diff --git a/api/login/getcookies.php b/api/login/getcookies.php index 6907ad1..1e8c180 100644 --- a/api/login/getcookies.php +++ b/api/login/getcookies.php @@ -39,7 +39,7 @@ if ($_SERVER["REQUEST_METHOD"] == "POST") { setcookie("device_id", $device_id, time() + 3600, "/"); setcookie("username", $user, time() + 3600, "/"); - header("Location: /opfer.html"); + header("Location: /index.html"); exit; }else{ diff --git a/api/opfer/add.php b/api/opfer/add.php index 2b1735e..ea7a6ce 100644 --- a/api/opfer/add.php +++ b/api/opfer/add.php @@ -1,4 +1,38 @@ checkAuth()) { + header("Location: /index.html?status=500&error=Unauthorized"); + exit; +} + +if (!isset($_POST["name"]) || !isset($_POST["mail"]) || !isset($_POST["number"])) { + die('{"status":500, "error":"Missing fields"}'); +} + +$name = htmlspecialchars($_POST["name"]); +$mail = htmlspecialchars($_POST["mail"]); +$number = intval(htmlspecialchars($_POST["number"])); +if (isset($_POST["enabled"])) { + $enabled = 1; +}else{ + $enabled = 0; +} + +$db = $api->getDB(); + +$sql = "INSERT INTO opfer (name, mail, number, status) VALUES (:name, :mail, :number, :status)"; + +$stmt = $db->prepare($sql); + +$sql_exec = $stmt->execute([':name' => $name, ':mail' => $mail, ':number' => $number, ':status' => $enabled]); + +if ($sql_exec) { + header("Location: /index.html?status=200"); +}else{ + header("Location: /index.html?status=500&error=SQL Error"); +} +exit; +?> \ No newline at end of file diff --git a/api/opfer/info.php b/api/opfer/info.php new file mode 100644 index 0000000..6cfade3 --- /dev/null +++ b/api/opfer/info.php @@ -0,0 +1,33 @@ +checkAuth()) { + die('{"status":500, "error":"Unauthorized"}'); +} + +if (!isset($_POST["id"])) { + die('{"status":500, "error":"Missing parameter"}'); +} + +$id = intval($_POST["id"]); + +$db = $api->getDB(); + +$sql = "SELECT * FROM opfer WHERE id = :id"; +$stmt = $db->prepare($sql); +$stmt->execute([':id' => $id]); + +$result = $stmt->fetchAll(PDO::FETCH_ASSOC); + +if ($result) { + $json["opfer"] = $result; + $json["status"] = 200; +}else{ + $json["status"] = 500; + $json["error"] = "Empty SQL Result"; +} + +die(json_encode($json)); +?> \ No newline at end of file diff --git a/api/opfer/list.php b/api/opfer/list.php index 293459b..c2b9b1b 100644 --- a/api/opfer/list.php +++ b/api/opfer/list.php @@ -17,6 +17,7 @@ $all_opfer = []; if ($result) { foreach ($result as $opfer_res) { + $opfer["id"] = $opfer_res["id"]; $opfer["name"] = $opfer_res["name"]; $opfer["mail"] = $opfer_res["mail"]; $opfer["number"] = $opfer_res["number"]; diff --git a/front/background.png b/front/background.png new file mode 100644 index 0000000..e394edb Binary files /dev/null and b/front/background.png differ diff --git a/front/basic-tables.html b/front/basic-tables.html index 9033fd3..90b20af 100644 --- a/front/basic-tables.html +++ b/front/basic-tables.html @@ -691,6 +691,7 @@
+ Das neue Opfer wurde erfolgreich hinzugefügt! +
++ Es ist ein Fehler aufgetreten +
+