delta_web_task3/save.php at master · someshrf/delta_web_task3 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
<?php
require_once 'config.php';
session_start();
$code = $created_by="";
$name = $_SESSION['code_name'];
$sql = "SELECT snippet, created_by FROM code WHERE name = ?";
if($stmt = mysqli_prepare($link,$sql)){
	mysqli_stmt_bind_param($stmt,"s",$param_name);
	$param_name=$name;
	if(mysqli_stmt_execute($stmt)){
		mysqli_stmt_store_result($stmt);
		mysqli_stmt_bind_result($stmt,$param_code,$param_creator);
		mysqli_stmt_fetch($stmt);
		$code=$param_code;
		$created_by=$param_creator;
	}
}
mysqli_stmt_close($stmt);

$code_err = "";

if($_SERVER["REQUEST_METHOD"] == "POST"){


    if(isset($_POST['code'])){
    if(empty(trim($_POST['code']))){
        $code_err = "Please enter the code.";

    }
     else{
        $code = trim($_POST['code']);
    }


    if(empty($code_err)){

        $sql = "UPDATE code SET snippet=? where name= ?";

        if($stmt = mysqli_prepare($link, $sql)){

            mysqli_stmt_bind_param($stmt, "ss", $param_snippet, $param_name);

            $param_snippet = $code;

            $param_name =$name;

            if(mysqli_stmt_execute($stmt)){
                header("location: welcome.php");
            } else{
                echo "Something went wrong. Please try again later. insert";
            }
        }
        mysqli_stmt_close($stmt);
    }
    mysqli_close($link);
}
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <title>Edit Code</title>
    <style type="text/css">
        *{
            padding: 0;
            margin: 0;
        }

        textarea{
        	white-space: pre-wrap;
        }

    </style>
</head>
<body>
	<?php

		if(!isset($_SESSION['username'])||$_SESSION['username']!=$created_by){
			echo "<script>
					alert(\"Please Login to add code\");
					document.location.href=\"login.php\";
					</script>";


		}
	 ?>
    <div id="container">
        <h3>Edit code</h3><br>
        <p><?php echo $name;  ?></p><br>
        <form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]); ?>" method="post">

            <label>Code<sup style="color: red">*</sup></label><br>
            <textarea name="code" rows="30" cols="70"><?php echo $code;?></textarea>
            <span style="color: red"><?php echo $code_err;?></span>
            <br><br>
            <input type="submit" value="Save">
            <input type="reset" value="Reset">
        </form><br>
        <a href="welcome.php">Go back</a><br><br>
        <p><sup style="color: red">*</sup> required fields</p>
    </div>

</body>
</html>