Untitled

GET_AJAX.PHP

<?php

//$date=$_GET["date"];

include ("db_config.php");
include ("config.php");

$sql="";
$date="";


$sqls[1]="SELECT l.ip,l.browser,l.datetime,u.username FROM `log` as l,user as u WHERE u.user_id=l.user_id ORDER BY l.datetime DESC";
$sqls[2]="SELECT l.ip,l.browser,l.datetime,u.username FROM `log` as l,user as u WHERE u.user_id=l.user_id AND DATE(l.datetime)='$date' ORDER BY l.datetime DESC";
if(isset($_POST['sql']) AND isset($_POST['date']))
{
$sql=(int)mysqli_real_escape_string($connection,$_POST['sql']);
if(($sql>=1 OR $sql<=2))
{
$result= mysqli_query($connection,$sqls[$sql]) or die(mysqli_error($connection));

if (mysqli_num_rows($result)>0)
{
while ($record = mysqli_fetch_array($result,MYSQLI_BOTH))
{
    echo "User: $record[username]<br /> Browser: $record[browser]<br /> IP address:$record[ip]<br /> Date and time:$record[datetime] <br /><br />";
}
    }
        }
else
echo "No access!!";
}
else
echo "No access!";
?>


----------------------------------------------------------------------------------------
INDEX.PHP

<html>
<head>

</head>
<body>
<div>
<form>
    <input id="buttonV" type="button" value="View Log">
</form>
</div>

<div>
<form>
    Day:
    <select name="day" id="day">
        <?PHP for($i=1; $i<=31; $i++)
            echo "<option value='$i'>$i</option>";
        ?>
    </select>
    Month:
    <select name="month" id="month">
        <?PHP for($i=1; $i<=12; $i++)
            echo "<option value='$i'>$i</option>";
        ?>
    </select>
    Year:
    <select name="year" id="year">
        <?PHP for($i=1980; $i<=2016; $i++)
            echo "<option value='$i'>$i</option>";
        ?>
    </select>
    <input type="button" value="see users by date" id="buttonD">
</form>
<br />
</div>
<div id="button_values"></div><br />
<hr>
<div id="select_values"></div>

<script type="text/javascript">

    var year = document.getElementById("year");
    var month = document.getElementById("month");
    var day = document.getElementById("day");
    var date=year+'-'+month+'-'+day;

    document.getElementById("buttonV").addEventListener('click',function(){showUser(1,'button_values')});
    document.getElementById("buttonD").addEventListener('click',function(){showUser(2,'select_values')});


    function showUser(sql,div)
    {
        var xmlhttp;
        if (window.XMLHttpRequest)
        {// code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp=new XMLHttpRequest();
        }
        else
        {// code for IE6, IE5
            xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
        }
        xmlhttp.onreadystatechange=function()
        {
            document.getElementById(div).innerHTML='<img src="ajax_loader.gif" />';
            if (xmlhttp.readyState==4 && xmlhttp.status==200)
            {
                document.getElementById("button_values").innerHTML=xmlhttp.responseText;
            }
        };
        xmlhttp.open("POST","get_ajax.php",true);
        xmlhttp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
        xmlhttp.send("sql="+sql+"date="+date);

    }
</script>

</body>
</html>