<?php
// edit.robot.php


// modified copy of password.fetch.php
$mesg="";

// look at:    


/* ====== index of this page ======= 

database column headers

code top
dbase query
rename query

sql examples

sample2

====== index of this page ======= */


/*
==== database column headers ==== start

robot robot
id admin user name type access online ip

robot user
uid username password email favorites

users user
id username password email

==== database column headers ==== end
*/


/*
==== sql examples that work =====


=== changing a column in a record ==
UPDATE `hejni_users`.`user` SET `username` = 'goober' WHERE `user`.`id` = 665748392;

UPDATE `hejni_users`.`user` SET `username` = 'tralphaz' WHERE `user`.`id` = 345842150;


UPDATE `hejni_robot`.`robot` SET `access` = '34et27' WHERE `robot`.`id` = 76432198;


UPDATE `hejni_robot`.`robot` SET `admin` = '31415926' WHERE `robot`.`uid` = 123456789;

UPDATE `hejni_robot`.`robot` SET `name` = 'robie' WHERE `robot`.`admin` = 31415926;


UPDATE `hejni_robot`.`robot` SET `location` = 'mars' WHERE `robot`.`id` = 12054978, UPDATE `hejni_robot`.`robot` SET `description` = 'a scientific exploration robot' WHERE `robot`.`id` = 12054978;


=== creating a new record ==

INSERT INTO `hejni_robot`.`robot` (`id`, `admin`, `user`, `name`, `description`, `location`, `type`, `access`, `online`, `ip`) VALUES ('776432198', '123456789', '12345678', 'Mt Cuba reflector 27a', 'Mount Cuba 12 inch reflector telescope', 'Delaware', 'Telescope', '123456789', 'Yes', '123.90.78.126');


=== deleting a record ==

DELETE FROM `hejni_robot`.`user` WHERE `user`.`uid` = 44563447;
*/


/*
==== sql examples in strings  ===== don't work


$sql="SELECT *  FROM `user` WHERE `username` LIKE 'Brian';


$sql = "UPDATE `hejni_robot`.`robot` SET `access` = \'34et27\' WHERE `robot`.`admin` = 123456789;";


$sql = "UPDATE `hejni_robot`.`user` SET `password` = \'31415926\' WHERE `user`.`uid` = 123456789;";


$sql = "INSERT INTO `hejni_robot`.`robot` (`id`, `admin`, `user`, `name`, `description`, `location`, `type`, `access`, `online`, `ip`) VALUES (\'776432198\', \'123456789\', \'12345678\', \'Mt Cuba reflector 27a\', \'Mount Cuba 12 inch reflector telescope\', \'Delaware\', \'Telescope\', \'123456789\', \'Yes\', \'123.90.78.126\');";

*/


/*
=== this is the one I want to do ===

$access = "1234"; // driver (input from form)

$sql = "UPDATE `hejni_robot`.`robot` SET `access` = '" . $access . "' WHERE `robot`.`admin` = " . $_session['username']";";


sample2

$form_id = $_REQUEST['id'];
$form_col = $_REQUEST['col'];
$form_value = $_REQUEST['value'];

$sql = "UPDATE `hejni_robot`.`robot` SET `" . $form_col . "` = '" . $form_value . "' WHERE `robot`.`id` = " . $form_id . ";";

*/


/* ==== code top ==== */


/* ==== session login section ==== */

// get username and password from form (id col value)

$changecol = $_REQUEST['changecol'];
$form_id = $_REQUEST['id'];
$form_col = $_REQUEST['col'];
$form_value = $_REQUEST['value'];

$mesg="[ ". $form_id . " : " . $form_col . " : " . $form_value . " ]";


// lookup username and password from user

		class database {
			public $host;
			public $user;
			public $pass;
			public $name;
			public $query;
		}
		$dbase = new database();
		$dbase->host="localhost";
		$dbase->user="hejni_root";
		$dbase->pass="polmideqwerty1234";
		$dbase->name="hejni_robot";

/* alternative database 
		$dbase->name="hejni_users";
*/


/* ============= dbase query ============= */

	//	$dbase->query="SELECT `admin`,`name`,`id` FROM `robot`;";


$sqlmesg=$rename;

if ($somethingonright) { // form_id changecol form_value

$rename = "UPDATE `robot` SET `" . $form_col . "` = '" . $form_value . "' WHERE `robot`.`id` = " . $form_id . ";";


	$dbase->query=$rename;

}else{


}


$lookup="SELECT * FROM `robot`;";

	$dbase->query=$lookup;

$sqlmesg=$lookup;


/* parameters (table/columns)
robot
id admin user name description location type access online ip

user
uid username password email favorites
*/
/* ============= dbase query ============= */


		function issue_query($config) {
			/* Create connection and store it in $con */
			$dbserver=$config->host;
			$dbuser=$config->user;
			$dbpass=$config->pass;
			$dbname=$config->name;
			$sql=$config->query;
			$time=$_SERVER['REQUEST_TIME'];
			echo "Time: " . $time . "<BR>";
			echo "dbuser: " . $dbuser . " dbname: " . $dbname . "<BR>";
			echo "Calling mysqli_connect <BR>";
			$con = new mysqli($dbserver, $dbuser, $dbpass);
			echo "Called mysqli_connect <BR>";
			if ($con->connect_errno) {
				die("Connection error: " . $con->connect_errno ." ". $con->connect_error);
			}
			echo "Successfully called mysqli_connect <BR>";
	
			/* Select known database "mysql" */
			if (!$con->select_db($dbname)) {
				die("Selection error: " . $con->error);
			}
			echo "Successfully called mysqli_select_db <br>";
			

/* ============= rename query ============= */

// UPDATE `hejni_robot`.`robot` SET
// UPDATE `robot` SET

$rename = "UPDATE `robot` SET `" . $form_col . "` = '" . $form_value . "' WHERE `robot`.`id` = " . $form_id . ";";

$sqlmesg=$rename;

if ($form_id) { // form_id changecol

   $dbase->query = $rename;
   issue_query($config);

   $mesg="changed";
}


/* == code I tried above ==


   issue_query($dbase);

			$colchange=$con->query($rename);
			if (!$res) {
				die ("Error issuing query" . $con->error());
			}
			return $colchange;
		}

*/


// issue_query($config);  mysqli_query($rename);
// $dbase $config
/* ============= rename query ============= */


			/* Issue query on Database using user table - Store in result */
			$res=$con->query($sql);
			if (!$res) {
				die ("Error issuing query" . $con->error());
			}
    $sqlmesg=$sql;
			return $res;
		}

		$result = issue_query($dbase);
/*

*/


?>
<table cellpadding=2 cellspacing=1 
align="center" width=50% border=1>
<tr bgcolor="#eeeeca"><td colspan="10" align="left"><b>Robots:</b></td></tr>

<tr>
<td>id</td>
<td>admin</td>
<td>user</td>
<td>name</td>
<td>description</td>
<td>location</td>
<td>type</td>
<td>access</td>
<td>online</td>
<td>ip</td>
</tr>
<?php 
$logged = "no";

		while ($row = $result->fetch_assoc()) {
			foreach ($row as $value)

$id = array_values($row)[0];
$admin = array_values($row)[1];
$user = array_values($row)[2];
$name = array_values($row)[3];
$description = array_values($row)[4];
$location = array_values($row)[5];
$type = array_values($row)[6];
$access = array_values($row)[7];
$online = array_values($row)[8];
$ip = array_values($row)[9];


// after it works....change to: 
//         $admin==$_SESSION['username']

if ($form_id==$id && $admin==$admin) {
// 
session_start();

$timeout=(3600 * 24 * 365);
session.cookie_lifetime[$timeout];
session.gc_maxlifetime[$timeout];


$_session['returnpage'] = "edit.robot.php";

// this is where sample2 goes 
// _REQUEST _GET


// issue_query($sql);


$_SESSION['username']=$rowuser;
$_SESSION['password']=$rowpass;
$_SESSION['id']=$id;

$_SESSION['ip']=$_SERVER['HTTP_X_FORWARDED_FOR'];

$_session['message']="Hello from edit.robot.php page.";


/* ==== session login section ==== */

$arrow="<===";
$logged = "yes";
$bgc = "#eeeeaa";
$bgc = "#bbeedd";
}else{
$arrow="";
$bgc = "#ffffff";
}


/* ==== echo table rows ====  old
<td><?php echo $id; ?></td>
<td><?php echo $rowuser; ?></td>
<td><?php echo $rowpass; ?></td>
<td><?php echo $arrow; ?></td>
*/

?>
<tr bgcolor="<?php echo $bgc; ?>" >
<td><?php echo $id; ?></td>
<td><?php echo $admin; ?></td>
<td><?php echo $user; ?></td>
<td><?php echo $name; ?></td>
<td><?php echo $description; ?></td>
<td><?php echo $location; ?></td>
<td><?php echo $type; ?></td>
<td><?php echo $access; ?></td>
<td><?php echo $online; ?></td>
<td><?php echo $ip; ?></td>
</tr>
<?php 

		}
 ?>
</table >
<?php 


/*


		$dbase->query="SHOW COLUMNS FROM `user`;";


*/

session_start();
if ($_SESSION['uid']) {


$file= "robot.edit.form.htm";
if (file_exists($file)) {
include $file;
}


}else{


?>
<?php
}

	?>


<center><br><?php
echo "<br>session uid " . $_SESSION['uid'];
echo "<br>session username " . $_SESSION['username'];
echo "<br>session password " . $_SESSION['password'];

echo "<br>session id " . $_SESSION['id'];
echo "<br>session ip " . $_SESSION['ip'];
?><br>

<a href="edit.robot.php">edit.robot.php</a> --
<a href="robot.user.login.php">robot.user.login.php</a>
</center>


<!-- 

target="_new"


==== login form - will put on separate page ====
password.fetch.php
edit.robot.php 
-->


<br>
<center>
<a href="edit.robot.php">edit.robot.php</a> --
<a href="robot.user.login.php">robot.user.login.php</a>
</center>