Untitled

<?php

/*
 * Check this out!
 * localhost/dont_concatenate_strings.php?id=1
 */

function init_db() {
	$dbhost = "localhost";
	$dbuser = "root";
	$dbpasswd = "1234";

	$conn = new mysqli($dbhost, $dbuser, $dbpasswd);
	if ($conn->connect_error) {
		die("Connection failed: " . $conn->connect_error);
	}

	$result = $conn->query("use dupa;");

	return $conn;
}

function select_user($conn, $id) {
	$stmt = $conn->prepare("SELECT id, name FROM users WHERE id = ?");
	if (!$stmt)
		die("DB error $conn->errno $conn->error");
	$stmt->bind_param('i', $id);
	$ret = $stmt->execute();
	return $stmt->get_result();
}

function show_selected_user($conn) {
	if (!isset($_GET["id"]))
		return;

	$result = select_user($conn, $_GET["id"]);

	if ($result->num_rows > 0) {
		while ($row = $result->fetch_assoc()) {
			echo "id: " . $row["id"] . ", name: " . $row["name"] . "<br>\n";
		}
	} else {
		echo "Users table is empty! :O<br>\n";
	}
}

$conn = init_db();
?>

<html>
<head><title>This is my test page</title></head>
<body>
	<?php show_selected_user($conn); ?>
</body>
</html>

<?php $conn->close(); ?>