392 lines
8.6 KiB
PHP
392 lines
8.6 KiB
PHP
<?php
|
|
function getRaccourcis($bdd)
|
|
{
|
|
$results = mysqli_query($bdd, "SELECT * FROM `raccourcis`");
|
|
$return = [];
|
|
return $results;
|
|
}
|
|
|
|
function connectBDD($domain, $user, $password, $db)
|
|
{
|
|
$link = mysqli_connect($domain, $user, $password, $db);
|
|
|
|
if (!$link) {
|
|
die('Erreur de connexion');
|
|
} else {
|
|
mysqli_set_charset($link, "utf8");
|
|
|
|
return $link;
|
|
}
|
|
}
|
|
|
|
function getActus($bdd, $limit)
|
|
{
|
|
$results = mysqli_query($bdd, "SELECT * FROM actus ORDER BY id DESC LIMIT " . $limit);
|
|
$actus = [];
|
|
while ($row = mysqli_fetch_assoc($results)) {
|
|
$actus[] = $row;
|
|
}
|
|
return $actus;
|
|
}
|
|
|
|
function validateCSRFToken($csrf_server, $csrf_client)
|
|
{
|
|
if (!hash_equals($csrf_server, $csrf_client)) {
|
|
echo ($csrf_client . " " . $csrf_server);
|
|
die('CSRF token validation failed');
|
|
}
|
|
return true;
|
|
}
|
|
|
|
function verifyPassword($hash_password, $tryPassword)
|
|
{
|
|
$hashTry = hash('sha256', $tryPassword);
|
|
if ($hash_password == $hashTry) {
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
function getHashPwd($bdd, $username)
|
|
{
|
|
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT password FROM utilisateurs WHERE username = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $username);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$user = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $user; // retourne un tableau ou null
|
|
}
|
|
|
|
function getEvenements($bdd, $site)
|
|
{
|
|
|
|
$results = mysqli_query(
|
|
$bdd,
|
|
"SELECT * FROM evenements WHERE `site_id`='" . $site . "' ORDER BY date DESC"
|
|
);
|
|
|
|
$evenements = [];
|
|
|
|
while ($row = mysqli_fetch_assoc($results)) {
|
|
$evenements[] = $row;
|
|
}
|
|
|
|
return $evenements;
|
|
}
|
|
|
|
function getSite($bdd, $username)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT site_id FROM utilisateurs WHERE username = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $username);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $row ? $row['site_id'] : null;
|
|
}
|
|
|
|
function getSiteName($bdd, $site)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT nom FROM site WHERE site_id = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $site);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $row ? $row['nom'] : null;
|
|
}
|
|
|
|
function getEventName($bdd, $event)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT titre FROM evenements WHERE id = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $event);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $row ? $row['titre'] : null;
|
|
}
|
|
|
|
function getEventImages($bdd, $event)
|
|
{
|
|
$results = mysqli_query(
|
|
$bdd,
|
|
"SELECT * FROM gallerie WHERE `event_id`='" . $event . "'"
|
|
);
|
|
|
|
$evenements = [];
|
|
|
|
while ($row = mysqli_fetch_assoc($results)) {
|
|
$evenements[] = $row;
|
|
}
|
|
|
|
return $evenements;
|
|
}
|
|
|
|
function getEventBigImage($bdd, $event)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT couverture FROM evenements WHERE id = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $event);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $row ? $row['couverture'] : null;
|
|
}
|
|
|
|
function getUserPerms($bdd, $username)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"SELECT permissions FROM utilisateurs WHERE username = ? LIMIT 1"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "s", $username);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $row ? $row['permissions'] : null;
|
|
}
|
|
|
|
function verifyPoids($bdd, $username, $minPoids)
|
|
{
|
|
$sql = "SELECT p.poids
|
|
FROM utilisateurs u
|
|
INNER JOIN permissions p ON u.permissions = p.nom
|
|
WHERE u.username = ?";
|
|
|
|
$stmt = mysqli_prepare($bdd, $sql);
|
|
|
|
if ($stmt) {
|
|
mysqli_stmt_bind_param($stmt, "s", $username);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$result = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($result);
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
if ($row) {
|
|
return (int)$row['poids'] >= (int)$minPoids;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function updateEventTitle($bdd, $eventid, $titre)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE evenements SET titre = ? WHERE id = ?"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "si", $titre, $eventid);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $success;
|
|
}
|
|
|
|
function updateEventImage($bdd, $eventId, $image)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE evenements SET couverture = ? WHERE id = ?"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "si", $image, $eventId);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $success;
|
|
}
|
|
|
|
function getSpecificActus($bdd, $id)
|
|
{
|
|
$results = mysqli_query($bdd, "SELECT * FROM `actus` WHERE `id`=" . $id);
|
|
$return = [];
|
|
|
|
while ($row = mysqli_fetch_assoc($results)) {
|
|
$return[] = $row;
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function updateActuImage($bdd, $actuId, $image)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE actus SET image = ? WHERE id = ?"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "si", $image, $actuId);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $success;
|
|
}
|
|
|
|
function updateActuTitle($bdd, $actuId, $titre)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE actus SET titre = ? WHERE id = ?"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "si", $titre, $actuId);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $success;
|
|
}
|
|
|
|
function updateActuContent($bdd, $actuId, $content)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE actus SET actu = ? WHERE id = ?"
|
|
);
|
|
|
|
mysqli_stmt_bind_param($stmt, "si", $content, $actuId);
|
|
mysqli_stmt_execute($stmt);
|
|
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
|
|
mysqli_stmt_close($stmt);
|
|
|
|
return $success;
|
|
}
|
|
|
|
function createEvent($bdd, $titre, $date, $site)
|
|
{
|
|
|
|
$sql = "INSERT INTO evenements (date, titre, couverture, site_id) VALUES (?, ?, '', ?)";
|
|
$req = $bdd->prepare($sql);
|
|
$req->bind_param("ssi", $date, $titre, $site);
|
|
$req->execute();
|
|
return $bdd->insert_id;
|
|
}
|
|
|
|
function deleteEvent($bdd, $eventId)
|
|
{
|
|
$sql = "DELETE FROM evenements WHERE id = ?";
|
|
$req = $bdd->prepare($sql);
|
|
$req->bind_param("i", $eventId);
|
|
$req->execute();
|
|
return $req->affected_rows > 0;
|
|
}
|
|
|
|
function deleteActu($bdd, $eventId)
|
|
{
|
|
$sql = "DELETE FROM actus WHERE id = ?";
|
|
$req = $bdd->prepare($sql);
|
|
$req->bind_param("i", $eventId);
|
|
$req->execute();
|
|
return $req->affected_rows > 0;
|
|
}
|
|
|
|
function createActu($bdd, $titre, $actu, $date, $idSite)
|
|
{
|
|
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"INSERT INTO actus (titre, actu, date, idSite) VALUES (?, ?, ?, ?)"
|
|
);
|
|
mysqli_stmt_bind_param($stmt, "sssi", $titre, $actu, $date, $idSite);
|
|
mysqli_stmt_execute($stmt);
|
|
$actuId = mysqli_insert_id($bdd);
|
|
mysqli_stmt_close($stmt);
|
|
return $actuId;
|
|
}
|
|
|
|
function createShortcut($bdd, $nom, $image, $shortcut)
|
|
{
|
|
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"INSERT INTO raccourcis (nom, image, url) VALUES (?, ?, ?)"
|
|
);
|
|
mysqli_stmt_bind_param($stmt, "sss", $nom, $image, $shortcut);
|
|
mysqli_stmt_execute($stmt);
|
|
$actuId = mysqli_insert_id($bdd);
|
|
mysqli_stmt_close($stmt);
|
|
return $actuId;
|
|
}
|
|
|
|
function updateRaccourcis($bdd, $idRaccourcis, $nom, $image, $url)
|
|
{
|
|
$stmt = mysqli_prepare(
|
|
$bdd,
|
|
"UPDATE raccourcis SET nom = ?, image = ?, url = ? WHERE id = ?"
|
|
);
|
|
mysqli_stmt_bind_param($stmt, "sssi", $nom, $image, $url, $idRaccourcis);
|
|
mysqli_stmt_execute($stmt);
|
|
$success = mysqli_stmt_affected_rows($stmt) >= 0;
|
|
mysqli_stmt_close($stmt);
|
|
return $success;
|
|
}
|
|
|
|
function getSpecificRaccourcis($bdd, $id)
|
|
{
|
|
$results = mysqli_query($bdd, "SELECT * FROM `raccourcis` WHERE `id`=" . $id);
|
|
$return = [];
|
|
|
|
while ($row = mysqli_fetch_assoc($results)) {
|
|
$return[] = $row;
|
|
}
|
|
return $return;
|
|
}
|