diff -r 7224109adfe1 -r b1f2a893572f www/includes/db_recipes.php --- a/www/includes/db_recipes.php Tue Sep 04 13:44:02 2018 +0200 +++ b/www/includes/db_recipes.php Tue Sep 04 23:12:13 2018 +0200 @@ -17,44 +17,74 @@ // get data and store in a json array $query = "SELECT * FROM recipes ORDER BY st_guide,st_letter,st_name,name"; -if (isset($_GET['insert'])) { -// // INSERT COMMAND -// $sql = "INSERT INTO `profile_mash` SET name='" . mysqli_real_escape_string($connect, $_GET['name']); -// $sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']); -// $sql .= "', steps='" . json_encode($_GET['steps']); -// $sql .= "';"; +if (isset($_GET['insert']) || isset($_GET['update'])) { + if (isset($_GET['insert'])) { + // INSERT COMMAND + $sql = "INSERT INTO `recipes` SET st_name='" . mysqli_real_escape_string($connect, $_GET['st_name']); + } + if (isset($_GET['update'])) { + // UPDATE COMMAND + $sql = "UPDATE `recipes` SET st_name='" . mysqli_real_escape_string($connect, $_GET['st_name']); + } + $sql .= "', st_letter='" . mysqli_real_escape_string($connect, $_GET['st_letter']); + $sql .= "', st_guide='" . mysqli_real_escape_string($connect, $_GET['st_guide']); + $sql .= "', st_og_min='" . $_GET['st_og_min']; + $sql .= "', st_og_max='" . $_GET['st_og_max']; + $sql .= "', st_fg_min='" . $_GET['st_fg_min']; + $sql .= "', st_fg_max='" . $_GET['st_fg_max']; + $sql .= "', st_ibu_min='" . $_GET['st_ibu_min']; + $sql .= "', st_ibu_max='" . $_GET['st_ibu_max']; + $sql .= "', st_color_min='" . $_GET['st_color_min']; + $sql .= "', st_color_max='" . $_GET['st_color_max']; + $sql .= "', st_carb_min='" . $_GET['st_carb_min']; + $sql .= "', st_carb_max='" . $_GET['st_carb_max']; + $sql .= "', st_abv_min='" . $_GET['st_abv_min']; + $sql .= "', st_abv_max='" . $_GET['st_abv_max']; + $sql .= "', name='" . mysqli_real_escape_string($connect, $_GET['name']); + $sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']); + $sql .= "', type='" . $_GET['type']; + $sql .= "', batch_size='" . $_GET['batch_size']; + $sql .= "', boil_time='" . $_GET['boil_time']; + $sql .= "', efficiency='" . $_GET['efficiency']; + $sql .= "', est_og='" . $_GET['est_og']; + $sql .= "', est_fg='" . $_GET['est_fg']; + $sql .= "', est_color='" . $_GET['est_color']; + $sql .= "', color_method='" . $_GET['color_method']; + $sql .= "', est_ibu='" . $_GET['est_ibu']; + $sql .= "', ibu_method='" . $_GET['ibu_method']; + $sql .= "', mash_sparge_temp='" . $_GET['mash_sparge_temp']; + $sql .= "', mash_ph='" . $_GET['mash_ph']; + $sql .= "', mash_name='" . $_GET['mash_name']; + + syslog(LOG_NOTICE, $sql); // Log upto this part. + + syslog(LOG_NOTICE, "json_waters: " . json_encode($_GET['waters'])); + $sql .= "', json_waters='" . json_encode($_GET['waters']); + + if (isset($_GET['insert'])) { + $sql .= "';"; + } + if (isset($_GET['update'])) { + $sql .= "' WHERE record='" . $_GET['record'] . "';"; + } // $result = mysqli_query($connect, $sql); // if (! $result) { -// syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect)); +// syslog(LOG_NOTICE, "db_recipes: ".$sql." result: ".mysqli_error($connect)); // } else { -// syslog(LOG_NOTICE, "db_profile_mash: inserted ".$_GET['name']); +// syslog(LOG_NOTICE, "db_recipes: inserted ".$_GET['name']); // } // echo $result; -//} else if (isset($_GET['update'])) { -// // UPDATE COMMAND -// $sql = "UPDATE `profile_mash` SET name='" . mysqli_real_escape_string($connect, $_GET['name']); -// $sql .= "', notes='" . mysqli_real_escape_string($connect, $_GET['notes']); -// $sql .= "', steps='" . json_encode($_GET['steps']); -// $sql .= "' WHERE record='" . $_GET['record'] . "';"; -// $result = mysqli_query($connect, $sql); -// if (! $result) { -// syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect)); -// } else { -// syslog(LOG_NOTICE, "db_profile_mash: updated record ".$_GET['record']); -// } -// echo $result; - -//} else if (isset($_GET['delete'])) { -// // DELETE COMMAND -// $sql = "DELETE FROM `profile_mash` WHERE record='".$_GET['record']."';"; -// $result = mysqli_query($connect, $sql); -// if (! $result) { -// syslog(LOG_NOTICE, "db_profile_mash: ".$sql." result: ".mysqli_error($connect)); -// } else { -// syslog(LOG_NOTICE, "db_profile_mash: deleted record ".$_GET['record']); -// } -// echo $result; +} else if (isset($_GET['delete'])) { + // DELETE COMMAND + $sql = "DELETE FROM `recipes` WHERE record='".$_GET['record']."';"; + $result = mysqli_query($connect, $sql); + if (! $result) { + syslog(LOG_NOTICE, "db_recipes: ".$sql." result: ".mysqli_error($connect)); + } else { + syslog(LOG_NOTICE, "db_recipes: deleted record ".$_GET['record']); + } + echo $result; } else { // SELECT COMMAND