Untitled

*<?php
if(isset($_POST['submit']))
{
$success = $_POST['success'];
$dates = $_POST['dates'];
$datee = $_POST['datee'];
/*** mysql hostname ***/
$hostname = 'localhost';
$dbname = '*******';
/*** mysql username ***/
$username = 'root';
/*** mysql password ***/
$password = '*******';
try {
    $dbh = new PDO("mysql:host=$hostname;dbname=$dbname", $username, $password);
    $tablename = 'login_attempts';
    $sql = 'SHOW COLUMNS FROM `'.$tablename.'`';
    $fields = array();
    $csv = array();

    $stmt = $dbh->query($sql);
    while($row = $stmt->fetch(PDO::FETCH_ASSOC))
    {
        array_push($fields, $row['Field']);
    }

    array_push($csv, $fields);
    $success = mysql_real_escape_string($success);
    $sql = "SELECT * FROM $tablename WHERE success = '".$success."' AND attempted >='".$dates."' AND attempted <='".$datee."'";
    $stmt = $dbh->query($sql);
    $stmt->execute();

    $csv = array();

    while($row = $stmt->fetch(PDO::FETCH_NUM))
    {
        array_push($csv, $row);
    }

    $fp = fopen('file.csv', 'w');

    foreach ($csv as $row) {
        fputcsv($fp, $row);
    }

    fclose($fp);
    header("Content-type: application/csv");
    header("Content-Disposition: attachment; filename=export.csv");
    header("Pragma: no-cache");
    header("Expires: 0");
    readfile('file.csv');
    $dbh = null;
} catch(PDOException $e) {
    echo $e->getMessage();
}
     exit();}
?>
<html>
    <head>
        <title>csv with criteria</title>
    </head>
    <body>

        <form action="csv2.php" method="post"  enctype="multipart/form-data">
        Select data range
        <br>
        <input type="date" name="dates" id="dates"> Starting date
        <br>
        <input type="date" name="datee" id="datee"> Ending date
        <br>
        Select what data you'd like
        <br>
        <input type="radio" name="success" value="1" checked> Yes<br>
        <input type="radio" name="success" value="0"> No<br>
        <input type="submit" value="show" name="submit">
        <br>
    </form>
    </body>
</html>*