PHP Code reffering to database, doing something wrong.. pls help

Posted on 16th Feb 2014 by admin

Well i am quite new with PHP
and for school we have to make a PHP script which reffers to a Database,
Well, more explicit, we have this form showing all "employees"
last name etc.
made it week before,
and we had to add a new bar to also upload pictures and show them.
So i made this script but it won't work.
And maybe it's just me being stupid..
But please help me


EDIT: it's obvious that pictures reffers to the picture iwant to upload and show.

2nd EDIT: Found out i missed a " , "

Well now the problem is that when i run it and try to upload a picture i won't see anything


<?php


function displayAllEmployees() {

$sql = "SELECT * FROM `Employees` ORDER BY `LastName`";
$result = mysql_query($sql);

echo"<h1>Werknemers</h1>";

echo"<br/>";
echo"<input type="button" onclick="document.location.href='?action=addemployee';" value="Werknemer toevoegen" />";
echo"<br/>";
echo"<br/>";

echo"<table>";

echo" <tr>";
echo" <th>Employee ID</td>";
echo" <th>Last Name</td>";
echo" <th>Phone Number</td>";
echo" <th>Foto</td>";
echo" <th>Actie</td>";
echo" </tr>";

while($row = mysql_fetch_assoc($result)) {

$row = escapeArray($row);

echo" <tr>";
echo" <td>".$row['EmployeeID']."</td>";
echo" <td>".$row['LastName']."</td>";
echo" <td>".$row['PhoneNumber']."</td>";
echo" <td>".$row['Picture']."</td>";
echo" <td>";
echo" <a href="index.php?action=editemployee&id=".$row['EmployeeID']."">Bewerken</a>";
echo" |";
echo" <a href="javascript:confirmAction('Zeker weten?', 'index.php?action=deleteemployee&id=".$row['EmployeeID']."');">Verwijderen</a>";
echo" </td>";
echo" </tr>";
}
echo"</table>";
}



function displayAddEmployee() {

echo"<h1>Werknemer bewerken</h1>";

echo" <form method="post" action="index.php?action=insertemployee">";
echo" <table>";
echo" <tr>";
echo" <td>werknemernummer:</td>";
echo" <td><input type="text" name="EmployeeID" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>achternaam:</td>";
echo" <td><input type="text" name="LastName" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>telefoonnummer:</td>";
echo" <td><input type="text" name="PhoneNumber" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="file" name="Picture" /></td>";
echo" </tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";

echo" </form>";
}





function displayEditEmployees() {

$sql = sprintf( "SELECT * FROM `Employees` WHERE `EmployeeID` = %d",
mysql_escape_string($_GET['id']) );

$result = mysql_query($sql);

if($row = mysql_fetch_assoc($result)) {

$row = escapeArray($row);

echo"<h1>Werknemer bewerken</h1>";

echo" <form method="post" action="index.php?action=updateemployee">";
echo" <table>";
echo" <tr>";
echo" <td>Titel:</td>";
echo" <td><input type="text" name="EmployeeID" value="".$row['EmployeeID']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Achternaam:</td>";
echo" <td><input type="text" name="LastName" value="".$row['LastName']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Telefoon Nummer:</td>";
echo" <td><input type="text" name="PhoneNumber" value="".$row['PhoneNumber']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="text" name="Picture" value="".$row['Picture']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";

echo" <input type="hidden" name="EmployeeID" value="".$row['EmployeeID']."" />";

echo" </form>";

}
else {
die("Geen gegevens gevonden");
}
}




function addEmployee() {




$sql = sprintf("INSERT INTO `Employees` (`EmployeeID`, `LastName`, `PhoneNumber`) VALUES ('%s', '%f', '%f', '%f')",
mysql_escape_string($_POST['EmployeeID']),
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['Picture']) );

mysql_query($sql);

header("location: index.php?action=employees");
exit();
}





function updateEmployees() {
$sql = sprintf("UPDATE `Employees` SET
`EmployeeID` = '%s',
`LastName` = '%s',
`PhoneNumber` = '%s'
`Picture` = '%s'
WHERE `EmployeeID` = %d",
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['EmployeeID'])
mysql_escape_string($_POST['Picture']) );

mysql_query($sql);

header("location: index.php?action=employees");
exit();
}





function deleteEmployees() {
$sql = sprintf("DELETE FROM `Employees` WHERE `EmployeeID` = %d", mysql_escape_string($_GET['id']));
mysql_query($sql);

header("location: index.php?action=employees");
exit();
}

?>