Choose.php

<?php
require_once '../Composer/vendor/autoload.php';
require_once 'Configuration.php';
require_once 'Controllers/Authenticator.php';

if (!Authenticator::IsLoggedIn())
{
	Redirect('/login');
	return;
}

$TaskStates = TaskState::GetTaskStates();
if ($TaskStates[TaskIds::Choose]->Task->Status != Task::Available)
{
	http_response_code(403);
	return;
}

if (isset($_POST['DeleteEntryId']))
{
	try
	{
		$GLOBALS['YearbookModel']->RemoveBiographyEntry($_SESSION['StudentId'], $_POST['DeleteEntryId']);
	}
	catch (MeekroDBException $DBException)
	{
		// Swallow :(
		// If we could distinguish between an ownership check failure versus a DB error, we could return appropriate error codes...
	}
}

$AddSuccess = true;
if (isset($_POST['AuthorStudentId']))
{
	try
	{
		$GLOBALS['YearbookModel']->AddBiographyEntry($_POST['AuthorStudentId'], $_SESSION['StudentId']);
	}
	catch (MeekroDBException $DBException)
	{
        $AddSuccess = false;
	}
}

$Template = new Twig_Environment(new Twig_Loader_Filesystem(array('Templates', 'Templates/Modules')), array('cache' => '../Cache', 'auto_reload' => true));
$Template->display(
	'Choose.html',
	array(
		'Students' => $GLOBALS['YearbookModel']->FindStudents(),
        'BiographyEntries' => $GLOBALS['YearbookModel']->FindBiographiesByTargetStudentId($_SESSION['StudentId']),
        'OperationSuccessful' => $AddSuccess, 
		'TaskStates' => $TaskStates
	)
);