Mini Shell

<?php
require_once(__DIR__ . "/_include/init.php"); 
if(!current_user_can('administrator') ) {
	echo "Section réservée aux administrateurs du site uniquement. <a href='/mcpv/index.php'>Revenir au site</a>";
	exit();
}
if(!empty($_POST)) {
	
    extract($_POST);
	
	$publie = 0;
	if(isset($wait)) $publie = 1; 
	if(isset($publish)) $publie = 2; 
	if(isset($reject)) $publie = 3;
	
	$query = $db->prepare("select * from avis where id = :id_view");    
	$query->bindValue('id_view', $id_view,SQLITE3_TEXT);
	$prestataire = $query->execute();
	$recs = 0;
	while ($row = $prestataire->fetchArray(SQLITE3_ASSOC)) {
		if($row['publie'] > 1) {
			exit("Avis déjà traité");
		}
	}
	
	if($publie==2){

		$query = $db->prepare("select avis, note_g, note_c1, note_c2, note_c3, note_c4, note_c5, note_c6 from prestataires where id = :prest_id_view");    
		$query->bindValue('prest_id_view', $prest_id_view,SQLITE3_TEXT);
		$prestataire = $query->execute();
		$row = $prestataire->fetchArray(SQLITE3_ASSOC);

		
		if((int)$row['avis'] > 0) {
			$upd_avis = (int)$row['avis'] + 1;
			$upd_note_g = ((float)$row['note_g'] + ((int)$note_c1_view + (int)$note_c2_view + (int)$note_c3_view + (int)$note_c4_view + (int)$note_c5_view + (int)$note_c6_view) / 6) / 2;
			$upd_note_c1 = ((int)$row['note_c1'] + (int)$note_c1_view) / 2;
			$upd_note_c2 = ((int)$row['note_c2'] + (int)$note_c2_view) / 2;
			$upd_note_c3 = ((int)$row['note_c3'] + (int)$note_c3_view) / 2;
			$upd_note_c4 = ((int)$row['note_c4'] + (int)$note_c4_view) / 2;
			$upd_note_c5 = ((int)$row['note_c5'] + (int)$note_c5_view) / 2;
			$upd_note_c6 = ((int)$row['note_c6'] + (int)$note_c6_view) / 2;
		} else {
			$upd_avis = (int)$row['avis'] + 1;
			$upd_note_g =  ((int)$note_c1_view + (int)$note_c2_view + (int)$note_c3_view + (int)$note_c4_view + (int)$note_c5_view + (int)$note_c6_view) / 6;
			$upd_note_c1 = (int)$note_c1_view;
			$upd_note_c2 = (int)$note_c2_view;
			$upd_note_c3 = (int)$note_c3_view;
			$upd_note_c4 = (int)$note_c4_view;
			$upd_note_c5 = (int)$note_c5_view;
			$upd_note_c6 = (int)$note_c6_view;
		}	

		// UPDATE prestataire
		$query = $db->prepare("update prestataires set avis = :upd_avis, note_g = :upd_note_g, note_c1 = :upd_note_c1, note_c2 = :upd_note_c2, note_c3 = :upd_note_c3, note_c4 = :upd_note_c4, note_c5 = :upd_note_c5, note_c6 = :upd_note_c6 
								where id = :prest_id_view");

								
		$query->bindValue('prest_id_view', $prest_id_view,SQLITE3_INTEGER);
		$query->bindValue('upd_avis', $upd_avis,SQLITE3_INTEGER);
		$query->bindValue('upd_note_g', $upd_note_g,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c1', $upd_note_c1,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c2', $upd_note_c2,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c3', $upd_note_c3,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c4', $upd_note_c4,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c5', $upd_note_c5,SQLITE3_FLOAT);
		$query->bindValue('upd_note_c6', $upd_note_c6,SQLITE3_FLOAT);
		
		$query->execute();
	}
	

	// UPDATE avis
	
	$query = $db->prepare("update avis set publie = :publie where id = :id_view");
	$query->bindValue('id_view', $id_view,SQLITE3_INTEGER);
	$query->bindValue('publie', $publie,SQLITE3_INTEGER);
	$query->execute();
	
	header('Location: avis_revue.php');
	die();
}
?>