coffeedata.php

<?php header("Content-type: text/xml; charset=utf-8"); ?>
<?xml-stylesheet type="text/xsl" href="coffeeplaces.xsl"?>
<!DOCTYPE CoffeePlaces SYSTEM "http://course-dm2517-ht18.csc.kth.se/~simfors/DM2517/project/CoffeePlaces.dtd">

<coffeelist>
<?php
    include 'logindetails.php';
    echo $username, $password, $databasename,;

    // Connect using host, username, password and databasename
    $link = mysqli_connect('xml.csc.kth.se', $username, $password, $databasename);
    
    include_once('session.php');
    
    // Check connection
    if (mysqli_connect_errno()) {
        printf("Connect failed: %s\n", mysqli_connect_error());
        exit();
    }

    // The SQL query
    $query = " SELECT placeName, price, location, offer, coffeeCard FROM CoffeePlace;";


    // Execute the query
    if (($result = mysqli_query($link, $query)) === false) {
       printf("Query failed: %s<br />\n%s", $query, mysqli_error($link));
       exit();
    }


    $returnstring = '';
    // Loop over the resulting lines
    while ($line = $result->fetch_object()) {
        // Store results from each row in variables
        $placeName = $line->placeName;
        $price = $line->price;
        $averageGrade = $line->averageGrade;
        $location = $line->location;
        $offer = $line->offer;
        $card = $line->coffeeCard;

        // Store the result we want by appending strings to the variable $returnstring
        $returnstring .= "<CoffeePlace>";
        $returnstring .= "<placeName>$placeName</placeName>";
        $returnstring .= "<price>$price</price>";
        $returnstring .= "<location>$location</location>";
        $returnstring .= "<offer>$offer</offer>";
        $returnstring .= "<coffeeCard card='$card'></coffeeCard>";
        $returnstring .= "</CoffeePlace>";
    }

    // Free result and just in case encode result to utf8 before returning
    mysqli_free_result($result);
    print utf8_encode($returnstring);


   // The Grade query
   $query2 = " SELECT placeName, personName, coffeeGrade, priceGrade, atmosphereGrade, uniqueAvGrade FROM Grade;";

   // Execute the query
   if (($result2 = mysqli_query($link, $query2)) === false) {
    printf("Query failed: %s<br />\n%s", $query2, mysqli_error($link));
    exit();
 }


 $returnstring2 = '';
 // Loop over the resulting lines
 while ($line = $result2->fetch_object()) {
     // Store results from each row in variables
     $placeName = $line->placeName;
     $personName = $line->personName; // ändra till username sen!
     $coffeeGrade = $line->coffeeGrade;
     $priceGrade = $line->priceGrade;
     $atmosphereGrade = $line->atmosphereGrade;
     $uniqueAvGrade = $line->uniqueAvGrade;

        // Store the result we want by appending strings to the variable $returnstring
        $returnstring2 .= "<Grade>";
        $returnstring2 .= "<placeName>$placeName</placeName>";
        $returnstring2 .= "<personName>$personName</personName>";
        $returnstring2 .= "<coffeeGrade>$coffeeGrade</coffeeGrade>";
        $returnstring2 .= "<priceGrade>$priceGrade</priceGrade>";
        $returnstring2 .= "<atmosphereGrade>$atmosphereGrade</atmosphereGrade>";
        $returnstring2 .= "<uniqueAvGrade>$uniqueAvGrade</uniqueAvGrade>";
        $returnstring2 .= "</Grade>";
    }

    // Free result and just in case encode result to utf8 before returning
    mysqli_free_result($result2);
    print utf8_encode($returnstring2);



   print utf8_encode('<loginstart>'); 
   if($_SERVER["REQUEST_METHOD"] == "POST") {
      // username and password sent from form 
      
      $myusername = mysqli_real_escape_string($link,$_POST['username']);
      $mypassword = mysqli_real_escape_string($link,$_POST['password']); 
      
      $sql = "SELECT id FROM users WHERE username = '$myusername' and password = '$mypassword'";
      $result = mysqli_query($link,$sql);
      $row = mysqli_fetch_array($result,MYSQLI_ASSOC);
      $active = $row['active'];
      
      $count = mysqli_num_rows($result);
      
      // If result matched $myusername and $mypassword, table row must be 1 row
		$loginuser = '';
      if($count != 0) {
         //session_register("myusername");
         $_SESSION['login_user'] = $myusername;
         
         
         $loginuser .= "<loginuser>$myusername</loginuser>";

      }else {
         $error = "Your Login Name or Password is invalid";

         $loginuser .= "<error>$error</error>";
      }  
   }

   print utf8_encode($loginuser);
   print utf8_encode('</loginstart>'); 

?>
</coffeelist>