Database class integration.

This commit is contained in:
Nate
2019-07-04 09:01:28 -06:00
parent be2e3ab2e4
commit a052e80b7b
4 changed files with 157 additions and 165 deletions
+21 -20
View File
@@ -43,9 +43,9 @@
$text = $language->get();
//action add or update
if (isset($_REQUEST["id"])) {
if (is_uuid($_REQUEST["id"])) {
$action = "update";
$call_recording_uuid = check_str($_REQUEST["id"]);
$call_recording_uuid = $_REQUEST["id"];
}
else {
$action = "add";
@@ -53,13 +53,13 @@
//get http post variables and set them to php variables
if (is_array($_POST)) {
$call_recording_name = check_str($_POST["call_recording_name"]);
$call_recording_path = check_str($_POST["call_recording_path"]);
$call_recording_length = check_str($_POST["call_recording_length"]);
$call_recording_date = check_str($_POST["call_recording_date"]);
$call_direction = check_str($_POST["call_direction"]);
$call_recording_description = check_str($_POST["call_recording_description"]);
$call_recording_base64 = check_str($_POST["call_recording_base64"]);
$call_recording_name = $_POST["call_recording_name"];
$call_recording_path = $_POST["call_recording_path"];
$call_recording_length = $_POST["call_recording_length"];
$call_recording_date = $_POST["call_recording_date"];
$call_direction = $_POST["call_direction"];
$call_recording_description = $_POST["call_recording_description"];
$call_recording_base64 = $_POST["call_recording_base64"];
}
//process the user data and save it to the database
@@ -67,7 +67,7 @@
//get the uuid from the POST
if ($action == "update") {
$call_recording_uuid = check_str($_POST["call_recording_uuid"]);
$call_recording_uuid = $_POST["call_recording_uuid"];
}
//check for all required data
@@ -96,7 +96,7 @@
$_POST["domain_uuid"] = $_SESSION["domain_uuid"];
//add the call_recording_uuid
if (strlen($_POST["call_recording_uuid"]) == 0) {
if (!is_uuid($_POST["call_recording_uuid"])) {
$call_recording_uuid = uuid();
$_POST["call_recording_uuid"] = $call_recording_uuid;
}
@@ -134,15 +134,16 @@
} //(is_array($_POST) && strlen($_POST["persistformvar"]) == 0)
//pre-populate the form
if (is_array($_GET) && $_POST["persistformvar"] != "true") {
$call_recording_uuid = check_str($_GET["id"]);
if (is_array($_GET) && $_POST["persistformvar"] != "true" && is_uuid($_GET["id"])) {
$call_recording_uuid = $_GET["id"];
$sql = "select * from v_call_recordings ";
$sql .= "where call_recording_uuid = '$call_recording_uuid' ";
//$sql .= "and domain_uuid = '$domain_uuid' ";
$prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute();
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
foreach ($result as &$row) {
$sql .= "where call_recording_uuid = :call_recording_uuid ";
//$sql .= "and domain_uuid = :domain_uuid ";
$parameters['call_recording_uuid'] = $call_recording_uuid;
//$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$database = new database;
$row = $database->select($sql, $parameters, 'row');
if (is_array($row) && sizeof($row) != 0) {
$call_recording_name = $row["call_recording_name"];
$call_recording_path = $row["call_recording_path"];
$call_recording_length = $row["call_recording_length"];
@@ -151,7 +152,7 @@
$call_recording_description = $row["call_recording_description"];
$call_recording_base64 = $row["call_recording_base64"];
}
unset ($prep_statement);
unset($sql, $parameters, $row);
}
//show the header
+11 -34
View File
@@ -86,32 +86,11 @@
require_once "resources/paging.php";
//get variables used to control the order
$order_by = check_str($_REQUEST["order_by"]);
$order = check_str($_REQUEST["order"]);
$order_by = $_REQUEST["order_by"] != '' ? $_REQUEST["order_by"] : 'call_recording_date';
$order = $_REQUEST["order"] != '' ? $_REQUEST["order"] : 'desc';
//validate order by
if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
}
//validate the order
switch ($order) {
case 'asc':
break;
case 'desc':
break;
default:
$order = '';
}
//set the defaults
if (strlen($order_by) == 0) {
$order_by = 'call_recording_date';
$order = 'desc';
}
//add the search term
$search = strtolower(check_str($_REQUEST["search"]));
//add the search term
$search = strtolower($_REQUEST["search"]);
if (strlen($search) > 0) {
$sql_search = "and (";
$sql_search .= "lower(call_recording_name) like :search ";
@@ -119,18 +98,17 @@
$sql_search .= "or lower(call_direction) like :search ";
$sql_search .= "or lower(call_recording_description) like :search ";
$sql_search .= ") ";
$parameters['search'] = '%'.$search.'%';
}
//prepare to page the results
$sql = "select count(call_recording_uuid) as num_rows from v_call_recordings ";
$sql = "select count(call_recording_uuid) from v_call_recordings ";
$sql .= "where domain_uuid = :domain_uuid ";
$sql .= $sql_search;
$parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if (strlen($search) > 0) {
$parameters['search'] = '%'.$search.'%';
}
$database = new database;
$num_rows = $database->select($sql, $parameters, 'column');
unset($sql);
//prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@@ -144,12 +122,11 @@
$sql = "select * from v_call_recordings ";
$sql .= "where domain_uuid = :domain_uuid ";
$sql .= $sql_search;
$sql .= "order by $order_by $order ";
$sql .= "limit :rows_per_page offset :offset ";
$sql .= order_by($order_by, $order);
$sql .= limit_offset($rows_per_page, $offset);
$database = new database;
$parameters['rows_per_page'] = $rows_per_page;
$parameters['offset'] = $offset;
$result = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//alternate the row style
$c = 0;
@@ -280,7 +257,7 @@
$x++;
if ($c==0) { $c=1; } else { $c=0; }
} //end foreach
unset($sql, $result, $row_count);
unset($result);
} //end if results
echo "<tr>\n";