Untitled

<!DOCTYPE html>

<html lang="en">
<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<title>Page Title</title>
	<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css" integrity="sha384-Vkoo8x4CGsO3+Hhxv8T/Q5PaXtkKtu6ug5TOeNV6gBiFeWPGFN9MuhOf23Q9Ifjh" crossorigin="anonymous">
	<link href="https://fonts.googleapis.com/css?family=Roboto&display=swap" rel="stylesheet">
	<link rel="stylesheet" href="assets/css/style.css">
</head>
<body>
	<?php
	require_once "db_conn.php";

	echo "<pre>";
	print_r($_POST);
	echo "</pre>";

	//Patikriname ar paskelbe forma
	//add_city yra formos mygtukas
	if(isset($_POST['add_city'])):
		//Tuscias masyvas kur saugosime validavimo klaidas
		$errors = [];

		//Tikriname ar ivede miesto pavadinima ir kad jo ilgis bent 5 simboliai
		if(!empty($_POST['city_name']) && strlen($_POST['city_name']) >= 5){
			//Praejome patikrinima, apsisaugome nuo kabuciu (SQL injection)
			$city_name = $db->escape_string($_POST['city_name']);
		}else{
			//Nepraejome patikrinimo, sukuriame klaidos pranesima
			array_push($errors, 'You must enter city name, minimum length is 5');
			$city_name = $_POST['city_name'];
		}

		//Patikriname ar ivestas failo pavadinimas
		if(!empty($_POST['city_image_filename'])){
			//Jeigu pavadinimas ivestas, apsisaugome nuo kabuciu (SQL injection)
			$city_image_filename = $db->escape_string($_POST['city_image_filename']);
		}else{
			//Nepraejome patikrinimo, sukuriame klaidos pranesima
			array_push($errors, 'You must enter city image filename');
			$city_image_filename = $_POST['city_image_filename'];
		}

		//Patikriname ar failo pavadinime nurodyta failo galune
		//tikriname ieskodami ar yra pavadinime taskas
		if(isset($city_image_filename) && !strpos($city_image_filename, '.')){
			array_push($errors, 'Filename must include file extension');
		}

		//Patikriname ar buvo validavimo klaidu
		if(empty($errors)){
			$sql = "INSERT INTO capitals (title, image)
					VALUES ('$city_name', '$city_image_filename')";

			//echo $sql;
			$result = $db->query($sql);

			if($result){
				unset($city_name);
				unset($city_image_filename);
				$success = "City added";
			}
		}


	endif;
	?>
	<header class="capitals-header">
		<div class="container">
			<h1>Add city</h1>
		</div>
	</header>
	<section class="capital-cities">
		<div class="container">
			<div class="single-city p-5 bg-white">
				<?php
				if(isset($errors) && !empty($errors)):
					?>
					<div class="errors pb-3">
						<ol class="alert alert-danger px-5">
							<?php
							foreach($errors as $error){
								echo "<li>$error</li>";
							}
							?>
						</ol>
					</div>
					<?php
				endif;
				if(isset($success)): ?>
					<div class="alert alert-success">
						<?php echo $success; ?>
					</div>
					<?php
				endif;
				?>
				<form method="POST">
					<div class="form-group">
						<label for="city_name">City Name</label>
						<input type="text" class="form-control" id="city_name" name="city_name" placeholder="Enter city name" value="<?php echo stripslashes($city_name ?? ''); ?>">
					</div>
					<div class="form-group">
						<label for="city_image_filename">City Image Filename</label>
						<input type="text" class="form-control" id="city_image_filename" name="city_image_filename" placeholder="Enter city image filename" value="<?php echo stripslashes($city_image_filename ?? ''); ?>">
					</div>
					<button type="submit" name="add_city" class="btn btn-primary">Add City</button>
				</form>
			</div>
		</div>
	</section>
</body>
</html>