First Commit

app/Controllers/CrudExampleController.php

@@ -0,0 +1,174 @@
+<?php
+
+namespace App\Controllers;
+
+use eftec\bladeone\BladeOne;
+use Psr\Http\Message\ResponseInterface as Response;
+use Psr\Http\Message\ServerRequestInterface as Request;
+use Monolog\Logger;
+use App\Models\CrudExample;
+use App\Services\Sanitizer;
+use App\Services\BaseController;
+
+class CrudExampleController extends BaseController
+{
+    protected $blade;
+    protected $logger;
+
+    public function __construct(BladeOne $blade, Logger $logger)
+    {
+        $this->blade = $blade;
+        $this->logger = $logger;
+    }
+
+    protected function validateCsrfToken($token)
+    {
+        return hash_equals($_SESSION['csrf_token'], $token);
+    }
+
+    public function index(Request $request): string
+    {
+        try {
+            $crudexample = CrudExample::all();
+            $this->logger->info('Displaying the CrudExampleController page.');
+
+            if ($crudexample->isEmpty()) {
+                $this->logger->warning('No records found in the database.');
+                // Continue with rendering the view instead of returning a message
+            }
+
+            $crudexample = Sanitizer::sanitizeOutput($crudexample->toArray());
+
+            return $this->blade->run('crudexample.index', ['crudexample' => $crudexample]);
+
+        } catch (\Exception $e) {
+            $this->logger->error('Error when querying the database: ' . $e->getMessage());
+            return 'Error when querying the database: ' . $e->getMessage();
+        }
+    }
+
+    public function edit(Request $request, $id): string
+    {
+        try {
+            $this->logger->info('Editing record with ID: ' . $id);
+            $crudexample = CrudExample::find($id);
+            if (!$crudexample) {
+                return 'Record not found';
+            }
+
+            $csrfToken = generateCsrfToken();
+            $crudexample = Sanitizer::sanitizeOutput($crudexample->toArray());
+
+            return $this->blade->run('crudexample.edit', ['crudexample' => $crudexample, 'csrfToken' => $csrfToken]);
+        } catch (\Exception $e) {
+            $this->logger->error('Error when displaying the edit page: ' . $e->getMessage());
+            return 'Error when displaying the edit page: ' . $e->getMessage();
+        }
+    }
+
+    public function create(): string
+    {
+        try {
+            return $this->blade->run('crudexample.create', ['error' => null]);
+        } catch (\Exception $e) {
+            $this->logger->error('Error when displaying the create page: ' . $e->getMessage());
+            return 'Error when displaying the create page: ' . $e->getMessage();
+        }
+    }
+
+    public function store()
+    {
+        try {
+            $data = $_POST;
+
+            if (!isset($data['csrf_token']) || !$this->validateCsrfToken($data['csrf_token'])) {
+                throw new \Exception('Invalid CSRF token.');
+            }
+
+            $data = Sanitizer::sanitizeInput($data);
+
+            if (!isset($data['password']) || empty($data['password'])) {
+                throw new \Exception('The "password" field is required.');
+            }
+
+            $data['password'] = password_hash($data['password'], PASSWORD_BCRYPT);
+
+            CrudExample::create($data);
+
+            header('Location: /crudexample');
+            exit;
+        } catch (\Exception $e) {
+            if ($e->getCode() == 23000) { // Error code for duplicate
+                $this->logger->error('Error when creating record: Duplicate email.');
+                return $this->blade->run('crudexample.create', ['error' => 'This email already exists.']);
+            } else {
+                $this->logger->error('Error when creating record: ' . $e->getMessage());
+                echo 'Error when creating record: ' . $e->getMessage();
+            }
+        }
+    }
+
+    public function update($id)
+    {
+        try {
+            $data = $_POST;
+
+            if (!isset($data['csrf_token']) || !$this->validateCsrfToken($data['csrf_token'])) {
+                throw new \Exception('Invalid CSRF token.');
+            }
+
+            $data = Sanitizer::sanitizeInput($data);
+
+            if (isset($data['password']) && !empty($data['password'])) {
+                $data['password'] = password_hash($data['password'], PASSWORD_BCRYPT);
+            } else {
+                unset($data['password']);
+            }
+
+            $crudexample = CrudExample::find($id);
+            if ($crudexample) {
+                $crudexample->update($data);
+            }
+
+            header('Location: /crudexample');
+            exit;
+        } catch (\Exception $e) {
+            $this->logger->error('Error when updating record: ' . $e->getMessage());
+            echo 'Error when updating record: ' . $e->getMessage();
+        }
+    }
+
+    public function show(Request $request, $id): string
+    {
+        try {
+            $crudexample = CrudExample::find($id);
+            if (!$crudexample) {
+                return 'Record not found';
+            }
+
+            $crudexample = Sanitizer::sanitizeOutput($crudexample->toArray());
+
+            return $this->blade->run('crudexample.show', ['crudexample' => $crudexample]);
+        } catch (\Exception $e) {
+            $this->logger->error('Error when displaying record details: ' . $e->getMessage());
+            return 'Error when displaying record details: ' . $e->getMessage();
+        }
+    }
+
+    public function delete(Request $request, $id)
+    {
+        try {
+            $this->logger->info('Deleting record with ID: ' . $id);
+            $crudexample = CrudExample::find($id);
+            if ($crudexample) {
+                $crudexample->delete();
+            }
+
+            header('Location: /crudexample');
+            exit;
+        } catch (\Exception $e) {
+            $this->logger->error('Error when deleting record: ' . $e->getMessage());
+            echo 'Error when deleting record: ' . $e->getMessage();
+        }
+    }
+}