Input.php

<!--/FORM pesanan-->
<?php
session_start();
error_reporting( error_reporting() & ~E_NOTICE );
include "include/lib.php";
$input=$_GET['input'];
$sid = session_id();
$inputform=$_GET['inputform'];

if($input=='add'){
	$q_keranjang = $sambungan->prepare("SELECT * FROM keranjang, product WHERE id_product=:id_product AND id_session=id_session");
	$q_keranjang->bindValue(':id', $sid, PDO::PARAM_STR);
	$q_keranjang->execute();
	//$sql = mysql_query("SELECT id_product FROM keranjang WHERE id_product='$_GET[id]' AND id_session='$sid'");
	//$num = mysql_num_rows($sql);
	if ($num==0){
		//$sql ("INSERT INTO keranjang(id_product,
											id_session,
											tgl_keranjang,
											qty)
									VALUES	('$_GET[id]',
											'$sid',
											'$tgl_sekarang',
											'1')") or die (mysql_error());
	}
	else {
		$sql ("UPDATE keranjang SET qty = qty + 1 WHERE id_session = '$sid' AND id_product='$_GET[id]'") or die (mysql_error());
	}
	deletecart();
	header('location:index.php?v=cart');
	}
elseif ($input=='delete'){
	mysql_query("DELETE FROM keranjang WHERE id_keranjang='$_GET[id]'");
	header('location:index.php?v=cart');
	}
elseif ($input=='inputform'){
	$ct_content = cart_content();
	$jml = count($ct_content);
	$now = date("Ymd");
	for($i=0; $i<$jml; $i++){
	mysql_query("INSERT INTO order_product(name,
											email,
											phone,
											address,
											id_product,
											jumlah,
											tanggal,
											id_pemesan)
									VALUES ('$_POST[name]',
											'$_POST[email]',
											'$_POST[telp]',
											'$_POST[address]',
											{$ct_content[$i]['id_product']},
											{$ct_content[$i]['qty']},
											'$now',
											'$sid')");
		}
	for($i=0; $i<$jml; $i++){
		mysql_query("DELETE FROM keranjang WHERE id_keranjang = {$ct_content[$i]['id_keranjang']}");
		}
		echo "<script>window.alert('Terima Kasih Pesanan Anda Sedang Kami Proses');
        window.location=('index.php')</script>";
	}
?>