bedbreakah

<?php

require_once 'connect.php';

$todo = "SELECT * from items";
$result = mysqli_query($conn, $todo);
$doneBox = 0;

if (!$result)
{
        printf ('<pre>We have a problem: ' . mysqli_error($conn) . '<pre>');
}
if (isset ($_POST['submitted']))
{
        $itemName = $_POST['name'];
        $itemUser = $_POST['user'];

        if (isset ($_POST['done']) && $_POST['done'] == true)
        {
                $doneBox = 1;
        }
        $doDate = date("Y-m-d H:i:s");
        $dbInsert = "INSERT into items (name, user, done, date) values ('$itemName', '$itemUser', '$doneBox', '$doDate')";
        if (!mysqli_query($conn, $dbInsert))
        {
                die ('Could not add new item');
        }
        header('Location: '.$_SERVER['PHP_SELF']);
        die;
}

?>

<script src="http://code.jquery.com/jquery-1.10.2.js"></script>
<script src="http://code.jquery.com/ui/1.11.0/jquery-ui.js">
</script>
<link rel="stylesheet" href="http://code.jquery.com/ui/1.11.0/themes/smoothness/jquery-ui.css">
<script>
$(function(){
        $( "#datepicker" ).datepicker({ dateFormat: "yy-mm-dd" });
});
</script>
<!doctype html>

<html lang="en">
<head>
        <meta charset="UTF-8">
        <title>To Do List</title>
</head>

<body>

        <form method="post" action="index.php">
        <input type="hidden" name="submitted" value="true">
        <fieldset>
                <legend>To Do List Input Form</legend>
                <label>What<input type="text" name="name"/></label>
                <label>Who<input type="text" name="user"/></label>
                <label>Done?<input type="checkbox" name="done"/></label>
                <label>When?<input type="text" name="selected_date" id="datepicker"/></label>
        </fieldset>
<br/>
        <input type="submit" value="addnew" />
        </form>
<ol>
<?php
if (isset($_GET['id']))
{
	$itemDesc = $_GET['id'];
	?><form><input type="hidden" name="keepvar" value="<?php echo $_GET['id'];?>"/></form><?php
	$oldDesc = $_GET['keepvar'];
	print_r ('Change ' . $itemDesc . '?');
	?><form> <method="post" action="index.php">
	<label>New Description<input type="text" name="newDesc"/></label>
	<input type="submit" value="Change" /></form>

	<?php
	if (isset ($_POST['Change']))
		{
			$oldDesc=$_GET['keepvar'];
			$newDesc=$_POST['newDesc'];
			$dbNewdesc = "UPDATE items SET name='$newDesc' WHERE name='$oldDesc'";
			$updatequery = mysqli_query ($conn, $dbNewdesc);
			if (!$updatequery)
			{
				echo mysqli_error($conn);
			}
		}
}
if (isset($_GET['del']))
{
	$delvar = ($_GET['del']);
	print_r ($delvar);
	$delprep = "DELETE from items where name = '$delvar'";
	$deletequery = mysqli_query ($conn, $delprep);
	var_dump ($deletequery);
	if ($deletequery)
	{
		echo "'$delvar' has been successfully deleted!";
	}
	else
	{
		echo mysqli_error($conn);
	}
}
?>
<?php while ($row = $result->fetch_assoc()) : ?>
        <li><?php echo $row['name']; ?> </li>
        <a href="<?php echo $_SERVER['PHP_SELF'] . "?id=" . $row['name'] ?>">Edit</a>
		<a href="<?php echo $_SERVER['PHP_SELF'] . "?del=" . $row['name'] ?>">Delete</a>
<?php endwhile ?>
</ol>