Order working

author: arf20 <aruizfernandez05@gmail.com> 2024-03-19 04:58:03 +0100
committer: arf20 <aruizfernandez05@gmail.com> 2024-03-19 04:58:03 +0100
commit: c509a2d6aa9394fa7200d8fa11904914d8e81f06 (patch)
tree: 3ba0ba4aa4ebe1ad232b2dfbabf5dbf99a3327b7
parent: 1818a590244c1ae8390a6fb58d6e1f775b46d723 (diff)
download: arfnet2-cstims-c509a2d6aa9394fa7200d8fa11904914d8e81f06.tar.gz
arfnet2-cstims-c509a2d6aa9394fa7200d8fa11904914d8e81f06.zip
3 files changed, 120 insertions, 34 deletions
diff --git a/admin.php b/admin.php
index 37a69f6..2aeebe1 100644
--- a/admin.php
+++ b/admin.php
@@ -10,6 +10,8 @@ if(!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true){
 $username = $_SESSION["username"];
 $type = $_SESSION["type"];
 
+if ($type != "admin") die("Permission denied.");
+
 require_once "config.php";
 
 // Get users
@@ -33,6 +35,24 @@ mysqli_stmt_execute($stmt);
 $result = mysqli_stmt_get_result($stmt);
 $orders = $result->fetch_all(MYSQLI_ASSOC);
 
+function getservicebyid($id) {
+    global $services;
+    foreach ($services as $service) {
+        if ($service["id"] == $id) {
+            return $service;
+        }
+    }
+}
+
+function getclientbyid($id) {
+    global $users;
+    foreach ($users as $client) {
+        if ($client["id"] == $id) {
+            return $client;
+        }
+    }
+}
+
 ?>
 
 <!doctype html>
@@ -59,7 +79,7 @@ $orders = $result->fetch_all(MYSQLI_ASSOC);
                                 <tr><th>user</th><th>type</th><th>status</th></tr>
                                 <?php
                                 foreach ($users as $user) {
-                                    echo "<tr><td>".$user['username']."</td><td>".$user['type']."</td><td>".$user['status']."</tr>\n";
+                                    echo "<tr><td>".$user["username"]."</td><td>".$user["type"]."</td><td>".$user["status"]."</tr>\n";
                                 }
                                 ?>
                             </table>
@@ -70,7 +90,7 @@ $orders = $result->fetch_all(MYSQLI_ASSOC);
                                 <tr><th>name</th><th>type</th><th>billing</th></tr>
                                 <?php
                                 foreach ($services as $service) {
-                                    echo "<tr><td>".$service['name']."</td><td>".$service['type']."</td><td>".$service['billing']."</tr>\n";
+                                    echo "<tr><td>".$service["name"]."</td><td>".$service["type"]."</td><td>".$service["billing"]."</tr>\n";
                                 }
                                 ?>
                             </table>
@@ -81,7 +101,7 @@ $orders = $result->fetch_all(MYSQLI_ASSOC);
                                 <tr><th>service</th><th>instance</th><th>client</th></tr>
                                 <?php
                                 foreach ($orders as $order) {
-                                    echo "<tr><td>".$order['service']."</td><td>".$order['name']."</td><td>".$order['client']."</tr>\n";
+                                    echo "<tr><td>".getservicebyid($order["service"])["name"]."</td><td>".$order["name"]."</td><td>".getclientbyid($order["client"])["username"]."</tr>\n";
                                 }
                                 ?>
                             </table>
diff --git a/order.php b/order.php
index 1dd8555..613e3e7 100644
--- a/order.php
+++ b/order.php
@@ -14,12 +14,29 @@ $type = $_SESSION["type"];
 require_once "config.php";
 
 // Get services
-$sql = "SELECT id, name, type, billing FROM services";
+$sql = "SELECT id, name, type, billing, description FROM services";
 $stmt = mysqli_prepare($link, $sql);
 mysqli_stmt_execute($stmt);
 $result = mysqli_stmt_get_result($stmt);
 $services = $result->fetch_all(MYSQLI_ASSOC);
 
+// POST actions
+if ($_SERVER["REQUEST_METHOD"] == "POST") {
+    // add entry
+    $sql = "INSERT INTO orders (service, name, client, billing, comments) VALUES (?, ?, ?, ?, ?)";
+    $stmt = mysqli_prepare($link, $sql);
+    mysqli_stmt_bind_param($stmt, "sssss", $param_service, $param_name, $param_client, $param_billing, $param_comments);
+    $param_service = $_POST["service"];
+    $param_name = $_POST["name"];
+    $param_client = $clientid;
+    $param_billing = $_POST["billing"];
+    $param_comments = $_POST["comments"];
+
+    if (!mysqli_stmt_execute($stmt) || (mysqli_stmt_affected_rows($stmt) != 1)) {
+        echo "SQL error.";
+    } else header("location: ".$_SERVER['SCRIPT_NAME']);
+}
+
 function getservicebyid($id) {
     global $services;
     foreach ($services as $service) {
@@ -29,6 +46,11 @@ function getservicebyid($id) {
     }
 }
 
+function genoption($id, $name) {
+    return "<input type=\"radio\" name=\"service\" id=\"$id\" onclick=\"selectservice($id)\" value=\"$id\">"
+        ."<label for=\"$id\">$name</label><br>\n";
+}
+
 ?>
 
 <!doctype html>
@@ -37,6 +59,39 @@ function getservicebyid($id) {
         <meta charset="UTF-8">
         <link rel="stylesheet" type="text/css" href="/style.css">
         <title>ARFNET CSTIMS</title>
+        <script type="text/javascript">
+            var services = <?php echo json_encode($services); ?>;
+            function selectservice(id) {
+                var service = services.find((element) => element["id"] == id);
+                document.getElementById("pricelabel").innerHTML = "Price: " + service["billing"];
+                document.getElementById("description").innerHTML = service["description"];
+                if (service["name"] == "vps") {
+                    document.getElementById("extraform").innerHTML
+                        = `<label><b>Options</b></label><br><label>Cores</label><br><select id=\"cpus\" onclick=\"calcprice()\"><option value=\"1\">1</option><option value=\"2\">2</option><option value=\"3\">3</option><option value=\"4\">4</option></select><br>
+                        <label>Memory</label><br><select id=\"mem\" onclick=\"calcprice()\"><option value=\"1\">1GB</option><option value=\"2\">2GB</option><option value=\"3\">3GB</option><option value=\"4\">4GB</option></select><br>
+                        <label>SSD</label><br><select id=\"ssd\" onclick=\"calcprice()\"><option value=\"5\">5GB</option><option value=\"10\">10GB</option><option value=\"20\">20GB</option><option value=\"30\">30GB</option></select><br>
+                        <br><label id=\"calculated\">Calculated price: </label>`;
+                    document.getElementById("comments").value = comment();
+                    calcprice();
+                } else document.getElementById("extraform").innerHTML = "";
+            }
+
+            function comment() {
+                var cpus = document.getElementById("cpus").value;
+                var mem = document.getElementById("mem").value;
+                var ssd = document.getElementById("ssd").value;
+                return "cpus: " + cpus + "\nmem: " + mem + "GB\nssd: " + ssd + "GB";
+            }
+
+            function calcprice() {
+                var cpus = Number(document.getElementById("cpus").value);
+                var mem = Number(document.getElementById("mem").value);
+                var ssd = Number(document.getElementById("ssd").value);
+                var price = (1*cpus**2) + (0.5*mem**2) + (0.02*ssd**2);
+                document.getElementById("calculated").innerHTML = "Calculated price: " + price + " €/mo";
+                document.getElementById("billing").value = price + "€/mo";
+            }
+        </script>
     </head>
     <body>
         <header><a href="https://arf20.com/">
@@ -50,39 +105,46 @@ function getservicebyid($id) {
                     <h3><?php echo strtoupper($type[0]).substr($type, 1); ?> panel</h3>
                     <div class="form">
                         <h3>Order a new service</h3>
-                        <form action="<?php echo $_SERVER['SCRIPT_NAME']; ?>">
+                        <form action="<?php echo $_SERVER['SCRIPT_NAME']; ?>" method="post">
                             <div class="border">
                                 <label><b>Service</b></label><br>
-                                
-                                    <label>Premium</dev><br>
-                                    <?php
-                                    foreach ($services as $service) {
-                                        if ($service["type"] != "premium") continue;
-                                        echo "<input type=\"radio\" name=\"service\" value=\"".$service["id"]."\">"
-                                            ."<label>".$service["name"]."</label><br>\n";
-                                    }
-                                    ?>
-                                
-                                
-                                    <label>Standard</dev><br>
-                                    <?php
-                                    foreach ($services as $service) {
-                                        if ($service["type"] != "standard") continue;
-                                        echo "<input type=\"radio\" name=\"service\" value=\"".$service["id"]."\">"
-                                            ."<label>".$service["name"]."</label><br>\n";
-                                    }
-                                    ?>
-                                
-                                    <label>Free</dev><br>
-                                    <?php
-                                    foreach ($services as $service) {
-                                        if ($service["type"] != "free") continue;
-                                        echo "<input type=\"radio\" name=\"service\" value=\"".$service["id"]."\">"
-                                            ."<label>".$service["name"]."</label><br>\n";
-                                    }
-                                    ?>
-                                
+                                <div class="row">
+                                    <div class="col">
+                                        <label>Premium</dev><br>
+                                        <?php
+                                        foreach ($services as $service) {
+                                            if ($service["type"] != "premium") continue;
+                                            echo genoption($service["id"], $service["name"]);
+                                        }
+                                        ?>
+                                    </div>
+                                    <div class="col">
+                                        <label>Standard</dev><br>
+                                        <?php
+                                        foreach ($services as $service) {
+                                            if ($service["type"] != "standard") continue;
+                                            echo genoption($service["id"], $service["name"]);
+                                        }
+                                        ?>
+                                    </div>
+                                    <div class="col">
+                                        <label>Free</dev><br>
+                                        <?php
+                                        foreach ($services as $service) {
+                                            if ($service["type"] != "free") continue;
+                                            echo genoption($service["id"], $service["name"]);
+                                        }
+                                        ?>
+                                    </div>
+                                </div>
                             </div>
+                            <br><label>Description</label><pre id="description"></pre>
+                            <label id="pricelabel">Price: </label><br>
+                            <br><div class="border" id="extraform"></div>
+                            <br><label>Instance name</label><br>
+                            <input type=text name="name"><br>
+                            <input type="hidden" name="billing" id="billing">
+                            <input type="hidden" name="comments" id="comments">
                             <br><input type="submit" value="Place order">
                         </form>
                     </div>
diff --git a/style.css b/style.css
index be0edd3..cdbc4a2 100644
--- a/style.css
+++ b/style.css
@@ -22,6 +22,10 @@ body {
     font-size: 150%;
 }
 
+.col {
+    float: left;
+}
+
 .col5 {
     float: left;
     width: 50%;
author	arf20 <aruizfernandez05@gmail.com>	2024-03-19 04:58:03 +0100
committer	arf20 <aruizfernandez05@gmail.com>	2024-03-19 04:58:03 +0100
commit	c509a2d6aa9394fa7200d8fa11904914d8e81f06 (patch)
tree	3ba0ba4aa4ebe1ad232b2dfbabf5dbf99a3327b7
parent	1818a590244c1ae8390a6fb58d6e1f775b46d723 (diff)
download	arfnet2-cstims-c509a2d6aa9394fa7200d8fa11904914d8e81f06.tar.gz arfnet2-cstims-c509a2d6aa9394fa7200d8fa11904914d8e81f06.zip