Mercurial > bms / file diff

--- a/www/includes/db_recipes.php	Tue Sep 04 13:44:02 2018 +0200
+++ b/www/includes/db_recipes.php	Tue Sep 04 23:12:13 2018 +0200
@@ -17,44 +17,74 @@
 
 // get data and store in a json array
 $query = "SELECT * FROM recipes ORDER BY st_guide,st_letter,st_name,name";
-if (isset($_GET['insert'])) {
-//	// INSERT COMMAND
-//	$sql  = "INSERT INTO `profile_mash` SET name='" . mysqli_real_escape_string($connect, $_GET['name']);
-//	$sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']);
-//	$sql .= "', steps='" . json_encode($_GET['steps']);
-//	$sql .= "';";
+if (isset($_GET['insert']) || isset($_GET['update'])) {
+	if (isset($_GET['insert'])) {
+		// INSERT COMMAND
+		$sql  = "INSERT INTO `recipes` SET st_name='" . mysqli_real_escape_string($connect, $_GET['st_name']);
+	}
+	if (isset($_GET['update'])) {
+		// UPDATE COMMAND
+		$sql  = "UPDATE `recipes` SET st_name='" . mysqli_real_escape_string($connect, $_GET['st_name']);
+	}
+	$sql .= "', st_letter='" . mysqli_real_escape_string($connect, $_GET['st_letter']);
+	$sql .= "', st_guide='" . mysqli_real_escape_string($connect, $_GET['st_guide']);
+	$sql .= "', st_og_min='" . $_GET['st_og_min'];
+	$sql .= "', st_og_max='" . $_GET['st_og_max'];
+	$sql .= "', st_fg_min='" . $_GET['st_fg_min'];
+	$sql .= "', st_fg_max='" . $_GET['st_fg_max'];
+	$sql .= "', st_ibu_min='" . $_GET['st_ibu_min'];
+	$sql .= "', st_ibu_max='" . $_GET['st_ibu_max'];
+	$sql .= "', st_color_min='" . $_GET['st_color_min'];
+	$sql .= "', st_color_max='" . $_GET['st_color_max'];
+	$sql .= "', st_carb_min='" . $_GET['st_carb_min'];
+	$sql .= "', st_carb_max='" . $_GET['st_carb_max'];
+	$sql .= "', st_abv_min='" . $_GET['st_abv_min'];
+	$sql .= "', st_abv_max='" . $_GET['st_abv_max'];
+	$sql .= "', name='" . mysqli_real_escape_string($connect, $_GET['name']);
+	$sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']);
+	$sql .= "', type='" . $_GET['type'];
+	$sql .= "', batch_size='" . $_GET['batch_size'];
+	$sql .= "', boil_time='" . $_GET['boil_time'];
+	$sql .= "', efficiency='" . $_GET['efficiency'];
+	$sql .= "', est_og='" . $_GET['est_og'];
+	$sql .= "', est_fg='" . $_GET['est_fg'];
+	$sql .= "', est_color='" . $_GET['est_color'];
+	$sql .= "', color_method='" . $_GET['color_method'];
+	$sql .= "', est_ibu='" . $_GET['est_ibu'];
+	$sql .= "', ibu_method='" . $_GET['ibu_method'];
+	$sql .= "', mash_sparge_temp='" . $_GET['mash_sparge_temp'];
+	$sql .= "', mash_ph='" . $_GET['mash_ph'];
+	$sql .= "', mash_name='" . $_GET['mash_name'];
+
+	syslog(LOG_NOTICE, $sql);	// Log upto this part.
+
+	 syslog(LOG_NOTICE, "json_waters: " . json_encode($_GET['waters']));
+	$sql .= "', json_waters='" . json_encode($_GET['waters']);
+
+	if (isset($_GET['insert'])) {
+		$sql .= "';";
+	}
+	if (isset($_GET['update'])) {
+		$sql .= "' WHERE record='" . $_GET['record'] . "';";
+	}
 //	$result = mysqli_query($connect, $sql);
 //	if (! $result) {
-//		syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect));
+//		syslog(LOG_NOTICE, "db_recipes: ".$sql." result: ".mysqli_error($connect));
 //	} else {
-//		syslog(LOG_NOTICE, "db_profile_mash: inserted ".$_GET['name']);
+//		syslog(LOG_NOTICE, "db_recipes: inserted ".$_GET['name']);
 //	}
 //	echo $result;
 
-//} else if (isset($_GET['update'])) {
-//	// UPDATE COMMAND
-//	$sql  = "UPDATE `profile_mash` SET name='" . mysqli_real_escape_string($connect, $_GET['name']);
-//	$sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']);
-//	$sql .= "', steps='" . json_encode($_GET['steps']);
-//	$sql .= "' WHERE record='" . $_GET['record'] . "';";
-//	$result = mysqli_query($connect, $sql);
-//	if (! $result) {
-//		syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect));
-//	} else {
-//		syslog(LOG_NOTICE, "db_profile_mash: updated record ".$_GET['record']);
-//	}
-//	echo $result;
-
-//} else if (isset($_GET['delete'])) {
-//	// DELETE COMMAND
-//	$sql = "DELETE FROM `profile_mash` WHERE record='".$_GET['record']."';";
-//	$result = mysqli_query($connect, $sql);
-//	if (! $result) {
-//		syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect));
-//	} else {
-//		syslog(LOG_NOTICE, "db_profile_mash: deleted record ".$_GET['record']);
-//	}
-//	echo $result;
+} else if (isset($_GET['delete'])) {
+	// DELETE COMMAND
+	$sql = "DELETE FROM `recipes` WHERE record='".$_GET['record']."';";
+	$result = mysqli_query($connect, $sql);
+	if (! $result) {
+		syslog(LOG_NOTICE, "db_recipes: ".$sql." result: ".mysqli_error($connect));
+	} else {
+		syslog(LOG_NOTICE, "db_recipes: deleted record ".$_GET['record']);
+	}
+	echo $result;
 
 } else {
 	// SELECT COMMAND