diff --git a/var/www/findFriend.php b/var/www/findFriend.php index fb9eb89..dba6aae 100644 --- a/var/www/findFriend.php +++ b/var/www/findFriend.php @@ -17,29 +17,41 @@ try{ echo '
';
echo "Find Friends:\n\n";
- $sql_select = "SELECT count(username)";
+ $sql_select = "SELECT username";
$sql_from = "FROM contacts";
$sql_where = "WHERE username = '".$_POST['friend']."'";
$sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
- if(($db_connection->query($sql_statement)) == 0)
+ $result = $db_connection->query($sql_statement);
+ if(mysqli_num_rows($result) == 0)
echo "username doesn't exist";
else
{
- $sql_select = "SELECT count(username)";
+ $sql_select = "SELECT friend";
$sql_from = "FROM friendList";
- $sql_where = "WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";
+ $sql_where = "WHERE username = '".$_SESSION["loggedInUser"]."' and friend = '".$_POST['friend']."'";
$sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
- if(($db_connection->query($sql_statement)) == 0)
- {
- $sql_statement = "UPDATE friendList SET confirm = 'true' WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";
- $db_connection->query($sql_statement);
- $sql_statement = "INSERT INTO friendList VALUES ('".$_SESSION["loggedInUser"]."', '".$_POST['friend']."', 'true')";
- $db_connection->query($sql_statement);
- }
+ $result = $db_connection->query($sql_statement);
+ if(mysqli_num_rows($result) == 1)
+ echo "you already sent a request";
else
{
- $sql_statement = "INSERT INTO friendList VALUES ('".$_SESSION["loggedInUser"]."', '".$_POST['friend']."', 'false')";
- $db_connection->query($sql_statement);
+ $sql_select = "SELECT username";
+ $sql_from = "FROM friendList";
+ $sql_where = "WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";
+ $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
+ $result = $db_connection->query($sql_statement);
+ if(mysqli_num_rows($result) == 1)
+ {
+ $sql_statement = "UPDATE friendList SET confirm = 'true' WHERE username = '".$_POST['friend']."' and friend = '".$_SESSION["loggedInUser"]."'";
+ $db_connection->query($sql_statement);
+ $sql_statement = "INSERT INTO friendList VALUES ('".$_SESSION["loggedInUser"]."', '".$_POST['friend']."', 'true')";
+ $db_connection->query($sql_statement);
+ }
+ else
+ {
+ $sql_statement = "INSERT INTO friendList VALUES ('".$_SESSION["loggedInUser"]."', '".$_POST['friend']."', 'false')";
+ $db_connection->query($sql_statement);
+ }
}
}