVol'] . "&class_name=" . $row['Classe'] . "';\">
                           <input type=\"button\" name=\"cancel\" value=\"Annuler\" onClick=\"ConfirmCancelFlight()\">
                         </form>
                       </td>\n";
diff --git a/js/airpolytech.js b/js/airpolytech.js
index 0f5a17a..8e62887 100644
--- a/js/airpolytech.js
+++ b/js/airpolytech.js
@@ -1,6 +1,6 @@
 function ConfirmCancelFlight() {
     var oFormObject = document.forms['reservations'];
-    if (confirm("Voulez-vous vraiment annuler votre re&#769;servation sur le vol " + oFormObject.elements['flight_id'].value + " ?")) {
+    if (confirm("Voulez-vous vraiment annuler votre réservation sur le vol " + oFormObject.elements['flight_id'].value + " ?")) {
         var input = document.createElement("input");
         input.setAttribute("type", "hidden");
         input.setAttribute("name", "cancel");
-- 
2.34.1