File: /var/www/vhosts/pgkdistribution.com.au/citisolar.com.au/gatehouse/query.php
<?php
include_once('db.php');
session_start();
if ($_SESSION['ref'] == 'procedit') {
if (strlen ($_SESSION['mysqlerr']) > 0) {
echo $_SESSION['mysqlerr']."<br/>Row not edited properly!";
}
}
$_SESSION['ref'] = 'search';
?>
<html>
<head>
</head>
<body>
<h2>Query Database</h2>
<h3><a href="index.php">Back to Home Page</a></h3>
<h3><a href="logout.php">Logout</a></h3>
<form name="searchForm" action="query.php" method="post">
<table>
<tr valign="top" height="20">
<td align="left">Field:</td>
<td><select name="field">
<?php
$result = mysqli_query($conn, "SELECT * FROM jobfields");
while ($row = mysqli_fetch_array($result)) {
echo "<option value=\"".$row{'jf_id'}."\">".$row{'jf_name'}."</option>";
}
?>
</td>
</tr>
<tr valign="top" height="20">
<td align="left">Value:</td>
<td><input type="text" name="value" size="50" maxlength="50"></td>
</tr>
</table>
<input type="submit" name="submitForm" value="Search" onclick="SubmitForm(); return false;" >
<input type="reset" name="resetForm" value="Reset">
</form>
<?php
if (isset($_POST['field']) && isset($_POST['value'])) {
$result = mysqli_query($conn, "SELECT * FROM jobfields WHERE jf_id = '".$_POST['field']."'");
while ($row = mysqli_fetch_array($result)) {
$fieldname = $row{'jf_name'};
}
$result = mysqli_query($conn, "SELECT * FROM jobs, tradesman, appliance WHERE jobs.".$fieldname." LIKE '%".$_POST['value']."%' AND jobs.tradesman = tradesman.trade_id AND jobs.appliance = appliance.app_id ORDER BY date DESC");
$count = 0;
while ($row = mysqli_fetch_array($result)) {
$count++;
if ($count == 1) {
echo "<table border='1' cellpadding='2' CELLSPACING='0'><tr><th>Date</th><th>SC Order</th><th>Address</th><th>Appliance</th><th>Codes</th><th>Tradesman</th><th>Invoice Number</th><th>Edit</th></tr>";
}
echo "<tr><td>".$row{'date'}."</td>";
echo "<td>".$row{'scorder'}."</td>";
echo "<td>".$row{'address'}."</td>";
echo "<td>".$row{'app_name'}."</td>";
echo "<td>".$row{'codes'}."</td>";
echo "<td>".$row{'trade_name'}."</td>";
echo "<td>".$row{'invoicenum'}."</td>";
echo "<td><a href='edit.php?date=".$row{'date'}."&scorder=".$row{'scorder'}."'>Edit Job</a></td></tr>";
}
if ($count > 0) {
echo "</table>";
}
}
?>
</body>
</html>