Formatted and fix for mysql_error()
<?php
include(DIRNAME(__FILE__) . '/globals.php');
switch ($_GET['action']) {
case 'adddo':
add_to_do();
break;
case 'adddosub':
add_to_sub();
break;
default:
a_home();
break;
}
function a_home()
{
global $ir, $userid, $h, $c;
if ($ir['user_level'] > 1) {
$sql = "SELECT n.* FROM needsdone n ORDER BY status";
echo "<table width='65%'><tr><th>List</th><th>Status</th></tr>";
$q = $db->query($sql);
while ($r = $db->fetch_rows($q)) {
echo "<tr align='center'><td>{$r['doname']}</td><td>";
if ($r['status'] == 'Complete') {
echo "<font color='green'>{$r['status']}<\font>";
} else if ($r['status'] == 'Started') {
echo "<font color='yellow'>{$r['status']}<\font>";
} else {
echo "<font color='Red'>{$r['status']}<\font>";
}
Echo "</td></tr>";
}
echo "<tr><th colspan='2' align='center'><a href='todo.php?action=adddo'>Add To List</a></th></tr></table>";
} else if ($ir['user_level'] == 1) {
echo "You\'re not allowed here. <a href='index.php'> Back </a>";
}
}
function add_to_do()
{
echo "<table><tr><th>Add To The To Do List<\th><\tr>
<tr><td align='center'><form action='todo.php?action=adddosub' method='post'>
Name: <input type='text' name='name' /><br />
Status: <select type='dropdown' name='status'>
<option value='Not Started'>Not Started</option>
<option value='Started'>Started</option>
<option value='Complete'>Complete</option></select><br/>
<input type='submit' value='Add To List' /></form>";
}
function add_to_sub()
global $ir, $userid, $h, $c ;
{
if ($_POST['name'] == "") {
echo "You did not fill out the form correctly";
} else if ($_POST['status'] == "") {
echo "You did not fill out the form correctly";
} else {
$_POST['name'] = $db->escape($_POST['name']);
$_POST['status'] = $db->escape($_POST['status']);
$db->query("INSERT INTO needsdone VALUES ('{$_POST['name']}', '{$_POST['status']}')") or die($db->error());
echo "Added to the to do list!<br/><Font color='grey'>~</font> <a href='todo.php'>back</a>";
}
}
$h->endpage();
?>