Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
admin.php	4.43 KB	-rwxr-xr-x	2024-08-29 23:28
battle_list.php	5.75 KB	-rwxr-xr-x	2024-08-29 23:28
battle_regist.php	3.75 KB	-rwxr-xr-x	2025-05-29 21:51
edit_battle.php	10.09 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle.php	9.28 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle_pre.php	5.12 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_battle.php	26.85 KB	-rwxr-xr-x	2025-05-29 21:56
quiz_detail.php	5.29 KB	-rw-r--r--	2024-08-29 23:28
quiz_list.php	6.61 KB	-rw-r--r--	2024-08-29 23:28
quiz_manager.php	1.02 KB	-rwxr-xr-x	2024-08-28 00:17
quiz_regist.php	5.39 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_start.php	5.82 KB	-rwxr-xr-x	2024-08-29 23:28
team_edit_form.php	6.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer.php	6.5 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer_register.php	2.21 KB	-rwxr-xr-x	2024-08-28 00:17
team_regist_form.php	7.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_register.php	2.66 KB	-rwxr-xr-x	2024-08-28 00:17

Rename

<?php
require_once ("/var/www/html/quiz/auth/database.php");
session_start();

$exit_message = "This page is an admin only page. Please login as an admin acount. <br><a href='/auth/login.php'>login</a>";

if (is_null($_SESSION["loggedin"]) || $_SESSION["loggedin"] != 1) {
    exit($exit_message);
} // ほとんどの場合はこれで落とされる。

$user_name = $_SESSION["name"];

// user valitation
$pdo = getPdo();

$sql = "SELECT name FROM quiz.users WHERE name = :name";

$stmt = $pdo->prepare($sql);
$stmt->bindValue('name', $user_name, PDO::PARAM_STR);
$stmt->execute();

$row = $stmt->fetch(PDO::FETCH_ASSOC);

if (count($row) == 0)
    exit($exit_message);

if ($_POST['change_type'] == 'change') {
    $team_size = 0;
    $cannot_edit = ["id", "created", "updated"];
    $team_id = $_POST['id'];

$sql = "SELECT * FROM quiz.team WHERE id = :id";

$stmt = $pdo->prepare($sql);
    $stmt->bindValue('id', $team_id, PDO::PARAM_INT);
    $stmt->execute();
    $row = $stmt->fetch(PDO::FETCH_ASSOC);

for ($i = 0; $i < count($row); $i++) {
        $column = $stmt->getColumnMeta($i);
        $key = $column['name'];
        if (in_array($key, $cannot_edit))
            continue;
        if (strstr($key, "hrno") == $key && intval($_POST[$key])) { // if "hrno" in $key
            $team_size++;
        }
        $sql2 = "UPDATE quiz.team SET {$key}=:value WHERE id = :id;";
        $stmt2 = $pdo->prepare($sql2);
        if ($column['native_type'] == "LONG") {
            $stmt2->bindValue('value', $_POST[$key], PDO::PARAM_INT);
        } else {
            $stmt2->bindValue('value', $_POST[$key], PDO::PARAM_STR);
        }
        $stmt2->bindValue('id', $team_id, PDO::PARAM_INT);
        $stmt2->execute();
    }
    $sql_set_teamsiz = "UPDATE quiz.team SET team_size = :value WHERE id = :id";
    $stmt3 = $pdo->prepare($sql_set_teamsiz);
    $stmt3->bindValue("value", $team_size, PDO::PARAM_INT);
    $stmt3->bindValue("id", $team_id, PDO::PARAM_INT);
    $stmt3->execute();
} else if ($_POST['change_type'] == 'delete') {
    $sql = "DELETE FROM quiz.team WHERE id = :id";
    $stmt = $pdo->prepare($sql);
    $stmt->bindValue('id', $_POST['id'], PDO::PARAM_INT);
    $stmt->execute();
}

header('Location: /admin/admin.php');