API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jun 6th, 2018
237
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.60 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. session_start();
  4.  
  5. if ((!isset($_POST['login'])) || (!isset($_POST['haslo'])))
  6. {
  7. header('Location: ../index.php');
  8. exit();
  9. }
  10.  
  11. require("polacz.php");
  12.  
  13. $login = $_POST['login'];
  14. $haslo = $_POST['haslo'];
  15.  
  16. $login = htmlentities($login, ENT_QUOTES, "UTF-8");
  17.  
  18. if ($rezultat = @$connection->query(
  19. sprintf("SELECT * FROM users WHERE login='%s'",
  20. mysqli_real_escape_string($connection,$login))))
  21. {
  22. $ilu_userow = $rezultat->num_rows;
  23. if($ilu_userow>0)
  24. {
  25. $row = $rezultat->fetch_assoc();
  26.  
  27. if (password_verify($haslo, $row['haslo']))
  28. {
  29. $_SESSION['zalogowany'] = true;
  30. $_SESSION['login'] = $row['login'];
  31. $_SESSION['uprawnienia'] = $row['uprawnienia'];
  32. unset($_SESSION['blad']);
  33. $rezultat->free_result();
  34. header('Location: ../php2/index2.php');
  35. }
  36. else
  37. {
  38. $_SESSION['blad'] = 'Zły login lub hasło!';
  39. echo $_POST['haslo'];
  40. header('Location: ../index.php');
  41. }
  42.  
  43. } else {
  44.  
  45. $_SESSION['blad'] = 'Zły login lub hasło!';
  46. header('Location: ../index.php');
  47. }
  48.  
  49. }
  50.  
  51. $connection->close();
  52.  
  53. ?>
  54.  
  55.  
  56. SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
  57. SET AUTOCOMMIT = 0;
  58. START TRANSACTION;
  59. SET time_zone = "+00:00";
  60.  
  61.  
  62. CREATE DATABASE IF NOT EXISTS `Wynajem` DEFAULT CHARACTER SET latin1 COLLATE latin1_swedish_ci;
  63. USE `Wynajem`;
  64.  
  65.  
  66.  
  67. CREATE TABLE `klient` (
  68. `Id_Klienta` int(11) NOT NULL,
  69. `NazwaKlienta` text NOT NULL
  70. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  71.  
  72.  
  73.  
  74. INSERT INTO `klient` (`Id_Klienta`, `NazwaKlienta`) VALUES
  75. (1, 'admin'),
  76. (2, 'user');
  77.  
  78.  
  79.  
  80. CREATE TABLE `samochod` (
  81. `Id` int(11) NOT NULL,
  82. `Model` text COLLATE utf8_polish_ci NOT NULL,
  83. `Marka` text COLLATE utf8_polish_ci NOT NULL,
  84. `Cena` float NOT NULL,
  85. `data` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
  86. ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_polish_ci;
  87.  
  88.  
  89. INSERT INTO `samochod` (`Id`, `Model`, `Marka`, `Cena`, `data`) VALUES
  90. (1, 'a1', 'audi', 1250.99, '2018-06-07 08:29:57'),
  91. (2, 'a2', 'audi', 2250.99, '2018-06-07 08:30:27'),
  92. (3, 'a3', 'audi', 3250.99, '2018-06-07 08:31:37'),
  93. (4, 'a4', 'audi', 4250.99, '2018-06-07 08:31:47'),
  94. (5, 'a5', 'audi', 5250.99, '2018-06-07 08:31:59'),
  95. (6, 'a6', 'audi', 6250.99, '2018-06-07 08:32:04'),
  96. (7, 'a7', 'audi', 7250.99, '2018-06-07 08:32:16'),
  97. (8, 'a8', 'audi', 8250.99, '2018-06-07 08:32:29'),
  98. (9,'a9', 'audi', 9250.99, '2018-06-07 08:32:43'),
  99. (10, 'a10', 'audi', 1250.99, '2018-06-07 08:32:54');
  100.  
  101.  
  102.  
  103. CREATE TABLE `users` (
  104. `user_id` int(11) NOT NULL,
  105. `login` text NOT NULL,
  106. `email` text NOT NULL,
  107. `haslo` text NOT NULL,
  108. `uprawnienia` text NOT NULL
  109. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  110.  
  111.  
  112.  
  113. INSERT INTO `users` (`user_id`, `login`, `email`, `haslo`, `uprawnienia`) VALUES
  114. (0, 'admin', 'admin@interia.pl', '$2y$10$zzVLOlNOTyfoZBoGoHKdiOVGYr8qly3ga8CgE9YXPwWFmfmd0.nQ6', 'kierownik'),
  115. (4, 'pracownik', 'pracownik@interia.pl', '$2y$10$yF0ITtf9lLKbu0F.JY6PTOrBORfYNKCJwG0TNxvbLFNwW7q5K8THa', 'pracownik'),
  116. (5, 'Kierownik', 'kierownik@interia.pl', '$2y$10$TwdfSlN1munSqzggmJpcp.zy1h/7mZQIWrESBIKOKdsTtOqvivrxm', 'kierownik');
  117.  
  118.  
  119. ALTER TABLE `samochod`
  120. ADD PRIMARY KEY (`Id`);
  121.  
  122.  
  123. ALTER TABLE `users`
  124. ADD PRIMARY KEY (`user_id`);
  125.  
  126. ALTER TABLE `klient`
  127. ADD PRIMARY KEY (`Id_Klienta`);
  128.  
  129.  
  130.  
  131. ALTER TABLE `klient`
  132. MODIFY `Id_Klienta` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=3;
  133.  
  134.  
  135. ALTER TABLE `samochod`
  136. MODIFY `Id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=11;
  137.  
  138.  
  139. ALTER TABLE `users`
  140. MODIFY `user_id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=6;
  141. COMMIT;
  142.  
  143. <?php
  144.  
  145. session_start();
  146.  
  147. if ((isset($_SESSION['zalogowany'])) && ($_SESSION['zalogowany']==true))
  148. {
  149. header('Location: index2.php');
  150. exit();
  151. }
  152.  
  153. if (isset($_POST['email']))
  154. {
  155. $walidacja=true;
  156.  
  157. $login = $_POST['login'];
  158.  
  159. if ((strlen($login)<3) || (strlen($login)>20))
  160. {
  161. $walidacja=false;
  162. $_SESSION['e_login']="login od 3 do 20 znaków!";
  163. }
  164.  
  165.  
  166.  
  167. $email = $_POST['email'];
  168.  
  169.  
  170. $haslo1 = $_POST['haslo1'];
  171. $haslo2 = $_POST['haslo2'];
  172.  
  173. if ((strlen($haslo1)<8) || (strlen($haslo1)>20))
  174. {
  175. $walidacja=false;
  176. $_SESSION['e_haslo']="Hasło od 8 do 20 znaków!";
  177. }
  178.  
  179. if ($haslo1!=$haslo2)
  180. {
  181. $walidacja=false;
  182. $_SESSION['e_haslo']="Podane hasła nie identyczne!";
  183. }
  184.  
  185. $haslo_hash = password_hash($haslo1, PASSWORD_DEFAULT);
  186.  
  187. if (!isset($_POST['regulamin']))
  188. {
  189. $walidacja=false;
  190. $_SESSION['e_regulamin']="Potwierdź regulamin!";
  191. }
  192.  
  193.  
  194.  
  195.  
  196. require_once "php/polacz.php";
  197. mysqli_report(MYSQLI_REPORT_STRICT);
  198.  
  199. try
  200. {
  201. if ($connection->connect_errno!=0)
  202. {
  203. throw new Exception(mysqli_connect_errno());
  204. }
  205. else
  206. {
  207. $result = $connection->query("SELECT user_id FROM users WHERE email='$email'");
  208.  
  209. if (!$result) throw new Exception($connection->error);
  210.  
  211. $mails_number = $result->num_rows;
  212. if($mails_number>0)
  213. {
  214. $walidacja=false;
  215. $_SESSION['e_email']="Istnieje już konto przypisane do tego adresu e-mail!";
  216. }
  217.  
  218. $result = $connection->query("SELECT user_id FROM users WHERE login='$login'");
  219.  
  220. if (!$result) throw new Exception($connection->error);
  221.  
  222. $ile_takich_loginow = $result->num_rows;
  223. if($ile_takich_loginow>0)
  224. {
  225. $walidacja=false;
  226. $_SESSION['e_login']="Istnieje już gracz o takim loginu! Wybierz inny.";
  227. }
  228.  
  229. if ($walidacja==true)
  230. {
  231.  
  232. if ($connection->query("INSERT INTO users (login, haslo, email ) VALUES ('$login', '$haslo_hash', '$email')"))
  233. {
  234. $_SESSION['udanarejestracja']=true;
  235. header('Location: index.php');
  236. }
  237. else
  238. {
  239. throw new Exception($connection->error);
  240. }
  241.  
  242. }
  243.  
  244. $connection->close();
  245. }
  246.  
  247. }
  248. catch(Exception $e)
  249. {
  250. echo '<span style="color:red;">Błąd!</span>';
  251. }
  252.  
  253. }
  254.  
  255.  
  256. ?>
  257.  
  258. <!DOCTYPE html>
  259. <html lang="en">
  260.  
  261. <head>
  262. <meta charset="utf-8">
  263. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  264. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  265. <title>Wypożyczyalnia</title>
  266. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  267. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  268. <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.0.13/css/all.css" integrity="sha384-DNOHZ68U8hZfKXOrtjWvjxusGo9WQnrNx2sqG0tfsghAvtVlRW3tvkXWZh58N9jp" crossorigin="anonymous">
  269. </head>
  270.  
  271. <body class="bg-dark">
  272. <div class="container">
  273. <div class="card card-register mx-auto mt-7">
  274. <div class="card-header">Zarejestruj nowe konto</div>
  275. <div class="card-body">
  276.  
  277.  
  278. <form method="post">
  279. <div class="form-group">
  280. <label>Login</label>
  281. <input class="form-control" type="text" placeholder="Podaj login" name="login" / >
  282.  
  283.  
  284. </div>
  285.  
  286. <div class="form-group">
  287. <label>Email</label>
  288. <input class="form-control" type="email" placeholder="Podaj email" name="email">
  289. </div>
  290.  
  291.  
  292. <div class="form-group">
  293. <div class="form-row">
  294.  
  295. <div class="col-md-4">
  296. <label>Hasło</label>
  297. <input class="form-control" type="password" placeholder="Hasło" name="haslo1" />
  298. </div>
  299.  
  300. <div class="col-md-6">
  301. <label>Powtórz Hasło</label>
  302. <input class="form-control" type="password" placeholder="Powtórz Hasło" name="haslo2" />
  303.  
  304. </div>
  305. </div>
  306. </div>
  307.  
  308. <div class="form-group">
  309. <label>
  310. <input type="checkbox" name="regulamin" />
  311. Akceptuję regulamin &nbsp;&nbsp;
  312. </label>
  313.  
  314. </div>
  315.  
  316. <div class="sub">
  317. <input class="btn btn-primary btn-block" type="submit" value="Zarejestruj się" />
  318. </div>
  319. </form>
  320.  
  321.  
  322. <div class="text-center">
  323. <a class="d-block small mt-3" href="index.php">Jeśli posiadasz konto to przejdź do panelu logowania</a> <br />
  324. </div>
  325. </div>
  326. </div>
  327. </div>
  328. </body>
  329.  
  330. </html>
  331.  
  332. <?php
  333.  
  334. //Potrzebne dane do połączenia z bazą danych
  335. $servername = "localhost";
  336. $username = "root";
  337. $password = "";
  338. $dbname = "Wynajem";
  339.  
  340. $connection = new mysqli($servername, $username, $password, $dbname);
  341.  
  342. if ($connection->connect_error) {
  343. die("Connection failed: " . $connection->connect_error);
  344. }
  345. ?>
  346.  
  347. <?php
  348.  
  349. //Potrzebne dane do połączenia z bazą danych
  350. $servername = "localhost";
  351. $username = "root";
  352. $password = "";
  353. $dbname = "Wynajem";
  354.  
  355. $connection = new mysqli($servername, $username, $password, $dbname);
  356.  
  357. if ($connection->connect_error) {
  358. die("Connection failed: " . $connection->connect_error);
  359. }
  360. ?>
  361.  
  362. <?php
  363. //----------------------------------
  364. session_start();
  365.  
  366.  
  367.  
  368. require("polacz.php");
  369.  
  370. $queryShow = 'SELECT * FROM samochod';
  371. ?>
  372. <!DOCTYPE html>
  373. <html lang="en">
  374. <head>
  375. <meta charset="utf-8">
  376. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  377. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  378. <title>Wypożyczyalnia</title>
  379. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  380. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  381. </head>
  382. <body class="fixed-nav sticky-footer bg-dark" id="page-top">
  383.  
  384. <a href="logout.php">
  385. <i class="fas fa-sign-out-alt"></i> Logout</a>
  386.  
  387. <?php
  388. if(isset($_SESSION['komunikat'])){
  389. echo '<div class="alert alert-danger error" role="alert"><strong>Komunikat!</strong> '. $_SESSION['komunikat'] . '</div>';
  390. unset($_SESSION['komunikat']);
  391. }
  392. ?>
  393.  
  394. <table width="100%" cellspacing="0" , bgcolor="white">
  395. <thead>
  396. <tr>
  397. <th>Id Samochodu</th>
  398. <th>Model</th>
  399. <th>Marka</th>
  400. <th>Cena</th>
  401. <th>Data dodania</th>
  402. <th>Usuń</th>
  403. </tr>
  404. </thead>
  405.  
  406. <tbody>
  407.  
  408. <?php
  409. $result = $connection->query($queryShow);
  410. while ($row=$result->fetch_assoc()) {
  411. $id = $row['Id'];
  412. $marka = $row['Marka'];
  413. $model = $row['Model'];
  414. $cena = $row['Cena'];
  415. $time = strtotime($row["data"]);
  416. $rok = date('Y', $time);
  417. $miesiac = date('m', $time);
  418. $dzien = date('d', $time);
  419. echo "<tr><td>$id</td> <td>$marka</td> <td>$model</td> <td>$cena</td> <td>$rok/$miesiac/$dzien</td>";
  420. if($_SESSION['uprawnienia'] == "kierownik"){
  421. echo "<td><form action=\"php/funkcje.php\" method=\"post\"><button type=\"submit\" name=\"delete\"class=\"btn btn-danger btn-sm\" value=\"" . htmlspecialchars($id) . "\">DEL</button></form></td></tr>";}
  422. else echo "</tr>";
  423. }
  424. ?>
  425. </tbody>
  426. </table>
  427.  
  428.  
  429. <?php if($_SESSION['uprawnienia'] == "pracownik"){ ?>
  430. <div class="container-fluid">
  431. <h3>Dodaj</h3>
  432. <form class="klasa" action="php/funkcje.php" method="POST">
  433. <div class="form-row">
  434. <div class="col">
  435. <input type="text" class="form-control" placeholder="Id" name="IdSamochodu" required>
  436. </div>
  437. <div class="col">
  438. <input type="text" class="form-control" placeholder="Model" name="ModelSamochodu" required>
  439. </div>
  440. <div class="col">
  441. <input type="text" class="form-control" placeholder="Marka" name="MarkaSamochodu" required>
  442. </div>
  443. <div class="col">
  444. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="cenaWynajmu" required>
  445. </div>
  446. <button type="submit" class="btn btn-primary" name="dodaj">OK</button>
  447. </div>
  448. </form>
  449. </div>
  450. <br /><br />
  451. <?php } ?>
  452.  
  453. <?php if($_SESSION['uprawnienia'] == "kierownik"){ ?>
  454. <div class="container-fluid">
  455. <h3>Dodaj</h3>
  456. <form class="klasa" action="php/funkcje.php" method="POST">
  457. <div class="form-row">
  458. <div class="col">
  459. <input type="text" class="form-control" placeholder="Id" name="IdSamochodu" required>
  460. </div>
  461. <div class="col">
  462. <input type="text" class="form-control" placeholder="Model" name="ModelSamochodu" required>
  463. </div>
  464. <div class="col">
  465. <input type="text" class="form-control" placeholder="Marka" name="MarkaSamochodu" required>
  466. </div>
  467. <div class="col">
  468. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="cenaWynajmu" required>
  469. </div>
  470. <button type="submit" class="btn btn-primary" name="dodaj">OK</button>
  471. </div>
  472. </form>
  473. </div>
  474. <br /><br />
  475. <?php } ?>
  476. <?php if($_SESSION['uprawnienia'] == "kierownik"){ ?>
  477. <!-- Formularz aktualizujący rekord w bazie -->
  478. <div class="container-fluid">
  479. <h3>Edytuj</h3>
  480. <form class="klasa" action="php/funkcje.php" method="POST">
  481. <div class="form-row">
  482. <div class="col">
  483. <input type="text" class="form-control" placeholder="Id" name="IdS" required>
  484. </div>
  485. <div class="col">
  486. <input type="text" class="form-control" placeholder="Model" name="Model" required>
  487. </div>
  488. <div class="col">
  489. <input type="text" class="form-control" placeholder="Marka" name="Marka" required>
  490. </div>
  491. <div class="col">
  492. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="cena">
  493. </div>
  494. <button type="submit" class="btn btn-primary" name="update">OK</button>
  495. </div>
  496. </form>
  497. </div>
  498. <br /><br />
  499. </div>
  500. <?php } ?>
  501.  
  502.  
  503.  
  504. </div>
  505. </body>
  506. </html>
  507.  
  508. <?php
  509. //----------------------------------
  510. session_start();
  511. if ((isset($_SESSION['zalogowany'])) && ($_SESSION['zalogowany']==true))
  512. {
  513. header('Location: index2.php');
  514. exit();
  515. }
  516. require("polacz.php");
  517. $queryShow = 'SELECT * FROM samochod';
  518. ?>
  519. <!DOCTYPE html>
  520. <html lang="en">
  521. <head>
  522. <meta charset="utf-8">
  523. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  524. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  525. <title>Wypożyczyalnia</title>
  526. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  527. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  528.  
  529. </head>
  530. <body class="fixed-nav sticky-footer bg-dark" id="page-top">
  531.  
  532.  
  533. <form action="zaloguj.php" method="post">
  534. <div class="form-group">
  535. <label for="exampleInputLogin" color="white">Login pracownik lub kierownik</label>
  536. <input class="form-control" id="exampleInputLogin" type="text" aria-describedby="loginHelp" name="login" placeholder="Podaj login" required>
  537. </div>
  538. <div class="form-group">
  539. <label for="exampleInputPassword1">Hasło Pracownik123 lub Kierownik123 odpowiednio</label>
  540. <input class="form-control" id="exampleInputPassword1" type="password" name="haslo" placeholder="Hasło" required>
  541. </div>
  542. <button class="btn btn-primary btn-block" type="submit">Login</button>
  543. </form>
  544.  
  545. <div class="text-center">
  546. <a class="d-block small mt-3" href="register.php">Zarejestruj się</a>
  547. </div>
  548.  
  549.  
  550. <table width="100%" cellspacing="0" , bgcolor="white">
  551. <thead>
  552. <tr>
  553. <th>Id Samochodu</th>
  554. <th>Model</th>
  555. <th>Marka</th>
  556. <th>Cena</th>
  557. <th>Data dodania</th>
  558.  
  559. </tr>
  560. </thead>
  561.  
  562. <tbody>
  563.  
  564. <?php
  565. $result = $connection->query($queryShow);
  566. while ($row=$result->fetch_assoc()) {
  567. $id = $row['Id'];
  568. $marka = $row['Marka'];
  569. $model = $row['Model'];
  570. $cena = $row['Cena'];
  571. $time = strtotime($row["data"]);
  572. $rok = date('Y', $time);
  573. $miesiac = date('m', $time);
  574. $dzien = date('d', $time);
  575. echo "<tr><td>$id</td> <td>$marka</td> <td>$model</td> <td>$cena</td> <td>$rok/$miesiac/$dzien</td>";
  576. }
  577. ?>
  578. </tbody>
  579. </table>
  580.  
  581. </div>
  582. </body>
  583. </html>
  584.  
  585. <?php
  586. //----------------------------------
  587. session_start();
  588. require("polacz.php");
  589. //----------------------------------
  590.  
  591.  
  592.  
  593. /* ### DODAJ DO BAZY DANYCH ### */
  594. function Dodaj($connection) {
  595.  
  596. // Escape user inputs for security
  597. $Id = mysqli_real_escape_string($connection, $_REQUEST['Id']);
  598. $Model = mysqli_real_escape_string($connection, $_REQUEST['Model']);
  599. $Marka = mysqli_real_escape_string($connection, $_REQUEST['Marka']);
  600. $Cena = mysqli_real_escape_string($connection, $_REQUEST['Cena']);
  601.  
  602. $sql = "INSERT INTO samochod (Id, Model, Marka, Cena) VALUES ('$Id', '$Model', '$Marka', '$Cena')";
  603.  
  604. if(mysqli_query($connection, $sql) == True){
  605. $_SESSION['komunikat'] = "Dodano.";
  606. } else {
  607. $_SESSION['komunikat'] = "Nie dodano.";
  608. }
  609.  
  610. mysqli_close($connection);
  611. }
  612.  
  613. function Usun($connection) {
  614.  
  615. // Escape user inputs for security
  616. $Id = mysqli_real_escape_string($connection, $_REQUEST['delete']);
  617.  
  618. $sql = "DELETE FROM samochod WHERE Id=$Id";
  619.  
  620. if(mysqli_query($connection, $sql) == True){
  621. $_SESSION['komunikat'] = "Usunięto wiersz";
  622. } else {
  623. $_SESSION['komunikat'] = "Niepowodzenie usuwania";
  624. }
  625.  
  626. mysqli_close($connection);
  627. }
  628.  
  629. function Edytuj($connection) {
  630.  
  631. $Id = mysqli_real_escape_string($connection, $_REQUEST['Id']);
  632.  
  633. $query = "SELECT * FROM samochod where Id=$Id";
  634. $result = mysqli_query($connection, $query);
  635. while ($row=$result->fetch_assoc()) {
  636. $id = $row['Id'];
  637. $Model = $row['Model'];
  638. $Marka = $row['Marka'];
  639. $Cena = $row['Cena'];
  640. }
  641.  
  642. if(!empty($_REQUEST['Model'])) { $Model = mysqli_real_escape_string($connection, $_REQUEST['Model']); } else { $Model = mysqli_real_escape_string($connection, $Model); }
  643. if(!empty($_REQUEST['Marka'])) { $Marka = mysqli_real_escape_string($connection, $_REQUEST['Marka']); } else { $Marka = mysqli_real_escape_string($connection, $Marka); }
  644. if(!empty($_REQUEST['Cena'])) { $Cena = mysqli_real_escape_string($connection, $_REQUEST['Cena']); } else { $Cena = mysqli_real_escape_string($connection, $Cena); }
  645.  
  646. $sql = "UPDATE samochod SET Model='$Model', Marka='$Marka', Cena='$Cena' WHERE Id=$Id";
  647.  
  648. if(mysqli_query($connection, $sql) == True){
  649. $_SESSION['komunikat'] = "Pomyślna aktualizacja wierszu";
  650. } else {
  651. $_SESSION['komunikat'] = "Nie zaktualizowano wiersza.";
  652. }
  653.  
  654. mysqli_close($connection);
  655. }
  656.  
  657.  
  658.  
  659.  
  660. /* ### W ZALEŻNOŚCI OD KLIKNIĘTEGO BUTTONA WYKONAJ DANĄ FUNKCJE ### */
  661. if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['dodaj'])) {
  662. Dodaj($connection);
  663. }
  664. else if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['delete'])) {
  665. Usun($connection);
  666. }
  667. else if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['update'])) {
  668. Edytuj($connection);
  669. }
  670.  
  671. header('Location: ../index2.php');
  672. ?>
  673.  
  674.  
  675.  
  676. ------ DRUGIE
  677.  
  678. <?php
  679.  
  680. session_start();
  681.  
  682. if ((!isset($_POST['login'])) || (!isset($_POST['haslo'])))
  683. {
  684. header('Location: ../index.php');
  685. exit();
  686. }
  687.  
  688. require("polacz.php");
  689.  
  690. $login = $_POST['login'];
  691. $haslo = $_POST['haslo'];
  692.  
  693. $login = htmlentities($login, ENT_QUOTES, "UTF-8");
  694.  
  695. if ($rezultat = @$connection->query(
  696. sprintf("SELECT * FROM users WHERE login='%s'",
  697. mysqli_real_escape_string($connection,$login))))
  698. {
  699. $ilu_userow = $rezultat->num_rows;
  700. if($ilu_userow>0)
  701. {
  702. $row = $rezultat->fetch_assoc();
  703.  
  704. if (password_verify($haslo, $row['haslo']))
  705. {
  706. $_SESSION['zalogowany'] = true;
  707. $_SESSION['login'] = $row['login'];
  708. $_SESSION['uprawnienia'] = $row['uprawnienia'];
  709. unset($_SESSION['blad']);
  710. $rezultat->free_result();
  711. header('Location: ../php3/index2.php');
  712. }
  713. else
  714. {
  715. $_SESSION['blad'] = 'Zły login lub hasło!';
  716. echo $_POST['haslo'];
  717. header('Location: ../index.php');
  718. }
  719.  
  720. } else {
  721.  
  722. $_SESSION['blad'] = 'Zły login lub hasło!';
  723. header('Location: ../index.php');
  724. }
  725.  
  726. }
  727.  
  728. $connection->close();
  729.  
  730. ?>
  731.  
  732. <?php
  733.  
  734. session_start();
  735.  
  736. if ((isset($_SESSION['zalogowany'])) && ($_SESSION['zalogowany']==true))
  737. {
  738. header('Location: index2.php');
  739. exit();
  740. }
  741.  
  742. if (isset($_POST['email']))
  743. {
  744. $walidacja=true;
  745.  
  746. $login = $_POST['login'];
  747.  
  748. if ((strlen($login)<3) || (strlen($login)>20))
  749. {
  750. $walidacja=false;
  751. $_SESSION['e_login']="login od 3 do 20 znaków!";
  752. }
  753.  
  754.  
  755.  
  756. $email = $_POST['email'];
  757.  
  758.  
  759. $haslo1 = $_POST['haslo1'];
  760. $haslo2 = $_POST['haslo2'];
  761.  
  762. if ((strlen($haslo1)<8) || (strlen($haslo1)>20))
  763. {
  764. $walidacja=false;
  765. $_SESSION['e_haslo']="Hasło od 8 do 20 znaków!";
  766. }
  767.  
  768. if ($haslo1!=$haslo2)
  769. {
  770. $walidacja=false;
  771. $_SESSION['e_haslo']="Podane hasła nie identyczne!";
  772. }
  773.  
  774. $haslo_hash = password_hash($haslo1, PASSWORD_DEFAULT);
  775.  
  776. if (!isset($_POST['regulamin']))
  777. {
  778. $walidacja=false;
  779. $_SESSION['e_regulamin']="Potwierdź regulamin!";
  780. }
  781.  
  782.  
  783.  
  784.  
  785. require_once "php/polacz.php";
  786. mysqli_report(MYSQLI_REPORT_STRICT);
  787.  
  788. try
  789. {
  790. if ($connection->connect_errno!=0)
  791. {
  792. throw new Exception(mysqli_connect_errno());
  793. }
  794. else
  795. {
  796. $result = $connection->query("SELECT user_id FROM users WHERE email='$email'");
  797.  
  798. if (!$result) throw new Exception($connection->error);
  799.  
  800. $mails_number = $result->num_rows;
  801. if($mails_number>0)
  802. {
  803. $walidacja=false;
  804. $_SESSION['e_email']="Istnieje już konto przypisane do tego adresu e-mail!";
  805. }
  806.  
  807. $result = $connection->query("SELECT user_id FROM users WHERE login='$login'");
  808.  
  809. if (!$result) throw new Exception($connection->error);
  810.  
  811. $ile_takich_loginow = $result->num_rows;
  812. if($ile_takich_loginow>0)
  813. {
  814. $walidacja=false;
  815. $_SESSION['e_login']="Istnieje już gracz o takim loginu! Wybierz inny.";
  816. }
  817.  
  818. if ($walidacja==true)
  819. {
  820.  
  821. if ($connection->query("INSERT INTO users (login, haslo, email ) VALUES ('$login', '$haslo_hash', '$email')"))
  822. {
  823. $_SESSION['udanarejestracja']=true;
  824. header('Location: index.php');
  825. }
  826. else
  827. {
  828. throw new Exception($connection->error);
  829. }
  830.  
  831. }
  832.  
  833. $connection->close();
  834. }
  835.  
  836. }
  837. catch(Exception $e)
  838. {
  839. echo '<span style="color:red;">Błąd!</span>';
  840. }
  841.  
  842. }
  843.  
  844.  
  845. ?>
  846.  
  847. <!DOCTYPE html>
  848. <html lang="en">
  849.  
  850. <head>
  851. <meta charset="utf-8">
  852. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  853. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  854. <title>Wypożyczyalnia</title>
  855. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  856. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  857. <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.0.13/css/all.css" integrity="sha384-DNOHZ68U8hZfKXOrtjWvjxusGo9WQnrNx2sqG0tfsghAvtVlRW3tvkXWZh58N9jp" crossorigin="anonymous">
  858. </head>
  859.  
  860. <body class="bg-dark">
  861. <div class="container">
  862. <div class="card card-register mx-auto mt-7">
  863. <div class="card-header">Zarejestruj nowe konto</div>
  864. <div class="card-body">
  865.  
  866.  
  867. <form method="post">
  868. <div class="form-group">
  869. <label>Login</label>
  870. <input class="form-control" type="text" placeholder="Podaj login" name="login" / >
  871.  
  872.  
  873. </div>
  874.  
  875. <div class="form-group">
  876. <label>Email</label>
  877. <input class="form-control" type="email" placeholder="Podaj email" name="email">
  878. </div>
  879.  
  880.  
  881. <div class="form-group">
  882. <div class="form-row">
  883.  
  884. <div class="col-md-4">
  885. <label>Hasło</label>
  886. <input class="form-control" type="password" placeholder="Hasło" name="haslo1" />
  887. </div>
  888.  
  889. <div class="col-md-6">
  890. <label>Powtórz Hasło</label>
  891. <input class="form-control" type="password" placeholder="Powtórz Hasło" name="haslo2" />
  892.  
  893. </div>
  894. </div>
  895. </div>
  896.  
  897. <div class="form-group">
  898. <label>
  899. <input type="checkbox" name="regulamin" />
  900. Akceptuję regulamin &nbsp;&nbsp;
  901. </label>
  902.  
  903. </div>
  904.  
  905. <div class="sub">
  906. <input class="btn btn-primary btn-block" type="submit" value="Zarejestruj się" />
  907. </div>
  908. </form>
  909.  
  910.  
  911. <div class="text-center">
  912. <a class="d-block small mt-3" href="index.php">Jeśli posiadasz konto to przejdź do panelu logowania</a> <br />
  913. </div>
  914. </div>
  915. </div>
  916. </div>
  917. </body>
  918.  
  919. </html>
  920.  
  921.  
  922. <?php
  923.  
  924. //Potrzebne dane do połączenia z bazą danych
  925. $servername = "localhost";
  926. $username = "root";
  927. $password = "";
  928. $dbname = "Magazyn";
  929.  
  930. $connection = new mysqli($servername, $username, $password, $dbname);
  931.  
  932. if ($connection->connect_error) {
  933. die("Connection failed: " . $connection->connect_error);
  934. }
  935. ?>
  936.  
  937.  
  938. <?php
  939.  
  940. session_start();
  941.  
  942. session_unset();
  943.  
  944. header('Location: ../php3/index.php');
  945.  
  946. ?>
  947.  
  948.  
  949.  
  950. SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
  951. SET AUTOCOMMIT = 0;
  952. START TRANSACTION;
  953. SET time_zone = "+00:00";
  954.  
  955.  
  956. CREATE DATABASE IF NOT EXISTS `Magazyn` DEFAULT CHARACTER SET latin1 COLLATE latin1_swedish_ci;
  957. USE `Magazyn`;
  958.  
  959.  
  960.  
  961. CREATE TABLE `Faktury` (
  962. `Id_Faktury` int(11) NOT NULL,
  963. `NazwaFaktury` text NOT NULL
  964. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  965.  
  966.  
  967.  
  968. INSERT INTO `Faktury` (`Id_Faktury`, `NazwaFaktury`) VALUES
  969. (1, 'admin'),
  970. (2, 'user');
  971.  
  972.  
  973.  
  974. CREATE TABLE `Towar` (
  975. `Id` int(11) NOT NULL,
  976. `Nazwa` text COLLATE utf8_polish_ci NOT NULL,
  977. `Marka` text COLLATE utf8_polish_ci NOT NULL,
  978. `Cena` float NOT NULL,
  979. `data` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
  980. ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_polish_ci;
  981.  
  982.  
  983. INSERT INTO `Towar` (`Id`, `Nazwa`, `Marka`, `Cena`, `data`) VALUES
  984. (1, 'drabina', 'marka1', 1250.99, '2018-06-07 08:29:57'),
  985. (2, 'szpachla', 'marka2', 2250.99, '2018-06-07 08:30:27'),
  986. (3, 'koparka', 'marka3', 3250.99, '2018-06-07 08:31:37'),
  987. (4, 'dzwig', 'marka4', 4250.99, '2018-06-07 08:31:47'),
  988. (5, 'tapeta', 'marka1', 5250.99, '2018-06-07 08:31:59'),
  989. (6, 'gwozdzie', 'marka1', 6250.99, '2018-06-07 08:32:04'),
  990. (7, 'mlotek', 'marka1', 7250.99, '2018-06-07 08:32:16'),
  991. (8, 'siekiera', 'marka1', 8250.99, '2018-06-07 08:32:29'),
  992. (9,'lopata', 'marka1', 9250.99, '2018-06-07 08:32:43'),
  993. (10, 'kilof', 'marka1', 1250.99, '2018-06-07 08:32:54');
  994.  
  995.  
  996.  
  997. CREATE TABLE `users` (
  998. `user_id` int(11) NOT NULL,
  999. `login` text NOT NULL,
  1000. `email` text NOT NULL,
  1001. `haslo` text NOT NULL,
  1002. `uprawnienia` text NOT NULL
  1003. ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
  1004.  
  1005.  
  1006.  
  1007. INSERT INTO `users` (`user_id`, `login`, `email`, `haslo`, `uprawnienia`) VALUES
  1008. (0, 'admin', 'admin@interia.pl', '$2y$10$zzVLOlNOTyfoZBoGoHKdiOVGYr8qly3ga8CgE9YXPwWFmfmd0.nQ6', 'kierownik'),
  1009. (4, 'pracownik', 'pracownik@interia.pl', '$2y$10$yF0ITtf9lLKbu0F.JY6PTOrBORfYNKCJwG0TNxvbLFNwW7q5K8THa', 'pracownik'),
  1010. (5, 'Kierownik', 'kierownik@interia.pl', '$2y$10$TwdfSlN1munSqzggmJpcp.zy1h/7mZQIWrESBIKOKdsTtOqvivrxm', 'kierownik');
  1011.  
  1012.  
  1013. ALTER TABLE `Towar`
  1014. ADD PRIMARY KEY (`Id`);
  1015.  
  1016.  
  1017. ALTER TABLE `users`
  1018. ADD PRIMARY KEY (`user_id`);
  1019.  
  1020. ALTER TABLE `Faktury`
  1021. ADD PRIMARY KEY (`Id_Faktury`);
  1022.  
  1023.  
  1024.  
  1025. ALTER TABLE `Faktury`
  1026. MODIFY `Id_Faktury` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=3;
  1027.  
  1028.  
  1029. ALTER TABLE `Towar`
  1030. MODIFY `Id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=11;
  1031.  
  1032.  
  1033. ALTER TABLE `users`
  1034. MODIFY `user_id` int(11) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=6;
  1035. COMMIT;
  1036.  
  1037.  
  1038. <?php
  1039. //----------------------------------
  1040. session_start();
  1041.  
  1042.  
  1043.  
  1044. require("polacz.php");
  1045.  
  1046. $queryShow = 'SELECT * FROM Towar';
  1047. ?>
  1048. <!DOCTYPE html>
  1049. <html lang="en">
  1050. <head>
  1051. <meta charset="utf-8">
  1052. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  1053. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  1054. <title>Wypożyczyalnia</title>
  1055. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  1056. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  1057. </head>
  1058. <body class="fixed-nav sticky-footer bg-dark" id="page-top">
  1059.  
  1060. <a href="logout.php">
  1061. <i class="fas fa-sign-out-alt"></i> Logout</a>
  1062.  
  1063. <?php
  1064. if(isset($_SESSION['komunikat'])){
  1065. echo '<div class="alert alert-danger error" role="alert"><strong>Komunikat!</strong> '. $_SESSION['komunikat'] . '</div>';
  1066. unset($_SESSION['komunikat']);
  1067. }
  1068. ?>
  1069.  
  1070. <table width="100%" cellspacing="0" , bgcolor="white">
  1071. <thead>
  1072. <tr>
  1073. <th>Id Towaru</th>
  1074. <th>Nazwa</th>
  1075. <th>Marka</th>
  1076. <th>Cena</th>
  1077. <th>Data dodania</th>
  1078. <th>Usuń</th>
  1079. </tr>
  1080. </thead>
  1081.  
  1082. <tbody>
  1083.  
  1084. <?php
  1085. $result = $connection->query($queryShow);
  1086. while ($row=$result->fetch_assoc()) {
  1087. $id = $row['Id'];
  1088. $nazwa = $row['Nazwa'];
  1089. $marka = $row['Marka'];
  1090. $cena = $row['Cena'];
  1091. $time = strtotime($row["data"]);
  1092. $rok = date('Y', $time);
  1093. $miesiac = date('m', $time);
  1094. $dzien = date('d', $time);
  1095. echo "<tr><td>$id</td> <td>$nazwa</td> <td>$marka</td> <td>$cena</td> <td>$rok/$miesiac/$dzien</td>";
  1096. if($_SESSION['uprawnienia'] == "kierownik"){
  1097. echo "<td><form action=\"php/funkcje.php\" method=\"post\"><button type=\"submit\" name=\"delete\"class=\"btn btn-danger btn-sm\" value=\"" . htmlspecialchars($id) . "\">DEL</button></form></td></tr>";}
  1098. else echo "</tr>";
  1099. }
  1100. ?>
  1101. </tbody>
  1102. </table>
  1103.  
  1104.  
  1105. <?php if($_SESSION['uprawnienia'] == "pracownik"){ ?>
  1106. <div class="container-fluid">
  1107. <h3>Dodaj</h3>
  1108. <form class="klasa" action="php/funkcje.php" method="POST">
  1109. <div class="form-row">
  1110. <div class="col">
  1111. <input type="text" class="form-control" placeholder="Id" name="Id" required>
  1112. </div>
  1113. <div class="col">
  1114. <input type="text" class="form-control" placeholder="Nazwa" name="Nazwa" required>
  1115. </div>
  1116. <div class="col">
  1117. <input type="text" class="form-control" placeholder="Marka" name="Marka" required>
  1118. </div>
  1119. <div class="col">
  1120. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="Cena" required>
  1121. </div>
  1122. <button type="submit" class="btn btn-primary" name="dodaj">OK</button>
  1123. </div>
  1124. </form>
  1125. </div>
  1126. <br /><br />
  1127. <?php } ?>
  1128.  
  1129. <?php if($_SESSION['uprawnienia'] == "kierownik"){ ?>
  1130. <div class="container-fluid">
  1131. <h3>Dodaj</h3>
  1132. <form class="klasa" action="php/funkcje.php" method="POST">
  1133. <div class="form-row">
  1134. <div class="col">
  1135. <input type="text" class="form-control" placeholder="Id" name="Id" required>
  1136. </div>
  1137. <div class="col">
  1138. <input type="text" class="form-control" placeholder="Nazwa" name="Nazwa" required>
  1139. </div>
  1140. <div class="col">
  1141. <input type="text" class="form-control" placeholder="Marka" name="Marka" required>
  1142. </div>
  1143. <div class="col">
  1144. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="Cena" required>
  1145. </div>
  1146. <button type="submit" class="btn btn-primary" name="dodaj">OK</button>
  1147. </div>
  1148. </form>
  1149. </div>
  1150. <br /><br />
  1151. <?php } ?>
  1152. <?php if($_SESSION['uprawnienia'] == "kierownik"){ ?>
  1153. <!-- Formularz aktualizujący rekord w bazie -->
  1154. <div class="container-fluid">
  1155. <h3>Edytuj</h3>
  1156. <form class="klasa" action="php/funkcje.php" method="POST">
  1157. <div class="form-row">
  1158. <div class="col">
  1159. <input type="text" class="form-control" placeholder="Id" name="Id" required>
  1160. </div>
  1161. <div class="col">
  1162. <input type="text" class="form-control" placeholder="Nazwa" name="Nazwa" required>
  1163. </div>
  1164. <div class="col">
  1165. <input type="text" class="form-control" placeholder="Marka" name="Marka" required>
  1166. </div>
  1167. <div class="col">
  1168. <input type="number" step="any" min="0" class="form-control" placeholder="cena" name="Cena" required>
  1169. </div>
  1170. <button type="submit" class="btn btn-primary" name="update">OK</button>
  1171. </div>
  1172. </form>
  1173. </div>
  1174. <br /><br />
  1175. </div>
  1176. <?php } ?>
  1177.  
  1178.  
  1179.  
  1180. </div>
  1181. </body>
  1182. </html>
  1183.  
  1184. <?php
  1185. //----------------------------------
  1186. session_start();
  1187. if ((isset($_SESSION['zalogowany'])) && ($_SESSION['zalogowany']==true))
  1188. {
  1189. header('Location: index2.php');
  1190. exit();
  1191. }
  1192. require("polacz.php");
  1193. $queryShow = 'SELECT * FROM Towar';
  1194. ?>
  1195. <!DOCTYPE html>
  1196. <html lang="en">
  1197. <head>
  1198. <meta charset="utf-8">
  1199. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  1200. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
  1201. <title>Wypożyczyalnia</title>
  1202. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">
  1203. <link href="vendor/datatables/dataTables.bootstrap4.css" rel="stylesheet">
  1204.  
  1205. </head>
  1206. <body class="fixed-nav sticky-footer bg-dark" id="page-top">
  1207.  
  1208.  
  1209. <form action="zaloguj.php" method="post">
  1210. <div class="form-group">
  1211. <label for="exampleInputLogin" color="white">Login pracownik lub kierownik</label>
  1212. <input class="form-control" id="exampleInputLogin" type="text" aria-describedby="loginHelp" name="login" placeholder="Podaj login" required>
  1213. </div>
  1214. <div class="form-group">
  1215. <label for="exampleInputPassword1">Hasło Pracownik123 lub Kierownik123 odpowiednio</label>
  1216. <input class="form-control" id="exampleInputPassword1" type="password" name="haslo" placeholder="Hasło" required>
  1217. </div>
  1218. <button class="btn btn-primary btn-block" type="submit">Login</button>
  1219. </form>
  1220.  
  1221. <div class="text-center">
  1222. <a class="d-block small mt-3" href="register.php">Zarejestruj się</a>
  1223. </div>
  1224.  
  1225.  
  1226. <table width="100%" cellspacing="0" , bgcolor="white">
  1227. <thead>
  1228. <tr>
  1229. <th>Id Towaru</th>
  1230. <th>Nazwa</th>
  1231. <th>Marka</th>
  1232. <th>Cena</th>
  1233. <th>Data dodania</th>
  1234.  
  1235. </tr>
  1236. </thead>
  1237.  
  1238. <tbody>
  1239.  
  1240. <?php
  1241. $result = $connection->query($queryShow);
  1242. while ($row=$result->fetch_assoc()) {
  1243. $id = $row['Id'];
  1244. $nazwa = $row['Nazwa'];
  1245. $marka = $row['Marka'];
  1246. $cena = $row['Cena'];
  1247. $time = strtotime($row["data"]);
  1248. $rok = date('Y', $time);
  1249. $miesiac = date('m', $time);
  1250. $dzien = date('d', $time);
  1251. echo "<tr><td>$id</td> <td>$nazwa</td> <td>$marka</td> <td>$cena</td> <td>$rok/$miesiac/$dzien</td>";
  1252. }
  1253. ?>
  1254. </tbody>
  1255. </table>
  1256.  
  1257. </div>
  1258. </body>
  1259. </html>
  1260.  
  1261. <?php
  1262. //----------------------------------
  1263. session_start();
  1264. require("polacz.php");
  1265. //----------------------------------
  1266.  
  1267.  
  1268.  
  1269. /* ### DODAJ DO BAZY DANYCH ### */
  1270. function Dodaj($connection) {
  1271.  
  1272. // Escape user inputs for security
  1273. $Id = mysqli_real_escape_string($connection, $_REQUEST['Id']);
  1274. $Nazwa = mysqli_real_escape_string($connection, $_REQUEST['Nazwa']);
  1275. $Marka = mysqli_real_escape_string($connection, $_REQUEST['Marka']);
  1276. $Cena = mysqli_real_escape_string($connection, $_REQUEST['Cena']);
  1277.  
  1278. $sql = "INSERT INTO towar (Id, Nazwa, Marka, Cena) VALUES ('$Id', '$Nazwa', '$Marka', '$Cena')";
  1279.  
  1280. if(mysqli_query($connection, $sql) == True){
  1281. $_SESSION['komunikat'] = "Dodano.";
  1282. } else {
  1283. $_SESSION['komunikat'] = "Nie dodano.";
  1284. }
  1285.  
  1286. mysqli_close($connection);
  1287. }
  1288.  
  1289. function Usun($connection) {
  1290.  
  1291. // Escape user inputs for security
  1292. $Id = mysqli_real_escape_string($connection, $_REQUEST['delete']);
  1293.  
  1294. $sql = "DELETE FROM towar WHERE Id=$Id";
  1295.  
  1296. if(mysqli_query($connection, $sql) == True){
  1297. $_SESSION['komunikat'] = "Usunięto wiersz";
  1298. } else {
  1299. $_SESSION['komunikat'] = "Niepowodzenie usuwania";
  1300. }
  1301.  
  1302. mysqli_close($connection);
  1303. }
  1304.  
  1305. function Edytuj($connection) {
  1306.  
  1307. $Id = mysqli_real_escape_string($connection, $_REQUEST['Id']);
  1308.  
  1309. $query = "SELECT * FROM towar where Id=$Id";
  1310. $result = mysqli_query($connection, $query);
  1311. while ($row=$result->fetch_assoc()) {
  1312. $id = $row['Id'];
  1313. $Nazwa = $row['Nazwa'];
  1314. $Marka = $row['Marka'];
  1315. $Cena = $row['Cena'];
  1316. }
  1317.  
  1318. if(!empty($_REQUEST['Nazwa'])) { $Nazwa = mysqli_real_escape_string($connection, $_REQUEST['Nazwa']); } else { $Nazwa = mysqli_real_escape_string($connection, $Nazwa); }
  1319. if(!empty($_REQUEST['Marka'])) { $Marka = mysqli_real_escape_string($connection, $_REQUEST['Marka']); } else { $Marka = mysqli_real_escape_string($connection, $Marka); }
  1320. if(!empty($_REQUEST['Cena'])) { $Cena = mysqli_real_escape_string($connection, $_REQUEST['Cena']); } else { $Cena = mysqli_real_escape_string($connection, $Cena); }
  1321.  
  1322. $sql = "UPDATE towar SET Nazwa='$Nazwa', Marka='$Marka', Cena='$Cena' WHERE Id=$Id";
  1323.  
  1324. if(mysqli_query($connection, $sql) == True){
  1325. $_SESSION['komunikat'] = "Pomyślna aktualizacja wierszu";
  1326. } else {
  1327. $_SESSION['komunikat'] = "Nie zaktualizowano wiersza.";
  1328. }
  1329.  
  1330. mysqli_close($connection);
  1331. }
  1332.  
  1333.  
  1334.  
  1335.  
  1336. /* ### W ZALEŻNOŚCI OD KLIKNIĘTEGO BUTTONA WYKONAJ DANĄ FUNKCJE ### */
  1337. if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['dodaj'])) {
  1338. Dodaj($connection);
  1339. }
  1340. else if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['delete'])) {
  1341. Usun($connection);
  1342. }
  1343. else if($_SERVER['REQUEST_METHOD'] == "POST" and isset($_POST['update'])) {
  1344. Edytuj($connection);
  1345. }
  1346.  
  1347. header('Location: ../index2.php');
  1348. ?>
  1349.  
  1350. <?php
  1351.  
  1352. //Potrzebne dane do połączenia z bazą danych
  1353. $servername = "localhost";
  1354. $username = "root";
  1355. $password = "";
  1356. $dbname = "Magazyn";
  1357.  
  1358. $connection = new mysqli($servername, $username, $password, $dbname);
  1359.  
  1360. if ($connection->connect_error) {
  1361. die("Connection failed: " . $connection->connect_error);
  1362. }
  1363. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!