index.php

<?php
@require_once 'functions.php';

$request_id = "";

if (isset($_GET['id'])) {
    $request_id = clean_str($_GET['id']);
    $id = $request_id;
} else {
    echo template_header("Welcome to the wonderful world of poodling", "foo");
    echo show_poodles();
    echo "<h2> create a new poodle?</h2>";

    echo create_form();

    echo template_footer();    

    return;
}

$conn = get_dbconnection();
$res = pg_prepare($conn, "query", "SELECT * FROM pizza_order WHERE user_uuid=$1 OR admin_uuid=$1");
$res = pg_execute($conn, "query", array($id));
$row = pg_fetch_assoc($res);

if( !$row ) {
    echo template_header("no such poodle", "osd");
        
    echo "<h2>No Such Poodle</h2>";
    echo create_unicornpoodle();
    
    echo "<p><a href=\"index.php?id=". $todays_id . "\" />todays poodle is " . $todays_id . "</a></p>";
    template_footer();
    return;
}

$driver = $row['driver'];
$collector = $row['collector'];
$is_admin = $row['admin_uuid'] == $id;
$order_id = $row['id'];
$pizza_place = $row['pizza_place'];
$pickup_time = $row['pickup_time'];
$order_time = $row['order_time'];
$order_title = $row['order_title'];


if (isset($_POST['ADD']) ) {
  $username =clean_str($_POST['username']);
  $pizza_id =clean_str($_POST['pizza_id']);
  $comment =clean_str($_POST['comment']);
  $price =clean_str($_POST['price']);

  $res = pg_prepare($conn, "add", "INSERT INTO pizza(order_id, username, pizza_id, comment, price) values ($1, $2, $3, $4, $5)");
  check_error($res);
  $res = pg_execute($conn, "add", array($order_id, $username, $pizza_id, $comment, $price));
  check_error($res);

} else if (isset($_POST['EDIT']) ) {
  $username =clean_str($_POST['username']);
  $pizza_id =clean_str($_POST['pizza_id']);
  $comment =clean_str($_POST['comment']);
  $price =clean_str($_POST['price']);
  $paid = (isset($_POST['paid'])) ? "1" : "0";
  //    echo "paid is $paid";
  $pid =clean_str($_POST['pid']);

  $res = pg_prepare($conn, "update", "UPDATE pizza SET username=$1, pizza_id=$2, comment=$3, price=$4, paid=$5  WHERE id=$6");
  check_error($res);
  $res = pg_execute($conn, "update", array($username, $pizza_id, $comment, $price, $paid, $pid));
  check_error($res);

} else if (isset($_POST['DELETE']) ) {
  $pid =clean_str($_POST['pid']);

  $res = pg_prepare($conn, "delete", "DELETE FROM pizza WHERE id=$1");
  check_error($res);
  $res = pg_execute($conn, "delete", array($pid));
  check_error($res);
} else if (isset($_POST['EDIT_ORDER']) ) {

  $collector=clean_str($_POST['collector']);
  $driver=clean_str($_POST['driver']);

  $pickup_time = get_timestamp(clean_str($_POST['pickup_time']));
  $order_time = get_timestamp(clean_str($_POST['order_time']));

  $res = pg_prepare($conn, "editOrder", "UPDATE pizza_order SET driver=$1, collector=$2, pickup_time=$3, order_time=$4  WHERE id=$5");
  check_error($res);
  $res = pg_execute($conn, "editOrder", array($driver, $collector, $pickup_time, $order_time, $order_id));
  check_error($res);
}

$res = pg_prepare($conn, "pizzas", "SELECT * FROM pizza WHERE order_id=$1 ORDER BY pizza_id");
check_error($res);
$res = pg_execute($conn, "pizzas", array($order_id));
check_error($res);

if ($is_admin) {
    echo template_header($order_title, $id);
  echo "<h2>Administer Orders for $order_title</h2>";
  echo pizza_place($conn, $pizza_place);
  echo "<hr />";
  echo edit_order($row);
  echo "<hr />";
  echo "<table>";
  echo "<tr>";
  cell_h("&nbsp;");
  cell_h("username");
  cell_h("pizza_id");
  cell_h("comment");
  cell_h("price");
  cell_h( "paid?");

  echo "</tr>";
  $i = 0;
  while ($row = pg_fetch_assoc($res)) {
    echo edit_pizza($row, $id, ++$i);
  }
  cell("&nbsp;");
  cell("&nbsp;");
  cell("<b>total</b>");
  cell("$i pizzaer til ");


  cell("<b>" .  get_total($conn, $order_id) . "</b>");

  cell("(" . get_paid($conn, $order_id) . ")");
  cell("&nbsp;");

  echo "</table>";
    
  echo template_footer("let's poodle");
} else {
    
    $closed = isset($pickup_time);
    echo template_header($order_title, $id);
  
  echo "<h2>$order_title</h2>";
  if ($closed) {
      echo "<h1>Closed for orders </h1>";
      echo "Pick up order: " . strftime("%R (%e. %B %Y)", strtotime($pickup_time));
  }
  echo pizza_place($conn, $pizza_place);
  echo "order at: " .  date("H:i:s", strtotime($order_time))  . "<br />";
  

  echo $driver . " is driving and " . $collector . " is collecting ze monies";  
  echo "<h2>Current Orders</h2>";
  echo '<p style="color:red" >BEWARE the person with the longest comment line, or annoyingly complex comment line automatically accepts responsibility for calling the pizzaplace </p>';
  echo "<p>The following orders have been placed:</p>";
  
  echo "<table class='ordertable'>\n";
  echo "<tr>";
  cell_h("username");
  cell_h("pizza_id");
  cell_h("comment");
  cell_h("price");
  cell_h( "paid?");
  echo "</tr>";

  while ($row = pg_fetch_assoc($res)) {
    echo "<tr>\n";
    cell($row['username']);
    cell($row['pizza_id']);
    cell($row['comment']);
    cell($row['price']);
    cell( $row['paid']=='t' ? "paid" : "not paid");
    echo "</tr>\n";
  }
  echo "</table>\n";
  if (!$closed) {  
      echo "<h2>Place Your Order</h2>";
      echo pizza_adder($id);
  }
  echo template_footer();
}

pg_close($conn);
?>