From a121e53503026a96e62c196a641b995ef4c5ff94 Mon Sep 17 00:00:00 2001
From: Patryk Hegenberg <hegenberg@tixeltec.com>
Date: Tue, 24 Jan 2023 21:14:11 +0100
Subject: [PATCH] changed config.php and added delete function for
 administrator

---
 config.php                 | 4 +++-
 controllers/delete.php     | 4 +---
 controllers/deleteUser.php | 9 +++++++++
 controllers/game.php       | 4 +---
 controllers/login.php      | 4 +---
 controllers/profile.php    | 4 +---
 controllers/register.php   | 4 +---
 controllers/updateData.php | 4 +---
 routes.php                 | 3 ++-
 views/profile.view.php     | 1 +
 10 files changed, 21 insertions(+), 20 deletions(-)
 create mode 100644 controllers/deleteUser.php

diff --git a/config.php b/config.php
index dbc0544..6dd0087 100644
--- a/config.php
+++ b/config.php
@@ -6,5 +6,7 @@ return [
     'port' => 3306,
     'dbname' => 'MatheApp',
     'charset' => 'utf8mb4'
-    ]
+  ],
+  'username' => 'MatheApp',
+  'password' => 'password'
 ];
diff --git a/controllers/delete.php b/controllers/delete.php
index 03ba3bb..02ff004 100644
--- a/controllers/delete.php
+++ b/controllers/delete.php
@@ -1,9 +1,7 @@
 <?php
 $heading = "Delete";
-$username = "MatheApp";
-$password = "password";
 $config = require('config.php');
-$db = new Database($config['database'], $username, $password);
+$db = new Database($config['database'], $config['username'], $config['password']);
 
 session_start();
 $db->delete($_SESSION['username']);
diff --git a/controllers/deleteUser.php b/controllers/deleteUser.php
new file mode 100644
index 0000000..db36421
--- /dev/null
+++ b/controllers/deleteUser.php
@@ -0,0 +1,9 @@
+<?php
+$config = require('config.php');
+$db = new Database($config['database'], $config['username'], $config['password']);
+
+session_start();
+if (isset($_POST['delete'])){
+$db->delete($_POST['username']);
+header("Location: /profile");
+}
diff --git a/controllers/game.php b/controllers/game.php
index fc2d801..ed5f9a0 100644
--- a/controllers/game.php
+++ b/controllers/game.php
@@ -1,9 +1,7 @@
 <?php
   $heading = "Game";
-  $username = 'MatheApp';
-  $password = 'password';
   $config = require('config.php');
-  $db = new Database($config['database'], $username, $password);
+  $db = new Database($config['database'], $config['username'], $config['password']);
   session_start();
     if(!isset($_SESSION["username"])){
     header("Location: /");
diff --git a/controllers/login.php b/controllers/login.php
index 1640468..56fda45 100644
--- a/controllers/login.php
+++ b/controllers/login.php
@@ -1,9 +1,7 @@
 <?php
 $heading = "Login";
-$username = "MatheApp";
-$password = "password";
 $config = require('config.php');
-$db = new Database($config['database'], $username, $password);
+$db = new Database($config['database'], $config['username'], $config['password']);
 
 if (isset($_POST["submit"])) {
   $db->login([$_POST["username"], $_POST["password"]]);
diff --git a/controllers/profile.php b/controllers/profile.php
index 9448383..56cf706 100644
--- a/controllers/profile.php
+++ b/controllers/profile.php
@@ -1,9 +1,7 @@
 <?php
 $heading = "profile";
-$username = "MatheApp";
-$password = "password";
 $config = require('config.php');
-$db = new Database($config['database'], $username, $password);
+$db = new Database($config['database'], $config['username'], $config['password']);
 
 session_start();
 if(!isset($_SESSION["username"])){
diff --git a/controllers/register.php b/controllers/register.php
index f2ab550..661afa9 100644
--- a/controllers/register.php
+++ b/controllers/register.php
@@ -1,10 +1,8 @@
 <?php
   $heading = "Register";
   require 'Validator.php';
-  $username = 'MatheApp';
-  $password = 'password';
   $config = require('config.php');
-  $db = new Database($config['database'], $username, $password);
+  $db = new Database($config['database'], $config['username'], $config['password']);
   
 if (isset($_POST["submit"])) {
   $db->register($_POST);
diff --git a/controllers/updateData.php b/controllers/updateData.php
index 30298ed..1c0b0c8 100644
--- a/controllers/updateData.php
+++ b/controllers/updateData.php
@@ -1,8 +1,6 @@
 <?php
-  $username = 'MatheApp';
-  $password = 'password';
   $config = require('config.php');
-  $db = new Database($config['database'], $username, $password);
+  $db = new Database($config['database'], $config['username'], $config['password']);
   $data = json_decode(file_get_contents("php://input"), true);
   $db->query("UPDATE user SET level= :level, xp= :xp, coins= :coins WHERE username = :user", [
   "level" => $data["level"],
diff --git a/routes.php b/routes.php
index 7f75a56..d57f196 100644
--- a/routes.php
+++ b/routes.php
@@ -10,5 +10,6 @@ return[
     '/profile' => 'controllers/profile.php',
     '/logout' => 'controllers/logout.php',
     '/delete' => 'controllers/delete.php',
-    '/updateData' => 'controllers/updateData.php'
+    '/updateData' => 'controllers/updateData.php',
+    '/deleteUser' => 'controllers/deleteUser.php'
 ];
diff --git a/views/profile.view.php b/views/profile.view.php
index 174334b..a96221a 100644
--- a/views/profile.view.php
+++ b/views/profile.view.php
@@ -62,6 +62,7 @@
   echo "<th>". $user['username'] ."</th>"; 
   echo "<th>". $user['email'] ."</th>";
   echo "<th>". $user['level'] ."</th>";
+  echo '<th><form method="POST" action="/deleteUser"><input name="username" type="hidden" value="'.$user['username'].'"><input type="submit" name="delete" value="Loeschen"></form></th>';
   echo "</tr>";
 
 }