index.php

<?php

session_start();
require "core/config.php";

// User Create
if (isset($_POST["create-user"])) {
    $username = strtolower($_POST["username"]);
    $email = $_POST["email"];
    $name = $_POST["name"];

    $incorrect_chars = ['(', ')', '{', '}', '[', ']', '<', '>', '|', '/', '\\', '`', '~', '!', '?', '@', '#', '$', '%', '^', '&', '*', '-', '+', '=', ',', '.', 'username', 'admin', 'user', 'account'];
    foreach ($incorrect_chars as $char) {
        if (strpos($username, $char)) {
            $_SESSION["message"] = "Incorrect username";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }
    }

    try {
        $user_query = $connection->query("SELECT username FROM user WHERE username = '$username'");
        if ($user_query->num_rows >= 1) {
            $_SESSION["message"] = "This username already exists";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }
        
        $connection->query("INSERT INTO user (username, email, name) VALUES ('$username', '$email', '$name')");

        $_SESSION["message"] = "User was created successfully";
        $_SESSION["message-type"] = "primary";

        header("location: index.php");
        exit();
    } catch (Exception $e) {
        $_SESSION["message"] = "Something went wrong";
        $_SESSION["message-type"] = "warning";

        header("location: index.php");
        exit();
    }
}


// Post Create
if (isset($_POST["create-post"])) {
    $author = $_POST["author"];
    $title = $_POST["title"];
    $body = $_POST["body"];
    
    try {
        $user_query = $connection->query("SELECT username FROM user WHERE username = '$author'");
        $user = mysqli_fetch_array($user_query);

        if ($user) {
            $connection->query("INSERT INTO post (author, title, body) VALUES ('$author', '$title', '$body')");

            $_SESSION["message"] = "Post was created successfully";
            $_SESSION["message-type"] = "primary";

            header("location: index.php");
            exit();
        } else {
            $_SESSION["message"] = "This author does not exist";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }
    } catch (Exception $e) {
        $_SESSION["message"] = "Something went wrong";
        $_SESSION["message-type"] = "warning";

        header("location: index.php");
        exit();
    }
}


// Relation Create
if (isset($_POST["create-relation"])) {
    $from_user = $_POST["from_user"];
    $to_user = $_POST["to_user"];

    try {
        $from_user_query = $connection->query("SELECT username FROM user WHERE username = '$from_user'");
        $to_user_query = $connection->query("SELECT username FROM user WHERE username = '$to_user'");

        if ($from_user_query->num_rows < 1) {
            $_SESSION["message"] = "The `From User` does not exist";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }

        if ($to_user_query->num_rows < 1) {
            $_SESSION["message"] = "The `To User` does not exist";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }

        $relation_query = $connection->query("SELECT * FROM relation WHERE from_user = '$from_user' AND to_user = '$to_user'");
        if ($relation_query->num_rows > 0) {
            $_SESSION["message"] = "This relation already exists";
            $_SESSION["message-type"] = "danger";

            header("location: index.php");
            exit();
        }

        $connection->query("INSERT INTO relation (from_user, to_user) VALUES ('$from_user', '$to_user')");

        $_SESSION["message"] = "Relation was created successfully";
        $_SESSION["message-type"] = "primary";

        header("location: index.php");
        exit();
    } catch (Exception $e) {
        $_SESSION["message"] = "Something went wrong";
        $_SESSION["message-type"] = "warning";

        header("location: index.php");
        exit();
    }
}


// Users List
$users_query = $connection->query("SELECT * FROM user ORDER BY created DESC");
$users = mysqli_fetch_all($users_query, MYSQLI_ASSOC);

// Posts List
$posts_query = $connection->query("SELECT * FROM post ORDER BY created DESC");
$posts = mysqli_fetch_all($posts_query, MYSQLI_ASSOC);

// Relations List
$relations_query = $connection->query("SELECT * FROM relation ORDER BY created DESC");
$relations = mysqli_fetch_all($relations_query, MYSQLI_ASSOC);

?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>PHP - CRUD</title>
    <link rel="stylesheet" href="css/bootstrap.css">
    <link rel="stylesheet" href="css/style.css">
    <style>
        body {
            background-color:rgb(213, 217, 220);
        }
    </style>
</head>
<body>
    <div class="content">
        <header>
            <h2>PHP CRUD APPLICATION</h2>
            <h4>made by <span class="text-light">armin_emami</span></h4>
        </header>
        
        <br>

        <?php include 'includes/message.php' ?>

        <!-- User Section -->
        <div class="user-group">
            <!-- Create User Form -->
            <h2>~User Section</h2>
            <form action="" method="POST">
                <input type="text" name="username" placeholder="Username" maxlength="200" class="form-control" required>
                <input type="email" name="email" placeholder="Email" maxlength="200" class="form-control" required>
                <input type="text" name="name" placeholder="Name" maxlength="200" class="form-control" required>
                <input type="submit" value="Create User" name="create-user" class="btn btn-primary">
            </form>
            <br>

            <!-- Users Table -->
            <table class="table">
                <thead>
                    <tr>
                        <th>Username</th>
                        <th>Email</th>
                        <th>Name</th>
                        <th>Actions</th>
                    </tr>
                </thead>
                <?php if (!empty($users)): ?>
                <?php foreach ($users as $user): ?>
                <tbody>
                    <tr>
                        <th><?php echo $user["username"]; ?></th>
                        <th><?php echo $user["email"]; ?></th>
                        <th><?php echo $user["name"]; ?></th>
                        <th class="actions">
                            <a href="<?php echo ($URLS['user_edit'] . $user['username']); ?>" class="text-primary">Edit</a>
                            <a href="<?php echo ($URLS['user_delete'] . $user['username']); ?>" class="text-danger">Delete</a>
                        </th>
                    </tr>
                </tbody>
                <?php endforeach; ?>
                <?php endif; ?>
            </table>
        </div>

        <br><br>
        
        <!-- Post Section -->
        <div class="post-group">
            <!-- Create Post Form -->
            <h2>~Post Section</h2>
            <form action="" method="POST">
                <input type="text" name="author" placeholder="Author" maxlength="200" class="form-control" required>
                <input type="text" name="title" placeholder="Title" maxlength="50" class="form-control" required>
                <textarea name="body" rows="5" placeholder="Body" class="form-control" required></textarea>
                <input type="submit" value="Create Post" name="create-post" class="btn btn-primary">
            </form>
            <br>

            <!-- Posts Table -->
            <table class="table">
                <thead>
                    <tr>
                        <th>Author</th>
                        <th>Title</th>
                        <th>Created at</th>
                        <th>Actions</th>
                    </tr>
                </thead>
                <?php if (!empty($posts)): ?>
                <?php foreach ($posts as $post): ?>
                <tbody>
                    <tr>
                        <th><?php echo $post["author"]; ?></th>
                        <th><?php echo $post["title"]; ?></th>
                        <th><?php echo $post["created"]; ?></th>
                        <th class="actions">
                            <a href="<?php echo ($URLS['post_view'] . $post['ID']); ?>" class="text-primary">View</a>
                            <a href="<?php echo ($URLS['post_edit'] . $post['ID']); ?>" class="text-primary">Edit</a>
                            <a href="<?php echo ($URLS['post_delete'] . $post['ID']); ?>" class="text-danger">Delete</a>
                        </th>
                    </tr>
                </tbody>
                <?php endforeach; ?>
                <?php endif; ?>
            </table>
        </div>

        <br><br>

        <!-- Relation Section -->
        <div class="relation-group">
            <!-- Create Relation Form -->
            <h2>~Relation Section</h2>
            <form action="" method="POST">
                <input type="text" name="from_user" placeholder="From User" maxlength="200" class="form-control" required>
                <input type="text" name="to_user" placeholder="To User" maxlength="50" class="form-control" required>
                <input type="submit" value="Create Relation" name="create-relation" class="btn btn-primary">
            </form>
            <br>

            <!-- Relation Table -->
            <table class="table">
                <thead>
                    <tr>
                        <th>From User</th>
                        <th>To User</th>
                        <th>Actions</th>
                    </tr>
                </thead>
                <?php if (!empty($relations)): ?>
                <?php foreach ($relations as $relation): ?>
                <tbody>
                    <tr>
                        <th><?php echo $relation["from_user"]; ?></th>
                        <th><?php echo $relation["to_user"]; ?></th>
                        <th class="actions">
                            <a href="<?php echo ($URLS['relation_delete'] . $relation['ID']); ?>" class="text-danger">Delete</a>
                        </th>
                    </tr>
                </tbody>
                <?php endforeach; ?>
                <?php endif; ?>
            </table>
        </div>
    </div>
    
    <script src="js/script.js"></script>
</body>
</html>