created project structureapi /, public/, migrations/, scripts/, legacy/

legacy/delete_data.php

@@ -0,0 +1,48 @@
+<?php
+
+
+	// ToDo's
+	// Whitelists oder Prepared Statements gegen SQL-Injection hinzufügen
+
+
+    include 'init.php';
+
+    $request = htmlspecialchars($_POST['request'], ENT_QUOTES);
+
+    if ($request=='buildings') {
+        $webgis_id = htmlspecialchars($_POST['webgis_id'], ENT_QUOTES);
+
+        try {
+
+            $pdo -> query("DELETE FROM buildings WHERE webgis_id = '$webgis_id'");
+
+        } catch (PDOException $e) {
+            echo "ERROR ".$e->getMessage();
+        }
+    }
+
+    if ($request == 'pipelines') {
+		$webgis_id = htmlspecialchars($_POST['webgis_id'], ENT_QUOTES);
+
+		try {
+
+			$pdo -> query("DELETE from pipelines where webgis_id= '$webgis_id' ");
+
+		} catch(PDOException $e) {
+			echo "ERROR ".$e->getMessage();
+		}
+	}
+
+    if ($request == 'valves') {
+		$webgis_id = htmlspecialchars($_POST['webgis_id'], ENT_QUOTES);
+
+		try {
+
+			$pdo -> query("DELETE from valves where webgis_id= '$webgis_id' ");
+
+		} catch(PDOException $e) {
+			echo "ERROR ".$e->getMessage();
+		}
+	}
+
+?>