87
}
if (isset($_POST['jSlctRow'])) {
$arr = json_decode(stripslashes($_POST['jSlctRow']));
$rowId = $arr[0];
$sessionId = $arr[1];
if ($rowId == 0 || $sessionId == 0) {
$arr = 0;
echo json_encode($arr);
exit;
} else {
$db->setQuery("SELECT p.num_row FROM place p WHERE p.id = '$rowId'");
$db->query();
$res = $db->loadRow();
$db->setQuery("SELECT p.num, p.id FROM session s
INNER JOIN hall h ON h.id = s.hall_id
INNER JOIN place p ON h.id = p.hall_id
WHERE s.id = '$sessionId' AND p.num_row = '$res[num_row]' AND p.id NOT IN
(SELECT shp.place_id FROM session_has_place shp WHERE shp.session_id = s.id
AND shp.place_id = p.id)");
$db->query();
$res = $db->loadRowList();
echo json_encode($res);
exit;
}
}
if ($_REQUEST['btn_buy']) {
88
$db->setQuery("SELECT id FROM ticket t WHERE t.session_id =
'$_GET[slct_session]'");
$db->query();
$res = $db->loadRow();
$ticketId = $res['id'];
$db->setQuery("INSERT INTO booking (ticket_id, place_id, user_id)
VALUES ('$ticketId', '$_GET[slct_place]','$_SESSION[id]')");
$db->query();
$db->setQuery("INSERT INTO session_has_place (session_id, place_id)
VALUES ('$_GET[slct_session]', '$_GET[slct_place]')");
$db->query();
header("location:../modules/menu.php?ticket");
}
if (isset($_POST['jSlct'])) {
$id = json_decode(stripslashes($_POST["jSlct"]));
if ($id == 0)
{
$arr = 0;
echo json_encode($arr);
exit;
}
else
{
$db->setQuery("SELECT * FROM ticket WHERE id = '$id'");
$db->query();
$res = $db->loadRow();
89
echo json_encode($res);
exit;
}
}
Модуль actions.php
<?php
require_once "../includes/header.php";
require_once "../forms/menu.html";
if ($_GET['mode'] == 'add')
{
$title = 'Создание билета';
$db->setQuery("SELECT * FROM `ticket_type`");
$db->query();
$res_type = $db->loadRowList();
$user_id = $_SESSION['id'];
require_once "../forms/actions_create.html";
}
if ($_GET['mode'] == 'view')
{
$db->setQuery("SELECT t.*, tt.name as typeName FROM ticket as t
INNER JOIN ticket_type as tt ON t.type_id = tt.id
");
$db->query();
90
$res = $db->loadRowList();
require_once "../forms/actions.html";
}
if ($_GET['mode'] == 'month')
{
$title = 'Просмотр отчетности';
$db->setQuery("SELECT DISTINCT MONTH(date_buy) AS month FROM
user_has_ticket");
$db->query();
if ($db->getNumRows() != 0)
$res = $db->loadRowList();
require_once "../forms/action_month.html";
}
if ($_GET['mode'] == 'buy')
{
$title = 'Покупка билетов';
$db->setQuery("SELECT t.*, tt.name as typeName FROM ticket as t
INNER JOIN ticket_type as tt ON t.type_id = tt.id");
$db->query();
$res = $db->loadRowList();
require_once "../forms/action_buy.html";
}
91
Модуль film.php
<?php
require_once "../includes/header.php";
require_once "../forms/menu.html";
$title = 'Фильмы';
$db->setQuery("SELECT * FROM film");
$db->query();
$films = $db->loadRowList();
if (isset($_GET['film_id'])) {
$db->setQuery("SELECT * FROM film WHERE id = '$_GET[film_id]'");
$db->query();
$film = $db->loadRow();
$db->setQuery("SELECT c.*, u.login FROM comment c INNER JOIN user u ON u.id
= c.user_id
WHERE film_id = '$_GET[film_id]'");
$db->query();
$comments = $db->loadRowList();
}
require_once "../forms/film.html";
Модуль place.php
<?php
require_once "../includes/header.php";
require_once "../forms/menu.html";
92
$title = 'Места';
$db->setQuery("SELECT p.*, h.num hall_num FROM place p INNER JOIN hall h ON
h.id = p.hall_id");
$db->query();
$places = $db->loadRowList();
$db->setQuery("SELECT * FROM `hall`");
$db->query();
$halls = $db->loadRowList();
if ($_REQUEST['btn_view_hall']) {
$id = $_GET['slct_hall_view'];
if ($id) {
$db->setQuery("SELECT p.*, h.num hall_num FROM place p INNER JOIN hall h
ON h.id = p.hall_id WHERE h.id = '$id'");
$db->query();
$_places = $db->loadRowList();
}
}
require_once "../forms/place.html";
Модуль session.php
<?php
require_once "../includes/header.php";
require_once "../forms/menu.html";
93
$title = 'Сеансы';
$currTime = date('H:i:s', time());
$db->setQuery("SELECT s.*,h.num as hall_num, f.name as film_name FROM `session`
s
INNER JOIN film f ON f.id = s.film_id
INNER JOIN hall h ON h.id = s.hall_id
WHERE s.date_session >= CONCAT(CURDATE(), ' $currTime')");
$db->query();
$sessions = $db->loadRowList();
$db->setQuery("SELECT * FROM `hall`");
$db->query();
$halls = $db->loadRowList();
$db->setQuery("SELECT * FROM `film`");
$db->query();
$films = $db->loadRowList();
$user_id = $_SESSION['id'];
require_once "../forms/session.html";
Модуль handler_film.php
<?php
require_once "../includes/header.php";
session_start();
if ($_REQUEST['btn_create']) {
94
$uploaddir = '../images/';
$uploadfile = $uploaddir . basename($_FILES['new_img']['name']);
if (!move_uploaded_file($_FILES['new_img']['tmp_name'], $uploadfile)) {
echo "Возможная атака с помощью файловой загрузки!\n";
}
$img = $_FILES['new_img']['name'];
$db->setQuery("INSERT INTO film (name, producer, operator, country, actors, genre,
duration, img)
VALUES ('$_POST[new_name]', '$_POST[new_producer]', '$_POST[new_operator]',
'$_POST[new_country]', '$_POST[new_actors]', '$_POST[new_genre]',
'$_POST[new_duration]', '$img')");
$msg = '';
if (!$db->query()) {
if ($db->_errorNum == 1305) {
$msg = 'Такой фильм уже есть! Выбери другое название фильма.';
}
}
header("location:../modules/menu.php?film&msg=" . $msg);
}
if ($_REQUEST['btn_del']) {
$db->setQuery("DELETE FROM `film` WHERE id = '$_GET[slct_del]'");
$db->query();
header("location:../modules/menu.php?film");
95
}
if ($_REQUEST['btn_edit']) {
$db->setQuery("UPDATE `film` SET name='$_GET[edit_name]',
producer='$_GET[edit_producer]', operator='$_GET[edit_operator]',
actors='$_GET[edit_actors]', duration='$_GET[edit_duration]',
country='$_GET[edit_country]', genre='$_GET[edit_genre]' WHERE id =
'$_GET[slct_edit]'");
$db->query();
header("location:../modules/menu.php?film");
}
if (isset($_POST['jSlct'])) {
$id = json_decode(stripslashes($_POST["jSlct"]));
if ($id == 0)
{
$arr = 0;
echo json_encode($arr);
exit;
}
else
{
$db->setQuery("SELECT * FROM film WHERE id = '$id'");
$db->query();
$res = $db->loadRow();
echo json_encode($res);
exit;
}
96
}
if ($_REQUEST['btn_comment']) {
$db->setQuery("INSERT INTO comment (user_id, film_id, content)
VALUES ('$_SESSION[id]', '$_GET[film_id]', '$_GET[comment]')");
$db->query();
header("location:../modules/menu.php?film");
}
Модуль handler_hall.php
<?php
require_once "../includes/header.php";
session_start();
if ($_REQUEST['btn_create']) {
$db->setQuery("INSERT INTO hall (num, info, cnt_row, cnt_place)
VALUES ('$_GET[new_num]',
'$_GET[new_info]','$_GET[new_row]','$_GET[new_cnt]')");
$msg = '';
if (!$db->query()) {
if ($db->_errorNum == 1305) {
$msg = 'Зал с таким номером существует!';
}
}
header("location:../modules/menu.php?hall&msg=" . $msg);
}