Subversion Repositories cheapmusic

Rev

Rev 47 | Rev 52 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
45 - 1
<?php
2
include_once('php/clsLibGTIN.php');
3
include_once('php/constants.php');
4
 
5
error_reporting(E_ALL);
6
 
7
  // add new entry to wishlist
8
function addWishlist($wlArr) {
50 - 9
    $nul = 'NULL';
45 - 10
    $conn = MySessionHandler::getDBSessionId();
11
 
12
    $created = mysqli_real_escape_string($conn, time());
13
    $modified = $created;
14
 
15
    $uid = $_SESSION['sessData']['userID'];
50 - 16
    $mid = isset($wlArr->{'mid'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'mid'}) . "'" : "NULL";
17
    $rid = isset($wlArr->{'rid'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'rid'}) . "'" : "NULL";
18
    $barcode = (empty($wlArr->{'barcode'}) ? "NULL" : "'" . mysqli_real_escape_string($conn, $wlArr->{'barcode'}) . "'");
19
    $title = isset($wlArr->{'title'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'title'}) . "'" : "NULL";
20
    $artist = isset($wlArr->{'artist'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'artist'}) . "'" : "NULL";
45 - 21
    $format = 'Any';
46 - 22
    $currency = 'USD'; //bugbug
45 - 23
    $price = 'NULL';
50 - 24
    $url = isset($wlArr->{'url'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'url'}) . "'" : "NULL";
25
    $thumbnail = isset($wlArr->{'thumbnail'}) ? "'" . mysqli_real_escape_string($conn, $wlArr->{'thumbnail'}) . "'" : "NULL";
45 - 26
 
27
    $sql = "INSERT
28
            INTO wishlist
50 - 29
            (id, created, modified, uid, mid, rid, barcode, title, artist, format, currency, price, url, thumbnail)
30
            VALUES (NULL, '$created', '$modified', '$uid', " . $mid . ", " . $rid . ", " . $barcode . ", " . $title . ", " . $artist . ", '$format', '$currency', '$price', " . $url . ", " . $thumbnail . ")";
45 - 31
 
32
    if ($result = mysqli_query($conn, $sql)) {
46 - 33
        $_SESSION['wishlistAdd'] = "<div class=\"alert alert-success alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>" . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  has been added to the wishlist.</div>";
45 - 34
    } else {
35
        $error = mysqli_errno($conn);
36
        if ($error == 1062) {
46 - 37
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-warning alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>" . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  is already on the wishlist.</div>";
45 - 38
        } else {
46 - 39
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-danger alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>Error. Could not add " . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  to the wishlist.</div>";
45 - 40
            error_log("MySQL Read Wishlist SQL: " . $sql);
41
            error_log("MySQL Write Wishlist Error: " . mysqli_error($conn) . " (" . $error . ")");
42
        }
43
    }
44
 
45
    return;
46
}
47
 
46 - 48
function checkWishlist($type, $id) {
45 - 49
    $conn = MySessionHandler::getDBSessionId();
50
 
51
    $uid = $_SESSION['sessData']['userID'];
52
 
53
    $sql = "SELECT id
54
            FROM wishlist
46 - 55
            WHERE uid = '$uid' and " . ($type == "master" ? "mid" : "rid") . " = '$id'";
45 - 56
 
57
    if ($result = mysqli_query($conn, $sql)) {
58
        if (mysqli_num_rows($result) > 0) {
59
            return true;
60
        }
61
    } else if (mysqli_errno($conn)) {
62
       error_log("MySQL Read Wishlist SQL: " . $sql);
63
       error_log("MySQL Read Wishlist Error: " . mysqli_error($conn) . " (" . mysqli_errno($conn) . ")");
64
       return true;
65
    }
66
 
67
    return false;
46 - 68
}
69
 
70
function getWishlist() {
71
    $str = '';
72
    $conn = MySessionHandler::getDBSessionId();
73
 
74
    $uid = $_SESSION['sessData']['userID'];
75
 
76
    $sql = "SELECT *
77
            FROM wishlist
78
            WHERE uid = '$uid'";
79
 
80
    if ($result = mysqli_query($conn, $sql)) {
81
        if (mysqli_num_rows($result) > 0) {
82
        	$str .= "<table id=\"wishlistTable\" class=\"table table-striped table-condensed small\">";
83
	        $str .= "<thead class=\"thead-dark sticky-top\">";
84
	        $str .= "<tr><th>Image</th>";
47 - 85
	        $str .= "<th class=\"text-left cursor-pointer\" onclick=\"sortTable('wishlistTable', 1, 'text')\">Artist<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
86
	        $str .= "<th class=\"text-left cursor-pointer\" onclick=\"sortTable('wishlistTable', 2, 'text')\">Title<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
50 - 87
	        $str .= "<th class=\"cursor-pointer\" onclick=\"sortTable('wishlistTable', 3, 'text')\">Barcode<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
88
	        $str .= "<th class=\"cursor-pointer\" onclick=\"sortTable('wishlistTable', 4, 'text')\">Format<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
46 - 89
	        $str .= "<th class=\"d-none\">Ceiling Price Number</th>";
50 - 90
	        $str .= "<th class=\"cursor-pointer\" onclick=\"sortTable('wishlistTable', 5, 'currency')\">Ceiling Price<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
46 - 91
	        $str .= "<th></th><th></th><th></th><th></th></tr></thead>";
92
    	    $str .= "<tbody>";
47 - 93
 
94
    	    $cnt = 0;
46 - 95
 
96
            while($row = mysqli_fetch_assoc($result)) {
47 - 97
                ++$cnt;
46 - 98
                $artist = (empty($row["artist"]) ? "Various" : $row["artist"]);
99
                $altText = "Image for " . $row['title'] . " by " . $artist;
100
                $price = print_monetary($row['price'], $row['currency']);
47 - 101
                $searchTitle = 'Searching for:<br>' . $row['title'] . " by " . $artist;
50 - 102
                if ($row['barcode'] !== null) {
103
                    $searchTitle .= " (" . displayBarcode($row['barcode']) . ")";
104
                }
47 - 105
 
106
                $str .= "<form method=\"post\" action=\"/index.php\">";
107
                $str .= "  <input type=\"hidden\" name=\"sessionTab\" value=\"" . MySessionHandler::getSessionTab() . "\">";
108
                $str .= "  <input type=\"hidden\" name=\"discogsTitle\" value=\"" . $row['title'] . "\">";
109
                $str .= "  <input type=\"hidden\" name=\"discogsArtist\" value=\"" . $row['artist'] . "\">";
50 - 110
                $str .= "  <input type=\"hidden\" name=\"discogsBarcode\" value=\"" . $row['barcode'] . "\">";
46 - 111
 
112
                $str .= "<tr>";
47 - 113
        		$str .= "<td><img class=\"img-fluid wishlist-img\" src=\"" . $row["thumbnail"] . "\" alt=\"$altText\"></td>";
46 - 114
        		$str .= "<td>$artist</td>";
115
        		$str .= "<td>" . $row['title'] . "</td>";
50 - 116
        		$str .= "<td>" . displayBarcode($row['barcode']) . "</td>";
46 - 117
        		$str .= "<td>" . $row['format'] . "</td>";
118
        		$str .= "<td class=\"d-none\">" . $row['price'] . "</td>";
119
        		$str .= "<td>" . $price . "</td>";
47 - 120
        		$str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Edit\"><i class=\"fas fa-edit btn-wishlist\"></i></button></td>";
121
        		$str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Delete\"><i class=\"fas fa-window-close btn-wishlist btn-wishlist-delete\"></i></button></td>";
122
        		$str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Information\"><a href=\"" . $row['url'] . "\" target=\"_blank\"><i class=\"fas fa-info-circle btn-wishlist\"</a></button></td>";
123
                $str .= "<td><button type=\"submit\" name=\"submit\" value=\"discogsSearch\" class=\"btn rounded\" onclick=\"progressBar('" . $searchTitle . "');\"><i class=\"fas fa-search btn-wishlist\" title=\"Search for Sales Offers\" data-toggle=\"tooltip\" data-placement=\"left\"></i></button></td>";
46 - 124
 
125
        		$str .= "</tr>";
47 - 126
                $str .= "</form>";
46 - 127
            }
128
 
129
            $str .= "</tbody>";
130
            $str .= "</table>";
131
        }
132
    } else if (mysqli_errno($conn)) {
133
       error_log("MySQL Read Wishlist SQL: " . $sql);
134
       error_log("MySQL Read Wishlist Error: " . mysqli_error($conn) . " (" . mysqli_errno($conn) . ")");
135
    }
136
 
137
    return $str;
45 - 138
}