db.php

<?php

$dbConfig = [
    'host' => 'localhost',
    'port' => 3003,
    'name' => 'Cook_book',
    'user' => 'cook',
    'password' => 'cook2023!book'
];

function connectToDatabase($config)
{
    try {
        $dsn = "mysql:host={$config['host']};port={$config['port']};dbname={$config['name']}";
        $pdo = new PDO($dsn, $config['user'], $config['password']);
        $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        return $pdo;
    } catch (PDOException $e) {
        die("Connection failed: " . $e->getMessage());
    }
}

$pdo = connectToDatabase($dbConfig);

fetchData();

if ($_SERVER['REQUEST_METHOD'] === 'GET') {
    fetchData();
}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $data = json_decode(file_get_contents('php://input'), true);
    $action = $data['action'];

    // Validate the CSRF token here before processing the action
    // if (isset($data['csrf_token']) && $data['csrf_token'] === $_SESSION["csrf_token"]) {

    $postActions = [
        'insertRecipe' => 'updateRecipe',
    ];
    //}
}


function fetchData()
{
    global $pdo;
    $sqls = ['SELECT * FROM images', 'SELECT * FROM ingredients ORDER BY category'];
    $data = [];

    foreach ($sqls as $index => $sql) {

        try {
            $statement = $pdo->prepare($sql);
            if ($statement->execute()) {
                // Fetch data as associative array
                $result = $statement->fetchAll(PDO::FETCH_ASSOC);

                // Assign the result to the corresponding key in the $data array
                $data[$index] = $result;
            }
        } catch (Exception $e) {
            // Handle exceptions and return an error response
            header('Content-Type: application/json');
            echo json_encode(['error' => $e->getMessage()]);
        }
    }
    header('Content-Type: application/json');
    echo json_encode($data);
    exit(); // Ensure no additional output after JSON
}



function imgUpload()
{

    $uploadDir = "../../uploads/";
    $response = []; // Initialize the response array.

    // Create the uploads directory if it doesn't exist.
    if (!file_exists($uploadDir)) {
        mkdir($uploadDir, 0777, true);
    }

    $file_name = strip_tags($_FILES['image']['name']); //no html in filename
    $targetFile = $uploadDir . basename($file_name);

    // Check if the file is an actual image.
    $check = getimagesize($_FILES["image"]["tmp_name"]);

    if ($check !== false && $_FILES["image"]["size"] < 1000000) {
        // Check if the file already exists.
        if (file_exists($targetFile)) {
            $response['message'] = "Erreur: Désolé, ce fichier existe déjà." . $_FILES['image']['name'];
        } else {
            // Move the uploaded file to the specified directory.
            if (move_uploaded_file($_FILES["image"]["tmp_name"], $targetFile)) {
                // Call imgToDB to insert data and get the image ID and link.
                $imageInfo = imgToDB($targetFile);

                if ($imageInfo) {
                    $response['message'] = "Succès: file " . htmlspecialchars(basename($_FILES["image"]["name"])) . " has been uploaded.";
                    $response['id_img'] = $imageInfo['id_img'];
                    $response['link'] = str_replace("../../", "../", $imageInfo['link']);
                } else {
                    $response['message'] = "Échec de la création de l'entrée dans la base de données.";
                }
            } else {
                $response['message'] =  "Erreur: Une erreur s'est produite lors du téléchargement de votre fichier.";
            }
        }
    } else {
        $response['message'] =  "Erreur: Le fichier n'est pas une image ou la taille de l'image dépasse 1 Mo.";
    }

    // Return the response as JSON.
    header('Content-Type: application/json');
    echo json_encode($response);
}

function imgToDB($targetFile)
{
    try {
        global $pdo;
        $imageFileName = strip_tags($_FILES['file']['name']);
        $imageFilePath = str_replace("../../", "../", $targetFile);
        $type = "4";

        $stmt = $pdo->prepare("INSERT INTO images (name, link, type) VALUES (:filename, :file_path, :type)");
        $stmt->bindParam(':filename', $imageFileName);
        $stmt->bindParam(':file_path', $imageFilePath);
        $stmt->bindParam(':type', $type);

        if ($stmt->execute()) {
            // Fetch the last inserted ID.
            $lastInsertId = $pdo->lastInsertId();

            // Fetch the link of the last inserted ID.
            $stmt = $pdo->prepare("SELECT link FROM images WHERE id_img = :lastInsertId");
            $stmt->bindParam(':lastInsertId', $lastInsertId);
            $stmt->execute();
            $row = $stmt->fetch();

            // Return an array with the image ID and link.
            return ['id_img' => $lastInsertId, 'link' => $row['link']];
        } else {
            return null;
        }
    } catch (PDOException $e) {
        return null;
    }
}

function updateRecipe()
{
    $data = json_decode(file_get_contents('php://input'), true);
    
    $sql = '';

    try {
        global $pdo;
        // Prepare and execute the SQL update statement
        $statement = $pdo->prepare($sql);
        $statement->bindParam(':lastName', $lastName);
        $statement->bindParam(':firstName', $firstName);
        $statement->bindParam(':email', $email);
        $statement->bindParam(':rights', $rights);
        $statement->bindParam(':status', $statusUser);
        if (isset($userId)) {
            $statement->bindParam(':userId', $userId);
        }
        if (!empty($password)) {
            $statement->bindParam(':password', $hashedPassword);
        }
        if ($statement->execute()) {
            $response = ['message' => 'Success : Utilisateur mis à jour avec succès.'];
        }
    } catch (PDOException $e) {
        $response = handleError($e);
    }
    echo json_encode($response);
}