ugly delete added

Author: drdixit

Core/router.php

@@ -22,7 +22,7 @@ function abort($code = 404)
 {
     http_response_code($code);
     // TODO: check for corresponding view file if it exists or not
-    require "views/{$code}.php";
+    require base_path("views/{$code}.php");
     die();
 }
 

controllers/notes/show.php

@@ -5,27 +5,46 @@
 use Core\Database;
 
 $db = new Database($config['database']);
+$currentUserId = 5;
 
-if($_SERVER['REQUEST_METHOD'] === 'POST') {
-    echo "Deleting...";
-}
+if ($_SERVER['REQUEST_METHOD'] === 'POST') {
+    // form was submitted delete the current note
+    $note = $db->query('SELECT * FROM notes where id = :id', [
+        'id' => $_GET['id']
+    ])->findOrFail();
+
+
+    authorize($note['user_id'] === $currentUserId);
+
+    // dd($_POST);
+    $db->query('DELETE FROM notes WHERE id = :id', [
+        ':id' => $_POST['id'],
+    ]);
 
-// $heading = 'Note';
-$currentUserId = 5;
 
-$note = $db->query('SELECT * FROM notes where id = :id', [
-    'id' => $_GET['id']
-])->findOrFail();
+    header('location: /notes');
+    exit();
+} else {
 
 
-authorize($note['user_id'] === $currentUserId);
+    // $heading = 'Note';
+    // $currentUserId = 5;
 
-// include base_path('views/notes/show.view.php');
-view('notes/show.view.php', [
-    'heading' => 'Note',
-    'note' => $note
-]);
+    $note = $db->query('SELECT * FROM notes where id = :id', [
+        'id' => $_GET['id']
+    ])->findOrFail();
 
-// both is acceptable with : and without : no difference
-// $notes = $db->query('SELECT * FROM notes where id = :id', ['id' => $id])->fetch();
-// $notes = $db->query('SELECT * FROM notes where id = :id', [':id' => $id])->fetch();
+
+    authorize($note['user_id'] === $currentUserId);
+
+    // include base_path('views/notes/show.view.php');
+    view('notes/show.view.php', [
+        'heading' => 'Note',
+        'note' => $note
+    ]);
+
+    // both is acceptable with : and without : no difference
+    // $notes = $db->query('SELECT * FROM notes where id = :id', ['id' => $id])->fetch();
+    // $notes = $db->query('SELECT * FROM notes where id = :id', [':id' => $id])->fetch();
+
+}

views/notes/show.view.php

@@ -11,6 +11,7 @@
 
 
         <form class="mt-6" method="POST">
+            <input type="hidden" name="id" value="<?= $note['id'] ?>">
             <button class="text-sm text-red-500">Delete</button>
         </form>
     </div>