PHP Code reffering to database, doing something wrong.. pls help

Posted on 16th Feb 2014 07:03 pm by admin

Well i am quite new with PHP
and for school we have to make a PHP script which reffers to a Database,
Well, more explicit, we have this form showing all "employees"
last name etc.
made it week before,
and we had to add a new bar to also upload pictures and show them.
So i made this script but it won't work.
And maybe it's just me being stupid..
But please help me


EDIT: it's obvious that pictures reffers to the picture iwant to upload and show.

2nd EDIT: Found out i missed a " , "

Well now the problem is that when i run it and try to upload a picture i won't see anything


<?php


function displayAllEmployees() {

$sql = "SELECT * FROM `Employees` ORDER BY `LastName`";
$result = mysql_query($sql);

echo"<h1>Werknemers</h1>";

echo"<br/>";
echo"<input type="button" onclick="document.location.href='?action=addemployee';" value="Werknemer toevoegen" />";
echo"<br/>";
echo"<br/>";

echo"<table>";

echo" <tr>";
echo" <th>Employee ID</td>";
echo" <th>Last Name</td>";
echo" <th>Phone Number</td>";
echo" <th>Foto</td>";
echo" <th>Actie</td>";
echo" </tr>";

while($row = mysql_fetch_assoc($result)) {

$row = escapeArray($row);

echo" <tr>";
echo" <td>".$row['EmployeeID']."</td>";
echo" <td>".$row['LastName']."</td>";
echo" <td>".$row['PhoneNumber']."</td>";
echo" <td>".$row['Picture']."</td>";
echo" <td>";
echo" <a href="index.php?action=editemployee&id=".$row['EmployeeID']."">Bewerken</a>";
echo" |";
echo" <a href="javascript:confirmAction('Zeker weten?', 'index.php?action=deleteemployee&id=".$row['EmployeeID']."');">Verwijderen</a>";
echo" </td>";
echo" </tr>";
}
echo"</table>";
}



function displayAddEmployee() {

echo"<h1>Werknemer bewerken</h1>";

echo" <form method="post" action="index.php?action=insertemployee">";
echo" <table>";
echo" <tr>";
echo" <td>werknemernummer:</td>";
echo" <td><input type="text" name="EmployeeID" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>achternaam:</td>";
echo" <td><input type="text" name="LastName" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>telefoonnummer:</td>";
echo" <td><input type="text" name="PhoneNumber" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="file" name="Picture" /></td>";
echo" </tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";

echo" </form>";
}





function displayEditEmployees() {

$sql = sprintf( "SELECT * FROM `Employees` WHERE `EmployeeID` = %d",
mysql_escape_string($_GET['id']) );

$result = mysql_query($sql);

if($row = mysql_fetch_assoc($result)) {

$row = escapeArray($row);

echo"<h1>Werknemer bewerken</h1>";

echo" <form method="post" action="index.php?action=updateemployee">";
echo" <table>";
echo" <tr>";
echo" <td>Titel:</td>";
echo" <td><input type="text" name="EmployeeID" value="".$row['EmployeeID']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Achternaam:</td>";
echo" <td><input type="text" name="LastName" value="".$row['LastName']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Telefoon Nummer:</td>";
echo" <td><input type="text" name="PhoneNumber" value="".$row['PhoneNumber']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="text" name="Picture" value="".$row['Picture']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";

echo" <input type="hidden" name="EmployeeID" value="".$row['EmployeeID']."" />";

echo" </form>";

}
else {
die("Geen gegevens gevonden");
}
}




function addEmployee() {




$sql = sprintf("INSERT INTO `Employees` (`EmployeeID`, `LastName`, `PhoneNumber`) VALUES ('%s', '%f', '%f', '%f')",
mysql_escape_string($_POST['EmployeeID']),
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['Picture']) );

mysql_query($sql);

header("location: index.php?action=employees");
exit();
}





function updateEmployees() {
$sql = sprintf("UPDATE `Employees` SET
`EmployeeID` = '%s',
`LastName` = '%s',
`PhoneNumber` = '%s'
`Picture` = '%s'
WHERE `EmployeeID` = %d",
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['EmployeeID'])
mysql_escape_string($_POST['Picture']) );

mysql_query($sql);

header("location: index.php?action=employees");
exit();
}





function deleteEmployees() {
$sql = sprintf("DELETE FROM `Employees` WHERE `EmployeeID` = %d", mysql_escape_string($_GET['id']));
mysql_query($sql);

header("location: index.php?action=employees");
exit();
}

?>

Your Answer:

Login to answer

Other forums

PHP If Else statement for breadcrumb
Hi

I am trying to use a PHP if else statement to display a breadcrumb link on wordpress

Facebook status update API
Hello,

So, I'm trying to create my first Facebook application with PHP.

Basic ideas fo

Unable to retreve the values from Mysql Query
Hi,

Here is the php code that I have, Query is running properly in phpmyadmin and is resu

max function question
Hi All
Ihave a table that holds shipment numbers and dates like this

select * from

How to use Substr
I want to check for the word CATEGORY: inside a string which can be CATEGORY: ITEM
and remove the

Formatting echo from database
So I have a database that stores First and last names, then echos them back to a website, as of now

Find occurences of unicode characters in string
I need to prohibit filenames with everything but English characters and numbers but regexp and strin

Got A Free Server :(
So I was given a free server

http://shopping.yahoo.com/p:Compaq%20ProLiant%201500%20Server:1

how to hide input fields on selection screen using variant attribute
Hello all,

I want to know how to hide input fields on selection screen using variant attr

question about stripslashes and real_escape_string
im cleaning up an old app that I wrote fixing some of the vulernabilities from attacks.

I hav