<?php
  ob_start();
  session_start();
  require_once 'dbconnect.php';

  if( !isset($_SESSION['user']) ) {
    header("Location: index.php");
    exit;
  }
  // select loggedin users detail
  $res=mysql_query("SELECT * FROM users WHERE userId=".$_SESSION['user']);
  $userRow=mysql_fetch_array($res);

$userId = $userRow['userId'];

$userAdmin = $userRow['admin'];

if($userAdmin == 0){
 header('Location: index.php');
}

?>


 <?php

      $servername = "localhost";
$username = "pokemon";
$password = "pokemon";
$dbname = "pokemon";

      $pN = $_POST["pName"];
      $pT = $_POST["pType"];
      $pT2 = $_POST["pType2"];
      $pE = $_POST["pEv"];
      $pDe = $_POST["pDesc"];
      $pH = $_POST["pH"];
      $pW = $_POST["pW"];

$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

$sql = "UPDATE `pokemon` SET name = $pN, Type = $pT";


if ($conn->query($sql) === TRUE) {
    Header('Location:admin.php');
} else {
    echo "Error: " . $sql . "<br>" . $conn->error;
}

$conn->close();



      ?>