PHP CRUD Generator - Dokumentation

<?php

namespace crud;

use common\Utils;
use phpformbuilder\database\DB;
use phpformbuilder\database\Pagination;
use secure\Secure;

class Actor extends Elements
{

    // item name passed in url
    public $item;

    // item name displayed
    public $item_label;

    // associative array : field => field displayed name
    public $fields;

    // external relations
    public $external_tables_count = 1;
    public $external_fields_count;
    public $external_rows_count;
    public $external_tables_labels = array('Film');
    public $external_add_btn = array();
    public $external_fields = array();

    // primary key passed to create|edit|delete
    public $primary_keys; // primary keys fieldnames

    // CREATE rights
    public $can_create = false;

    public $pks = array(); // primary key values for each row
    public $pk_concat_values = array(); // concatenated values of primary key(s) for each row
    public $pk_url_params = array(); // primary key(s) sent to the edit/delete forms URL for each row
    public $update_record_authorized = array();
    public $actor_id = array();
    public $first_name = array();
    public $last_name = array();
    public $last_update = array();

    public $active_filtered_fields = array();
    public $debug_content = '';
    public $export_data_button;
    public $filters_form;
    public $is_single_view = false;
    public $item_url;
    public $join_query = '';
    public $main_pdo_settings = array();
    public $pagination_html;

    // Array of primary fieldnames => values to select a single record for view
    public $params;

    public $records_count;
    public $select_number_per_page;
    public $sorting;

    public function __construct($element, $params = array())
    {
        $this->table         = $element->table;
        $this->item          = $element->item;
        $this->item_label    = $element->item_label;
        $this->primary_keys  = $element->primary_keys;
        $this->select_data   = $element->select_data;
        $this->fields        = $element->fields;

        $table = $this->table;

        $this->params = $params;

        if (!empty($params)) {
            $this->is_single_view = true;
        }

        $json = file_get_contents(ADMIN_DIR . 'crud-data/' . $this->item . '-filter-data.json');
        $filters_array = json_decode($json, true);
        $this->item_url = $_SERVER['REQUEST_URI'];

        // connect to the database
        $db = new Pagination(DEBUG);
        $db->setDebugMode('register');


        $columns = 'actor.actor_id, actor.first_name, actor.last_name, actor.last_update';
        $where = array();

        // restricted rights query
        if (Secure::canReadRestricted($table)) {
            $where = array_merge($where, Secure::getRestrictionQuery($table));
        }

        if (!isset($_SESSION['npp'])) {
            $_SESSION['npp'] = 20;
        }

        // filters
        $filters = new ElementsFilters($table, $filters_array, $this->join_query);
        $this->active_filtered_fields = $filters->getActiveFilteredFields();
        $where_filters = $filters->getWhere();
        $where = array_merge($where, $where_filters);

        // search
        $where_search = array();
        if (isset($_POST['search_field']) && isset($_POST['search_string'])) {
            $searchVals = explode(' + ', $_POST['search_string']);
            $search_string = $searchVals[0];
            $_SESSION['rp_search_field'][$table] = $_POST['search_field'];
            $_SESSION['rp_search_string'][$table] = $search_string;
            if (sizeof($searchVals) > 1) {
                $_SESSION['rp_search_string_2'][$table] = $searchVals[1];
            } else {
                unset($_SESSION['rp_search_string_2'][$table]);
            }
        }

        if (isset($_SESSION['rp_search_string'][$table]) && !empty($_SESSION['rp_search_string'][$table])) {
            $sf = $_SESSION['rp_search_field'][$table];
            $search_field = $table . '.' . $sf;
            $search_field2 = '';
            $search_string_sqlvalue = $db->safe('%' . $_SESSION['rp_search_string'][$table] . '%');
            if (isset($_SESSION['rp_search_string_2'][$table])) {
                $search_string_2_sqlvalue = $db->safe('%' . $_SESSION['rp_search_string_2'][$table] . '%');
            }
            if (file_exists(ADMIN_DIR . 'crud-data/' . $this->item . '-select-data.json')) {
                $json = file_get_contents(ADMIN_DIR . 'crud-data/' . $this->item . '-select-data.json');
                $selects_array = json_decode($json, true);
                if (isset($selects_array[$sf]) && $selects_array[$sf]['from'] == 'from_table') {
                    $search_field = $selects_array[$sf]['from_table'] . '.' . $selects_array[$sf]['from_field_1'];
                    if (!empty($selects_array[$sf]['from_field_2'])) {
                        $search_field2 = $selects_array[$sf]['from_table'] . '.' . $selects_array[$sf]['from_field_2'];
                    }
                }
            }
            $where_search[] = 'LOWER(' . $search_field . ') LIKE LOWER(' . $search_string_sqlvalue . ')';
            if (!empty($search_field2) && isset($search_string_2_sqlvalue) && ($search_string_2_sqlvalue != "'%%'")) {
                $where_search[] = 'LOWER(' . $search_field2 . ') LIKE LOWER(' . $search_string_2_sqlvalue . ')';
            }
            $where = array_merge($where, $where_search);
        }

        $this->filters_form = $filters->returnForm($this->item_url);

        // Get join queries from active filters
        $active_filters_join_queries = $filters->buildElementJoinQuery();

        if (isset($_POST['search_field'])) {
            $pagination_url = str_replace(ADMIN_URL . 'search/', ADMIN_URL, $_SERVER['REQUEST_URI']);
        } else {
            $pagination_url = $_SERVER['REQUEST_URI'];
        }
        if (isset($_POST['npp']) && is_numeric($_POST['npp'])) {
            $_SESSION['npp'] = $_POST['npp'];
        }
        if ($this->is_single_view) {
            // if single record view
            $active_filters_join_queries = $filters->buildElementJoinQuery();
            $pagination_url = '';
            // replace 'fieldname' with 'table.fieldname' to avoid ambigous query
            $where_params = array_combine(
                array_map(function ($k) {
                    return $this->table . '.' . $k;
                }, array_keys($this->params)),
                $this->params
            );
            $where = array_merge($where, $where_params);
        }

        // order query
        $this->sorting = ElementsUtilities::getSorting($table, 'last_name', 'ASC');

        $npp = $_SESSION['npp'];
        if (!empty($where_search) && PAGINE_SEARCH_RESULTS === false) {
            $npp = 1000000;
        }

        if (empty($where)) {
            $where = null;
        }

        // $this->main_pdo_settings are the PDO settings without the pagination LIMIT.
        $this->main_pdo_settings = array(
            'function' => 'select',
            'from'    => 'actor' . $active_filters_join_queries,
            'values'   => $columns,
            'where'    => $where,
            'extras'   => array('order_by' => $this->sorting),
            'debug'    => DEBUG_DB_QUERIES
        );

        $this->pagination_html = $db->pagine($this->main_pdo_settings, $npp, 'p', $pagination_url, 5, true, '/', '');

        if (DEBUG_DB_QUERIES) {
            $this->debug_content .= '<p class="debug-title text-bg-info">"' . $this->table . '" queries</p>' . $db->getDebugContent();
        }

        $update_authorized = false;
        if (Secure::canUpdate($this->table)) {
            // user can update ALL the records
            $update_authorized = true;
        }

        $this->records_count = $db->rowCount();
        if (!empty($this->records_count)) {
            while ($row = $db->fetch()) {
                $primary_keys_array = array(
                    'actor_id' => $row->actor_id
                );
                $this->pks[] = $primary_keys_array;
                $pk_concatenated_values = $row->actor_id;
                $this->pk_concat_values[] = $pk_concatenated_values;
                $this->update_record_authorized[$pk_concatenated_values] = $update_authorized;
                $this->pk_url_params[] = http_build_query($primary_keys_array, '', '/');
                $this->actor_id[] = $row->actor_id;
                $this->first_name[] = $row->first_name;
                $this->last_name[] = $row->last_name;
                $this->last_update[] = $row->last_update;
            }
        }

        // Autocomplete doesn't need the followings settings
        if (!isset($_POST['is_autocomplete'])) {
            if (!$this->is_single_view) {
                // CREATE/DELETE rights
                if (Secure::canCreate($table) || Secure::canCreateRestricted($table)) {
                    $this->can_create = true;
                }

                // restricted UPDATE rights
                if (Secure::canUpdateRestricted($table)) {
                    $where = array_merge(
                        Secure::getRestrictionQuery($table),
                        $where_filters,
                        $where_search
                    );

                    $pdo_settings = array(
                        'function' => 'select',
                        'from'    => 'actor' . $active_filters_join_queries,
                        'values'   => $columns,
                        'where'    => $where,
                        'extras'   => array('order_by' => $this->sorting),
                        'debug'    => DEBUG_DB_QUERIES
                    );

                    // get authorized update primary keys
                    $db->pagine($pdo_settings, $npp, 'p', $pagination_url, 5, true, '/', '');
                    if (DEBUG_DB_QUERIES) {
                        $this->debug_content .= '<p class="debug-title text-bg-info">"' . $this->table . '" - get authorized update primary keys</p>' . $db->getDebugContent();
                    }
                    $records_count = $db->rowCount();
                    if (!empty($records_count)) {
                        while ($row = $db->fetch()) {
                            $this->update_record_authorized[$row->actor_id] = true;
                        }
                    }
                }
            }

            /* external relations */

            for ($i = 0; $i < count($this->pks); $i++) {
                $this->external_rows_count[$i] = array();
                $this->external_fields[$i] = array();
                $this->external_add_btn[$i] = array();

                // actor => film_actor => film
                $from = 'actor INNER JOIN film_actor ON film_actor.actor_id=actor.actor_id INNER JOIN film ON film_actor.film_id=film.film_id';
                $values = 'film_actor.actor_id AS film_actor_actor_id, film_actor.film_id AS film_actor_film_id, film.title, film.release_year, film.film_id AS target_table_pk_0';
                $where = array();
                foreach ($this->pks[$i] as $key => $value) {
                    $where[] = 'actor.' . $key . ' = ' . $value;
                }
                $db->select($from, $values, $where, array('order_by' => $this->sorting), DEBUG_DB_QUERIES);
                if (DEBUG_DB_QUERIES) {
                    if ($i === 0) {
                        $this->debug_content .= '<p class="debug-title text-bg-info">"film" queries <small>(External relation)</small></p>' . $db->getDebugContent();
                    } else {
                        $this->debug_content .= $db->getDebugContent();
                    }
                }
                $records_count = $db->rowCount();
                $this->external_rows_count[$i][] = $records_count;
                $ext_fields = array(
                    'table' => 'film',
                    'table_label' => 'Film',
                    'uniqid' => 'f-' . uniqid(),
                    'fields' => array(
                        'title' => array(),
                        'release_year' => array()
                    ),
                    'fieldnames' => array(
                        'title' => 'title',
                        'release_year' => 'release_year'
                    )
                );

                // get user custom fieldnames
                $ext_fieldnames = ElementsUtilities::getFieldNames($ext_fields['table']);
                if ($ext_fieldnames !== false) {
                    foreach ($ext_fields['fieldnames'] as $key => $value) {
                        if (isset($ext_fieldnames[$key])) {
                            $ext_fields['fieldnames'][$key] = $ext_fieldnames[$key];
                        }
                    }
                }

                if (!$this->is_single_view) {
                    // add button
                    $add_btn = '';
                    if (Secure::canCreate('film_actor')) {
                        if (!empty($records_count)) {
                            // add button for nested table
                            $add_btn = '<div class="d-flex flex-row-reverse mb-2">';
                            $add_btn .= ' <a href="' . ADMIN_URL . 'filmactor/create?actor_id=' . $this->pks[$i]['actor_id'] . '" class="btn btn-xs btn-primary" data-bs-title="Add new" data-bs-toggle="tooltip"><span class="fas fa-plus-circle prepend"></span>Add new Film</a>';
                            $add_btn .= '</div>';
                        } else {
                            // add button for empty cell
                            $add_btn = '<div class="d-flex justify-content-center">';
                            $add_btn .= ' <a href="' . ADMIN_URL . 'filmactor/create?actor_id=' . $this->pks[$i]['actor_id'] . '" class="btn btn-xs btn-outline-secondary" data-bs-title="Add new" data-bs-toggle="tooltip"><span class="fas fa-plus-circle prepend"></span>Add new</a>';
                            $add_btn .= '</div>';
                        }
                    }
                    $this->external_add_btn[$i][] = $add_btn;
                }

                if (!empty($records_count)) {
                    while ($row = $db->fetch()) {
                        $json = false;
                        if (!is_null($row->title)) {
                            $test_if_json = json_decode($row->title);
                            if (json_last_error() == JSON_ERROR_NONE && is_array($test_if_json)) {
                                $json = $test_if_json;
                            }
                        }
                        if ($json) {
                            $ext_fields['fields']['title'][] = implode(', ', $json);
                        } else {
                            $ext_fields['fields']['title'][] = $row->title;
                        }
                        $json = false;
                        if (!is_null($row->release_year)) {
                            $test_if_json = json_decode($row->release_year);
                            if (json_last_error() == JSON_ERROR_NONE && is_array($test_if_json)) {
                                $json = $test_if_json;
                            }
                        }
                        if ($json) {
                            $ext_fields['fields']['release_year'][] = implode(', ', $json);
                        } else {
                            $ext_fields['fields']['release_year'][] = $row->release_year;
                        }
                        if (!$this->is_single_view) {
                            // edit/delete buttons
                            if (Secure::canUpdate('film_actor') || Secure::canCreate('film_actor')) {
                                $action_btns = '<div class="btn-group">';
                                $relation_table_pk_columns = array(
                                    'actor_id' => $row->film_actor_actor_id,
                                    'film_id' => $row->film_actor_film_id
                                );
                                $url_params = http_build_query($relation_table_pk_columns, '', '/');
                                if (Secure::canUpdate('film_actor')) {
                                    $action_btns .= '<a href="' . ADMIN_URL . 'filmactor/edit/' . $url_params . '" class="btn btn-xs btn-warning" data-bs-title="' . addslashes(EDIT) . '" rel="noindex" data-bs-toggle="tooltip"><span class="fas fa-pencil-alt"></span></a>';
                                }
                                if (Secure::canCreate('film_actor')) {
                                    $action_btns .= '<a href="' . ADMIN_URL . 'filmactor/delete/' . $url_params . '" class="btn btn-xs btn-danger" data-bs-title="' . addslashes(DELETE_CONST) . '" rel="noindex" data-bs-toggle="tooltip"><span class="fas fa-times-circle"></span></a>';
                                }
                                $action_btns .= '</div>';
                                $ext_fields['fieldnames']['action'] = ACTION_CONST;
                                $ext_fields['fields']['action'][] = $action_btns;
                            } // end if
                        } // end if !$this->is_single_view
                    } // end while
                } // end if
                $this->external_fields[$i][] = $ext_fields;
            } // end for
            $this->external_fields_count = count($this->external_fields);
        } // end if

        if (!$this->is_single_view) {
            // Export data button
            $this->export_data_button = ElementsUtilities::exportDataButtons($table, $this->main_pdo_settings);

            // number/page
            $numbers_array = array(5, 10, 20, 50, 100, 200, 10000);
            $this->select_number_per_page = ElementsUtilities::selectNumberPerPage($numbers_array, $_SESSION['npp'], $this->item_url);
        }
    }
}

                        

    <div class="card {{ constant('DEFAULT_CARD_CLASS') }} me-4">
            <div class="card-header d-lg-flex flex-wrap justify-content-between {{ constant('DEFAULT_CARD_HEADING_CLASS') }}">
                {% if object.records_count > 0 %}

                <div class="d-flex ms-auto order-lg-2">
                    {{ object.select_number_per_page|raw }}
                </div>

                <hr class="w-100 d-lg-none">

                {% endif %}
                <div class="d-flex order-lg-0 mb-3 mb-sm-0">
                    {% if object.can_create == true %}
                    <a href="{{ constant('ADMIN_URL') }}{{ object.item }}/create" class="btn btn-sm me-1 btn-primary d-flex align-items-center legitRipple"><i class="{{ constant('ICON_PLUS') }} position-left"></i>{{ constant('ADD_NEW') }}</a>
                    {% endif %}
                    {% if object.records_count > 0 %}
                    {{ object.export_data_button|raw }}
                    {% endif %}
                </div>

                <div class="order-lg-1 mx-lg-auto">
                    <form name="rp-search-form" id="rp-search-form" action="" class="form-inline justify-content-center">
                        <div class="form-group">
                            <div class="input-group">
                                <div id="rp-search-field" class="dropdown input-group-prepend">
                                    <a class="dropdown-toggle pl-4 pr-3 rounded-left border-left border-top border-bottom" id="search-dropdown-link" data-bs-toggle="dropdown" aria-haspopup="true"
                                            aria-expanded="false"></a>
                                    <div class="dropdown-menu" aria-labelledby="search-dropdown-link">
                                        {% for field_name, field_display_name in object.fields %}
                                        {% set active = '' %}
                                        {% if field_name == attribute(session.rp_search_field, object.table) %}
                                        {% set active = ' active' %}
                                        {% endif %}
                                        <a class="dropdown-item{{ active }}" href="#" data-value="{{ field_name }}">{{ field_display_name }}</a>
                                        {% endfor %}
                                    </div>
                                </div>
                                {% set search_value = '' %}
                                {% if attribute(session.rp_search_string, object.table) is defined %}
                                {% set search_value = attribute(session.rp_search_string, object.table) %}
                                {% endif %}
                                <input id="rp-search" name="rp-search" type="text" value="{{ search_value }}" placeholder="{{ constant('SEARCH') }}" class="form-control flex-grow-1">
                                <div class="input-group-append">
                                    <button id="rp-search-submit" class="btn btn-secondary ladda-button" data-style="zoom-in" type="submit"><span class="ladda-label"><i class="{{ constant('ICON_SEARCH') }}"></i></span></button>
                                </div>
                            </div>
                        </div>
                    </form>
                </div>

            </div>

            {# Partial block list - rendered alone on the research results #}
            {% block object_list %}

            <div id="{{ object.item }}-list">

            {% if object.records_count > 0 %}

                <div class="table-responsive">
                    <table class="table table-striped table-condensed table-data">
                        <thead>
                            <tr class="{{ constant('DEFAULT_TABLE_HEADING_BACKGROUND') }}">
                                {% if constant('ADMIN_ACTION_BUTTONS_POSITION') == 'left' %}
                                <th>{{ constant('ACTION_CONST') }}</th>
                                {% endif %}

                                <th class="sorting">{{ object.fields.actor_id }}<a href="#" class="sorting-up" data-field="actor_id" data-direction="ASC"><i class="{{ constant('ICON_ARROW_UP') }}"></i></a><a href="#" class="sorting-down" data-field="actor_id" data-direction="DESC"><i class="{{ constant('ICON_ARROW_DOWN') }}"></i></a></th>
                                <th class="sorting">{{ object.fields.first_name }}<a href="#" class="sorting-up" data-field="first_name" data-direction="ASC"><i class="{{ constant('ICON_ARROW_UP') }}"></i></a><a href="#" class="sorting-down" data-field="first_name" data-direction="DESC"><i class="{{ constant('ICON_ARROW_DOWN') }}"></i></a></th>
                                <th class="sorting">{{ object.fields.last_name }}<a href="#" class="sorting-up" data-field="last_name" data-direction="ASC"><i class="{{ constant('ICON_ARROW_UP') }}"></i></a><a href="#" class="sorting-down" data-field="last_name" data-direction="DESC"><i class="{{ constant('ICON_ARROW_DOWN') }}"></i></a></th>
                                <th class="sorting">{{ object.fields.last_update }}<a href="#" class="sorting-up" data-field="last_update" data-direction="ASC"><i class="{{ constant('ICON_ARROW_UP') }}"></i></a><a href="#" class="sorting-down" data-field="last_update" data-direction="DESC"><i class="{{ constant('ICON_ARROW_DOWN') }}"></i></a></th>
                                <th>film</th>
                                <th>{{ constant('DISPLAY') }}</th>
                            {% if constant('ADMIN_ACTION_BUTTONS_POSITION') == 'right' %}
                                <th>{{ constant('ACTION_CONST') }}</th>
                            {% endif %}
                            </tr>
                        </thead>
                        <tbody>
                        {% for i in range(0, object.records_count - 1) %}
                            <tr>
                                {% if constant('ADMIN_ACTION_BUTTONS_POSITION') == 'left' %}
                                <td class="has-btn-group no-ellipsis">
                                    <div class="btn-group">
                                        {% if object.pk[loop.index0] in object.authorized_update_pk %}
                                        <a href="{{ constant('ADMIN_URL') }}{{ object.item }}/edit/{{ object.pk[loop.index0] }}" class="btn btn-sm btn-warning legitRipple" data-tooltip="{{ constant('EDIT') }}" data-delay="500"><span class="{{ constant('ICON_EDIT') }} icon-md"></span></a>
                                        {% endif %}
                                        {% if object.can_create == true %}
                                        <a href="{{ constant('ADMIN_URL') }}{{ object.item }}/delete/{{ object.pk[loop.index0] }}" class="btn btn-sm btn-danger legitRipple" data-tooltip="{{ constant('DELETE_CONST') }}" data-delay="500"><span class="{{ constant('ICON_DELETE') }} icon-md"></span></a>
                                        {% endif %}
                                    </div>
                                </td>
                                {% endif %}
                            <td>{{ object.actor_id[ loop.index0 ] }}</td>
                            <td>{{ object.first_name[ loop.index0 ] }}</td>
                            <td>
                            {% if object.pk[loop.index0] in object.authorized_update_pk %}
                            <span class="jedit-text tip" data-field="last_name" data-delay="500" title="{{ constant('CLICK_TO_EDIT') }}" id="actor-last_name-actor_id-{{ object.pk[ loop.index0 ] }}">{{ object.last_name[ loop.index0 ] }}</span>
                            {% else %}
                                {{ object.last_name[ loop.index0 ] }}
                            {% endif %}
                    </td>
                            <td>{{ toDate(object.last_update[ loop.index0 ], 'dd MMMM yyyy H:m a')|raw }}</td>
                                {% if object.external_tables_count > 0 %}
                                {% for j in range(0, object.external_tables_count - 1) %}
                                <td class="no-ellipsis">
                                    {% if object.external_rows_count[i][j] > 0 %}
                                    <h6 class="card-title text-center text-nowrap mb-2"><span class="badge bg-gray-300 position-left">{{ object.external_rows_count[i][j] }}</span><a class="dropdown-toggle" data-bs-toggle="collapse" href="#{{ object.external_fields[i][j]['uniqid'] }}" role="button" aria-expanded="false" aria-controls="{{ object.external_fields[i][j]['uniqid'] }}"><small class="text-muted nowrap">{{ constant('SHOW') }} / {{ constant('HIDE') }}</small></a></h6>
                                    <div class="collapse" id="{{ object.external_fields[i][j]['uniqid'] }}">
                                    {{ object.external_add_btn[i][j]|raw }}
                                        <table class="table table-striped table-condensed">
                                            <thead class=" {{ constant('DEFAULT_TABLE_HEADING_BACKGROUND') }}">
                                                <tr>
                                                    {% for field, value in object.external_fields[i][j].fieldnames %}
                                                    <th>{{ value }}</th>
                                                    {% endfor %}
                                                </tr>
                                            </thead>
                                            <tbody>

                                                {# Loop records #}

                                                {% for k in range(0, object.external_rows_count[i][j] - 1) %}
                                                <tr>

                                                    {# Loop fields #}

                                                    {% for field, value in object.external_fields[i][j].fields %}
                                                    <td>{{ object.external_fields[i][j].fields[field][k]|raw }}</td>
                                                    {% endfor %}
                                                </tr>
                                                {% endfor %}
                                            </tbody>
                                        </table>
                                    </div>
                                    {% else %}
                                    {{ object.external_add_btn[i][j]|raw }}
                                    {% endif %}
                                </td>
                                {% endfor %}
                                {% endif %}
                                <td><a href="{{ constant('BASE_URL') }}" data-delay="500" data-tooltip="{{ constant('OPEN_URL') }}" target="_blank"><span class="{{ constant('ICON_NEW_TAB') }} text-center"></span></a></td>
                                {% if constant('ADMIN_ACTION_BUTTONS_POSITION') == 'right' %}
                                <td class="has-btn-group no-ellipsis">
                                    <div class="btn-group">
                                        {% if object.pk[loop.index0] in object.authorized_update_pk %}
                                        <a href="{{ constant('ADMIN_URL') }}{{ object.item }}/edit/{{ object.pk[loop.index0] }}" class="btn btn-sm btn-warning legitRipple" data-tooltip="{{ constant('EDIT') }}" data-delay="500"><span class="{{ constant('ICON_EDIT') }} icon-md"></span></a>
                                        {% endif %}
                                        {% if object.can_create == true %}
                                        <a href="{{ constant('ADMIN_URL') }}{{ object.item }}/delete/{{ object.pk[loop.index0] }}" class="btn btn-sm btn-danger legitRipple" data-tooltip="{{ constant('DELETE_CONST') }}" data-delay="500"><span class="{{ constant('ICON_DELETE') }} icon-md"></span></a>
                                    {% endif %}
                                    </div>
                                </td>
                                {% endif %}
                            </tr>
                            {% endfor %}
                        </tbody>
                    </table>
                </div> <!-- END table-responsive -->

                {% else %}
                <div class="card-body">
                    <p class="text-semibold">
                        {{ alert(constant('NO_RECORD_FOUND'), 'alert-info has-icon')|raw }}
                    </p>
                </div>
                {% endif %}

                <div class="card-footer  {{ constant('DEFAULT_CARD_FOOTER_CLASS') }} p-4 mt-5">
                    {{ object.pagination_html|raw }}
                </div>
            </div> <!-- END {{ object.item }}-list -->

            {% endblock object_list %}
            {# END Partial block - rendered alone on the research results #}

        </div> <!-- END card -->

                        

<?php
use phpformbuilder\Form;
use phpformbuilder\Validator\Validator;
use phpformbuilder\database\DB;
use common\Utils;
use secure\Secure;

include_once ADMIN_DIR . 'secure/class/secure/Secure.php';

$debug_content = '';

/* =============================================
    validation if posted
============================================= */

if ($_SERVER["REQUEST_METHOD"] == "POST" && Form::testToken('form-edit-actor') === true) {
    $validator = Form::validate('form-edit-actor', FORMVALIDATION_PHP_LANG);
    $validator->required()->validate('first_name');
    $validator->required()->validate('last_name');
    $validator->required()->validate('last_update');
    if (isset($_POST['last_update_submit'])) {
        $validator->date()->validate('last_update_submit');
    } else {
        $validator->date()->validate('last_update');
    }

    // check for errors
    if ($validator->hasErrors()) {
        $_SESSION['errors']['form-edit-actor'] = $validator->getAllErrors();
    } else {
        require_once CLASS_DIR . 'phpformbuilder/database/db-connect.php';
        require_once CLASS_DIR . 'phpformbuilder/database/DB.php';
        $db = new DB(DEBUG);
        $db->setDebugMode('register');
        $values = array();
        $values['first_name'] = $_POST['first_name'];
        $values['last_name'] = $_POST['last_name'];
        $values['last_update'] = $_POST['last_update'];
        $where = $_SESSION['actor_editable_primary_keys'];

        // begin transaction
        $db->transactionBegin();

        try {
            // update actor
            if (DEMO !== true && !$db->update('actor', $values, $where, DEBUG_DB_QUERIES)) {
                $error = $db->error();
                throw new \Exception($error);
            } else {
                // get records from film_actor
                $film_actor_current_records   = array();

                // Array with film.film_id
                $film_actor_records_to_add    = array();

                // Array with film_actor.actor_id
                $film_actor_records_to_delete = array();

                $from = 'film_actor';
                $columns = array('film_id');
                $where = array('actor_id' => $_SESSION['actor_editable_primary_keys']['actor.actor_id']);

                $db->select($from, $columns, $where, array(), DEBUG_DB_QUERIES);

                $db_count = $db->rowCount();
                if (!empty($db_count)) {
                    while ($row = $db->fetch()) {
                        $film_actor_current_records[] = $row->film_id;
                    }
                }

                foreach ($_POST['ext_film'] as $film_value) {
                    if (!in_array($film_value, $film_actor_current_records)) {
                        $film_actor_records_to_add[] = $film_value;
                    }
                }

                foreach ($film_actor_current_records as $film_value) {
                    if (!in_array($film_value, $_POST['ext_film'])) {
                        $film_actor_records_to_delete[] = $film_value;
                    }
                }

                // insert records in film_actor
                foreach ($film_actor_records_to_add as $value) {
                    $values = array();
                    $values['actor_id'] = $_SESSION['actor_editable_primary_keys']['actor.actor_id'];
                    $values['film_id'] = $value;
                    if (DEMO !== true && $db->insert('film_actor', $values, DEBUG_DB_QUERIES) === false) {
                        $error = $db->error();
                        throw new \Exception($error);
                    }
                }

                // delete records from film_actor
                foreach ($film_actor_records_to_delete as $film_id_value) {
                    $where = array();
                    $where['actor_id'] = $_SESSION['actor_editable_primary_keys']['actor.actor_id'];
                    $where['film_id'] = $film_id_value;
                    if (DEMO !== true && !$db->delete('film_actor', $where, DEBUG_DB_QUERIES)) {
                        $error = $db->error();
                        throw new \Exception($error);
                    }
                }

                // ALL OK
                if (!DEBUG_DB_QUERIES) {
                    $db->transactionCommit();

                    $_SESSION['msg'] = Utils::alert(UPDATE_SUCCESS_MESSAGE, 'alert-success has-icon');

                    // reset form values
                    Form::clear('form-edit-actor');

                    // redirect to list page
                    if (isset($_SESSION['active_list_url'])) {
                        header('Location:' . $_SESSION['active_list_url']);
                    } else {
                        header('Location:' . ADMIN_URL . 'actor');
                    }

                    // if we don't exit here, $_SESSION['msg'] will be unset
                    exit();
                } else {
                    $debug_content .= $db->getDebugContent();
                    $db->transactionRollback();

                    $_SESSION['msg'] = Utils::alert(UPDATE_SUCCESS_MESSAGE . '<br>(' . DEBUG_DB_QUERIES_ENABLED . ')', 'alert-success has-icon');
                }
            }
        } catch (\Exception $e) {
            $db->transactionRollback();
            $msg_content = DB_ERROR;
            if (DEBUG) {
                $msg_content .= '<br>' . $e->getMessage() . '<br>' . $db->getLastSql();
            }
            $_SESSION['msg'] = Utils::alert($msg_content, 'alert-danger has-icon');
        }
    } // END else
} // END if POST

// register editable primary keys, which are NOT posted and will be the query update filter
// $params come from data-forms.php
// replace 'fieldname' with 'table.fieldname' to avoid ambigous query
$where_params = array_combine(
    array_map(function ($k) {
        return 'actor.' . $k;
    }, array_keys($params)),
    $params
);
$_SESSION['actor_editable_primary_keys'] = $where_params;

if (!isset($_SESSION['errors']['form-edit-actor']) || empty($_SESSION['errors']['form-edit-actor'])) { // If no error registered
    $from = 'actor';
    $columns = '*';

    $where = $_SESSION['actor_editable_primary_keys'];

    // if restricted rights
    if (ADMIN_LOCKED === true && Secure::canUpdateRestricted('actor')) {
        $where = array_merge($where, Secure::getRestrictionQuery('actor'));
    }

    $db = new DB(DEBUG);
    $db->setDebugMode('register');

    $db->select($from, $columns, $where, array(), DEBUG_DB_QUERIES);
    if ($db->rowCount() < 1) {
        if (DEBUG) {
            exit($db->getLastSql() . ' : No Record Found');
        } else {
            exit('No Record Found');
        }
    }
    if (DEBUG_DB_QUERIES) {
        $debug_content .= $db->getDebugContent();
    }
    $row = $db->fetch();
    $_SESSION['form-edit-actor']['actor_id'] = $row->actor_id;
    $_SESSION['form-edit-actor']['first_name'] = $row->first_name;
    $_SESSION['form-edit-actor']['last_name'] = $row->last_name;
    $_SESSION['form-edit-actor']['last_update'] = date('Y-m-d H:i');
}

$_SESSION['form-edit-actor']['ext_film'] = array();

$from = 'film_actor';
$columns = array('film_id');
$where = array('actor_id' => $_SESSION['actor_editable_primary_keys']['actor.actor_id']);

$db = new DB();
$db->select($from, $columns, $where, array(), DEBUG_DB_QUERIES);

if (DEBUG_DB_QUERIES) {
    $debug_content .= $db->getDebugContent();
}

$db_count = $db->rowCount();
if (!empty($db_count)) {
    while ($row = $db->fetch()) {
        $_SESSION['form-edit-actor']['ext_film'][] = $row->film_id;
    }
}

// $params come from data-forms.php
$pk_url_params = http_build_query($params, '', '/');

$form = new Form('form-edit-actor', 'horizontal', 'novalidate');
$form->setAction(ADMIN_URL . 'actor/edit/' . $pk_url_params);
$form->startFieldset();

// actor_id --

$form->setCols(2, 10);
$form->addInput('hidden', 'actor_id', '');

// first_name --

$form->setCols(2, 10);
$form->addInput('text', 'first_name', '', 'First Name', 'required');

// last_name --
$form->addInput('text', 'last_name', '', 'Last Name', 'required');

// last_update --
$form->addInput('hidden', 'last_update', date('Y-m-d H:i'));

// external relation: actor => film_actor => film;
$from = 'film';
$columns = 'title, film_id';
$where = false;
$extras = array(
    'select_distinct' => true
);

$db = new DB();
$db->select($from, $columns, $where, $extras, DEBUG_DB_QUERIES);

if (DEBUG_DB_QUERIES) {
    $debug_content .= $db->getDebugContent();
}

$db_count = $db->rowCount();
if (!empty($db_count)) {
    $values = array();
    $display_values = array();
    while ($row = $db->fetch()) {
        $values[] = $row->film_id;
        $display_values[] = $row->title;
    }
    for ($i=0; $i < $db_count; $i++) {
        $form->addOption('ext_film[]', $values[$i], $display_values[$i]);
    }
    $form->addSelect('ext_film[]', 'Film', 'data-slimselect=true, multiple, data-close-on-select=false');
}
$form->addBtn('button', 'cancel', 0, '<i class="' . ICON_BACK . ' prepend"></i>' . CANCEL, 'class=btn btn-warning, data-ladda-button=true, data-style=zoom-in, onclick=history.go(-1)', 'btn-group');
$form->addBtn('submit', 'submit-btn', 1, SUBMIT . '<i class="' . ICON_CHECKMARK . ' append"></i>', 'class=btn btn-success, data-ladda-button=true, data-style=zoom-in', 'btn-group');
$form->setCols(0, 12);
$form->centerContent();
$form->printBtnGroup('btn-group');
$form->endFieldset();
$form->addPlugin('pretty-checkbox', '#form-edit-actor');
$form->addPlugin('formvalidation', '#form-edit-actor', 'default', array('language' => FORMVALIDATION_JAVASCRIPT_LANG));