Untitled

<html>
<head>
<script type="text/javascript">
function showData(){
	var data = window.dialogArguments;
	html = "<table border='1' ><tr>";
	for(i=0;i <data.length; i++){
	 html += "<td>" + data[i] + "<td>";
	}
	html+= "</tr></table>";
	document.write(html);
	}
function InsertData(){
	var data = window.dialogArguments;
	//alert(data[0]);
	document.studentData.fname.value= data[0];
	document.studentData.sname.value= data[1];
	document.studentData.gender.value= data[2];
	document.studentData.dob.value= data[3];
	document.studentData.flag.value= true;

	}
function closeWindow(){
	window.close();
}
</script>
</head>
<body>
<h1> Confirm Student Creation Data:<h1>
<div>
<script type="text/javascript">
showData();
</script>
</div>
<p>Are you sure this information is correct?<p>
<form id="studentData" name="studentData" method="post" action="confirmCreation.php">
<input type= "hidden" id = "flag" name="flag"/>
<input type="hidden"id="fname" name="fn">
<input type="hidden"id="sname" name="sn">
<input type="hidden"id="gender" name="gen">
<input type="hidden"id="dob" name="dob">
<script type="text/javascript">
InsertData();
</script>
<input type="submit" value="Create this Student"/>
</form>
</body>
<?php
$dbhost = "127.0.0.1";
$dbuser = "root";
$dbpass = "sohre3n";
$conn = mysql_connect($dbhost, $dbuser, $dbpass) or die  ('Error connecting to database');
$dbname = "test";
if(isset($_POST['flag'])){
echo "building query...";
mysql_select_db($dbname,$conn);
$query = "INSERT INTO student ";
$query .= "(ID, Name, Surname, Birthdate, Gender)";
$query.= "VALUES (".createID($conn).", '".$_POST['fn']."', '".$_POST['sn']."', '".$_POST['dob']."', '".$_POST['gen']."');";
$result = mysql_query($dbquery);
echo " success?";
echo $result;
}

function createID($conn){
	$tempquery = "SELECT ID FROM student;";
	$result = mysql_query($tempquery,$conn);
	$num = mysql_num_rows($result);
	$num = $num + 1000;
	return $num;
}
?>
</html>