Untitled

<html>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<body>
<center><p>Hotelli-tietokantasovellus</p>
<?php
session_start();
$username ="root";
$password ="salasana";
$user =$_POST["user"];
$passwd =$_POST["passwd"];
$table ="TYONTEKIJA";
$con = new PDO('mysql:host=localhost;dbname=koulu', $username , $password);
if (!$con)
{
    die("ei yhteyttä");
}
    $host_address = $_SERVER["REMOTE_ADDR"];
    $file = fopen("/var/www/osoitteet.txt", "a");
    fputs($file, $host_address . "\n");
    $qry = $con->prepare("SELECT SALASANA FROM {$table} WHERE TYONTEKIJAID = ?");
    $qry->bindValue(1,$user);
    $qry->execute();
    $row = $qry->fetchObject();
    echo $qry->queryString;
    exit;
    echo $row->SALASANA;
if(md5($passwd) == $row->SALASANA)
{
    $_SESSION["identified"] = 1;
}
else{echo  "No Entry";}

if(isset($_SESSION['identified']))
{
    $qry = $con->prepare('select TYOETUNIMI, TYOSUKUNIMI from ? where tyontekijaid=?');
    $qry->bindParam(1,$table);
    $qry->bindParam(2,$user);
    $qry->execute();
    var_dump($_SESSION);
while($row = $qry->fetchObject())
{
    $_SESSION["TYOETUNIMI"] = $row->TYOETUNIMI;
    $_SESSION["TYOSUKUNIMI"] = $row->TYOSUKUNIMI;
}
}

if(isset($_SESSION['identified']))
{
    echo "</br>Tervetuloa " . $_SESSION["TYOETUNIMI"] . " " . $_SESSION["TYOSUKUNIMI"] . "</br></center>";
    echo "<form action=\"uusitapahtuma.php\" method=\"POST\"><button type=\”submit\" name=\"submit\">Uusi hotellitapahtuma</button></form></br>";
    echo "<center>";
    $qry = $con->prepare('select * from HOTELLITAPAHTUMA GROUP BY TAPAHTUMAID');
    $qry->execute();
    echo "</br></br> <table border= \"1\">";
    echo "<th>TapahtumaID</th>";
    echo "<th>TyontekijäID</th>";
    echo "<th>Huonenumero</th>";
    echo "<th>AsiakasID</th>";
    echo "<th>Hinta</th>";
    echo "<th>Alkupäivä</th>";
    echo "<th>Loppupäivä</th>";
while($row = $qry->fetchObject())
{
    $date = $row->ALKUPAIVA;
    $datetime = new DateTime($date);
    $row->ALKUPAIVA = date_format($datetime, 'd.m.Y');

    $date = $row->LOPPUPAIVA;
    $datetime = new DateTime($date);
    $row->LOPPUPAIVA = date_format($datetime, 'd.m.Y');

    echo "<tr>";
    echo "<td>" . $row->TAPAHTUMAID . "</td>";
    echo "<td>" . $row->TYONTEKIJAID . "</td>";
    echo "<td>" . $row->HUONENUMERO . "</td>";
    echo "<td>" . $row->ASIAKASID . "</td>";
    echo "<td>" . $row->HINTA . "</td>";
    echo "<td>" . $row->ALKUPAIVA . "</td>";
    echo "<td>" . $row->LOPPUPAIVA . "</td>";
    echo "</tr>";
}
    echo "</table>";
    echo "</center>";
}
?>
</body>
</html>