errormsg("The 'clientID' is required.");
}
$dbh = new PDB();
$db = $dbh->db;
$site = new Site($db);
try {
$ct = 0;
$sql = "UPDATE clients SET ";
foreach ($updata as $key => $value) {
if ($value != "" && $key != "id") {
if ($ct != 0) {
$sql .= ", ";
}
$sql .= $key . " = :" . $key;
$ct++;
}
}
$sql .= " WHERE id = :id";
$st = $db->prepare($sql);
foreach ($updata as $key => &$value) {
if ($value != "") {
$st->bindParam(":" . $key, $value);
}
}
$st->execute();
$newclient = $dbh->getClient($user, $updata["id"]);
} catch (PDOException $e) {
errormsg($e->getMessage());
}
exitjson(array("client" => $newclient));
if ($updata["email"] != "" && $updata["email"] != $currentemail) {
$exists = $site->checkEmail($updata["email"]);
if ($exists === true) {
errormsg("Email address already in use.");
}
}
try {
$ct = 0;
$sql = "UPDATE users SET ";
foreach ($updata as $key => $value) {
if ($value != "" && $key != "id") {
if ($ct != 0) {
$sql .= ", ";
}
$sql .= $key . " = :" . $key;
$ct++;
}
}
$sql .= " WHERE id = :id";
$st = $db->prepare($sql);
foreach ($updata as $key => &$value) {
if ($value != "") {
$st->bindParam(":" . $key, $value);
}
}
$st->execute();
} catch (PDOException $e) {
errormsg($e->getMessage());
}
exitjson(array("success" => true));
<?php
// check if logged in
// per project or all tasks?
//
error_reporting(E_ALL);
session_start();
session_regenerate_id(false);
require_once "reqs/common.php";
require_once "reqs/pdo.php";
//require_once("reqs/auth.php");
checkLoggedIn();
$userID = $_SESSION["user"];
$dbh = new PDB();
$db = $dbh->db;
$clientID = param($_GET, 'clientID', '');
if ($clientID == '') {
$clients = $dbh->getClients($userID);
} else {
$clients = $dbh->getClient($userID, $clientID);
}
exitjson(array("clients" => $clients));
}
if (empty($email)) {
errormsg("Email required.");
}
$dbh = new PDB();
$db = $dbh->db;
$site = new Site($db);
$exists = $site->checkName($username);
if ($exists === true) {
errormsg("Username already exists.");
}
$exists = $site->checkEmail($email);
if ($exists === true) {
errormsg("Email address already in use.");
}
$hashed = $site->hasher($username, $password);
try {
$st = $db->prepare("\n\t\tINSERT INTO users \n\t\t(user_n, user_p, salt, email, first_name, last_name, phone, city, state, zipcode, avatar)\n\t\tVALUES (:user, :pass, :salt, :email, :firstname, :lastname, :phone, :city, :state, :zipcode, :avatar)\n\t");
$st->execute(array(":user" => $username, ":pass" => $hashed["hash"], ":salt" => $hashed["salt"], ":email" => $email, ":firstname" => $firstname, ":lastname" => $lastname, ":phone" => $phone, ":city" => $city, ":state" => $state, ":zipcode" => $zipcode, ":avatar" => $avatar));
$st = $db->prepare("SELECT LAST_INSERT_ID()");
$st->execute();
$lastid = $st->fetch();
$user = $dbh->getUser($lastid[0]);
} catch (PDOException $e) {
errormsg($e->getMessage());
}
session_start();
session_regenerate_id(false);
$_SESSION["user"] = $user->id;
exitjson(array("user" => $user));
require_once "reqs/auth.php";
$username = param($_POST, 'username', '');
$password = param($_POST, 'password', '');
if (empty($username)) {
errormsg("Username required.");
}
if (empty($password)) {
errormsg("Password required.");
}
$dbh = new PDB();
$db = $dbh->db;
$site = new Site($db);
$hashed = $site->hasher($username, $password);
try {
$st = $db->prepare("\n\t\tSELECT id, teamID, user_n, first_name, last_name FROM users WHERE user_n = :user AND user_p = :pass\n\t");
$st->bindParam(":user", $username);
$st->bindParam(":pass", $hashed["hash"]);
$st->execute();
} catch (PDOException $e) {
errormsg($e->getMessage());
}
$st->setFetchMode(PDO::FETCH_OBJ);
$row = $st->fetch();
if ($st->rowCount() == 0) {
errormsg("Username or password incorrect.");
}
session_start();
session_regenerate_id(true);
$_SESSION['user'] = $row->id;
exitjson(array("user" => $row));
errormsg("The 'taskID' is required.");
}
$dbh = new PDB();
$db = $dbh->db;
$site = new Site($db);
try {
$ct = 0;
$sql = "UPDATE tasks SET ";
foreach ($updata as $key => $value) {
if ($value != "" && $key != "id") {
if ($ct != 0) {
$sql .= ", ";
}
$sql .= $key . " = :" . $key;
$ct++;
}
}
$sql .= " WHERE id = :id";
$st = $db->prepare($sql);
foreach ($updata as $key => &$value) {
if ($value != "") {
$st->bindParam(":" . $key, $value);
}
}
$st->execute();
$newtask = $dbh->getTask($updata["id"]);
} catch (PDOException $e) {
errormsg($e->getMessage());
}
exitjson(array("task" => $newtask));
<?php
// check if logged in
// per project or all tasks?
//
error_reporting(E_ALL);
session_start();
session_regenerate_id(false);
require_once "reqs/common.php";
require_once "reqs/pdo.php";
//require_once("reqs/auth.php");
checkLoggedIn();
$dbh = new PDB();
$db = $dbh->db;
$users = $dbh->getUserList();
exitjson(array("users" => $users));
$sql .= ") VALUES (";
$ct = 0;
foreach ($updata as $key => $value) {
if ($value != "" && $key != "id") {
if ($ct != 0) {
$sql .= ", ";
}
$sql .= ":" . $key;
$ct++;
}
}
$sql .= ")";
$st = $db->prepare($sql);
foreach ($updata as $key => &$value) {
if ($value != "") {
$st->bindParam(":" . $key, $value);
}
}
$st->execute();
$st = $db->prepare("SELECT LAST_INSERT_ID()");
$st->execute();
$lastid = $st->fetch();
$newproject = $dbh->getProjects($lastid[0]);
$sql = "INSERT INTO userslink (userID, projectID) VALUES (:userID, :projectID)";
$st = $db->prepare($sql);
$st->execute(array(":userID" => $updata["projectCreator"], ":projectID" => $lastid[0]));
} catch (PDOException $e) {
errormsg($e->getMessage());
}
exitjson(array("newproject" => $newproject[0]));
<?php
error_reporting(E_ALL);
session_start();
session_regenerate_id(false);
require_once "reqs/common.php";
require_once "reqs/pdo.php";
//require_once("reqs/auth.php");
$dbh = new PDB();
$db = $dbh->db;
if (!isset($_SESSION["user"])) {
errormsg("Not logged in.");
}
$userID = $_SESSION["user"];
$userdata = $dbh->getUser($userID);
exitjson(array("user" => $userdata));
<?php
// check if logged in
// per project or all tasks?
//
error_reporting(E_ALL);
session_start();
session_regenerate_id(false);
require_once "reqs/common.php";
require_once "reqs/pdo.php";
//require_once("reqs/auth.php");
checkLoggedIn();
$userID = $_SESSION["user"];
$taskID = param($_GET, 'taskID', '');
$dbh = new PDB();
$db = $dbh->db;
$projectIDs = $dbh->getValidProjects($userID);
$projectID = param($_GET, 'projectID', $projectIDs);
if ($taskID !== '') {
$tasks = $dbh->getTask($taskID);
} else {
$tasks = $dbh->getTasks($projectID);
}
exitjson(array("tasks" => $tasks));
/*
if($st->rowCount() == 0){
errormsg("Username or password incorrect.");
};
*/
<?php
// check if logged in
// per project or all tasks?
//
error_reporting(E_ALL);
session_start();
session_regenerate_id(false);
require_once "reqs/common.php";
require_once "reqs/pdo.php";
//require_once("reqs/auth.php");
checkLoggedIn();
$userID = $_SESSION["user"];
$dbh = new PDB();
$db = $dbh->db;
$projectIDs = $dbh->getValidProjects($userID);
$projectID = param($_GET, 'projectID', $projectIDs);
$projects = $dbh->getProjects($projectID);
exitjson(array("projects" => $projects));
/*
if($st->rowCount() == 0){
errormsg("Username or password incorrect.");
};
*/
function errormsg($msg)
{
exitjson(array("error" => $msg));
}
