PROJET-WEB_STRI1A/WEB/deposer_avis/deposer_avis.php

<?php

//Declaration des fonctions

function checkAvis($db, $mail, $codetrajet)
{
    $result = pg_query_params($db, "SELECT COUNT(*) FROM avis WHERE mailEmetteur = $1 AND codetrajet = $2;", array($mail, $codetrajet));
    $row = pg_fetch_array($result);
    return $row[0] == 0;
}

function checkCodeTrajetAvis($db, $mail, $codetrajet)
{
    $result = pg_query_params($db, "SELECT COUNT(*) FROM trajet tr, reserver re WHERE tr.codetrajet = $1 AND tr.codetrajet = re.codetrajet AND re.mailutilisateur = $2;", array($codetrajet, $mail));
    $row = pg_fetch_array($result);
    return $row[0] >= 1;
}

//Importation des fichiers necessaires

session_start();
require_once("../connexionBD.php");
require_once("../ressources/user.php");

//Si on est pas connecté redirection vers la page de connexion

if (!isset($_SESSION['mail'])) {
    header('Location: ../index.php');
    exit();
}

$mail = $_SESSION['mail'];
if (isset($_POST['codetrajet']) && isset($_POST['avislaisse']) && isset($_POST['note'])) {
  	//Recuperation des variables passer par le formulaire
    $avis = $_POST['avislaisse'];
    $note = $_POST['note'];
    $codetrajet = intval($_POST['codetrajet']);
    $date = date('Y-m-d H:i:s');
    if (checkAvis($db, $mail, $codetrajet) && checkCodeTrajetAvis($db, $mail, $codetrajet)) {
        $requete = "INSERT INTO avis (mailemetteur, codetrajet, commentaire, dateavis, note, estlu) VALUES ($1,$2,$3,$4,$5, false);"; //Requete d'insertion
        $envoi = pg_query_params($db, $requete, array($mail, $codetrajet, $avis, $date, $note)); // Envoie de la requete
        if (!$envoi) { //Erreur
            echo "Erreur d'ecriture dans la BD";
            echo "<br><a href='../tableauBord/tableauBord.php'>Retour vers le tableau de bord</a>";
            exit();
        } else { //Redirection en cas de reussite
            header('Location: ../tableauBord/tableauBord.php');
            exit();
        }
    }
}
?>
<!DOCTYPE html>
<html lang="fr">
<head>
    <meta charset="UTF-8">
    <link rel="stylesheet" href="deposer_avis.css">
    <link rel="stylesheet" href="../ressources/navbarhtml.css">
    <link rel="icon" href="../ressources/favicon.ico"/>
    <title>Deposer un avis</title>
</head>
<body>
<?php require_once("../ressources/navbarhtml.php"); ?>
<div id="container">
    <div id="entete"> <--Entete-->
        <h1 id="titre">Deposer un avis</h1>
    </div>
    <div id="form"><--Formulaire-->
        <form id="formulaire_avis" enctype="multipart/form-data" action="deposer_avis.php" method="post">
            <textarea id="avis_laisse" name="avislaisse" form="formulaire_avis" placeholder="Avis"></textarea> <--Champ_de_saisie_d_avis-->
            <h2>NOTE</h2>
            <div class="rating"><--Bouton_note-->
                <input type="radio" name="note" id="note3" value="3">
                <a href="#3" label for="note3" title="Donner 3 étoiles">☆</a>
                <input type="radio" name="note" id="note2" value="2">
                <a href="#2" label for="note2" title="Donner 2 étoiles">☆</a>
                <input type="radio" name="note" id="note1" value="1">
                <a href="#1" label for="note1" title="Donner 1 étoiles">☆</a>
                <?php
                if (isset($_GET['codetrajet'])) {
                    $codeTrajet = $_GET['codetrajet'];
                    echo "<input type='hidden' name='codetrajet' value='$codeTrajet'>";
                }
                ?>
            </div>
            <br>
            <input type="submit" value="Valider" id="submit"><--Envoie-->
        </form>
    </div>
</div>
</body>
</html>
Commentaire code 6 years ago			`<?php`

			`//Declaration des fonctions`

			`function checkAvis($db, $mail, $codetrajet)`
			`{`
			`$result = pg_query_params($db, "SELECT COUNT(*) FROM avis WHERE mailEmetteur = $1 AND codetrajet = $2;", array($mail, $codetrajet));`
			`$row = pg_fetch_array($result);`
			`return $row[0] == 0;`
			`}`

			`function checkCodeTrajetAvis($db, $mail, $codetrajet)`
			`{`
			`$result = pg_query_params($db, "SELECT COUNT(*) FROM trajet tr, reserver re WHERE tr.codetrajet = $1 AND tr.codetrajet = re.codetrajet AND re.mailutilisateur = $2;", array($codetrajet, $mail));`
			`$row = pg_fetch_array($result);`
			`return $row[0] >= 1;`
			`}`

			`//Importation des fichiers necessaires`

			`session_start();`
			`require_once("../connexionBD.php");`
			`require_once("../ressources/user.php");`

			`//Si on est pas connecté redirection vers la page de connexion`

			`if (!isset($_SESSION['mail'])) {`
			`header('Location: ../index.php');`
			`exit();`
			`}`

			`$mail = $_SESSION['mail'];`
			`if (isset($_POST['codetrajet']) && isset($_POST['avislaisse']) && isset($_POST['note'])) {`
			`//Recuperation des variables passer par le formulaire`
			`$avis = $_POST['avislaisse'];`
			`$note = $_POST['note'];`
			`$codetrajet = intval($_POST['codetrajet']);`
			`$date = date('Y-m-d H:i:s');`
			`if (checkAvis($db, $mail, $codetrajet) && checkCodeTrajetAvis($db, $mail, $codetrajet)) {`
			`$requete = "INSERT INTO avis (mailemetteur, codetrajet, commentaire, dateavis, note, estlu) VALUES ($1,$2,$3,$4,$5, false);"; //Requete d'insertion`
			`$envoi = pg_query_params($db, $requete, array($mail, $codetrajet, $avis, $date, $note)); // Envoie de la requete`
			`if (!$envoi) { //Erreur`
			`echo "Erreur d'ecriture dans la BD";`
			`echo "<br><a href='../tableauBord/tableauBord.php'>Retour vers le tableau de bord</a>";`
			`exit();`
			`} else { //Redirection en cas de reussite`
			`header('Location: ../tableauBord/tableauBord.php');`
			`exit();`
			`}`
			`}`
			`}`
			`?>`
			`<!DOCTYPE html>`
			`<html lang="fr">`
			`<head>`
			`<meta charset="UTF-8">`
			`<link rel="stylesheet" href="deposer_avis.css">`
			`<link rel="stylesheet" href="../ressources/navbarhtml.css">`
			`<link rel="icon" href="../ressources/favicon.ico"/>`
			`<title>Deposer un avis</title>`
			`</head>`
			`<body>`
			`<?php require_once("../ressources/navbarhtml.php"); ?>`
			`<div id="container">`
			`<div id="entete"> <--Entete-->`
			`<h1 id="titre">Deposer un avis</h1>`
			`</div>`
			`<div id="form"><--Formulaire-->`
			`<form id="formulaire_avis" enctype="multipart/form-data" action="deposer_avis.php" method="post">`
			`<textarea id="avis_laisse" name="avislaisse" form="formulaire_avis" placeholder="Avis"></textarea> <--Champ_de_saisie_d_avis-->`
			`<h2>NOTE</h2>`
			`<div class="rating"><--Bouton_note-->`
			`<input type="radio" name="note" id="note3" value="3">`
			`<a href="#3" label for="note3" title="Donner 3 étoiles">☆</a>`
			`<input type="radio" name="note" id="note2" value="2">`
			`<a href="#2" label for="note2" title="Donner 2 étoiles">☆</a>`
			`<input type="radio" name="note" id="note1" value="1">`
			`<a href="#1" label for="note1" title="Donner 1 étoiles">☆</a>`
			`<?php`
			`if (isset($_GET['codetrajet'])) {`
			`$codeTrajet = $_GET['codetrajet'];`
			`echo "<input type='hidden' name='codetrajet' value='$codeTrajet'>";`
			`}`
			`?>`
			`</div>`
			`<br>`
			`<input type="submit" value="Valider" id="submit"><--Envoie-->`
			`</form>`
			`</div>`
			`</div>`
			`</body>`
			`</html>`