ICS499/processeditmovie.php at master · raddadengineer/ICS499 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
<?php
session_start();
include('header.php');
include_once("db_connect.php");

if (empty($_SESSION['user_id'])){
header("Location: login.php");

}

if (!empty($_GET['id'])) {

	$movie_ID=$_GET['id'];

	$sql2 = "Select * FROM movies WHERE movie_id = '".$_GET['id']."' ";

	$result = mysqli_query($conn, $sql2);
	$row = mysqli_fetch_array($result);
	$edit_movie_id = $row['movie_id'];
	$edit_movie_title = $row['movie_title'];
	$edit_releaseyear = $row['releaseyear'];
	$edit_moviedb_id = $row['moviedb_id'];
	$edit_imdb_id = $row['imdb_id'];

}


if (isset($_POST['editmovie'])) {
	$movie_title = mysqli_real_escape_string($conn, $_POST['movie_title']);
	$releaseyear = mysqli_real_escape_string($conn, $_POST['releaseyear']);
	$moviedb_id = mysqli_real_escape_string($conn, $_POST['moviedb_id']);
	$imdb_id = mysqli_real_escape_string($conn, $_POST['imdb_id']);
	$movie_id = mysqli_real_escape_string($conn, $_POST['movie_id']);

	if (!$error) {

		//edit movie record
		if(mysqli_query($conn, "UPDATE movies SET movie_title = '" . $movie_title . "', releaseyear = '" . $releaseyear . "', moviedb_id = '" . $moviedb_id . "', imdb_id = '" . $imdb_id . "' WHERE movie_id = '" .$edit_movie_id. "' ")) {


			//redirect to index page
			header("Location:managemovies.php");


		} else {
			$error_message = "Error in adding move...Please try again later!";
		}

	}


}


?>


<?php if ((isset($_SESSION['user_id']) )) { ?>
<head>
  <link rel="stylesheet" href="css/style.css">
</head>


    <div class="form">
	<form role="form" action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post" name="editmovieform">
				<fieldset>
					<legend>Edit Movie</legend>

					<table>
					<tr>
					<div class="form-group">
					<td>
						<label for="movie_title">Movie Title</label>
					<t/d>
					<td>
						<input type="text" name="movie_title" placeholder="Movie Title" value="<?php echo (isset($edit_movie_title))?$edit_movie_title:'';?>" required value="<?php if($error) echo $movie_title; ?>" class="form-control" />
						<span class="text-danger"><?php if (isset($mtitle_error)) echo $mtitle_error; ?></span>
					</td>
					</div>
					</tr>
					<tr>
					<div class="form-group">
					<td>
						<label for="releaseyear">Release Year</label>
						</td>
						<td>
						<input input type="number" name="releaseyear" min="1900" max="2099" step="1" value="<?php echo (isset($edit_releaseyear))?$edit_releaseyear:'';?>" required value="<?php if($error) echo $releaseyear; ?>" class="form-control" />
						<span class="text-danger"><?php if (isset($releaseyear_error)) echo $releaseyear_error; ?></span>
						</td>
					</div>
					</tr>
					<tr>
					<div class="form-group">
					<td>
						<label for="moviedb_id">Moviedb ID</label>
						</td>
						<td>
						<input type="text" name="moviedb_id" placeholder="Enter Moviedb ID" value="<?php echo (isset($edit_moviedb_id))?$edit_moviedb_id:'';?>" required value="<?php if($error) echo $moviedb_id; ?>" class="form-control" />
						<span class="text-danger"><?php if (isset($moviedb_id_error)) echo $moviedb_id_error; ?></span>
						</td>
					</div>
					</tr>
					<tr>
					<div class="form-group">
					<td>
						<label for="imdb_id">IMDB ID</label>
						</td>
						<td>
						<input type="text" name="imdb_id" placeholder="Enter IMDB ID" value="<?php echo (isset($edit_imdb_id))?$edit_imdb_id:'';?>" required value="<?php if($error) echo $imdb_id; ?>" class="form-control" />
						<input type="hidden" name="editmovie_id" value="<?php echo (isset($edit_movie_id))?$edit_movie_id:'';?>">
						<span class="text-danger"><?php if (isset($imdb_id_error)) echo $imdb_id_error; ?></span>
						</td>
					</div>
					</tr>
					<tr>
					<div class="form-group">
					<td>
						<input type="submit" name="editmovie" value="Edit Movie" class="btn btn-primary" />
						</td>
					</div>
					</tr>
					</table>
				</fieldset>
			</form>
  </div>


    <P>
    Click <a href="logout.php">here</a> to logout


 <?php } ?>