Merge pull request #44 from ThomasRubini/manageuser

Controllers/ManageUserController.php

@@ -0,0 +1,40 @@
+<?php
+
+final class ManageUserController
+{
+
+    public function defaultAction(Array $A_urlParams = null, Array $A_postParams = null, Array $A_getParams = null)
+    {
+        self::searchAction($A_urlParams, $A_postParams, $A_getParams);
+    }
+
+    public function searchAction(Array $A_urlParams = null, Array $A_postParams = null, Array $A_getParams = null)
+    {
+        Session::admin_or_die();
+        if (isset($A_getParams["query"])) {
+            self::searchQueryViewAction($A_urlParams, $A_postParams, $A_getParams);
+        } else {
+            self::searchViewAction($A_urlParams, $A_postParams, $A_getParams);
+        }
+    }
+    
+    private function searchViewAction(Array $A_urlParams = null, Array $A_postParams = null, Array $A_getParams = null)
+    {
+        View::show("manageUser/search");
+    }
+    
+    private function searchQueryViewAction(Array $A_urlParams = null, Array $A_postParams = null, Array $A_getParams = null)
+    {
+        $S_query = $A_getParams["query"];
+        
+        $O_userModel = new UserModel();
+        $A_results = $O_userModel->searchUsers($S_query);
+        
+        var_dump($A_results);
+        
+        echo "Terme de recherche choisi: $S_query";
+
+        View::show("manageUser/search");
+    }
+
+}

Kernel/Session.php

@@ -64,4 +64,15 @@ final class Session
             die();
         }
     }
+
+    public static function admin_or_die(){
+        Session::login_or_die();
+
+        $O_userModel = new UserModel();
+        if (!$O_userModel->isUserAdmin($_SESSION["ID"])) {
+            header("Location: /");
+            die();
+        }
+    }
+
 }

Models/UserModel.php

@@ -70,6 +70,18 @@ final class UserModel
         return $row["DISABLED"] !== 1;
     }
 
+    public function isUserAdmin($I_id)
+    {
+        $O_model = Model::get();
+        $stmt = $O_model->prepare("SELECT ADMIN FROM USER WHERE ID=:id");
+        $stmt->bindParam("id", $I_id);
+        $stmt->execute();
+        
+        $row = $stmt->fetch();
+        if ($row === false) return false;
+        return $row["ADMIN"] === 1;
+    }
+    
     public function updateEmailByID($I_id, $S_newEmail){
         $O_model = Model::get();
         $stmt = $O_model->prepare("UPDATE USER SET EMAIL=:new_email WHERE ID=:id");
@@ -92,4 +104,22 @@ final class UserModel
         $stmt->bindParam("id", $I_id);
         $stmt->execute();
     }
+
+    public function searchUsers($S_query)
+    {
+        $O_model = Model::get();
+        $stmt = $O_model->prepare("
+        SELECT * FROM USER
+        WHERE USER.USERNAME LIKE :full_query
+        OR USER.EMAIL LIKE :full_query
+        LIMIT 10
+        ");
+        $S_full_query = "%".$S_query."%";
+        $stmt->bindParam("full_query", $S_full_query);
+        $stmt->execute();
+        
+        $rows = $stmt->fetchAll();
+        
+        return $rows;
+    }
 }

Views/manageUser/search.php

@@ -0,0 +1,7 @@
+<p> Default view </p>
+
+<p> Please search : </p>
+<form action="/manageUser/search" method="GET">
+    <input name="query">
+    <input type="submit" value="Chercher">
+</form>