Help with PHP please

Post Reply New Topic

[?php

include("files/configuration.php");
include("files/top.php");
$row_count = 0;

/*******************************************************************/

echo '[h1]Rating list[/h1][hr][h2]Add a new rating[/h2]';

if (empty($_POST['description']))
{
 echo '[form action="'.$_SERVER['PHP_SELF'].'" method="post"]';
 echo '[b]Description: [/b][input type="text" name="description" maxlength="50" size="50" /][br][br]';
 echo '[input type="submit" value="Add rating" /]';
 echo '[/form]';
}
else
{
 $description  = stripslashes($_POST['description']);

 $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
 $query = "insert into rating (rating_id, rating_description) values (seq_rating.nextval, '".$description."')";
 $stmt  = oci_parse($conn, $query);

 if(@oci_execute($stmt))
 {
  echo '[script language="JavaScript"] alert("New record successfully added to database"); [/script]';
 }
 else
 {
  echo '[script language="JavaScript"] alert("Error adding record."); [/script]';
 }

 oci_free_statement($stmt);
 oci_close($conn);
}

/*******************************************************************/

echo '[hr][h2]List of current ratings[/h2]';

if(empty($_GET['action']))
{
 $listaction = "display";
}
else
{
 $listaction = $_GET['action'];
}

switch($listaction)
{

case "display":
 $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
 $query = "select * from ".TBL_RATING."";
 $stmt = oci_parse($conn, $query);
 oci_define_by_name($stmt, RATING_ID,          $id);
 oci_define_by_name($stmt, RATING_DESCRIPTION, $description);
 oci_execute($stmt);

 echo '[center][table class="form"]';

 echo '
  [tr align="left"]
  [th]Rating[/th]
  [th width="10%"]Update[/th]
  [th width="10%"]Delete[/th]
  [/tr]
 ';

 while($row = oci_fetch_array($stmt))
 {
  $id          = $row['RATING_ID'];
  $description = str_replace("  ", "", $row['RATING_DESCRIPTION']);
  $row_colour = ($row_count % 2) ? ROWCOLOUR1 : ROWCOLOUR2;
  echo '[tr class="form" bgcolor="'.$row_colour.'"]';
  echo '[form action="'.$_SERVER['PHP_SELF'].'?action=updatelist" method="post"]';
  echo '[input type="hidden" value="'.$id.'" /]';
  echo '[td class="form" width="80%"][input type="text" size="25" value="'.$description.'" /][/td]';
  echo '[td class="form" width="10%"][input type="submit" name="action" value="update" /][/td]';
  echo '[td class="form" width="10%"][input type="submit" name="action" value="delete" /][/td]';
  echo '[/tr]';
  $row_count++;
 }
 echo '[/table][/center]';

 oci_free_statement($stmt);
 oci_close($conn);
 break;

case "updatelist":
 if($_REQUEST["action"] == "update") // update the record
 {
  $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
  $query = "update rating set rating_description='$_POST[description]' where rating_id='".$id."'";
  $stmt  = oci_parse($conn, $query);
 }

 if($_REQUEST["action"] == "delete") // delete the record
 {
  $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
  $query = "delete from rating where rating_id='".$id."'";
  $stmt  = oci_parse($conn, $query);

  break;
 }

}

/*******************************************************************/

include("files/bottom.php");

?]

echo '[hr][h2]List of current ratings[/h2]';

if(empty($_GET['action']))
{
 $listaction = "display";
}
else
{
 $listaction = $_GET['action'];
}

switch($listaction)
{

case "display":
 $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
 $query = "select * from ".TBL_RATING."";
 $stmt = oci_parse($conn, $query);
 oci_define_by_name($stmt, RATING_ID,          $id);
 oci_define_by_name($stmt, RATING_DESCRIPTION, $description);
 oci_execute($stmt);

 echo '[center][table class="form"]';

 echo '
  [tr align="left"]
  [th]Rating[/th]
  [th width="10%"]Update[/th]
  [th width="10%"]Delete[/th]
  [/tr]
 ';

 while($row = oci_fetch_array($stmt))
 {
  $id          = $row['RATING_ID'];
  $description = str_replace("  ", "", $row['RATING_DESCRIPTION']);
  $row_colour = ($row_count % 2) ? ROWCOLOUR1 : ROWCOLOUR2;
  echo '[tr class="form" bgcolor="'.$row_colour.'"]';
  echo '[form action="'.$_SERVER['PHP_SELF'].'?action=updatelist" method="post"]';
  echo '[input type="hidden" value="'.$id.'" /]';
  echo '[td class="form" width="80%"][input type="text" size="25" value="'.$description.'" /][/td]';
  echo '[td class="form" width="10%"][input type="submit" name="action" value="update" /][/td]';
  echo '[td class="form" width="10%"][input type="submit" name="action" value="delete" /][/td]';
  echo '[/tr]';
  $row_count++;
 }
 echo '[/table][/center]';

 oci_free_statement($stmt);
 oci_close($conn);
 break;

case "updatelist":
 if($_REQUEST["action"] == "update") // update the record
 {
  $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
  $query = "update rating set rating_description='$_POST[description]' where rating_id='".$id."'";
  $stmt  = oci_parse($conn, $query);
 }

 if($_REQUEST["action"] == "delete") // delete the record
 {
  $conn = oci_connect(DB_USER,DB_PASS,DB_NAME) or die("Could not access database.");
  $query = "delete from rating where rating_id='".$id."'";
  $stmt  = oci_parse($conn, $query);

  break;
 }

}