function selectAppointment() { if (!empty($_GET['type']) && !empty($_GET['of'])) { $type = $_GET['type']; $of = $_GET['of']; $do = $type === "confirm" ? 'confirmed' : 'canceled'; $query = " SELECT `id`,`current_user` FROM `appointment` WHERE `id` = '" . $of . "' AND `doctor`= '" . $this->getFirstName() . " " . $this->getLastName() . "'"; $result = $this->getDB()->query($query); $this->fetchData($this->getSessionUser()); if ($result->num_rows >= 0) { $row = $result->fetch_assoc(); $user = $row['current_user']; $tempmem = new Members(); $tempmem->setDB($this->getDB()); $tempmem->fetchData($user); echo $user; echo $tempmem->getEmail(); if ($type === 'confirm') { $query = "UPDATE `appointment` SET `is_approved` = '1' WHERE `id` ='" . $of . "' AND `doctor`='" . $this->getFirstName() . " " . $this->getLastName() . "'"; Members::sendMail($tempmem->getEmail(), "Your appointment has been approvedd"); } else { $query = "UPDATE `appointment` SET `is_approved` = '0' WHERE `id` ='" . $of . "' AND `doctor`='" . $this->getFirstName() . " " . $this->getLastName() . "'"; Members::sendMail($tempmem->getEmail(), "Your appointment has been canceled"); } $result = $this->getDB()->query($query); if ($this->getDB()->affected_rows > 0) { $msg = "Appointment has been " . $do; self::setMessage($msg); } else { $msg = "You are not allowed to " . $do . " this appointmnet"; self::setMessage($msg); } } else { $msg = "You are not allowed to " . $do . " this appointmnet"; self::setMessage($msg); } } }
<?php include 'src/Members.php'; $members = new Members(); $members->setDB(); $members->redirect(); $members->fetchData($members->getSessionUser());