<?php

// redirect

// Purpose: Re-directs to the provided page, relative to current page

function redirect($page) {

}

// Check whether session created (is user logged in?)

// If not, re-direct to main index page.

session_start();

if(!isset($_SESSION['username']))

{

// Not logged in, re-direct to the login page

redirect('../index.php');

}

// This page should always be submitted with a GET request method

// If it is not, redirect to logged in home page

if(!isset($_GET['cid'])) {

redirect('../home.php');

} else {

// Get details for this course

// Connect to database

$host = "127.0.0.1";

$user = "rgordonatrsgc";

$pass = "";

$db = "ct";

$port = 3306;

// Establish the connection

// (note username and password here is the *database* username and password, not for a user of this website)

$connection = mysqli_connect($host, $user, $pass, $db, $port) or die(mysql_error());

// Get the provided course id

$provided_id = htmlspecialchars($_GET['cid']);

// Run the query

$query = "SELECT id, code, url FROM course WHERE id = " . $provided_id . ";";

$result = mysqli_query($connection, $query);

// Verify that a result was obtained from the database

if ($result == false) {

// Something happened when talking to database, re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

if (mysqli_num_rows($result) != 1) {

// This shouldn't happen either, course-id should exist and return a single row, so,

// re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

// We have a valid result for this course

// TO DO: Save the course id in the session, to be used by pages below this page in

// site hierarchy

$row = mysqli_fetch_assoc($result);

$course_code = $row['code'];

$course_url = $row['url'];

$course_id = $row['id'];

// Build query for questions count

$query = "SELECT COUNT(DISTINCT q.id) AS questions_count ";

$query .= "FROM course c ";

$query .= "INNER JOIN strand s ";

$query .= "ON s.course_id = c.id ";

$query .= "INNER JOIN overall_expectation o ";

$query .= "ON o.strand_id = s.id ";

$query .= "INNER JOIN minor_expectation m ";

$query .= "ON m.overall_expectation_id = o.id ";

$query .= "INNER JOIN question_has_minor_expectation qm ";

$query .= "ON qm.minor_expectation_id = m.id ";

$query .= "INNER JOIN question q ";

$query .= "ON qm.question_id = q.id ";

$query .= "WHERE c.id = " . $course_id . ";";

// Run query

$result = mysqli_query($connection, $query);

// Check for a result

if ($result == false) {

// Something happened when talking to database, re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

if (mysqli_num_rows($result) != 1) {

// This shouldn't happen either, query uses aggregate function and should return a single row, so,

// re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

// We have a valid result for this query

$row = mysqli_fetch_assoc($result);

$questions_count = $row['questions_count'];

}

}

// Build query

$query = "SELECT COUNT(m.id) AS expectations_count ";

$query .= "FROM course c ";

$query .= "INNER JOIN strand s ";

$query .= "ON s.course_id = c.id ";

$query .= "INNER JOIN overall_expectation o ";

$query .= "ON o.strand_id = s.id ";

$query .= "INNER JOIN minor_expectation m ";

$query .= "ON m.overall_expectation_id = o.id ";

$query .= "WHERE c.id = " . $course_id . ";";

// Run query

$result = mysqli_query($connection, $query);

// Check for a result

if ($result == false) {

// Something happened when talking to database, re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

if (mysqli_num_rows($result) != 1) {

// This shouldn't happen either, query uses aggregate function and should return a single row, so,

// re-direct to logged-in home page

// TODO: Implement proper error logging

redirect('../home.php');

} else {

// We have a valid result for this query

$row = mysqli_fetch_assoc($result);

$expectations_count = $row['expectations_count'];

}

}

}

}

}

?>

<!doctype html>

<html lang="en">

<head>

<meta charset="utf-8">

<title>Curriculum Organizer</title>

<link rel="stylesheet" href="../css/style.css?v=1.0">

<!-- A properly secured site would serve this page over HTTPS (secure HTTP). Why is that? -->

</head>

<body>

<header>

<ul>

<li><img src="../images/logo-small.png"/></li>

</ul>

</header>

<nav>

<ul>

<li><a href="../home.php">Home</a> > <?php echo $course_code; ?></li>

<li><a href="../logout.php">logout</a></li>

<li><?php echo $_SESSION['username']; ?></li>

</ul>

</nav>

<main>

<p>

<ul>

<li><a href="./questions/?cid=<?php echo $course_id ?>">See Questions (<?php echo $questions_count; ?> so far)</a></li>

<li><a href="./curriculum/?cid=<?php echo $course_id ?>">See Curriculum (<?php echo $expectations_count; ?> expectations)</a></li>

</ul>

</p>

<p><a href="<?php echo $course_url; ?>">Canoninical Curriculum</a></p>

</main>

</body>

</html>