elektronisk-kadaver-tidtakingssystem/api/runner.php

<?php
$documentRoot = $_SERVER['DOCUMENT_ROOT'];
include("$documentRoot/import_runners.php");


include("$documentRoot/data/hash.php");
$method = $_SERVER['REQUEST_METHOD'];
if ($method == "POST") {
    $runner_id = $_POST['id'];
    $name = $_POST['name'];
    $club = $_POST['club'];
    $course = $_POST['course'];
    
    $line = $runner_id . ";;" . $name . ";;;" . $club . ";" . $course . ";;;\n";

    $password = $_POST['password'];
    if (!password_verify($password, $hash)) {
        http_response_code(response_code: 401);
    }
    elseif (!ctype_digit($runner_id)){
        http_response_code(response_code: 400);
    }
    else {
        $runners = read_runners_from_csv();
        $filtered = search_for_runner($runners, $runner_id);
        if ($filtered != []) {
            http_response_code(response_code: 400);
            echo("<span class='bg-danger'>Startnummer er allerede i bruk!</span>");
        } else {
            $file = "$documentRoot/data/db.csv";
            file_put_contents($file, $line, FILE_APPEND);
            header("HX-Replace-Url: false");
            echo("Løper lagt til: $line");
        }


    }
}
if ($method == "PATCH") {
    $password = getallheaders()['Password'];
    if (!password_verify($password, $hash)) {
        http_response_code(response_code: 401);
    } else {
        parse_str(file_get_contents('php://input'), $_PATCH);
        $line = $_PATCH["id"] . ";;" . $_PATCH["name"] . ";" . $_PATCH["email"] . ";" . $_PATCH["phone"] . ";" . $_PATCH["club"] . ";" . $_PATCH["course"] . ";;;\n";

        $all_lines = file("$documentRoot/data/db.csv");
        $csv_line = (int)$_PATCH["line_in_csv"];

        $old_id = str_getcsv($all_lines[$csv_line], ";")[0];

        $runners = read_runners_from_csv();
        $filtered = search_for_runner($runners, $_PATCH["id"]);

        if (!is_int($csv_line)){
            http_response_code(response_code: 400);
        } elseif ($filtered != [] && $_PATCH["id"] != $old_id) {
                http_response_code(response_code: 400);
                echo("<span class='bg-danger'>Startnummer er allerede i bruk!</span>");
        } else {
            $all_lines[$csv_line] =  $line;
            file_put_contents("$documentRoot/data/db.csv",implode("",$all_lines));
            echo("<span class='bg-success'>Endret: $line</span>");
        }
}
}

if ($method == "GET") {
    $password = getallheaders()['Password'];
    if (!password_verify($password, $hash)) {
        http_response_code(response_code: 401);
    } else {
        parse_str($_SERVER['QUERY_STRING'], $query);
        
        $runners = read_runners_from_csv();
        $filtered = search_for_runner($runners, $query['search']);
        if (isset($query['get'])) {
            $filtered = [get_runner($runners,$query['get'])];
        }
        if (count($filtered) == 1 && $query['edit'] == "true") {
            $r = $filtered[0];
            $response .= "
            <h2>Endre $r->id $r->name</h2>
            <form hx-patch='/api/runner.php' hx-headers='js:{\"Password\": localStorage.getItem(\"passord\")}'>
                <label>Startnummer<input type='number' id='id' name='id' required value='$r->id'></label>
                <label>Navn<input type='text' id='name' name='name' required value='$r->name'></label>
                <label>Forening<input type='text' id='club' name='club' required value='$r->club'></label>
                <label>
                <fieldset>
                <input type='radio' name='course' value='Kadaverløpet' checked='checked'>
                Kadaverløpet
                </label>
                    <label>
                <input type='radio' name='course' value=\"Minikadaver'n\">
                Minikadaver'n
                </label>
                </fieldset>
                <label>epost<input type='text' id='email' name='email' value='$r->email'></label>
                <label>telefon<input type='text' id='phone' name='phone' value='$r->phone'></label>
                <label><input type='hidden' id='student' name='student' required value='$r->is_student'></label>
                <label><input type='hidden' id='line_in_csv' name='line_in_csv' required value='$r->line_in_csv'></label>
                <button type='submit'>Endre løper</button>
            </form>
            ";
            header("HX-Replace-Url: false");
            echo($response);
        } elseif (count($filtered) == 1){
            $r = $filtered[0];
            $response .= "
            <h2> $r->name</h2>
            <p> <b>Klubb:</b> $r->club</p>
            <p> <b>Løype:</b> $r->course</p>
            <p> <b>Epost:</b> <a href=\"mailto:$r->email\">$r->email</a></p>
            <p> <b>Mobilnummer:</b> <a href=\"tel:$r->phone\">$r->phone</a></p>
            <p> <b>Student?</b> $r->is_student</p>
            ";
            header("HX-Replace-Url: false");
            echo($response);
        }
        elseif (count($filtered) > 1){
            $response = "";
            
            for ($i = 0; $i < count($filtered); $i++) {
                $runner = $filtered[$i];
                if ($query['edit'] == "true") {
                    $url = "/api/runner.php?get=$runner->id&edit=true";
                } else {
                    $url = "/api/runner.php?get=$runner->id";
                }
                $response .= "<button class=\"default\" hx-get=\"$url\" hx-target=\"#runner\" hx-swap=\"show:none\" hx-headers='js:{\"Password\": localStorage.getItem(\"passord\")}'>$runner->id $runner->name</button>";
                header("HX-Replace-Url: false");
            }
            echo($response);
        }
        else{
            echo("Ingen resultater...");
        }
    }
}