From 5a5a99ad80948b28e7944bf11691fe5ff99c61cf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniel=20Mu=C3=B1oz=20Garcia?=
 <73303506+danimu03@users.noreply.github.com>
Date: Tue, 13 Apr 2021 14:57:25 +0200
Subject: [PATCH] Complete functionality

Missing elements of design and security
---
 panel_admin/deleteFilm.php   | 30 ++++++++++++++++++++++++++++++
 panel_admin/delete_film.php  | 12 ++++++++++++
 panel_admin/manage_films.php | 11 ++++++++++-
 panel_admin/panelAdmin.php   |  1 +
 4 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 panel_admin/deleteFilm.php
 create mode 100644 panel_admin/delete_film.php

diff --git a/panel_admin/deleteFilm.php b/panel_admin/deleteFilm.php
new file mode 100644
index 0000000..0e2eb31
--- /dev/null
+++ b/panel_admin/deleteFilm.php
@@ -0,0 +1,30 @@
+<?php
+    include_once('./includes/film_dto.php');	
+    include_once('./includes/formFilm.php');	
+    
+    if($_REQUEST['delete_film']) {
+        echo'<div class="column size">
+        <h2>Editar pelicula</h2>
+        <form method="post" action="delete_film.php">
+            <div class="row">
+            <fieldset id="film_form">
+                <legend>¿Estás seguro de que quieres eliminar esta pelicula?</legend>
+                <input type="hidden" name="id" value='.$_REQUEST['id'].'/>
+                <p>Id: '.$_REQUEST['id'].' </p>
+                <p>Título: '.$_REQUEST['tittle'].' </p>
+                <p>Duración: '.$_REQUEST['duration'].' </p>
+                <p>Idioma: '.$_REQUEST['language'].' </p>
+                <p>Descripción: '.$_REQUEST['description'].' </p>
+                </fieldset>
+                <div class="actions"> 
+                    <input type="submit" id="submit" value="Eliminar" name="confirm_delete_film" class="primary" />
+                    <input type="submit" id="submit" value="Cancelar" name="cancel_delete_film" class="primary" />
+                    </div>
+                </div>
+                </form>
+                </div>';
+
+    }
+   
+
+?>
\ No newline at end of file
diff --git a/panel_admin/delete_film.php b/panel_admin/delete_film.php
new file mode 100644
index 0000000..990d4b5
--- /dev/null
+++ b/panel_admin/delete_film.php
@@ -0,0 +1,12 @@
+<?php
+    session_start();
+    include_once('./includes/film_dto.php');	
+    include_once('./includes/formFilm.php');
+    if($_REQUEST['confirm_delete_film']) {
+        $film = new FormFilm();
+        $film->processesForm($_REQUEST['id'],null,null,null,null,"del");
+        $_SESSION['message'] = $film->getReply();
+        
+    }
+    header("Location: ../panel_admin/index.php?state=mf");
+?>
\ No newline at end of file
diff --git a/panel_admin/manage_films.php b/panel_admin/manage_films.php
index 4011d5b..2348ed8 100644
--- a/panel_admin/manage_films.php
+++ b/panel_admin/manage_films.php
@@ -44,7 +44,16 @@
                         <input type="submit" id="submit" value="Editar" name="edit_film" class="primary" />
                     </form> 
                 </td> 
-                <td> <input type=submit name="submit" value="Borrar" class="button" formaction="delete_film.php">  </td> 
+                <td> 
+                    <form method="post" action="./index.php?state=df">
+                        <input  name="id" type="hidden" value="'.$f->getId().'">
+                        <input  name="tittle" type="hidden" value="'.$f->getTittle().'">
+                        <input  name="duration" type="hidden" value="'.$f->getDuration().'">
+                        <input  name="language" type="hidden" value="'.$f->getLanguage().'">
+                        <input  name="description" type="hidden" value="'.$f->getDescription().'">
+                        <input type="submit" id="submit" value="Eliminar" name="delete_film" class="primary" />
+                    </form> 
+                </td> 
                 </tr>'; 
                 } 
         echo'<tbody>
diff --git a/panel_admin/panelAdmin.php b/panel_admin/panelAdmin.php
index f39057d..bdd7138 100644
--- a/panel_admin/panelAdmin.php
+++ b/panel_admin/panelAdmin.php
@@ -8,6 +8,7 @@
 
         function showPanel() {
             switch($this->state) {
+                case 'df': require('deleteFilm.php');break;
                 case 'ef': require('editFilm.php');break;
                 case 'mc': require('manage_cinemas.php'); break;
                 case 'mf': require('manage_films.php'); break;