friends.php

<?php
/**
 * I Have Plans -- Friend controller
 
 * @author Steven Dufresne <steven@enserfud.ca>
 * @link http://github.com/StevenDufresne/web-app
 * @copyright 2012 Steven Dufresne
 * @license BSD-3-Clause <https://github.com/stevendufresne/web-app/BSD-3-CLAUSE-LICENSE.txt>
 */


require_once 'includes/db.inc.php';
require_once 'includes/users.inc.php';
require_once 'includes/requests.inc.php';
require_once 'includes/functions.inc.php';

if ( !user_is_signed_in() ) {
	
	header('Location: index.php');
	exit;

}

$raw_email= filter_input(INPUT_POST, 'addEmail', FILTER_SANITIZE_STRING);
$user_id = ($_SESSION['user-id']);

$user_info = get_username ($db, $user_id);

if ($_SERVER['REQUEST_METHOD'] == 'POST') {

	$errors = array();


	if($raw_email !== ''){
		
		preg_match('/[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})/i', $raw_email, $matches);
		
		$email = $matches[0];

		$friend_id =  friend_email_check($db, $email);

	}

	if( isset($friend_id) ) {
		
		//check to see if they are already friends
		$friendAlready = check_friend_id ($db, $user_id, $friend_id);

		if( !$friendAlready && $friend_id !== $user_id ){

			// if they are not friends, add them
			add_friend_id ($db, $user_id, $friend_id, 0);

			//set the session to alert user that request has been sent.
			$_SESSION['friend-request'] = true;
		
			header('Location: friends.php');
			exit;
	
		}
	} else {

		$errors['no-user'] = true;

	}
}

include "views/friends.html.php";


?>