I've found a pure php solution to my issue, so I have the following file:
<?php
$currentDate = date('Y-m-d');
if (isset($_SESSION["loggedin"]))
{
if (isset($_POST['save']))
{
if (!empty($_POST["navn"]) && !empty($_POST["besked"]))
{
if (strpos($_POST["besked"], "<") === false)
{
include 'connect.php';
$brugernavn = $_SESSION["navn"];
$query = "INSERT INTO beskeder (username) VALUES ('$brugernavn')";
$result = mysqli_query($conn, $query) or die(mysqli_error($conn));
if ($result){
$query = "SELECT id FROM `beskeder` WHERE username='$brugernavn'";
if ($stmt = mysqli_prepare($conn, $query)) {
mysqli_stmt_execute($stmt);
mysqli_stmt_bind_result($stmt, $id);
while (mysqli_stmt_fetch($stmt)) {
$_SESSION["id"] = $id;
}
mysqli_stmt_close($stmt);
/*<form action="admin.php" method="post">
<input type="hidden" name="id" value="'.$_SESSION["id"].'"/>
<button class="waves-effect waves-light btn" name="delete" type="submit" value="Delete">Slet besked</button>
</form>'*/
$myfile = fopen("formData.txt", "a") or die("Kunne ikke tilgå filen");
$txt = '
<div id="'.$_SESSION["id"].'">
<div class="col s12 m6" style="margin-left: 15%; margin-right: 15%;" >
<div class="card teal lighten-2 class">
<div class="card-content white-text">
<span class="card-title" style="text-align: center"><b> '.$_POST["besked"].'</b></span>
Navn: '.$_POST["navn"].' / Brugernavn: '.$_POST["brugernavn"].' <br/>'.$_POST["date"].'</p>
</div>
<div class="card-action">
<a href="#">E_mail: '.$_POST["e_mail"].'</a>
<a href="#">Status: '.$_POST["status"].'</a>
<a href="#">Tel.: '.$_POST["mobil"].'</a>
</div>
</div>
</div>
</div>';
fwrite($myfile, $txt);
fclose($myfile);
$myfile = fopen("adminData.txt", "a") or die("Kunne ikke tilgå filen");
$txt = '
<div id="'.$_SESSION["id"].'">
<div class="col s12 m6" style="margin-left: 15%; margin-right: 15%;" >
<div class="card teal lighten-2 class">
<div class="card-content white-text">
<span class="card-title" style="text-align: center"><b> '.$_POST["besked"].'</b></span>
Navn: '.$_POST["navn"].' / Brugernavn: '.$_POST["brugernavn"].' <br/>'.$_POST["date"].'</p>
</div>
<div class="card-action">
<a href="#">E_mail: '.$_POST["e_mail"].'</a>
<a href="#">Status: '.$_POST["status"].'</a>
<a href="#">Tel.: '.$_POST["mobil"].'</a>
</div>
</div>
</div>
<form action="admin.php" method="get">
<input type="hidden" name="id" value="'.$_SESSION["id"].'"/>
<button class="waves-effect waves-light btn" name="delete" type="submit" value="Delete">Slet besked</button>
</form>
</div>';
fwrite($myfile, $txt);
fclose($myfile);
echo '
<p>Besked sendt<br/>
For at se beskeden skal du trykke "Læs beskeder"<br/>
<a href="javascript:history.go(-1)"><button class="waves-effect waves-light btn" type="submit" value="getmeout">Tilbage</button></a></p>
';
}
}
}
else {
echo '<p>Er du dum?</p>';
}
}
elseif (empty($_POST["navn"]) || empty($_POST["besked"]))
{
echo '<p>Alle felter skal fyldes ud, prøv igen<br/>
Har du endnu ikke sat et Navn kan dette gøres under din profil<br/>
<a href="javascript:history.go(-1)"><button class="waves-effect waves-light btn" type="submit" value="getmeout">Tilbage</button></a></p></p>';
}
}
elseif (isset($_POST['read']))
{
if ($_SESSION["navn"] == 'admin')
{
$myfile = fopen("adminData.txt", "r") or die("Kunne ikke tilgå filen");
echo fread($myfile,filesize("adminData.txt"));
fclose($myfile);
}
else {
$myfile = fopen("formData.txt", "r") or die("Kunne ikke tilgå filen");
echo fread($myfile,filesize("formData.txt"));
fclose($myfile);
}
}
elseif (isset($_POST['delete']))
{
$myfile = fopen("formData.txt", "w") or die("Kunne ikke tilgå filen");
$txt = '';
fwrite($myfile, $txt);
fclose($myfile);
$myfile = fopen("adminData.txt", "w") or die("Kunne ikke tilgå filen");
$txt = '';
fwrite($myfile, $txt);
fclose($myfile);
echo '<p>Filen blev slettet
For at se beskeden skal du trykke "læs beskeder<br/>
<a href="javascript:history.go(-1)"><button class="waves-effect waves-light btn" type="submit" value="getmeout">Tilbage</button></a></p></p>';
}
}
else {
echo'<p>Du skal være logget ind for at se denne side</p>
<br/>
<a href="javascript:history.go(-1)"><button class="waves-effect waves-light btn" name="return">Prøv igen</button></a>';
}
echo '</div>';
echo '</div>';
?>
This is the page which completes the button presses from the former page, making it possible if you are logged in as admin to acces the adminData and have the delete button, and if you are logged in normally you won't see it. If the admin decides to delete a post by using the id, they get sent to this page
if ($_SESSION["navn"] == 'admin')
{
if (!empty($_GET["id"]))
{
$file = 'formData.txt';
$lines = file($file);
$all_lines = implode('',$lines);
$entry = str_replace('<div id="'.$_GET["id"].'">','<div id="'.$_GET["id"].'" style="display: none;">',$all_lines);
$fp = fopen($file,'w');
$fw = fwrite($fp,$entry);
fclose($fp);
$file = 'adminData.txt';
$lines = file($file);
$all_lines = implode('',$lines);
$entry = str_replace('<div id="'.$_GET["id"].'">','<div id="'.$_GET["id"].'" style="display: none;">',$all_lines);
$fp = fopen($file,'w');
$fw = fwrite($fp,$entry);
fclose($fp);
echo '<p>Beskeden blev slettet</p>';
}
echo '
<form action="beskeder.php" method="post">
<button class="waves-effect waves-light btn" name="delete" type="submit" value="Delete">Slet alle beskeder</button>
</form>
';
}
Its quite a waste of ressources but does the job simply.
Thanks for your suggestions!
