conn = $db;
}
public function login(){
if($this->nick && $this->password) {
$hash = crypt($this->password,self::SALT);
$sqlQuery = "
SELECT * FROM ".$this->userTable."
WHERE nick = :nick AND password = :pass";
$stmt = $this->conn->prepare($sqlQuery);
$stmt->bindParam("nick", $this->nick, );
$stmt->bindParam("pass", $hash);
$stmt->execute();
$result = $stmt->fetch(PDO::FETCH_ASSOC);
if($result){
$user = $result;
$_SESSION["userid"] = $user['id'];
$_SESSION["user_type"] = $user['type'];
$_SESSION["name"] = $user['first_name']." ".$user['last_name'];
return 1;
} else {
return 0;
}
} else {
return 0;
}
}
public function loggedIn (){
if(!empty($_SESSION["userid"])) {
return 1;
} else {
return 0;
}
}
public function totalUser(){
$sqlQuery = "SELECT COUNT(*) as count FROM ".$this->userTable;
$stmt = $this->conn->prepare($sqlQuery);
$stmt->execute();
$result = $stmt->fetch(PDO::FETCH_ASSOC);
return $result['count'];
}
public function getUsersListing(){
$whereQuery = '';
if($_SESSION['user_type'] == 2) {
$whereQuery = "WHERE id ='".$_SESSION['userid']."'";
}
$sqlQuery = "
SELECT id, first_name, last_name, nick, type, deleted
FROM ".$this->userTable."
$whereQuery ";
if(!empty($_POST["search"]["value"])){
$sqlQuery .= ' first_name LIKE "%'.$_POST["search"]["value"].'%" ';
$sqlQuery .= ' OR last_name LIKE "%'.$_POST["search"]["value"].'%" ';
$sqlQuery .= ' OR nick LIKE "%'.$_POST["search"]["value"].'%" ';
$sqlQuery .= ' OR type LIKE "%'.$_POST["search"]["value"].'%" ';
}
if(!empty($_POST["order"])){
$sqlQuery .= 'ORDER BY '.$_POST['order']['0']['column'].' '.$_POST['order']['0']['dir'].' ';
} else {
$sqlQuery .= 'ORDER BY id DESC ';
}
if($_POST["length"] != -1){
$sqlQuery .= 'LIMIT ' . $_POST['start'] . ', ' . $_POST['length'];
}
$stmt = $this->conn->prepare($sqlQuery);
$stmt->execute();
$result = $stmt->fetchAll();
$stmtTotal = $this->conn->prepare("SELECT COUNT(*) as count FROM ".$this->userTable);
$stmtTotal->execute();
$allResult = $stmtTotal->fetch(PDO::FETCH_ASSOC);
$allRecords = $allResult['count'];
$displayRecords = count($result);
$users = array();
foreach ($result as $user) {
$rows = array();
$status = '';
if($user['deleted']) {
$status = 'Inactive';
} else {
$status = 'Active';
}
$type = '';
if($user['type'] == 1){
$type = 'Admin';
} else if($user['type'] == 2){
$type = 'Author';
}
$rows[] = ucfirst($user['first_name'])." ".$user['last_name'];
$rows[] = $user['nick'];
$rows[] = $type;
$rows[] = $status;
$rows[] = 'Edit';
$rows[] = '';
$users[] = $rows;
}
$output = array(
"draw" => intval($_POST["draw"]),
"iTotalRecords" => $displayRecords,
"iTotalDisplayRecords" => $allRecords,
"data" => $users
);
echo json_encode($output);
}
public function getUser(){
if($this->id) {
$sqlQuery = "
SELECT id, first_name, last_name, nick, type, deleted
FROM ".$this->userTable."
WHERE id = :i ";
$stmt = $this->conn->prepare($sqlQuery);
$stmt->bindParam("i", $this->id);
$stmt->execute();
$user = $stmt->fetch(PDO::FETCH_ASSOC);
return $user;
}
}
public function insert(){
if($_SESSION['user_type'] != 1) return;
if($this->nick && $this->password) {
$stmt = $this->conn->prepare("
INSERT INTO ".$this->userTable."(`first_name`, `last_name`, `nick`, `password`, `type`, `deleted`)
VALUES(:f,:l,:e,:p,:t,:d)");
$this->first_name = htmlspecialchars(strip_tags($this->first_name));
$this->last_name = htmlspecialchars(strip_tags($this->last_name));
$this->nick = htmlspecialchars(strip_tags($this->nick));
$this->password = htmlspecialchars(strip_tags($this->password));
$this->type = htmlspecialchars(strip_tags($this->type));
$this->deleted = htmlspecialchars(strip_tags($this->deleted));
$stmt->bindParam("f", $this->first_name);
$stmt->bindParam("l", $this->last_name);
$stmt->bindParam("e", $this->nick);
$stmt->bindParam("p", crypt($this->password,self::SALT));
$stmt->bindParam("t", $this->type);
$stmt->bindParam("d", $this->deleted);
if($stmt->execute()){
return $this->conn->lastInsertId();
}
}
}
public function update(){
if($_SESSION['user_type'] != 1) return;
if($this->id) {
$stmt = $this->conn->prepare("
UPDATE ".$this->userTable."
SET first_name= :f, last_name = :l, nick = :e, type = :t, deleted= :d
WHERE id = :i");
$this->id = htmlspecialchars(strip_tags($this->id));
$this->first_name = htmlspecialchars(strip_tags($this->first_name));
$this->last_name = htmlspecialchars(strip_tags($this->last_name));
$this->nick = htmlspecialchars(strip_tags($this->nick));
$this->type = htmlspecialchars(strip_tags($this->type));
$this->deleted = htmlspecialchars(strip_tags($this->deleted));
$stmt->bindParam("f", $this->first_name);
$stmt->bindParam("l", $this->last_name);
$stmt->bindParam("e", $this->nick);
$stmt->bindParam("t", $this->type);
$stmt->bindParam("d", $this->deleted);
$stmt->bindParam("i", $this->id);
if($stmt->execute()){
return true;
}
}
}
public function delete(){
if($_SESSION['user_type'] != 1) return;
if($this->id) {
$stmt = $this->conn->prepare("
DELETE FROM ".$this->userTable."
WHERE id = :i");
$this->id = htmlspecialchars(strip_tags($this->id));
$stmt->bindParam("i", $this->id);
if($stmt->execute()){
return true;
}
}
}
}
?>