<?PHP
ini_set('display_errors', 1);
error_reporting(-1);
include "mysql.php";
$table = 'ENTRIES';
$cat = 'CATEGORIES';
$QUERYTYPE = '1';
//Leeres Formular
if (empty($_GET['QUERYTYPE']) && !empty($_POST)) {
$language = mysqli_real_escape_string ( $con , $_POST['CAT']);
$sql = "INSERT INTO $table SET
TITLE = '$_POST[title]',
SUMMARY = '$_POST[summary]',
CAT = '$language',
CONTENT = '$_POST[content]'";
$result = mysqli_query($con , $sql);
}
//Formualar bearbeiten
if ($_GET['QUERYTYPE'] == 1 && !empty($_POST)) {
$language = mysqli_real_escape_string ( $con , $_POST['CAT']);
$sql = "UPDATE $table SET
TITLE = '$_POST[title]',
SUMMARY = '$_POST[summary]',
CAT = '$language',
CONTENT = '$_POST[content]' WHERE ID = '$_GET[id]'";
$result = mysqli_query($con , $sql);
}
//Prüfen ob die action 'delete' ist
if($_GET['ACTION'] == 'delete'){
//Prüfen ob die ID auch brav eine Nummer ist
//TODO: Wennn nicht, schöner abfangen und nicht den Code einfach abbrechen wie in diesem Beispiel
$sql = "DELETE FROM $table WHERE ID = '$_GET[id]'";
//und ausführen
mysqli_query($sql);
}
//Eintröge abrufen
$SQL = "SELECT * from $table";
$result = mysqli_query($con, $SQL );
$currentIndex = 0;
while( $row = mysqli_fetch_array( $result ) ) {
$bgColor = "#ffffff";
if($currentIndex % 2 == 1)
{
$bgColor = "#e6e6e6";
}
echo "<div style=\"background-color: $bgColor;\">";
echo "<h1>$row[TITLE]</h1>";
echo "<p><B>$row[SUMMARY]</B></p>";
echo "<p>$row[CONTENT]</p>";
echo "<p>$row[CAT]</p>";
echo "<p><a href=\"dbinsert.php?id=$row[ID]\">Edit</a></p>";
echo "<p><a href=\"dbinsert.php?id=$row[ID]&action=delete\">löschen</a><br><br></div>";
$currentIndex++;
}
//Abfrage um bestehenden Eintrag anzuzeigen.
$SQL = "SELECT * from $table WHERE ID = '$_GET[id]'"; $result = @mysqli_query( $SQL ); $row = @mysqli_fetch_array( $result );
echo $_GET[id];
if (!empty($_GET[id])) {
$querytype = 1;
}
?>
<!-- Formular, insert/update -->
<form name="form1" method="post" action="dbinsert.php?querytype=<?php echo $querytype; ?>&id=<?php echo $_GET[id]; ?>">
<p>Title
<input type="text" name="title" size="50" value="<?php echo $row[TITLE]; ?>">
<br>
Summary
<input type="text" name="summary" size="50" value="<?php echo $row[SUMMARY]; ?>">
<br>
Content
<textarea name="content" cols="60" rows="15"><?php echo $row[CONTENT]; ?></textarea>
Categry
<select name="cat"><?php
$SQL = "SELECT * from $cat";
$result = mysqli_query( $SQL );
while( $row = mysqli_fetch_array( $result ) ) {
echo '<option value="'.$row['CAT'].'">'.$row['CAT'].'</option>'; } ?></select>
</p>
<p>
<input type="submit" name="Submit" value="Submit">
</p>
<p>
<input type="reset" value="Zurücksetzen" />
</p>
</form>
