Untitled

<html>
<?php
    require "../auth.php";
    include_once("../dbconnect.php");
?>
<head>
    <meta charset="utf-8">
    <title>Новай платеж</title>
</head>
<body>
<form method="post" action="addpayment.php">
<input  type="hidden" name="datetime" value="<?php echo date('Y-m-d H:i:s');?>">
Оплачиваемые услуги:<br>
<?php $result = mysql_query(" SELECT * FROM services "); ?>
<select required name="service_id">
    <?php while($row = mysql_fetch_assoc($result)){ ?>
    <option value="<?php echo $row['service_id'] ?>" ><?php echo $row['service_name'] ?>(<?php echo $row['service_cost'] ?>)</option>
    <?php } ?>
</select><br>
Использованные детали:<br>
<?php   include_once("../dbconnect.php");
$result = mysql_query(" SELECT * FROM details ");
?>
<select required name="detail_id" required>
    <?php while($row = mysql_fetch_assoc($result)){ ?>
    <option value="<?php echo $row['detail_id']?>" ><?php echo $row['name'] ?>(<?php echo $row['cost'] ?>)</option>
    <?php } ?>
</select><br>
Сумма платежа:<br>
<input type="text" name="summ" value="<?php echo $row['summ']?>"><br>

<input type="submit" name="add" value="Добавить">
</form>
<?php


if(isset($_POST['add'])){

  $service_id = strip_tags(trim($_POST['service_id']));
  $detail_id = strip_tags(trim($_POST['detail_id']));
  $summ = strip_tags(trim($_POST['summ']));
  $datetime = strip_tags(trim($_POST['datetime']));

  mysql_query(" INSERT INTO payments(service_name,service_cost,summ,datetime)
                VALUES ('$service_name','$service_cost','$summ','$datetime') ");

  mysql_close();

  header("Location: payments.php");
}

?>
<a href="payments.php">Вернуться назад</a>
</body>
</html>