3
« Zadnji post erbi 25. Kolovoz 2017, 12:24 »
1. ovdje je cjeli kod:
<?php
/*
Allows the user to both create new records and edit existing records
*/
// connect to the database
include("connect-db.php");
// creates the new/edit record form
// since this form is used multiple times in this file, I have made it a function that is easily reusable
function renderForm($naslov = '', $sestavine ='', $priprava = '', $error = '', $id = '')
{ ?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<style>
body{
font-family:verdana;
margin:0px;
}
.form-wrapper{
margin:1px;
}
.form-wrapper label{
display:block;
font-size:14px;
}
.form-wrapper input[type=text], .form-wrapper input[type=email] .form-wrapper input[type=textarea]{
margin-bottom:5px;
width:180px;
//height:20px;
border:3px solid #eeeeee;
font-size:16px;
}
.form-wrapper span{
color:#ee0000;
}
.form-wrapper input[type=submit]{
display:block;
margin-top:5px;
border:0px;
background:#ee0000;
color:#ffffff;
height:30px;
border-radius:5px;
}
.form-wrapper input[type=submit]:hover{
background:#ee0022;
}
.form-wrapper textarea{
border:3px solid #eeeeee;
font-size:16px;
}
#loading-img{
display:none;
}
.response_msg{
margin-top:10px;
font-size:16px;
background:#E5D669;
color:red;
width:500px;
padding:3px;
display:none;
}
.center {
margin: auto;
width: 90%;
border: 2px solid green;
padding: 10px;
border-radius: 25px;
}
</style>
<title>
<?php if ($id != '') { echo "Uredi recept"; } else { echo "Dodaj nov recept"; } ?>
</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
</head>
<body>
<div class="center">
<div class="form-wrapper">
<h1><?php if ($id != '') { echo "Uredi recept"; } else { echo "Dodaj nov recept"; } ?></h1>
<?php if ($error != '') {
echo "<div style='padding:4px; border:1px solid red; color:red'>" . $error
. "</div>";
} ?>
<form action="" method="post">
<div>
<?php if ($id != '') { ?>
<input type="hidden" name="id" value="<?php echo $id; ?>" />
<p>ID: <?php echo $id; ?></p>
<?php } ?>
Naslov recepta:<br>
<input type="text" name="naslov" style="width:95%" value="<?php echo $naslov; ?>" required><br>
<br>Sestavine:<br>
<textarea name="sestavine" cols="120" rows="10" required> <?php echo $sestavine; ?></textarea><br>
<br>Priprava:<br>
<textarea name="priprava" cols="120" rows="10" required> <?php echo $priprava; ?></textarea><br>
<input type="submit" name="submit" value="Vpiši popravljen recept" />
</div>
</form>
</div>
</div>
</body>
</html>
<?php }
/*
EDIT RECORD
*/
// if the 'id' variable is set in the URL, we know that we need to edit a record
if (isset($_GET['id']))
{
// if the form's submit button is clicked, we need to process the form
if (isset($_POST['submit']))
{
// make sure the 'id' in the URL is valid
if (is_numeric($_POST['id']))
{
// get variables from the URL/form
$id = $_POST['id'];
$naslov = htmlentities($_POST['naslov'], ENT_QUOTES);
$sestavine = htmlentities($_POST['sestavine'], ENT_QUOTES);
$priprava = htmlentities($_POST['priprava'], ENT_QUOTES);
// check that firstname and lastname are both not empty
if ($naslov == '' || $sestavine == '' || $priprava == '')
{
// if they are empty, show an error message and display the form
$error = 'NAPAKA: Podatke vnesite v vsa polja!';
renderForm($naslov, $sestavine, $priprava, $error, $id);
}
else
{
// if everything is fine, update the record in the database
if ($stmt = $mysqli->prepare("UPDATE recepti SET naslov = ?, sestavine = ?, priprava = ?
WHERE id=?"))
{
/*
$sql = "UPDATE recepti SET naslov='$naslov' sestavine='$sestavine' priprava='$priprava' WHERE id='$id'";
$result=mysqli_query($sql);
mysqli_query($query);
*/
$stmt->bind_param('sss', '$naslov', '$sestavine', '$priprava');
$stmt->execute();
$stmt->close();
}
// show an error message if the query has an error
else
{
echo "ERROR: could not prepare SQL statement.";
}
// redirect the user once the form is updated
header("Location: view.php");
}
}
// if the 'id' variable is not valid, show an error message
else
{
echo "Napaka!";
}
}
// if the form hasn't been submitted yet, get the info from the database and show the form
else
{
// make sure the 'id' value is valid
if (is_numeric($_GET['id']) && $_GET['id'] > 0)
{
// get 'id' from URL
$id = $_GET['id'];
// get the recod from the database
if($stmt = $mysqli->prepare("SELECT * FROM recepti WHERE id=?"))
{
$stmt->bind_param("i", $id);
$stmt->execute();
$stmt->bind_result($id, $naslov, $sestavine, $priprava);
$stmt->fetch();
// show the form
renderForm($naslov, $sestavine, $priprava, NULL, $id);
$stmt->close();
}
// show an error if the query has an error
else
{
echo "Napaka: Ne morem popraviti zapisa v bazi";
}
}
// if the 'id' value is not valid, redirect the user back to the view.php page
else
{
header("Location: view.php");
}
}
}
/*
NEW RECORD
*/
// if the 'id' variable is not set in the URL, we must be creating a new record
else
{
// if the form's submit button is clicked, we need to process the form
if (isset($_POST['submit']))
{
// get the form data
$naslov = htmlentities($_POST['naslov'], ENT_QUOTES);
$sestavine = htmlentities($_POST['sestavine'], ENT_QUOTES);
$priprava = htmlentities($_POST['priprava'], ENT_QUOTES);
// check that firstname and lastname are both not empty
if ($naslov == '' || $sestavine == '' || $priprava == '')
{
// if they are empty, show an error message and display the form
$error = 'NAPAKA: Podatke morate vnesti v vsa polja!';
renderForm($naziv, $sestavine, $priprava, $error);
}
else
{
// insert the new record into the database
if ($stmt = $mysqli->prepare("INSERT recepti (naslov, sestavine, priprava) VALUES (?, ?, ?)"))
{
$stmt->bind_param("sss", $naslov, $sestavine, $priprava);
$stmt->execute();
$stmt->close();
}
// show an error if the query has an error
else
{
echo "NAPAKA: Podatkov v bazi ne morem popraviti.";
}
// redirec the user
header("Location: view.php");
}
}
// if the form hasn't been submitted yet, show the form
else
{
renderForm();
}
}
// close the mysqli connection
$mysqli->close();
?>
2. Nema filtriranja, jer najverovatnije nije potrebno. U folderu je .htaccess, koji dozvoljava pristip samo jednom IP-ju
Joomlin objekt ne koristim, jer je ovo nije joomla (za sada) U stvari je samo jedna forma, u koji unosiš podatke, a kasnije jih možeš ispravit
Novi Postovi
