Untitled

<?php

session_start();
require_once 'config.php';

if (@$_SESSION['username']) {

    $search = 'PENDING';
    $query = "SELECT * FROM `crew_info` WHERE `crew_status` = ?";
    $stmt = mysqli_prepare($conn, $query);
    mysqli_stmt_bind_param($stmt, 's', $search);
    mysqli_stmt_execute($stmt);
    mysqli_stmt_bind_result($stmt, $col1, $col2, $col3, $col4, $col5, $col6, $col7, $col8, $col9, $col10, $col11, $col12, $col213, $col14, $col15, $col16, $col17, $col18, $col19);

echo '<!DOCTYPE html>
    <html>
    <head>
        <title>All Crew</title>
    </head>
    <body>
    <form method="POST">
        <table border="2" align="center" width="600" cellspacing="3" cellpadding="4">
            <tr>
                <th>First Name</th>
                <th>Middle Name</th>
                <th>Last Name</th>
                <th>Date Added</th>
                <th>Status</th>
                <th>REVIEW</th>
            </tr>
            <tr>';
            $rows = array();
            while($record = mysqli_stmt_fetch($stmt)) {
            echo "<tr>";
            echo "<th>".sprintf("%s", $col2)."</th>";
            echo "<th>".sprintf("%s", $col3)."</th>";
            echo "<th>".sprintf("%s", $col4)."</th>";
            echo "<th>".sprintf("%s", $col18)."</th>";
            echo "<th>".sprintf("%s", $col19)."</th>";
            echo "<th><a target='_blank' href='review.php?id=$col1'>Click</a></th>";
            echo '</tr>';
          }
         echo '</table>
    </form>
    </body>
    </html>';


}
else {
	header('Location: /practice1/index.php');
}

?>