Merge branch 'change_order_state'

Author: TheNoobGoda

database/data-insertion/update-order-info.php

@@ -0,0 +1,13 @@
+<?php
+    function updateRestaurantInfo($db,$orderID,$state) {
+        $stmt = $db->prepare(
+            'UPDATE FoodOrder
+            SET state = :state
+            WHERE orderID = :id'
+        );
+        $stmt->bindParam(':id', $orderID);
+        $stmt->bindParam(':state', $state);
+
+        $stmt->execute();
+    }
+?>

php/actions/edit-order-state.php

@@ -0,0 +1,22 @@
+<?php
+  require_once('../../database/db-connection.php');
+  require_once('../../database/data-fetching/user.php');
+  require_once('../../database/data-fetching/restaurants.php');
+  require_once('../../database/data-insertion/update-order-info.php');
+
+  session_start();
+  $db = getDatabaseConnection('../../database/restaurants.db');
+  $user_info = getUserbyID($db, $_SESSION['userID']);
+  $restaurant_info = getRestaurantInfo($db, $_GET['restaurantID']);
+  $ownerID = $restaurant_info['ownerID'];
+
+  if ($_SESSION['userID'] === NULL) {
+    header('Location: ../../register-page.php');        
+  } else if ($user_info['owner'] === 0 || $user_info['userID'] !== $ownerID) {
+    header('Location: ../../restaurant-orders-page.php');
+  }
+
+  updateRestaurantInfo($db,$_GET['orderID'],$_GET['state']);
+  header('Location: ../../restaurant-orders-page.php?restaurantID=' . $_GET['restaurantID']);
+
+?>

php/output-functions/draw-restaurant-orders.php

@@ -29,7 +29,16 @@ function outputRestaurantOrders() {
                     ?>
                     </div>
                     <p class="orderState"><?=$order['state']?></p>
-                    <button class="button">Change State</button>  <!-- TODO: mudar para dropdown  -->
+                    <form action="php/actions/edit-order-state.php" methode="get">
+                        <select name="state">
+                            <option value="Received">Received</option>
+                            <option value="Preparing">Preparing</option>
+                            <option value="Ready">Ready</option>
+                        </select>
+                        <input type="hidden" value="<?=$order['orderID']?>" name="orderID">
+                        <input type="hidden" value="<?=$_GET['restaurantID']?>" name="restaurantID">
+                        <input class="button" type="submit" value="Change State">
+                    </form>
                 <?php
                 } ?>                
             </section>