1 files changed, 75 insertions, 0 deletions
diff --git a/www/reorder.php b/www/reorder.php
new file mode 100644
index 0000000..375ee62
--- /dev/null
+++ b/www/reorder.php
@@ -0,0 +1,75 @@
+<?php
+
+/*
+    PassMan - simple password manager
+    Copyright (C) 2018 Ian Cowburn
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+require 'config.php';
+require 'common.php';
+
+$result = array();
+
+try
+{
+    $db = ConnectDB();
+
+    $from_id = $_REQUEST["from_id"];
+    $to_id = $_REQUEST["to_id"];
+    $from_display = 0;
+    $to_display = 0;
+
+    $cmd = $db->prepare("SELECT display FROM pm_store ".
+    				"WHERE id = :id");
+    $cmd->bindParam(":id", $from_id);
+    $cmd->execute();
+
+    $data = $cmd->fetch();
+
+    $from_display = $data["display"];
+
+    $cmd->bindParam(":id", $to_id);
+    $cmd->execute();
+
+    $data = $cmd->fetch();
+
+    $to_display = $data["display"];
+
+    $from_update = $db->prepare("UPDATE pm_store SET display = :to_display " .
+				    "WHERE id = :from_id");
+    $from_update->bindParam(":to_display", $to_display);
+    $from_update->bindParam(":from_id", $from_id);
+    $from_update->execute();
+
+    $to_update = $db->prepare("UPDATE pm_store SET display = :from_display " .
+				    "WHERE id = :to_id");
+    $to_update->bindParam(":from_display", $from_display);
+    $to_update->bindParam(":to_id", $to_id);
+    $to_update->execute();
+
+    $result["status"] = true;
+
+    $db = null;
+}
+catch(PDOException $e)
+{
+    $result["error"] = "DB error:" . $e->getMessage();
+}
+
+header("Content-type:application/json");
+echo json_encode($result);
+
+?>