forked from lalin/training_project
-
Notifications
You must be signed in to change notification settings - Fork 1
/
create_page.php
67 lines (60 loc) · 1.7 KB
/
create_page.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
<?php require_once("includes/session.php"); ?>
<?php require_once("includes/functions.php"); ?>
<?php confirm_logged_in(); ?>
<?php require_once("includes/connection.php"); ?>
<?php
$errors = array();
//Form validation
$required_fields = array("menu_name", "subject", "position", "visible", "content");
foreach ($required_fields as $fieldname)
{
if (!isset($_POST[$fieldname]) || empty($_POST[$fieldname]))
{
$errors[] = $fieldname;
}
}
$fields_with_lengths = array("menu_name" => 30, "content" => 80);
foreach ($fields_with_lengths as $fieldname => $maxlength)
{
if (strlen(trim(mysql_prep($_POST["$fieldname"]))) > $maxlength)
{
$errors[] = $fieldname;
}
}
if (!empty($errors))
{
redirect_to("new_page.php");
}
?>
<?php
/*
* To change this template, choose Tools | Templates
* and open the template in the editor.
*/
$menu_name = mysql_prep($_POST["menu_name"]);
$subject_id = mysql_prep($_POST["subject"]);
$position = mysql_prep($_POST["position"]);
$visible = mysql_prep($_POST["visible"]);
$page_content = mysql_prep($_POST["content"]);
?>
<?php
$query = "INSERT INTO pages (
menu_name, subject_id, position, visible, content
) values (
'{$menu_name}', {$subject_id}, {$position}, {$visible}, '{$page_content}'
)";
if (mysql_query($query, $connection))
{
//Success!
redirect_to("content.php");
}
else
{
//Display error message.
echo "<p>Page creation failed.</p>";
echo "<p>" . mysql_error() . "</p>";
}
?>
<?php
mysql_close($connection);
?>