Untitled

<?php
error_reporting(1);
require "config.php";
session_start();
if (!(isset($_SESSION["username"]) && $_SESSION["username"] === md5(USERNAME) && isset($_SESSION["password"]) && $_SESSION["password"] === md5(PASSWORD))) {
    header("Location:index.php");
}

$year = date("Y");
$month = date("m");
$day = date("d");

if ($_POST["ymd"]) {
    $year = h($_POST["year"]);
    $month = h($_POST["month"]);
    $day = h($_POST["day"]);
}

$ymd = $year.$month.$day;

?>
<!DOCTYPE html>
<html lang="ja">
<head>
<meta charset="utf-8">
<title>フットサル予定表</title>
<link rel="stylesheet" href="event-calendar.css">
</head>

<body>
<div id="calendarWrap">
<?php
print "<div id=\"selectBox\">\n";
print "<form action=\"{$_SERVER["PHP_SELF"]}\" method=\"post\">\n";
print "<div class=\"selectBoxItem\">\n";
print "<select name=\"year\">\n";
for ($ovy = $year -1; $ovy <= $year + 1; $ovy++) {
    if ($ovy == date("Y")) {
        print "<option value=\"{$ovy}\" selected=\"selected\">{$ovy}</option>\n";
    } else {
        print "<option value=\"{$ovy}\">{$ovy}</option>\n";
    }
}
print "</select>\n";
print "年\n";
print "</div>\n";

print "<div class=\"selectBoxItem\">\n";
print "<select name=\"month\">\n";
for ($ovm = 1; $ovm <= 12; $ovm++) {
    $ovm = sprintf("%02d",$ovm);
    if ($ovm == date("m")) {
        print "<option value=\"{$ovm}\" selected=\"selected\">{$ovm}</option>\n";
    } else {
        print "<option value=\"{$ovm}\">{$ovm}</option>\n";
    }
}
print "</select>\n";
print "月\n";
print "</div>\n";

print "<div class=\"selectBoxItem\">\n";
print "<select name=\"day\">\n";
for ($ovd = 1; $ovd <= 31; $ovd++) {
    $ovd = sprintf("%02d",$ovd);
    if ($ovd == date("d")) {
        print "<option value=\"{$ovd}\" selected=\"selected\">{$ovd}</option>\n";
    } else {
        print "<option value=\"{$ovd}\">{$ovd}</option>\n";
    }
}
print "</select>\n";
print "日\n";
print "</div>\n";

print "<p><input type=\"submit\" name=\"ymd\" value=\"年月を変更\"></p>\n";
print "</form>\n";
print "</div>\n";

$db = mysql_connect('サーバー名', 'user', 'PASS');
mysql_select_db("");
$result = mysql_query("SELECT * FROM events WHERE jikan=$ymd");
while ($value = mysql_fetch_assoc($result, MYSQL_ASSOC)) {
    $title = $value["title"];
    $content = $value["naiyo"];
    break;
}
mysql_close($db);

print <<< EOM
<h3>{$year}年{$month}月{$day}日の予定</h3>
<form action="submit.php" method="post">
<p id="inputTitle"><input type="text" name="title" value="{$title}"></p>
<p id="inputText"><textarea cols="50" rows="7" name="content" value="{$content}">{$content}</textarea><p>
<p><input type="hidden" name="ymd" value="{$ymd}"></p>
<p id="wd"><button type="submit" name="write" value="write"><img src="button_write.png"></button><button type="submit" name="delete" value="delete"><img src="button_delete.png"></button></p>
</form>
EOM;

function h($str) {
    return htmlspecialchars($str,ENT_QUOTES,"utf-8");
}
?>
<div id="calendarFt">
<p><a href="team.php">予定表に戻る</a><a href="logout.php">ログアウト</a></p>
</div>
</div>
</body>
</html>