From ea9f92d2df1e94d26a6024ac1b07688824598691 Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Mon, 22 Jun 2020 02:18:45 +0200
Subject: [PATCH] Restrict calendar setup to the own doctor

---
 src/calendar_setup_form.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/calendar_setup_form.php b/src/calendar_setup_form.php
index dab3349..191f251 100644
--- a/src/calendar_setup_form.php
+++ b/src/calendar_setup_form.php
@@ -14,8 +14,17 @@
 
     $pdo = connectDatabase();
     $doctors = listDoctors($pdo);
+    closeDatabase($pdo);
     ?>
     <form name="create_form" method="post" action="calendar_management.php">
+        <?php
+        if($_SESSION["user_type"] == 2):
+            $pdo = connectDatabase();
+            $user = finduser($pdo, $_SESSION["user"]);
+            closeDatabase($pdo);
+        ?>
+        <input type="hidden" id="medico" name="medico" value="<?php echo $user[0][4]; ?>">
+        <?php else: ?>
         <div class="input-group">
             <select id="medico" name="medico">
                 <option>Seleccione un médico</option>
@@ -24,6 +33,7 @@
                 <?php endforeach ?>
             </select>
         </div>
+        <?php endif; ?>
         <div class="input-group">
             <label>Hora inicio mañana</label>
             <input type="time" name="hora_inicio_mañana" value="">