<?php
session_start();
include '../DBBaseTable.php';
$username = '';
$password = '';
if (isset($_POST['username'])) {
$username = $_POST['username'];
}
if (isset($_POST['password'])) {
$password = $_POST['password'];
}
if (strlen($username) > 0 && strlen($password) > 0) {
$t = new DBBaseTable("User");
$result = $t->query_by_field("username", $username);
if (count($result) > 0) {
if ($result[0]['password'] === md5($password)) {
$_SESSION['CURRENT_USER_ID'] = $result[0]['uid'];
$_SESSION['CURRENT_USER'] = $result[0]['username'];
echo '{"status":"success"}';
exit;
} else {
echo '{"status":"error", "message":"password error"}';
exit;
}
}
}
echo '{"status":"error"}';
exit;
if (isset($_POST['keyword'])) {
$keyword = $_POST['keyword'];
}
if (isset($_POST['category'])) {
$category = $_POST['category'];
}
if (strlen($keyword) > 0 && strlen($category) > 0) {
$t = new DBBaseTable("goods");
$where = "title LIKE " . "'%" . $keyword . "%' AND category = '" . $category . "'";
$result = $t->query_by_where($where);
echo json_encode($result);
exit;
} elseif (strlen($keyword) > 0) {
$t = new DBBaseTable("goods");
$where = "title LIKE " . "'%" . $keyword . "%'";
$result = $t->query_by_where($where);
echo json_encode($result);
exit;
} elseif (strlen($category) > 0) {
$t = new DBBaseTable("goods");
$result = $t->query_by_field("category", $category);
echo json_encode($result);
exit;
} else {
$t = new DBBaseTable("goods");
$result = $t->query_by_nothing();
echo json_encode($result);
exit;
}
echo '{"status":"error"}';
exit;
<?php
session_start();
include '../DBBaseTable.php';
$userID = '';
if (isset($_POST['userID'])) {
$userID = $_POST['userID'];
}
if (strlen($userID) == 0 && isset($_SESSION['CURRENT_USER_ID'])) {
$userID = $_SESSION['CURRENT_USER_ID'];
}
// else{
// if not signed in, redirect to login.html
// header("Location: ../../index/login.html"); /* Redirect browser */
// exit();
// }
if (strlen($userID) > 0) {
$t = new DBBaseTable("goods");
$result = $t->query_by_field("userID", $userID);
echo json_encode($result);
exit;
}
echo '{"status":"error"}';
exit;
