1
The file has been uploaded!
Warning: mysqli_query() expects parameter 1 to be mysqli, resource given in C:\wamp\www\scr ipts_named\07\a dd_print.php on line 109
Your submission could not be processed due to a system error.
Where wrong?
Send script component:
mysql_connect.p hp:
Expand|Select|Wrap|Line Numbers
- <?php
- // This file contains the database access information for the database.
- // This file also establishes a connection to MySQL and selects the database.
- // Set the database access information as constants.
- define ('DB_USER', 'root');
- define ('DB_HOST', 'localhost');
- define ('DB_NAME', 'ecommerce');
- // Make the connnection and then select the database.
- $dbc = mysql_connect (DB_HOST, DB_USER) OR die ('Could not connect to MySQL: ' . mysql_error() );
- mysql_select_db (DB_NAME) OR die ('Could not select the database: ' . mysql_error() );
- // Create a function for escaping the data.
- function escape_data ($data) {
- // Address Magic Quotes.
- if (ini_get('magic_quotes_gpc')) {
- $data = stripslashes($data);
- }
- // Check for mysql_real_escape_string() support.
- if (function_exists('mysql_real_escape_string')) {
- global $dbc; // Need the connection.
- $data = mysql_real_escape_string (trim($data), $dbc);
- } else {
- $data = mysql_escape_string (trim($data));
- }
- // Return the escaped value.
- return $data;
- } // End of function.
- ?>
Expand|Select|Wrap|Line Numbers
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta http-equiv="content-type" content="text/html; charset=iso-8859-1" />
- <title>Add a Print</title>
- </head>
- <body>
- <?php
- // This page allows the administrator to add a print (product).
- require_once ('mysql_connect.php'); // Connect to the database.
- if (isset($_POST['submitted'])) { // Check if the form has been submitted.
- // Validate the print_name, image, artist (existing or first_name, last_name, middle_name), size, price, and description.
- // Check for a print name.
- if (!empty($_POST['print_name'])) {
- $pn = escape_data($_POST['print_name']);
- } else {
- $pn = FALSE;
- echo '<p><font color="red">Please enter the print\'s name!</font></p>';
- }
- // Check for an image.
- if (is_uploaded_file ($_FILES['image']['tmp_name'])) {
- if (move_uploaded_file($_FILES['image']['tmp_name'], "move_uploads{$_FILES['image']['name']}")) { // Move the file over.
- echo '<p>The file has been uploaded!</p>';
- } else { // Couldn't move the file over.
- echo '<p><font color="red">The file could not be moved.</font></p>';
- $i = FALSE;
- }
- $i = $_FILES['image']['name'];
- } else {
- $i = FALSE;
- }
- // Check for a size (not required).
- if (!empty($_POST['size'])) {
- $s = escape_data($_POST['size']);
- } else {
- $s = '<i>Size information not available.</i>';
- }
- // Check for a price.
- if (is_numeric($_POST['price'])) {
- $p = (float) $_POST['price'];
- } else {
- $p = FALSE;
- echo '<p><font color="red">Please enter the print\'s price!</font></p>';
- }
- // Check for a description (not required).
- if (!empty($_POST['description'])) {
- $d = escape_data($_POST['description']);
- } else {
- $d = '<i>No description available.</i>';
- }
- // Validate the artist.
- if (!empty($_POST['artist']) == 'new') {
- // If it's a new artist, add the artist to the database.
- $query = 'INSERT INTO artists (first_name, middle_name, last_name) VALUES (';
- if (!empty($_POST['first_name'])) {
- $query .= "'" . escape_data($_POST['first_name']) . "', ";
- } else {
- $query .= 'NULL, ';
- }
- if (!empty($_POST['middle_name'])) {
- $query .= "'" . escape_data($_POST['middle_name']) . "', ";
- } else {
- $query .= 'NULL, ';
- }
- // Check for a last_name.
- if (!empty($_POST['last_name'])) {
- $query .= "'" . escape_data($_POST['last_name']) . "')";
- $result = mysql_query ($query); // Run the query.
- $a = mysql_insert_id(); // Get the artist ID.
- } else { // No last name value.
- $a = FALSE;
- echo '<p><font color="red">Please enter the artist\'s name!</font></p>';
- }
- } elseif ( (!empty($_POST['artist']) == 'existing') && ($_POST['existing'] > 0)) { // Existing artist.
- $a = (int) $_POST['existing'];
- } else { // No artist selected.
- $a = FALSE;
- echo '<p><font color="red">Please enter or select the print\'s artist!</font></p>';
- }
- if ($pn && $p && $a && $i) { // If everything's OK.
- // Add the print to the database.
- $query = "INSERT INTO prints (artist_id, print_name, price, size, description, image_name) VALUES ($a, '$pn', $p, '$s', '$d', '$i')";
- if ($result = mysqli_query ($dbc, $query)){ // Worked.
- echo '<p>The print has been added.</p>';
- } else { // If the query did not run OK.
- echo '<p><font color="red">Your submission could not be processed due to a system error.</font></p>';
- }
- } else { // Failed a test.
- echo '<p><font color="red">Please click "back" and try again.</font></p>';
- }
- } else { // Display the form.
- ?>
- <form enctype="multipart/form-data" action="add_print.php" method="post">
- <input type="hidden" name="MAX_FILE_SIZE" value="524288">
- <fieldset><legend>Fill out the form to add a print to the catalog:</legend>
- <p><b>Print Name:</b> <input type="text" name="print_name" size="30" maxlength="60" /></p>
- <p><b>Image:</b> <input type="file" name="image" /> <small>The file name should not include spaces or other invalid characters and should have a file extension.</small></p>
- <p><b>Artist:</b>
- <p><input type="radio" name="artist" value="existing" /> Existing =>
- <select name="existing"><option>Select One</option>
- <?php // Retrieve all the artists and add to the pull-down menu.
- $query = "SELECT artist_id, CONCAT_WS(' ', first_name, middle_name, last_name) AS name FROM artists ORDER BY last_name, first_name ASC";
- $result = mysqli_query ($dbc, $query);
- while ($row = mysqli_fetch_array ($result, MYSQLI_ASSOC)) {
- echo "<option value=\"{$row['artist_id']}\">{$row['name']}</option>\n";
- }
- mysqli_close($dbc); // Close the database connection.
- ?>
- </select></p>
- <p>
- <input type="radio" name="artist" value="new" /> New =>
- First Name: <input type="text" name="first_name" size="10" maxlength="20" />
- Middle Name: <input type="text" name="middle_name" size="10" maxlength="20" />
- Last Name: <input type="text" name="last_name" size="10" maxlength="30" />
- </p>
- <p><b>Price:</b> <input type="text" name="price" size="10" maxlength="10" /> <small>Do not include the dollar sign or commas.</small></p>
- <p><b>Size:</b> <input type="text" name="size" size="30" maxlength="60" /></p>
- <p><b>Description:</b> <textarea name="description" cols="40" rows="5"></textarea></p>
- </fieldset>
- <div align="center"><input type="submit" name="submit" value="Submit" /></div>
- <input type="hidden" name="submitted" value="TRUE" />
- </form>
- <?php
- } // End of main conditional.
- ?>
- </body>
- </html>
