Project-Management/CreateWorkUnit.php at master · xyious/Project-Management · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
<?php
session_start();
if (!isset($_SESSION['IP'])) {	$_SESSION['IP'] = $_SERVER['REMOTE_ADDR']; }
if (!isset($_SESSION['Logged_In'])) { $_SESSION['Logged_In'] = 0; }
?>
<!doctype html>
<head>
<title>Neues Arbeitspaket Erstellen</title>
<link rel="stylesheet" href="include/body.css" type="text/css">
</head>
<body>
<?php
include "include/PDOConnect.php";

$Error = 1;
if (isset($_POST['submitted']) && $_POST['submitted'] == 1) {
	$Error = 0;
	if (!($_SESSION['Logged_In'] && ($_SESSION['IP'] == $_SERVER['REMOTE_ADDR']))) {
		echo "Sie sind nicht eingeloggt!<br><a href='/Project/Login.php?previous=" . $_SERVER['PHP_SELF'] . "'>Login</a>";
	} else {
			if (!(preg_match("/[0-9]/", $_POST['Estimate']) == 1)) {
			echo "Aufwand muss Zahlen enthalten (Anzahl Stunden)!<br>";
			$Error++;
		}
		if (!(preg_match("/[a-zA-Z0-9]/", $_POST['WUDescription']) == 1)) {
			echo "Arbeitspaketbeschreibung muss text sein!<br>";
			$Error++;
		}
		if ($Error == 0) {
			$query = $connection->prepare("INSERT INTO workunits (project_id, deadline, description, estimated_hours, status, type) VALUES (:project_id, :deadline, :description, :estimate, -1, :type)");
			$query->bindParam(':project_id', $_POST['Project_ID'], PDO::PARAM_STR);
			$query->bindParam(':deadline', $_POST['WUDeadline'], PDO::PARAM_STR);
			$query->bindParam(':description', $_POST['WUDescription'], PDO::PARAM_STR);
			$query->bindParam(':estimate', $_POST['Estimate'], PDO::PARAM_STR);
			$query->bindParam(':type', $_POST['WUType'], PDO::PARAM_STR);
			$query->execute();
			$WUID = $connection->lastInsertId();
			if ($WUID > 0) {
				$query = $connection->prepare("INSERT INTO worker_assignment (user_ID, workunit_ID, project_ID, job) VALUES (:user_id, :workunit_id, :project_id, 3)");
				$query->bindParam(':user_id', $_POST['Responsible'], PDO::PARAM_STR);
				$query->bindParam(':workunit_id', $WUID, PDO::PARAM_STR);
				$query->bindParam(':project_id', $_POST['Project_ID'], PDO::PARAM_STR);
				$query->execute();
				echo "Arbeitspaket wurde erstellt, Project ID: " . $_POST['Project_ID'] . "<br>Beschreibung: " . $_POST['WUDescription'] . "<br>Termin: " . $_POST['WUDeadline'] . "<br>";
			}
		}
	}
}
?>
</body>
</html>