<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
$editFormAction = $HTTP_SERVER_VARS['PHP_SELF'];
if (isset($HTTP_SERVER_VARS['QUERY_STRING'])) {
$editFormAction .= "?" . $HTTP_SERVER_VARS['QUERY_STRING'];
}
if ((isset($HTTP_POST_VARS["MM_insert"])) && ($HTTP_POST_VARS["MM_insert"] == "form1")) {
$insertSQL = sprintf("INSERT INTO bestilling (BestilAntal, Fornavn, Efternavn, Adresse, Postnr, `By`, Telefon, Email) VALUES (%s, %s, %s, %s, %s, %s, %s, %s)",
GetSQLValueString($HTTP_POST_VARS['BestilAntal'], "text"),
GetSQLValueString($HTTP_POST_VARS['Fornavn'], "text"),
GetSQLValueString($HTTP_POST_VARS['Efternavn'], "text"),
GetSQLValueString($HTTP_POST_VARS['Adresse'], "text"),
GetSQLValueString($HTTP_POST_VARS['Postnr'], "text"),
GetSQLValueString($HTTP_POST_VARS['By'], "text"),
GetSQLValueString($HTTP_POST_VARS['Telefon'], "text"),
GetSQLValueString($HTTP_POST_VARS['Email'], "text"));
mysql_select_db($database_connXXRemote, $connXXRemote);
$Result1 = mysql_query($insertSQL, $connXXRemote) or die(mysql_error());
$insertGoTo = "bestilok.php";
if (isset($HTTP_SERVER_VARS['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $HTTP_SERVER_VARS['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}
//Start Safe Recordset
if (!isset($KT_error)) {
$KT_error = false;
}
if(isset($KT_FormState) && $KT_FormState == "NEW") $KT_error = true;
if (!$KT_error) {
mysql_select_db($database_connXXRemote, $connXXRemote); //select db
$query_bestilRecordset = "SELECT * FROM bestilling";
$bestilRecordset = mysql_query($query_bestilRecordset, $connXXRemote) or die(mysql_error());
$row_bestilRecordset = mysql_fetch_assoc($bestilRecordset);
$totalRows_bestilRecordset = mysql_num_rows($bestilRecordset);
} else {
$row_bestilRecordset = &$KT_fakeRs;
}
//End Safe Recordset
mysql_select_db($database_connXXRemote, $connXXRemote);
$query_bestillingsTekster01Recordset = "SELECT * FROM bestillingTekster WHERE idBestillingTekster = 1";
$bestillingsTekster01Recordset = mysql_query($query_bestillingsTekster01Recordset, $connDjangoesRemote) or die(mysql_error());
$row_bestillingsTekster01Recordset = mysql_fetch_assoc($bestillingsTekster01Recordset);
$totalRows_bestillingsTekster01Recordset = mysql_num_rows($bestillingsTekster01Recordset);
mysql_select_db($database_connXXRemote, $connXXRemote);
$query_bestillingsTekster02Recordset = "SELECT * FROM bestillingTekster WHERE idBestillingTekster = 2";
$bestillingsTekster02Recordset = mysql_query($query_bestillingsTekster02Recordset, $connXXRemote) or die(mysql_error());
$row_bestillingsTekster02Recordset = mysql_fetch_assoc($bestillingsTekster02Recordset);
$totalRows_bestillingsTekster02Recordset = mysql_num_rows($bestillingsTekster02Recordset);
?>
<?php echo "<?xml version=\"1.0\" encoding=\"iso-8859-1\"?".">"; ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="
http://www.w3.org/1999/xhtml"><head>
<title>Sidetitel - Bestilling</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<link href="../styles.css" rel="stylesheet" type="text/css" />
</head>
<body bgcolor="#333333">
<table width="310" border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="overskrift">
<p>
<?php echo $row_bestillingsTekster01Recordset['Overskrift']; ?>
</p>
<p align="center" class="artikeltxt"><img src="../assets/images/frontcover_big.jpg" width="300" height="298" /></p>
<p align="center" class="artikeltxt"><br />
<?php echo nl2br($row_bestillingsTekster01Recordset['ArtikelTekst']); ?>
</p>
</td>
</tr>
<tr>
<td> </td>
</tr>
</table>
<table width="310" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>
<form method="post" name="form1" action="<?php echo $editFormAction; ?>">
<table align="center">
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap>Ja tak!</td>
<td align="left" valign="top"> Jeg ønsker at bestille:
<input type="text" name="BestilAntal" value="" size="3" />
stk CD´er</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Fornavn:</b></td>
<td align="left" valign="top">
<input type="text" name="Fornavn" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Efternavn:</b></td>
<td align="left" valign="top">
<input type="text" name="Efternavn" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Adresse:</b></td>
<td align="left" valign="top">
<input type="text" name="Adresse" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Postnr:</b></td>
<td align="left" valign="top">
<input type="text" name="Postnr" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>By:</b></td>
<td align="left" valign="top">
<input type="text" name="By" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Telefon:</b></td>
<td align="left" valign="top">
<input type="text" name="Telefon" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="left" valign="baseline" nowrap><b>Email:</b></td>
<td align="left" valign="top">
<input type="text" name="Email" value="" size="32" />
</td>
</tr>
<tr valign="baseline" class="artikeltxt">
<td align="right" nowrap> </td>
<td>
<input name="submit" type="submit" value="Indsend bestilling" />
</td>
</tr>
</table>
<input type="hidden" name="MM_insert" value="form1" />
</form>
</td>
</tr>
</table>
<table width="310" border="0" cellspacing="0" cellpadding="0">
<tr>
<td align="left" valign="top" class="overskrift">
<p> </p>
<p class="overskrift">
<?php echo $row_bestillingsTekster02Recordset['Overskrift']; ?>
</p>
<p class="artikeltxt">
<?php echo nl2br ($row_bestillingsTekster02Recordset['ArtikelTekst']); ?>
</p>
</td>
</tr>
</table>
</body>
</html>
<?php
mysql_free_result($bestilRecordset);
mysql_free_result($bestillingsTekster01Recordset);
mysql_free_result($bestillingsTekster02Recordset);
?>