View difference between Paste ID: 5YKZq1Lp and 2qQ5HDZR

 <?php
 /**
  * The order number is now needed in the URL E.g http://example.com/file.php?orderid=2
  */
 
 // Database Sanitization function see more info at http://pastebin.com/D7mA05px
-$result = mysql_query('SELECT `order`.*, `order_product`.`name`, `order_product`.`model`, `order_product`.`price`, `order_product`.`quantity`,`order_product`.`total`, `order_option`.`name` as  option_name, `order_option`.`value` as option_value
+function doQuery($query) {
-FROM `order_product`, `order`, `order_option`
+        $numParams = func_num_args();
-WHERE `order`.`order_id` = "2"')
+        $params = func_get_args();
 
         if($numParams > 1) {
                 for($i=1;$i<$numParams;$i++) {
                         $params[$i] = mysql_real_escape_string($params[$i]);
                 }
                 $query = call_user_func_array('sprintf', $params);
         }
         $result = @mysql_query($query);
         if(!$result) {
                 throw new Exception('DB Class - doQuery: MySQL Error - '.mysql_error());
         } else {
                 return $result;
         }
 }
 
 // Make a MySQL Connection
 mysql_connect("localhost", "", "") or die(mysql_error());
 mysql_select_db("opencart") or die(mysql_error());
 
 // Checks if the order number exists and if it's actually a number and converts it to a number just incase
 if(isset($_GET['orderid']) && is_numeric(intval($_GET['orderid']))) {
 	$OrderID = intval($_GET['orderid']);
 } else {
 	die('That is not a Valid Order ID Please try again');
 }
 
 // Retrieve all the data from the "example" table
 $result = doQuery("SELECT `order`.*, `order_product`.`name`, `order_product`.`model`, `order_product`.`price`, `order_product`.`quantity`,`order_product`.`total`, `order_option`.`name` as  option_name, `order_option`.`value` as option_value FROM `order_product`, `order`, `order_option` WHERE `order`.`order_id` = '%s'", $OrderID) or die(mysql_error());
 
 // store the record of the "example" table into $row
 $row = mysql_fetch_array( $result );
 // Print out the contents of the entry
 
 ?>
 
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml">
 <style type="text/css">
 .topbar {
 	text-align: center;
 }
 .topbar {
 	text-align: center;
 }
 </style>
 <style type="text/css">
     .ui-state-hover { background-color: #ffC }
     .inlineEdit-placeholder { font-style: italic; color: #555; }
 .style1 {
 	color: #FFFFFF;
 	font-weight: bold;
 	font-family: Arial, Helvetica, sans-serif;
 }
 </style>
 <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.5.1/jquery.min.js"></script>
 <script type="text/javascript" src="jquery.inlineedit.js"></script>
 <script type="text/javascript">
 
 $(function() {
   $('.editable').inlineEdit();
 });
 
 </script>
 <head>
 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
 <title>Untitled Document</title>
 
 </head>
 
 <script>
 function coderHakan()
 {
 var sayfa = window.open();
 sayfa.document.open("text/html");
 sayfa.document.write(document.getElementById('printArea').innerHTML);
 sayfa.document.close();
 sayfa.print();
 }
 </script>
 
 <script type="text/javascript">
 function displayResult()
 {
 var table=document.getElementById("products");
 var row=table.insertRow(1);
 var cell1=row.insertCell(0);
 cell1.align = "left" ;
 
 var cell2=row.insertCell(1);
 cell2.align = "left" ;
 
 var cell3=row.insertCell(2);
 cell3.align = "right" ;
 
 var cell4=row.insertCell(3);
 cell4.align = "right" ;
 
 var cell5=row.insertCell(4);
 cell5.align = "right" ;
 
 cell1.innerHTML='<span class="editable">Insert Product Description</span>';
 cell2.innerHTML='<span class="editable">XXXXXX</span>';
 cell3.innerHTML='<span class="editable">1</span>';
 cell4.innerHTML='<span class="editable">£00.00</span>';
 cell5.innerHTML='<span class="editable">£00.00</span>';
 }
 </script>
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 <body>
  <hr size="10px" noshade="noshade" class="topbar" background-color="000000" />
 <table width="100%" border="0" cellpadding="10" height="50" bgcolor="#000000">
  <tr>
      <td width="50%" align="left" valign="middle" class="style1">Insert Order ID: </td>
      <td width="50%" align="right" valign="middle"><input type="button" style="height: 25px; width: 150px" class="topbar" onclick="coderHakan()" value="Print" />
        <input type="button" style="height: 25px; width: 150px" class="topbar" onclick="displayResult()" value="Add Product Row" /></td>
  </tr>
 </table>
 <hr size="10px" noshade="noshade" class="topbar" background-color="000000" />
 
 
 
 
 
 
 <div id="printArea">
 <link rel="stylesheet" type="text/css" href="invoice.css" />
 <div style="page-break-after: always;">
   <h1>
     Invoice</h1>
   <div class="div1">
     <table width="100%">
       <tr>
         <td>
 
         <span class="editable">Room31 Wholesale</span>
         <br />
         <span class="editable">Unit D2,</span>
         <br />
 		<span class="editable">Taylor Business Park</span>
         <br />
 		<span class="editable">Risley</span>
         <br />
 		<span class="editable">Warrington</span>
         <br />
 		<span class="editable">Cheshire</span>
 		<br />
 		<span class="editable">WA3 6BL</span>
         <br />
 
         <!-- EU-VAT - TAG -->
         <span class="editable">VAT Number: GB106004279</span>
         <br />
         <!-- END EU-VAT - TAG -->
         <span class="editable">Telephone 01925766340</span>
         <br />
         <span class="editable">[email protected]</span>
         <br />
         <span class="editable">http://www.room31wholesale.co.uk</span>
         </td>
 
         <td align="right" valign="top"><table>
             <tr>
               <td><b>Order Date:</b></td>
               <td><span class="editable">21/12/2011</span></td>
             </tr>
                         <tr>
               <td><b>Invoice No.:</b></td>
               <td><span class="editable">RWH20607</span></td>
             </tr>
                         <tr>
               <td><b>Order ID:</b></td>
               <td><span class="editable"><?php echo $row['order_id']; ?></span></td>
             </tr>
           </table></td>
       </tr>
     </table>
   </div>
 
   <table class="address">
   <tr class="heading">
   <td width="50%"><b>To</b></td>
   <td width="50%"><b>Ship To (if different address)</b></td>
   </tr>
   <tr>
   <td>
    <span class="editable"><?php echo $row['payment_firstname']; ?> <?php echo $row['payment_lastname']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_company']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_address_1']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_address_2']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_city']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_postcode']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_zone']; ?></span>
       <br />
       <span class="editable"><?php echo $row['payment_country']; ?></span>
         <!-- EU-VAT - TAG -->
   <br/>
         <!-- END EU-VAT - TAG -->
   <span class="editable"><?php echo $row['email']; ?></span>
   <br/>
   <span class="editable"><?php echo $row['telephone']; ?></span></td>
       <td valign="top">
       <span class="editable"><?php echo $row['shipping_firstname']; ?> <?php echo $row['shipping_lastname']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_company']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_address_1']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_address_2']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_city']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_postcode']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_zone']; ?></span>
       <br />
       <span class="editable"><?php echo $row['shipping_country']; ?></span>
     </tr>
   </table>
   <table class="product" id="products">
     <tr class="heading">
       <td><b>Product</b></td>
       <td><b>Model</b></td>
       <td align="right"><b>Quantity</b></td>
       <td align="right"><b>Unit Price</b></td>
       <td align="right"><b>Total</b></td>
     </tr>
         <tr>
       <td>
       <span class="editable"><span class="editable"><?php echo $row['name']; ?></span></span>
       <br />
         <span class="editable"><small><?php echo $row['option_name']; ?> - <?php echo $row['option_value']; ?></small></span>
         </td>
       <td><span class="editable"><?php echo $row['model']; ?></span></td>
       <td align="right"><span class="editable"><?php echo $row['quantity']; ?></span></td>
       <td align="right"><span class="editable"><?php echo $row['price']; ?></span></td>
       <td align="right"><span class="editable"><?php echo $row['total']; ?></span></td>
     </tr>
 
 
   <?php $result2 = mysql_query('
   SELECT  `order_total` . *, `order_total`.`title` as order_title
 FROM  `order_total`
 WHERE  `order_total`.`order_id` =  "1"
 ')
 or die(mysql_error());
 
 // store the record of the "example" table into $row
 $row = mysql_fetch_array( $result2 );
 // Print out the contents of the entry
 
 ?>
 
 <?php
 for($i = $row; $i < 4; $i++) {
   echo $row['order_title'];
 }
 
 ?>
 
             <tr>
       <td align="right" colspan="4"><b><?php echo $row['order_title'];?></span></b></td>
       <td align="right"><span class="editable"><?php echo $row['value']; ?></span></td>
     </tr>
         <tr>
       <td align="right" colspan="4"><b><?php echo $row['order_title']; ?></b></td>
       <td align="right"><span class="editable"><?php echo $row['value']; ?></span></td>
     </tr>
         <tr>
       <td align="right" colspan="4"><b><?php echo $row['order_title']; ?></b></td>
       <td align="right"><span class="editable"><?php echo $row['value']; ?></span></td>
     </tr>
         <tr>
       <td align="right" colspan="4"><b><?php echo $row['order_title']; ?></b></td>
       <td align="right"><span class="editable"><?php echo $row['value']; ?></span></td>
     </tr>
     </table>
   <table class="product">
     <tr class="heading">
       <td><b>Comment</b></td>
     </tr>
     <tr>
       <td></td>
     </tr>
   </table>
 </div>
 
 </div>
 
 <p>&nbsp;</p>
 <p>&nbsp;</p>
 </body>
 </html>