delete.php - dblp

<?php
session_start();

function backToPrevious($time) {
    echo '<meta http-equiv="refresh" content="',$time,';url=',$_SERVER['HTTP_REFERER'],'" />';
}

if(isset($_SESSION['admin']) && $_SESSION['admin']==true && isset($_POST['entity_search'])) {

include_once "db_connect.php";

if($_POST['entity_choice']=="author") {
    $sql='DELETE FROM pub_author WHERE AuthorName=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if(!$send) {
        echo 'FAILURE';
        backToPrevious(5);
    }
    $sql='DELETE FROM author WHERE Name=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if($send) {
        echo 'Success';
        backToPrevious(5);
    }
    else {
        echo 'Failure';
        echo $sql;
        backToPrevious(5);
    }
}

else if($_POST['entity_choice']=="editor") {
    $sql='DELETE FROM book_editor WHERE EditorName=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if(!$send) {
        echo 'FAILURE';
        backToPrevious(5);
    }

    $sql='DELETE FROM eidotr WHERE Name=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if($send) {
        echo 'Success';
        backToPrevious(5);
    }
    else {
        echo 'Failure';
        echo $sql;
        backToPrevious(5);
    }
}

else if($_POST['entity_choice']=="publisher") {
    $sql='DELETE FROM publication_publisher WHERE PublishName=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if(!$send) {
        echo 'FAILURE';
        backToPrevious(5);
    }

    $sql='DELETE FROM publisher WHERE Name=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if($send) {
        echo 'Success';
        backToPrevious(5);
    }
    else {
        echo 'Failure';
        echo $sql;
        backToPrevious(5);
    }
}

else if($_POST['entity_choice']=="article" || $_POST['entity_choice']=="book" || $_POST['entity_choice']=="incollection" || $_POST['entity_choice']=="master_thesis" || $_POST['entity_choice']=="phd_thesis") {

    if($_POST['entity_choice']=="article") {
        $sql='DELETE FROM article_in_journal WHERE ArtID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
        $sql='DELETE FROM pub_article WHERE PubID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
    }

    if($_POST['entity_choice']=="book") {
    //Avant de supprimer le livre, il faut commencer par supprimer tous ses incollections.
        $sql='SELECT iib.IncolID FROM incollection_in_book iib WHERE iib.BookID=\''.$_POST['entity_search'].'\'';
        $result=$db->query($sql);
        while($inc=$result->fetch()) {
            $sql='DELETE FROM incollection_in_book WHERE IncolID=\''.$inc['IncolID'].'\'';
            $db->query($sql);
            $sql='DELETE FROM pub_incollection WHERE PubID=\''.$inc['IncolID'].'\'';
            $db->query($sql);
            $sql='DELETE FROM publication WHERE PubKey=\''.$inc['IncolID'].'\'';
            $db->query($sql);
            $sql='DELETE FROM pub_author WHERE PubID=\''.$inc['IncolID'].'\'';
            $db->query($sql);
            $sql='DELETE FROM publication_publisher WHERE PublicaKey=\''.$inc['IncolID'].'\'';
            $db->query($sql);
        }

        $sql='DELETE FROM book_editor WHERE BookID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
        $sql='DELETE FROM pub_book WHERE PubID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
    }//fin book

    if($_POST['entity_choice']=="incollection") {
        $sql='DELETE FROM incollection_in_book WHERE IncolID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
        $sql='DELETE FROM pub_incollection WHERE PubID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
        $sql='DELETE FROM publication WHERE PubKey=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);

        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
    }

    if($_POST['entity_choice']=="master_thesis") {
        $sql='DELETE FROM pub_master_thesis WHERE PubID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
    }

    if($_POST['entity_choice']=="phd_thesis") {
        $sql='DELETE FROM pub_phd_thesis WHERE PubID=\''.$_POST['entity_search'].'\'';
        $send=$db->query($sql);
        if(!$send) {
            echo 'Failure';
            echo $sql;
            backToPrevious(5);
        }
    }


    $sql='DELETE FROM pub_author WHERE PubID=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    $sql='DELETE FROM publication_publisher WHERE PublicaKey=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);


    $sql='DELETE FROM publication WHERE PubKey=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if($send) {
        echo 'Success';
        backToPrevious(5);
    }
    else {
        echo 'Failure';
        echo $sql;
        backToPrevious(5);
    }
}//fin publication

else if($_POST['entity_choice']=="journal") {
    //Supprimer tous les articles publiés dans ce journal
    $sql='SELECT aij.ArtID FROM article_in_journal aij WHERE aij.Journal=\''.$_POST['entity_search'].'\'';
    $result=$db->query($sql);
    while($art=$result->fetch()) {
        $sql='DELETE FROM article_in_journal WHERE ArtID=\''.$art['ArtID'].'\'';
        $db->query($sql);
        $sql='DELETE FROM pub_article WHERE PubID=\''.$art['ArtID'].'\'';
        $db->query($sql);
        $sql='DELETE FROM publication WHERE PubKey=\''.$art['ArtID'].'\'';
        $db->query($sql);
        $sql='DELETE FROM pub_author WHERE PubID=\''.$art['ArtID'].'\'';
        $db->query($sql);
        $sql='DELETE FROM publication_publisher WHERE PublicaKey=\''.$art['ArtID'].'\'';
        $db->query($sql);

    }

    $sql='DELETE FROM journal WHERE Title=\''.$_POST['entity_search'].'\'';
    $send=$db->query($sql);
    if($send) {
        echo 'Success';
        backToPrevious(5);
    }
    else {
        echo 'Failure';
        echo $sql;
        backToPrevious(5);
    }
}



}//Fin if isset($_session(admin)
else {
    echo 'Only admin can access this area.';
    backToPrevious(5);
}
exit();
?>