Untitled

<html>
<head>
<title>Beth's Awesome Program</title>
<style>
form {
	margin:0;
	padding:0;
}
</style>

</head>

<body>

<div style="float:left;width:420px;margin-right:30px;">
<a href="/beth.php">Home</a>
<hr />
<h2>Data Input</h2>
<form action="" method="post">
First name: <input type="text" name="first"><br />
Last name: <input type="text" name="last"><br />
Address: <input type="text" name="address"><br />
Age (must be number): <input type="text" name="age">
<input type="submit" name="submit" value="submit">
</form>

<hr />
<h2>Data Search</h2>

<form action="" method="post">
Search field: <select style="width:150px;" name="searchfield">
	<option value="first">First</option>
	<option value="last">Last</option>
	<option value="address">Address</option>
	<option value="age">Age</option>
</select><br />

Search term: <input type="text" name="thesearch">

<input type="submit" name="submit" value="submit">

</form>


</div>
<?php

$hostname="localhost";
$username="root";
$password="zRx181962";
$link = mysqli_connect ($hostname,$username,$password);

mysqli_select_db($link, "bethcustomers");

if(isset($_POST["first"])){
	$first = mysqli_real_escape_string($link,$_POST["first"]);
	$last = mysqli_real_escape_string($link,$_POST["last"]);
	$address = mysqli_real_escape_string($link,$_POST["address"]);
	$age = mysqli_real_escape_string($link,$_POST["age"]);
	$query = "INSERT INTO customers(first,last,address,age) VALUES('$first','$last','$address',$age)";
	$result = mysqli_query($link,$query);
}
if(isset($_POST["efirst"])){
	$first = mysqli_real_escape_string($link,$_POST["efirst"]);
	$last = mysqli_real_escape_string($link,$_POST["elast"]);
	$address = mysqli_real_escape_string($link,$_POST["eaddress"]);
	$age = mysqli_real_escape_string($link,$_POST["eage"]);
	$query = "UPDATE customers SET first = '".$_POST["efirst"]."', last = '".$_POST["elast"]."', address = '".$_POST["eaddress"]."', age = '".$_POST["eage"]."' WHERE id = ".$_POST["eid"];
	$result = mysqli_query($link,$query);
}


if(isset($_POST["deleteme"])){
	$query = "DELETE FROM customers WHERE id = ".$_POST["deleteme"];
	$result = mysqli_query($link,$query);
}


?>
<div style="float:left;width:450px;">
<table cellspacing=1 cellpadding=3 border=1>
<tr><th><a href="?sort=first">First</a></th><th><a href="?sort=last">Last</a></th><th><a href="?sort=address">Address</a></th><th><a href="?sort=age">Age</a></th><th>Delete</th><th>Update</th></tr>
<?php
if(isset($_GET["sort"])){
	if($_GET["sort"] == 'last'){
		$query = "SELECT * FROM customers ORDER BY last";
	}
	if($_GET["sort"] == 'first'){
		$query = "SELECT * FROM customers ORDER BY first";
	}
	if($_GET["sort"] == 'address'){
		$query = "SELECT * FROM customers ORDER BY address";
	}
	if($_GET["sort"] == 'age'){
		$query = "SELECT * FROM customers ORDER BY age";
	}
} else {
	$query = "SELECT * FROM customers ORDER BY id";
}
if(isset($_POST["searchfield"])){
	$searchfield = mysqli_real_escape_string($link,$_POST["searchfield"]);
	$thesearch = mysqli_real_escape_string($link,$_POST["thesearch"]);
	$query = "SELECT * FROM customers WHERE `".$searchfield."` LIKE '%".$thesearch."%'";
}
if(!isset($query)){
	$query = "SELECT * FROM customers ORDER BY id";
}
$result = mysqli_query($link,$query);
while(@$r=mysqli_fetch_array($result,MYSQLI_ASSOC)){
	echo "<tr><td>".$r["first"]."</td><td>".$r["last"]."</td><td>".$r["address"]."</td><td>".$r["age"]."</td><td><form action='' method='post'><input type='submit' name='submit' value='Delete'><input type='hidden' name='deleteme' value='".$r["id"]."'></form></td><td><form action='' method='post'><input type='submit' name='submit' value='Update'><input type='hidden' name='editme' value='".$r["id"]."'></form></td></tr>\n";
}
?>
</table>

<?php
if(isset($_POST["editme"])){
	$query = "SELECT * FROM customers WHERE id = ".$_POST["editme"];
	$result = mysqli_query($link,$query);
	while($r=mysqli_fetch_array($result,MYSQLI_ASSOC)){
		$efirst = $r["first"];
		$elast = $r["last"];
		$eaddress = $r["address"];
		$eage = $r["age"];
	}


?>
<h2>Update Record</h2>
<form action="" method="post">
First name: <input type="text" name="efirst" value="<?php echo $efirst; ?>"><br />
Last name: <input type="text" name="elast" value="<?php echo $elast; ?>"><br />
Address: <input type="text" name="eaddress" value="<?php echo $eaddress; ?>"><br />
Age (must be number): <input type="text" name="eage" value="<?php echo $eage; ?>">
<input type="submit" name="submit" value="submit">
<input type="hidden" name="eid" value="<?php echo $_POST["editme"]; ?>">
</form>
<?php
}
?>

</div>


</body>

</html>