= " . $end_pos ." "; $sql .= "AND id !=" . $current_id; }elseif ($end_pos == 0){ //deleting item $sql = "UPDATE nav_header "; $sql .= "SET position = position - 1 "; $sql .= "WHERE position > " . $start_pos ." "; $sql .= "AND id !=" . $current_id; }elseif ($start_pos < $end_pos){ //moving down the position $sql = "UPDATE nav_header "; $sql .= "SET position = position - 1 "; $sql .= "WHERE position > " . $start_pos ." "; $sql .= "AND position <= " . $end_pos . " "; $sql .= "AND id !=" . $current_id; }elseif ($start_pos > $end_pos){ //moving up the position $sql = "UPDATE nav_header "; $sql .= "SET position = position + 1 "; $sql .= "WHERE position >= " . $end_pos ." "; $sql .= "AND position < " . $start_pos . " "; $sql .= "AND id !=" . $current_id; } $update_pos = mysqli_query($db, $sql); return $update_pos; } function find_header_name_by_id($id){ $nav_header_name_set = find_navheaders_by_id($id); $nav_header_name = mysqli_fetch_assoc($nav_header_name_set); return $nav_header_name['name']; } function find_navdrop($args=[]){ global $db; $visible = $args['visible']? true : false; $sql = "SELECT * "; $sql .= "FROM nav_dropdowns "; if($visible){ $sql .= "WHERE visible = true "; } $sql .= "ORDER BY position ASC"; $nav_drop = mysqli_query($db, $sql); return $nav_drop; } function find_navdrops_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM nav_dropdowns "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY position ASC"; $nav_drop = mysqli_query($db, $sql); return $nav_drop; } function create_nav_drop($form){ global $db; $sql = "INSERT INTO nav_dropdowns "; $sql .= "(name, header_id, position, link, visible) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['header_name'] . "', "; $sql .= "'" . $form['position'] . "', "; $sql .= "'" . $form['link'] . "', "; $sql .= "'" . $form['visible'] . "')"; $create_nav = mysqli_query($db, $sql); return $create_nav; } function shift_drop_position ($start_pos, $end_pos, $header_id, $current_id=0){ global $db; if($start_pos == $end_pos) { return; } if($start_pos == 0){ //new item $sql = "UPDATE nav_dropdowns "; $sql .= "SET position = position + 1 "; $sql .= "WHERE position >= " . $end_pos ." "; $sql .= "AND id !=" . $current_id . " "; $sql .= "AND header_id =" . $header_id; }elseif ($end_pos == 0){ //deleting item $sql = "UPDATE nav_dropdowns "; $sql .= "SET position = position - 1 "; $sql .= "WHERE position > " . $start_pos ." "; $sql .= "AND id !=" . $current_id . " "; $sql .= "AND header_id =" . $header_id; }elseif ($start_pos < $end_pos){ //moving down the position $sql = "UPDATE nav_dropdowns "; $sql .= "SET position = position - 1 "; $sql .= "WHERE position > " . $start_pos ." "; $sql .= "AND position <= " . $end_pos . " "; $sql .= "AND id !=" . $current_id . " "; $sql .= "AND header_id =" . $header_id; }elseif ($start_pos > $end_pos){ //moving up the position $sql = "UPDATE nav_dropdowns "; $sql .= "SET position = position + 1 "; $sql .= "WHERE position >= " . $end_pos ." "; $sql .= "AND position < " . $start_pos . " "; $sql .= "AND id !=" . $current_id . " "; $sql .= "AND header_id =" . $header_id; } $update_pos = mysqli_query($db, $sql); return $update_pos; } function find_drop_by_headerid($header_id, $args =[]){ global $db; $visible = $args['visible']? true : false; $sql = "SELECT * "; $sql .= "FROM nav_dropdowns "; $sql .= "WHERE header_id=" . $header_id . " "; if($visible){ $sql .= "AND visible = true "; } $sql .= "ORDER BY position ASC"; $nav_drop = mysqli_query($db, $sql); return $nav_drop; } function update_nav_drops($form, $id){ global $db; $sql = "UPDATE nav_dropdowns "; $sql .= "SET name='" . $form['name'] . "', "; $sql .= "header_id='" . $form['header_name'] . "', "; $sql .= "position='" . $form['position'] . "', "; $sql .= "link='" . $form['link'] . "', "; $sql .= "visible='" . $form['visible'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function delete_nav_drops($id){ global $db; $sql = "DELETE FROM nav_dropdowns "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function find_admins(){ global $db; $sql = "SELECT * "; $sql .= "FROM admins "; $sql .= "ORDER BY id ASC"; $admins = mysqli_query($db, $sql); return $admins; } function find_admin_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM admins "; $sql .= "WHERE id=" . $id; $admin = mysqli_query($db, $sql); return $admin; } function create_admin($form){ global $db; $sql = "INSERT INTO admins "; $sql .= "(username, hashed_password) "; $sql .= "VALUES ('" . $form['username'] . "', "; $sql .= "'" . $form['hashed_pass'] . "')"; $create_admin = mysqli_query($db, $sql); return $create_admin; } function delete_admin($id){ global $db; $sql = "DELETE FROM admins "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_admin($form, $id){ global $db; $sql = "UPDATE admins "; $sql .= "SET hashed_password='" . $form['hashed_pass'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function require_login(){ if(!isset($_SESSION['access']) || $_SESSION['access']==false){ redirect_to(url_for('admin/login.php')); } } function find_news(){ global $db; $sql = "SELECT * "; $sql .= "FROM news "; $sql .= "ORDER BY id ASC"; $news = mysqli_query($db, $sql); return $news; } function find_news_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM news "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY id ASC"; $news = mysqli_query($db, $sql); return $news; } function create_news($form){ global $db; $sql = "INSERT INTO news "; $sql .= "(title, date, month, img_name, content) "; $sql .= "VALUES ('" . $form['title'] . "', "; $sql .= "'" . $form['date'] . "', "; $sql .= "'" . $form['month'] . "', "; $sql .= "'" . $form['img_name'] . "', "; $sql .= "'" . $form['content'] . "')"; $create_news = mysqli_query($db, $sql); return $create_news; } function delete_news($id){ global $db; $sql = "DELETE FROM news "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_news($form, $id){ global $db; $sql = "UPDATE news "; $sql .= "SET title='" . $form['title'] . "', "; $sql .= "date='" . $form['date'] . "', "; $sql .= "month='" . $form['month'] . "', "; $sql .= "content='" . $form['content'] . "', "; $sql .= "img_name='" . $form['img_name'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_products(){ global $db; $sql = "SELECT * "; $sql .= "FROM products "; $sql .= "ORDER BY id ASC"; $products = mysqli_query($db, $sql); return $products; } function find_product_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM products "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY id ASC"; $news = mysqli_query($db, $sql); return $news; } function create_product($form){ global $db; $sql = "INSERT INTO products "; $sql .= "(name, price, quality_1, quality_2, quality_3) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['price'] . "', "; $sql .= "'" . $form['quality_1'] . "', "; $sql .= "'" . $form['quality_2'] . "', "; $sql .= "'" . $form['quality_3'] . "')"; $create_product = mysqli_query($db, $sql); return $create_product; } function delete_product($id){ global $db; $sql = "DELETE FROM products "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_product($form, $id){ global $db; $sql = "UPDATE products "; $sql .= "SET name='" . $form['name'] . "', "; $sql .= "price='" . $form['price'] . "', "; $sql .= "quality_1='" . $form['quality_1'] . "', "; $sql .= "quality_2='" . $form['quality_2'] . "', "; $sql .= "quality_3='" . $form['quality_3'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_wps(){ global $db; $sql = "SELECT * "; $sql .= "FROM wps "; $sql .= "ORDER BY id DESC"; $wps = mysqli_query($db, $sql); return $wps; } function find_wps_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM wps "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY id DESC"; $wps = mysqli_query($db, $sql); return $wps; } function create_wps($form){ global $db; $sql = "INSERT INTO wps "; $sql .= "(name, img_opt_name, organisation, location, content) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['img_opt_name'] . "', "; $sql .= "'" . $form['organisation'] . "', "; $sql .= "'" . $form['location'] . "', "; $sql .= "'" . $form['content'] . "')"; $create_wps = mysqli_query($db, $sql); return $create_wps; } function delete_wps($id){ global $db; $sql = "DELETE FROM wps "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_wps($form, $id){ global $db; $sql = "UPDATE wps "; $sql .= "SET name='" . $form['name'] . "', "; $sql .= "img_opt_name='" . $form['img_opt_name'] . "', "; $sql .= "content='" . $form['content'] . "', "; $sql .= "organisation='" . $form['organisation'] . "', "; $sql .= "location='" . $form['location'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_high_achievers(){ global $db; $sql = "SELECT * "; $sql .= "FROM high_achievers "; $sql .= "ORDER BY id DESC"; $high_achievers = mysqli_query($db, $sql); return $high_achievers; } function find_high_achievers_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM high_achievers "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY id DESC"; $high_achievers = mysqli_query($db, $sql); return $high_achievers; } function create_high_achiever($form){ global $db; $sql = "INSERT INTO high_achievers "; $sql .= "(name, img_name, content) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['img_name'] . "', "; $sql .= "'" . $form['content'] . "')"; $create_high_achiever = mysqli_query($db, $sql); return $create_high_achiever; } function delete_high_achiever($id){ global $db; $sql = "DELETE FROM high_achievers "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_high_achiever($form, $id){ global $db; $sql = "UPDATE high_achievers "; $sql .= "SET name='" . $form['name'] . "', "; $sql .= "img_name='" . $form['img_name'] . "', "; $sql .= "content='" . $form['content'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function add_inquiry($form){ global $db; $sql = "INSERT INTO inquiry "; $sql .= "(name, email, number, content, date) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['email'] . "', "; $sql .= "'" . $form['number'] . "', "; $sql .= "'" . $form['content'] . "', "; $sql .= "'" . $form['date'] . "')"; $add_inquiry = mysqli_query($db, $sql); return $add_inquiry; } function find_inquiry(){ global $db; $sql = "SELECT * "; $sql .= "FROM inquiry "; $sql .= "ORDER BY id DESC"; $inquiry = mysqli_query($db, $sql); return $inquiry; } function find_course(){ global $db; $sql = "SELECT * "; $sql .= "FROM course "; $sql .= "ORDER BY nav_position ASC"; $course = mysqli_query($db, $sql); return $course; } function find_course_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM course "; $sql .= "WHERE nav_position=" . $id . " "; $sql .= "ORDER BY nav_position ASC"; $course = mysqli_query($db, $sql); return $course; } function create_course($form){ global $db; $sql = "INSERT INTO course "; $sql .= "(name, nav_position) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['nav_position'] . "')"; $course = mysqli_query($db, $sql); return $course; } function delete_course($id){ global $db; $sql = "DELETE FROM course "; $sql .= "WHERE nav_position='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_course($form, $id){ global $db; $sql = "UPDATE course "; $sql .= "SET name='" . $form['name'] . "', "; $sql .= "nav_position='" . $form['nav_position'] . "' "; $sql .= "WHERE nav_position='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_topics_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM topic "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "ORDER BY name ASC"; $topics = mysqli_query($db, $sql); return $topics; } function find_topics_by_course_id_and_topic_id($course_id, $topic_id){ global $db; $sql = "SELECT * "; $sql .= "FROM topic "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "AND topic_id=" . $topic_id . " "; $sql .= "ORDER BY name ASC"; $topics = mysqli_query($db, $sql); return $topics; } function create_topic($form){ global $db; $sql = "INSERT INTO topic "; $sql .= "(name, course_id) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['course_id'] . "')"; $course = mysqli_query($db, $sql); return $course; } function delete_topic($id){ global $db; $sql = "DELETE FROM topic "; $sql .= "WHERE topic_id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function update_topic($form, $id){ global $db; $sql = "UPDATE topic "; $sql .= "SET name='" . $form['name'] . "' "; $sql .= "WHERE topic_id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_videos_by_topic_id($topic_id){ global $db; $sql = "SELECT * "; $sql .= "FROM videos "; $sql .= "WHERE topic_id=" . $topic_id . " "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function find_videos_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM videos "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function create_video($form){ global $db; $sql = "INSERT INTO videos "; $sql .= "(name, title, thumbnail, topic_id, course_id) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['title'] . "', "; $sql .= "'" . $form['thumbnail'] . "', "; $sql .= "'" . $form['topic_id'] . "', "; $sql .= "'" . $form['course_id'] . "')"; $video = mysqli_query($db, $sql); return $video; } function count_table_entries($table_name){ global $db; $sql = "SELECT COUNT(*) as total FROM " . $table_name; $video = mysqli_query($db, $sql); $data = mysqli_fetch_assoc($video); return $data['total']; } function find_video_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM videos "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY title ASC"; $video = mysqli_query($db, $sql); return $video; } function delete_video($id){ global $db; $sql = "DELETE FROM videos "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function find_videos_by_topic_id_except($topic_id, $vid_id){ global $db; $sql = "SELECT * "; $sql .= "FROM videos "; $sql .= "WHERE topic_id=" . $topic_id . " "; $sql .= "AND id !=" . $vid_id . " "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function find_activities_by_topic_id($topic_id){ global $db; $sql = "SELECT * "; $sql .= "FROM activities "; $sql .= "WHERE topic_id=" . $topic_id . " "; $sql .= "ORDER BY title ASC"; $activities = mysqli_query($db, $sql); return $activities; } function create_activity($form){ global $db; $sql = "INSERT INTO activities "; $sql .= "(name, title, topic_id, course_id) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['title'] . "', "; $sql .= "'" . $form['topic_id'] . "', "; $sql .= "'" . $form['course_id'] . "')"; $activity = mysqli_query($db, $sql); return $activity; } function find_activity_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM activities "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY title ASC"; $video = mysqli_query($db, $sql); return $video; } function delete_activity($id){ global $db; $sql = "DELETE FROM activities "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function find_activities_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM activities "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function find_resources_by_topic_id($topic_id){ global $db; $sql = "SELECT * "; $sql .= "FROM resources "; $sql .= "WHERE topic_id=" . $topic_id . " "; $sql .= "ORDER BY title ASC"; $resources = mysqli_query($db, $sql); return $resources; } function create_resource($form){ global $db; $sql = "INSERT INTO resources "; $sql .= "(name, title, topic_id, course_id) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['title'] . "', "; $sql .= "'" . $form['topic_id'] . "', "; $sql .= "'" . $form['course_id'] . "')"; $resources = mysqli_query($db, $sql); if ($resources) { return "Success"; } else { return mysqli_error($db); } } function find_resource_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM resources "; $sql .= "WHERE id=" . $id . " "; $sql .= "ORDER BY title ASC"; $resources = mysqli_query($db, $sql); return $resources; } function delete_resource($id){ global $db; $sql = "DELETE FROM resources "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function find_resources_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM resources "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "ORDER BY title ASC"; $resources = mysqli_query($db, $sql); return $resources; } function find_unaproved_comment(){ global $db; $sql = "SELECT * "; $sql .= "FROM guest_book "; $sql .= "WHERE visible=0 "; $sql .= "ORDER BY id DESC"; $inquiry = mysqli_query($db, $sql); return $inquiry; } function find_aproved_comment(){ global $db; $sql = "SELECT * "; $sql .= "FROM guest_book "; $sql .= "WHERE visible=1 "; $sql .= "ORDER BY id DESC"; $inquiry = mysqli_query($db, $sql); return $inquiry; } function allow_comment($id){ global $db; $sql = "UPDATE guest_book "; $sql .= "SET visible='1' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function delete_comment($id){ global $db; $sql = "DELETE FROM guest_book "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function add_comment($form){ global $db; $sql = "INSERT INTO guest_book "; $sql .= "(name, visible, content, date) "; $sql .= "VALUES ('" . $form['name'] . "', "; $sql .= "'" . $form['visible'] . "', "; $sql .= "'" . $form['content'] . "', "; $sql .= "'" . $form['date'] . "')"; $add_comment = mysqli_query($db, $sql); return $add_comment; } function update_vid_trial($form, $id){ global $db; $sql = "UPDATE videos "; $sql .= "SET trial='" . $form['trial'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function update_resource_trial($form, $id){ global $db; $sql = "UPDATE resources "; $sql .= "SET trial='" . $form['trial'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function update_activity_trial($form, $id){ global $db; $sql = "UPDATE activities "; $sql .= "SET trial='" . $form['trial'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function find_public_access_passwords(){ global $db; $sql = "SELECT * "; $sql .= "FROM website_login"; $password = mysqli_query($db, $sql); return $password; } function create_pap($form){ global $db; $sql = "INSERT INTO website_login "; $sql .= "(hashed_password) "; $sql .= "VALUES ('" . $form['hashed_pass'] . "')"; $create_pap = mysqli_query($db, $sql); return $create_pap; } function find_pap_by_id($id){ global $db; $sql = "SELECT * "; $sql .= "FROM website_login "; $sql .= "WHERE id=" . $id; $pap = mysqli_query($db, $sql); return $pap; } function update_pap($form, $id){ global $db; $sql = "UPDATE website_login "; $sql .= "SET hashed_password='" . $form['hashed_pass'] . "' "; $sql .= "WHERE id='" . $id . "'"; $update = mysqli_query($db, $sql); return $update; } function delete_pap($id){ global $db; $sql = "DELETE FROM website_login "; $sql .= "WHERE id='" . $id . "' "; $sql .= "LIMIT 1"; $delete = mysqli_query($db, $sql); return $delete; } function find_trial_videos_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM videos "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "AND trial=1 "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function find_trial_resources_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM resources "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "AND trial=1 "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } function find_trial_activities_by_course_id($course_id){ global $db; $sql = "SELECT * "; $sql .= "FROM activities "; $sql .= "WHERE course_id=" . $course_id . " "; $sql .= "AND trial=1 "; $sql .= "ORDER BY title ASC"; $videos = mysqli_query($db, $sql); return $videos; } /** * Created by PhpStorm. * User: SRK & MAG * Date: 17-Mar-18 * Time: 11:42 PM */