gamerig/recensisci.php at master · federico-castellani/gamerig · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
<?php
    session_start();
    if(!isset($_SESSION['idUtente'])) {
        header("Location: login.php");
        exit();
    }

    $servername = "localhost";
    $username = "esame";
    $password = "esameWeb25";
    $dbname = "GameRig";
    $conn = mysqli_connect($servername, $username, $password, $dbname);
    if (!$conn) {
        die("Connessione fallita: ".mysqli_connect_error());
    }

    $sql = "SELECT * FROM Utente WHERE idUtente = ".$_SESSION['idUtente'].";";
    $result = mysqli_query($conn, $sql);
    $row;
    if (mysqli_num_rows($result) > 0) {
        $row = mysqli_fetch_assoc($result);
    } else {
        unset($_SESSION['idUtente']);
        session_destroy();
        header("Location: login.php");
        exit();
    }

    if(!isset($_POST['idAcquisto'])) {
        header("Location: utente.php");
        exit();
    }

    if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['recensione'])) {
        $voto = $_POST['voto'];
        $recensione = $_POST['recensione'];
        $idAcquisto = $_POST['idAcquisto'];

        $voto = $conn->real_escape_string($voto);
        if($voto < 1 || $voto > 5) {
            header("Location: recensisci.php");
            exit();
        }
        $recensione = $conn->real_escape_string($recensione);
        $idAcquisto = $conn->real_escape_string($idAcquisto);
        $sql = "UPDATE Acquisto
                SET stelleRecensione = ".$voto.", descrizioneRecensione = '".$recensione."'
                WHERE idAcquisto = ".$idAcquisto.";";

        if(empty($recensione)) {
            $sql = "UPDATE Acquisto
                    SET stelleRecensione = ".$voto."
                    WHERE idAcquisto = ".$idAcquisto.";";
        }
        if (mysqli_query($conn, $sql)) {
            header("Location: utente.php");
            exit();
        }
    }
?>
<!DOCTYPE html>
<html lang="it-IT">
    <head>
        <title>GameRig: Recensisci</title>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
        <meta name="description" content="Sito di vendita di componenti per PC da Gaming">
        <link href="style.css" type="text/css" rel="stylesheet">
        <link rel="stylesheet" href="https://fonts.googleapis.com/icon?family=Material+Icons">
    </head>
    <body>
        <header class="header">
            <form method="GET" action="ricerca.php">
                <a href="index.php"><h1>GameRig</h1></a>
                <input type="text" name="ricerca" placeholder="Cerca" id="cerca" class="ricercaBarraLunga">
                <button type="submit"><i class="material-icons" style="font-size:2.3em;">search</i></button>
                <a href="utente.php" class="icone"><i class="material-icons" style="font-size:2.3em;">person</i></a>
                <a href="carrello.php" class="icone"><i class="material-icons" style="font-size:2.3em;">shopping_cart</i></a>
            </form>
            <a href="javascript:void(0);" id="hamburger">
                <i class="material-icons" style="font-size:1.5em;" id="icona-hamburger">menu</i>
                <p>Menu</p>
            </a>
            <nav>
                <ul>
                    <li><a href="cpu.php">CPU</a></li>
                    <li><a href="gpu.php">SCHEDE VIDEO</a></li>
                    <li><a href="ram.php">RAM</a></li>
                    <li><a href="motherboard.php">SCHEDE MADRI</a></li>
                    <li><a href="case.php">CASE</a></li>
                </ul>
            </nav>
        </header>
        <main class="recensisci">
            <h1>Recensisci</h1>
            <form method="POST">
                <input type="hidden" name="recensione">
                <input type="hidden" name="idAcquisto" value="<?php echo $_POST['idAcquisto'];?>">
                <input type="number" placeholder="Stelle" name="voto" min="1" max="5" required><br>
                <textarea placeholder="Recensione" name="recensione" maxlength="4096"></textarea><br>
                <button type="submit">Invia</button>
            </form>
        </main>
        <footer>
            <p>Advertise</p>
            <p>Cookie Policy</p>
            <p>Terms of service</p>
            <p onclick="location.href='maps.html'" id="maps">Dove siamo</p>
        </footer>
        <script src="scripts/hamburger.js"></script>
    </body>
</html>
<?php
    mysqli_close($conn);
?>