merge

DBConn.php

@@ -0,0 +1,281 @@
+<?php
+class DBConn{
+	private $conn;
+	private $errors = array();
+	private $numRows = 0;
+
+	function __construct()
+	{
+		$this->connectToDatabase();
+	}
+
+	function connectToDatabase()
+	{
+		$dsn = "mysql:dbname=db;host=localhost";
+		$user = "root";
+		$password = "";
+		try{
+			$this->conn = new PDO($dsn, $user, $password);
+		}
+		catch(Exception $e)
+		{
+			$this->errors[] = $e->getMessage();
+			return false;
+		}
+		return true;
+	}
+
+	function close()
+	{
+		$this->conn = NULL;
+	}
+
+	function rowCount()
+	{
+		return $this->numRows;
+	}
+
+	function update($query, $newValues = array(), $whereValues = array())
+	{	//echo "update function parameters passed in<br>newValues: ".print_r($newValues, true)."<br>whereValues: ".print_r($whereValues, true)."</pre>";
+		$this->numRows = 0;
+                $this->errors = array();
+		if(!is_array($newValues))
+		{
+			$newValues = (array)$newValues;
+		}
+		if(!is_array($whereValues))
+		{
+			$whereValues = (array)$whereValues;
+		}
+		$newValues = $this->clean($newValues);
+		$whereValues = $this->clean($whereValues);
+		try{
+			//echo "preparing update<br>";
+			if (($stmt = $this->conn->prepare($query)) === false)
+			{
+				$this->errors[] = "Error preparing update query: ".$query.PHP_EOL."Values: ".print_r($newValues, true).print_r($whereValues, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			$count = 1;
+			if (count($newValues)>0)
+			{//echo "new values count > 0. <br>";
+				foreach($newValues as $key=>&$value)
+				{
+					//echo "binding value: $value<br>";
+					if(($stmt->bindParam($count, $value)) === false)
+					{
+						$this->errors[] = "Error binding 'new' parameters for update statement: ".$query.PHP_EOL."Values: ".print_r($newValues, true).print_r($whereValues, true);
+						$messageArray = $stmt->errorInfo();
+						$this->errors[] = $messageArray[2];
+						return false;
+					}
+					$count++;
+				}
+			}
+			if (count($whereValues)>0)
+			{//echo "where values count > 0.<br>";
+				foreach($whereValues as $key=>&$value)
+				{//echo "binding value: $value<br>";
+					if(($stmt->bindParam($count, $value)) === false)
+					{
+						$this->errors[] = "Error binding 'where' parameters for update statement: ".$query.PHP_EOL."Values: ".print_r($newValues, true).print_r($whereValues, true);
+						$messageArray = $stmt->errorInfo();
+						$this->errors[] = $messageArray[2];
+						return false;
+					}
+					$count++;
+				}
+			}
+			if (($stmt->execute()) === false)
+			{
+				$this->errors[] = "Error executing update statement: ".$query.PHP_EOL."Values: ".print_r($newValues, true).print_r($whereValues, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			//echo "statement executed<br>";
+		}
+		catch(Exception $e)
+		{
+			$this->errors[] = $e->getMessage();
+			return false;
+		}
+		$this->numRows = $stmt->rowCount();
+		//echo "update statement should have been successful<br>";
+		return true;
+	}
+
+	function insert($query, $values = array())
+	{
+		$this->numRows = 0;
+                $this->errors = array();
+		if(!is_array($values))
+		{
+			$values = (array)$values;
+		}
+		$values = $this->clean($values);
+		try{
+			if (($stmt = $this->conn->prepare($query)) === false)
+			{
+				$this->errors[] = "Error preparing insert query: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			if (count($values)>0)
+			{
+				foreach($values as $key=>&$value)
+				{
+					if(($stmt->bindParam($key + 1, $value)) === false)
+					{
+						$this->errors[] = "Error binding parameters for insert statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+						$messageArray = $stmt->errorInfo();
+						$this->errors[] = $messageArray[2];
+						return false;
+					}
+				}
+			}
+			if (($stmt->execute()) === false)
+			{
+				$this->errors[] = "Error executing insert statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+		}
+		catch(Exception $e)
+		{
+			$this->errors[] = $e->getMessage();
+			return false;
+		}
+		$this->numRows = $stmt->rowCount();
+		return true;
+	}
+
+
+	function select($query, $values = array())
+	{
+		$this->numRows = 0;
+                $this->errors = array();
+		if(!is_array($values))
+		{
+			$values = (array)$values;
+		}
+		$values = $this->clean($values);
+		try{
+			if (($stmt = $this->conn->prepare($query)) === false)
+			{
+				$this->errors[] = "Error preparing select query: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			if(count($values)>0)
+			{
+				foreach($values as $key=>&$value)
+				{
+					if(($stmt->bindParam($key + 1, $value)) === false)
+					{
+						$this->errors[] = "Error binding parameters for select statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+						$messageArray = $stmt->errorInfo();
+						$this->errors[] = $messageArray[2];
+						return false;
+					}
+				}
+			}
+			if (($stmt->execute()) === false)
+			{
+				$this->errors[] = "Error executing select statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			if (($rows = $stmt->fetchAll(PDO::FETCH_ASSOC)) === false)
+			{
+				$this->errors[] = "Error fetching rows for query: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+		}
+		catch(Exception $e)
+		{
+			$this->errors[] = $e->getMessage();
+			return false;
+		}
+		$this->numRows = count($rows);
+		return $rows;
+	}
+
+	function delete($query, $values = array())
+	{
+		$this->numRows = 0;
+                $this->errors = array();
+		if(!is_array($values))
+		{
+			$values = (array)$values;
+		}
+		$values = $this->clean($values);
+		try{
+			if (($stmt = $this->conn->prepare($query)) === false)
+			{
+				$this->errors[] = "Error preparing delete query: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+			if (count($values)>0)
+			{
+				foreach($values as $key=>&$value)
+				{
+					if(($stmt->bindParam($key + 1, $value)) === false)
+					{
+						$this->errors[] = "Error binding parameters for delete statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+					$messageArray = $stmt->errorInfo();
+					$this->errors[] = $messageArray[2];
+						return false;
+					}
+				}
+			}
+			if (($stmt->execute()) === false)
+			{
+				$this->errors[] = "Error executing delete statement: ".$query.PHP_EOL."Values: ".print_r($values, true);
+				$messageArray = $stmt->errorInfo();
+				$this->errors[] = $messageArray[2];
+				return false;
+			}
+		}
+		catch(Exception $e)
+		{
+			$this->errors[] = $e->getMessage();
+			return false;
+		}
+		$this->numRows = $stmt->rowCount();
+		return true;
+	}
+
+	function getErrors()
+	{
+		return $this->errors;
+	}
+
+	function clean($values = array())
+	{//echo "in clean, values passed in: <pre>".print_r($values, true)."</pre><br>";
+		$cleanValues = array();
+		foreach($values as $key=>$value)
+		{
+			if (is_array($value))
+			{
+				$cleanValues[$key] = $this->clean($value);
+			}
+			else
+			{
+				$cleanValues[$key] = htmlspecialchars($value);
+			}
+		}
+		return $cleanValues;
+	}
+}
+?>

DML/deleteFile.php

@@ -0,0 +1,22 @@
+<?php
+$servername = "localhost";
+$username = "root";
+$dbname = "db";
+
+// Create connection
+$conn = new mysqli($servername, $username, "", $dbname);
+
+// Check connection
+if ($conn->connect_error) {
+    die("Connection failed: " . $conn->connect_error);
+}
+// prepare and bind
+$stmt = $conn->prepare("DELETE FROM file WHERE groupid =?)");
+$stmt->bind_param("i", $groupid);
+
+//execute
+$stmt->execute();
+$stmt->close();
+$conn->close();
+///filesystem operations still need to be dealt with
+?>

DML/getPermission.php

@@ -0,0 +1,28 @@
+<?php
+$servername = "localhost";
+$username = "root";
+$password = "";
+$dbname = "db";
+$input = "test";
+$id= "";
+
+// Create connection
+$conn = new mysqli($servername, $username, "", $dbname);
+// Check connection
+if ($conn->connect_error) {
+    die("Connection failed: " . $conn->connect_error);
+}
+
+// prepare and bind
+$stmt = $conn->prepare("select permission_name FROM permission WHERE id=?");
+$stmt->bind_param("i", $usertypeid);
+
+//execute
+$stmt->execute();
+$stmt->bind_result($id);
+$stmt->store_result();
+$stmt->fetch();
+echo $id;
+$stmt->close();
+$conn->close();
+?>

DML/insertFile.php

@@ -0,0 +1,20 @@
+<?php
+$servername = "localhost";
+$username = "root";
+$dbname = "db";
+// Create connection
+$conn = new mysqli($servername, $username, "", $dbname);
+// Check connection
+if ($conn->connect_error) {
+    die("Connection failed: " . $conn->connect_error);
+}
+// prepare and bind
+$stmt = $conn->prepare("INSERT INTO file (groupid, path, activeuserflag) VALUES (?, ?, ?, ?)");
+$stmt->bind_param("sss", $username, $hashedpassword, $usertypeid, $activeuserflag);
+//execute
+$stmt->execute();
+$stmt->close();
+$conn->close();
+
+///filesystem operatinos still need to be dealt with
+?>

DML/insertUser.php

@@ -15,6 +15,13 @@
 $stmt = $conn->prepare("INSERT INTO user (username, hashedpassword, usertypeid, activeuserflag) VALUES (?, ?, ?, ?)");
 $stmt->bind_param("sss", $username, $hashedpassword, $usertypeid, $activeuserflag);
 
+//execute
+$stmt->execute();
+
+////set permission////
+// prepare and bind
+$stmt = $conn->prepare("INSERT INTO permissiongroup (permissionid) VALUES (?)");
+$stmt->bind_param("i", $permissionid);
 
 //execute
 $stmt->execute();