Untitled

<?php  include ("hlavicka.php")?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
<title>  Eshop-zpracování objednávky  </title>
</head>
<body>
<?php
include('../mysql_connect.php');
session_start();

$id_zbozi=$_GET["id_zbozi"];
$platba=$_GET["platba"];
$doprava= $_GET["Doprava"];
$id_uzivatele=$_SESSION["user"];
function chyba () {
     echo "Chyba: ".mysql_error();
}
$idUserSel=mysql_query("SELECT id_uzivatele FROM eshop_uzivatele WHERE login='".$_SESSION['user']."'");
$idUserArr=mysql_fetch_row($sql);
$idUser=$idUserArr['0'];
$sql = "INSERT INTO eshop_objednavky VALUES ('', '$platba', '$doprava', '$idUser', '$id_zbozi')";

mysql_query($sql);
$sql2="SELECT * FROM eshop_zbozi WHERE id_zbozi=$id_zbozi";
$radek=mysql_fetch_array(mysql_query($sql2));
echo "Objednávka byla odeslána<br><br>";
echo "Uživatelské jméno: " .$id_uzivatele."<br>";
echo "Zboží: ". $radek['nazev_zbozi']. "<br>";
echo "Cena: ". $radek['cena']."Kč <br>";
echo "Způsob platby: " .$platba." <br>";
echo "Způsob dopravy: " .$doprava." <br>";
?>
<?php include ("paticka.php")?>
</body>
</html>