<?php
	include 'AdminRedirect.php';
	include 'top.php';
	
	$ServerName = "localhost";
	$ServerUserName = "root";
	$ServerPassword = "root";
	$dbName = "brentswelding";
	
	$id = "";
	$Error = 0;
	
	if ($_SERVER["REQUEST_METHOD"] == "POST") {
		if (empty($_POST['UserId'])) {
			echo ("<script>alert('Please select a review to remove');</script>");
			$Error++;
		}
		else {
			$id = $_POST['UserId'];
		}
		
		if ($Error == 0) {
			RemoveReview($ServerName, $ServerUserName, $ServerPassword, $dbName, $id);
		}
	}
	
	function RemoveReview($ServerName, $ServerUserName, $ServerPassword, $dbName, $id)
	{
		$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword, $dbName);
		if ($conDataBase->connect_error) {
			die("Connection Failed: " . $conDataBase->connect_error);
		}
		
		$sql = "DELETE FROM reviews where id='".$id."'";
		if ($conDataBase->query($sql) === TRUE) {
			echo("<script>alert('Done');</script>");
		}
		else {
			echo("<script>alert('Error '".$conDataBase->error . "');</script>");
		}
		$conDataBase->close();
	}
?>
<!DOCTYPE html>
<html>
	<head>
    	<link rel="stylesheet" type="text/css" href="body.css">
        <link rel="stylesheet" type="text/css" href="AdminSideBar.css">
        <style>
			div.revContainer {width: 90%; height: 685px; margin: 0px auto; border: 5px solid white; overflow: auto;}
			div.reviews {width: 75%; margin: 0px auto; margin-top: 5px; margin-bottom: 5px; border: 5px solid white; overflow: auto;}
			div.Submit {margin: 0px auto; width: 100%; height: 40px; text-algin: center;}
			
			table, td {border: 1px solid white; border-collapse: collapse; color: white; word-break: keep-all;}
		</style>
    </head>
    <body class="background">
    	<div class="sidebar">
            <div class="infoContainer"><a href="AccountManager.php">Account Manager</a></div>
            <div class="infoContainer"><a href="APhotoManager.php">Photos</a></div>
            <div class="infoContainer"><a href="AReview.php">Review Manager</a></div>
            <div class="infoContainer"><a href="MarketStats.php">Market Stats</a></div>
            <div class="infoContainer"><a href="ALogOut.php">LogOut</a></div>
        </div>
        <div class="bodyContainer">
            <form method="post" name="SelectReview" action="<?php htmlspecialchars($_SERVER['PHP_SELF']);?>">
            	<div class="revContainer">
            		<table style="width: 75%; margin: 0px auto;"> 
                	<tr>
                		<td>Select</td>
                    	<td>UserName</td>
                    	<td>Review</td>
                        <td>Stars</td>
                	</tr>
                	<?php
						$conDataBase = new mysqli($ServerName, $ServerUserName, $ServerPassword, $dbName);
						if ($conDataBase->connect_error) {
							die("Connection Failed: " . $conDataBase->connect_error);
						}
						
						$sql = "SELECT id, username, review, rating, reg_data FROM reviews order by id desc";
						$result = $conDataBase->query($sql);
						
						if ($result->num_rows > 0) {
							while ($row = $result->fetch_assoc()) {
								echo ("<tr><td><input type='radio' name='UserId' value='".$row['id']."' /></td><td><p>".$row['username']."</p></td><td>".$row['review']."</td><td>".$row['rating']."</td></tr>");
							}
						}
						else {
							echo("0 Results");
						}
						
					?>
                    </table>
                    <div class="Submit">
                    	<input type="submit" name="submit" value="Remove" style="width: 75px; height: 25px; margin: 0px auto; background-color: black; border: 1px groove white; color: white;">
                    </div>
            	</div>
            </form>
        </div>
    </body>
</html>