Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
admin.php	4.43 KB	-rwxr-xr-x	2024-08-29 23:28
battle_list.php	5.75 KB	-rwxr-xr-x	2024-08-29 23:28
battle_regist.php	3.75 KB	-rwxr-xr-x	2025-05-29 21:51
edit_battle.php	10.09 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle.php	9.28 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle_pre.php	5.12 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_battle.php	26.85 KB	-rwxr-xr-x	2025-05-29 21:56
quiz_detail.php	5.29 KB	-rw-r--r--	2024-08-29 23:28
quiz_list.php	6.61 KB	-rw-r--r--	2024-08-29 23:28
quiz_manager.php	1.02 KB	-rwxr-xr-x	2024-08-28 00:17
quiz_regist.php	5.39 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_start.php	5.82 KB	-rwxr-xr-x	2024-08-29 23:28
team_edit_form.php	6.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer.php	6.5 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer_register.php	2.21 KB	-rwxr-xr-x	2024-08-28 00:17
team_regist_form.php	7.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_register.php	2.66 KB	-rwxr-xr-x	2024-08-28 00:17

Rename

<?php
require_once ("/var/www/html/quiz/auth/database.php");
require_once ("/var/www/html/quiz/auth/functions2.php");
session_start();

$exit_message = "This page is an admin only page. Please login as an admin acount. <br><a href='/auth/login.php'>login</a>";

if (is_null($_SESSION["loggedin"]) || $_SESSION["loggedin"] != 1) {
    exit($exit_message);
} // ほとんどの場合はこれで落とされる。

$user_name = $_SESSION["name"];

// user valitation
$pdo = getPdo();

$sql = "SELECT name FROM quiz.users WHERE name = :name";

$stmt = $pdo->prepare($sql);
$stmt->bindValue('name', $user_name, PDO::PARAM_STR);
$stmt->execute();

$row = $stmt->fetch(PDO::FETCH_ASSOC);

if (count($row) == 0)
    exit($exit_message);

if ($_POST['update_type'] == 'delete') {
    $sql = "DELETE FROM quiz.battle WHERE buttle_id = :buttle_id";
    $stmt4 = $pdo->prepare($sql);
    $stmt4->bindValue('buttle_id', $_POST['buttle_id'], PDO::PARAM_INT);
    $stmt4->execute();
}

// Get a all team;
$sql_teams = "SELECT id,name FROM quiz.team;";
$stmt_teams = $pdo->prepare($sql_teams);
$stmt_teams->execute();

$teams = $stmt_teams->fetchAll(PDO::FETCH_KEY_PAIR);

$arr = [];
$arr2 = [];
$arr3 = []; // for `answered`

for ($i = 1; $i <= (($_POST['type'] != 'attack_25') ? (9) : (4)); $i++) {
    if ($_POST["encounters_{$i}"] == -1)
        continue;
    array_push($arr, [$i => [$teams[$_POST["encounters_{$i}"]], intval($_POST["encounters_{$i}"])]]);
    $arr3 += [$teams[$_POST["encounters_{$i}"]] => []];
    if ($_POST['type'] == 'monx') {
        $arr2 += [$teams[$_POST["encounters_{$i}"]] => [0, 0]];
    } else if ($_POST['type'] == 'attack_25') {
        $arr2 += [$teams[$_POST["encounters_{$i}"]] => 0];
    } else {
        $arr2 += [$teams[$_POST["encounters_{$i}"]] => $attack_survival_normal_score];
    }
}

if ($_POST['update_type'] == 'create') {

if (isset($_POST['remarks']) && is_array($_POST['remarks']) && count($_POST['remarks']) > 100) {
        exit('`Remarks` is too long. Please shorten it to less than 100.');
    }

$sql = "INSERT INTO quiz.battle (buttle_id, buttle_type, teams, remarks, points, answered) VALUES (:buttle_id, :buttle_type,:teams,:remarks,:points,:answered)";
    $buttle_id = $_POST['buttle_id'];
    $buttle_type = $_POST['type'];
    $team_json = json_encode($arr);
    $team_point_json = json_encode($arr2);
    $answered_json = json_encode($arr3);

$stmt = $pdo->prepare($sql);
    $stmt->bindValue('buttle_id', $buttle_id, PDO::PARAM_INT);
    $stmt->bindValue('buttle_type', $buttle_type, PDO::PARAM_STR);
    $stmt->bindValue('teams', $team_json, PDO::PARAM_STR);
    $stmt->bindValue('remarks', $_POST['remarks'], PDO::PARAM_STR);
    $stmt->bindValue('points', $team_point_json, PDO::PARAM_STR);
    $stmt->bindValue('answered', $answered_json, PDO::PARAM_STR);

$stmt->execute();
} else if ($_POST['update_type'] == 'edit') {

if (count($_POST['remarks']) > 100) {
        exit('`Remarks` is too long. Please shorten it to less than 100.');
    }

$sql = "UPDATE quiz.battle SET teams = :teams, remarks = :remarks, points = :points, answered = :answered WHERE buttle_id = :buttle_id";
    $buttle_id = $_POST['buttle_id'];
    $buttle_type = $_POST['type'];
    $team_json = json_encode($arr);
    $team_point_json = json_encode($arr2);
    $answered_json = json_encode($arr3);

$stmt = $pdo->prepare($sql);
    $stmt->bindValue('buttle_id', $buttle_id, PDO::PARAM_INT);
    //$stmt->bindValue('buttle_type', $buttle_type, PDO::PARAM_STR);
    $stmt->bindValue('teams', $team_json, PDO::PARAM_STR);
    $stmt->bindValue('remarks', $_POST['remarks'], PDO::PARAM_STR);
    $stmt->bindValue('points', $team_point_json, PDO::PARAM_STR);
    $stmt->bindValue('answered', $answered_json, PDO::PARAM_STR);

$stmt->execute();
}

header('Location: /admin/admin.php');