Updated to include pure, major major major overhaul

README.md

@@ -4,5 +4,6 @@ Yet Another PHP Time Card
 
 # Credits:
 Default icon pack - Oliver Charavel "Sekkyumu" at http://sekkyumu.deviantart.com/ (http://sekkyumu.deviantart.com/art/Developpers-Icons-63052312)
-
+Pure CSS - http://purecss.io/
+PHPass - http://www.openwall.com/phpass/
 

config.inc.php

@@ -0,0 +1,22 @@
+<?php
+  // User session variables
+  $yaptc_dirpath = '/usr/share/nginx/html/yaptc/'; // absolute path to yaptc
+  $yaptc_webpath = 'http://localhost/yaptc/'; // where is the web url for the root of this app?
+  $yaptc_appname = 'Timecard System'; // name to display in title bar and other headers
+  $yaptc_company = 'Point808'; // name of your company
+  $sql = new PDO('mysql:host=localhost;dbname=yaptc;', 'yaptc', 'yaptcpassw0rd');
+
+  // Other variables probably won't change
+  $_SESSION['yaptc_dir'] = $yaptc_dirpath; 
+  $_SESSION['yaptc_url'] = $yaptc_webpath;
+  $yaptc_inc = $yaptc_dirpath . 'includes/';
+  $yaptc_incweb = $yaptc_webpath . 'includes/';
+  $yaptc_lib = $yaptc_dirpath . 'lib/';
+
+
+  // Has the app been configured (i.e. does a config.inc.php file exist?)
+  if (!file_exists($_SESSION['yaptc_dir'] . 'config.inc.php'))
+  echo "app has not been configured.  please creat a config.inc.php file in your root dir";
+
+?>
+

config.inc.php~

@@ -0,0 +1,22 @@
+<?php
+  // User session variables
+  $yaptc_dirpath = '/usr/share/nginx/html/yaptc/'; // absolute path to yaptc
+  $yaptc_webpath = 'http://localhost/yaptc/'; // where is the web url for the root of this app?
+  $yaptc_appname = 'Timecard System'; // name to display in title bar and other headers
+  $yaptc_company = 'Point808'; // name of your company
+  $sql = new PDO('mysql:host=localhost;dbname=yaptc;', 'yaptc', 'yaptcpassw0rd');
+
+  // Other variables probably won't change
+  $_SESSION['yaptc_dir'] = $yaptc_dirpath; 
+  $_SESSION['yaptc_url'] = $yaptc_webpath;
+  $yaptc_inc = $yaptc_dirpath . 'includes/';
+  $yaptc_incweb = $yaptc_webpath . 'includes/';
+
+
+
+  // Has the app been configured (i.e. does a config.inc.php file exist?)
+  if (!file_exists($_SESSION['yaptc_dir'] . 'config.inc.php'))
+  echo "app has not been configured.  please creat a config.inc.php file in your root dir";
+
+?>
+

config.php

@@ -1,11 +0,0 @@
-<?php
-########## MySql details (Replace with yours) #############
-$username = "root"; //mysql username
-$password = "AdmiN!04%sui"; //mysql password
-$hostname = "localhost"; //hostname
-$databasename = "yaptc"; //databasename
-
-//connect to database
-$mysqli = new mysqli($hostname, $username, $password, $databasename);
-
-?>

dashboard.php

@@ -0,0 +1,62 @@
+<?php
+  session_start();
+
+  // Load config...
+  require_once("config.inc.php");
+
+  // Page title mod
+  $yaptc_pagename = 'Dashboard';
+
+  // Load header
+  require_once($yaptc_inc . "header.inc.php");
+
+  // Load menu
+  require_once($yaptc_inc . "menu.inc.php");
+
+  //************************ CONTENT START ************************
+
+  // If user is not logged in, give error and option to go to login
+  if (!isset($_SESSION['user_id']) || !isset($_SESSION['signature']) || !isset($_SESSION['loggedIn']) || $_SESSION['loggedIn'] != true || $_SESSION['signature'] != md5($_SESSION['user_id'] . $_SERVER['HTTP_USER_AGENT']))
+  {
+    session_destroy();
+
+    echo "not logged in!!!";
+    exit();
+  }
+  else
+  {
+
+// content for logged-in users here
+
+    $query = "SELECT users.id, users.firstname, users.lastname, , users.created, users.username, users.firstname, users.lastname, users.email, usertypes.typename AS usertype
+              FROM users, punches, punchtypes
+              WHERE users.id = :id";
+      $stmt = $sql->prepare($query);
+      $stmt->execute(array(':id' => $_SESSION['user_id']));
+      $user = $stmt->fetchObject();
+    echo 'You may make changes to your user profile below if you wish.  Updates will take effect immediately on pressing "Save".';
+    echo '<form class="pure-form" action="profile.php" method="post">';
+    echo '<fieldset class="pure-group" id="userinfo">';
+    echo '<label for="username">Username</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->username\" value=\"$user->username\" id=\"username\" name=\"username\" readonly>";
+    echo '<label for="created">Created</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->created\" value=\"$user->created\" id=\"created\" name=\"created\" readonly>";
+    echo '<label for="usertype">User Type</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->usertype\" value=\"$user->usertype\" id=\"usertype\" name=\"usertype\" readonly>";
+    echo '<label for="firstname">First Name</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->firstname\" id=\"firstname\" name=\"firstname\">";
+    echo '<label for="lastname">Last Name</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->lastname\" id=\"lastname\" name=\"lastname\">";
+    echo '<label for="username">Email Address</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->email\" id=\"username\" name=\"username\">";
+    echo '</fieldset>';
+    echo '<button type="submit" class="pure-button pure-input-1-2 pure-button-primary" value="Update">Save Changes</button>';
+    echo '</form>';
+
+// end logged-in content
+  }
+
+  //************************ CONTENT END ************************
+  // Load footer
+  require_once($yaptc_inc . "footer.inc.php");
+?>

dashboard.php~

@@ -0,0 +1,62 @@
+<?php
+  session_start();
+
+  // Load config...
+  require_once("config.inc.php");
+
+  // Page title mod
+  $yaptc_pagename = 'Dashboard';
+
+  // Load header
+  require_once($yaptc_inc . "header.inc.php");
+
+  // Load menu
+  require_once($yaptc_inc . "menu.inc.php");
+
+  //************************ CONTENT START ************************
+
+  // If user is not logged in, give error and option to go to login
+  if (!isset($_SESSION['user_id']) || !isset($_SESSION['signature']) || !isset($_SESSION['loggedIn']) || $_SESSION['loggedIn'] != true || $_SESSION['signature'] != md5($_SESSION['user_id'] . $_SERVER['HTTP_USER_AGENT']))
+  {
+    session_destroy();
+
+    echo "not logged in!!!";
+    exit();
+  }
+  else
+  {
+
+// content for logged-in users here
+
+    $query = "SELECT users.id, users.password, users.created, users.username, users.firstname, users.lastname, users.email, usertypes.typename AS usertype
+              FROM users, usertypes
+              WHERE users.id = :id";
+      $stmt = $sql->prepare($query);
+      $stmt->execute(array(':id' => $_SESSION['user_id']));
+      $user = $stmt->fetchObject();
+    echo 'You may make changes to your user profile below if you wish.  Updates will take effect immediately on pressing "Save".';
+    echo '<form class="pure-form" action="profile.php" method="post">';
+    echo '<fieldset class="pure-group" id="userinfo">';
+    echo '<label for="username">Username</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->username\" value=\"$user->username\" id=\"username\" name=\"username\" readonly>";
+    echo '<label for="created">Created</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->created\" value=\"$user->created\" id=\"created\" name=\"created\" readonly>";
+    echo '<label for="usertype">User Type</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->usertype\" value=\"$user->usertype\" id=\"usertype\" name=\"usertype\" readonly>";
+    echo '<label for="firstname">First Name</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->firstname\" id=\"firstname\" name=\"firstname\">";
+    echo '<label for="lastname">Last Name</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->lastname\" id=\"lastname\" name=\"lastname\">";
+    echo '<label for="username">Email Address</label>';
+    echo "<input type=\"text\" class=\"pure-input-1-2\" placeholder=\"$user->email\" id=\"username\" name=\"username\">";
+    echo '</fieldset>';
+    echo '<button type="submit" class="pure-button pure-input-1-2 pure-button-primary" value="Update">Save Changes</button>';
+    echo '</form>';
+
+// end logged-in content
+  }
+
+  //************************ CONTENT END ************************
+  // Load footer
+  require_once($yaptc_inc . "footer.inc.php");
+?>

db.php

@@ -1,207 +0,0 @@
-<html>
-
-<head>
-
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-
-<title>Ajax Add/Delete a Record with jQuery Fade In/Fade Out</title>
-
-<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js"></script>
-
-
-
-<script type="text/javascript">
-
-$(document).ready(function() {
-
-
-
-	//##### send add record Ajax request to response.php #########
-
-	$("#FormSubmit").click(function (e) {
-
-			e.preventDefault();
-
-			if($("#contentText").val()==='')
-
-			{
-
-				alert("Please enter some text!");
-
-				return false;
-
-			}
-
-			
-
-			$("#FormSubmit").hide(); //hide submit button
-
-			$("#LoadingImage").show(); //show loading image
-
-			
-
-		 	var myData = 'content_txt='+ $("#contentText").val(); //build a post data structure
-
-			jQuery.ajax({
-
-			type: "POST", // HTTP method POST or GET
-
-			url: "response.php", //Where to make Ajax calls
-
-			dataType:"text", // Data type, HTML, json etc.
-
-			data:myData, //Form variables
-
-			success:function(response){
-
-				$("#responds").append(response);
-
-				$("#contentText").val(''); //empty text field on successful
-
-				$("#FormSubmit").show(); //show submit button
-
-				$("#LoadingImage").hide(); //hide loading image
-
-
-
-			},
-
-			error:function (xhr, ajaxOptions, thrownError){
-
-				$("#FormSubmit").show(); //show submit button
-
-				$("#LoadingImage").hide(); //hide loading image
-
-				alert(thrownError);
-
-			}
-
-			});
-
-	});
-
-
-
-	//##### Send delete Ajax request to response.php #########
-
-	$("body").on("click", "#responds .del_button", function(e) {
-
-		 e.preventDefault();
-
-		 var clickedID = this.id.split('-'); //Split ID string (Split works as PHP explode)
-
-		 var DbNumberID = clickedID[1]; //and get number from array
-
-		 var myData = 'recordToDelete='+ DbNumberID; //build a post data structure
-
-		 
-
-		$('#item_'+DbNumberID).addClass( "sel" ); //change background of this element by adding class
-
-		$(this).hide(); //hide currently clicked delete button
-
-		 
-
-			jQuery.ajax({
-
-			type: "POST", // HTTP method POST or GET
-
-			url: "response.php", //Where to make Ajax calls
-
-			dataType:"text", // Data type, HTML, json etc.
-
-			data:myData, //Form variables
-
-			success:function(response){
-
-				//on success, hide  element user wants to delete.
-
-				$('#item_'+DbNumberID).fadeOut();
-
-			},
-
-			error:function (xhr, ajaxOptions, thrownError){
-
-				//On error, we alert user
-
-				alert(thrownError);
-
-			}
-
-			});
-
-	});
-
-
-
-});
-
-</script>
-
-<link href="css/style.css" rel="stylesheet" type="text/css" />
-
-</head>
-
-<body>
-
-<div class="content_wrapper">
-
-<ul id="responds">
-
-<?php
-
-//include db configuration file
-
-include_once("config.php");
-
-
-
-//MySQL query
-
-$results = $mysqli->query("SELECT id,name FROM yaptc_punchtypes");
-
-//get all records from add_delete_record table
-
-while($row = $results->fetch_assoc())
-
-{
-
-  echo '<li id="item_'.$row["id"].'">';
-
-  echo '<div class="del_wrapper"><a href="#" class="del_button" id="del-'.$row["id"].'">';
-
-  echo '<img src="images/icon_del.gif" border="0" />';
-
-  echo '</a></div>';
-
-  echo $row["name"].'</li>';
-
-}
-
-
-
-//close db connection
-
-$mysqli->close();
-
-?>
-
-</ul>
-
-    <div class="form_style">
-
-    <textarea name="content_txt" id="contentText" cols="45" rows="5" placeholder="Enter some text"></textarea>
-
-    <button id="FormSubmit">Add record</button>
-
-    <img src="images/loading.gif" id="LoadingImage" style="display:none" />
-
-    </div>
-
-</div>
-
-
-
-</body>
-
-</html>