William/WMU-CS4430-Project
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'LMcInnis-master-patch-94962' into 'master'

Browse Source 
fixed it

See merge request williammiceli-educational/CS4430-Project!2
This commit is contained in:
Logan McInnis
2019-12-04 20:17:37 -05:00
parent 6980fa65d2 e5d5a7b8f4
commit 49d9099e2f
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
var/www/findFriend.php
View File

@@ -23,7 +23,8 @@
$sql_from = "FROM contacts"; $sql_from = "FROM contacts";
$sql_where = "WHERE username = '".$_POST['friend']."'"; $sql_where = "WHERE username = '".$_POST['friend']."'";
$sql_statement = $sql_select." ".$sql_from." ".$sql_where.""; $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
$result = $db_connection->query($sql_statement); $result2 = $db_connection->query($sql_statement);
$result = $result2->fetchAll();
if(mysqli_num_rows($result) == 0) if(mysqli_num_rows($result) == 0)
echo "username doesn't exist"; echo "username doesn't exist";
else else
@@ -32,7 +33,8 @@
$sql_from = "FROM friendList"; $sql_from = "FROM friendList";
$sql_where = "WHERE username = '".$_SESSION["loggedInUser"]."' and friend = '".$_POST['friend']."'"; $sql_where = "WHERE username = '".$_SESSION["loggedInUser"]."' and friend = '".$_POST['friend']."'";
$sql_statement = $sql_select." ".$sql_from." ".$sql_where.""; $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
$result = $db_connection->query($sql_statement); $result2 = $db_connection->query($sql_statement);
$result = $result2->fetchAll();
if(mysqli_num_rows($result) == 1) if(mysqli_num_rows($result) == 1)
echo "you already sent a request"; echo "you already sent a request";
else else
@@ -41,7 +43,8 @@
$sql_from = "FROM friendList"; $sql_from = "FROM friendList";
$sql_where = "WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'"; $sql_where = "WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";
$sql_statement = $sql_select." ".$sql_from." ".$sql_where.""; $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
$result = $db_connection->query($sql_statement); $result2 = $db_connection->query($sql_statement);
$result = $result2->fetchAll();
if(mysqli_num_rows($result) == 1) if(mysqli_num_rows($result) == 1)
{ {
$sql_statement = "UPDATE friendList SET confirm = 'true' WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'"; $sql_statement = "UPDATE friendList SET confirm = 'true' WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";