From 69db1aa93c53e04ad00762e85a831fa5047904c1 Mon Sep 17 00:00:00 2001
From: mauirixxx <mauirixx@paytonohana.net>
Date: Tue, 7 Aug 2018 16:10:16 -1000
Subject: [PATCH] can now delete selected title ranks

---
 includes/titleranks-editor.php |  4 ++--
 includes/titleranks-update.php | 28 +++++++++++++++-------------
 2 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/includes/titleranks-editor.php b/includes/titleranks-editor.php
index 469c6bd..c1ba101 100644
--- a/includes/titleranks-editor.php
+++ b/includes/titleranks-editor.php
@@ -6,7 +6,7 @@ error_reporting(E_ALL);
 mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 # delete the above when shit finally works
 
-echo '<form action="titlemanager.php" method="post"><table border="1"><tr><th>stnameid</th><th>titlenameid</th><th>stname</th><th>stpoints</th><th>strank</th></tr>'; //save this line!!!
+echo '<form action="titlemanager.php" method="post"><table border="1"><tr><th>stnameid</th><th>titlenameid</th><th>stname</th><th>stpoints</th><th>strank</th><th>Delete?</th></tr>';
 $ph = implode(",", $_POST['editstitle']);
 $sredit = $con->prepare("SELECT * FROM gwsubtitles WHERE titlenameid = ? AND stnameid IN ($ph)");
 $sredit->bind_param("i", $_SESSION['tid']);
@@ -15,7 +15,7 @@ $result = $sredit->get_result();
 while ($row = $result->fetch_assoc()) {
 	echo '<tr><td><input type="text" readonly size="4" name="stnameid[]" value="' . $row['stnameid']. '"></td><td><input type="text" readonly size="4" name="titlenameid[]" value="' . $row['titlenameid'] . '"></td>';
 	echo '<td><input type="text" name="stname[]" value="' . $row['stname'] . '"></td><td><input type="number" min="1" name="stpoints[]" value="' . $row['stpoints'] . '"></td>';
-	echo '<td><input type="number" size="4" min="1" max="15" name="strank[]" value="' . $row['strank'] . '"></td></tr>';
+	echo '<td><input type="number" size="4" min="1" max="15" name="strank[]" value="' . $row['strank'] . '"></td><td><input type="checkbox" name="delsubtitle[]" value="' . $row['stnameid'] . '"></td></tr>';
 }
 echo '</table><br /><input type="hidden" name="title" value="updatesubtitle"><input type="submit" value="Modify title rank(s)"></form>';
 echo '<br /><br />';
diff --git a/includes/titleranks-update.php b/includes/titleranks-update.php
index 5dd6d7a..5871e93 100644
--- a/includes/titleranks-update.php
+++ b/includes/titleranks-update.php
@@ -7,20 +7,22 @@ mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
 # delete the above when shit finally works
 
 if (isset($_POST['delsubtitle'])) {
-	if ($_POST['delsubtitle'] =="yes") {
-		// this title makes you verify that you want to delete this title
-		echo '<form action="titlemanager.php" method="post">Please check the box to verify you want to delete: <b>' . $_POST['titlename'] . '</b> <input type="checkbox" name="delsubtitle" value="iamsure">';
-		echo '<input type="hidden" name="titlenameid" value="' . $_POST['titlenameid'] . '"><input type="hidden" name="title" value="updatesubtitle"><input type="submit" value="Delete title rank(s)"></form><br /><br />';
-	} else if ($_POST['delsubtitle'] == "iamsure") {
-		// this section actually deletes the title rank(s)
-		# need to deal with array data eventually
-		$stmtdel = $con->prepare("DELETE FROM gwsubtitles WHERE titlenameid = ?");
-		$stmtdel->bind_param("i", $_POST['titlenameid']);
-		$stmtdel->execute();
-		$stmtdel->close();
-		echo 'Title rank(s) have been deleted, redirecting!';
-		header ("Refresh:1; url=titlemanager.php");
+	echo 'the post delsubtitle might be an array??<br />';
+	echo '<pre>';
+	print_r($_POST['delsubtitle']);
+	print_r($_POST['stnameid']);
+	echo '</pre>';
+	if ($delst = $con->prepare("DELETE FROM gwsubtitles WHERE titlenameid = ? AND stnameid = ?")) {
+		$delst->bind_param("ii", $tnameid, $stnameid);
+		for ($i = 0; $i < count($_POST['delsubtitle']); $i++) {
+			$tnameid = $_POST['titlenameid'][$i];
+			$stnameid = $_POST['delsubtitle'][$i];
+			$delst->execute();
+		}
+		$delst->close();
 	}
+	echo 'Title rank(s) have been deleted, redirecting!';
+	//header ("Refresh:1; url=titlemanager.php");
 } else {
 	// this section updates the title name
 	if ($upd = $con->prepare("UPDATE gwsubtitles SET stname = ?, stpoints = ?, strank = ? WHERE titlenameid = ? AND stnameid = ?")) {