OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/19/2025 10:07:16 AM	rwxr-xr-x
📄 updateQuestion.php	3.64 KB	05/19/2025 10:07:16 AM	rw-r--r--
📄 updateQuiz.php	3.57 KB	05/19/2025 10:07:16 AM	rw-r--r--

Editing: updateQuiz.php

<?
require_once('../assets/php/validate.logged.php');
require_once('../assets/php/db_config.php');

if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    if (($_POST['act']) == "update") {

$quizName = isset($_POST['quizName']) ? $_POST['quizName'] : null;
        $quizDuration = isset($_POST['quizDuration']) ? $_POST['quizDuration'] : null;
        $startTime = isset($_POST['startTime']) ? $_POST['startTime'] : null;
        $endTime = isset($_POST['endTime']) ? $_POST['endTime'] : null;
        $quizDescription = isset($_POST['quizDescription']) ? $_POST['quizDescription'] : null;
        $quizStatus = isset($_POST['quizStatus']) ? $_POST['quizStatus'] : null;
        $quizId = isset($_POST['quizId']) ? $_POST['quizId'] : null;

// Validate input
        if (empty($quizId) || !is_numeric($quizId)) {
            echo json_encode(['success' => false, 'message' => 'Invalid Quiz ID']);
            exit;
        }

// SQL Query
        $sql = "UPDATE quizes SET quiz_name=?,duration=?, start_time=?, end_time=?, description=?, isCompleted=? WHERE id=?";

// Prepare the statement
        $stmt = $conn->prepare($sql);

// Bind the parameters
        $stmt->bind_param("sissssi", $quizName,$quizDuration, $startTime, $endTime, $quizDescription, $quizStatus, $quizId);

// Execute the statement
        if ($stmt->execute()) {
            // Success
            echo json_encode(['success' => true, 'message' => 'Quiz Details updated successfully']);
        } else {
            // Error handling
            echo json_encode(['success' => false, 'message' => 'Error: ' . $stmt->error]);
        }

// Close the statement and connection
        $stmt->close();
    } elseif (($_POST['act']) == "new") {

// SQL Query
        $sql = "INSERT INTO quizes (quiz_name,duration, start_time, end_time, description) VALUES (?,?, ?, ?, ?)";

// Prepare the statement
        $stmt = $conn->prepare($sql);

// Bind the parameters
        $stmt->bind_param("sisss", $quizName, $quizDuration,$startTime, $endTime, $quizDescription);

// Close the statement and connection
        $stmt->close();
    } elseif (($_POST['act']) == "delete") {

$quizId = $_POST['id'];

// Prepare the SQL DELETE query
        $sql = "DELETE FROM quizes WHERE id = ?";

// Prepare the statement
        $stmt = $conn->prepare($sql);

// Bind the parameter (quizId)
        $stmt->bind_param("i", $quizId);

// Execute the DELETE statement
        if ($stmt->execute()) {
            echo "success";  // Return success message if deletion is successful
        } else {
            echo "error";    // Return error message if something goes wrong
        }

// Close the statement
        $stmt->close();
    }
}