rendered paste body<?php include('core/db.php'); include('core/secure.php'); if ($_SERVER['REQUEST_METHOD'] == "GET") { $company_name = $_POST['company_name']; $contact_name = $_POST['contact_name']; $address = $_POST['address']; $city = $_POST['city']; $state = $_POST['state']; $zipcode = $_POST['zipcode']; $phone = $_POST['phone']; $email = $_POST['email']; $url = $_POST['url']; $catid = $_POST['catid']; $sql="UPDATE vendors SET(company_name,contact_name,address,city,state,zipcode,phone,email,url,catid) VALUES('$company_name','$contact_name','$address','$city','$state', '$zipcode','$phone','$email','$url','$catid')"; $result=mysql_query($sql); if (mysql_affected_rows() == 1) { echo "Database Updated."; echo "<br />"; echo '<a href="cphome.php" target="mainFrame">Return</a>'; } else { echo mysql_error() ; } } ?><html> <head> <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE"> <link rel=stylesheet href="style/style.css" /> </head> <body> <table width=100%" border="0" cellpadding="0" cellspacing="0" class="header"> <tr> <td align="center"><p class="pagetitle">Vendors</p></td> </tr> </table> <!-- Start Form --> <table border="0" cellpadding="0" cellspacing="0"> <tr> <td ><img src="i/section_top_left.gif" /></td> <td width="100%" background="i/section_top_bg.gif" valign="bottom" align="center"> <div style="font-family:verdana;font-size:10pt;color:#5D729B"><b>Add Vendor</b></div> </td> <td width="1" height="30"><img src="i/section_top_right.gif" /></td> </tr> <tr> <td width="15" height="4"><img src="i/section_top_left2.gif" /></td> <td background="i/section_top_bg2.gif"></td> <td width="15" height="4"><img src="i/section_top_right2.gif" /></td> </tr> <tr> <td colspan="3"> <table width="100%" border="0" cellpadding="0" cellspacing="0"> <tr> <td width="7" background="i/section_middle_left.gif"></td> <td> <form method="post" action='<? echo $_SERVER['PHP_SELF']; ?>'> <table width="100%" border="0" cellpadding="5" cellspacing="0"> <tr> <td class="tdrow2">Company Name:</td><td class="tdrow2" >Contact name:</td> </tr><tr> <td class="tdrow3" ><input type="text" name="company_name" value="" size="50" /></td> <td class="tdrow3"><input type="text" name="contact_name" value="" size="50" /></td> </tr> <tr> <td class="tdrow2">Address:</td><td class="tdrow2">City:</td> </tr><tr> <td class="tdrow3"><input type="text" name="address" size="50" /></td> <td class="tdrow3"><input type="text" name="city" size="50" /></td> </tr> <tr> <td class="tdrow2">State:</td><td class="tdrow2">Zipcode:</td> </tr><tr> <td class="tdrow3"><input type="text" name="state" size="50" /></td> <td class="tdrow3"><input type="text" name="zipcode" size="50" /></td> </tr> <tr> <td class="tdrow2">Phone:</td><td class="tdrow2">Email:</td> </tr><tr> <td class="tdrow3"><input type="text" name="phone" size="50" /></td> <td class="tdrow3"><input type="text" name="email" size="50" /></td> </tr> <tr> <td class="tdrow2">URL:</td><td class="tdrow2">Select a category:</td> </tr><tr> <td class="tdrow3"> <input type="text" name="url" size="50" value="http://" /></td> <td class="tdrow3" valign="top"> <select class="textfield" name="catid"> <? $result = mysql_query ("SELECT catid, name FROM category ORDER BY catid"); while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { echo "<option value=\"". $row["catid"] ."\">". $row["name"] ."</option>\n"; } ?> </option> </select> </td></tr><tr> <tr> <td class="tdrow1" bgcolor="#FCFCFC" colspan="2" align="center"> <input type="submit" value="Update" /> </td> </tr> </table> </form> </td> <td width="7" background="i/section_middle_right.gif"></td> </tr> </table> </td> </tr> </table> </body> </html>