DbLocal/ConfirmCancelReservation.php at master · dranelol/DbLocal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
<?php

// Author: Matt Wallace
// Last Edited: 04/28/2015
// I promise this is my code.
// Description:
// Confirmation page for cancelling a reservation


	include "login.php";

	if(isset($_SESSION["userType"]) == false)
	{
		echo "Not logged in!";
		echo '<br><br>';
		echo '<a href ="LoginPage.php">Go Log In</a>';

		die();
	}


?>
<html>
<head>
<title>
TITLE
</title>
</head>

<h3>
HEADING
</h3>
<body>

<?php

	$sessionUser = $_SESSION['userType'];

	// restrict access only to certain userTypes


	if($sessionUser != "member")
	{
		echo 'Not logged in as a member!';
		echo '<br><br>';
		echo '<a href ="LoginPage.php">Go Log In</a>';

		die();
	}


	echo "Logged in as: $sessionUser";
	if($sessionUser == "member")
	{
		echo "<br>Membership ID: " . $_SESSION['memberID'] . "<br>";
	}

	$date = $_SESSION["today"];
	echo "<br>";
	echo "Today's date: $date";

?>

<br>
<br>

<?php

	// CODE STARTS HERE
	if(isset($_POST['reservationToCancel']))
	{
		$reservationID = $_POST['reservationToCancel'];

		$getShowingQuery = "select S.ID, S.SeatsAvailable, R.SeatRow, R.SeatColumn, S.SeatingChart from MovieShowing S, Reservation R where R.MovieShowingID = S.ID and R.ID = '$reservationID'";

		$getShowingResult = mysql_query($getShowingQuery) or die (mysql_error());

		if($getShowingRow = mysql_fetch_array($getShowingResult))
		{
			$showingID = $getShowingRow['ID'];
			$available = $getShowingRow['SeatsAvailable'];
			$seatRow = $getShowingRow['SeatRow'];
			$seatColumn = $getShowingRow['SeatColumn'];
			$seatingChart = $getShowingRow['SeatingChart'];

			$available = $available + 1;

			$seatingChartArray = unserialize($seatingChart);
			$seatingChartArray[$seatRow][$seatColumn] = '0';
			$newSeatingChart = serialize($seatingChartArray);

			$updateShowing = "update MovieShowing set SeatsAvailable='$available', SeatingChart ='$newSeatingChart' where ID = '$showingID'";
			$updateShowingResult = mysql_query($updateShowing);

			$deleteReservationQuery = "delete from Reservation where ID = '$reservationID'";
			$deleteReservationResult = mysql_query($deleteReservationQuery) or die(mysql_error());

			echo "Successfully cancelled reservation!";

			echo "<br>";
			echo "<form action ='index.php'>";
			echo "<input type ='submit' value = 'Go back to index' >";
			echo "</form>";
		}


	}

	else
	{
		echo '<br>Got here illegally!';
		echo "<br>";
		echo "<form action ='index.php'>";
		echo "<input type ='submit' value = 'Go back to index' >";
		echo "</form>";
	}


?>

</body>
</html>