AppStateESS/InternshipInventory

<?php
/**
 * This file is part of Internship Inventory.
 *
 * Internship Inventory is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.

 * Internship Inventory is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License version 3
 * along with Internship Inventory.  If not, see <http://www.gnu.org/licenses/>.
 *
 * Copyright 2011-2018 Appalachian State University
 */

namespace Intern\Command;
use \phpws2\Database;

class DeptRest {

    public function execute()
    {

        switch($_SERVER['REQUEST_METHOD']) {
            case 'PUT':
                $this->put();
                exit;
            case 'GET':
                $data = $this->get();
                echo (json_encode($data));
                exit;
            case 'POST':
                $this->post();
                exit;
            default:
                header('HTTP/1.1 405 Method Not Allowed');
                exit;
        }
    }

    public function post()
    {
        $dept = $_REQUEST['create'];

        if ($dept == '')
        {
            header('HTTP/1.1 500 Internal Server Error');
            echo("Missing Department Title.");
            exit;
        }

        $db = Database::newDB();
        $pdo = $db->getPDO();

        $sql = "INSERT INTO intern_department (id, name, hidden, corequisite)
                VALUES (nextval('intern_department_seq'), :dept, :hidden, :corequisite)";

        $sth = $pdo->prepare($sql);

        $sth->execute(array('dept'=>$dept, 'hidden'=>0, 'corequisite'=>0));

    }
    public function put()
    {
        $db = Database::newDB();
        $pdo = $db->getPDO();

        if(isset($_REQUEST['val']))
        {
            //hidden value
            $hVal = $_REQUEST['val'];
            $id = $_REQUEST['id'];

            $sql = "UPDATE intern_department
                    SET hidden=:val
                    WHERE id=:id";

            $sth = $pdo->prepare($sql);

            $sth->execute(array('val'=>$hVal, 'id'=>$id));
        }
        else if(isset($_REQUEST['name']))
        {
            $mname = $_REQUEST['name'];
            $id = $_REQUEST['id'];

            $sql = "UPDATE intern_department
                    SET name=:mname
                    WHERE id=:id";

            $sth = $pdo->prepare($sql);

            $sth->execute(array('mname'=>$mname, 'id'=>$id));
        }
    }

    public function get()
    {
        $db = Database::newDB();
        $pdo = $db->getPDO();

        if(isset($_REQUEST['hidden'])){
            $sql = "SELECT id, name
                    FROM intern_department
                    WHERE hidden = 0 ORDER BY name ASC";
        }else{
            $sql = "SELECT id, name, hidden
                    FROM intern_department
                    ORDER BY name ASC";
        }

        $sth = $pdo->prepare($sql);

        $sth->execute();
        $result = $sth->fetchAll(\PDO::FETCH_ASSOC);

        return $result;
    }
}