CIM69 - Car database

api/v1/get/cartests.php

@@ -0,0 +1,115 @@
+<?php
+defined($security_key) or exit;
+
+//------------------------------------------
+// Products
+//------------------------------------------
+
+//Connect to DB
+$pdo = dbConnect($dbname);
+
+//NEW ARRAY
+$criterias = [];   
+$whereclause = 'WHERE type="cartest"';
+$clause = '';
+
+ //FILTER FOR GROUPBY FILTERS on CAR
+ $filter1 = '"CarBrand": "';
+ $filter2 = '"CarType": "';
+ $filter3 = '"CarVIN": "';
+
+ $car_brand = 'SUBSTRING_INDEX(SUBSTRING_INDEX(description, "'.$filter1.'", -1),"'.$filter2.'",1)';
+ $car_type = 'SUBSTRING_INDEX(SUBSTRING_INDEX(description, "'.$filter2.'", -1),"'.$filter3.'",1)';
+
+//Check for $_GET variables and build up clause
+if(isset($get_content) && $get_content!=''){    
+    //GET VARIABLES FROM URL
+    $requests = explode("&", $get_content);     
+    //Check for keys and values
+    foreach ($requests as $y){
+        $v = explode("=", $y);
+        //INCLUDE VARIABLES IN ARRAY
+        $criterias[$v[0]] = $v[1]; 
+    
+        if ($v[0] == 'page' || $v[0] =='p' || $v[0] =='totals' || $v[0] =='list'|| $v[0] =='success_msg'){
+        //do nothing
+        } 
+        elseif ($v[0] == 'search') {
+        //build up search
+        $clause .= ' AND '.$car_brand.' like :'.$v[0]; 
+        }
+        else {//create clause
+        $clause .= ' AND '.$v[0].' = :'.$v[0];
+        }
+    }
+    if ($whereclause == '' && $clause !=''){
+        $whereclause = 'WHERE '.substr($clause, 4);
+    } else {
+        $whereclause .= $clause;
+    }
+} 
+//Define Query
+if(isset($criterias['totals']) && $criterias['totals'] ==''){
+//Request for total rows
+    $sql = 'SELECT count(*) as count FROM history '.$whereclause;
+} 
+elseif(isset($criterias['list']) && $criterias['list'] ==''){
+    //Request for total rows
+        $sql = 'SELECT distinct('.$car_brand.') FROM history '.$whereclause;
+    } 
+else {
+    //SQL for Paging 
+    $sql = "SELECT *, SUBSTRING_INDEX(SUBSTRING_INDEX(description, '$filter1', -1),'$filter2',1) as carbrand from history $whereclause group by SUBSTRING_INDEX(SUBSTRING_INDEX(description, '$filter1', -1),'$filter2',1), SUBSTRING_INDEX(SUBSTRING_INDEX(description, '$filter2', -1),'$filter3',1) ORDER BY carbrand DESC LIMIT :page,:num_products";
+}
+
+$stmt = $pdo->prepare($sql);
+
+//Bind to query
+if (str_contains($whereclause, ':condition')){
+    $stmt->bindValue('condition', $condition, PDO::PARAM_STR);
+}
+
+if (!empty($criterias)){
+    foreach ($criterias as $key => $value){
+        $key_condition = ':'.$key;
+        if (str_contains($whereclause, $key_condition)){
+            if ($key == 'search'){
+                $search_value = '%'.$value.'%';
+                $stmt->bindValue($key, $search_value, PDO::PARAM_STR);
+            }
+            else {
+                $stmt->bindValue($key, $value, PDO::PARAM_STR);
+            }
+        }
+    }
+}
+
+//Add paging details
+if(isset($criterias['totals']) && $criterias['totals']==''){
+    $stmt->execute();
+    $messages = $stmt->fetch();
+    $messages = $messages[0];
+}
+elseif(isset($criterias['list']) && $criterias['list']==''){
+   //Excute Query
+   $stmt->execute();
+   //Get results
+   $messages = $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+else {
+    $current_page = isset($criterias['p']) && is_numeric($criterias['p']) ? (int)$criterias['p'] : 1;
+    $stmt->bindValue('page', ($current_page - 1) * $page_rows_cartest, PDO::PARAM_INT);
+    $stmt->bindValue('num_products', $page_rows_cartest, PDO::PARAM_INT);
+
+    //Excute Query
+    $stmt->execute();
+    //Get results
+    $messages = $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+//Encrypt results
+$messages = generate_payload($messages);
+//Send results
+echo $messages;
+
+?>

api/v1/get/equipments.php

@@ -109,7 +109,7 @@ if(isset($get_content) && $get_content!=''){
 } 
 if (isset($criterias['download']) && $criterias['download'] ==''){
 //Request for download
-$sql = 'SELECT e.rowID as equipmentID, e.productrowid, e.serialnumber, e.status, e.created, e.hw_version, e.sw_version, e.accounthierarchy, e.service_date, e.warranty_date, p.productcode, p.productname from equipment e LEFT JOIN products p ON e.productrowid = p.rowID '.$whereclause.'  ORDER BY equipmentID';
+$sql = 'SELECT e.rowID as equipmentID, e.*, p.productcode, p.productname from equipment e LEFT JOIN products p ON e.productrowid = p.rowID '.$whereclause.'  ORDER BY equipmentID';
 }
 elseif (isset($criterias['totals']) && $criterias['totals'] =='' && !isset($criterias['type'])){
 //Request for total rows

api/v1/post/application.php

@@ -312,7 +312,7 @@ switch ($action) {
     // --------------------------------------------
     // Send generic account to user for software updates
     // --------------------------------------------
-    if ($firmware_account_send == 2){
+    if ($firmware_account_send == 1){
         include_once './assets/mail/email_template_software.php';
         send_mail($post_content['email'],$subject,$message,'','');
     }

api/v1/post/equipments.php

@@ -107,7 +107,7 @@ else {
 foreach ($account as $key => $value){
 	if ($key != "section"){
         //CHECK for id- pattern
-		if (preg_match('/\-.*/',$value)){
+		if (empty($value) ||$value == '' || preg_match('/\-.*/',$value)){
 			//Do Nothing
 		}
 		else {