rendered paste body<?php require_once('../core/db.php'); require_once('../core/secure.php'); if(($_REQUEST['action'] != 'update') && ($_REQUEST['id'] > 0)) { # id to edit $editid = $_REQUEST['id']; # grab info $query = "SELECT company_name,contact_name,address,city,state,zipcode,phone,email,url,catid FROM vendors WHERE id='".mysql_real_escape_string($editid)."'"; $result = mysql_query($query); if((!$result) || (@mysql_num_rows($result) < 1)) { die('That ID does no exist'); } else { $row = mysql_fetch_object($result);?><html> <head> <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE"> <link rel=stylesheet href="../style/style.css" /> </head><body> <table width=100%" border="0" cellpadding="0" cellspacing="0" class="header"> <tr> <td align="center"><p class="pagetitle">Vendor Details</p></td> </tr> </table> <table border="0" cellpadding="0" cellspacing="0"> <tr> <td><img src="../i/section_top_left.gif" /></td> <td width="100%" background="../i/section_top_bg.gif" valign="bottom" align="center"> <div style="font-family:verdana;font-size:10pt;color:#5D729B"><b>Add Vendor</b></div> </td> <td width="1" height="30"><img src="../i/section_top_right.gif" /></td> </tr> <tr> <td width="15" height="4"><img src="../i/section_top_left2.gif" /></td> <td background="../i/section_top_bg2.gif"></td> <td width="15" height="4"><img src="../i/section_top_right2.gif" /></td> </tr> <tr> <td colspan="3"> <table width="100%" border="0" cellpadding="0" cellspacing="0"> <tr> <td width="7" background="../i/section_middle_left.gif"></td> <td> <!-- Start Form --> <form action="<?=$_SERVER['PHP_SELF']?>?action=update&id=<?=$editid?>" method="post"> <table width="100%" border="0" cellpadding="5" cellspacing="0"> <tr> <td class="tdrow2">Company Name:</td><td class="tdrow2" >Contact name:</td> </tr><tr> <td class="tdrow3" ><input type="text" size="40" name="company_name" value="<?=$row->company_name?>"></td> <td class="tdrow3"><input type="text" size="40" name="contact_name" value="<?=$row->contact_name?>"></td> </tr><tr> <td class="tdrow2">Address:</td><td class="tdrow2">City:</td> </tr><tr> <td class="tdrow3"><input type="text" size="40" name="address" value="<?=$row->address?>"></td> <td class="tdrow3"><input type="text" size="40" name="city" value="<?=$row->city?>"></td> </tr><tr> <td class="tdrow2">State:</td><td class="tdrow2">Zipcode:</td> </tr><tr> <td class="tdrow3"><input type="text" size="40" name="state" value="<?=$row->state?>"></td> <td class="tdrow3"><input type="text" size="40" name="zipcode" value="<?=$row->zipcode?>"></td> </tr><tr> <td class="tdrow2">Phone:</td><td class="tdrow2">Email:</td> </tr><tr> <td class="tdrow3"><input type="text" size="40" name="phone" value="<?=$row->phone?>"></td> <td class="tdrow3"><input type="text" size="40" name="email" value="<?=$row->email?>"></td> </tr><tr> <td class="tdrow2">URL:</td><td class="tdrow2">Select a category:</td> </tr><tr> <td class="tdrow3"> <input type="text" size="40" name="url" value="<?=$row->url?>"></td> <td class="tdrow3" valign="top">Category<Br /> <select class="textfield" name="catid"> <?php$result = mysql_query("select v.id, v.name as vendor,c.name as category from vendors v left join category c on c.id = v.idCategory"); while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { echo "<option value=\"". $row["catid"] ."\">". $row["catid"] ."</option>\n"; } ?> </option> </select> </td> </tr><tr> <td class="tdrow1" bgcolor="#FCFCFC" colspan="2" align="center"> <input type="submit" value="Update"> </td> </tr> </table> </form> </td> <td width="7" background="../i/section_middle_right.gif"></td> </tr> </table> </td> </tr> </table></body></html><?php } } elseif(($_REQUEST['action'] == 'update') && ($_REQUEST['id'] > 0)){ # id to edit $editid = $_REQUEST['id']; // check for errors $err = false; // currently, there is no errors. $errmsg = '<b>Error<b><br>'; // empty error msg. msg with no current errors. // check to see if content field is empty or not. if so, make error. if(empty($_POST['contact_name'])){ $err = true; // there is now an error. $errmsg .= 'Content is a required field and must be filled out.<br>'; // append an error msg to the end of $errmsg } // if there's an error ( $err = true ), let them know and exit. if($err) { echo $errmsg; exit; } if(!$err){ // if no errors, do the foloowing // store the fields into an easier writeable variable. so you dont have to type $_POST[''] to use it everytime. $contact_name = $_POST['contact_name']; $company_name = $_POST['business_name']; //connect to the mysql server //insert the new info into the database $query = "update contact set contact_name='". $contact_name ."', business_name='". $business_name ."' where id = '".mysql_real_escape_string($editid)."'"; $result = mysql_query($query) or die(mysql_error()); echo '<a href="'.$_SERVER['PHP_SELF'].'"> return </a>'; } } // close if action = update brace?>