-
Notifications
You must be signed in to change notification settings - Fork 0
/
readRecord.php
executable file
·87 lines (76 loc) · 2.59 KB
/
readRecord.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
<?php
// Check existence of id parameter before processing further
if(isset($_GET["id"]) && !empty(trim($_GET["id"]))){
// Include config file
require_once "./config.php";
// Prepare a select statement
$table = $_GET["table"];
$sql = "SELECT * FROM " . $table . " WHERE id = ?";
if($stmt = mysqli_prepare($conn, $sql)){
// Bind variables to the prepared statement as parameters
// Set parameters
$param_id = trim($_GET["id"]);
mysqli_stmt_bind_param($stmt, "i", $param_id);
// Attempt to execute the prepared statement
if(mysqli_stmt_execute($stmt)){
$result = mysqli_stmt_get_result($stmt);
if(mysqli_num_rows($result) == 1){
$row = mysqli_fetch_array($result, MYSQLI_ASSOC);
// Retrieve individual field value
$name = $row["name"];
$description = $row["description"];
} else{
// URL doesn't contain valid id parameter. Redirect to error page
header("location: ./error.php");
exit();
}
} else{
echo "Oops! Something went wrong. Please try again later.";
}
} else {
echo "Trouble with the mysql_prepare()";
}
// Close statement
mysqli_stmt_close($stmt);
// Close connection
mysqli_close($conn);
} else{
// URL doesn't contain id parameter. Redirect to error page
header("location: ./error.php");
exit();
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>View Record</title>
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css">
<style>
.wrapper{
width: 600px;
margin: 0 auto;
}
</style>
</head>
<body>
<div class="wrapper">
<div class="container-fluid">
<div class="row">
<div class="col-md-12">
<h1 class="mt-5 mb-3">View Record</h1>
<div class="form-group">
<label>Name</label>
<p><b><?php echo $row["name"]; ?></b></p>
</div>
<div class="form-group">
<label>Description</label>
<p><b><?php echo $row["description"]; ?></b></p>
</div>
<p><a href="./admin.php" class="btn btn-primary">Back</a></p>
</div>
</div>
</div>
</div>
</body>
</html>