Warning : Cannot modify header information - headers already sent by (output started at /var/www/jonas-eriksen.dk/pic/private/index.php:1) in /var/www/jonas-eriksen.dk/pic/private/index.php on line 215 brugerlisten ";
} elseif (!$user->getUser($_GET['user'])) {
} else {
$profile = $user->getUser($_GET['user']);
$pictureUrl = '/static/profile-picture/' . $profile[0] . '.jpg';
if ($_POST) {
if (isset($_POST['cross'])) {
$log->addLog($_SESSION['userId'], "Opdateret abonnoment betalt", "Admin", "/user/profile.php?user=" . $_GET['user']);
$user->updateSubcription($_POST['cross'], 1);
$admin->redirect('/user/profile.php?user=' . $_GET['user']);
}
if (isset($_POST['checkmark'])) {
$log->addLog($_SESSION['userId'], "Opdateret abonnoment ikke betalt", "Admin", "/user/profile.php?user=" . $_GET['user']);
$user->updateSubcription($_POST['checkmark'], 0);
$admin->redirect('/user/profile.php?user=' . $_GET['user']);
}
if (isset($_POST['point']) && isset($_POST['crossten'])) {
$log->addLog($_SESSION['userId'], "Tilføjede event", "Event", "/user/profile.php?user=" . $_GET['user']);
$event->newEvent(DATE('Y'), $_GET['user'], $_POST['point'], $_POST['crossten'], $_POST['weaponSelect']);
$user->changeEventNumber($_GET['user'], -1);
$admin->redirect('/user/profile.php?user=' . $_GET['user']);
}
if (isset($_POST['amount'])) {
$log->addLog($_SESSION['userId'], "Tilføjede " . $_POST['amount'] . " point til brugeren", "Admin", "/user/profile.php?user=" . $_GET['user']);
$user->changeEventNumber($_GET['user'], $_POST['amount']);
$admin->redirect('/user/profile.php?user=' . $_GET['user']);
}
if (isset($_POST['consentButton'])) {
getConsent($profile, $logoName, $companySlogan, $companyLink, $companyName);
}
if (isset($_POST['exportButton'])) {
getReport($user, $admin, $event, $_GET['user'], $_SESSION['userId'], $encryptKey, $logoName);
$log->addLog($_SESSION['userId'], "Eksporterende report for brugeren " . $profile[3], "Admin", "/user/profile.php?user=" . $_GET['user']);
}
}
include('../static/header.php');
?>
Profil for " . $profile[3];
if ($profile[10]) {
echo "
(Slettet)
";
}
echo "";
if ($admin->admin_level(0)) {
echo "
(Opdater profil) ";
}
if (is_file('../static/profile-picture/' . $profile[0] . '.jpg') && file_exists('../static/profile-picture/' . $profile[0] . '.jpg')) {
?>
';
}
if ($admin->admin_level(1)) {
$user->getSKV($_GET['user']);
?>
admin_level(1)) {
echo "CPR ";
} ?>
Skyttenummer
Navn
Skytteklasse
admin_level(0)) {
?>
Adresse
Fødselsdag
Telefon
Email
Indmeldelses år
Må tages billede af
Har egent våben
Kontigent betalt
Skydninger tilbage
admin_level(1)) {
$cpr = decrypt($profile[2], $encryptKey);
echo "$cpr ";
}
echo "$profile[1] ";
echo "$profile[3] ";
echo "$profile[17] ";
if ($admin->admin_level(0)) {
echo "$profile[4] ";
echo "" . date_format(new DateTime($profile[5]), 'd-m-Y') . " ";
echo "$profile[9] ";
echo "$profile[6] ";
echo "$profile[13] ";
if ($profile[7] == 1) {
echo "Nej ";
} elseif ($profile[11] == 1) {
echo "Ja, gevær ";
} elseif ($profile[11] == 2) {
echo "Ja, pistol ";
} else {
echo "Ja, både gevær og pistol ";
}
echo "";
}
echo "$profile[12] ";
echo " ";
?>
Træningsresultater i $getYear";
foreach ($event->getYearsForUser($_GET['user']) as $year) {
?>
getYearCountForUser($year[0], $_GET['user']) ?>
Point
Krydsti
Type
Dato
Point
Krydsti
Type
Dato
";
echo "$row[0] ";
echo "$row[1] ";
echo "$row[2] ";
echo "$row[3] ";
echo "" . date("d/m/Y", strtotime($row[9])) . " ";
echo "Edit
Class.user.php 0000644 00000023525 15233472040 0007306 0 ustar 00 db = $DB_con;
}
public function getAllUsers($show)
{
try {
if ($show == 0) {
$stmt = $this->db->prepare("SELECT id, cpr, shooterId, fullname, adress, birthday, phone, email, allowPicture, newShooter, subscriptionPaid FROM result_users WHERE isDeleted = 0 ORDER BY fullname ASC");
} elseif ($show == 1) {
$stmt = $this->db->prepare("SELECT id, cpr, shooterId, fullname, adress, birthday, phone, email, allowPicture, newShooter, subscriptionPaid, isDeleted FROM result_users ORDER BY fullname ASC");
}
$stmt->execute();
$users = $stmt->fetchAll();
return $users;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function register($shooterId, $cpr, $fullname, $adress, $birthday, $email, $allowPicture, $phone, $ownWeapon, $class, $memberDate)
{
try {
$stmt = $this->db->prepare("INSERT INTO result_users(shooterId, cpr, fullname, adress, birthday, email, allowPicture, phone, ownWeapon, class, memberDate) VALUES (:shooterId, :cpr, :fullname, :adress, :birthday, :email, :allowPicture, :phone, :ownWeapon, :class, :memberDate)");
$stmt->execute(array(":shooterId" => $shooterId, ":cpr" => $cpr, ":fullname" => $fullname, ":adress" => $adress, ":birthday" => $birthday, ":email" => $email, ":allowPicture" => $allowPicture, ":phone" => $phone, ":ownWeapon" => $ownWeapon, ":class" => $class, ":memberDate" => $memberDate));
return $stmt;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function update($id, $shooterId, $cpr, $fullname, $adress, $birthday, $email, $allowPicture, $phone, $isDeleted, $ownWeapon, $class, $new, $memberDate)
{
try {
$stmt = $this->db->prepare("UPDATE result_users SET shooterId = :shootId, cpr = :cpr, fullname = :fullname, adress = :adress, birthday = :birthday, email = :email, allowPicture = :allowpiture, phone = :phone, isDeleted = :isDeleted, ownWeapon = :ownWeapon, class = :class, newShooter = :new, memberDate = :memberDate WHERE id = :id");
$stmt->execute(array(":id" => $id, ":shootId" => $shooterId, ":cpr" => $cpr, ":fullname" => $fullname, ":adress" => $adress, ":birthday" => $birthday, ":email" => $email, ":allowpiture" => $allowPicture, ":phone" => $phone, ":isDeleted" => $isDeleted, ":ownWeapon" => $ownWeapon, ":class" => $class, ":new" => $new, ":memberDate" => $memberDate));
return $stmt;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getUser($userId)
{
$stmt = $this->db->prepare("SELECT * FROM result_users JOIN result_class ON result_users.class = result_class.id WHERE result_users.id = :userId");
$stmt->execute(array(':userId' => $userId));
$userRow = $stmt->fetch(PDO::FETCH_BOTH);
if ($stmt->rowCount() == 1) {
return $userRow;
} else {
?>
Ingen bruger med id opretelse af ny bruger .
db->prepare("SELECT * FROM result_users WHERE id = :userId");
$stmt->execute(array(':userId' => $userId));
$userRow = $stmt->fetch(PDO::FETCH_BOTH);
if ($stmt->rowCount() == 1) {
$query = $this->db->prepare("UPDATE result_users SET subscriptionPaid = :sub WHERE id = :userId");
$query->execute(array(':sub' => $sub, ':userId' => $userId));
}
}
public function getSKV($userId, $report = null)
{
$stmt = $this->db->prepare("SELECT * FROM result_skv WHERE shooterId = :userId");
$stmt->execute(array(':userId' => $userId));
$skvRow = $stmt->fetchAll();
if ($report == null) {
if ($skvRow) {
?>
SKV nummer
Acceptdato
Udløbsdato
db->prepare("SELECT id, `skv-id` FROM result_skv WHERE id = :id");
$stmt->execute(array(':id' => $skvId));
$skv = $stmt->fetch(PDO::FETCH_BOTH);
return $skv;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function changeEventNumber($userId, $amount)
{
$stmt = $this->db->prepare("SELECT eventsLeft FROM result_users WHERE id = :userId");
$stmt->execute(array(":userId" => $userId));
$eventsLeft = $stmt->fetch(PDO::FETCH_BOTH);
$currentEventsLeft = $eventsLeft[0];
$newAmount = $currentEventsLeft + $amount;
$stmt = $this->db->prepare("UPDATE result_users SET eventsLeft = :newAmount WHERE id = :userId");
$stmt->execute(array(":userId" => $userId, ":newAmount" => $newAmount));
}
public function newSKV($userId, $skvNumber, $date, $skvId)
{
try {
$stmt = $this->db->prepare("INSERT INTO result_skv (shooterId, skvNumber, date, `skv-id`) VALUES (:userId, :skvNumber, :date, :skvId)");
$stmt->execute(array(":userId" => $userId, ":skvNumber" => $skvNumber, ":date" => $date, ":skvId" => $skvId));
return $stmt;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function updateSKV($id, $skvNumber, $date, $skvId)
{
try {
$stmt = $this->db->prepare("UPDATE result_skv SET skvNumber = :skvNumber, date = :date, `skv-id` = :skvId WHERE id = :id");
$stmt->execute(array(":id" => $id, ":skvNumber" => $skvNumber, ":date" => $date, ":skvId" => $skvId));
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function deleteSKV($id)
{
try {
$stmt = $this->db->prepare("DELETE FROM result_skv WHERE id = :id");
$stmt->execute(array(":id" => $id));
header("location: /admin/skv.php");
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getAllSKV()
{
try {
$stmt = $this->db->prepare("SELECT result_users.id, result_users.shooterId, result_users.fullname, result_skv.`skv-id`, result_skv.skvNumber, result_skv.date, result_skv.id FROM result_skv JOIN result_users ON result_users.id = result_skv.shooterId ORDER BY result_skv.date");
$stmt->execute();
return $stmt;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getUserSKV($id)
{
try {
$stmt = $this->db->prepare("SELECT result_users.fullname, result_skv.skvNumber, result_skv.date, result_skv.`skv-id` FROM result_skv JOIN result_users ON result_users.id = result_skv.shooterId WHERE result_skv.id = :id");
$stmt->execute(array(':id' => $id));
$skvRow = $stmt->fetch(PDO::FETCH_BOTH);
return $skvRow;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getLatestUser()
{
try {
$stmt = $this->db->prepare("Select id FROM result_users ORDER BY id DESC LIMIT 1");
$stmt->execute();
$id = $stmt->fetch();
return $id[0];
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getUserForConsentForm($userId)
{
try {
$stmt = $this->db->prepare("SELECT fullname, adress, email, phone FROM result_users WHERE id = :userId");
$stmt->execute(array(":userId" => $userId));
$user = $stmt->fetch(PDO::FETCH_BOTH);
return $user;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
public function getUserAnniversary()
{
try {
$stmt = $this->db->prepare("SELECT id, fullname, memberDate FROM result_users WHERE isDeleted = 0 ORDER BY fullname ASC;");
$stmt->execute();
$users = $stmt->fetchAll();
$anniversaries = [20, 30, 40, 50, 60, 70, 80, 90, 100];
$anniversary_combined_array = [];
foreach($users AS $a)
{
if(in_array(date_diff(date_create($a[2]."-01-01"), date_create('today'))->y,$anniversaries))
{
array_push($anniversary_combined_array,$a);
}
}
return $anniversary_combined_array;
} catch (PDOException $e) {
echo $e->getMessage();
}
}
}
index.php 0000644 00000011714 15233472040 0006370 0 ustar 00
passwordResetCheck();
$user = new user($db);
$u = $user->getUserForConsentForm(5);
$users = $user->getAllUsers(0);
if (isset($_GET['showAll'])) {
$users = $user->getAllUsers(1);
}
if (isset($_GET['login']) && $_GET['login'] == "true") {
echo "Du er allerede logget ind som " . $_SESSION['username'];
}
include('../static/header.php');
?>
update.php 0000644 00000021632 15233472040 0006543 0 ustar 00 passwordResetCheck();
$user = new user($db);
$log = new log($db);
$profile = $user->getUser($_GET['user']);
$cpr = decrypt($profile[2],$encryptKey);
$stmt = $db->prepare("SELECT * FROM result_class");
$stmt->execute();
$result = $stmt->fetchAll();
if (isset($_POST['name']))
{
if(isset($_POST['cpr'])){
$uCpr = $_POST['cpr'];
$newCpr = encrypt($uCpr, $encryptKey);
}
else{
$newCpr = $cpr;
}
$uShooterId = $_POST['shooterId'];
$uFullname = $_POST['name'];
$uAdress = $_POST['adress'];
$uBirtday = $_POST['birthday'];
$uEmail = $_POST['email'];
$uPhone = $_POST['phonenumber'];
$uAllowPicture = $_POST['allowPicture'];
$uOwnWeapon = $_POST['ownWeapon'];
$uClass = $_POST['class'];
$uIsDeleted = $_POST['deleted'];
$uNewShooter = $_POST['newShooter'];
$uDate = $_POST['memberDate'];
if($user->update($profile[0], $uShooterId,$newCpr,$uFullname,$uAdress,$uBirtday,$uEmail,$uAllowPicture, $uPhone, $uIsDeleted, $uOwnWeapon, $uClass, $uNewShooter, $uDate)){
$log->addLog($_SESSION['userId'], "Skytte opdateret", "Skytte", "/user/profile.php?user=" . $_GET['user']);
$admin->redirect("/user/profile.php?user=$profile[0]");
}
}
elseif (!$admin->admin_level(0))
{
$admin->redirect('../admin/login.php');
}
include ('../static/header.php');
?>
';
}
if ($admin->admin_level(1)) {
$user->getSKV($_GET['user']);
?>
