<?php

$server = "localhost";
$user = "root";
$pass = "";
$db = "textFiles";

	$conn = new mysqli($server, $user, $pass, $db);
	if ($conn->connect_error) die($conn->connect_error);

	$sql = "CREATE TABLE textfiles (
	names MEDIUMTEXT NOT NULL,
	content MEDIUMTEXT NOT NULL)";

	$conn->query($sql);

	if (isset($_POST['delete']) && isset($_POST['name']))
	{
			$name = post($conn, 'name');
			$query = "DELETE FROM textfiles WHERE name='$name'";
			$result = $conn->query($query);
			if (!$result) echo "DELETE failed: $query<br>" .
				$conn->error . "<br><br>";
	}

	if (isset($_POST['name']) && isset($_FILES['file'])) {

		$error = 0;

		$temp = explode('.',$_FILES['file']['name']);

		$filetype=strtolower(end($temp));

		if($filetype != 'txt'){
        	 	echo <<<_END
				"Only text files are allowed";
			_END;
			$error +=1;
      		}

			if($error == 0) {

			$name =  $_REQUEST['file']['name'];

			echo $name;

			$content = file_get_contents($_FILES['file']['tmp_name']);

			$query = "INSERT INTO textfiles VALUES" ."('$name', '$content')";

			$result = $conn->query($query);

			if (!$result) echo "INSERT failed: $query<br>" . $conn->error . "<br><br>";
		}
		else {
			echo "Invalid input, please try again" ."<br>";
		}
	}


	echo <<<_END
	<form action="hw3.php" method="post" enctype="multipart/form-data"><pre>
	Name <input type="text" name="name">
	Content <input type="file" name="file">
	<input type="submit" value="ADD">
	</pre></form>
	_END;

	$query = "SELECT * FROM textfiles";
	$result = $conn->query($query);

	if(!$result) die ("Database access failed: " . $conn->error);
	$rows = $result->num_rows;
	for($i = 0; $i < $rows; ++$i) {
		$result->data_seek($i);
		$row = $result->fetch_array(MYSQLI_NUM);
		echo <<<_END
		<pre>
		Name: $row[0]
		Content: $row[1]
		</pre>
		<form action="upload.php" method="post">
		<input type="hidden" name="delete" value="yes">
		<input type="hidden" name="name" value="$row[0]">
		<input type="submit" value="CLEAR"></form>
		_END;
	}

	$result->close();
	$conn->close();


	function post($conn, $var) {
		return $conn->real_escape_string($_POST[$var]);
	}
?>