<?php


	$getType = "SELECT fiType FROM `tblUser` WHERE `dtEmail` = '" . $_SESSION['email'] . "'";
	$result = mysqli_query($dbc, $getType);


	/*$perms = "SELECT idType FROM tblKontoTypen WHERE `idType` = '1'";
	if ($perms !== $getType){
		header('Location: ./home');
	}
*/
?>

<script type="text/javascript">
	function deleteOnConfirmation(courseID, coursename) {
		var result = confirm("Caution: Do you really want to delete the film '" + coursename + "'?");

		if (result) {
			document.getElementById("deleteCourse").setAttribute("value", courseID);
			document.getElementById("courseTable").submit();
		}
	}
</script>

<h2>Course Edit</h2>
<div align="justify">
	<?php
		require_once 'connect.php';

		// Verbindung zum Datenbankserver herstellen und Datenbank auswählen
		$dbc = mysqli_connect(DB_HOST, DB_USER, DB_PW, DB_NAME);

		// Testen ob die Verbindung erfolgreich aufgenommen wurde
		// und gegebenenfalls den Skript mit einer geeignete Fehlermeldung abbrechen
		if (mysqli_connect_errno())
			die('Connect Error (' . mysqli_connect_errno() . ') ' . mysqli_connect_error());

		// Zeichensatz setzen
		mysqli_set_charset($dbc, 'utf8');

		if (isset($_POST["DATA_deleteCourse"]) && !empty($_POST["DATA_deleteCourse"])) {
			$deleteQuery = 'DELETE FROM tblKurs WHERE idKurs =' . $_POST["DATA_deleteCourse"];
			mysqli_query($dbc, $deleteQuery);

			if (mysqli_errno($dbc))
				die("Wrong SQL: $deleteQuery Error: " . mysqli_error($dbc));
		} else if (isset($_POST["BUTTON_save"])) {
			$updateQuery = "UPDATE tblKurs SET
                                dtName = '{$_POST["DATA_cname"]}',
																dtCode = '{$_POST["DATA_code"]}',
																dtCycle = '{$_POST["DATA_cycle"]}',
																dtECTS = '{$_POST["DATA_ects"]}',
																dtObligatorisch = '{$_POST["DATA_obl"]}',
																dtKursstunden = '{$_POST["DATA_hours"]}',
																dtArbeitsstunden = '{$_POST["DATA_work"]}',
																dtExam = '{$_POST["DATA_exam"]}',
																dtTP = '{$_POST["DATA_assessment"]}',
																dtBewertungsAnzahl = '{$_POST["DATA_number"]}',
																fiEinheit = '{$_POST["DATA_teaching"]}',
																fiSprache = '{$_POST["DATA_language"]}'
                              WHERE idKurs = '{$_POST["BUTTON_save"]}'";

			mysqli_query($dbc, $updateQuery);
			if (mysqli_errno($dbc))
				die("Wrong SQL: $updateQuery Error: " . mysqli_error($dbc));
		}

		$selectQuery = "SELECT * FROM tblKurs";

		if (isset($_GET["sort"])) {
			$sortColumn = $_GET["sort"];

			$dbColumns = [
				"name" => "dtName",
				"code" => "dtCode",
				"cycle" => "dtCycle",
				"ects" => "dtECTS",
				"obligatorisch" => "dtObligatorisch",
				"kursstunden" => "dtKursstunden",
				"arbeitsstunden" => "dtArbeitsstunden",
				"exam" => "dtExam",
				"tp" => "dtTP",
				"bewertungsanzahl" => "dtBewertungsAnzahl",
				"einheit" => "fiEinheit",
				"sprache" => "fiSprache"
			];
			if (isset($dbColumns[$sortColumn]))
				$selectQuery .= " ORDER BY " . $dbColumns[$sortColumn] . " DESC";
		}

		$result = @mysqli_query($dbc, $selectQuery);

		if (mysqli_errno($dbc))
			die("Wrong SQL: $selectQuery Error: " . mysqli_error($dbc));

		echo "<form id=\"courseTable\" method=\"post\">";
		echo "<input id=\"deleteCourse\" type=\"hidden\" name=\"DATA_deleteCourse\" required>";
		echo "<table>";
		echo "<tr>";
		echo "<th>Name</th>";
		echo "<th>Code</th>";
		echo "<th>Cycle</th>";
		echo "<th>ECTS</th>";
		echo "<th>Obligatorisch</th>";
		echo "<th>Kurs stunden</th>";
		echo "<th>Arbeits stunden</th>";
		echo "<th>Examen</th>";
		echo "<th>TP</th>";
		echo "<th>Bewertungs anzahl</th>";
		echo "<th>Einheit</th>";
		echo "<th>Sprache</th>";
		echo "<th id=\"buttons\"></th>";
		echo "</tr>";

		for ($i = 0; $i < mysqli_num_rows($result); $i++) {
			$row = mysqli_fetch_assoc($result);

			if (isset($_POST["BUTTON_editCourse"]) && $_POST["BUTTON_editCourse"] == $row["idKurs"]) {
				echo "<tr>";

				echo "<td><input type=\"text\" name=\"DATA_cname\" value=\"{$row["dtName"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_code\" value=\"{$row["dtCode"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_cycle\" value=\"{$row["dtCycle"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_ects\" value=\"{$row["dtECTS"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_obl\" value=\"{$row["dtObligatorisch"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_hours\" value=\"{$row["dtKursstunden"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_work\" value=\"{$row["dtArbeitsstunden"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_exam\" value=\"{$row["dtExam"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_assessment\" value=\"{$row["dtTP"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_number\" value=\"{$row["dtBewertungsAnzahl"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_teaching\" value=\"{$row["fiEinheit"]}\" required></td>";
				echo "<td><input type=\"text\" name=\"DATA_language\" value=\"{$row["fiSprache"]}\" required></td>";
				echo "<td>";
				echo "</select>";
				echo "</td>";
				echo "<td class=\"buttons\">";
				echo "<button class=\"button\" type=\"submit\" name=\"BUTTON_save\" value=\"{$_POST["BUTTON_editCourse"]}\" >&#x2713;</button>";
				echo "<button class=\"button\" type=\"submit\" name=\"BUTTON_cancel\" >&#x27A6;</button>";
				echo "</td>";
				echo "</tr>";
			} else {
				echo "<tr>";
				echo "<td>{$row["dtName"]}</td>";
				echo "<td>{$row["dtCode"]}</td>";
				echo "<td>{$row["dtCycle"]}</td>";
				echo "<td>{$row["dtECTS"]}</td>";
				echo "<td>{$row["dtObligatorisch"]}</td>";
				echo "<td>{$row["dtKursstunden"]}</td>";
				echo "<td>{$row["dtArbeitsstunden"]}</td>";
				echo "<td>{$row["dtExam"]}</td>";
				echo "<td>{$row["dtTP"]}</td>";
				echo "<td>{$row["dtBewertungsAnzahl"]}</td>";
				echo "<td>{$row["fiEinheit"]}</td>";
				echo "<td>{$row["fiSprache"]}</td>";

				echo "<td class='buttons'>";
				echo "<button class='button' type='submit' name='BUTTON_editCourse' value='{$row["idKurs"]}'>&#x2710;</button>";
				echo "<button class='button' type='submit' onclick=\"deleteOnConfirmation({$row["idKurs"]}, '{$row["dtName"]}')\">&#x2716;</button>";
				echo "</td>";
				echo "</tr>";
			}
		}
		echo "</table>";
		echo "</form>";
	?>
	<?php
		mysqli_free_result($result);
		mysqli_close($dbc);
	?>
</div>