48 lines
3.5 KiB
PHP
48 lines
3.5 KiB
PHP
<?php
|
|
if (isset($_COOKIE['username']) && isset($_COOKIE['pass'])) {
|
|
require "ConnexionBDD.php";
|
|
if (!$error) {
|
|
$query_check_cookie = $bdd->prepare('SELECT * FROM users NATURAL JOIN roles NATURAL JOIN roles_has_permissions NATURAL JOIN permissions WHERE code_permission="SFx1" AND username=:user AND password_user=:password_user;');
|
|
$query_check_cookie->execute(['user' => $_COOKIE['username'], 'password_user' => $_COOKIE['pass']]);
|
|
if ($query_check_cookie->rowCount() == 1){
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') { /*Seulement si la method est en POST*/
|
|
if (isset($_POST["action"]) && isset($_POST["ID_internship"])){ /*Vérification de l'existance des paramètres*/
|
|
$action = $_POST["action"]; /*Récupération des paramètres*/
|
|
$ID_internship = $_POST["ID_internship"]; /*Récupération des paramètres*/
|
|
|
|
$query_check_wishlist = $bdd->prepare('SELECT ID_user FROM users NATURAL JOIN wishlist INNER JOIN internships ON wishlist.ID_internship=internships.ID_internship WHERE username=:user AND wishlist.ID_internship=:id_internship;');
|
|
$query_check_wishlist->execute(['user' => $_COOKIE["username"], 'id_internship' => $ID_internship]); /*Remplissage de la requete avec les données*/
|
|
$results_check_wishlist = $query_check_wishlist->fetchALL(PDO::FETCH_OBJ); /*Retour un résultat sous forme d'objet*/
|
|
|
|
if ($action == "remove"){
|
|
if ($query_check_wishlist->rowCount() == 1){
|
|
$query_del_wishlist = $bdd->prepare('DELETE FROM wishlist WHERE ID_internship=:id_internship AND ID_user=:id_user;');
|
|
$query_del_wishlist->execute(['id_internship' => $ID_internship, 'id_user' => $results_check_wishlist[0]->ID_user, ]);
|
|
echo 'remove_ok';
|
|
} else { echo "remove_error";}
|
|
} else if ($action == "add"){
|
|
if ($query_check_wishlist->rowCount() == 0){
|
|
|
|
$query_get_id_user = $bdd->prepare('SELECT ID_user FROM users WHERE username=:user LIMIT 1;');
|
|
$query_get_id_user->execute(['user' => $_COOKIE["username"]]); /*Remplissage de la requete avec les données*/
|
|
$results_get_id_user = $query_get_id_user->fetchALL(PDO::FETCH_OBJ); /*Retour un résultat sous forme d'objet*/
|
|
|
|
if ($query_get_id_user->rowCount() == 1){
|
|
$query_del_wishlist = $bdd->prepare('INSERT INTO wishlist (ID_internship, ID_user) VALUES (:id_internship, :id_user);');
|
|
$query_del_wishlist->execute(['id_internship' => $ID_internship, 'id_user' => $results_get_id_user[0]->ID_user, ]);
|
|
echo 'add_ok';
|
|
} else {echo 'add_error';}
|
|
|
|
|
|
} else { echo "false";}
|
|
}
|
|
$bdd = null; /*Fin de connexion*/
|
|
}
|
|
}
|
|
} else {
|
|
echo "<script>location.href='/';</script>";
|
|
}
|
|
}
|
|
}
|
|
|
|
?>
|