YMS/webgui/tag.php

<?php
/******************************************************************************
 * YMS - Yacht Management Software
 * Copyright (C) 2024 Thomas Hooge
 * 
 * SPDX-License-Identifier: WTFPL
 ******************************************************************************/

require 'globals.inc';
$pagetitle = _('Tags');

$id = gpc_get_int($_REQUEST, 'id', 0);

// ========== ACTIONS START ===================================================

switch ($submit = form_get_action()) {

    case NULL: break;

    case 'add':    $action = ACT_ADD; break;
    case 'view':   $action = ACT_VIEW; break;
    case 'edit':   $action = ACT_EDIT; break;
    case 'del':    $action = ACT_DELETE; break;

    case 'filter':
        $flt = array();
        $flt['txt'] = gpc_get_string($_POST, 'flt_txt');
        db_save_filter($flt, 210);
        $action = ACT_DEFAULT;
        break;

    case 'insert':
        $p[':tagname'] =  gpc_get_string($_POST, 'tagname');;
        $id = db_exec_insert('tag', $p);
        $action = ACT_VIEW;
        break;

    case 'update':
        $p[':tagid'] = $id;
        $p[':tagname'] = gpc_get_string($_POST, 'tagname');
        $p[':color'] = gpc_get_string($_POST, 'color');
        $p[':description'] = gpc_get_string($_POST, 'description');
        db_exec_update('tag', $p, 'tagid');
        $action = ACT_VIEW;
        break;

    case 'delete':
        // Security token needed!
        if (gpc_get_string($_POST, 'token', 16) != $_SESSION['token']) {
            $g_error->Add(_('Delete prohibited, invalid security token!'));
            $action = ACT_VIEW;
            break;
        }
        // tagref have to be empty
        // TODO
        $action = ACT_DEFAULT;
        break;


    default:
        $g_error->Add(sprintf(_('Unknown function!'), $submit));
        $valid = FALSE;

}

// ========== ACTIONS END =====================================================

require 'header.php';

// ========== PAGE CONTENT ====================================================

if ($action == ACT_DEFAULT):
// ========== VARIANT: default behavior =======================================

// load filter from db
$flt = db_get_filter($user->id, 210);

echo "<h1>$pagetitle</h1>\n";

// Filter
?>
<form method="post" action="<?=$g_scriptname?>">
<div id="filter" class="card">
<div class="card-header">Filter</div>
<div class="card-body">

<label for="flt_txt">Text</label>
<input type="text" name="flt_txt" size="15" maxlength="30" value="<?=$flt->txt?>">
<button name="submit[filter]" class="btn btn-sm btn-primary" title="<?=_('Apply')?>"><?=_('Go')?></button>
</div>
</div>
</form>
<?php

$sql = "SELECT tagid, tagname, color, description "
     . "FROM tag "
     . "ORDER BY tagname";
$sth = $pdo->query($sql);
$res = $sth->fetchAll();
echo '<table class="table table-striped">', "\n";
echo "<thead>\n";
echo "<tr>\n";
echo '<th>', _('Tag'),  "</th>";
echo '<th>', _('Description'), "</th>";
echo '<th>', _('Color'), "</th>";
echo "<th></th>";
echo "</tr>\n";
echo "</thead>\n";
foreach ($res as $row) {
    echo "<tr>\n";
    echo "<td>", $row['tagname'], "</td>\n";
    echo "<td>", $row['description'], "</td>\n";
    echo "<td>", $row['color'], "</td>\n";
    echo "<td>";
    // Action buttons
    form_action_buttons($g_scriptname, $row['tagid']);
    echo "</td>\n";
    echo "</tr>\n";
}
// Table summary
echo "<tfoot>\n";
echo '<tr><td colspan="6">', sprintf(_('%d records'), count($res)), '</td></tr>', "\n";
echo "</tfoot>\n";
echo "</table>\n";

form_add_button($g_scriptname);

elseif ($action == ACT_ADD):
// ========== VARIANT: add record =============================================

echo '<h2>', _('Add Tag'), "</h2>\n";

?>
<form method="post" action="<?=$g_scriptname?>">
<div class="mb-3">
  <label for="tagname" class="form-label"><?=_('Name')?></label>
  <input type="text" class="form-control" id="tagname" name="tagname" required autofocus>
</div>
<div class="mb-3">
  <label for="note" class="form-label"><?=_('Description')?></label>
  <input type="text" class="form-control" id="description" name="description">
</div>
<?php
form_new_buttons($g_scriptname);
echo "</form>\n";

elseif ($action == ACT_VIEW):
// ========== VARIANT: view single record =====================================

elseif ($action == ACT_EDIT):
// ========== VARIANT: edit single record =====================================

$sql = "SELECT tagname, description, color "
     . "FROM tag "
     . "WHERE tagid=?";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
$tag = $sth->fetch(PDO::FETCH_OBJ);

echo '<h2>', _('Edit tag'), "</h2>\n";
?>
<form method="post" action="<?=$g_scriptname?>">
<input type="hidden" name="id" value="<?=$id?>">
<div class="mb-3">
  <label for="mname" class="form-label"><?=_('Tag')?></label>
  <input type="text" class="form-control" id="tagname" name="tagname" value="<?=$tag->tagname ?>">
</div>
<div class="mb-3">
  <label for="note" class="form-label"><?=_('Description')?></label>
  <input type="text" class="form-control" id="description" name="description" value="<?=$tag->description ?>">
</div>
<div class="mb-3">
  <label for="color" class="form-label"><?=_('Color')?></label>
  <input type="color" name="color" id="color" class="form-control" value="#<?=$tag->color ?>">
</div>
<?php

form_edit_buttons($g_scriptname, $id);
echo "</form>\n";

elseif ($action == ACT_DELETE):
// ========== VARIANT: delete record ==========================================

else:
// ========== ERROR UNKNOWN VARIANT ===========================================

echo '<p>', _('Unknown function call: Please report to system development!'), "</p>\n";

endif; // $action == ...
// ========== END OF VARIANTS =================================================

include 'footer.php';