source: extensions/MyPiwiShop/admin/product.php @ 27743

<?php
defined('MPS_PATH') or die('Hacking attempt!');


  if(isset($_POST['check'])){
   foreach($_POST['check'] AS $delete_id){
   
   $query='DELETE FROM '.MPS_PRODUCT_TABLE.' 
   WHERE id = '.$delete_id.';';
   pwg_query($query);
   $page['infos']=l10n('deleted');
   
   $query='DELETE FROM '.MPS_PROD_OPT_TABLE.' 
   WHERE product_id = '.$delete_id.';';
   pwg_query($query);
   

   }
   }   

if(isset($_POST['product_add']))
{
if(!empty($_POST['id']))
        {
        $id             = $_POST['id'];
        $product        = $_POST['product'];
        $noteAdmin      = $_POST['noteAdmin'];
        $price          = $_POST['price'];

        $query='UPDATE '.MPS_PRODUCT_TABLE.' 
        SET product = \''.$product.'\',noteAdmin = \''.$noteAdmin.'\',price=\''.$price.'\'
        WHERE id = '.$id.';';
   pwg_query($query);
   
    $query = 'DELETE FROM '.MPS_PROD_OPT_TABLE.' WHERE product_id IN ('.$id.');';
        pwg_query($query);
        
        if(isset($_POST['opt']))
    {
        $opt            = $_POST['opt'];
    $inserts    = array();
    foreach ($opt as $opt_id)
    {
      $inserts[] = array(
          'opt_id'         => $opt_id,
          'product_id' => $id,
        );
    }
    mass_inserts(
    MPS_PROD_OPT_TABLE,
    array_keys($inserts[0]),
    $inserts
    );
   }

   $page['infos']=l10n('Edit');
  }
  

if (empty($_POST['id'])and isset($_POST['product'])and isset($_POST['price'])and is_numeric($_POST['price'])) 
        {
        $order = array();
        $query ='SELECT * FROM '.MPS_PRODUCT_TABLE.';';
        $result = pwg_query($query);
        while($row = pwg_db_fetch_assoc($result)){
        $order[] = $row['order'];
        }
        if (count($order) == 0) {
        $order = 1;
        }else{
        $order = max($order)+1;
        }
        
        $product        = $_POST['product'];
        $noteAdmin      = $_POST['noteAdmin'];
        $price          = $_POST['price'];

        
   $query='INSERT into '.MPS_PRODUCT_TABLE.' (`order`,`product`,`noteAdmin`,`price`) 
                        values (\''.$order.'\',\''.$product.'\',\''.$noteAdmin.'\',\''.$price.'\');';
   $result=pwg_query($query);
        $prod = pwg_db_insert_id();
   
   if(isset($_POST['opt']))
   {
        $opt = $_POST['opt'];
    $inserts = array();
    foreach ($opt as $opt_id)
    {
      $inserts[] = array(
          'opt_id' => $opt_id,
          'product_id' => $prod,
        );
    }
    mass_inserts(
    MPS_PROD_OPT_TABLE,
    array_keys($inserts[0]),
    $inserts
    );
   }
        $page['infos']=l10n('Product registered');
  }
}

if(isset($_POST['newOrder']))
        {
        $newOrder = explode(",", $_POST['newOrder']);
        $ex = array_pop($newOrder);
        
        foreach( $newOrder as $order => $id )
        {
        $order = $order +1;

      $query='UPDATE '.MPS_PRODUCT_TABLE.' SET `order` = \''.$order.'\' WHERE id = '.$id.';';
        $result = pwg_query($query);
    
    $page['infos']=l10n('the order is changed');

    }
}

  $select_type_opt=array(
  'select'   =>'select',
  'radio'    =>'radio',
  'text'     =>'text',
  'textarea' =>'textarea',
  'checkbox' =>'checkbox',
  );
  
if (isset($_POST['option_add']))
{
        $order = array();
        $query ='SELECT * FROM '.MPS_OPTION_TABLE.';';
        $result = pwg_query($query);
        while($row = pwg_db_fetch_assoc($result)){
        $order[] = $row['order'];
        }
        
        if (count($order) == 0) {
        $order = 1;
        }else{
        $order = max($order)+1;
        }

        $name           = $_POST['name'];
    $type               = $_POST['type'];
    $title              = $_POST['title'];
        
        if(isset($_POST['requi'])){
         $requi = $_POST['requi'];
         }else{
         $requi = 0;
         }
        
        
        $query='INSERT into '.MPS_OPTION_TABLE.' (`name`,`type`,`titre`,`requi`,`order`) 
                        values (\''.$name.'\',\''.$type.'\',\''.$title.'\',\''.$requi.'\',\''.$order.'\');';
   
        pwg_query($query);              
        $select_id = pwg_db_insert_id();                        
                        
        if(isset($_POST['val'])){
        $val = $_POST['val'];
     foreach($val as $val_ele)
      {
          $query='INSERT into '.MPS_OPT_VAL_TABLE.' (val,select_id) 
                        values (\''.$val_ele.'\',\''.$select_id.'\');';
          pwg_query($query);
     }
        }
        
         echo('<div><div id="idlastopt" data-idlo="'.$select_id.'"></div></div>');
        
}
  
 $query='SELECT * FROM '.MPS_PRODUCT_TABLE.' ORDER BY `order`;';
  $result = pwg_query($query);
  $products = array();
  while($row = pwg_db_fetch_assoc($result)){
        $query='
        SELECT *
        FROM '.MPS_PROD_OPT_TABLE.' AS op
        JOIN '.MPS_OPTION_TABLE.' AS p ON p.id = op.opt_id
        WHERE product_id = '.$row['id'].'
        ;';
        $res = pwg_query($query);
        $opt = array();
        while($row1 = pwg_db_fetch_assoc($res)){
    $opt[] = $row1['name'];
        }
        $row['option'] = $opt ;
        $products[$row['id']]=$row;
  }
  

  $query='SELECT * FROM '.MPS_OPTION_TABLE.' ;';
  $result = pwg_query($query);
  $option = array();
  while($row = pwg_db_fetch_assoc($result)){
   $option[$row['id']] = $row['name'];
  }

$template->assign(array(
  'mps_product' => $products,
  'mps_option'  => $option,
  'mps_type_opt'                => $select_type_opt,
  ));
$template->set_filename('mps_content', realpath(MPS_PATH . 'admin/template/product.tpl'));