309 lines
11 KiB
PHP
309 lines
11 KiB
PHP
<?php
|
|
#Datenbank Verbindung einbinden
|
|
require 'Connections/Connections.php';
|
|
#Include datei für Loginüberprüfung
|
|
include "Includes/Session.php";
|
|
#Abbruch wenn nicht berechtigt
|
|
if($_SESSION["UserLevel"] < 1 )
|
|
{
|
|
header('Location: Bestellen.php');
|
|
exit;
|
|
}
|
|
#Countdown auslesen
|
|
function getcountdown()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$timestamp = $con->query("Select timestamp from timestamp")->fetch_object()->timestamp;
|
|
echo $timestamp;
|
|
}
|
|
#Countdown setzen
|
|
function setcountdown()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$Cowntdowndate = $_POST['Cowntdowndate'];
|
|
$sql = $con->query("UPDATE timestamp SET timestamp='{$Cowntdowndate}'");
|
|
#Seite neu Laden
|
|
header('Location: '.$_SERVER['REQUEST_URI']);
|
|
}
|
|
|
|
#Bestellung für alle reseten
|
|
function reset_order()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
#Bestell history befüllen
|
|
$backup = $con->query("Insert into Bestell_history Select * from Bestellungen where Preis > 0;");
|
|
if($backup)
|
|
{
|
|
$delOrder = $con->query("DELETE FROM Bestellungen");
|
|
$reset_ordered = $con->query("update user set ordered = 0");
|
|
$reset_invite = $con->query("DELETE FROM invite");
|
|
print "<script type='text/javascript' langeuage='javascript'>
|
|
alert('Zurückgesetzt!');</script>";
|
|
}else{
|
|
print "<script type='text/javascript' langeuage='javascript'>
|
|
alert('Fehler beim Zurücksetzen!');</script>";
|
|
}
|
|
}
|
|
function payed()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
if(!isset($_POST['payed'])){
|
|
$lesen= $con->query("SELECT UserID,Fname,Lname,isactive FROM user where ordered=1 order by Lname ASC");
|
|
echo "<td><select class='CField' name='User'>";
|
|
echo '<option value="0">Bitte wählen</option>';
|
|
while($row = mysqli_fetch_array($lesen))
|
|
{
|
|
echo "<option value =".$row['UserID'].">".$row['Lname']."</option>";
|
|
}
|
|
echo "</select>";
|
|
echo "<input class=\"button\" type=\"submit\" name=\"payed\" value=\"payed\"></form></td>";
|
|
}else{
|
|
$userID = $_POST['User'];
|
|
$backup = $con->query("Insert into Bestell_history Select * from Bestellungen where Userid_fk = $userID;");
|
|
$con->query("Update Bestellungen set Preis = 0 where Userid_fk = $userID");
|
|
header('Location: '.$_SERVER['REQUEST_URI']);
|
|
}
|
|
}
|
|
|
|
|
|
#Bestellung aller user Anzeigen
|
|
function print_order_all()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$Produkte = $con->query("SELECT Distinct Produktid_fk from Bestellungen;");
|
|
#Ausgabe für jedes Bestellte Product
|
|
echo '<div class="table-container"><table class="Print_table"><thead><tr><th>Name</th>';
|
|
while($row = mysqli_fetch_array($Produkte))
|
|
{
|
|
$Produktid = $row['Produktid_fk'];
|
|
$Produktname = $con->query("SELECT Name FROM produkte where ArtNr='{$Produktid}'")->fetch_object()->Name;
|
|
echo "<th>$Produktname</th>";
|
|
}
|
|
echo '<th>Gesamt Preis</th></tr></thead><tbody>';
|
|
#Auslesen für jeden user
|
|
$users = $con->query("Select DISTINCT Userid_fk from Bestellungen;");
|
|
while($row = mysqli_fetch_array($users))
|
|
{
|
|
#schreibt row variable in normale
|
|
$D_userid = $row['Userid_fk'];
|
|
#Deklaration arrays
|
|
$OrderNum = array();
|
|
#Userid durch name ersetzen
|
|
$name = $con->query("SELECT CONCAT(Lname, ' ',Fname) as 'Name' FROM user where UserID='{$D_userid}'")->fetch_object()->Name;
|
|
#Preis Pro user errechnen
|
|
$g_Preis = $con->query("SELECT sum(Preis) as G_Preis FROM Bestellungen where Userid_fk='{$D_userid}';")->fetch_object()->G_Preis;
|
|
$i = 0 ;
|
|
$sql = $con->query("SELECT Anzahl FROM Bestellungen where Userid_fk='{$D_userid}';");
|
|
while($ans = mysqli_fetch_array($sql))
|
|
{
|
|
$OrderNum[$i] = $ans['Anzahl'];
|
|
$i++;
|
|
}
|
|
echo "<tr><td>$name</td>";
|
|
for($x=0;$x<$i;$x++) {echo "<td>$OrderNum[$x]</td>";}
|
|
echo "<td>$g_Preis</td>";
|
|
echo '</tr>';
|
|
}
|
|
echo '</tbody></table></div></div>';
|
|
}
|
|
|
|
#Bestellung aller user Anzeigen
|
|
function print_sum_of_order_all()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$GesOrderNum = array();
|
|
$i = 0;
|
|
$Produkte = $con->query("SELECT Distinct Produktid_fk from Bestellungen;");
|
|
$g_Preis = $con->query("SELECT sum(Preis) as G_Preis FROM Bestellungen;")->fetch_object()->G_Preis;
|
|
#$NoM = $con->query("SELECT count(distinct Userid_fk) as Summe FROM Bestellungen")>fetch_object()->Summe;
|
|
#Ausgabe für jedes Bestellte Product
|
|
echo '<div class="table-container"><table class="Print_table"><thead><tr>';
|
|
while($row = mysqli_fetch_array($Produkte))
|
|
{
|
|
$Produktid = $row['Produktid_fk'];
|
|
$Produktname = $con->query("SELECT Name FROM produkte where ArtNr='{$Produktid}'")->fetch_object()->Name;
|
|
$GesOrderNum[$i] = $con->query("SELECT SUM(Anzahl) as 'Anzahl' from Bestellungen where Produktid_fk='{$Produktid}'")->fetch_object()->Anzahl;
|
|
echo "<th>$Produktname</th>";
|
|
$i++;
|
|
}
|
|
echo "<th>Preis</th></tr></thead><tbody><tr>";
|
|
for($x=0;$x<$i;$x++) {echo "<td>$GesOrderNum[$x]</td>";}
|
|
echo "<td>$g_Preis</td></tr></tbody></table></div>";
|
|
}
|
|
|
|
#Funktion bestellen über Mod rechte
|
|
function order()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$Userid = $_POST['user'];
|
|
$delOrder = $con->query("DELETE FROM Bestellungen WHERE Userid_fk=$Userid;");
|
|
$reset_ordered = $con->query("update user set ordered = 0 where UserID=$Userid;");
|
|
$ordered = $con->query("select ordered from user where UserID=$Userid;")->fetch_object()->ordered;
|
|
if($ordered<1)
|
|
{
|
|
$post = $_POST;
|
|
unset($post['Bestellen']);
|
|
unset($post['user']);
|
|
print_r($post);
|
|
foreach ($post as $key => $entry)
|
|
{
|
|
$preis = $con->query("select Preis from produkte where ArtNr=$key")->fetch_object()->Preis;
|
|
$g_preis = (float)$preis * (float)$entry;
|
|
$con->query("insert into Bestellungen (Userid_fk,Produktid_fk,Anzahl,Preis) VALUES ('$Userid','$key','$entry','$g_preis');");
|
|
}
|
|
$sql = $con->query("update user set ordered = 1 where UserID=$Userid;");
|
|
}else{
|
|
print "<script type='text/javascript' langeuage='javascript'>
|
|
alert('User hat bereits bestellt!');window.location = 'Bestellen.php';</script>";
|
|
}
|
|
}
|
|
|
|
|
|
|
|
#Bestellform ausgeben
|
|
function mod_order()
|
|
{
|
|
if ($_POST['User'] == 0 ){
|
|
print "<script type='text/javascript' langeuage='javascript'>
|
|
alert('Kein User ausgewählt!');window.location = 'Verwaltung.php';</script>";
|
|
}else{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
$userID = $_POST['User'];
|
|
$ArtNr = array();
|
|
$ArtName = array();
|
|
$ArtPreis = array();
|
|
$ArtImage = array();
|
|
$DefaultNum = array();
|
|
$i = 0;
|
|
#Datenbank auslesen
|
|
$query = $con->query("SELECT * FROM produkte where isactive=1");
|
|
$name = $con->query("SELECT CONCAT(Lname, ' ',Fname) as 'Name' FROM user where UserID='{$userID}'")->fetch_object()->Name;
|
|
#Datensätze in array schreiben
|
|
while($row = mysqli_fetch_array($query))
|
|
{
|
|
$ArtNr[$i] = $row['ArtNr'];
|
|
$DefaultNum[$i] = $sql = $con->query("SELECT Anzahl FROM standard_bestellung where userid_fk='$userID' and produktid_fk='$ArtNr[$i]'")->fetch_object()->Anzahl;
|
|
$ArtName[$i] = $row['Name'];
|
|
$ArtPreis[$i] = $row['Preis'];
|
|
$ArtImage[$i] = $row['produkt_image'];
|
|
|
|
$i++;
|
|
}
|
|
echo '<form action="" method="POST" name="Bestellen"><div class="table-container"><table class="Print_table">';
|
|
echo '<tr><td> </td>';
|
|
for($x=0;$x<$i;$x++) { echo '<td><img src='.$ArtImage[$x].' width="120" height="82"/></td>'; }
|
|
echo '</tr><tr><td>Name:</td>';
|
|
for($x=0;$x<$i;$x++) { echo "<td>$ArtName[$x] <br /> $ArtPreis[$x]</td>"; }
|
|
echo "</tr><tr><td>$name<input name=\"user\" type=\"hidden\" value=\"$userID\"</td>";
|
|
for($x=0;$x<$i;$x++) {
|
|
echo '<td><input name="'.$ArtNr[$x].'" type="text" required="required" class="" value="'.$DefaultNum[$x].'" /></td>';
|
|
}
|
|
echo '</tr></table></div>';
|
|
echo '<input name="Bestellen" type="submit" class="button" value="Bestellen"></form>';
|
|
}
|
|
}
|
|
#bestellform für welchen user bestellt wird
|
|
function mod_order_print()
|
|
{
|
|
global $con; # setzt die Variable CON für die Datenbank verbindung
|
|
if(!isset($_POST['bearbeiten'])){
|
|
$lesen= $con->query("SELECT UserID,Fname,Lname,isactive,ordered FROM user order by Lname ASC");
|
|
echo "<td><select class='CField' name='User'>";
|
|
echo '<option value="0">Bitte wählen</option>';
|
|
while($row = mysqli_fetch_array($lesen))
|
|
{
|
|
echo "<option value =".$row['UserID'].">".$row['Lname']."</option>";
|
|
}
|
|
echo "</select>";
|
|
echo "<input class=\"button\" type=\"submit\" name=\"bearbeiten\" value=\"bearbeiten\"></form></td>";
|
|
}else{
|
|
mod_order();
|
|
}
|
|
}
|
|
|
|
function print_invite()
|
|
{
|
|
global $con;
|
|
$query = $con->query("Select userid_fk from invite;");
|
|
$einlader = mysqli_num_rows($query);
|
|
if($einlader != 0 ){
|
|
echo '<span class="invite">Eingeladen von ';
|
|
while($row = mysqli_fetch_array($query))
|
|
{
|
|
$userid = $row['userid_fk'];
|
|
$name = $con->query("SELECT CONCAT(Lname, ' ',Fname) as 'Name' FROM user where UserID='{$userid}'")->fetch_object()->Name;
|
|
echo "$name";
|
|
if($einlader > 1){
|
|
echo ' und ';
|
|
$einlader--;
|
|
}
|
|
}
|
|
echo '</span>';
|
|
}
|
|
}
|
|
|
|
#Buttons überprüfen
|
|
if(isset($_POST['SetCountdown'])){
|
|
setcountdown();}
|
|
|
|
if(isset($_POST['resetorder'])){
|
|
reset_order();}
|
|
|
|
if(isset($_POST['Bestellen'])){
|
|
order();}
|
|
|
|
|
|
#Setzen des Titels und der Headline für include Dateien
|
|
$webpagetitle = "Bestellungs Verwaltung";
|
|
#Header und menü einbinden
|
|
include "Includes/Header.php";
|
|
include "Includes/Menu.php";
|
|
#html Content ausgeben
|
|
?>
|
|
<div class="content">
|
|
<div class="Rahmen">
|
|
<div class="center">
|
|
<form action="" method="POST" name="Administration">
|
|
<?php mod_order_print();?>
|
|
</form>
|
|
<hr/>
|
|
<form action="" method="post" name="Update">
|
|
<h2>Alle bestellungen zurücksetzen</h2>
|
|
<input name="resetorder" type="submit" class="button" id="update" Value="Zurücksetzen">
|
|
</form>
|
|
<hr/>
|
|
<form action="" method="post" name="Update">
|
|
<h2>Countdown setzen</h2>
|
|
<div class="FormElement">
|
|
<input name="Cowntdowndate" type="datetime-local" required="required" class="TFieldPreis" id="Cowntdowndate" value="<?php getcountdown(); ?>">
|
|
</div>
|
|
<input name="SetCountdown" type="submit" class="button" id="update" Value="Speichern">
|
|
</form>
|
|
<hr/>
|
|
<form action="" method="post" name="payed">
|
|
<h2>Bezahlt </h2>
|
|
<?php payed();?>
|
|
</form>
|
|
<hr/>
|
|
<div class="print" id="print">
|
|
<div class="center">
|
|
<?php print_invite(); ?>
|
|
<h1>Gesamt Bestellung</h1>
|
|
<div class="mediacenter">
|
|
<?php print_order_all(); ?>
|
|
</div>
|
|
<h1>Summen</h1>
|
|
<div class="mediacenter">
|
|
<?php print_sum_of_order_all();?>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<a href="#" onclick="javascript:showPopup()">Print</a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?php
|
|
#Footer einbinden
|
|
include "Includes/Footer.php";
|
|
?>
|