diff --git a/backend-php/api.php b/backend-php/api.php index 78a03c5..3596aa6 100644 --- a/backend-php/api.php +++ b/backend-php/api.php @@ -112,7 +112,7 @@ CreateApi(function ($api) { $classId = substr(strtoupper($req->data['classId']), 0, 10); // according docs (UPPERCASE, MIN 3 MAX 10) $db = db(); - $results = FastDBReq($db, "SELECT * FROM classes WHERE classid = ?", [$classId]); + $results = FastDBReq($db, "SELECT classid FROM classes WHERE classid = ?", [$classId]); if (count($results) != 0) { return $results[0]; @@ -180,7 +180,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminid = ?", [$adminId]); + $results = FastDBReq($db, "SELECT adminId FROM admins WHERE adminid = ?", [$adminId]); if (count($results) != 0) { @@ -203,7 +203,7 @@ CreateApi(function ($api) { if (!preg_match('/\d{1,2}-\d{1,2}-(\d{2}|\d{4})$/', $day)) return "wrong date format"; $db = db(); - $results = FastDBReq($db, "SELECT * FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); + $results = FastDBReq($db, "SELECT content FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); if (count($results) > 0) { @@ -222,7 +222,7 @@ CreateApi(function ($api) { return ['data' => $content, 'type' => 2]; } else { // without rings - $results = FastDBReq($db, "SELECT * FROM RINGS WHERE classId = ?", [$classId]); + $results = FastDBReq($db, "SELECT content, fromDate FROM RINGS WHERE classId = ?", [$classId]); $rings = json_decode(findClosestDateSort($results, $day)['content'], true); $out = $content; if ($rings !== null) { @@ -233,11 +233,11 @@ CreateApi(function ($api) { } else { // return shedules + calls $dayOfWeek = getDayOfWeek($day); - $results = FastDBReq($db, "SELECT * FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); + $results = FastDBReq($db, "SELECT content, fromDate FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); if (count($results) > 0) { $out = []; $schedule = json_decode(findClosestDateSort($results, $day)['content'], true); - $results = FastDBReq($db, "SELECT * FROM RINGS WHERE classId = ?", [$classId]); + $results = FastDBReq($db, "SELECT content, fromDate FROM RINGS WHERE classId = ?", [$classId]); $rings = json_decode(findClosestDateSort($results, $day)['content'], true); $out = $schedule; if ($rings !== null) { @@ -256,7 +256,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminClass FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден"; @@ -272,18 +272,18 @@ CreateApi(function ($api) { if ($tab != 2) { if ($tab == 0) { - $results = FastDBReq($db, "SELECT * FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); + $results = FastDBReq($db, "SELECT content FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); if (count($results) > 0) { $changes = json_decode($results[0]['content'], true); } } $dayOfWeek = getDayOfWeek($day); - $results = FastDBReq($db, "SELECT * FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); + $results = FastDBReq($db, "SELECT content, fromDate FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); if (count($results) > 0) { $schedule = json_decode(findClosestDateSort($results, $day)['content'], true); } } else { - $results = FastDBReq($db, "SELECT * FROM RINGS WHERE classId = ?", [$classId]); + $results = FastDBReq($db, "SELECT content, fromDate FROM RINGS WHERE classId = ?", [$classId]); if (count($results) > 0) { $rings = json_decode(findClosestDateSort($results, $day)['content'], true); } @@ -315,7 +315,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminClass FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден"; @@ -334,7 +334,7 @@ CreateApi(function ($api) { // if no chnages skip, else publish $dayOfWeek = getDayOfWeek($day); - $results = FastDBReq($db, "SELECT * FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); + $results = FastDBReq($db, "SELECT fromDate, content FROM schedules WHERE classId = ? AND dayOfWeek = ?", [$classId, $dayOfWeek]); $publish = true; if (count($results) > 0) { $schedule = json_decode(findClosestDateSort($results, $day)['content'], true); @@ -344,7 +344,7 @@ CreateApi(function ($api) { } if ($publish) { // removing changes for today if they are exists - $results = FastDBReq($db, "SELECT * FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); + $results = FastDBReq($db, "SELECT content FROM changes WHERE classId = ? AND forDay = ?", [$classId, $day]); if (count($results) > 0) { $changes = json_decode($results[0]['content'], true); if ($newData === $changes) { @@ -387,7 +387,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminClass FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден"; @@ -425,7 +425,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminPrems FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден"; @@ -486,7 +486,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminPrems, adminClass FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден"; @@ -498,7 +498,7 @@ CreateApi(function ($api) { $classId = $results[0]['adminClass']; - $results = FastDBReq($db, "SELECT * FROM classes WHERE classId=?", [$classId]); + $results = FastDBReq($db, "SELECT classid FROM classes WHERE classid=?", [$classId]); if (count($results) == 0) { $req->res->code(400); return "класса не существует"; @@ -517,7 +517,7 @@ CreateApi(function ($api) { } $adminId = $req->data['adminId']; $db = db(); - $results = FastDBReq($db, "SELECT * FROM admins WHERE adminId=?", [$adminId]); + $results = FastDBReq($db, "SELECT adminPrems, adminClass FROM admins WHERE adminId=?", [$adminId]); if (count($results) == 0) { $req->res->code(400); return "админ не найден";