Der Inhalt der Datei (labdeletesubcategories.php)

<?php
session_start();
if(isset($_POST['send'])){
	if(isset($_POST["activ"])) {
		$activ=1;	
	}else {
		$activ=0;
	}
	$catid = get_cgi_param ("catid", 0);
	if($catid){
		$sqlstr = "delete from lab_tblsubcategories where id = " . $_POST["oripn"]; 
		$res = mysql_query($sqlstr) or die ("no connection to the database ".mysql_error());
		$num = mysql_affected_rows();
		if ($num<=0) {
	   	echo "<div id='page-wrapper'><div class='container-fluid'>";
			echo "<div class='bg-darkred fg-white'>";
			echo "No record has been added to the database!";		
			echo "</div>";
			echo "</div></div>";	
		} 	
		mysql_free_result($res);
	} else {
	   echo "<div id='page-wrapper'><div class='container-fluid'>";
		echo "<div class='bg-darkred fg-white'>";
		echo "You must selected a Category!";		
		echo "</div>";
		echo "</div></div>";		
	}
}
if (isset($_POST["selectID"])) { 
	$sqlstr = "select * from lab_tblsubcategories where id = " . $_POST["selectID"];
	$res = mysql_query($sqlstr);
	$row = mysql_fetch_assoc($res); 
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-6'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>Delete subcategory - Form</h2>
	     </div>
	     <div class='panel-body'>";
	echo "<form method='post' enctype='multipart/form-data'  action='".$url."?section=DeleteSubcategories'>";
	
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Id:</label>";
	echo "<input type='text' name='id' class='form-control' value='" . $_POST["selectID"] . "' disabled />"; 
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Name:</label>";
	echo "<input type='text' name='name' class='form-control' value='".$row['name']."'>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Category name:</label>";
	echo "<select name='catid' class='form-control' data-role='select'>";
	   $sqlstr = "SELECT id, name FROM lab_tblcategories ORDER BY name ASC";
	   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
	   while (list ($catid, $name) = mysql_fetch_row ($res)) {
	      echo ("<option value=\"$catid\">$name (catid: $catid)</option>\n");
	   }
	echo "</select>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Link:</label>";
	echo "<input type='text' name='link' class='form-control' value='".$row['link']."'>";
	echo "</div>";	
	if ($row['activ'] ==1){
		echo "<div class='form-group'>";
		echo "<label>Activ: </label>";
		echo "<input type='checkbox' name='activ' checked>";
		echo "</div>";
	} else {
		echo "<div class='form-group'>";
		echo "<label>Activ: </label>";
		echo "<input type='checkbox' name='activ'>";
		echo "</div>";
	}
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Description:</label>";
	echo "<textarea  name='description' class='form-control' data-role='textarea'>".$row['description']."</textarea>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<input type='hidden' name='oripn' value='" . $_POST["selectID"] . "'  />";	
	   echo "<button type='submit' name='send' class='btn btn-primary'>
			<span class='fa  fa-edit'></span> Delete the record</button>";
	echo "</div>";
	echo "</form>";    
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
	mysql_free_result($res);
} else {
	display_delete_subcategories();
}

function display_delete_subcategories(){
	
   $sqlstr = "select * from lab_tblsubcategories ORDER BY id ";
   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
   $num = mysql_num_rows($res);
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-12'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>Delete the database: <small>lab_tblsubcategories</small></h2>
	     </div>
	     <div class='panel-body'>";
	echo "<form method='post' enctype='multipart/form-data' action='".$url."?section=DeleteSubcategories'>";
	echo "<table class='table'>";
	echo "<thead>";
	echo "<tr><th>Id</th>";
	echo "<th>Name</th>";
	echo "<th>Catid</th>";
	echo "<th>Link</th>";
	echo "<th>Activ</th>";
	echo "<th>Description</th>";
	echo "<th>Select</th>";
	echo "</tr>";
   echo "</thead><tbody>";  
   $n=1;
   while ($row = mysql_fetch_assoc($res)) {     
		echo "<tr>";
      echo "<td>" . $row["id"] . "</td>";
      echo "<td>" . $row["name"] . "</td>";
      echo "<td>" . $row["catid"] . "</td>";
		echo "<td>" . $row["link"] . "</td>";
		echo "<td>" . $row["activ"] . "</td>";
		echo "<td>" . $row["description"] . "</td>";
		echo "<td><input type='checkbox' name='selectID' value='" . $row["id"] . "' data-role='checkbox'></td>"; 
		echo "</tr>";                    
   } 
   echo "</tbody></table>";
   echo "<button type='submit' class='btn btn-primary'>
				<span class='fa  fa-edit'></span> View the record</button>";
   echo "</form>"; 
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
   mysql_free_result($res); 
}
?>

Der Inhalt der Datei (labinsertarticles.php)

<?php
session_start();
if(isset($_POST['send'])){
	$subcatid = get_cgi_param ("subcatid", 0);
	$number = $_POST['number'];
	$name = $_POST['name'];
	$price = $_POST['price'];
	$description = $_POST['description'];
	$modified = date('Y-m-d', strtotime(str_replace('.', '-', $_POST['modified'])));
	
	
	$file = $_FILES['pic']['name']; // Dies hab ich noch nicht getestet, da ich den Namen immer nach datum und user id abgespeichert hab.
	$file = str_replace(" ", "_", "$file");
	$file = htmlentities($file); // Mit leerzeichen -> _ hab ich auch noch nicht getestet, sollte aba klappen
	$file_type = GetImageSize($_FILES['pic']['tmp_name']);
	if ( (($_FILES["pic"]["type"] == "image/gif") || 
     ($_FILES["pic"]["type"] == "image/jpeg") || 
     ($_FILES["pic"]["type"] == "image/png")) && 
     ($_FILES["file"]["size"] < 2048000) ) {  // Dateitype nur gif, jpeg und png und max. Größe in bytes 
      move_uploaded_file($_FILES['pic']['tmp_name'], "uploads/temp-$file");
      $file        = "uploads/temp-$file";
      $target    	 = "uploads/$file";
      $max_width   = "800"; //Breite ändern
      $max_height  = "800"; //Höhe ändern
      $quality     = "90"; //Qualität ändern (max. 100)
      $src_img     = imagecreatefromjpeg($file);
      $picsize     = getimagesize($file);
      $src_width   = $picsize[0];
      $src_height  = $picsize[1];
		if($src_width > $src_height){
			if($src_width > $max_width){
	        $convert = $max_width/$src_width;
	        $dest_width = $max_width;
	        $dest_height = ceil($src_height*$convert);
	      } else {
	        $dest_width = $src_width;
	        $dest_height = $src_height;
	      }
	    } else {
	      if($src_height > $max_height) {
	        $convert = $max_height/$src_height;
	        $dest_height = $max_height;
	        $dest_width = ceil($src_width*$convert);
	      } else {
	        $dest_height = $src_height;
	        $dest_width = $src_width;
	      }     
      }
		$dst_img = imagecreatetruecolor($dest_width,$dest_height);
      imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $dest_width, $dest_height, $src_width, $src_height);
      imagejpeg($dst_img, "$target", $quality); 
				
		$sqlstr="INSERT INTO lab_tblarticles(number, name, pic, subcatid, modified, price, description) VALUES('$number', '$name', '$file', '$subcatid',  '$modified', '$price', '$description')";$res = mysql_query($sqlstr) or die ("erroror inserting data ".mysql_error()); 
    	$num = mysql_affected_rows(); 
		if ($num>0) { 
			echo "<div id='page-wrapper'><div class='container-fluid'>";
			echo "<div class='bg-darkgreen fg-white'>";
			echo "record has been added to the database!";		
			echo "</div>";
			echo "</div></div>";		     
		} else { 
			echo "<div id='page-wrapper'><div class='container-fluid'>";
			echo "<div class='bg-darkgreen fg-white'>";
			echo "No record has been added to the database!";		
			echo "</div>";
			echo "</div></div>";	
		} 
		mysql_free_result($res);
	} else {
		echo "<div id='page-wrapper'><div class='container-fluid'>";
		echo "<div class='bg-darkgreen fg-white'>";
		echo "File types may only be gif, jpeg or png and the picture may not be larger than 2MB!";		
		echo "</div>";
		echo "</div></div>";
	}
	display_list_articles();
}else {
	$sqlstr = "select * from lab_tblsubcategories";
	$res = mysql_query($sqlstr);
	$row = mysql_fetch_assoc($res); 
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-6'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>Insert article - Form</h2>
	     </div>
	     <div class='panel-body'>";
	echo "<form method='post' enctype='multipart/form-data' action='".$url."?section=InsertArticles'>";
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputNumber'>Number:</label>";
	echo "<input type='text' name='number' class='form-control' id='inputNumber' placeholder='Enter article number'>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputName'>Name:</label>";
	echo "<input type='text' name='name' class='form-control' id='inputName' placeholder='Enter article name'>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputPrice'>Price:</label>";
	echo "<input type='text' name='price' class='form-control' id='inputPrice' placeholder='Enter article price'>";
	echo "</div>";	
	
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputSubcategory'>Subcategory name:</label>";
	echo "<select name='subcatid' class='form-control' id='inputSubcategory' data-role='select'>";
	   $sqlstr = "SELECT id, name FROM lab_tblsubcategories ORDER BY name ASC";
	   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
	   while (list ($subcatid, $name) = mysql_fetch_row ($res)) {
	      echo ("<option value=\"$subcatid\">$name (subatid: $subcatid)</option>\n");
	   }
	echo "</select>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputDate'>Date:</label>";
	echo "<input type='text' name='modified' class='form-control' id='inputDate' data-format='%d %B %Y'>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label' for='inputDescription'>Description:</label>";
	echo "<textarea  name='description' class='form-control' id='inputDescription' data-role='textarea'></textarea>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<input type='file' name='pic' data-role='file' data-caption='Choose file' required  /></p>";
	echo "<button type='submit' name='send' class='btn btn-primary'>
			<span class='fa  fa-send'></span> Insert the record</button>";
	echo "</div>";
	echo "</form>";    
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
	mysql_free_result($res);
}
function display_list_articles(){
   $sqlstr = "select * from lab_tblarticles ORDER BY id ";
   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
   $num = mysql_num_rows($res);
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-12'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>List the database: <small>lab_tblarticles</small></h2>
	     </div>
	     <div class='panel-body'>";
	echo "<table class='table'>";
	echo "<thead>";
	echo "<tr><th>Id</th>";
	echo "<th>Number</th>";
	echo "<th>Name</th>";
	echo "<th>Subcatid</th>";
	echo "<th>Date</th>";
	echo "<th>Pic</th>";
	echo "<th>Price</th>";
	echo "<th>Description</th>";
	echo "<th>Select</th>";
	echo "</tr>";
   echo "</thead><tbody>";  
   while ($row = mysql_fetch_assoc($res)) {
		echo "<tr>";
      echo "<td>" . $row["id"] . "</td>";
      echo "<td>" . $row["number"] . "</td>";
      echo "<td>" . $row["name"] . "</td>";
      echo "<td>" . $row["subcatid"] . "</td>";
		echo "<td>" . date('d.m.Y', strtotime($dsatz["modified"])) . "</td>";
      echo "<td>" . $row["price"] . "&nbsp;&euro;</td>";
		echo "<td>" . $row["description"] . "</td>";
		echo "<td>" . "<img style='float: left; margin-right: 25px; margin-bottom: 10px; width:50px; height:50px;' src='uploads/" .  $row['pic'] ."'></td>";
		echo "</tr>";          
   } 
   echo "</tbody></table>";
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
   mysql_free_result($res); 
}
?>

Der Inhalt der Datei (labeditarticles.php)

<?php
session_start();
if(isset($_POST['send'])){
	$subcatid = get_cgi_param ("subcatid", 0);
	$number = $_POST['number'];
	$name = $_POST['name'];
	$price = $_POST['price'];
	$description = $_POST['description'];
	$modified = date('Y-m-d', strtotime(str_replace('.', '-', $_POST['modified'])));
	
	$file = $_FILES['pic']['name']; // Dies hab ich noch nicht getestet, da ich den Namen immer nach datum und user id abgespeichert hab.
	$file = str_replace(" ", "_", "$file");
	$file = htmlentities($file); // Mit leerzeichen -> _ hab ich auch noch nicht getestet, sollte aba klappen
	$file_type = GetImageSize($_FILES['pic']['tmp_name']);
	if ( (($_FILES["pic"]["type"] == "image/gif") || 
     ($_FILES["pic"]["type"] == "image/jpeg") || 
     ($_FILES["pic"]["type"] == "image/png")) && 
     ($_FILES["file"]["size"] < 2048000) ) {  // Dateitype nur gif, jpeg und png und max. Größe in bytes 
      move_uploaded_file($_FILES['pic']['tmp_name'], "uploads/temp-$file");
      $file        = "uploads/temp-$file";
      $target    	 = "uploads/$file";
      $max_width   = "800"; //Breite ändern
      $max_height  = "800"; //Höhe ändern
      $quality     = "90"; //Qualität ändern (max. 100)
      $src_img     = imagecreatefromjpeg($file);
      $picsize     = getimagesize($file);
      $src_width   = $picsize[0];
      $src_height  = $picsize[1];
		if($src_width > $src_height){
			if($src_width > $max_width){
	        $convert = $max_width/$src_width;
	        $dest_width = $max_width;
	        $dest_height = ceil($src_height*$convert);
	      } else {
	        $dest_width = $src_width;
	        $dest_height = $src_height;
	      }
	    } else {
	      if($src_height > $max_height) {
	        $convert = $max_height/$src_height;
	        $dest_height = $max_height;
	        $dest_width = ceil($src_width*$convert);
	      } else {
	        $dest_height = $src_height;
	        $dest_width = $src_width;
	      }     
      }
		$dst_img = imagecreatetruecolor($dest_width,$dest_height);
      imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $dest_width, $dest_height, $src_width, $src_height);
      imagejpeg($dst_img, "$target", $quality); 
				
		$sqlstr = "update lab_tblarticles set "
             . " number = '" . $_POST["number"] . "',"
             . " name = '" . $_POST["name"] . "',"
             . " pic = '" . $file . "'," 
             . " subcatid = '" . $subcatid.  "',"
             . " modified = '" . $modified.  "',"
             . " price = '" . $_POST["price"] . "',"        
             . " description = '" . $_POST["description"] . "'"
             . " where id = " . $_POST["oripn"]; 	
		
			$res = mysql_query($sqlstr) or die ("erroror inserting data ".mysql_error()); 
	    	$num = mysql_affected_rows($res); 
			if ($num>0) { 
	      	echo "<div id='page-wrapper'><div class='container-fluid'>";
				echo "<div class='bg-darkgreen fg-white'>";
				echo "record has been added to the database!";		
				echo "</div>";
				echo "</div></div>";		     
	 
			} else { 
		   	echo "<div id='page-wrapper'><div class='container-fluid'>";
				echo "<div class='bg-darkred fg-white'>";
				echo "No record has been added to the database!";		
				echo "</div>";
				echo "</div></div>";		
			} 
	} else {
   	echo "<div id='page-wrapper'><div class='container-fluid'>";
		echo "<div class='bg-darkred fg-white'>";
		echo "No record has been added to the database!";		
		echo "</div>";
		echo "</div></div>";	
	}
        mysql_free_result($res);
}
if (isset($_POST["selectID"])) { 
	$sqlstr = "select * from lab_tblarticles where id = " . $_POST["selectID"];
	$res = mysql_query($sqlstr);
	$row = mysql_fetch_assoc($res);
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-6'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>Edit article - Form</h2>
	     </div>
	     <div class='panel-body'>";
	echo "<form method='post' action='".$url."?section=EditArticles' enctype='multipart/form-data'>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Id:</label>";
	echo "<input type='text' name='id' class='form-control' value='" . $_POST["selectID"] . "' disabled />"; 
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Number:</label>";
	echo "<input type='text' name='number' class='form-control' value='".$row['number']."'>";
	echo "</div>";		
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Name:</label>";
	echo "<input type='text' name='name' class='form-control'  value='".$row['name']."'>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Subcategory name:</label>";
	echo "<select name='subcatid' class='form-control' data-role='select'>";
   $sqlstr = "SELECT id, name FROM lab_tblsubcategories ORDER BY name ASC";
   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
   while (list ($subcatid, $name) = mysql_fetch_row ($res)) {
      echo ("<option value=\"$subcatid\">$name (subcatid: $subcatid)</option>\n");
   }
	echo "</select>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Date:</label>";
	echo "<input type='text' name='modified' class='form-control'  value='".$row['modified']."' data-role='calendarpicker' data-format='%d %B %Y'>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Price:</label>";
	echo "<input type='text' name='price' class='form-control' value='".$row['price']."'>";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Image:</label>";
	echo "<img style='float: left; margin-right: 25px; margin-bottom: 10px; width:50px; height:50px;' src='" .  $row['pic'] ."'>";
	echo "<input type='file' name='pic' placeholder='load image' required />";
	echo "</div>";
	echo "<div class='form-group'>";
	echo "<label class='control-label'>Description:</label>";
	echo "<textarea  name='description' class='form-control' data-role='textarea'>".$row['description']."</textarea>";
	echo "</div>";	
	echo "<div class='form-group'>";
	echo "<input type='hidden' name='oripn' value='" . $_POST["selectID"] . "'  />";	
   echo "<button type='submit' name='send' class='btn btn-primary'>
			<span class='fa  fa-edit'></span> Edit the record</button>";
	echo "</div>";
	echo "</form>";    
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
	mysql_free_result($res);
	
}else {
	 display_edit_articles();
}
function display_edit_articles(){
   $sqlstr = "select * from lab_tblarticles ORDER BY id";
   $res = mysql_query($sqlstr) or die ("no connection to the database  ".mysql_error());
   $num = mysql_num_rows($res);
	echo "<div id='page-wrapper'><div class='container-fluid'>";
	echo "<div class='row'>
			<div class='col-md-12'>
			<div class='panel panel-primary'>	
	     <div class='panel-heading'>
	       <h2 class='panel-title'>Edit the database: <small>lab_tblarticles</small></h2>
	     </div>
	     <div class='panel-body'>";
	echo "<form method='post' enctype='multipart/form-data'  action='".$url."?section=EditArticles'>";
	echo "<table class='table'>";
	echo "<thead>";
	echo "<tr><th>Id</th>";
	echo "<th>Number</th>";
	echo "<th>Name</th>";
	echo "<th>Subcatid</th>";
	echo "<th>Date</th>";
	echo "<th>Pic</th>";
	echo "<th>Price</th>";
	echo "<th>Description</th>";
	echo "<th>Select</th>";
	echo "</tr>";
   echo "</thead><tbody>";  
   while ($row = mysql_fetch_assoc($res)) {     
		echo "<tr>";
      echo "<td>" . $row["id"] . "</td>";
      echo "<td>" . $row["number"] . "</td>";
      echo "<td>" . $row["name"] . "</td>";
		echo "<td>" . $row["subcatid"] . "</td>";
		echo "<td>" . date('d.m.Y', strtotime($row["modified"])) . "</td>";	  
		echo "<td><img style='float: left; margin-right: 25px; margin-bottom: 10px; width:50px; height:50px;' src='" .  $row['pic'] ."'></td>";
		echo "<td>" . $row['price'] . "</td>";
		echo "<td>" . $row["description"] . "</td>";
		echo "<td><input type='checkbox' name='selectID' value='" . $row["id"] . "' data-role='checkbox'></td>"; 
		echo "</tr>";                    
   } 
   echo "</tbody></table>";
   echo "<button type='submit' class='btn btn-primary'>
				<span class='fa  fa-edit'></span> View the record</button>";
   echo "</form>"; 
	echo "</div>";
	echo "</div>";
	echo "</div></div>";
	echo "</div></div>";
   mysql_free_result($res); 
}
?>