Project-Management/CreateProject.php at master · xyious/Project-Management · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
<?php
session_start();
if (!isset($_SESSION['IP'])) {	$_SESSION['IP'] = $_SERVER['REMOTE_ADDR']; }
if (!isset($_SESSION['Logged_In'])) { $_SESSION['Logged_In'] = 0; }
?>
<!doctype html>
<head>
<title>Neues Projekt Erstellen</title>
<link rel="stylesheet" href="include/body.css" type="text/css">
</head>
<body>
<?php
include "include/PDOConnect.php";

$Error = 1;
if (isset($_POST['submitted']) && $_POST['submitted'] == 1) {
	$Error = 0;
	if (!($_SESSION['Logged_In'] && ($_SESSION['IP'] == $_SERVER['REMOTE_ADDR']))) {
		echo "Sie sind nicht eingeloggt!<br><a href='/Project/Login.php?previous=" . $_SERVER['PHP_SELF'] . "'>Login</a>";
	} else {
		if (!(preg_match("/[a-zA-Z0-9]/", $_POST['Customer']) == 1)) {
			echo "Kunde muss Zahlen oder Buchstaben enthalten!<br>";
			$Error++;
		}
		if (!(preg_match("/[a-zA-Z0-9]/", $_POST['ProjectDescription']) == 1)) {
			echo "Projektbeschreibung muss text sein!<br>";
			$Error++;
		}
		if ($Error == 0) {
			$query = $connection->prepare("INSERT INTO project (status, deadline, customer, description) VALUES (1, :deadline, :customer, :description)");
			$query->bindParam(':deadline', $_POST['ProjectDeadline'], PDO::PARAM_STR);
			$query->bindParam(':customer', $_POST['Customer'], PDO::PARAM_STR);
			$query->bindParam(':description', $_POST['ProjectDescription'], PDO::PARAM_STR);
			$query->execute();
			$Project_ID = $connection->lastInsertId();
			if ($Project_ID > 0) {
				$query = $connection->prepare("INSERT INTO workunits (project_id, deadline, description, estimated_hours, status, type) VALUES (:project_id, :deadline, 'Projektleitung', 1, -1, 2)");
				$query->bindParam(':project_id', $Project_ID, PDO::PARAM_STR);
				$query->bindParam(':deadline', $_POST['ProjectDeadline'], PDO::PARAM_STR);
				$query->execute();
				$WUID = $connection->lastInsertId();
				if ($WUID > 0) {
					$query = $connection->prepare("INSERT INTO worker_assignment (user_ID, workunit_ID, project_ID, job) VALUES (:user_id, :workunit_id, :project_id, 3)");
					$query->bindParam(':user_id', $_POST['Responsible'], PDO::PARAM_STR);
					$query->bindParam(':workunit_id', $WUID, PDO::PARAM_STR);
					$query->bindParam(':project_id', $Project_ID, PDO::PARAM_STR);
					$query->execute();
					echo "Projekt wurde erstellt, Kunde: " . $_POST['Customer'] . "<br>Beschreibung: " . $_POST['ProjectDescription'] . "<br>Termin: " . $_POST['ProjectDeadline'] . "<br>";
				}
			}
		}
	}
}
if ($Error > 0) {
	include "include/CreateProjectForm.php";
}
?>
</body>
</html>