view.php

<?php
require "includes/bootstrap.inc";
$mysqli = connecti();

$nm = $_REQUEST['name'];
$grin = $_REQUEST['grin'];

require "theme/normal_header.php";

// Will take both uids and names
// DEM sep2014: But treat them differently!
// DEM feb2018: Allow GRIN ID parameter too, for line_record searches.

$table = strip_tags($_REQUEST['table']);
$table = preg_replace("/[^a-zA-Z_]/", "", $table);
$prettified = beautifulTableName($table, 0);
$id = $_REQUEST['uid'];
$pattern = '/user/i';
if (preg_match($pattern, $table)) {
    error(1, "No Record Found");
} elseif ($id) {
    // Argument is a record uid.
    $pkey = get_pkey($table);
    $name = get_unique_name($table);
    $sql = "SELECT $pkey, $name FROM $table where $pkey = ?";
    if ($stmt = mysqli_prepare($mysqli, $sql)) {
        mysqli_stmt_bind_param($stmt, "i", $id);
        mysqli_stmt_execute($stmt);
        mysqli_stmt_bind_result($stmt, $pkey, $n);
        if (mysqli_stmt_fetch($stmt)) {
            echo "<h1>$prettified $n</h1>";
            echo "<div class=boxContent>";
            mysqli_stmt_close($stmt);
            $func = "show_" . $table;
        // Is there a custom function for that table in includes/general.inc
        // or includes/pedigree.inc?  examples:
        //  line_records = includes/pedigree.inc/show_line_records()
        //  markers = includes/general.inc/show_markers()
        //  breeding_programs = includes/general.inc/show_breeding_programs()
            if (function_exists($func)) {
                call_user_func($func, $pkey);
            } else {
                // Default to raw table dump using includes/general.inc:show_general().
                show_general($table, $pkey);
            }
            echo "</div>";
        } else {
            error(1, "No Record Found");
            mysqli_stmt_close($stmt);
        }
    }
} elseif ($nm) {
    // Argument is a record name.
    $pkey = get_pkey($table);
    $name = get_unique_name($table);
    $sql = "SELECT $pkey FROM $table WHERE $name = ?";
    if ($stmt = mysqli_prepare($mysqli, $sql)) {
        mysqli_stmt_bind_param($stmt, "s", $nm);
        mysqli_stmt_execute($stmt);
        mysqli_stmt_bind_result($stmt, $rec);
        if (mysqli_stmt_fetch($stmt)) {
            echo "<h1>$prettified " . htmlspecialchars($nm) . "</h1>";
            echo "<div class=boxContent>";
            $func = "show_" . $table;
            mysqli_stmt_close($stmt);
            if (function_exists($func)) {
                call_user_func($func, $rec);
            } else {
                show_general($table, $rec);
            }
            echo "</div>";
        } else {
            error(1, "No Record Found");
            mysqli_stmt_close($stmt);
        }
    }
} elseif ($grin) {
    // Argument is a GRIN accession ID.
    $sql = "select line_record_uid
    from barley_pedigree_catalog_ref
    where barley_ref_number like ?
    and barley_pedigree_catalog_uid in
    (select barley_pedigree_catalog_uid
       from barley_pedigree_catalog
       where barley_pedigree_catalog_name = 'GRIN')";
    if ($stmt = mysqli_prepare($mysqli, $sql)) {
        mysqli_stmt_bind_param($stmt, "s", $grin);
        mysqli_stmt_execute($stmt);
        mysqli_stmt_bind_result($stmt, $rec);
        if (mysqli_stmt_fetch($stmt)) {
            mysqli_stmt_close($stmt);
            echo "<h1>Line Record for GRIN " . htmlspecialchars($grin) . "</h1>";
            echo "<div class=boxContent>";
            show_line_records($rec);
            echo "</div>";
        } else {
            error(1, "No Record Found");
            mysqli_stmt_close($stmt);
        }
    } else {
        echo "Error mysqli_error($mysqli)";
    }
}

echo "</div>";
mysqli_close($mysqli);
require "theme/footer.php";