Gecko [ tsuru-no-tsurugi.tokyo ]

Name	Size	Permission	Date
admin.php	4.43 KB	-rwxr-xr-x	2024-08-29 23:28
battle_list.php	5.75 KB	-rwxr-xr-x	2024-08-29 23:28
battle_regist.php	3.75 KB	-rwxr-xr-x	2025-05-29 21:51
edit_battle.php	10.09 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle.php	9.28 KB	-rwxr-xr-x	2024-08-29 23:28
make_battle_pre.php	5.12 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_battle.php	26.85 KB	-rwxr-xr-x	2025-05-29 21:56
quiz_detail.php	5.29 KB	-rw-r--r--	2024-08-29 23:28
quiz_list.php	6.61 KB	-rw-r--r--	2024-08-29 23:28
quiz_manager.php	1.02 KB	-rwxr-xr-x	2024-08-28 00:17
quiz_regist.php	5.39 KB	-rwxr-xr-x	2024-08-29 23:28
quiz_start.php	5.82 KB	-rwxr-xr-x	2024-08-29 23:28
team_edit_form.php	6.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer.php	6.5 KB	-rwxr-xr-x	2024-08-29 23:28
team_editer_register.php	2.21 KB	-rwxr-xr-x	2024-08-28 00:17
team_regist_form.php	7.45 KB	-rwxr-xr-x	2024-08-29 23:28
team_register.php	2.66 KB	-rwxr-xr-x	2024-08-28 00:17

Rename

<?php
require_once ("/var/www/html/quiz/auth/database.php");
session_start();

$exit_message = "This page is an admin only page. Please login as an admin acount. <br><a href='/auth/login.php'>login</a>";

if (is_null($_SESSION["loggedin"]) || $_SESSION["loggedin"] != 1) {
    exit($exit_message);
} // ほとんどの場合はこれで落とされる。

$user_name = $_SESSION["name"];

// 念のためSQLに登録されているかをチェック
// user valitation
$pdo = getPdo();

$sql = "SELECT name FROM quiz.users WHERE name = :name";

$stmt = $pdo->prepare($sql);
$stmt->bindValue('name', $user_name, PDO::PARAM_STR);
$stmt->execute();

$row = $stmt->fetch(PDO::FETCH_ASSOC);

if (count($row) == 0)
    exit($exit_message);

// チーム登録

$datas = [
    'teamname' => "",
    'hrno1' => "",
    'hrno2' => "",
    'hrno3' => "",
    'hrno4' => "",
    'remarks' => "",
    'register_passwd' => ""
];

$request = filter_input_array(INPUT_POST);
$datas = $request;

$hrnos = [
    'hrno1' => $datas['hrno1'],
    'hrno2' => $datas['hrno2'],
    'hrno3' => $datas['hrno3'],
    'hrno4' => $datas['hrno4']
];

// teamname valitation
if (!isset($datas['teamname']) || is_null($datas['teamname']) || $datas['teamname'] == "") {
    exit("チーム名を入力してください。");
}

// teamsize valitation
$team_size = 0;
foreach ($hrnos as &$hrno) {
    if ($hrno != "")
        $team_size++;
}
unset($hrno);

if ($team_size == 0) {
    exit("チームの大きさが0です。");
}

// register password check
if ($datas['register_passwd'] != 'B7gxbwc4') {
    exit("登録パスワードが間違っています。");
}

$team_name = $datas["teamname"];

$pdo = getPdo();
$sql = "SELECT * FROM quiz.team WHERE name = :name;";
$stmt = $pdo->prepare($sql);
$stmt->bindValue('name', $datas['teamname'], PDO::PARAM_STR);
$stmt->execute();

$rows = $stmt->fetch(PDO::FETCH_ASSOC);

if ($rows)
    exit("このチーム名は以前に登録されています。");

// teamname regist
$sql_regist_teamname = "INSERT INTO quiz.team (name, team_size, hrno1, hrno2, hrno3, hrno4, remarks, status) VALUES (:name, :team_size, :hrno1, :hrno2, :hrno3, :hrno4, :remarks, 'alive')";

$stmt3 = $pdo->prepare($sql_regist_teamname);
$stmt3->bindValue('name', $datas['teamname'], PDO::PARAM_STR);
$stmt3->bindValue('hrno1', $datas['hrno1'], PDO::PARAM_INT);
$stmt3->bindValue('hrno2', $datas['hrno2'], PDO::PARAM_INT);
$stmt3->bindValue('hrno3', $datas['hrno3'], PDO::PARAM_INT);
$stmt3->bindValue('hrno4', $datas['hrno4'], PDO::PARAM_INT);
$stmt3->bindValue('remarks', $datas['remarks'], PDO::PARAM_STR);
$stmt3->bindValue('team_size', $team_size, PDO::PARAM_INT);

$stmt3->execute();

header('Location: /admin/admin.php');
?>