/admin_editToDB.php

https://github.com/loboda/cs411 · PHP · 301 lines · 237 code · 63 blank · 1 comment · 54 complexity · fa98117eae5910df90b09d1afdf1422f MD5 · raw file

  1. <?php
  2. include 'includes/mysqlAdminLoginAssignment.php';
  3. $table=$_GET["table"];
  4. if ($table == "assignment")
  5. {
  6. $assnID=$_GET["assnID"];
  7. $assnName=$_GET["assnName"];
  8. $groupWork=$_GET["groupWork"];
  9. $maxMark=$_GET["maxMark"];
  10. $avgMark=$_GET["avgMark"];
  11. $medianMark=$_GET["medianMark"];
  12. $courseID=$_GET["courseID"];
  13. $month=$_GET["month"];
  14. $day=$_GET["day"];
  15. $year=$_GET["year"];
  16. $hour=$_GET["hour"];
  17. $minute=$_GET["minute"];
  18. $second=$_GET["second"];
  19. $dueTime = mktime($hour, $minute, $second, $month, $day, $year, -1);
  20. $query = "UPDATE assignment SET AssnName='$assnName', GroupWork='$groupWork', MaxMark='$maxMark', AvgMark='$avgMark', MedianMark='$medianMark', CourseID='$courseID', DueTime=FROM_UNIXTIME('$dueTime') WHERE AssnID='$assnID'";
  21. if (!mysql_query($query, $mysqlConnection))
  22. {
  23. die ('Error: ' . mysql_error());
  24. }
  25. mysql_close($mysqlConnection);
  26. ?>
  27. <script src="admin_functions.js"></script>
  28. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=1">
  29. <?php
  30. }
  31. if ($table == "automarking")
  32. {
  33. $automarkID=$_GET["AutomarkID"];
  34. $sampleSoln=$_GET["SampleSoln"];
  35. $configs=$_GET["Configs"];
  36. $assnID=$_GET["AssnID"];
  37. $query = "UPDATE automarking SET SampleSoln='$sampleSoln', Configs='$configs', AssnID='$assnID' WHERE AutomarkID='$automarkID'";
  38. if (!mysql_query($query, $mysqlConnection))
  39. {
  40. die ('Error: ' . mysql_error());
  41. }
  42. mysql_close($mysqlConnection);
  43. ?>
  44. <script src="admin_functions.js"></script>
  45. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=2">
  46. <?php
  47. }
  48. if ($table == "course")
  49. {
  50. $courseID=$_GET["CourseID"];
  51. $courseName=$_GET["CourseName"];
  52. $semesterName=$_GET["SemesterName"];
  53. $query = "SELECT * FROM `course` WHERE CourseName = '$courseName' AND SemesterName = '$semesterName '";
  54. $result = mysql_query($query) or die(mysql_error());
  55. if($row = mysql_fetch_array($result)) //if we did return a record
  56. {
  57. echo "This course already exists in the database!";
  58. return;
  59. }
  60. $query = "UPDATE course SET CourseName='$courseName', SemesterName='$semesterName' WHERE CourseID='$courseID'";
  61. if (!mysql_query($query, $mysqlConnection))
  62. {
  63. die ('Error: ' . mysql_error());
  64. }
  65. mysql_close($mysqlConnection);
  66. ?>
  67. <script src="admin_functions.js"></script>
  68. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=3">
  69. <?php
  70. }
  71. if ($table == "group")
  72. {
  73. $oldGroup = $_GET['OldGroup'];
  74. $oldAssn = $_GET['OldAssn'];
  75. $groupName = $_GET['GroupName'];
  76. $assnID = $_GET['AssnID'];
  77. $query = "UPDATE `group` SET GroupName='$groupName', AssnID='$assnID' WHERE GroupName='$oldGroup' AND AssnID='$oldAssn'";
  78. if (!mysql_query($query, $mysqlConnection))
  79. {
  80. die ('Error: ' . mysql_error());
  81. }
  82. mysql_close($mysqlConnection);
  83. ?>
  84. <script src="admin_functions.js"></script>
  85. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=4">
  86. <?php
  87. }
  88. if ($table == "instructor")
  89. {
  90. $instructorID=$_GET["InstructorID"];
  91. $firstName=$_GET["FirstName"];
  92. $lastName=$_GET["LastName"];
  93. $phoneNumber=$_GET["PhoneNumber"];
  94. $officeLocation=$_GET["OfficeLocation"];
  95. $email=$_GET["Email"];
  96. $query = "UPDATE `instructor` SET FirstName='$firstName', LastName='$lastName', PhoneNumber='$phoneNumber', OfficeLocation='$officeLocation', Email='$email' WHERE InstructorID='$instructorID'";
  97. if (!mysql_query($query, $mysqlConnection))
  98. {
  99. die ('Error: ' . mysql_error());
  100. }
  101. mysql_close($mysqlConnection);
  102. ?>
  103. <script src="admin_functions.js"></script>
  104. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=5">
  105. <?php
  106. }
  107. if ($table == "memberof")
  108. {
  109. $oldGroup=$_GET["OldGroup"];
  110. $oldStudentID=$_GET["OldStudentID"];
  111. $oldAssn=$_GET["OldAssnID"];
  112. $groupName=$_GET["GroupName"];
  113. $studentID=$_GET["StudentID"];
  114. $assnID=$_GET["AssnID"];
  115. $query = "UPDATE `memberof` SET GroupName='$groupName', StudentID='$studentID', AssnID='$assnID' WHERE GroupName='$oldGroup' AND StudentID='$oldStudentID' AND AssnID='$oldAssn'";
  116. if (!mysql_query($query, $mysqlConnection))
  117. {
  118. die ('Error: ' . mysql_error());
  119. }
  120. mysql_close($mysqlConnection);
  121. ?>
  122. <script src="admin_functions.js"></script>
  123. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=6">
  124. <?php
  125. }
  126. if ($table == "questions")
  127. {
  128. $questionID=$_GET["QuestionID"];
  129. $questionName=$_GET["QuestionName"];
  130. $fullMark=$_GET["FullMark"];
  131. $assnID=$_GET["AssnID"];
  132. $query = "UPDATE `questions` SET questionName='$questionName', fullMark='$fullMark', AssnID='$assnID' WHERE QuestionID='$questionID'";
  133. if (!mysql_query($query, $mysqlConnection))
  134. {
  135. die ('Error: ' . mysql_error());
  136. }
  137. mysql_close($mysqlConnection);
  138. ?>
  139. <script src="admin_functions.js"></script>
  140. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=7">
  141. <?php
  142. }
  143. if ($table == "student")
  144. {
  145. $studentID=$_GET["StudentID"];
  146. $major=$_GET["Major"];
  147. $lastName=$_GET["LastName"];
  148. $firstName=$_GET["FirstName"];
  149. $query = "UPDATE `student` SET Major='$major', FirstName='$firstName', LastName='$lastName' WHERE StudentID='$studentID'";
  150. if (!mysql_query($query, $mysqlConnection))
  151. {
  152. die ('Error: ' . mysql_error());
  153. }
  154. mysql_close($mysqlConnection);
  155. ?>
  156. <script src="admin_functions.js"></script>
  157. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=8">
  158. <?php
  159. }
  160. if ($table == "takes")
  161. {
  162. $oldStudentID=$_GET["OldStudentID"];
  163. $oldCourseID=$_GET["OldCourseID"];
  164. $studentID=$_GET["StudentID"];
  165. $courseID=$_GET["CourseID"];
  166. $finalMark=$_GET["FinalMark"];
  167. if ($finalMark == "Aplus")
  168. $finalMark = "A+";
  169. else if ($finalMark == "Bplus")
  170. $finalMark = "B+";
  171. else if ($finalMark == "Cplus")
  172. $finalMark = "C+";
  173. else if ($finalMark == "Dplus")
  174. $finalMark = "D+";
  175. $query = "UPDATE `takes` SET StudentID='$studentID', CourseID='$courseID', FinalMark='$finalMark' WHERE StudentID='$oldStudentID' AND CourseID='$oldCourseID'";
  176. if (!mysql_query($query, $mysqlConnection))
  177. {
  178. die ('Error: ' . mysql_error());
  179. }
  180. mysql_close($mysqlConnection);
  181. ?>
  182. <script src="admin_functions.js"></script>
  183. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=10">
  184. <?php
  185. }
  186. if ($table == "teaches")
  187. {
  188. $oldInstructorID = $_GET['OldInstructorID'];
  189. $oldCourseID = $_GET['OldCourseID'];
  190. $instructorID = $_GET['InstructorID'];
  191. $courseID = $_GET['CourseID'];
  192. $query = "UPDATE `teaches` SET InstructorID='$instructorID', CourseID='$courseID' WHERE InstructorID='$oldInstructorID' AND CourseID='$oldCourseID'";
  193. if (!mysql_query($query, $mysqlConnection))
  194. {
  195. die ('Error: ' . mysql_error());
  196. }
  197. mysql_close($mysqlConnection);
  198. ?>
  199. <script src="admin_functions.js"></script>
  200. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=11">
  201. <?php
  202. }
  203. if ($table == "users")
  204. {
  205. // Change database
  206. $users_uiucDB = "assignments_users_uiuc";
  207. mysql_select_db($users_uiucDB) or die("Cannot connect to assignments_uiuc database.");
  208. $username=$_GET["Username"];
  209. $password=$_GET["Password"];
  210. $isAdmin=$_GET["AdminPerm"];
  211. $passwordChange=$_GET["PasswordChange"];
  212. $query = "SELECT * FROM `users` WHERE Username='$username'";
  213. $result = mysql_query($query);
  214. $row = mysql_fetch_array($result);
  215. $userType = $row['UserType'];
  216. if ($isAdmin == "no")
  217. {
  218. if ($userType%2 == 1)
  219. $userType=$userType-1;
  220. }
  221. else if ($isAdmin == "yes")
  222. $userType=($userType | 1);
  223. if ($passwordChange == "")
  224. $encryptedPassword = md5($password);
  225. else
  226. $encryptedPassword = $password;
  227. $query = "UPDATE `users` SET Password='$encryptedPassword', UserType='$userType' WHERE UserName='$username'";
  228. if (!mysql_query($query, $mysqlConnection))
  229. {
  230. die ('Error: ' . mysql_error());
  231. }
  232. mysql_close($mysqlConnection);
  233. ?>
  234. <script src="admin_functions.js"></script>
  235. <meta http-equiv="refresh" content="0;url=admin.html?displayTable=12">
  236. <?php
  237. }
  238. ?>