Dancing-Landing/changeBooking.php at main · RubyFri/Dancing-Landing · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
    <title>Dancing Queens</title>
    <meta name = "description" content="Modify a booking with Dancing Queens">

    <link rel="stylesheet" href="stylesheet.css">
  </head>

  <body>
    <div id="navbar" class="navbar">
        <ul>
        <li><a href="index.php">Home Page</a></li>
        <li><a href="MeetDancers.php">Meet the Dancers</a></li>
          <li><a href="loginLanding.php">My Profile</a></li>
        </ul>
    </div>
    <!-- The ID input form-->
    <div id="form">
      <h1>Change Booking</h1>
      <form name="form" action="" method="POST">
        <p>
          <label> Booking ID: </label>
          <input type="number" id="id" name="id" required/>
        </p>
        <p>
           <label for="date">Booking Date</label>
           <input type="date" id="date" name="date" required value="<?php echo $date;?>"/>
        </p>
        <!-- time input box-->
        <p>
           <label for="time">Booking Time: </label>
           <input type="time" id="time" name="time" required value="<?php echo $time;?>"/>
        </p>
        <!-- dancer input box-->
        <p>
            <label for="Dancing-Queens">Dancers Selection: </label>
            <select id="dancers" name="dancers" required value="<?php echo $dancers;?>">
                <option value="" disabled selected>Select Dancers</option>
                <option value="sage">Sage</option>
                <option value="Ruby">Ruby</option>
                <option value="Yenta">Yenta</option>
                <option value="Sage & Yenta">Sage & Yenta</option>
                <option value="Sage & Ruby">Sage & Ruby</option>
                <option value="Yenta & Ruby">Yenta & Ruby</option>
                <option value="Yenta, Sage & Ruby">Yenta, Sage & Ruby</option>
            </select>
            <span id="error-message" style="color: red; display: none;">Please select a valid option.</span>
        </p>
          <input type="submit" id="button" value="Change Booking" />
        </form>
      </form>
    </div>

    <?php
        // Starts the session and gathers appropriate variables
        session_start();
              // should tell the user that they are logged in ontop of page
        if(isset($_SESSION['username'])){
          echo "<p>You are currently logged in as " . $_SESSION['username']. "</p>";
        }
        include "config.php";

        if ($_SERVER['REQUEST_METHOD'] == 'POST') {
          $username = $_SESSION['username'];
          $id = $_POST['id'];
          $date = $_POST["date"];
          $time = $_POST["time"];
          $dancers = $_POST["dancers"];

          if (!empty($date) && !empty($time) && !empty($dancers) && !empty($username) && !empty($id)){
            // Checks whether the booking is valid
            $check_sql_id = "SELECT * FROM bookings WHERE b_id = ? AND b_username = ?";
            $check_stmt_id = mysqli_prepare($conn, $check_sql_id);
            mysqli_stmt_bind_param($check_stmt_id, "is", $id, $username);
            mysqli_stmt_execute($check_stmt_id);
            mysqli_stmt_store_result($check_stmt_id);
            if (mysqli_stmt_num_rows($check_stmt_id) == 0) {
                echo "Booking not found. It was either made under a different username or not at all. Please check your bookings for further information.";
                exit();
            }
            else {
                $sql = "UPDATE bookings
                SET b_date = ?, b_time = ?, b_dancers = ?
                WHERE b_id = ? AND b_username = ?";
                $stmt = mysqli_prepare($conn, $sql);
                mysqli_stmt_bind_param($stmt, "sssis", $date, $time, $dancers, $id, $username);
                if (mysqli_stmt_execute($stmt)) {
                    echo "Booking altered!";
                    exit();
                }
                else {
                    echo "Booking could not be altered. Please try again.";
                    exit();
                }
          }
        }
      }
    ?>

  </body>
</html>