Astein/admin_delete_offer.php at master · aaronblanco/Astein · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
<?php
require 'seguridadEmpleado.php'; // Acceso para el admin y los empleados
require 'connection.php';
require 'log_funcion.php';

header('Content-type: text/plain; charset=utf-8');

$id = strip_tags($_GET['id']);

// Look for all reservas where offer.id is this offer
if ($getReservas = $connection->prepare("SELECT id as id_reserva, id_offer FROM reservation WHERE id_offer=? ")) {
  $getReservas->bind_param("i", $id);
  $getReservas->execute();
  $result = $getReservas->get_result();
} else {
  printf("Error: %s\n", $connection->error . $getReservas);
}

if($result and mysqli_num_rows($result) > 0 ) {

  echo "constraints";

  while($row = $result->fetch_assoc()) {
    $reserva_id = $row["id_reserva"];
    echo "$reserva_id";

    // Delete reserva
    $deleteReserva = $connection->prepare("DELETE FROM reservation WHERE ID = ?");
    $deleteReserva->bind_param("i", $reserva_id);
    $deleteReserva->execute();
    $deleteReserva->close();
    write_log("IP: ".$_SERVER['REMOTE_ADDR']." - ".$_SERVER['HTTP_X_FORWARDED_FOR'].
                                 "\nHTTP_HOST: ".$_SERVER['HTTP_HOST']."\nHTTP_REFERER:
                                 ".$_SERVER['HTTP_REFERER']."\nHTTP_USER_AGENT: ".
                                 $_SERVER['HTTP_USER_AGENT']."\nREMOTE_HOST: ".
                                 $_SERVER['REMOTE_HOST']."\nREQUEST_URI: ".
                                 $_SERVER['REQUEST_URI']. "\nReserva con ID $id eliminada","INFO");
    echo "deleted";
  }

}

// Look for all photo_inicios where offer.id is this offer
if ($getReservas = $connection->prepare("SELECT id as id_photo, id_offer FROM photoinicio WHERE id_offer=? ")) {
  $getReservas->bind_param("i", $id);
  $getReservas->execute();
  $resultPhoto = $getReservas->get_result();
} else {
  printf("Error: %s\n", $connection->error . $getReservas);
}

if($resultPhoto and mysqli_num_rows($resultPhoto) > 0 ) {

  echo "constraints";

  while($row = $resultPhoto->fetch_assoc()) {
    $id_photo = $row["id_photo"];
    echo "$id_photo";

    // Delete reserva
    $deletePhoto = $connection->prepare("UPDATE photoinicio SET id_offer=NULL WHERE ID = ?");
    $deletePhoto->bind_param("i", $id_photo);
    $deletePhoto->execute();
    $deletePhoto->close();
    echo "deleted";
    write_log("IP: ".$_SERVER['REMOTE_ADDR']." - ".$_SERVER['HTTP_X_FORWARDED_FOR'].
                                 "\nHTTP_HOST: ".$_SERVER['HTTP_HOST']."\nHTTP_REFERER:
                                 ".$_SERVER['HTTP_REFERER']."\nHTTP_USER_AGENT: ".
                                 $_SERVER['HTTP_USER_AGENT']."\nREMOTE_HOST: ".
                                 $_SERVER['REMOTE_HOST']."\nREQUEST_URI: ".
                                 $_SERVER['REQUEST_URI']. "\nFoto inicio con ID $id eliminada","INFO");
  }

}

// Now, the offer can be deleted
if ($deleteOffer = $connection->prepare("DELETE FROM offer WHERE ID = ?")) {
  $deleteOffer->bind_param("i", $id);
  $deleteOffer->execute();
  $deleteOffer->close();
  write_log("IP: ".$_SERVER['REMOTE_ADDR']." - ".$_SERVER['HTTP_X_FORWARDED_FOR'].
                               "\nHTTP_HOST: ".$_SERVER['HTTP_HOST']."\nHTTP_REFERER:
                               ".$_SERVER['HTTP_REFERER']."\nHTTP_USER_AGENT: ".
                               $_SERVER['HTTP_USER_AGENT']."\nREMOTE_HOST: ".
                               $_SERVER['REMOTE_HOST']."\nREQUEST_URI: ".
                               $_SERVER['REQUEST_URI']. "\nOferta con ID $id eliminada","INFO");
  echo "offer deleted";
} else {
  printf("Error: %s\n", $connection->error . $deleteOffer);
  write_log("IP: ".$_SERVER['REMOTE_ADDR']." - ".$_SERVER['HTTP_X_FORWARDED_FOR'].
                               "\nHTTP_HOST: ".$_SERVER['HTTP_HOST']."\nHTTP_REFERER:
                               ".$_SERVER['HTTP_REFERER']."\nHTTP_USER_AGENT: ".
                               $_SERVER['HTTP_USER_AGENT']."\nREMOTE_HOST: ".
                               $_SERVER['REMOTE_HOST']."\nREQUEST_URI: ".
                               $_SERVER['REQUEST_URI']. "\nError en eliminar oferta con ID $id.","ERROR");
}

$_SESSION["message-success"] = "Oferta borrada.";
header("Location: admin_ofertas.php");

?>