MyHyvesBookPlus/WebDB
1
0
Fork 0
Code Issues 2 Pull Requests Projects Releases Wiki Activity

Frozen users cant chat with other people

Browse Source
This commit is contained in:
Lars van Hijfte
2017-01-31 14:26:34 +01:00
parent 2dd7dd8140
commit 164eb2dde6
7 changed files with 40 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
website/public/API/loadFriendRequest.php
View File

@@ -4,5 +4,12 @@ session_start();
require_once ("../../queries/connect.php"); require_once ("../../queries/connect.php");
require_once ("../../queries/friendship.php"); require_once ("../../queries/friendship.php");
require_once ("../../queries/user.php");
echo selectAllFriendRequests(); if (isset($_SESSION["userID"]) &&
getRoleByID($_SESSION["userID"]) != 'frozen' &&
getRoleByID($_SESSION["userID"]) != 'banned') {
echo selectAllFriendRequests();
} else {
echo "[]";
}

14
website/public/API/loadFriends.php
View File

@@ -6,11 +6,15 @@ require_once ("../../queries/connect.php");
require_once ("../../queries/checkInput.php"); require_once ("../../queries/checkInput.php");
require_once ("../../queries/friendship.php"); require_once ("../../queries/friendship.php");
if (isset($_POST["limit"])) { if (isset($_SESSION["userID"])) {
echo selectLimitedFriends($_SESSION["userID"], (int) test_input($_POST["limit"])); if (isset($_POST["limit"])) {
} else if (isset($_GET["limit"])) { echo selectLimitedFriends($_SESSION["userID"], (int)test_input($_POST["limit"]));
echo selectLimitedFriends($_SESSION["userID"], (int) test_input($_GET["limit"])); } else if (isset($_GET["limit"])) {
} else { echo selectLimitedFriends($_SESSION["userID"], (int)test_input($_GET["limit"]));
} else {
echo selectFriends($_SESSION["userID"]); echo selectFriends($_SESSION["userID"]);
}
} else {
echo "[]";
} }

12
website/public/API/sendMessage.php
View File

@@ -4,14 +4,22 @@ session_start();
require_once("../../queries/connect.php"); require_once("../../queries/connect.php");
require_once("../../queries/private_message.php"); require_once("../../queries/private_message.php");
require_once("../../queries/checkInput.php"); require_once("../../queries/checkInput.php");
require_once("../../queries/user.php");
if (!empty(test_input($_POST["destination"])) && if (isset($_SESSION["userID"]) &&
!empty(test_input($_POST["content"]))) { getRoleByID($_SESSION["userID"]) != 'frozen' &&
getRoleByID($_SESSION["userID"]) != 'banned') {
if (!empty(test_input($_POST["destination"])) &&
!empty(test_input($_POST["content"]))
) {
if (sendMessage(test_input($_POST["destination"]), test_input($_POST["content"]))) { if (sendMessage(test_input($_POST["destination"]), test_input($_POST["content"]))) {
echo 1; echo 1;
} else { } else {
echo 0; echo 0;
} }
} else {
echo 0;
}
} else { } else {
echo 0; echo 0;
} }

4
website/public/admin.php
View File

@@ -19,9 +19,9 @@
include_once ("../queries/user.php"); include_once ("../queries/user.php");
// auth // auth
$userinfo = getRoleByID($_SESSION['userID'])->fetch(PDO::FETCH_ASSOC); $role = getRoleByID($_SESSION['userID']);
if ($userinfo['role'] != 'admin' AND $userinfo['role'] != 'owner') { if ($role != 'admin' AND $role != 'owner') {
header("location:profile.php"); header("location:profile.php");
} }

6
website/public/js/chat.js
View File

@@ -33,7 +33,11 @@ function sendMessage() {
$.post( $.post(
"API/sendMessage.php", "API/sendMessage.php",
$("#sendMessageForm").serialize() $("#sendMessageForm").serialize()
); ).done(function(data) {
if (data == "0") {
alert("Je account is bevroren, dus je kan niet chat berichten versturen. Contacteer een admin als je denk dat dit onjuist is.");
}
});
$("#newContent").val(""); $("#newContent").val("");
loadMessages(); loadMessages();

2
website/queries/user.php
View File

@@ -417,5 +417,5 @@ function getRoleByID($userID) {
$stmt->bindParam(':userID', $userID); $stmt->bindParam(':userID', $userID);
$stmt->execute(); $stmt->execute();
return $stmt; return $stmt->fetch()["role"];
} }

4
website/views/notification-center.php
View File

@@ -7,9 +7,9 @@
include_once ("../queries/user.php"); include_once ("../queries/user.php");
// auth // auth
$userinfo = getRoleByID($_SESSION['userID'])->fetch(PDO::FETCH_ASSOC); $role = getRoleByID($_SESSION['userID']);
if ($userinfo['role'] == 'admin' OR $userinfo['role'] == 'owner') { if ($role == 'admin' OR $role == 'owner') {
echo "<a href=\"admin.php\" data-title=\"Admin\"><i class=\"fa fa-lock\"></i></a>"; echo "<a href=\"admin.php\" data-title=\"Admin\"><i class=\"fa fa-lock\"></i></a>";
echo "<style>@import url('styles/adminbutton.css'); </style>"; echo "<style>@import url('styles/adminbutton.css'); </style>";
} }