plateforme-tfjm2/server_files/controllers/ajouter_equipe.php

<?php

require_once "../config.php";

$tournaments_response = $DB->query("SELECT `id`, `name` FROM `tournaments` WHERE `date_inscription` > CURRENT_DATE AND `year` = '$YEAR';");

if (isset($_POST["submitted"])) {
    $error_message = registerTeam();
}

function registerTeam() {
    global $DB, $YEAR, $MAIL_ADDRESS, $access_code;

    if ($_SESSION["team_id"] != NULL)
        return "Vous êtes déjà dans une équipe.";

    $name = htmlspecialchars($_POST["name"]);

    if (!isset($name) || $name == "")
        return "Vous devez spécifier un nom d'équipe.";

    $result = $DB->query("SELECT `id` FROM `teams` WHERE `name` = '" . $name . "' AND `year` = '$YEAR';");
    if ($result->fetch())
        return "Une équipe existe déjà avec ce nom.";

    $trigram = strtoupper(htmlspecialchars($_POST["trigram"]));

    if (!preg_match("#^[A-Z][A-Z][A-Z]$#", $trigram))
        return "Le trigramme entré n'est pas valide.";

    $result = $DB->query("SELECT `id` FROM `teams` WHERE `trigram` = '" . $trigram . "' AND `year` = '$YEAR';");
    if ($result->fetch())
        return "Une équipe a déjà choisi ce trigramme.";

    $tournament_id = intval(htmlspecialchars($_POST["tournament"]));

    $result = $DB->query("SELECT `id`, `name` FROM `tournaments` WHERE `id` = '" . $tournament_id . "' AND `year` = '$YEAR';");
    $data = $result->fetch();
    if ($data === FALSE)
        return "Le tournoi spécifié n'existe pas.";

    $alphabet = "0123456789abcdefghijkmnopqrstuvwxyz0123456789";
    $access_code = "";
    for ($i = 0; $i < 6; ++$i)
        $access_code .= $alphabet[rand(0, strlen($alphabet) - 1)];

    $req = $DB->prepare("INSERT INTO `teams` (`name`, `trigram`, `tournament`, `encadrant_1`, `participant_1`, `validation_status`, `access_code`, `year`)
                           VALUES (?, ?, ?, ?, ?, ?, ?, ?);");
    $req->execute([$name, $trigram, $tournament_id, $_SESSION["role"] == "ENCADRANT" ? $_SESSION["user_id"] : NULL,
        $_SESSION["role"] == "PARTICIPANT" ? $_SESSION["user_id"] : NULL, "NOT_READY", $access_code, $YEAR]);

	$result = $DB->query("SELECT `id` FROM `teams` WHERE `name` = '" . $name . "' AND `year` = '$YEAR';");
	$data_team = $result->fetch();
	$DB->prepare("UPDATE `users` SET `team_id` = ? WHERE `id` = " . $_SESSION["user_id"] . ";")->execute([$data_team["id"]]);

    $msg = "Bonjour " . $_SESSION["first_name"] . " " . $_SESSION["surname"] . ",\r\n\r\n";
    $msg .= "Vous venez de créer l'équipe « $name » ($trigram) pour le TFJM² de " . $data["name"] . " et nous vous en remercions. ";
    $msg .= "Afin de permettre aux autres membres de votre équipe de vous rejoindre, veuillez leur transmettre le code d'accès : " . $access_code . "\r\n\r\n";
    $msg .= "Cordialement,\r\n\r\nL'organisation du TFJM² $YEAR";
    mail($_SESSION["email"], "Nouvelle équipe TFJM² $YEAR", $msg, "From: $MAIL_ADDRESS\r\n");

    return false;
}

require_once "../views/header.php";
require_once "../views/ajouter_equipe.php";
require_once "../views/footer.php";