From 1a942279ec6c37efd5278457b96e18e1fdbb523b Mon Sep 17 00:00:00 2001
From: s426231 <patpus@st.amu.edu.pl>
Date: Sun, 18 Nov 2018 13:00:46 +0100
Subject: [PATCH] Edit files fix

---
 admin-zone/edit.php        |  3 ++-
 admin-zone/update_post.php | 25 +++++++++++++++++++++++++
 2 files changed, 27 insertions(+), 1 deletion(-)
 create mode 100644 admin-zone/update_post.php

diff --git a/admin-zone/edit.php b/admin-zone/edit.php
index 9bc589f..a19114c 100644
--- a/admin-zone/edit.php
+++ b/admin-zone/edit.php
@@ -41,11 +41,12 @@ else{
             </div>
          </div>
       </nav> 
-<form method="post" action="edit_post.php">
+<form method="post" action="update_post.php">
  <div class="addPostForm">
      <?php
      include "../settings/db_connect.php";
      $post_id = $_GET['post_id'];
+     $_SESSION['post_id']=$post_id;
      if ( $sql = $mysqli->prepare( "SELECT tytul,opis,tekst FROM post WHERE post_id= ?;"))
      {
         $sql->bind_param("i" ,$post_id);
diff --git a/admin-zone/update_post.php b/admin-zone/update_post.php
new file mode 100644
index 0000000..98eb9e6
--- /dev/null
+++ b/admin-zone/update_post.php
@@ -0,0 +1,25 @@
+<?php
+if( !isset( $_SESSION ) ) session_start();
+if(empty($_SESSION['user'])){
+    header('Location: login.php');
+}
+else{
+    $user=$_SESSION['user'];
+    $post_id=$_SESSION['post_id'];
+}
+include "../settings/db_connect.php";
+$text=$_POST['post_text'];
+$meta_desc=$_POST['meta_desc'];
+$title=$_POST['title'];
+$mod_date=date("Y-m-d H:i:s");
+$sql = $mysqli->prepare("UPDATE post SET tytul=?,opis=?,tekst=?,data_modyfikacji=? WHERE post_id=?;");
+if ($sql)
+{
+        $sql->bind_param("isssi",$title,$meta_desc,$text,$mod_date,$post_id);
+        $sql->execute();
+        $sql->close();
+}
+$mysqli->close();
+
+//header ("Location: http://localhost/TAS-ALFA/admin-zone/");
+?>
\ No newline at end of file