modo.php

<?php
  include_once('header.php');
  include_once('footer.php');
  include('db.php');
?>
<h1>Moderation</h1>

<?php
if ($_SESSION['rights']=="2" OR $_SESSION['rights']=="3")
{
    $host = 'localhost';
    $dbname = 'samplitek';
    $usern = 'root';
    $passw = '';
    $dsn = "mysql:host=$host;dbname=$dbname";
    // get all users
    $sql = "SELECT `samples`.*, `users`.`username`
    FROM `samples`
    LEFT JOIN `users` ON `samples`.`creatorID` = `users`.`id`;";

    try {
    $pdo = new PDO($dsn, $usern, $passw);
    $stmt = $pdo->query($sql);

    if ($stmt === false) {
        die("Error");
    }
    } catch (PDOException $e) {
    echo $e->getMessage();
    }

    ?>
    <table>
    <thead>
    <tr>
        <th>ID</th>
        <th>Sample Name</th>
        <th>Genre</th>
        <th>Instrument</th>
        <th>BPM</th>
        <th>Username</th>
    </tr>
    </thead>
    <tbody>
    <?php while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) : ?>
        <tr>
            <td><?php echo htmlspecialchars($row['id']); ?></td>
            <td><?php echo htmlspecialchars($row['sampleName']); ?></td>
            <td><?php echo htmlspecialchars($row['genre']); ?></td>
            <td><?php echo htmlspecialchars($row['instrument']); ?></td>
            <td><?php echo htmlspecialchars($row['bpm']); ?></td>
            <td><?php echo htmlspecialchars($row['username']); ?></td>
        </tr>
    <?php endwhile; ?>
    </tbody>
    </table>

<!--DELETE SAMPLE-->
    <p>Sample to delete?(input the id)</p>
    <form action="modo.php" method="post">
        <input type="text" name="sampleID" id="sampleID" placeholder="Sample ID">
        <input type="submit" name="deleteSample" placeholder="Delete the sample">
    </form>

    <?php
    $host = 'localhost';
    $dbname = 'samplitek';
    $usern = 'root';
    $passw = '';
    $dsn = "mysql:host=$host;dbname=$dbname";
    // get all users
    $sql = "SELECT `songs`.*, `users`.`username`
    FROM `songs`
    LEFT JOIN `users` ON `songs`.`creatorID` = `users`.`id`";

    try {
        $pdo = new PDO($dsn, $usern, $passw);
        $stmt = $pdo->query($sql);

        if ($stmt === false) {
            die("Error");
        }
    }

    catch (PDOException $e){
    echo $e->getMessage();
    }

    ?>

    <table>
    <thead>
    <tr>
        <th>ID</th>
        <th>Song Name</th>
        <th>Genre</th>
        <th>BPM</th>
        <th>username</th>
    </tr>
    </thead>
    <tbody>
    <?php while($row = $stmt->fetch(PDO::FETCH_ASSOC)) : ?>
        <tr>
            <td><?php echo htmlspecialchars($row['id']); ?></td>
            <td><?php echo htmlspecialchars($row['songName']); ?></td>
            <td><?php echo htmlspecialchars($row['genre']); ?></td>
            <td><?php echo htmlspecialchars($row['bpm']); ?></td>
            <td><?php echo htmlspecialchars($row['username']); ?></td>
        </tr>
    <?php endwhile; ?>
    </tbody>
</table>
    <p>Song to delete?(input the id)</p>
    <form action="modo.php" method="post">
        <input type="text" name="songID" id="songID" placeholder="Song ID">
        <input type="submit" name="deleteSong" placeholder="Delete the song">
    </form>
<?php

    if (isset($_POST['deleteSample'])){
        if (!empty($_POST['sampleID'])){
            header("Location: modo.php");
            $sampleId = trim($_POST['sampleID']);
            print_r($sampleId);
            $stmt = $bd->prepare("DELETE FROM samples WHERE id=:sampleId");
            $stmt->bindParam(':sampleId', $sampleId);
            $stmt->execute();
            exit();
        }
    }
    if (isset($_POST['deleteSong'])){
        if (!empty($_POST['songID'])){
            header("Location: modo.php");
            $songId = trim($_POST['songID']);
            print_r($songId);
            $stmt = $bd->prepare("DELETE FROM songs WHERE id=:songId");
            $stmt->bindParam(':songId', $songId);
            $stmt->execute();
            exit();
        }

    }

}
    else{
        echo "Trying to be clever boy ?";
    }
?>