WIP booking out

action.php

@@ -88,11 +88,45 @@ function opCancel() {
 }
 
 function opLanded() {
+
+    $date = date('Y-m-d');
+    $time = urldecode($_GET['time']);
+    $landed_dt = $date . ' ' . $time;
+
     $conn = connectDb();
-    $sql = "UPDATE submitted SET status = 'LANDED', landed_dt = NOW() where id = " . $_GET['id'];
-    $result = $conn->query($sql);
-    logJournal($conn, $_GET['id'], "Marked Landed");
+    $sql = "UPDATE submitted SET status = 'LANDED', landed_dt = ? WHERE id = ?";
+
+    $stmt = $conn->prepare($sql);
+    $stmt->bind_param("si", $landed_dt, $_GET['id']);
+
+    $stmt->execute();
+    $stmt->close();
+
+    logJournal($conn, $_GET['id'], "Marked Landed at time " . $time);
+
     $conn->close();
+
+}
+
+function opDeparted() {
+
+    $date = date('Y-m-d');
+    $time = urldecode($_GET['time']);
+    $departed_dt = $date . ' ' . $time;
+
+    $conn = connectDb();
+    $sql = "UPDATE submitted SET status = 'DEPARTED', departed_dt = ? WHERE id = ?";
+
+    $stmt = $conn->prepare($sql);
+    $stmt->bind_param("si", $departed_dt, $_GET['id']);
+
+    $stmt->execute();
+    $stmt->close();
+
+    logJournal($conn, $_GET['id'], "Marked Departed at time " . $time);
+
+    $conn->close();
+
 }
 
 function opDelete() {
@@ -148,6 +182,9 @@ switch($_GET['op']) {
     case "landed":
         opLanded();
         break;
+    case "departed":
+        opDeparted();
+        break;
     case "delete":
         opDelete();
         break;