utilizadores.html.php

<!-- /.intro section -->
<div id="intro">
    <div class="container">
        <div class="row">
            <?php if(isset($errorOperacao)): ?>
                <?php if($errorOperacao == true): ?>
                    <div class="col-md-12 errorDiv"><h2 class="redError">Erro na operação!</h2></div>
                <?php endif; ?>
                <?php if($errorOperacao == false): ?>
                    <div class="col-md-12 successDiv"><h2 class="greenSuccess">Operação realizada com sucesso!</h2></div>
                <?php endif; ?>
            <?php endif; ?>

            <form method="POST" class="slideInRight floatRight">
                <input type="button" value="Adicionar" name="submit" class="btn-default slideInRight marginTopZero buttAdicionarCurso" data-toggle="modal" data-target="#modalAdicionar">
            </form>
            <table class="table">
                <thead>
                    <tr>
                        <th>Nome</th>
                        <th>Opções</th>
                    </tr>
                </thead>
                <tbody>
                    <?php foreach ($listaUsers as $user): ?>
                        <tr>
                            <td><?php echo $user->username; ?></td>
                                <td class="adjustButtForTable">
                                    <form method="GET" class="form-inline">
                                        <input type="hidden" value="<?php echo $user->idUser; ?>" id="idUser" name="idUser">
                                        <input type="submit" value="Editar utilizador" name="pagina" class="btn-default buttEditarUser" data-toggle="modal" data-target="#modalEditar">
                                    </form>
                                    <form method="POST" class="form-inline">
                                        <input type="hidden" value="<?php echo $user->idUser; ?>" id="idUser" name="idUser">
                                        <input type="button" value="Apagar" name="submit" class="btn-default buttApagarUser" data-toggle="modal" data-target="#modalApagar">
                                    </form>
                                </td>
                        </tr>

                    <?php endforeach; ?>
                </tbody>
            </table>
        </div>
    </div>
</div>
<!-- Modal -->
            <div id="modalApagar" class="modal fade" role="dialog">
              <div class="modal-dialog">

                <!-- Modal content-->
                <div class="modal-content">
                  <div class="modal-header">
                    <button type="button" class="close" data-dismiss="modal">&times;</button>
                    <h4 class="modal-title">Atenção!</h4>
                  </div>
                  <div class="modal-body">
                    <p>Tem a certeza que deseja eliminar este utilizador?</p>
                  </div>
                  <div class="modal-footer">
                        <form method="POST">
                            <input type="hidden" name="idUserFinal" id="idUserFinal">
                            <input type="submit" name="submit" class="btn btn-default marginBottomZero" value="Sim, quero eliminar este utilizador">
                            <button type="button" class="btn btn-default" data-dismiss="modal">Não</button>
                        </form>
                  </div>
                </div>

              </div>
            </div>
<!-- Modal -->
            <div id="modalAdicionar" class="modal fade" role="dialog">
              <div class="modal-dialog">

                <!-- Modal content-->
                <div class="modal-content">
                  <div class="modal-header">
                    <button type="button" class="close" data-dismiss="modal">&times;</button>
                    <h4 class="modal-title">Adicionar utilizador</h4>
                  </div>
                    <form method="POST" class="contact-form row formAddUser">
                        <div class="col-md-12 ">
                            <label>Tipo de utilizador</label>
                            <select name="tipoUser" class="form-control" required>
                                <option>Secretariado</option>
                                <option>Administrador</option>
                            </select>
                        </div>
                        <div class="col-md-12 ">
                            <label></label>
                            <input type="text" name="username" class="form-control widthCinquenta buttLoginUsernamePassword" placeholder="Username" required="">
                        </div>
                        <div class="col-md-12 ">
                            <label></label>
                            <input type="password" name="password" class="form-control widthCinquenta buttLoginUsernamePassword" placeholder="Password" required="">
                        </div>
                        <div class="col-md-12 ">
                            <label></label>
                            <input type="password" name="REpassword" class="form-control widthCinquenta buttLoginUsernamePassword" placeholder="Repita a password" required="">
                        </div>
                        <div class="col-md-12 flexContentCenter">
                            <input type="submit" id="buttAddCursoFinal" class="btn btn-price" name="submit" value="Adicionar utilizador">
                        </div>
                    </form>
                </div>

              </div>
            </div>

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

users.php

<?php

/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */


include_once 'includes/bd.inc.php';


class users{
    public $username, $password, $role;

    public function __construct($username, $password, $role) {
        $this->username = $username;
        $this->password = $password;
        $this->role = $role;
    }
    public static function getUsers(){
        global $link;
        global $limite;

        $sql = "SELECT * FROM users limit $limite";
        $resultado = mysqli_query($link, $sql);

        $users = [];
        $keys = [];
        $values = [];

        if (!$resultado) {
            //echo mysqli_error($link);
        } else {
            while ($row = mysqli_fetch_object($resultado)) {
                $users[] = $row;
            }
        }
        return $users;
    }

    public static function getUserByID($id) {
        global $link;

        $sql = "Select * from users where idUser = $id";
        $resultado = mysqli_query($link, $sql);


        $users = mysqli_fetch_object($resultado);

        return $users;
    }

    public static function editUser($id, $username, $password, $tipoUser) {
        global $link;

        $sql = "Update users set username = '".$username."', password = '".$password."', idRole = $tipoUser where idUser = $id";
        $resultado = mysqli_query($link, $sql);


        if($resultado){
            return true;
        }else{
            return false;
        }
    }

    public static function getallUsers() {
        global $link;

        $sql = 'SELECT * FROM users';
        $resultado = mysqli_query($link, $sql);

        $users = [];
        $keys = [];
        $values = [];

        if (!$resultado) {
            //echo mysqli_error($link);
        } else {
            while ($row = mysqli_fetch_object($resultado)) {
                $users[] = $row;
            }
        }
        return $users;
    }

    public static function getUSersBySomething($orderBy) {
        if ($orderBy) {
            global $link;

            $sql = 'SELECT * FROM users';
            if ($orderBy == "nome") {
                $sql = 'SELECT * FROM users ORDER BY username';
            } else if ($orderBy == "nomeDesc") {
                $sql = 'SELECT * FROM users ORDER BY username desc';
            }

            $resultado = mysqli_query($link, $sql);

            $users = [];
            $keys = [];
            $values = [];

            if (!$resultado) {
                //echo mysqli_error($link);
            } else {
                while ($row = mysqli_fetch_object($resultado)) {
                    $users[] = $row;
                }
            }
            return $users;
        }
    }

    public static function getallUsersCountCeiling(){
        global $link;
        global $limite;

        $sql = "SELECT CEIL(COUNT(*)/$limite) ceilingCount FROM users";
        $resultado = mysqli_query($link, $sql);

        $delegacoes = [];
        $keys = [];
        $values = [];

        if (!$resultado) {
            //echo mysqli_error($link);
        } else {
            $users = mysqli_fetch_object($resultado);
//            while ($row = mysqli_fetch_object($resultado)) {
//                $funcoes[] = $row;
//            }
        }
        return $users;
    }
    public static function getUser($user, $pass){
        global $link;

        $sql = "SELECT * FROM `users` WHERE username = '$user'";
//        echo $sql.'<br/>';
        $resultado = mysqli_query($link, $sql);

        $row = mysqli_fetch_object($resultado);

        if (isset($row->password)){
            if (password_verify($pass, $row->password) == 1){
                //Correct password!

                $_SESSION["role"] = $row->idRole;
                $_SESSION["idUser"] = $row->idUser;
                $_SESSION["username"] = $row->username;

                if(mysqli_num_rows($resultado) == 0){
                mysqli_error($link);
                return false;
                }
                else{
                    return true;
                }
            }else{
                //Wrong password!
            }
        }
        else{//Wrong username or password
        }



    }

    public static function endSession(){
        session_destroy();
        session_start();
    }
    public static function deleteUser($idUser) {
        global $link;
        //Exemplo: "DELETE FROM `pessoas` WHERE `pessoas`.`id` = 11"
        $sql = "DELETE FROM users WHERE idUser = '$idUser'";
        $resultado = mysqli_query($link, $sql);

        if ($resultado) {
            return true;
        }return false;
    }
    public static function addUser(users $user){
        global $link;


        $sql = "INSERT INTO `users` (`username`, `password`, `idRole`) VALUES ('$user->username', '$user->password', $user->role)";

        //echo $sql."<br/>";
        $resultado = mysqli_query($link, $sql);
        //echo $resultado;
        if(!$resultado){
            mysqli_error($link);
            return false;
        }
        else{
            return true;
        }
    }
}

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

index.php (dentro de $_POST["submit"])

else if($_POST["submit"] == "Adicionar utilizador"){
        if(isset($_POST["username"]) && isset($_POST["password"]) && isset($_POST["REpassword"]) && isset($_POST["tipoUser"])){
            if($_POST["password"] == $_POST["REpassword"]){
                $username = htmlspecialchars($_POST["username"]);
                $password = htmlspecialchars(password_hash($_POST["password"], PASSWORD_DEFAULT));
                $tipoUser = htmlspecialchars($_POST["tipoUser"]);
                if($tipoUser == "Secretariado"){
                    $tipoUser = 2;
                }else{
                    $tipoUser = 1;
                }
                $novoUser = new users($username, $password, $tipoUser);
                if (users::addUser($novoUser)) {
                    $errorOperacao = false;
                } else {
                    $errorOperacao = true;
                }
            }
            else{
                $errorOperacao = true;
            }
        }
    }
    else if($_POST["submit"] == "Sim, quero eliminar este utilizador"){
        $idUserAApagar = $_POST["idUserFinal"];

            if (users::deleteUser($idUserAApagar)) {
                $errorOperacao = false;
            } else {
                $errorOperacao = true;
            }
            $maxPagination = users::getallUsersCountCeiling();
            if(!isset($_POST["pagination"])){
                $pagination = 1;
            }
            $listaUsers = [];
            $listaUsers = users::getallUsers();
            $vista = "users";
    }
    else if($_POST["submit"] == "Editar"){
        if(isset($_POST["idUser"])){
            $username = htmlspecialchars($_POST["username"]);
            $password = htmlspecialchars($_POST["password"]);
            $password = password_hash($password, PASSWORD_DEFAULT);
            $idUserAEditar = htmlspecialchars($_POST["idUser"]);
            $tipoUser = htmlspecialchars($_POST["tipoUser"]);
            if($tipoUser == "Secretariado"){
                $tipoUser = 2;
            }else{
                $tipoUser = 1;
            }
            if(users::editUser($idUserAEditar, $username, $password, $tipoUser)){
                $errorOperacao = false;
            }else{
                $errorOperacao = true;
            }
        }
    }

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

index.php (dentro de $_GET["pagina"])

else if($_GET["pagina"] == "Utilizadores"){
        $vista = "users";
        $listaUsers = users::getallUsers();

        $maxPagination = users::getallUsersCountCeiling();

        if (!isset($_POST["pagination"])) {
            $pagination = 1;
        }
    }
    else if($_GET["pagina"] == "Editar utilizador"){
        if(isset($_GET["idUser"])){
            $vista = "editarUser";
            $listaUsers = users::getUserByID(htmlspecialchars($_GET["idUser"]));

        }
    }