Untitled

<?php
    session_start();

    $dsn = 'mysql:host=localhost;dbname=ZineDB';
    $username = 'root';
    $password = 'ONGOINGwarfare1+2+3+';
    $options = array(PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES utf8');
    try
    {
        $dbh = new PDO($dsn, $username, $password, $options);
        $dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    }catch (PDOException $pdoe) {
        echo $pdoe->getMessage();
    }
?>
<!DOCTYPE html>
<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>Zine DB - Details for <?php print $_SESSION["MagazineName"]?> issue <?php print $_SESSION["Issue"]?></title>
    </head>
        <?php print "Now you can begin submitting the articles."?>
        <br/><br/>
        <form action="MagazineInfo.php" method="POST">
            Article Name: <input type="text" name="Article_Name"/> <br/>
            Author's Name: <input type="text" name="Author_Name" /> <br/>
            Topics Covered: <select name="Topic">
                <option value="Databases">Databases</option>
                <option value="Programming" selected="selected">Programming</option>
                <option value="News">News</option>
                <option value="Supercomputing">Supercomputing</option>
                <option value="Hardware">Hardware</option>
                <option value="Browsers">Browsers</option>
                <option value="Online_Backup">Online Backup</option>
            </select>
                <input type="Submit" value="Submit"/><br/><br/>
        </form>
    <body>
    </body>
</html>

<?php
    $Magazine_Name_temp = $_SESSION["MagazineName"];
    $magazineQ = $dbh->query ("SELECT `Magazine_ID` FROM `ZineDB`.`Magazine` WHERE `ZineDB`.`Magazine`.`Name` = :name");
    $magazineQ->execute (array(':name' => $Magazine_Name_temp));
    //Value of Magazine_ID
    $Magazine_ID = $magazineQ->fetchColumn();

    if (!empty ($_POST["Author_Name"]) && !empty ($_POST["Article_Name"]) && !empty ($_POST["Topic"]))
    {
        $Author_Name = $_POST["Author_Name"];
        $Article_Name = $_POST["Article_Name"];
        $Topic = $_POST["Topics"];
        try
        {
            //insert into table Article
            $insertArticle = $dbh->prepare ("INSERT INTO `ZineDB`.`Article` (`Article_ID`, `Author`, `Title`, `Topic`) VALUES (:author , :title , :topic)");
            $insertArticle->execute (array(':author' => $Author_Name , ':title' => $Article_Name , ':topic' => $Topic));
            print "\"$Article_Name\" has been submitted successfully." . "\n";

            //fetch the Article_ID from table Article
            $ArticleIDQ = $dbh->query ("SELECT `Article_ID` FROM `ZineDB`.`Article` WHERE `ZineDB`.`Article`.`Title` = :name");
            $ArticleIDQ->execute (array(':name' => $Article_Name));
            //Value of Article_ID
            $Article_ID = $ArticleIDQ->fetchColumn();

            //insert into table MagazineArticle
            $insertMagazineArticle = $dbh->prepare ("INSERT INTO `ZineDB`.`MagazineArticle` (`Magazine_ID` , `Article_ID`) VALUES (:magazineID , :articleID)");
            $insertMagazineArticle->execute(array(':magazineID' => $Magazine_ID , ':articleID' => $Article_ID));
        }catch (PDOException $pdoe) {
          echo $pdoe->getMessage();
        }
    }
?>