From 7319816b7c712cd16d6e83bcd617c95943b79be6 Mon Sep 17 00:00:00 2001
From: Aqua-sama <aqua@iserlohn-fortress.net>
Date: Thu, 29 Apr 2021 20:43:35 +0300
Subject: CRUD reports

---
 bug/update.php | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 bug/update.php

(limited to 'bug/update.php')

diff --git a/bug/update.php b/bug/update.php
new file mode 100644
index 0000000..f27cdd4
--- /dev/null
+++ b/bug/update.php
@@ -0,0 +1,35 @@
+<?php
+require 'config.php';
+require_once(TEMPLATES_PATH . "/header.php");
+require_once(TEMPLATES_PATH . "/panel.php");
+require_once(LIBRARY_PATH . "/functions.php");
+
+if(!isset($_GET['id']) || $_GET['id'] == "") {
+    echo "<div id='error'>No bug selected, redirecting to index...</div>";
+    header('Refresh: 2; URL=index.php');
+
+} else if(!isset($_SESSION['user_id']) || $_SESSION['user_id'] == "") {
+    echo "<div id='error'>Not logged in, redirecting to index...</div>";
+    header('Refresh: 2; URL=index.php');
+
+} else {
+    $conn = new PDO($config['db']['dsn'], $config['db']['username'], $config['db']['password']);
+
+    $query = $conn->prepare("UPDATE bugs SET title=:title, description=:description WHERE id=:id");
+    $query->bindParam(':title', $_POST['title']);
+    $query->bindParam(':description', $_POST['description']);
+    $query->bindParam(':id', $_GET['id']);
+    
+    if ($query->execute()) {
+        echo "Data is updated\n";
+    } else {
+        echo "User must have sent wrong inputs\n";
+    }
+
+    header("Refresh: 2; URL=view.php?id=$_GET[id]");
+
+}
+
+require_once(TEMPLATES_PATH . "/footer.php");
+?>
+
-- 
cgit v1.2.1