rendered paste body<?php
session_start();
if (empty($_SESSION['username']))
{
header("location:index.php");
exit;
}
define('_APP_VALID', 1);
include('config.php');
$username=$_SESSION['username'];
$res = mysql_query("SELECT * FROM login WHERE username='$username'") or sqlerr(__FILE__, __LINE__);
$arr_priv = mysql_fetch_assoc($res);
if($arr_priv[privileges] == 1)
{
header("location:read_user.php");
}
else if($arr_priv[privileges] == 3)
{
header("location:read_mod.php");
}
echo "Privilege: ".$arr_priv[privileges];
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250" />
<link rel="shortcut icon" href="icon/favicon.ico" type="image/x-icon" />
<title>Administrator @ RASKi PHP Training Course - Read</title>
<link href="styleLog.css" rel="stylesheet" type="text/css">
</head>
<body>
<?php
if ($_GET["action"] == 1)
{ // Konektira se i prikaze podatke
konekcija();
}
else if ($_GET["action"] == 2)
{ // Promijena u bazi
$id=$_POST['id'];
$title=$_POST['title'];
$year=$_POST['year'];
$genre=$_POST['genre'];
$dvdnumber=$_POST['dvdnumber'];
$buffer1=$_GET["buff"];
$buffer2=$_POST['title'].$_POST['year'].$_POST['genre'].$_POST['dvdnumber'];
if($buffer1 != $buffer2)
{
mysql_query("UPDATE mydvds SET title='$title', year='$year', genre='$genre', dvdnumber='$dvdnumber' WHERE id='$id'") or sqlerr(__FILE__, __LINE__);
if(mysql_affected_rows()>0)
{
konekcija();
}
else
{
echo "Error while editing...<br>";
}
}
else
{
konekcija();
}
}
else if ($_GET["action"] == 3)
{ // Brisanje
$delete=$_GET["action1"];
mysql_query("DELETE FROM mydvds WHERE id='$delete'") or sqlerr(__FILE__, __LINE__);
if(mysql_affected_rows()>0)
{
konekcija();
}
else
{
echo "Error while deleting...<br>";
}
}
else if ($_GET["action"] == 4)
{ // Editiranje
$edit=$_GET["action1"];
$query=mysql_query("SELECT * FROM mydvds WHERE id='$edit'") or sqlerr(__FILE__, __LINE__);
$arr_edit=mysql_fetch_assoc($query);
echo "<br><center><b>Edited:</b><center><br><br>";
echo "<center><table border=1 cellspacing=0 cellpadding=2><tr bgcolor='#BBBBBB'>
<td><b>Image</b></td>
<td><b>Title</b></td>
<td><b>Year</b></td>
<td><b>Genre</b></td>
<td><b>DVD#</b></td></tr>";
$buffer1 = $arr_edit[title].$arr_edit[year].$arr_edit[genre].$arr_edit[dvdnumber];
echo "<tr bgcolor='#CCCCCC'><td><img src='movie.png'></td><td>$arr_edit[title]</td><td>$arr_edit[year]</td><td>$arr_edit[genre]</td><td>$arr_edit[dvdnumber]</td></tr>";
echo "<tr bgcolor='#DDDDDD'><td><form action='read_admin.php?action=2&buff=$buffer1' method='post'>
<input type='text' style='visibility:hidden' name='id' value=$arr_edit[id] size='4'></td>
<td><input type='text' name='title' value='$arr_edit[title]'></td>
<td><input type='text' name='year' value='$arr_edit[year]' size='6'></td>
<td><input type='text' name='genre' value='$arr_edit[genre]'></td>
<td><input type='text' name='dvdnumber' value='$arr_edit[dvdnumber]' size='5'></td></tr>
<tr><td><center><input type='Submit' value='Change'></center></form><form action='read_admin.php' method='post'><input type='Submit' value='Cancel'></form></td></tr>";
echo "</table></center>";
}
else if ($_GET["action"] == 5)
{ // Potvrda brisanja
echo "<center><br><b>Potvrda brisanja</b><br><br></center>";
$delete=$_GET["action1"];
$query=mysql_query("SELECT * FROM mydvds where id='$delete'") or sqlerr(__FILE__, __LINE__);
$arr_del=mysql_fetch_assoc($query);
echo "<center><table border=1 cellspacing=0 cellpadding=2><tr bgcolor='#BBBBBB'>
<td><b>Image</b></td>
<td><b>Title</b></td>
<td><b>Year</b></td>
<td><b>Genre</b></td>
<td><b>DVD#</b></td>
<td><b>Really delete?</b></td></tr>
<tr bgcolor='#BBBBBB'><td><img src='movie.png'></td><td>$arr_del[title]</td><td>$arr_del[year]</td><td>$arr_del[genre]</td><td>$arr_del[dvdnumber]</td><td><a href='read_admin.php?action=3&action1=".$arr_del[id]."'>Yes</a> / <a href='read_admin.php'>No</a></td></tr>";
echo "</table></center>";
}
else if(!$_GET["action"])
{
konekcija();
}
/** Ispis iz baze **/
function konekcija()
{
if(isset($_GET['currentPage']))
{
$currentPage = $_GET['currentPage'];
}
else
{
$currentPage=1;
}
$query=mysql_query("SELECT * FROM mydvds") or sqlerr(__FILE__, __LINE__);
//$arr=mysql_fetch_assoc($query);
$itemNum=mysql_numrows($query);
$pageLimit = 15;
$nextPage = $currentPage+1;
$prevPage = $currentPage-1;
$pageNum = ceil($itemNum/$pageLimit);
echo "<br><a href='start.php'>Go Back</a>";
echo "<b><center>Items = ".$itemNum.". Pages = ".$pageNum."</center></b><br><br>";
echo "<center><table border=1 cellspacing=0 cellpadding=2><tr bgcolor='#BBBBBB'>
<td><b>Image</b></td>
<td><b>Title</b></td>
<td><b>Year</b></td>
<td><b>Genre</b></td>
<td><b>DVD#</b></td>
<td><b>Edit</b></td>
<td><b>Delete</b></td></tr>";
if($currentPage<$pageNum)
{
for($i=(($currentPage-1)*$pageLimit); $i<($currentPage*$pageLimit); $i++)
{
$query1=mysql_query("SELECT * FROM mydvds ORDER BY title LIMIT ".$i.", ". $pageLimit ."") or sqlerr(__FILE__, __LINE__);
$arr=mysql_fetch_assoc($query1);
echo "<tr bgcolor='#BBBBBB'><td><img src='movie.png'></td><td>$arr[title]</td><td>$arr[year]</td><td>$arr[genre]</td><td>$arr[dvdnumber]</td><td><a href='read_admin.php?action=4&action1=".$arr[id]."'>Edit</a></td><td><a href='read_admin.php?action=5&action1=".$arr[id]."'>Delete</a></td></tr><td></td><td></td>";
}// End For
}
else
{
for ($i=(($currentPage-1)*$pageLimit); $i < $itemNum; $i++)
{
$query2=mysql_query("SELECT * FROM mydvds ORDER BY title LIMIT ".$i.", ". $pageLimit ."") or sqlerr(__FILE__, __LINE__);
$arr=mysql_fetch_assoc($query2);
echo "<tr bgcolor='#BBBBBB'><td><img src='movie.png'></td><td>$arr[title]</td><td>$arr[year]</td><td>$arr[genre]</td><td>$arr[dvdnumber]</td><td><a href='read_admin.php?action=4&action1=".$arr[id]."'>Edit</a></td><td><a href='read_admin.php?action=5&action1=".$arr[id]."'>Delete</a></td></tr><td></td><td></td>";
}// End For
}
echo "</table></center>";
if($_GET['currentPage'] == 1 || $_GET['currentPage'] == "")
{
echo "<center><table><tr><td><del>Previous</del> - </td><td>Page ".$currentPage." / ".$pageNum."</td><td> - <a href='read_admin.php?currentPage=".$nextPage."'>Next</a></td></tr></table></center>";
}
else if($_GET['currentPage'] == $pageNum)
{
echo "<center><table><tr><td><a href='read_admin.php?currentPage=".$prevPage."'>Previous</a> - </td><td>Page ".$currentPage." / ".$pageNum."</td><td> - <del>Next</del></td></tr></table></center>";
}
else
{
echo "<center><table><tr><td><a href='read_admin.php?currentPage=".$prevPage."'>Previous</a> - </td><td>Page ".$currentPage." / ".$pageNum."</td><td> - <a href='read_admin.php?currentPage=".$nextPage."'>Next</a></td></tr></table></center>";
}
}// End of konekcija();
echo "<center><br><a href=#>Go UP</a></center><br>";
mysql_close();
?>
</body>
</html>