PHP Code reffering to database, doing something wrong.. pls help
Posted on
16th Feb 2014 07:03 pm by
admin
Well i am quite new with PHP
and for school we have to make a PHP script which reffers to a Database,
Well, more explicit, we have this form showing all "employees"
last name etc.
Did you know?Explore Trending and Topic pages for more stories like this.
made it week before,
and we had to add a new bar to also upload pictures and show them.
So i made this script but it won't work.
And maybe it's just me being stupid..
But please help me
EDIT: it's obvious that pictures reffers to the picture iwant to upload and show.
2nd EDIT: Found out i missed a " , "
Well now the problem is that when i run it and try to upload a picture i won't see anything
<?php
function displayAllEmployees() {
$sql = "SELECT * FROM `Employees` ORDER BY `LastName`";
$result = mysql_query($sql);
echo"<h1>Werknemers</h1>";
echo"<br/>";
echo"<input type="button" onclick="document.location.href='?action=addemployee';" value="Werknemer toevoegen" />";
echo"<br/>";
echo"<br/>";
echo"<table>";
echo" <tr>";
echo" <th>Employee ID</td>";
echo" <th>Last Name</td>";
echo" <th>Phone Number</td>";
echo" <th>Foto</td>";
echo" <th>Actie</td>";
echo" </tr>";
while($row = mysql_fetch_assoc($result)) {
$row = escapeArray($row);
echo" <tr>";
echo" <td>".$row['EmployeeID']."</td>";
echo" <td>".$row['LastName']."</td>";
echo" <td>".$row['PhoneNumber']."</td>";
echo" <td>".$row['Picture']."</td>";
echo" <td>";
echo" <a href="index.php?action=editemployee&id=".$row['EmployeeID']."">Bewerken</a>";
echo" |";
echo" <a href="javascript:confirmAction('Zeker weten?', 'index.php?action=deleteemployee&id=".$row['EmployeeID']."');">Verwijderen</a>";
echo" </td>";
echo" </tr>";
}
echo"</table>";
}
function displayAddEmployee() {
echo"<h1>Werknemer bewerken</h1>";
echo" <form method="post" action="index.php?action=insertemployee">";
echo" <table>";
echo" <tr>";
echo" <td>werknemernummer:</td>";
echo" <td><input type="text" name="EmployeeID" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>achternaam:</td>";
echo" <td><input type="text" name="LastName" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>telefoonnummer:</td>";
echo" <td><input type="text" name="PhoneNumber" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="file" name="Picture" /></td>";
echo" </tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";
echo" </form>";
}
function displayEditEmployees() {
$sql = sprintf( "SELECT * FROM `Employees` WHERE `EmployeeID` = %d",
mysql_escape_string($_GET['id']) );
$result = mysql_query($sql);
if($row = mysql_fetch_assoc($result)) {
$row = escapeArray($row);
echo"<h1>Werknemer bewerken</h1>";
echo" <form method="post" action="index.php?action=updateemployee">";
echo" <table>";
echo" <tr>";
echo" <td>Titel:</td>";
echo" <td><input type="text" name="EmployeeID" value="".$row['EmployeeID']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Achternaam:</td>";
echo" <td><input type="text" name="LastName" value="".$row['LastName']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Telefoon Nummer:</td>";
echo" <td><input type="text" name="PhoneNumber" value="".$row['PhoneNumber']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td>Foto:</td>";
echo" <td><input type="text" name="Picture" value="".$row['Picture']."" /></td>";
echo" </tr>";
echo" <tr>";
echo" <td></td>";
echo" <td><input type="submit" value="Opslaan" /></td>";
echo" </tr>";
echo" </table>";
echo" <input type="hidden" name="EmployeeID" value="".$row['EmployeeID']."" />";
echo" </form>";
}
else {
die("Geen gegevens gevonden");
}
}
function addEmployee() {
$sql = sprintf("INSERT INTO `Employees` (`EmployeeID`, `LastName`, `PhoneNumber`) VALUES ('%s', '%f', '%f', '%f')",
mysql_escape_string($_POST['EmployeeID']),
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['Picture']) );
mysql_query($sql);
header("location: index.php?action=employees");
exit();
}
function updateEmployees() {
$sql = sprintf("UPDATE `Employees` SET
`EmployeeID` = '%s',
`LastName` = '%s',
`PhoneNumber` = '%s'
`Picture` = '%s'
WHERE `EmployeeID` = %d",
mysql_escape_string($_POST['LastName']),
mysql_escape_string($_POST['PhoneNumber']),
mysql_escape_string($_POST['EmployeeID'])
mysql_escape_string($_POST['Picture']) );
mysql_query($sql);
header("location: index.php?action=employees");
exit();
}
function deleteEmployees() {
$sql = sprintf("DELETE FROM `Employees` WHERE `EmployeeID` = %d", mysql_escape_string($_GET['id']));
mysql_query($sql);
header("location: index.php?action=employees");
exit();
}
?>
