Subversion Repositories cheapmusic

<?php
include_once('php/clsLibGTIN.php');
include_once('php/constants.php');

error_reporting(E_ALL);

  // add new entry to wishlist
function addWishlist($wlArr) {
    $conn = MySessionHandler::getDBSessionId();

    $created = mysqli_real_escape_string($conn, time());
    $modified = $created;

    $uid = $_SESSION['sessData']['userID'];
    $mid = isset($wlArr->{'mid'}) ? mysqli_real_escape_string($conn, $wlArr->{'mid'}) : 'NULL';
    $rid = isset($wlArr->{'rid'}) ? mysqli_real_escape_string($conn, $wlArr->{'rid'}) : 'NULL';
    $title = mysqli_real_escape_string($conn, $wlArr->{'title'});
    $artist = mysqli_real_escape_string($conn, $wlArr->{'artist'});
    $format = 'Any';
    $currency = 'USD'; //bugbug
    $price = 'NULL';
    $url = mysqli_real_escape_string($conn, $wlArr->{'url'});
    $thumbnail = mysqli_real_escape_string($conn, $wlArr->{'thumbnail'});

    $sql = "INSERT
            INTO wishlist
            (id, created, modified, uid, mid, rid, title, artist, format, currency, price, url, thumbnail)
            VALUES (NULL, '$created', '$modified', '$uid', '$mid', '$rid', '$title', '$artist', '$format', '$currency', '$price', '$url', '$thumbnail')";

    if ($result = mysqli_query($conn, $sql)) {
        $_SESSION['wishlistAdd'] = "<div class=\"alert alert-success alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>" . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  has been added to the wishlist.</div>";
    } else {
        $error = mysqli_errno($conn);
        if ($error == 1062) {
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-warning alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>" . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  is already on the wishlist.</div>";
        } else {
            $_SESSION['wishlistAdd'] = "<div class=\"alert alert-danger alert-dismissible my-0\"><button type=\"button\" class=\"close\" data-dismiss=\"alert\">&times;</button>Error. Could not add " . $wlArr->{'title'} . " by " . $wlArr->{'artist'} . "  to the wishlist.</div>";
            error_log("MySQL Read Wishlist SQL: " . $sql);
            error_log("MySQL Write Wishlist Error: " . mysqli_error($conn) . " (" . $error . ")");
        }
    }

    return;
}

function checkWishlist($type, $id) {
    $conn = MySessionHandler::getDBSessionId();

    $uid = $_SESSION['sessData']['userID'];

    $sql = "SELECT id
            FROM wishlist
            WHERE uid = '$uid' and " . ($type == "master" ? "mid" : "rid") . " = '$id'";

    if ($result = mysqli_query($conn, $sql)) {
        if (mysqli_num_rows($result) > 0) {
            return true;
        }
    } else if (mysqli_errno($conn)) {
       error_log("MySQL Read Wishlist SQL: " . $sql);
       error_log("MySQL Read Wishlist Error: " . mysqli_error($conn) . " (" . mysqli_errno($conn) . ")");
       return true;
    }

    return false;
}

function getWishlist() {
    $str = '';
    $conn = MySessionHandler::getDBSessionId();

    $uid = $_SESSION['sessData']['userID'];

    $sql = "SELECT *
            FROM wishlist
            WHERE uid = '$uid'";

    if ($result = mysqli_query($conn, $sql)) {
        if (mysqli_num_rows($result) > 0) {
                $str .= "<table id=\"wishlistTable\" class=\"table table-striped table-condensed small\">";
                $str .= "<thead class=\"thead-dark sticky-top\">";
                $str .= "<tr><th>Image</th>";
                $str .= "<th class=\"text-left cursor-pointer\" onclick=\"sortTable('wishlistTable', 1, 'text')\">Artist<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
                $str .= "<th class=\"text-left cursor-pointer\" onclick=\"sortTable('wishlistTable', 2, 'text')\">Title<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
                $str .= "<th class=\"cursor-pointer\" onclick=\"sortTable('wishlistTable', 3, 'text')\">Format<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
                $str .= "<th class=\"d-none\">Ceiling Price Number</th>";
                $str .= "<th class=\"cursor-pointer\" onclick=\"sortTable('wishlistTable', 4, 'currency')\">Ceiling Price<span class=\"float-right\"><i class=\"fas fa-caret-up\"</i><i class=\"fas fa-caret-down\"></span></th>";
                $str .= "<th></th><th></th><th></th><th></th></tr></thead>";
            $str .= "<tbody>";
            
            $cnt = 0;

            while($row = mysqli_fetch_assoc($result)) {
                ++$cnt;
                $artist = (empty($row["artist"]) ? "Various" : $row["artist"]);
                $altText = "Image for " . $row['title'] . " by " . $artist;
                $price = print_monetary($row['price'], $row['currency']);
                $searchTitle = 'Searching for:<br>' . $row['title'] . " by " . $artist;

                $str .= "<form method=\"post\" action=\"/index.php\">";
                $str .= "  <input type=\"hidden\" name=\"sessionTab\" value=\"" . MySessionHandler::getSessionTab() . "\">";
                $str .= "  <input type=\"hidden\" name=\"discogsTitle\" value=\"" . $row['title'] . "\">";
                $str .= "  <input type=\"hidden\" name=\"discogsArtist\" value=\"" . $row['artist'] . "\">";
                
                $str .= "<tr>";
                        $str .= "<td><img class=\"img-fluid wishlist-img\" src=\"" . $row["thumbnail"] . "\" alt=\"$altText\"></td>";
                        $str .= "<td>$artist</td>";
                        $str .= "<td>" . $row['title'] . "</td>";
                        $str .= "<td>" . $row['format'] . "</td>";
                        $str .= "<td class=\"d-none\">" . $row['price'] . "</td>";
                        $str .= "<td>" . $price . "</td>";
                        $str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Edit\"><i class=\"fas fa-edit btn-wishlist\"></i></button></td>";
                        $str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Delete\"><i class=\"fas fa-window-close btn-wishlist btn-wishlist-delete\"></i></button></td>";
                        $str .= "<td><button class=\"btn rounded\" type=\"button\" data-toggle=\"tooltip\" title=\"Information\"><a href=\"" . $row['url'] . "\" target=\"_blank\"><i class=\"fas fa-info-circle btn-wishlist\"</a></button></td>";
                $str .= "<input type=\"hidden\" name=\"discogsSearchTerm\" value=\"" . $row['artist'] . " " . $row['title'] . "\">";
                $str .= "<td><button type=\"submit\" name=\"submit\" value=\"discogsSearch\" class=\"btn rounded\" onclick=\"progressBar('" . $searchTitle . "');\"><i class=\"fas fa-search btn-wishlist\" title=\"Search for Sales Offers\" data-toggle=\"tooltip\" data-placement=\"left\"></i></button></td>";
                        
                        $str .= "</tr>";
                $str .= "</form>";
            }
            
            $str .= "</tbody>";
            $str .= "</table>";
        }
    } else if (mysqli_errno($conn)) {
       error_log("MySQL Read Wishlist SQL: " . $sql);
       error_log("MySQL Read Wishlist Error: " . mysqli_error($conn) . " (" . mysqli_errno($conn) . ")");
    }

    return $str;
}