------------------------------------------------------------------------------
Min vare.add.php ser ud som følgende:
------------------------------------------------------------------------------
<html>
<head>
<link rel="stylesheet" type="text/css" href="css.css">
</head>
<body>
<font class="lille">
» <a href="../index.php">Forside</a> » <a href="administration.php">Admin</a>
<br><br>
Du er her: ..admin/vare.add.php
</font>
<br><br>
<form action="form.handle.php" method="post" enctype="multipart/form-data">
<input type="hidden" name="referer" value="post_vare">
<font class="normal">Vare</font><br><input class="input" type="text" name="name" style="width: 200px"><br>
<font class="normal">Kategori</font><br>
<select name="parent" class="input">
<?php
include_once('../inc.config.php');
mysql_connect($cfg['mysql']['host'],$cfg['mysql']['username'],$cfg['mysql']['password']);
mysql_select_db($cfg['mysql']['database']);
$query = mysql_query("SELECT * FROM vare ORDER BY type ASC");
if (mysql_num_rows($query) > 0) {
while ($row = mysql_fetch_assoc($query)) {
echo '<option value='.$row['id'].'>'.$row['type'].'</option>';
}
}
?>
</select><br>
<font class="normal">Ny</font><br>
<select name="ny" class="input">
<option value=''></option>
<option value='NY'>Ja</option>
<option value=''>Nej</option>
</select><br>
<font class="normal">Billede</font><br>
<input type="file" name="image" style="width: 248px" class="input2"><br>
<font class="normal">Beskrivelse</font><br><input class="input" type="text" name="beskrivelse" style="width: 200px"><br>
<font class="normal">På lager</font><br>
<select name="status" class="input">
<option value='admin/img/ukendt.jpg alt=Ukendt'></option>
<option value='admin/img/ja.jpg alt=Ja'>Ja</option>
<option value='admin/img/nej.jpg alt=Nej'>Nej</option>
</select><br>
<font class="normal">Pris</font><br><input class="input" type="text" name="pris" style="width: 200px"><br>
<br>
// HER SKAL PARENT2 VÆRE LIG MED ID PÅ VAREGRUPPEN SOM DEN VALGTE KATEGORI LIGGER UNDER
<br>
<input type="hidden" name="parent2" value="2">
<input type="submit" value="Post" class="input">
</form>
</body>
</html>
------------------------------------------------------------------------------
Og min form.handle.php ser ud som følgende:
------------------------------------------------------------------------------
<?php
include('../inc.config.php');
mysql_connect($cfg['mysql']['host'],$cfg['mysql']['username'],$cfg['mysql']['password']);
mysql_select_db($cfg['mysql']['database']);
if ($_POST['referer'] == 'post_varegruppe') {
mysql_query("INSERT INTO varegruppe (navn) VALUES ('$_POST[navn]')") or die(mysql_error());
}
if ($_POST['referer'] == 'post_kategori') {
mysql_query("INSERT INTO vare (type, parent) VALUES ('$_POST[type]', '$_POST[parent]')") or die(mysql_error());
}
//define a maxim size for the uploaded images in Kb
define ("MAX_SIZE","100");
//This function reads the extension of the file. It is used to determine if the file is an image by checking the extension.
function getExtension($str) {
$i = strrpos($str,".");
if (!$i) { return ""; }
$l = strlen($str) - $i;
$ext = substr($str,$i+1,$l);
return $ext;
}
//This variable is used as a flag. The value is initialized with 0 (meaning no error found)
//and it will be changed to 1 if an errro occures.
//If the error occures the file will not be uploaded.
$errors=0;
//checks if the form has been submitted
if ($_POST['referer'] == 'post_vare') {
{
//reads the name of the file the user submitted for uploading
$image=$_FILES['image']['name'];
//if it is not empty
if ($image)
{
//get the original name of the file from the clients machine
$filename = stripslashes($_FILES['image']['name']);
//get the extension of the file in a lower case format
$extension = getExtension($filename);
$extension = strtolower($extension);
//if it is not a known extension, we will suppose it is an error and will not upload the file,
//otherwise we will do more tests
if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif"))
{
//print error message
echo '<h1>Unknown extension!</h1>';
$errors=1;
}
else
{
//get the size of the image in bytes
//$_FILES['image']['tmp_name'] is the temporary filename of the file
//in which the uploaded file was stored on the server
$size=filesize($_FILES['image']['tmp_name']);
//compare the size with the maxim size we defined and print error if bigger
if ($size > MAX_SIZE*1024)
{
echo '<h1>You have exceeded the size limit!</h1>';
$errors=1;
}
//we will give an unique name, for example the time in unix time format
$image_name=time().'.'.$extension;
//the new name will be containing the full path where will be stored (images folder)
$newname="images/".$image_name;
//we verify if the image has been uploaded, and print error instead
$copied = copy($_FILES['image']['tmp_name'], $newname);
if (!$copied)
{
echo '<h1>Copy unsuccessfull!</h1>';
$errors=1;
}}}}
//If no errors registred, print the success message
if($_POST['referer'] == 'post_vare' && !$errors)
{
mysql_query("INSERT INTO kategori (name, ny, billede, beskrivelse, status, pris, parent, parent2) VALUES ('$_POST[name]', '$_POST[ny]', '$newname', '$_POST[beskrivelse]', '$_POST[status]', '$_POST[pris]', '$_POST[parent]', '$_POST[parent2]')") or die(mysql_error());
echo "<h1>File Uploaded Successfully! Try again!</h1>";
}
}
?>
