intranet-apei/Assets/functions.php

<?php
function getRaccourcis($bdd){
    $results = mysqli_query($bdd, "SELECT * FROM `raccourcis`");
    $return = [];
    return $results;
}

function connectBDD($domain, $user, $password, $db){
    $link = mysqli_connect($domain, $user, $password, $db);

    if (!$link) {
        die('Erreur de connexion');
    } else {
        mysqli_set_charset($link, "utf8");

        return $link;
    }
}

function getActus($bdd){
    $results = mysqli_query($bdd, "SELECT * FROM `actus` ORDER BY `id` LIMIT 4");
    $return = [];
    return $results;
}

function validateCSRFToken($csrf_server, $csrf_client) {
    if (!hash_equals($csrf_server, $csrf_client)) {
        echo($csrf_client. " " . $csrf_server);
        die('CSRF token validation failed');
    }
    return true;
}

function verifyPassword($hash_password, $tryPassword){
    $hashTry = hash('sha256', $tryPassword);
    if($hash_password == $hashTry){
        return true;
    }
    return false;
}

function getHashPwd($bdd, $username){

    $stmt = mysqli_prepare(
        $bdd,
        "SELECT password FROM utilisateurs WHERE username = ? LIMIT 1"
    );

    mysqli_stmt_bind_param($stmt, "s", $username);
    mysqli_stmt_execute($stmt);

    $result = mysqli_stmt_get_result($stmt);
    $user = mysqli_fetch_assoc($result);

    mysqli_stmt_close($stmt);

    return $user; // retourne un tableau ou null
}

function getEvenements($bdd, $site){

    $results = mysqli_query(
        $bdd,
        "SELECT * FROM evenements WHERE `site_id`='" . $site . "' ORDER BY date DESC"
    );

    $evenements = [];

    while ($row = mysqli_fetch_assoc($results)) {
        $evenements[] = $row;
    }

    return $evenements;
}

function getSite($bdd, $username){
    $stmt = mysqli_prepare(
        $bdd,
        "SELECT site_id FROM utilisateurs WHERE username = ? LIMIT 1"
    );

    mysqli_stmt_bind_param($stmt, "s", $username);
    mysqli_stmt_execute($stmt);

    $result = mysqli_stmt_get_result($stmt);
    $row = mysqli_fetch_assoc($result);

    mysqli_stmt_close($stmt);

    return $row ? $row['site_id'] : null;
}

function getSiteName($bdd, $site){
    $stmt = mysqli_prepare(
        $bdd,
        "SELECT nom FROM site WHERE site_id = ? LIMIT 1"
    );

    mysqli_stmt_bind_param($stmt, "s", $site);
    mysqli_stmt_execute($stmt);

    $result = mysqli_stmt_get_result($stmt);
    $row = mysqli_fetch_assoc($result);

    mysqli_stmt_close($stmt);

    return $row ? $row['nom'] : null;
}

function getEventName($bdd, $event){
    $stmt = mysqli_prepare(
        $bdd,
        "SELECT titre FROM evenements WHERE id = ? LIMIT 1"
    );

    mysqli_stmt_bind_param($stmt, "s", $event);
    mysqli_stmt_execute($stmt);

    $result = mysqli_stmt_get_result($stmt);
    $row = mysqli_fetch_assoc($result);

    mysqli_stmt_close($stmt);

    return $row ? $row['titre'] : null;
}

function getEventImages($bdd, $event){
    $results = mysqli_query(
        $bdd,
        "SELECT * FROM gallerie WHERE `event_id`='" . $event . "'"
    );

    $evenements = [];

    while ($row = mysqli_fetch_assoc($results)) {
        $evenements[] = $row;
    }

    return $evenements;
}

function getEventBigImage($bdd, $event){
    $stmt = mysqli_prepare(
        $bdd,
        "SELECT couverture FROM evenements WHERE id = ? LIMIT 1"
    );

    mysqli_stmt_bind_param($stmt, "s", $event);
    mysqli_stmt_execute($stmt);

    $result = mysqli_stmt_get_result($stmt);
    $row = mysqli_fetch_assoc($result);

    mysqli_stmt_close($stmt);

    return $row ? $row['couverture'] : null;
}