64 lines
5.1 KiB
PHP
64 lines
5.1 KiB
PHP
<?php
|
|
|
|
if (isset($_COOKIE['username']) && isset($_COOKIE['pass'])) {
|
|
|
|
require "ConnexionBDD.php";
|
|
if (!$error) {
|
|
$query_check_cookie = $bdd->prepare('SELECT * FROM users NATURAL JOIN roles NATURAL JOIN roles_has_permissions NATURAL JOIN permissions WHERE code_permission="SFx1" AND username=:user AND password_user=:password_user;');
|
|
$query_check_cookie->execute(['user' => $_COOKIE['username'], 'password_user' => $_COOKIE['pass']]);
|
|
if ($query_check_cookie->rowCount() == 1){
|
|
if (isset($_POST["ID_company"]) && isset($_POST["action"])){
|
|
$ID_company = $_POST["ID_company"];
|
|
|
|
if ($_POST["action"] == "delete"){
|
|
try {
|
|
$query_delete_company = $bdd->prepare('SET @ID_company=:ID_company;DELETE FROM companies_located WHERE ID_company=@ID_company AND 0=(SELECT EXISTS (SELECT * FROM internships WHERE ID_company=@ID_company));DELETE FROM evaluate WHERE ID_company=@ID_company AND 0=(SELECT EXISTS (SELECT * FROM internships WHERE ID_company=@ID_company));DELETE FROM manage_company WHERE ID_company=@ID_company AND 0=(SELECT EXISTS (SELECT * FROM internships WHERE ID_company=@ID_company));DELETE FROM companies WHERE ID_company=@ID_company AND 0=(SELECT EXISTS (SELECT * FROM internships WHERE ID_company=@ID_company));');
|
|
$query_delete_company->execute(['ID_company' => $ID_company]);
|
|
echo "true";
|
|
} catch (Exception $e) {
|
|
echo "false";
|
|
}
|
|
}
|
|
}
|
|
if (isset($_POST["action"]) && isset($_POST["name"]) && isset($_POST["activity_sector"]) && isset($_POST["nb_intern_cesi"]) && isset($_POST["email"]) && isset($_POST["note"]) && isset($_POST["localisation"]) && isset($_POST["visibility"])) {
|
|
if ($_POST["action"] == "add"){
|
|
try {
|
|
$query_add_company = $bdd->prepare('INSERT INTO companies VALUES (NULL, :name, :activity_sector, :nb_intern_CESI, :visibility, :email);');
|
|
$query_add_company->execute(['name' => $_POST["name"], 'activity_sector' => $_POST["activity_sector"], 'nb_intern_CESI' => $_POST["nb_intern_cesi"], 'visibility' => $_POST["visibility"], 'email' => $_POST["email"]]);
|
|
$query_add_company = $bdd->prepare('SELECT LAST_INSERT_ID() as "ID_company";');
|
|
$query_add_company->execute();
|
|
$ID_add_company = $query_add_company->fetchALL(PDO::FETCH_OBJ)[0]->ID_company;
|
|
$query_add_company = $bdd->prepare('INSERT INTO companies_located VALUES (:ID_localisation, :ID_company);');
|
|
$query_add_company->execute(['ID_localisation' => $_POST["localisation"], 'ID_company' => $ID_add_company]);
|
|
$query_add_company = $bdd->prepare('INSERT INTO evaluate VALUES (:ID_company, (SELECT ID_user FROM users WHERE username = :user), :note);');
|
|
$query_add_company->execute(['ID_company' => $ID_add_company, 'user' => $_COOKIE['username'], 'note' => $_POST['note']]);
|
|
echo "<script>location.href='/gestion_entreprises.php';</script>";
|
|
} catch (Exception $e) {
|
|
echo "false";
|
|
}
|
|
}
|
|
}
|
|
if (isset($_POST["action"]) && isset($_POST["name"]) && isset($_POST["activity_sector"]) && isset($_POST["nb_intern_cesi"]) && isset($_POST["email"]) && isset($_POST["note"]) && isset($_POST["localisation"]) && isset($_POST["visibility"]) && isset($_POST["ID_company"])){
|
|
if ($_POST["action"] == "edit"){
|
|
try {
|
|
$ID_company = $_POST["ID_company"];
|
|
$query_edit_company = $bdd->prepare('UPDATE evaluate SET note = :note WHERE ID_company = :ID_company;');
|
|
$query_edit_company->execute(['note' => $_POST['note'], 'ID_company' => $ID_company]);
|
|
|
|
$query_edit_company = $bdd->prepare('UPDATE companies_located SET ID_localisation = :localisation WHERE ID_company = :ID_company;');
|
|
$query_edit_company->execute(['localisation' => $_POST['localisation'], 'ID_company' => $ID_company]);
|
|
|
|
$query_edit_company = $bdd->prepare('UPDATE companies SET name_company = :name, activity_sector_company = :sector, nb_intern_cesi_company = :nb_intern, visibility_company = :visibility, email_company = :email WHERE ID_company=:ID_company;');
|
|
$query_edit_company->execute(['name'=> $_POST['name'], 'sector' => $_POST['activity_sector'], 'nb_intern' => $_POST['nb_intern_cesi'], 'visibility' => $_POST['visibility'], 'email' => $_POST['email'], 'ID_company' => $ID_company]);
|
|
|
|
echo "<script>location.href='/gestion_entreprises.php';</script>";
|
|
} catch (Exception $e) {
|
|
echo $e;
|
|
}
|
|
} else {
|
|
echo "error";
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |