FilesExpand file tree

 master

/

exec_request_copy.php

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

49 lines (39 loc) · 1.28 KB

 master

/

exec_request_copy.php

Copy path

Top

File metadata and controls

• Code
• Blame

49 lines (39 loc) · 1.28 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

<?php

//Array to store validation errors

$errmsg_arr = array();

//Validation error flag

$errflag = false;

//Connect to mysql server

$conn = new mysqli(DB_HOST, DB_USER, DB_PASSWORD,DB_DATABASE);

if ($conn->connect_error) die($conn->connect_error);

//Sanitize the POST values

$request_date_mmyy = clean($_POST['request_date_mmyy'],$conn);

$usr_email = clean($_POST['usr_email'],$conn);

$ticket_typeId = clean($_POST['ticket_typeId'],$conn);

//Input Validations

if($request_date_mmyy == '') {

$errmsg_arr[] = 'Request date mmyy';

$errflag = true;

}

if($usr_email == '') {

$errmsg_arr[] = 'User email missing';

$errflag = true;

}

if($ticket_typeId == '') {

$errmsg_arr[] = 'Type of ticket missing';

$errflag = true;

}

//If there are input validations, redirect back to the registration form

if($errflag) {

$_SESSION['ERRMSG_ARR'] = $errmsg_arr;

session_write_close();

header("location: index.php");

exit();

}

//Create INSERT query

$query = "INSERT INTO txs_request(request_date_mmyy,usr_email,ticket_typeId)

VALUES('$request_date_mmyy','$usr_email','$ticket_typeId')";

echo "<h1>Request successful</h1>";

$result = $conn->query($query);

if (!$result) die ("Database access failed: " . $conn->error);

?>