conn = $db;
}
public function getPagesListing(){
if($_SESSION['user_type'] != 1) return;
$sqlQuery = "
SELECT id,link,title,content
FROM ".$this->pageTable. " ";
if(!empty($_POST["search"]["value"])){
$sqlQuery .= ' title LIKE "%'.$_POST["search"]["value"].'%" ';
$sqlQuery .= ' OR link LIKE "%'.$_POST["search"]["value"].'%" ';
$sqlQuery .= ' OR content LIKE "%'.$_POST["search"]["value"].'%" ';
}
if(!empty($_POST["order"])){
$sqlQuery .= 'ORDER BY '.$_POST['order']['0']['column'].' '.$_POST['order']['0']['dir'].' ';
} else {
$sqlQuery .= 'ORDER BY id DESC ';
}
if($_POST["length"] != -1){
$sqlQuery .= 'LIMIT ' . $_POST['start'] . ', ' . $_POST['length'];
}
$stmt = $this->conn->prepare($sqlQuery);
$stmt->execute();
$result = $stmt->fetchAll();
$stmtTotal = $this->conn->prepare("SELECT COUNT(*) as count; FROM ".$this->pageTable);
$stmtTotal->execute();
$allResult = $stmtTotal->fetch(PDO::FETCH_ASSOC);
$allRecords = $allResult['count'];
$displayRecords = count($result);
$posts = array();
foreach ($result as $post) {
$rows = array();
$rows[] = $post['link'];
$rows[] = $post['title'];
$rows[] = htmlspecialchars($post['content']);
$rows[] = '';
$rows[] = 'Edit';
$rows[] = '';
$posts[] = $rows;
}
$output = array(
"draw" => intval($_POST["draw"]),
"iTotalRecords" => $displayRecords,
"iTotalDisplayRecords" => $allRecords,
"data" => $posts
);
echo json_encode($output);
}
public function getPage(){
if($this->id) {
$sqlQuery = "
SELECT id,link,title,content
FROM ".$this->pageTable."
WHERE id = :id ";
$stmt = $this->conn->prepare($sqlQuery);
$stmt->bindParam("id", $this->id);
$stmt->execute();
$result = $stmt->fetch();
$post = $result;
return $post;
}
}
public function getPageByLink(){
if($this->link) {
$sqlQuery = "
SELECT id,link,title,content
FROM ".$this->pageTable."
WHERE link = :link ";
$stmt = $this->conn->prepare($sqlQuery);
$stmt->bindParam("link", $this->link);
$stmt->execute();
$result = $stmt->fetch();
$post = $result;
return $post;
}
}
public function insert(){
if($_SESSION['user_type'] != 1) return;
if($this->link && $this->title && $this->content) {
$stmt = $this->conn->prepare("
INSERT INTO ".$this->pageTable."(`title`, `link`, `content`)
VALUES(:t, :l, :c)");
$this->title = htmlspecialchars(strip_tags($this->title));
$this->link = htmlspecialchars(strip_tags($this->link));
$stmt->bindParam("t", $this->title);
$stmt->bindParam("l", $this->link);
$stmt->bindParam("c", $this->content);
if($stmt->execute()){
return $this->conn->lastInsertId();
}
}
}
public function update(){
if($_SESSION['user_type'] != 1) return;
if($this->id) {
$stmt = $this->conn->prepare("
UPDATE ".$this->pageTable."
SET `link` = :link, `title` = :title, `content` = :cntnt
WHERE id = :id");
$this->link = htmlspecialchars(strip_tags($this->link));
$this->title = htmlspecialchars(strip_tags($this->title));
//$this->content = htmlspecialchars(strip_tags($this->content));
$this->id = htmlspecialchars(strip_tags($this->id));
$stmt->bindParam("link", $this->link);
$stmt->bindParam("title", $this->title);
$stmt->bindParam("cntnt",$this->content);
$stmt->bindParam("id", $this->id);
if($stmt->execute()){
return true;
}
}
}
public function delete(){
if($_SESSION['user_type'] != 1) return;
if($this->id) {
$stmt = $this->conn->prepare("
DELETE FROM ".$this->pageTable."
WHERE id = :id;");
$this->id = htmlspecialchars(strip_tags($this->id));
$stmt->bindParam(":id", $this->id);
if($stmt->execute()){
return true;
}
}
}
public function getPosts(){
$sqlQuery = "
SELECT id, title, link, content
FROM ".$this->pageTable;
$stmt = $this->conn->prepare($sqlQuery);
$stmt->execute();
$result = $stmt->fetchAll();
return $result;
}
public function addToMenu(){
if($_SESSION['user_type'] != 1) return;
if($this->id) {
$maxQuery = $this->conn->prepare("SELECT MAX(`order`) as max FROM ".$this->menuTable."");
$maxQuery->execute();
$maxResult = $maxQuery->fetch(PDO::FETCH_ASSOC);
$max = ($maxResult['max'] * 1) + 1;
$dataQuery = $this->conn->prepare("SELECT title,link FROM ".$this->pageTable." WHERE id = :id");
$dataQuery->bindParam("id", $this->id);
$dataQuery->execute();
$dataResult = $dataQuery->fetch(PDO::FETCH_ASSOC);
$stmt = $this->conn->prepare("
INSERT INTO ".$this->menuTable."(`title`,`link`,`order`)
VALUES(:s1,:s2,:s3)");
$this->title = htmlspecialchars(strip_tags($dataResult['title']));
$this->link = "./page.php?link=" . $dataResult['link'];
$stmt->bindParam("s1", $this->title);
$stmt->bindParam("s2", $this->link);
$stmt->bindParam("s3", $max);
if($stmt->execute()){
return $this->conn->lastInsertId();
}
}
}
}
?>