Untitled

<?php
session_start();

if (!isset($_SESSION["logged_in"]))
{
 header("Location: index.php");
}


?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-GB">
<head>
<title>The Perfect 3 Column Liquid Layout: No CSS hacks. SEO friendly. iPhone compatible.</title>
<meta http-equiv="Content-Type" content="application/xhtml+xml; charset=utf-8" />
<link rel="stylesheet" type="text/css" href="CSD4020.css" media="screen" />
</head>
<body>
<a href="do_logout.php"> logout</a>
<div id="header">
    <a href="index.php"> <img src="imgs/logo.png" /></a>
  <div id="top_menu">
    <ul>
      <li> <img src="imgs/addFile.gif" /><a href="#" >Add file </a></li>
      <li> <img src="imgs/addFolder.png" /><a href="#" >Add Folders</a></li>
      <li><img src="imgs/delete.gif" /> <a href="#" >Delete</a></li>
      <li> <img src="imgs/share.png" /><a href="#" >Share</a></li>
      <li></li>
      <li> <input type="text" id="search" /> <a href="#"> <img src="imgs/search.png" /> </a>
    </ul>
 </div>
</div>
<div class="colmask">
  <div class="colleft"> </div>
  <div class="colmid">
  <table >
    <tr><td width=300><b>Name</td><td width=50><b>Size</td><td width=200><b>Comment</td><td><b>Time</td><td><b>Actions</td></tr>
  <?php
  $username=$_SESSION["username"];
  $user_id=$_SESSION["user_id"];
  $db = new PDO('mysql:host=127.0.0.1;dbname=dropbin;charset=utf8', '', '');

    // get the files for this user
    $stmt=$db->query("select * from file where file_user_id='$user_id'");
    while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
        echo  "<TR><TD><a href='do_actions.php?cmd=download&file_id=$row[id]&folder_id=$row[file_folder_id]'>".$row['file_name']. "</a> </td><td> ". $row['file_size'] ." </td><td> ".$row["file_comment"]."</td> <td> ".$row["folder_dt_created"]."</td> ".
                "<td><a href='do_actions.php?cmd=delete&file_id=$row[id]&folder_id=$row[file_folder_id]'>Delete</a><td>".
                "<td><a href='do_actions.php?cmd=share&file_id=$row[id]&folder_id=$row[file_folder_id]'>Share</td></tr>";
    }
    ?>
    </table>
    <p></p>

    <form action="do_upload.php" method="post" enctype="multipart/form-data">
        <table border=0>
        <tr><td width=140><b>Upload file:</td></tr>
        <tr><td>File</td><td><input type="file" name="fileToUpload" id="fileToUpload"></td></tr>
        <tr><td>Comments </td><td> <input type="text" name="comment_id" id="comment_id" value="Sample Comment"></td></tr>

        <tr><td>Folder</td><td>
        <?php


        // get the folders for this user
        $stmt=$db->query("select * from folder where folder_user_id='$user_id'");
        echo "<select id=folder_id name=folder_id>";
        if($stmt)
        {
            while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
                echo  "<option value='$row[folder_id]' >$row[folder_name]</option>";

            }
        }
        echo "</select> <br>";

        ?></td></tr>
        <tr><td></td><td>   <input type="submit" value="Upload Image" name="submit"></td></tr>
        </table>
    </form>

    <form action="do_create_items.php" method="post" enctype="multipart/form-data">
        <table border=0>
        <tr><td width=140><b>Create Folder:</td></tr>
        <tr><td>Folder Name:</td><td> <input type="text" name="folder_name" id="folder_name"></td></tr>
        <tr><td>Folder comment:</td><td> <input type="text" name="folder_comment" id="folder_comment"></td></tr>
        <input type="hidden" value="<?php echo $user_id ;?>" id="user_id" name="user_id" ><br>
        <input type="hidden" value="create_folder" id="cmd" name="cmd" ><br>
        <tr><td></td><td><input type="submit" value="create folder" name="submit"></td></tr>
        </table>
    </form>

    <div class="login_div">
      <?php
      echo "$_SESSION[first_name] $_SESSION[last_name]<br>" ;
      ?>
    </div>
  </div>
  <div class="colright"> </div>
</div>
<div id="footer">
  <div id="footer_info"> Copyright n.taibi 2014 (c) </div>
</div>
</body>
</html>