baps-ui.php

<?php

# https://stackoverflow.com/questions/293601/php-and-concurrent-file-access
# http://www.php.net/flock
# https://www.w3schools.com/js/js_json_php.asp

// INSERT INTO `timeslots_applicants` (`id`, `applicant_id`, `timeslot_id`, `timestamp`) VALUES (NULL, '3', '1', CURRENT_TIMESTAMP)
// SELECT * FROM applicants INNER JOIN timeslots_applicants ON timeslots_applicants.applicant_id=applicants.id ORDER BY timeslots_applicants.timestamp ASC
// SELECT * FROM wp_baps_applicants INNER JOIN wp_baps_timeslots_applicants ON wp_baps_timeslots_applicants.applicant_id=wp_baps_applicants.id ORDER BY wp_baps_timeslots_applicants.timestamp ASC
// SELECT wp_baps_timeslots_companies.timeslot_id FROM wp_baps_timeslots_companies INNER JOIN wp_baps_companies ON wp_baps_timeslots_companies.company_id=wp_baps_companies.id WHERE wp_baps_companies.id = \ändern\ ORDER BY wp_baps_timeslots_companies.timeslot_id ASC


/*
Firmen in Datenbank spielen
Timeslots zu Firmen zuordnen

1. Schauen ob UUID von Link existiert (vorhandene Daten ändern):
    Werte abfragen und anzeigen
2. Wenn Werte in $_POST (neue Werte eingespielt / update):
    Werte in Datenbank einspielen
3. Wenn keine Werte vorhanden sind (neue Anmeldung):
    Leeres Formular anzeigen

*/

// TODO: add field for phone number

function register_baps_resources() {
    wp_register_style('baps-style', plugins_url('/baps/baps-style.css'));
    wp_enqueue_style('baps-style');

    wp_enqueue_script( 'baps-scripts', plugins_url('/baps/baps-scripts.js'), false );
}
add_action( "wp_enqueue_scripts", "register_baps_resources");


add_shortcode("baps", "baps_application_page");

define("BAPS_UPLOAD_DIR", dirname(__FILE__) . "/uploads/");
define("MAX_TIMESLOTS", 2);

function baps_application_page() {
    forms();
}

// TODO: Matrikelnummer eindeutig machen (Problem beim updaten)
// TODO: Warteliste verbessern (auch für Export)
// TODO: persönliches Email

function forms() {
    global $wpdb;
    $wp = $wpdb->prefix;

    $app_slot_ids = array();
    $registered_message = "";
    $file_uploaded = 0;

    $query_timeslots = "SELECT id, slot FROM {$wp}baps_timeslots";
    $response_timeslots = $wpdb->get_results($query_timeslots);
    $timeslots = array_combine(array_column($response_timeslots, "id"), array_column($response_timeslots, 'slot'));

    $query_companies = "SELECT id, name FROM {$wp}baps_companies WHERE id != 93 AND id != 97 AND id != 99 AND id != 101";
    $response_companies = $wpdb->get_results($query_companies);
    $companies = array_combine(array_column($response_companies, "id"), array_column($response_companies, "name"));

    $query_study_fields = "SELECT id, field FROM {$wp}baps_study_fields";
    $response_study_fields = $wpdb->get_results($query_study_fields);
    $study_fields = array_combine(array_column($response_study_fields, "id"), array_column($response_study_fields, "field"));
    $study_fields_flipped = array_flip($study_fields);

    // add / update application
    // TODO: move to function
    if (!empty($_POST)) {
        $full_name = $_POST["full_name"];
        $email = $_POST["email"];
        $phone = $_POST["phone"];
        $student_id = $_POST["student_id"];
        $study_field = $_POST["study_field"];
        $semester = $_POST["semester"];
        
        foreach ($_POST as $key=>$value) {
            if (substr( $key, 0, 4 ) === "com_" && $value != "") {
                array_push($app_slot_ids, $value);
            }
        }

        $uuid = $_GET["id"];
        $query = "SELECT * FROM {$wp}baps_applicants WHERE uuid = '$uuid'";
        $app_id = $wpdb->get_var($query);
        if (!$app_id)
            $app_id = "NULL";
        
        upload_file($uuid);
        send_mail($email, $uuid);

        // probably not the most elegant way, to deactivate the foreign key checks
        $query = "SET foreign_key_checks = 0";
        $wpdb->query($query);
        $query = "REPLACE INTO {$wp}baps_applicants (id, name, email, phone, student_id, uuid, study_field, semester) 
            VALUES (%s, '%s', '%s', '%s', '%s', '%s', '%s', '%s')";
        $wpdb->query($wpdb->prepare($query, $app_id, $full_name, $email, $phone, $student_id, $uuid, $study_fields_flipped[$study_field], $semester));
        $query = "SET foreign_key_checks = 1";
        $wpdb->query($query); 

        $query = "SELECT id FROM {$wp}baps_applicants WHERE uuid = '$uuid'";
        $applicant_id = $wpdb->get_var($query);

        $query = "SELECT company_id, timeslot_id FROM {$wp}baps_timeslots_applicants WHERE applicant_id = '$applicant_id'";
        $old_occupied = $wpdb->get_results($query);
        $tmp = array();
        foreach($old_occupied as $old) {
            array_push($tmp, $companies[$old->company_id].".".$old->timeslot_id);
        }
        $old_occupied = $tmp;
        $removed = array_diff($old_occupied, $app_slot_ids);
        $added = array_diff($app_slot_ids, $old_occupied);

        foreach ($added as $add) {
            $split = explode(".", $add);
            $company_id = array_flip($companies)[$split[0]];
            $query = "INSERT INTO {$wp}baps_timeslots_applicants (id, applicant_id, company_id, timeslot_id, timestamp)
                VALUES (NULL, '%s', '%s','%s', CURRENT_TIMESTAMP)";
            $wpdb->query($wpdb->prepare($query, $applicant_id, $company_id, $split[1]));
        }
        foreach ($removed as $rm) {
            $split = explode(".", $rm);
            $company_id = array_flip($companies)[$split[0]];
            $query = "DELETE FROM {$wp}baps_timeslots_applicants WHERE timeslot_id = %s AND company_id = %s AND applicant_id = %s";
            $wpdb->query($wpdb->prepare($query, $split[1], $company_id, $applicant_id));
        }

        $link = get_permalink()."?id=$uuid";
        $registered_message = "<h2>Du hast dich erfolgreich für beWANTED angemeldet!</h2>
        <p>Um Details deiner Anmeldung zu sehen, oder um nachträchlich etwas zu ändern klicke auf diesen Link:
        <a href=$link>$link</a></p><p>Bitte schreibe ihn auf oder speichere diese Seite als Lesezeichen.</p>
        <p>Wir haben dir ein Bestätigungsmail geschickt. Falls du es nicht bekommen hast, schau bitte in deinem Spam- oder Promotions-Ordner nach.</p>
        <p>PS: <a href=\"https://forms.gle/oroTqTiw89txgsZy6\">
        Kannst du uns sagen, wie du auf beWANTED aufmerksam geworden bist?</a> Es würde uns viel helfen und dauert auch nur 10 Sekunden :)</p>";
    }

    // retrieve values from database
    if (isset($_GET["id"])) {
        $uuid = $_GET["id"];

        $file_uploaded = (count(glob(BAPS_UPLOAD_DIR.$uuid."*")) > 0) ? 1 : 0;

        if (!$wpdb->get_var("SELECT id FROM {$wp}baps_applicants WHERE uuid = '$uuid'")) {
            echo("Bewerbung nicht gefunden, bitte überprüfe deinen Link oder kontaktiere die Organisatoren des Events.");

            $uuid = substr(md5(rand(1000, 100000)."+".rand(0, 100000)."+".rand(0, 1000000)), 0, 32);

            $full_name = "";
            $email = "";
            $phone = "";
            $student_id = "";
            $study_field = "";
            $semester = "";
        }
        else {
            $query = "SELECT * FROM {$wp}baps_applicants WHERE uuid = '$uuid'";
            $filled = $wpdb->get_results($query)[0];

            $full_name = $filled->name;
            $email = $filled->email;
            $phone = $filled->phone;
            $student_id = $filled->student_id;
            $study_field = $study_fields[$filled->study_field];
            $semester = $filled->semester;
            $app_id = $filled->id;

            if (!$app_slot_ids) {
                $query = "SELECT company_id, timeslot_id FROM {$wp}baps_timeslots_applicants WHERE applicant_id={$app_id}";
                $response = $wpdb->get_results($query);
                
                foreach ($response as $r)
                    array_push($app_slot_ids, $companies[$r->company_id].".".$r->timeslot_id);
            }
        }
    }
    // create new page
    else {
        $uuid = substr(md5(rand(1000, 100000)."+".rand(0, 100000)."+".rand(0, 1000000)), 0, 32);

        $full_name = "";
        $email = "";
        $phone = "";
        $student_id = "";
        $study_field = "";
        $semester = "";
    }

    $html = $registered_message;
    $html = $html.sprintf('<form action="?id=%s" method="post" name="form" id="baps-form" enctype="multipart/form-data" onsubmit="return check()" class="form-style">', $uuid);
    $html = $html.'<ul>';
    $html = $html.'<li>';
    $html = $html.'<label for="name">Name</label>';
    $html = $html.sprintf('<input type="text" name="full_name" value="%s" maxlength="100">', $full_name);
    $html = $html.'<span>Dein Vor- und Nachname</span>';
    $html = $html.'</li>';
    $html = $html.'<li>';
    $html = $html.'<label for="email">E-mail</label>';
    $html = $html.sprintf('<input type="email" name="email" value="%s" maxlength="100">', $email);
    $html = $html.'<span>Deine E-Mail Adresse</span>';
    $html = $html.'</li>';
    $html = $html.'<li>';
    $html = $html.'<label for="phone">Telefonnummer</label>';
    $html = $html.sprintf('<input type="text" name="phone" value="%s" maxlength="100">', $phone);
    $html = $html.'<span>Deine Telefonnummer (für eventuelle Rückfragen)</span>';
    $html = $html.'</li>';
    $html = $html.'<li>';
    $html = $html.'<label for="student_id">Matrikelnummer</label>';
    $html = $html.sprintf('<input type="text" name="student_id" value="%s" maxlength="8">', $student_id);
    $html = $html.'<span>Deine Matrikelnummer</span>';
    $html = $html.'</li>';
    $html = $html.'<li>';
    $html = $html.'<label for="study_field">Studienrichtung</label>';
    $html = $html.sprintf('<select name="study_field" value="%s">', $study_field);

    $query = "SELECT field FROM {$wp}baps_study_fields ORDER BY {$wp}baps_study_fields.id ASC";
    $response = $wpdb->get_results($query);
    foreach ($response as $r) {
        if ($r->field == $study_field)
            $html = $html.sprintf('<option selected>%s</option>', $r->field);
        else
            $html = $html.sprintf('<option>%s</option>', $r->field);

    }
    $html = $html.'</select>';
    $html = $html.'</li>';
    $html = $html.'<li>';
    $html = $html.'<span>Aktuelles Semester:</span>';
    $html = $html.'<select name="semester" id="sel">';
    $semesters = ["1-4", "5-8", "9-12", "13+"];
    foreach ($semesters as $s) {
        if ($s == $semester)
            $html = $html.'<option selected>'.$s.'</option>';
        else
            $html = $html.'<option>'.$s.'</option>';
    }
    $html = $html.'</select>';
    $html = $html.'</li>';

    $html = $html.'<li>';
    $html = $html.'<span>Lebenslauf hochladen</span>';
    $html = $html.'<input type="file" name="cv" id="sel" /><br />';
    $html = $html."<input type=\"hidden\" id=\"sel\" name=\"file_uploaded\" value=\"$file_uploaded\">";
    $html = $html.'</li>';
    $html = $html.'<li>';
    //echo $html;

    /*
    $query = "SELECT COUNT(*) FROM {$wp}baps_companies";
    $num_companies = $wpdb->get_var($query);
    $query = "SELECT COUNT(*) FROM {$wp}baps_timeslots";
    $num_timeslots = $wpdb->get_var($query);

    $timetable = array();
    for ($i=0; $i<$num_timeslots; $i++) {
        for ($j=0; $j<$num_companies; $j++) {
            $arr = array ("id" => ($j * $num_timeslots) + $i, "free" => 2, "blocked" => FALSE);
            $timetable[$i][$j] = $arr;
        }
    }
    */

    //$query = "SELECT {$wp}baps_timeslots_applicants.applicant_id, {$wp}baps_timeslots_applicants.company_id, {$wp}baps_timeslots_applicants.timeslot_id FROM wp_baps_applicants INNER JOIN wp_baps_timeslots_applicants ON wp_baps_timeslots_applicants.applicant_id=wp_baps_applicants.id ORDER BY {$wp}baps_timeslots_applicants.timestamp ASC";
    /*$query = "SELECT {$wp}baps_timeslots_applicants.applicant_id, {$wp}baps_timeslots_applicants.timeslot_id FROM {$wp}baps_applicants 
        INNER JOIN {$wp}baps_timeslots_applicants ON {$wp}baps_timeslots_applicants.applicant_id={$wp}baps_applicants.id 
        ORDER BY {$wp}baps_timeslots_applicants.timestamp ASC";
    $response = $wpdb->get_results($query);*/

    $query_occupations = "SELECT applicant_id, company_id, timeslot_id FROM {$wp}baps_timeslots_applicants";
    $response_occupations = $wpdb->get_results($query_occupations);

    $query_company_timeslots = "SELECT company_id, timeslot_id FROM {$wp}baps_timeslots_companies WHERE company_id != 93 AND company_id != 97 AND company_id != 99 AND company_id != 101";
    $response_company_timeslots = $wpdb->get_results($query_company_timeslots);

    $selectors = '';
    $old_company = 0;
    foreach ($response_company_timeslots as $r_t) {
        if ($old_company != $r_t->company_id) {
            $select_name = "com_".$companies[$r_t->company_id];
            if ($selectors == '') {
                $selectors = $selectors."<div style=\"display:block;\">{$companies[$r_t->company_id]}";
                $selectors = $selectors."<select name=\"{$select_name}\"><option></option>";
            }
            else {
                $selectors = $selectors."</select>{$companies[$r_t->company_id]}";
                $selectors = $selectors."<select name=\"{$select_name}\"><option></option>";
            }
            
            $old_company = $r_t->company_id;
        }
        $num_applications_timeslot = 0;

        foreach ($response_occupations as $r_o) {
            if ($r_o->company_id == $r_t->company_id && $r_o->timeslot_id == $r_t->timeslot_id) {
                $num_applications_timeslot++;
            }
        }
        $free_slots = MAX_TIMESLOTS - $num_applications_timeslot;
        $app_id = $companies[$r_t->company_id].".".$r_t->timeslot_id;
        if (in_array($app_id, $app_slot_ids))
            $selected = 'selected';
        else
            $selected = '';

        $selectors = $selectors."<option value=\"{$app_id}\" {$selected}>{$timeslots[$r_t->timeslot_id]} ($num_applications_timeslot/2)</option>";
    }
    $selectors = $selectors."</select>";
    $html = $html.'<span style="color: #dea514; margin-bottom: 5px;">Bitte beachte, dass nur 2 Kandidat*innen per Slot ausgewählt werden. Wir kontaktieren Dich nach der Auswahl! </span>';
	// $html = $html.'<span style="color: #2B7880; margin-bottom: 5px;">Slots für A1, Siemens Mobility, PwC und NETCONOMY sind schon ausgebucht! </span>';


    /*
    $ts_query = "SELECT id, slot from {$wp}baps_timeslots";
    $ts_response = $wpdb->get_results($ts_query);

    $c_query = "SELECT id, name from {$wp}baps_companies";
    $c_response = $wpdb->get_results($c_query);

    $selectors = '<div style="display:block;">';
    foreach ($c_response as $c_r) {
        $selectors = $selectors.$c_r->name.'<select name="com_'.$c_r->name.'">';
        $selectors = $selectors."<option></option>";
        foreach ($ts_response as $ts_r) {
            $timeslot = $ts_r->id - 1;
            $company_id = $c_r->id - 1;

            $free_slots = $timetable[$timeslot][$company_id]["free"];
            $app_slot_id = $timeslot + ($company_id * $num_timeslots);

            $query_cs = "SELECT {$wp}baps_timeslots_companies.timeslot_id FROM {$wp}baps_timeslots_companies INNER JOIN {$wp}baps_companies
                ON {$wp}baps_timeslots_companies.company_id={$wp}baps_companies.id WHERE {$wp}baps_companies.id = %d
                ORDER BY {$wp}baps_timeslots_companies.timeslot_id ASC";
            $query_cs = sprintf($query_cs, $company_id+1);
            $available_timeslots = $wpdb->get_results($query_cs);

            //TODO: könnte man eleganter lösen
            $found = FALSE;
            foreach ($available_timeslots as $avl) {
                if ($avl->timeslot_id == $timeslot+1) {
                    $found = TRUE;
                }
            }
            if (!$found)
                continue;

            foreach ($response as $k => $row) {
                if ($row->timeslot_id == $app_slot_id) {
                    unset($response[$k]);
                    $free_slots--;
                }
            }

            if (in_array($app_slot_id, $app_slot_ids))
                $selected = "selected";
            else
                $selected = "";
            
            $selectors = $selectors.sprintf("<option value='%d' %s>%s (%d)</option>", $app_slot_id, $selected, $ts_r->slot, $free_slots);
        }
        $selectors = $selectors."</select>";
    }
    */
    $selectors = $selectors."</div>";
 
    $html = $html.$selectors."</li>";

    $html = $html.'<li style="border: none; margin-left: 30%;">';
    $html = $html.'<input type="submit" value="Absenden" name="submit" />';
    $html = $html.'<li>';
    $html = $html.'</ul>';
    // <!-- Slots und hidden für Warteliste hinzufügen -->
    $html = $html.'</form>';

    echo $html;

    //echo $selectors;


    /* TODO: this is the code for using tables as selection
    $table_header = "";
    $table_rows = "";

    foreach ($ts_response as $ts_r) {
            $table_rows = $table_rows."<tr>";

            $table_header = "<tr>";
            foreach ($c_response as $c_r) {
                $table_header = $table_header.sprintf("<td><b>%s</b></td>", $c_r->name);
                $app_slot_id = ($ts_r->id) + ($c_r->id * $num_timeslots);
                /$table_rows = $table_rows.sprintf("<td id=%d>%s</td>", $app_slot_id, $ts_r->slot);
        }
        $table_rows = $table_rows."</tr>";
    }

    $script = '<script src="https://code.jquery.com/jquery-1.8.3.min.js"  type="text/javascript"></script>
    <script type="text/javascript">
    $(document).ready(function(){
        $("#baps-table td").click(function(){
            $(this).addClass("selected").siblings().removeClass("selected");
            var value=$(this).find("td:first").html();
        });
     });
    </script>';

    $css = "<style>
    td {border: 1px #DDD solid; padding: 5px; cursor: pointer;}
    .selected {
        background-color: brown;
        color: #FFF;
    }
    </style>";

    echo $script;
    echo $css;

    $table = '<table id="baps-table">'.$table_header.$table_rows.'</table>';
    echo $table;
    */
}

function upload_file($filename) {
    if(filter_input(INPUT_POST, "submit", FILTER_SANITIZE_STRING)){
        $ext = pathinfo($_FILES["cv"]['name'], PATHINFO_EXTENSION);
        move_uploaded_file($_FILES["cv"]["tmp_name"], BAPS_UPLOAD_DIR . $filename . "." . $ext);
    }
}

function send_mail($recipient, $uuid) {
    $header = array(
        "From: orion.forowycz@best-eu.org",
        "MIME-Version: 1.0",
        "Content-Type: text/html;charset=utf-8"
    );

    $link = get_permalink()."?id=$uuid";

    $msg = "<html><body><h2>Du hast dich erfolgreich für beWANTED angemeldet!</h2>
        <p>Um Details deiner Anmeldung zu sehen, oder um nachträglich etwas zu ändern klicke auf diesen Link:
        <a href=$link>$link</a></p>
		<p>PS: <a href=\"https://forms.gle/oroTqTiw89txgsZy6\">
        Kannst du uns sagen, wie du auf beWANTED aufmerksam geworden bist?</a> Es würde uns viel helfen und dauert auch nur 10 Sekunden :)</p>
        <p>Mit freundlichen Grüßen,<br/>BEST Vienna</p></body></html>";

    $ret = mail(
        $recipient,
        "Deine Anmeldung für beWANTED",
        $msg,
        implode("\r\n", $header)
    );
}