Untitled

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Games Library Reservations Page</title>
<link href="styles.css" rel="stylesheet" type="text/css">
</head>

<body>
<div id='main'>
 	<div id='titleImage'><img title='Home' src='images/GLLogo.png' width='700' height='190' alt='Games Library Title' /></div>
  	<div id='menu-wrapper'>
		<div id='menu'>
			<ul>

				<li><a href='index.php'>Home</a></li>
                <li class='current_page_item'><a href='#'>Reservations</a></li>
    		</ul>
		</div>
	</div>

	<div>
    	<h1>Reservations</h1>
        <?php
	$count = 0;
	$file = fopen('games.csv', 'r');
	while(($games[] = fgetcsv($file)) !== FALSE){
	$count = $count + 1;
		}

	//saves into an array
	fclose($file);

$name = $gameID = $start = $reserve = "";
$nameErr = $gameIDErr = $startrErr = $reserveErr ="";

if ($_SERVER["REQUEST_METHOD"] == "POST") {
  if(empty($_POST["name"])) {
   $nameErr = "Name is required";
  } else {
   $name = $_POST["name"];
  }
	if(empty($_POST["gameID"])) {
   $gameIDErr = "gameID is required";
  } else {
   $gameID = $_POST["gameID"];
  }
	if(empty($_POST["start"])) {
   $startErr = "start is required";
  } else {
	$start = $_POST["start"];
  }
  if(empty($_POST["reserve"])) {
  $reserveErr = "reserve is required";
  }else{
	$reserve = $_POST["reserve"];
  }


	}


	$match = "no" ;
	$number_of_records = $count - 1 ;
	for ($i = 0;$i<$number_of_records;$i++) {
		if ($gameID == $games[$i][0]) {
			$match = "yes";
			$gamename = $games[$i][2];
			$price = $games[$i][4];
			$validgameID = $games[$i][0];


		}
	}
	if($match == "no"){
		$gameIDErr = "Game ID does not exist";
	}


	$servername = "localhost";
	$username = "vaudibert1";
	$password = "ebscs";
	$dbname = "vaudibert";

	$conn = new MySQLi($servername, $username, $password, $dbname);
	if ($conn->connect_error) {
		die("connection failed: " . $conn->connect_error);
	}else{
	$enddate = date('Y-m-d', strtotime($reserve."+($days)days"));


	$sql = "INSERT INTO reservation (name, gameID, start, reserve, enddate)
			VALUES('".$name."','".$gameID."','".$start."','".$reserve."','".$enddate."')";

	if($conn->query($sql) === TRUE ) {
		echo "new record successfully created";
	} else {
		echo "Error: ". $sql . "<br>" .$conn->error;
	}

	$conn->close();


?>
<style>
	.error {color: #FF0000;}
</style>

<form method="post" action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>">

  <p>Name:</p>
  <p>
  <input type="text" name="name">
    <span class="error">* <?php echo $nameErr;?></span>
    <br><br>
    gameID:</p>
  <p>
    <input type="text" name="gameID">
    <span class="error">* <?php echo $gameIDErr;?></span>
    <br><br>
    Start date of reservation: </p>
  <p>
    <input type="date" name="start">
    <span class="error">* <?php echo $startErr;?></span>
    <br>
  <p>Number of days for reservation:<br>
  <p>
    <input type="number" name="reserve" min="1" max="5">
    <span class="error">* <?php echo $reserveErr;?></span>
    <br><br>
    <input type="submit" name="submit" value="Submit">
    </p>
    <br><br>
  </p>
</form>


<?php


echo "<h2>Your Input:</h2>";
echo $name;
echo"<br>";
echo $gameID;
echo"<br>";
echo $start;
echo"<br>";
echo $reserve;
echo"<br>";
echo $match;
echo"<br>";
echo "The game name is: ". $gamename;
$totalprice = $price * $reserve;
echo "<br>";
echo "The price for ".$reserve." days is £".$totalprice.".";

	}
?>


</div>

</body>
</html>