"); var_dump($_POST); echo(""); exit(); } if($tools->validate_form("mod", "add")) { if($tools->validate_form(['date', 'name', 'start_time', 'end_time', 'place', 'notes', 'token'])) { if($_POST["token"] == $_SESSION['token']) { bdump("adding training"); $place = $tools->checkPlaceParam($_POST["place"]); $crud->add_training($_POST["date"], $_POST["name"], $_POST["start_time"], $_POST["end_time"], $_POST["chief"][0], $tools->extract_unique($_POST["crew"]), $place, $_POST["notes"], $tools->extract_unique([$_POST["chief"],$_POST["crew"]]), $user->name()); $tools->redirect("trainings.php"); } else { debug(); //TODO: remove debug info } } else { debug(); } } elseif($tools->validate_form("mod", "edit")) { if($tools->validate_form(['id', 'date', 'name', 'start_time', 'end_time', 'chief', 'place', 'notes', 'token'])) { if($_POST["token"] == $_SESSION['token']) { bdump($_POST); bdump("editing training"); $place = $tools->checkPlaceParam($_POST["place"]); $crud->edit_training($_POST["id"], $_POST["date"], $_POST["name"], $_POST["start_time"], $_POST["end_time"], $_POST["chief"][0], $tools->extract_unique($_POST["crew"]), $place, $_POST["notes"], $tools->extract_unique([$_POST["chief"],$_POST["crew"]]), $user->name()); $tools->redirect("trainings.php"); } else { debug(); } } else { debug(); } } elseif($tools->validate_form("mod", "delete")) { bdump("removing training"); if($tools->validate_form(['id', 'increment', 'token'])) { if($_POST["token"] == $_SESSION['token']) { bdump("removing training"); $crud->remove_training($_POST["id"], $_POST["increment"]); $tools->redirect("trainings.php"); } else { debug(); } } else { debug(); } } else { if(isset($_GET["add"])||isset($_GET["edit"])||isset($_GET["delete"])||isset($_GET["mod"])) { $_SESSION["token"] = bin2hex(random_bytes(64)); } $crew = $database->exec("SELECT * FROM `%PREFIX%_profiles` ORDER BY name ASC;", true); $modalità = (isset($_GET["add"])) ? "add" : ((isset($_GET["edit"])) ? "edit" : ((isset($_GET["delete"])) ? "delete" : "add")); bdump($modalità, "modalità"); bdump($crew, "crew"); $id = ""; if(isset($_GET["id"])) { $id = $_GET["id"]; bdump($database->exists("trainings", $id)); $values = $database->exec("SELECT * FROM `%PREFIX%_trainings` WHERE `id` = :id", true, [":id" => $id])[0]; bdump($values); } else { $values = []; } if(isset($_GET["increment"])) { $increment = $_GET["increment"]; } else { $increment = ""; } if($modalità=="edit" || $modalità=="delete") { if(empty($id)) { $tools->redirect("accessdenied.php"); } elseif (!$database->exists("trainings", $id)) { //$tools->redirect("accessdenied.php"); } } loadtemplate('edit_training.html', ['training' => ['id' => $id, 'token' => $_SESSION['token'], 'modalità' => $modalità, 'crew' => $crew], 'values' => $values, 'increment' => $increment, 'title' => ucfirst($modalità) . ' '.ucfirst(t("training", false))]); bdump($_SESSION['token'], "token"); } ?>