website/public/js/friendButtons.js

@@ -4,12 +4,14 @@ function placeFriendButtons() {
             friendshipStatus = data;
             $buttonContainer = $("div.friend-button-container");
             $buttonContainer.children().remove();
+            $("#start-profile-chat-form").hide();
             if (friendshipStatus == -1) {
                 return;
             } else if(friendshipStatus == 0) {
                 $buttonContainer.append($("<button class=\"green friend-button\" value=\"request\"><i class=\"fa fa-handshake-o\"></i> Bevriend</button>"));
             } else if(friendshipStatus == 1) {
                 $buttonContainer.append($("<button class=\"red friend-button\" value=\"delete\"><i class=\"fa fa-times\"></i> Verwijder</button>"));
+                $("#start-profile-chat-form").show();
             } else if(friendshipStatus == 2) {
                 $buttonContainer.append($("<button class=\"red friend-button\" value=\"delete\"><i class=\"fa fa-times\"></i> Trek verzoek in</button>"));
             } else if(friendshipStatus == 3) {

website/queries/private_message.php

@@ -1,8 +1,9 @@
 <?php
 
 function getOldChatMessages($user2ID) {
+    require_once ("friendship.php");
     $user1ID = $_SESSION["userID"];
-
+    if (getFriendshipStatus($user2ID) == 1) {
         $stmt = $GLOBALS["db"]->prepare("
         SELECT
             *
@@ -23,9 +24,13 @@ function getOldChatMessages($user2ID) {
         $stmt->execute();
 
         return json_encode($stmt->fetchAll());
+    } else {
+        return "[]";
+    }
 }
 
 function sendMessage($destination, $content) {
+    if (getFriendshipStatus($destination) == 1) {
         $stmt = $GLOBALS["db"]->prepare("
         INSERT INTO
             `private_message`
@@ -47,9 +52,13 @@ function sendMessage($destination, $content) {
             "destination" => $destination,
             "content" => $content
         ));
+    } else {
+        return false;
+    }
 }
 
 function getNewChatMessages($lastID, $destination) {
+    if (getFriendshipStatus($user2ID) == 1) {
         $stmt = $GLOBALS["db"]->prepare("
         SELECT
             *
@@ -73,6 +82,9 @@ function getNewChatMessages($lastID, $destination) {
         $stmt->execute();
 
         return json_encode($stmt->fetchAll());
+    } else {
+        return "[]";
+    }
 }
 
 
@@ -101,7 +113,8 @@ function selectAllUnreadChat() {
        `friendship`.chatLastVisted2 IS NULL)) AND
       `private_message`.`origin` = `user`.`userID` AND
       `private_message`.`destination` = :userID AND
-      `user`.`role` != 'banned'
+      `user`.`role` != 'banned' AND
+      `friendship`.`status` = 'confirmed'
     
     GROUP BY `user`.`userID`
 

website/queries/user.php

@@ -35,6 +35,7 @@ function getUsername($userID) {
 function selectUser($me, $other) {
     $stmt = $GLOBALS["db"]->prepare("
         SELECT
+          `userID`,
           `username`,
           `birthdate`,
           `location`,
@@ -94,7 +95,7 @@ function selectAllUserGroups($userID) {
             `group_page`.`groupID` = `group_member`.`groupID`
         WHERE
             `userID` = :userID AND
-            `role` = 1
+            `role` = 'member'
     ");
 
     $stmt->bindParam(':userID', $userID, PDO::PARAM_INT);
@@ -331,9 +332,10 @@ function searchSomeUsers($n, $m, $search) {
     FROM
       `user`
     WHERE
-        `username` LIKE :keyword OR 
+        (`username` LIKE :keyword OR 
         `fname` LIKE :keyword OR 
-        `lname` LIKE :keyword
+        `lname` LIKE :keyword) AND
+        `role` != 'banned'
     ORDER BY 
         `fname`, 
         `lname`, 

website/views/profile.php

@@ -1,7 +1,13 @@
 <div class="content">
     <div class="profile-box platform">
         <img class="left profile-picture" src="<?php echo $user["profilepicture"] ?>">
-
+        <form id="start-profile-chat-form" class="right" action="chat.php" method="get">
+            <button name="username"
+                    class="friend-button green"
+                    value="<?php echo $user["userID"] ?>">
+                <i class="fa fa-comment-o"></i> Chat
+            </button>
+        </form>
         <div class="friend-button-container">
 
         </div>