newgroup.php

<?php

require_once 'includes/all.php';

if (!is_logged_in()) {
  header("Location: signin.php");
  exit(0);
}

$db = connect_db();
$user_courses = get_user_courses($db, get_logged_in_user_id());

// TODO(ae): if no courses, direct user to add some
// TODO(ae): javascript magic for adding users

$form = array();
$form['course'] = 0;
$form['name'] = '';
$form['day'] = '';
$form['time'] = '';
$form['place'] = '';
$form['members'] = array();
$form['add_user'] = '';
$form['campus'] = 0;

$errors = array();

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $action = '';
    if (array_key_exists('action', $_POST)) {
      $action = $_POST['action'];
    }

    $form['name'] = $_POST['name'];
    $form['day'] = $_POST['day'];
    $form['time'] = $_POST['time'];
    $form['place'] = $_POST['place'];
    $form['add_user'] = $_POST['add_user'];
     
     //Get Campus Name
     if (!empty($_POST['campus'])){
        $q = $db->prepare("SELECT name FROM campuses WHERE id = :id");
        $q->bindValue(":id", $_POST['campus']);
        $q->execute();
        $campus = $q->fetch();
        $form['campus'] = $campus['name'];
    } 

    // validation

    // Check if the course id is numeric
    if (isset($_POST['course']) && is_numeric($_POST['course'])) {
      $form['course'] = (int)$_POST['course'];
    } else {
      $errors['course'] = "please choose a course";
    }

    // Check if the course is one the user is attending
    if (!isset($errors['course'])) {
      $have_course = false;
      foreach ($user_courses as $course) {
        //var_dump($course);
        //echo gettype($course['id']).",";
        //echo gettype($form['course'])."\n";
        if ($course['id'] === $form['course']) {
          $have_course = true;
        }
      }
      if (!$have_course) {
        $errors['course'] = "choose a course you are registered for";
      }
    }

    // Fill in a useful default name
    if ($form['name'] === '' && !isset($errors['course'])) {
      $course = get_course($db, $form['course']);
      $form['name'] = "${course['department']} ${course['number']} study group";
    }

    // Check that the day and time are valid
    if (isset($_POST['day']) && $_POST['day'] !== "" || isset($_POST['time']) && $_POST['time'] !== "") {
      if (empty($_POST['day']) || !is_valid_day($_POST['day'])) {
        $errors['day'] = "please choose a valid day";
      } else {
        $form['day'] = $_POST['day'];
      }
      if (!isset($_POST['time']) || $_POST['time'] === "" || !is_valid_time($_POST['time'])) {
        $errors['time'] = 'please choose a valid time';
      } else {
        $form['time'] = $_POST['time'];
      }
    }
    
    // Check if all the user ids are numeric
    if (isset($_POST['members']) && is_array($_POST['members'])) {
      foreach ($_POST['members'] as $member_id) {
        if (is_numeric($member_id)) {
          $form['members'][] = $member_id;
        } else if(!$errors['members']) {
          $errors['members'] = 'invalid user id';
        }
      }
    }
    
    // If the user filled in the add user box,
    // assume they want to add a user instead of submitting the form.
    // Try to find the user and add their id to the member list.
    if (isset($_POST['add_user']) && $_POST['add_user'] !== "") {
      $query = $_POST['add_user'];
      if (!$query) {
        $errors['add_user'] = 'please specify which user to add';
      } else {
        $stmt = $db->prepare("SELECT id FROM users WHERE lower(name) = lower(?) OR email = ? LIMIT 2");
        $stmt->bindValue(1, $query);
        $stmt->bindValue(2, $query);
        $stmt->execute();
        $rows = $stmt->fetchAll();
        if (count($rows) == 0) {
          $errors['add_user'] = 'no matching user';
        } else if (count($rows) > 1) {
          $errors['add_user'] = 'ambiguous query';
        } else {
          $form['members'][] = $rows[0]['id'];
          $form['add_user'] = '';
        }
      }
    }

    // create the group
    // TODO(ae): transation
    if ($action !== 'add_user' && !count($errors)) {
      $stmt = $db->prepare("INSERT INTO groups (course_id, name, day, time, place, campus) VALUES (:course_id, :name, :day, :time, :place, :campus)");
      $stmt->bindValue(":course_id", $form['course']);
      $stmt->bindValue(":name", $form['name']);
      $stmt->bindValue(":day", $form['day']);
      $stmt->bindValue(":time", $form['time']);
      $stmt->bindValue(":place", $form['place']);
        $stmt->bindValue(":campus", $form['campus']);
      $stmt->execute();

      $group_id = $db->lastInsertId();

      $stmt = $db->prepare("INSERT INTO group_members (group_id, user_id) VALUES (:group_id, :user_id)");
      // Add current user to the group
      $stmt->bindValue(":group_id", $group_id, PDO::PARAM_INT);
      $stmt->bindValue(":user_id", get_logged_in_user_id(), PDO::PARAM_INT);
      $stmt->execute();

      // Add any other members
      // TODO(ae): send invites instead
      foreach ($form['members'] as $user_id) {
        $stmt->bindValue(":user_id", $user_id, PDO::PARAM_INT);
        $stmt->execute();
      }

      $url = "group.php?id=".urlencode($group_id);
      header("Location: ".$url);
      exit(0);
    }
}

// Returns 'has-error' if the key exists in $errors.
function has_error($key) {
  global $errors;
  if (array_key_exists($key, $errors)) {
    return 'has-error';
  }
  return '';
}

?>
<!DOCTYPE html>
<html>
  <head>
    <title>Create a study group | Study Group Finder</title>
    <?php include 'includes/_head.html' ?>
    <link rel=stylesheet href="css/jquery-ui.css">
    <script src="js/jquery-1.12.1.min.js"></script>
    <script src="js/jquery-ui.js"></script>
  </head>
  <body>
    <?php include 'includes/_nav.php' ?>

    <div class="breadcrumbs">
      <a href="index.php">Home</a> »
      Create a Group
    </div>

    <h1>Create a group</h1>

    <form action="" id="group-form" method="POST">

      <p>So you want to start a study group, huh? Great!
      Just follow these three easy steps.

        <div class="row">
          <div class="col-md-6">
      <h2>Class</h2>

      <div class="form-group <?= has_error('course') ?>">
        <select name="course" class="form-control">
          <?php
            foreach ($user_courses as $course) {
              echo '<option value="'.htmlspecialchars($course['id']).'"';
              if ($course['id'] === $form['course']) {
                echo ' selected';
              }
              echo '>'.htmlspecialchars($course['department'].' '.$course['number'].' '.$course['title']).'</option>';
            }
          ?>
        </select>

        <p class="help-block">
          <?php if (has_error('course')) {
            echo $errors['course'];
          } else { ?>
          <?php } ?>
        <p>
            Which class is this study group for?
            Please choose a class you are attending.
            If the class you want doesn't appear on this list,
            go <a href="course_edit.php">add it to your list of classes</a>
      </div>


      <h2>Add people</h2>

      <div class="form-group <?= has_error('members') ?> <?= has_error('add_user') ?>">
        <?php
          foreach ($form['members'] as $id) {
            echo '<input type="hidden" name="members[]" value="'.htmlspecialchars($id).'">'."\n";
          }
        ?>
        <ul id="members-list">
          <?php
            foreach ($form['members'] as $id) {
              $user = get_user($db, $id);
              echo '<li>'.htmlspecialchars($user['name'])."</li>\n";
            }
          ?>
        </ul>

        <?php
          if (has_error('members')) {
            echo '<p class="help-block">'. htmlspecialchars($errors['members']);
          }
        ?>

        <label for="user-input">Add a user</label>
        <div class="input-group">
          <input type="text" id="user-input" class="form-control"
            name="add_user" value="<?=htmlspecialchars($form['add_user'])?>">
          <span class="input-group-btn">
            <button class="btn btn-primary" type="submit" id="add-button">Add</button>
          </span>
        </div>

        <?php
          if (has_error('add_user')) {
            echo '<p class="help-block">' . htmlspecialchars($errors['add_user']);
          }
        ?>

        <p class="help-block">
          To add a user, type their name or email address.
          These users will be added to your group when you create it.
          You can always add more people later.

      </div>

      <div class="form-group">
        <button class="btn btn-lg btn-success" type="submit">Create</button>
        <a class="btn btn-lg btn-danger" href="index.php">Cancel</a>
      </div>
    </form>

      </div>

          <div class="col-md-6">
      <h2>Info</h2>

      <div class="form-group <?= has_error('name') ?>">
        <label for="name-input">Name</label>
        <input name=name id="name-input" class="form-control"
          value="<?= htmlspecialchars($form['name']) ?>">
        <p class="help-block">
          Give your study group a name to distinguish it from other groups.
          If you leave this blank, a default name will be filled in.
      </div>

      <div class="row form-group <?= has_error('day').' '.has_error('time') ?>">
        <div class="col-md-6">
          <label for='input-day'>Day</label>
          <select id="input-day" name='day' class='form-control'>
            <option value=''></option>
            <?php
              foreach ($week_names as $value) {
                echo '<option value="'.$value.'">'.$value.'</option>';
              }
            ?>
          </select>
          <?php
            if (has_error('day')) {
              echo '<p class="help-block">' . htmlspecialchars($errors['day']);
            }
          ?>
        </div>

        <div class="col-md-6">
          <label for='input-time'> and Time (optional):</label>
          <select id="input-time" name='time' class='form-control'>
            <option value=''></option>
            <?php
              for($i=0;$i<24;$i++){
                $time = ($i+8)%24;
                echo "<option value='$time'>" . htmlspecialchars($time_names[$time]) . '</option>';
              }
            ?>
          </select>
          <?php
            if (has_error('time')) {
              echo '<p class="help-block">' . htmlspecialchars($errors['time']);
            }
          ?>
        </div>
      </div>

      <div class="row form-group <?php has_error('place') ?>">
        <div class="col-md-6">
          <label for="place-input">Place (optional)</label>
          <input name=place class="form-control"
            value="<?= htmlspecialchars($form['place']) ?>">    
            </div>
        <div class="col-md-6">
            <label for='input-campus'> And Campus</label>
            <select id="input-campus" name='campus' class='form-control'>
            <option value=''></option>
            <option value=1>Corvallis (Main)</option>
            <option value=2>Cascades</option>
            <option value=3>Online</option>
            </select>
        </div>  
        </div>      
          <p class="help-block">Set a time and place for your study group to meet. You can always change this later.</p>
          <?php
            if (has_error('place')) {
              echo '<p class="help-block">' . htmlspecialchars($errors['place']);
            }
          ?>

          </div>
    </div>

    <?php include 'includes/_footer.php' ?>

    <script>
      "use strict";
      $("#user-input").autocomplete({
        minLength: 2,
        select: function(event, ui) {
          $(this).data('item', ui.item);
          this.value = ui.item.value.e;
          event.preventDefault();
        },
        focus: function(event, ui) {
          $(this).data('item', null);
          event.preventDefault();
        },
        source: function(request, response) {
          if ( this.xhr ) {
              this.xhr.abort();
          }
          this.xhr = $.ajax({
            url: "autosuggest_user.php",
            data: {"q": request.term},
            dataType: "json",
            success: function( data ) {
                var items = $.map(data, function(item) {
                    return {label: item.n + " <"+item.e+">", value: item};
                });
                response( items );
            },
            error: function() {
                response([]);
            }
          });
        },
      });
      $("#add-button").click(function(event) {
        if ($("#user-input").val() === "") {
          event.preventDefault();
        }
      });
      $("#group-form").submit(function() {
        var that = this;
        var ul = $("#members-list");
        var input = $("#user-input");
        var item = input.data('item');
        if (item) {
          console.log(item);
          $('<li>')
            .text(item.label)
            .appendTo(ul);
          $('<input type="hidden" name="members[]">')
            .attr("value", item.value.id)
            .appendTo(that);
          input.data('item', null);
          input.val("");
          return false;
        }
      });
    </script>
  </body>
</html>