diff --git a/public/certificati.php b/public/certificati.php index 5f91f1c..20daba8 100644 --- a/public/certificati.php +++ b/public/certificati.php @@ -1,7 +1,5 @@ - connect_error) { die("Connessione fallita: " . $conn->connect_error); } -if (isset($_GET['message'])) { -$message = $_GET['message']; } else { $message='n'; } +if (isset($_GET['message'])) { + $message = $_GET['message']; +} else { + $message = 'n'; +} // ID dell'insegnante $idTeacher = 1; - // Controlla se il form è stato inviato if (isset($_POST['submit'])) { // Recupera la data dal form $dayoffdate = $_POST['dayoff']; - - // Query SQL per l'inserimento del day off $insertQuery = "INSERT INTO dayoff (idteacher, dayoffdate) VALUES ($idTeacher, '$dayoffdate')"; @@ -33,8 +31,6 @@ if (isset($_POST['submit'])) { } } - - // Query SQL $query = "SELECT * FROM certificateuserprofile LEFT JOIN auth_users ON certificateuserprofile.iduser=auth_users.id ORDER BY auth_users.last_name"; @@ -50,321 +46,285 @@ if ($result->num_rows > 0) { } ?> - - - + + + YogiBook - Prenotazioni YogaSoul + + + + + - -YogiBook - Prenotazioni YogaSoul - - - - - + + + + + + + - - - - - - - + + - - + + - + + + - - - - + .custom-event-time { + font-size: 24px; + } + } + + - - - -
- - -
-
-
- - - - + +
+

Prenotazione Classi

+
+ +
+
+ +
+ - - -
-

Prenotazione Classi

-
- - -
- -
- - - -
- -
-
-
-
- - -
+
+ +
+
+ +
- -
+
- - - -
-
- - -
-
-
- - - - -
- - + +
+
+ + +
+
+
+
+
+
- -
-
- -
-
-
- - - - -
-
-
- - -
-
-
-
- - - - - +
+
+ + +
+
+
+
+
+
+
+ + +
Benvenuta/o

Certificati

-
- - - - - - - - - - - - - - - - - -
NomeScadenzaDocumento
" target="_blank">DOC
- -
- - -
+
+ + + + + + + + + + + + + + + + + + + + + +
NomeScadenzaData CaricamentoDocumentoAzione
" target="_blank">DOC + +
- - - - - +
-
- - - - - +
- - + +
- - - - - - - - - - - - - - - - - + +
+ + + + + + + + \ No newline at end of file diff --git a/public/deletecertificate.php b/public/deletecertificate.php new file mode 100644 index 0000000..6fd1919 --- /dev/null +++ b/public/deletecertificate.php @@ -0,0 +1,41 @@ +connect_error) { + die("Connessione fallita: " . $conn->connect_error); +} + +if (isset($_GET['id'])) { + $id = intval($_GET['id']); // Sanitize input + // Optional: Verify user ownership for security (uncomment if needed) + /* + $iduserlogin = $_SESSION['iduserlogin']; // Assumes user ID is stored in session + $deleteQuery = "DELETE FROM certificateuserprofile WHERE idcertificateuserprofile = ? AND iduser = ?"; + $stmt = $conn->prepare($deleteQuery); + $stmt->bind_param("ii", $id, $iduserlogin); + */ + $deleteQuery = "DELETE FROM certificateuserprofile WHERE idcertificateuserprofile = ?"; + $stmt = $conn->prepare($deleteQuery); + $stmt->bind_param("i", $id); + + if ($stmt->execute()) { + // Determine redirect based on source + $source = isset($_GET['source']) ? $_GET['source'] : 'user'; + if ($source === 'admin') { + header("Location: certificati.php?message=success"); + } else { + header("Location: userprofiledoc.php?message=success"); + } + } else { + echo "Errore nella cancellazione: " . $conn->error; + } + $stmt->close(); +} else { + echo "ID non fornito."; +} + +$conn->close(); diff --git a/public/userprofiledoc.php b/public/userprofiledoc.php index 6d46b35..dc01e9b 100644 --- a/public/userprofiledoc.php +++ b/public/userprofiledoc.php @@ -13,8 +13,8 @@ $bookedclass->execute(); real_escape_string($_POST["documentDescription"]); + $expiryDate = $conn->real_escape_string($_POST["expiryDate"]); + $uploadedAt = date("Y-m-d"); // Data corrente per uploaded_at $originalFileName = $_FILES["fileToUpload"]["name"]; $fileExtension = pathinfo($originalFileName, PATHINFO_EXTENSION); $timestamp = time(); // Timestamp corrente @@ -41,17 +40,20 @@ if ($_SERVER["REQUEST_METHOD"] == "POST") { // Sposta il file nella cartella di destinazione if (move_uploaded_file($fileTmpName, $fileDestination)) { - // Inserisci i dati nel database - $sql = "INSERT INTO certificateuserprofile (iduser, documentdescription, filenamedocument, expirydatedocument) - VALUES ('$iduserlogin', '$documentDescription', '$newFileName', '$expiryDate')"; + // Inserisci i dati nel database usando prepared statement + $sql = "INSERT INTO certificateuserprofile (iduser, documentdescription, filenamedocument, expirydatedocument, uploaded_at) + VALUES (?, ?, ?, ?, ?)"; + $stmt = $conn->prepare($sql); + $stmt->bind_param("issss", $iduserlogin, $documentDescription, $newFileName, $expiryDate, $uploadedAt); - if ($conn->query($sql) === TRUE) { + if ($stmt->execute()) { echo ""; } else { $error_message = "Errore durante l'inserimento nel database: " . $conn->error; echo ""; echo ""; } + $stmt->close(); } else { $error_message = "Errore nel caricamento del file."; echo ""; @@ -61,9 +63,9 @@ if ($_SERVER["REQUEST_METHOD"] == "POST") { // Chiudi la connessione al database $conn->close(); } else { - $error_message = "Nessun file caricato o errore durante il caricamento."; + $error_message = "Tutti i campi sono obbligatori: descrizione, data di scadenza e file."; echo ""; - echo ""; + echo ""; } } ?> @@ -99,7 +101,7 @@ if ($result->num_rows > 0) { $conn->close(); ?> -connect_error) { @@ -150,16 +152,17 @@ while ($row = $result->fetch_assoc()) { $documents[] = $row; } +$conn->close(); ?> - Starter Page | webadmin - Admin & Dashboard Template + YogiBook - Carica Certificati - - + + @@ -180,7 +183,8 @@ while ($row = $result->fetch_assoc()) {