phpmaze/profile.php at master · Daornit/phpmaze · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
<!DOCTYPE html>
<html lang="en" dir="ltr">
  <head>
    <meta charset="utf-8">
    <title>Нэвтрэх</title>
  </head>
  <body>
<?php
require_once './popup/database.php';
$connection = new mysqli("localhost",$db_username, $db_password, $db_database);
if($connection -> connect_error) die($connection->connection_error);

if(isset($_POST['sisi'])){
  $sisi = get('sisi');
  $pass = get('pass');
  $query = "SELECT * FROM authentic WHERE sisi = '$sisi'";
  $result = $connection -> query($query);
  $row = $result->fetch_assoc();
  if(!$result) due($connection->error);

  if($row['pass']==$_POST['pass']){
      $query = "SELECT * FROM student WHERE sisi = '$sisi'";
      $result = $connection -> query($query);
      $row = $result->fetch_assoc();
      echo <<< _END
      <pre>
      Таний нэр: $row[fName] <br>
           Овог: $row[lName] <br>
         SISIID: $row[sisi] <br><br><br>
_END;
      $query = "SELECT lesson.* FROM lesson INNER JOIN selectedLessons ON lesson.lessinId = selectedLessons.lessinId WHERE selectedLessons.sisi = '$row[sisi]'";
      $result = $connection -> query($query);
      $rows=$result->num_rows;
      echo "<form action=\"./addlesson.php\" method=\"post\">";
      echo "<table><tr> <th>Lesson Name</th><th>Lesson id</th><th>Gredit</th><th>Program</th><th>Choose</th></tr>";
      for($j=0;$j<$rows;$j++){
        $result->data_seek($j);
        $row = $result->fetch_array(MYSQLI_ASSOC);
        echo '<tr>';
          echo "<td style=\"background-color:green\">$row[lessonName]</td>";
          echo "<td>$row[lessinId]</td>";
          echo "<td>$row[credit]</td>";
          echo "<td>$row[programID]</td>";
          echo "</tr>";
      }

      $query = "SELECT * FROM lesson LEFT JOIN selectedLessons ON lesson.lessinId = selectedLessons.lessinId WHERE lesson.lessinId IS NOT NULL AND sisi <> '$sisi'";
      $result = $connection -> query($query);
      $rows=$result->num_rows;
      for($j=0;$j<$rows;$j++){
        $result->data_seek($j);
        $row = $result->fetch_array(MYSQLI_ASSOC);
        echo '<tr>';
          echo "<td>$row[lessonName]</td>";
          echo "<td>$row[lessinId]</td>";
          echo "<td>$row[credit]</td>";
          echo "<td>$row[programID]</td>";
          echo "<td><input type=\"checkbox\" name=\"lesson[$j]\" value=\"$row[lessinId]\"></td>";
          echo "</tr>";
      }
      echo "</table></pre>";
      echo "<input type=\"hidden\" name='sisi' value='$sisi'>";
      echo "<input type=\"hidden\" name='pass' value='$pass'>";
      echo "<input type=\"submit\" value='Save'>";
      echo "</form>";
  }
  else echo "Failet re try";
}

function get($var){
  return mysql_real_escape_string($_POST[$var]);
}

?>
  </body>
</html>