DayOne-Store/adminlistupdate.php at main · ginomeee/DayOne-Store · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
<html>
<head>
    <title>Edit | DayOne Store</title>
    <link rel='icon' href='favicon.ico' type='image/x-icon' />
	<link href="bootstrap-5.0.2/css/bootstrap.css" rel="stylesheet" type="text/css">
	<link href="main.css" rel="stylesheet" type="text/css">
</head>
<?php
session_start(); //starts the session
if($_SESSION['user'] && $_SESSION['usertype'] == 0){ //checks if user is logged in
} else {
    header("location:index.php "); // redirects if user is not logged in
}
$user = $_SESSION['user']; //assigns user value
$id_exists = false;
?>
<body class="homebg">
    <nav class="navbar navbar-dark bg-dark shadow">
      <a class="navbar-brand" href="adminlist.php" style="height:inherit;">
        <img src="images/Store.png" class="navimgwht" height="40px">
      </a>
    </nav>
    <div class="d-flex flex-row justify-content-center">
    	<div class="col-md-8 p-4 m-5 shadow-lg card justify-content-center">
            <h2 align="center">Edit Item Listing</h2>
                <?php
                if(!empty($_GET['id'])) {
                    $id = $_GET['id'];
                    $_SESSION['id'] = $id;
                    $id_exists = true;
                    $con = mysqli_connect("localhost", "id17778834_root", "-2JrCu|K*@hws%OX", "id17778834_dayonedb") or die(mysqli_error()); //Connect to server
                    $sql = "Select * from `items` where id='$id'";
                    $query = mysqli_query($con, $sql); // SQL Query
                    $count = mysqli_num_rows($query);
                    if($count > 0) {
                      while($row = mysqli_fetch_array($query))
                      {
                          $item = $row['item'];
                          $desc = $row['description'];
                          $price = $row['price'];
                          $imageloc = $row['img'];
                          echo '<div class="card moderncard col-md-4 m-2 shadow d-flex mx-auto">';
                            echo "<div class='itemimg' style='background-image:url(itemimg/$imageloc)'></div>";
                            echo '<div class="p-3" height=100%><h3>'. $item . "</h3>";
                              echo '<h6 class="text-muted">'. $desc . "</h6>";
                            echo '</div>';
                            echo '<div class="mt-auto mx-3 mb-3"><h5>₱'. $row['price'] . "</h5></div>";
                            echo '<div class="text-center mb-3">
                                     <button class="btn btn-outline-dark align-center w-75 m-2" style="border-radius:40px" >Add to Cart</button>
                                   </div>
                                </div>';
                      }
                    }
                    else {
                        $id_exists = false;
                    }
                }
                ?>

                <?php
                if($id_exists==true) {
                    echo '
                <form class="form-group mt-3" method="POST" action="adminlistupdate.php">
                    <label>Item Name</label>
                    <input type="text" class="mb-2 form-control" name="item" value="' . $item . '" rows="1">
                    <label>Description</label>
                    <input type="text" class="mb-2 form-control" name="description" value="' . $desc . '" rows="1">
                    <label>Price</label>
                    <input type="number" class="mb-2 form-control" name="price" value="' . $price . '" rows="1">
                    <label>Image URL</label>
                    <input type="text" class="mb-2 form-control" name="img" value="' . $imageloc . '" rows="1">
                    <input type="submit" class="mt-4 btn btn-dark" style="width:100%" value="Update Fields"></submit>
                </form>
                    ';
                } else {
                    Print '<h4 align="center">There is no data to be edited.</h4>';
                }
                ?>

            <form action="adminlist.php" method="">
              <input type="submit" class="btn btn-outline-dark" style="width:100%" value="Go Back"></input>
            </form>
        </div>
    </div>


</body>
</html>


    <?php
    if($_SERVER['REQUEST_METHOD'] == "POST")
    {
        $con = mysqli_connect("localhost", "id17778834_root", "-2JrCu|K*@hws%OX", "id17778834_dayonedb") or die(mysqli_error()); //Connect server
        $item = ($_POST['item']);
        $description = ($_POST['description']);
        $id = $_SESSION['id'];
        $price = $_POST['price'];
        $img = $_POST['img'];
        mysqli_query($con, "UPDATE `items` SET item='$item', price='$price', img='$img', description='$description' WHERE id='$id'") ;
            echo '<script>alert("Successfully Updated")</script>';
            echo "<script>window.location.assign('adminlistupdate.php?id=$id')</script>";
        }
        ?>