-
Notifications
You must be signed in to change notification settings - Fork 0
/
costs_house_delete.php
87 lines (78 loc) · 2.77 KB
/
costs_house_delete.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Nebenkostenabrechnung - Kosten pro Haus löschen</title>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta name="author" content="Felix Horn">
<meta http-equiv="language" content="de">
<link rel="stylesheet" type="text/css" href="styles.css">
</head>
<?php
include 'inc/dbconnect.inc.php';
$result = FALSE;
/*
* Check $_GET['param'] */
if ( !(ctype_digit($_GET['param'])) ) {
exit('Error: Param');
}
if ($_POST) {
/*
* Check input */
if ( !(ctype_digit($_POST['year'])) || $_POST['year'] < 1970 || $_POST['year'] > 2100 || strlen($_POST['year']) != 4) {
exit('Fehler: Jahr');
}
$post_usage = mysqli_real_escape_string($db, $_POST['usage']);
if ( !(is_numeric($_POST['amount'])) ) {
if ( ctype_digit(str_replace(',', '', $_POST['amount'])) ) {
$amount = str_replace(',', '.', $_POST['amount']);
} else {
exit('Fehler: Kosten');
}
} else {
$amount = $_POST['amount'];
}
$query = 'DELETE FROM
costs_house
WHERE
costs_house.id = ' . $_GET['param'];
$result = mysqli_real_query($db, $query);
}
$query_costs = 'SELECT
costs_house.year, costs_house.usage, costs_house.amount
FROM
costs_house
WHERE costs_house.id =' . $_GET['param'];
$result_costs = mysqli_query($db, $query_costs);
mysqli_close($db);
echo '<body';
if ($result) {
echo ' onload="window.opener.location.href=\'costs_house.php\'; window.close();"';
}
echo '>';
echo '<div class="head">
<h1>Kosten pro Haus löschen</h1>
</div>
<div class="inhalt">
<form action="costs_house_delete.php?param=' . $_GET['param'] .'" method="post">';
while($row_costs = mysqli_fetch_object($result_costs)) {
echo '<p>
<label for="year">Jahr (JJJJ):</label>
<input type="text" name="year" class="feld" value="' . $row_costs->year . '"/>
</p>';
echo '<p>
<label for="usage">Zweck:</label>
<input type="text" name="usage" class="feld" value="' . $row_costs->usage . '"/>
</p>';
echo '<p>
<label for="amount">Kosten:</label>
<input type="text" name="amount" class="feld" value="' . number_format($row_costs->amount, 2, ',', '') . '"/>
</p>';
}
?>
<p style="text-align: center">
<input type="submit" value="Löschen" />
</p>
</form>
</div>
</body>
</html>