From 978753bfae7092c3fb64c6e28063b91fcbbede55 Mon Sep 17 00:00:00 2001
From: Joshua Perry <45966243+jpez-development@users.noreply.github.com>
Date: Tue, 15 Nov 2022 15:30:12 +0000
Subject: [PATCH] began populating listings from db

---
 public/account/login.php    |  2 +-
 public/account/register.php |  2 -
 public/index.php            |  4 +-
 public/listing.php          | 80 +++++++++++++++++++++++--------------
 4 files changed, 52 insertions(+), 36 deletions(-)

diff --git a/public/account/login.php b/public/account/login.php
index 66b2853..031a3b4 100644
--- a/public/account/login.php
+++ b/public/account/login.php
@@ -23,7 +23,7 @@ if (isset($_POST['submit'])) {
     $user = $stmt->fetch();
     if (password_verify($_POST['password'], $user['password'])) {
         $_SESSION['loggedin'] = $user['user_id'];
-        echo'<p>Successful login</p>';
+        echo'<script>window.location.href = "../index.php";</script>';
         if ($user['admin'] === 'y') {
             $_SESSION['loggedin'] = 'y';
         }
diff --git a/public/account/register.php b/public/account/register.php
index 0eead8b..8efff36 100644
--- a/public/account/register.php
+++ b/public/account/register.php
@@ -1,5 +1,4 @@
 <?php
-
 function addUser() {
     $server = 'mysql';
     $username = 'student';
@@ -31,7 +30,6 @@ $pageContent = '<p>Already have an account?<a href=\'login.php\'>Click here to L
     </form>';
 require '../../layout.php';
 
-
 if (isset($_POST['submit'])) {
     addUser();
     echo '<p>Successful account creation</p>';
diff --git a/public/index.php b/public/index.php
index 689895d..4383b37 100644
--- a/public/index.php
+++ b/public/index.php
@@ -1,7 +1,6 @@
 <?php
 //Listing display page. Display the 10 auctions finishing soonest
 //Can be used for index, search page, and category listing
-
 $pageTitle = 'iBuy - Home';
 
 if (isset($_GET['pageHeading'])) {
@@ -15,6 +14,7 @@ $pageContent = '<h1>'.$pageHeading.'</h1>
 <ul class="productList">'.populateList($pageHeading).'</ul>';
 require '../layout.php';
 
+
 function populateList($category) { //TODO: This will need to be updated to populate from the database
     $output = '';
     $server = 'mysql';
@@ -24,7 +24,7 @@ function populateList($category) { //TODO: This will need to be updated to popul
 	$pdo = new PDO('mysql:dbname=' . $schema . ';host=' . $server, $username, $password);
 
     if ($category === 'Latest Listings') {
-        $stmt = $pdo->prepare('SELECT * FROM listings WHERE listing_deadline > "'. date("Y-m-d h:i:s"). '" ORDER BY listing_deadline DESC');
+        $stmt = $pdo->prepare('SELECT * FROM listings WHERE listing_deadline > "'. date("Y-m-d H:i:s"). '" ORDER BY listing_deadline DESC');
         $stmt->execute();
         $listings = $stmt->fetchAll();
     }
diff --git a/public/listing.php b/public/listing.php
index 3d1c473..86b510a 100644
--- a/public/listing.php
+++ b/public/listing.php
@@ -2,42 +2,60 @@
 $pageTitle = 'iBuy - Product Listing'; 
 //TODO: have page populate information based on listing in the database
 $pageContent = '<h1>Product Page</h1>
-<article class="product">
+<article class="product">'. populateContent() .'</article>';
 
-        <img src="product.png" alt="product name">
-        <section class="details">
-            <h2>Product name</h2>
-            <h3>Product category</h3>
-            <p>Auction created by <a href="#">User.Name</a></p>
-            <p class="price">Current bid: £123.45</p>
-            <time>Time left: 8 hours 3 minutes</time>
-            <form action="#" class="bid">
-                <input type="text" name="bid" placeholder="Enter bid amount" />
-                <input type="submit" value="Place bid" />
-            </form>
-        </section>
-        <section class="description">
-        <p>
-            Lorem ipsum dolor sit amet, consectetur adipiscing elit. In sodales ornare purus, non laoreet dolor sagittis id. Vestibulum lobortis laoreet nibh, eu luctus purus volutpat sit amet. Proin nec iaculis nulla. Vivamus nec tempus quam, sed dapibus massa. Etiam metus nunc, cursus vitae ex nec, scelerisque dapibus eros. Donec ac diam a ipsum accumsan aliquet non quis orci. Etiam in sapien non erat dapibus rhoncus porta at lorem. Suspendisse est urna, egestas ut purus quis, facilisis porta tellus. Pellentesque luctus dolor ut quam luctus, nec porttitor risus dictum. Aliquam sed arcu vehicula, tempor velit consectetur, feugiat mauris. Sed non pellentesque quam. Integer in tempus enim.</p>
+require '../layout.php';
 
 
-        </section>
 
-        <section class="reviews">
-            <h2>Reviews of User.Name </h2>
-            <ul>
-                <li><strong>Ali said </strong> great ibuyer! Product as advertised and delivery was quick <em>29/09/2019</em></li>
-                <li><strong>Dave said </strong> disappointing, product was slightly damaged and arrived slowly.<em>22/07/2019</em></li>
-                <li><strong>Susan said </strong> great value but the delivery was slow <em>22/07/2019</em></li>
+function populateContent() {
+    $server = 'mysql';
+    $username = 'student';
+    $password = 'student';
+    $schema = 'ibuy';
+    $pdo = new PDO('mysql:dbname=' . $schema . ';host=' . $server, $username, $password);
+    $stmt = $pdo->prepare('SELECT * FROM listings WHERE listing_id= :listing_id');
+    $values = [
+        'listing_id' => $_GET['listing_id']
+    ];
 
-            </ul>
+    $stmt->execute($values);
+    $listing = $stmt->fetch();
 
-            <form>
-                <label>Add your review</label> <textarea name="reviewtext"></textarea>
+    $output = ' <img src="product.png" alt="product name">
+    <section class="details">
+        <h2>'. $listing['listing_name'] .'</h2>
+        <h3>'. $listing['listing_category'] .'</h3>
+        <p>Auction created by <a href="#">User.Name</a></p> 
+        <p class="price">Current bid: £123.45</p>
+        <time>Time left:'. (strtotime($listing['listing_deadline']) - strtotime(date('Y-m-d H:i:s')))/60 .'</time>
+        <form action="#" class="bid">
+            <input type="text" name="bid" placeholder="Enter bid amount" />
+            <input type="submit" value="Place bid" />
+        </form>
+    </section>
+    <section class="description">
+    <p>'. $listing['listing_description'] .'</p>
 
-                <input type="submit" name="submit" value="Add Review" />
-            </form>
-        </section>
-        </article>';
-require '../layout.php'
+
+    </section>
+
+    <section class="reviews">
+        <h2>Reviews of User.Name </h2>
+        <ul>
+            <li><strong>Ali said </strong> great ibuyer! Product as advertised and delivery was quick <em>29/09/2019</em></li>
+            <li><strong>Dave said </strong> disappointing, product was slightly damaged and arrived slowly.<em>22/07/2019</em></li>
+            <li><strong>Susan said </strong> great value but the delivery was slow <em>22/07/2019</em></li>
+
+        </ul>
+
+        <form>
+            <label>Add your review</label> <textarea name="reviewtext"></textarea>
+
+            <input type="submit" name="submit" value="Add Review" />
+        </form>
+    </section>';
+
+    return $output;
+}
 ?>
\ No newline at end of file