<?php
include 'header.php';
set_time_limit(600);

$programid = resolve_programid();
require_program_access($programid, $getuser);
?>

<div id="content" style="max-width: 800px;">
  <div id="content-header">
    <h2>&nbsp;Manage Guestbook</h2>
  </div>
  <div class="container-fluid">

<?php
if (isset($_GET['delete'])) {
    $stmt = db_write()->prepare("DELETE FROM stagemag.guestbook WHERE id = ?");
    $stmt->execute([intval($_GET['delete'])]);
}

if (isset($_GET['change'])) {
    $stmt = db_write()->prepare("UPDATE stagemag.guestbook SET approved = ? WHERE id = ?");
    $stmt->execute([intval($_GET['change']), intval($_GET['id'])]);
}
?>

<br>

<?php
$stmt = db_write()->prepare("SELECT * FROM stagemag.guestbook WHERE programid = ?");
$stmt->execute([$programid]);
$getcasta = $stmt->fetchAll();

if (count($getcasta) > 0):
?>
<table id="example23" class="display nowrap table table-hover table-striped table-bordered" cellspacing="0" width="100%">
<thead>
<th>Approved</th>
<th>Name</th>
<th>Email</th>
<th>Entry</th>
</thead>

<?php foreach ($getcasta as $row): ?>
    <tr id="section_id_<?= $row['id'] ?>">
    <td><?php if ($row['approved'] == 0): ?><a href="programedit-guestbook.php?programid=<?= $programid ?>&id=<?= $row['id'] ?>&change=1">Waiting for Approval</a><?php else: ?><a href="programedit-guestbook.php?programid=<?= $programid ?>&id=<?= $row['id'] ?>&change=0">Approved</a><?php endif; ?></td>
    <td><?= htmlspecialchars($row['name']) ?></td>
    <td><?= htmlspecialchars($row['email']) ?></td>
    <td><?= htmlspecialchars($row['entry']) ?></td>
    </tr>
<?php endforeach; ?>
</table>
<br>
<?php endif; ?>

   </div>
<!--Footer-part-->
<br><br><br><br>

<?php include 'footer.php'; ?>