+
+
+
+
+HTML;
+
+ exit;
+
+ return true;
+
+ }
+
+ ##------------------------------------------------------------------##
+
+}
diff --git a/lib/site.lib.php b/lib/site.lib.php
new file mode 100644
index 0000000..d581cdb
--- /dev/null
+++ b/lib/site.lib.php
@@ -0,0 +1,657 @@
+SelectOne($sql);
+ if ( $db->_rowCount == 1 ) {
+ # if one record was returned then a user matching the credentials they
+ # supplied was found in the database. give them access.
+ $_SESSION['auth']['status'] = "access_granted";
+ $_SESSION['auth']['ipaddress'] = $_SERVER['REMOTE_ADDR'];
+
+ # dump all the users info into a session var, but unset the
+ # value of the password field
+ $_SESSION['user'] = $db->_row;
+ unset($_SESSION['user']['password']);
+
+ # determine the users age and put it in the session so that we don't have
+ # to calculate it over and over again as they view things. 31536000 is the
+ # number of seconds in a year.
+ $_SESSION['user']['age'] = floor((time() - $db->_row['birthday'])/31536000);
+ return true;
+ } else {
+ # not a valid user (not found in db)
+ $_SESSION['systemMsg'] = "Login incorrect.";
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# a simple function to check if a user is logged in which also verifies
+# that the request came from the same IP address as the original login
+function isLoggedIn() {
+
+ if (
+ isset($_SESSION['auth']) &&
+ ($_SESSION['auth']['status'] == "access_granted") &&
+ ($_SESSION['auth']['ipaddress'] == $_SERVER['REMOTE_ADDR'])
+ ) {
+ return true;
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# this function will check to see if a user is logged in, and if not will
+# redirect the user to the index page with an error. we could use the
+# isLoggedIn() function above directly, but that would require some if/thens
+# on the top of each script that required a login and then a rediction too.
+# this function just bundles all that into a neat package
+function loginRequired() {
+
+ global $config;
+
+ if ( isLoggedIn() ) {
+ return true;
+ } else {
+ header("Location: {$config->_rootUri}/");
+ exit;
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get a food category's name based on that categories id in the database
+function getFoodCategoryName($category) {
+
+ global $db;
+
+ $sql = "
+ SELECT fdgrp_desc
+ FROM foodCats
+ WHERE fdgrp_cd = '$category'
+ ";
+ $db->SelectOne($sql);
+ if ( $db->_rowCount == 1 ) {
+ return $db->_row['fdgrp_desc'];
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get a nutrients description based on that nutrients nutr_no in the database
+function getNutrientName($nutrient) {
+
+ global $db;
+
+ $sql = "
+ SELECT nutrdesc
+ FROM nutrientDefs
+ WHERE nutr_no = '$nutrient'
+ ";
+ $db->SelectOne($sql);
+ if ( $db->_rowCount == 1 ) {
+ return $db->_row['nutrdesc'];
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get any favorite foods based on user id
+function getFavoriteFoods($user) {
+
+ global $db;
+
+ # if the user hasn't marked any foods as favorites to
+ # show in the left sidebar dropdown, then just grab the
+ # first 15, else grab just their favorites
+ $sql = "
+ SELECT count(*) AS favCount
+ FROM userFoods
+ WHERE favorite = '1'
+ ";
+ $db->SelectOne($sql);
+
+ if ( $db->_row['favCount'] == "0" ) {
+ $sql = "
+ SELECT * FROM userFoods
+ WHERE user = '$user'
+ ORDER BY description
+ LIMIT 15
+ ";
+ } else {
+ $sql = "
+ SELECT * FROM userFoods
+ WHERE user = '$user'
+ AND favorite = '1'
+ ORDER BY description
+ ";
+ }
+
+ $db->Select($sql);
+ if ( $db->_rowCount > 0 ) {
+ return $db->_rows;
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get any favorite meals based on user id
+function getFavoriteMeals($user) {
+
+ global $db;
+
+ # if the user hasn't marked any meals as favorites to
+ # show in the left sidebar dropdown, then just grab the
+ # first 15, else grab just their favorites
+ $sql = "
+ SELECT count(*) AS favCount
+ FROM userMeals
+ WHERE favorite = '1'
+ ";
+ $db->SelectOne($sql);
+
+ if ( $db->_row['favCount'] == "0" ) {
+ $sql = "
+ SELECT * FROM userMeals
+ WHERE user = '$user'
+ ORDER BY description
+ LIMIT 15
+ ";
+ } else {
+ $sql = "
+ SELECT * FROM userMeals
+ WHERE user = '$user'
+ ORDER BY description
+ ";
+ }
+
+ $db->Select($sql);
+ if ( $db->_rowCount > 0 ) {
+ return $db->_rows;
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get all meals based on user id
+function getUserMeals($user) {
+
+ global $db;
+
+ $sql = "
+ SELECT * FROM userMeals
+ WHERE user = '$user'
+ ORDER BY description
+ ";
+
+ $db->Select($sql);
+ if ( $db->_rowCount > 0 ) {
+ return $db->_rows;
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# get all diaries based on user id
+function getUserDiaries($user) {
+
+ global $db;
+
+ $sql = "
+ SELECT * FROM userDiaries
+ WHERE user = '$user'
+ ORDER BY description
+ ";
+
+ $db->Select($sql);
+ if ( $db->_rowCount > 0 ) {
+ return $db->_rows;
+ } else {
+ return false;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# removes an item from the current meal in $_SESSION['currentMeal']
+function removeCurrentMealItem($mealItem) {
+
+ $objResponse = new xajaxResponse();
+
+ # remove the selected meal item from the session
+ if ( array_key_exists($mealItem, $_SESSION['currentMeal']) ) {
+ unset($_SESSION['currentMeal'][$mealItem]);
+ $objResponse->addRemove("currentMealItem-$mealItem");
+ $objResponse->addAssign("systemMsgs", "innerHTML", "The meal item was successfully removed.");
+ # if the session is empty then let the user know and remove
+ # anything like links to "View meal", "Clear meal", etc.
+ if ( count($_SESSION['currentMeal']) == 0 ) {
+ $objResponse->addAssign("divCurrentMeal", "innerHTML", "No items in meal.");
+ }
+ } else {
+ $objResponse->addAssign("systemMsgs", "innerHTML", "The specified meal item doesn't exist.");
+ }
+
+ return $objResponse;
+
+}
+
+ ##------------------------------------------------------------------##
+
+# removes all meal items from the current meal ($_SESSION['currentMeal'])
+function clearCurrentMeal() {
+
+ $objResponse = new xajaxResponse();
+
+ # unset the current meal session variable
+ if ( isset($_SESSION['currentMeal']) ) {
+ unset($_SESSION['currentMeal']);
+ }
+
+ # if it's still set here, then something went terribly wrong, otherwise
+ # clear the div and let the user know.
+ if ( isset($_SESSION['currentMeal']) ) {
+ $objResponse->addAssign("systemMsgs", "innerHTML", "There was an error. The current meal was not cleared.");
+ } else {
+ $objResponse->addAssign("divCurrentMeal", "innerHTML", "No items in meal.");
+ $objResponse->addAssign("systemMsgs", "innerHTML", "The current meal was successfully cleared.");
+ }
+
+ return $objResponse;
+
+}
+
+ ##------------------------------------------------------------------##
+
+# create form for editing a meal
+function loadMealToEdit($meal) {
+
+ global $config, $db;
+
+ $objResponse = new xajaxResponse();
+
+ $mealToEdit = "";
+
+ $sql = sprintf ("
+ SELECT userMeals.*, userMeals.id AS mealId, userMeals.description as mealDesc,
+ userMealItems.*, userMealItems.id as itemId, userMealItems.description as itemDesc
+ FROM userMeals LEFT JOIN userMealItems
+ ON userMeals.id = userMealItems.meal
+ WHERE userMeals.id = '%s' AND user = '%s'
+ ",
+ $meal,
+ $_SESSION['user']['id']
+ );
+ $db->Select($sql);
+
+ if ( $db->_rowCount == 0 ) {
+ $mealToEdit = "The selected saved meal doesn't exist.There was a database error.
+Script: $thisScript
+SQL: $sql
+Error: $this->_error
+\n<= Select a meal to edit."; + $objResponse->addAssign("editMeal","innerHTML", $mealToEdit); + return $objResponse; + } else { + $mealItems = $db->_rows; + $mealDesc = htmlspecialchars($mealItems[0]['mealDesc'], ENT_QUOTES); + $mealToEdit .= << + Meal name: + +
+
+HTML;
+ # here we grab and add all the possible predefined quantites
+ # so that the user can change the quantity from, for example,
+ # '1 large banana (7")' to '2 medium banana (5")' or something
+ # to that effect
+ foreach ( $mealItems as $key => $mealItem ) {
+ $sql = sprintf ("
+ SELECT seq AS weight, msre_desc
+ FROM weights
+ WHERE ndb_no = '%s'
+ ",
+ $mealItem['food']
+ );
+ $db->Select($sql);
+ $itemQuantities = $db->_rows;
+ $mealItems[$key]['quantities'] = $itemQuantities;
+
+ # we will use this array later, in the Modify action below
+ # to identify which meal items we need to update.
+ $itemIds[] = $mealItem['itemId'];
+
+ $mealItemDesc = htmlspecialchars($mealItem['itemDesc'], ENT_QUOTES);
+ $mealToEdit .= <<
+
+
+HTML;
+ }
+
+ if ( $mealItem['favorite'] == "1" ) {
+ $mealToEdit .= "
+ 
+ => Meal item:
+
+
+ => Meal item:
+
+
+
+ => Amount:
+
+ Favorite:
\n";
+ } else {
+ $mealToEdit .= " Favorite:
\n";
+ }
+
+ # separate itemIds with a comma
+ $mealItemIds = implode(",",$itemIds);
+ $mealToEdit .= <<
+
+
+
+
+
+
+
+
+HTML;
+ }
+
+ $objResponse->addAssign("editMeal","innerHTML", $mealToEdit);
+
+ return $objResponse;
+
+}
+
+ ##------------------------------------------------------------------##
+
+# create form for editing a food
+function loadFoodToEdit($food) {
+
+ global $config, $db;
+
+ $objResponse = new xajaxResponse();
+ $foodToEdit = "";
+
+ $sql = sprintf ("
+ SELECT * FROM userFoods
+ WHERE id = '%s' AND user = '%s'
+ ",
+ $food,
+ $_SESSION['user']['id']
+ );
+ $db->SelectOne($sql);
+
+ if ( $db->_rowCount == 0 ) {
+ $foodToEdit = "The selected saved food doesn't exist.\n<= Select a food to edit."; + $objResponse->addAssign("editFood","innerHTML", $foodToEdit); + return $objResponse; + } else { + $foodItem = $db->_row; + # here we grab and add all the possible predefined quantites + # so that the user can change the quantity from, for example, + # '1 large banana (7")' to '2 medium banana (5")' or something + # to that effect + $sql = sprintf (" + SELECT seq AS weight, msre_desc + FROM weights + WHERE ndb_no = '%s' + ", + $foodItem['food'] + ); + $db->Select($sql); + $itemQuantities = $db->_rows; + $foodItem['quantities'] = $itemQuantities; + + $foodDesc = htmlspecialchars($foodItem['description'], ENT_QUOTES); + $foodToEdit .= << +
Food name:
+
+ => Amount:
+
+HTML;
+ if ( $foodItem['favorite'] == "1" ) {
+ $foodToEdit .= " Favorite:
\n";
+ } else {
+ $foodToEdit .= " Favorite:
\n";
+ }
+ $foodToEdit .= <<
+
+
+
+
+
+
+
+HTML;
+ }
+
+ $objResponse->addAssign("editFood","innerHTML", $foodToEdit);
+
+ return $objResponse;
+
+}
+
+ ##------------------------------------------------------------------##
+
+# removes an item from a saved meal
+function removeMealItem($mealItem) {
+
+ global $db;
+
+ $objResponse = new xajaxResponse();
+
+ $sql = sprintf ("
+ DELETE userMealItems.*
+ FROM userMealItems INNER JOIN userMeals
+ ON userMealItems.meal = userMeals.id
+ INNER JOIN users
+ ON userMeals.user = users.id
+ WHERE users.id = '%s' AND userMealItems.id = '%s'
+ ",
+ $_SESSION['user']['id'],
+ $mealItem
+ );
+ $db->Modify($sql);
+
+ if ( $db->_affectedRows == "1" ) {
+ $objResponse->addRemove("mealItem-$mealItem");
+ $objResponse->addAssign("systemMsgs", "innerHTML", "The meal item was successfully removed.");
+ return $objResponse;
+ } else {
+ $objResponse->addAssign("systemMsgs", "innerHTML", "There was an error. The meal item was not meal.");
+ return $objResponse;
+ }
+
+}
+ ##------------------------------------------------------------------##
+
+# removes an item from a diary
+function removeDiaryItem($diaryItem) {
+
+ global $db;
+
+ $objResponse = new xajaxResponse();
+
+ $sql = sprintf ("
+ DELETE userDiaryItems.*
+ FROM userDiaryItems INNER JOIN userDiaries
+ ON userDiaryItems.diary = userDiaries.id
+ WHERE userDiaries.user = '%s'
+ AND userDiaryItems.id = '%s'
+ ",
+ $_SESSION['user']['id'],
+ $diaryItem
+ );
+ $db->Modify($sql);
+
+ if ( $db->_affectedRows == "1" ) {
+ $objResponse->addRemove("itemRow-$diaryItem");
+ $objResponse->addAssign("systemMsgs", "innerHTML", "The diary item was successfully deleted.");
+ return $objResponse;
+ } else {
+ $objResponse->addAssign("systemMsgs", "innerHTML", "There was an error. The diary item was not deleted.");
+ return $objResponse;
+ }
+
+}
+
+ ##------------------------------------------------------------------##
+
+# checks to see if a username already exists in the db during the registration process
+function usernameExists($username) {
+
+ global $db;
+
+ $objResponse = new xajaxResponse();
+
+ $sql = sprintf ("
+ SELECT username FROM users
+ WHERE username = '%s'
+ ",
+ trim($username)
+ );
+ $db->Select($sql);
+ if ( $db->_rowCount > 0 ) {
+ $alert = "The login name you selected is already in use. Please select another.";
+ $objResponse->addAlert($alert);
+ $objResponse->addScript("xajax.$('formRegisterUser').username.focus();");
+ $objResponse->addScript("return false;");
+ } else {
+ $objResponse->addScript("xajax.$('formRegisterUser').submit();");
+ }
+
+ return $objResponse;
+
+}
+
+ ##------------------------------------------------------------------##
+
+# increment the "popularity" counter for the supplied ndb_no.
+# table will be: foodDesc, userFoods, or userMeals ... we use it to determine
+# which counter to increment. the name corresponds to the relevant table
+# so we can just plug it into the query directly
+
+function incrementPopularityCounter($id, $table) {
+
+ global $db;
+
+ # we keep track of which items a user has selected during a given
+ # session and we only allow a popularity counter to be incremented
+ # for a given item once per session. this isn't fool-proof, but it
+ # should help to stem someone repeatedly clicking on the same item
+ # in order to raise it's popularity artificially .. at least it will
+ # be more of a hassle for someone to do it.
+ if ( ! empty($_SESSION['popularity']) && in_array("$id{$table}", $_SESSION['popularity']) ) {
+ # this user has already selected this item during this session
+ # so don't increment the popularity counter
+ return false;
+ }
+
+ switch ( $table ) {
+ case "foodDescs":
+ $idField = "ndb_no";
+ break;
+ case "userFoods":
+ $idField = "id";
+ break;
+ case "userMeals":
+ $idField = "id";
+ break;
+ default:
+ # the table isn't valid
+ return false;
+ }
+
+ $sql = sprintf ("
+ UPDATE %s
+ SET popularity = (popularity + 1)
+ WHERE %s = '%s'
+ ",
+ $table,
+ $idField,
+ $id
+ );
+ $db->Modify($sql);
+
+ # add this food to the list so that this user can't trigger another
+ # popularity increment for this food during this session.
+ $_SESSION['popularity'][] = "$id{$table}";
+
+ return true;
+
+}
+
+ ##------------------------------------------------------------------##
+
+?>
diff --git a/lib/standard.lib.php b/lib/standard.lib.php
new file mode 100644
index 0000000..503052e
--- /dev/null
+++ b/lib/standard.lib.php
@@ -0,0 +1,112 @@
+SelectOne($paginationSql);
+ $totalRecords = $db->_row['rowCount'];
+ $totalPages = ceil($totalRecords / $config->_recordsPerPage);
+
+ # if the total records are less than what we show per page, then
+ # just skip everything else below
+ if ( $totalRecords <= $config->_recordsPerPage ) {
+ $fromRecord = ($pageOffset + 1);
+ $pageNav .= <<