My Little Scripts - item-shopping-cart-edit.php - PHP ASP Scripts, JavaScript, HTML

<?
include("db.php");

$UserName = "";
$PassWord = "";
$isLogged = true;

if(isset($HTTP_COOKIE_VARS["UserName"]) &&
   isset($HTTP_COOKIE_VARS["PassWord"]))
        {
        $UserName = $HTTP_COOKIE_VARS["UserName"];
        $PassWord = $HTTP_COOKIE_VARS["PassWord"];
        }

if(mysql_connect($db_host, $UserName, $PassWord) === false ||
  ($UserName == "" || $PassWord == ""))
  $isLogged = false;
else
  mysql_select_db($db_name);

$item_id = $HTTP_POST_VARS["id"];
//$item_id gets used as a flag for when a new item is created.
if($item_id != "" && $isLogged == true)
  {
  $name = $HTTP_POST_VARS["name"];
  $price = $HTTP_POST_VARS["price"];
  $summary = $HTTP_POST_VARS["summary"];
  $description = $HTTP_POST_VARS["description"];
  $ordre = $HTTP_POST_VARS["ordre"];
  if($ordre == "")
     $ordre = "0";

  $update = "update items set ordre = ordre + 1 where ordre >= " . $ordre;
  mysql_query($update);

  $insert = "insert into items (name, price, summary, description, ordre) values (" .
            "'" . $name . "', " .
            $price . ", " .
            "'" . $summary . "', " .
            "'" . $description . "', " .
            $ordre . ")";

  mysql_query($insert);

  $item_id = mysql_insert_id();

  if(isset($HTTP_POST_FILES))
    {
    if(is_uploaded_file($HTTP_POST_FILES["thumbnail"]["tmp_name"]))
      {
      $file_handle = fopen($HTTP_POST_FILES["thumbnail"]["tmp_name"], "rb");
      $thumbnail = $HTTP_POST_FILES["thumbnail"]["name"];
      $file_bytes = addslashes(fread($file_handle,
                                     filesize($HTTP_POST_FILES["thumbnail"]["tmp_name"])));

      $update = "update items set " .
                "thumbnail = '" . $file_bytes . "' " .
                "where id = " . $item_id;
      mysql_query($update);

      unlink($HTTP_POST_FILES["thumbnail"]["tmp_name"]);
      }

    if(is_uploaded_file($HTTP_POST_FILES["image"]["tmp_name"]))
      {
      $file_handle = fopen($HTTP_POST_FILES["image"]["tmp_name"], "rb");
      $image = $HTTP_POST_FILES["image"]["name"];
      $file_bytes = addslashes(fread($file_handle,
                                     filesize($HTTP_POST_FILES["image"]["tmp_name"])));

      $update = "update items set " .
                "image = '" . $file_bytes . "' " .
                "where id = " . $item_id;
      mysql_query($update);

      unlink($HTTP_POST_FILES["image"]["tmp_name"]);
      }
    }
  }

$select = "select id from items order by ordre";
$ids = mysql_query($select);
while(($id = mysql_fetch_assoc($ids)) && $isLogged == true)
     {
     $item_id = $HTTP_POST_VARS["id_" . $id["id"]];
     //If the item was modified, save it.
     if($item_id != "" && $item_id > 0)
       {
       $name = $HTTP_POST_VARS["name_" . $id["id"]];
       $price = $HTTP_POST_VARS["price_" . $id["id"]];
       $summary = $HTTP_POST_VARS["summary_" . $id["id"]];
       $description = $HTTP_POST_VARS["description_" . $id["id"]];
       $ordre = $HTTP_POST_VARS["ordre_" . $id["id"]];

       $update = "update items set " .
                 "name = '" . $name . "', " .
                 "price = " . $price . ", " .
                 "summary = '" . $summary . "', " .
                 "description = '" . $description . "', " .
                 "ordre = " . $ordre . " " .
                 "where id = " . $item_id;

       mysql_query($update);

       //Were any files uploaded?
       if(isset($HTTP_POST_FILES))
         {
         if(is_uploaded_file($HTTP_POST_FILES["thumbnail_" . $item_id]["tmp_name"]))
           {
           $file_handle = fopen($HTTP_POST_FILES["thumbnail_" . $item_id]["tmp_name"], "rb");
           $thumbnail = $HTTP_POST_FILES["thumbnail_" . $item_id]["name"];
           $file_bytes = addslashes(fread($file_handle,
                                          filesize($HTTP_POST_FILES["thumbnail_" . $item_id]["tmp_name"])));

           $update = "update items set " .
                     "thumbnail = '" . $file_bytes . "' " .
                     "where id = " . $item_id;
           mysql_query($update);

           unlink($HTTP_POST_FILES["thumbnail_" . $item_id]["tmp_name"]);
           }

         if(is_uploaded_file($HTTP_POST_FILES["image_" . $item_id]["tmp_name"]))
           {
           $file_handle = fopen($HTTP_POST_FILES["image_" . $item_id]["tmp_name"], "rb");
           $image = $HTTP_POST_FILES["image_" . $item_id]["name"];
           $file_bytes = addslashes(fread($file_handle,
                                          filesize($HTTP_POST_FILES["image_" . $item_id]["tmp_name"])));

           $update = "update items set " .
                     "image = '" . $file_bytes . "' " .
                     "where id = " . $item_id;
           mysql_query($update);

           unlink($HTTP_POST_FILES["image_" . $item_id]["tmp_name"]);
           }
         }
       }

     //Delete items.
     if($item_id != "" && $item_id < 0)
       {
       $delete = "delete from items where id = " . (-$item_id);

       mysql_query($delete);

       unlink("./images/item_" . (-$item_id) . "_thumbnail.jpg");
       unlink("./images/item_" . (-$item_id) . "_image.jpg");
       }
     }

$select = "select * from items order by ordre";
$items = mysql_query($select);
?>
<html>

<head>
<title>item shopping cart edit</title>

<script>
function NewImage(id)
         {
         var File;
         var Image;
         var Save;

         if(id != null)
           {
           eval('File = document.cart.image_' + id + ';');
           eval('Image = document.images.image_file_' + id + ';');
           }
         else
           {
           File = document.cart.image;
           Image = document.images.image_file;
           }

         if(File.value != '')
           {
           Image.src = File.value;
           save_item(id);
           }
         }

function NewThumb(id)
         {
         var File;
         var Image;
         var Save;

         if(id != null)
           {
           eval('File = document.cart.thumbnail_' + id + ';');
           eval('Image = document.images.thumbnail_file_' + id + ';');
           }
         else
           {
           File = document.cart.thumbnail;
           Image = document.images.thumbnail_file;
           }

         if(File.value != '')
           {
           Image.src = File.value;
           save_item(id);
           }
         }

function save_item(id)
         {
         if(id != null)
            eval('document.cart.id_' + id + '.value = ' + id + ';');
         else
            document.cart.id.value = 0;
         }

function delete_item(id)
         {
         eval('document.cart.id_' + id + '.value = ' + (-id) + ';');
         document.cart.submit();
         }

function logout()
         {
         document.cookie = 'UserName=';
         document.cookie = 'PassWord=';

         document.cart.submit();
         }
</script>
</head>

<body <? if($HTTP_POST_VARS["id"] != "") { ?>onload="document.cart.ordre.value = ''; document.cart.submit();"<? } ?>>
<form enctype="multipart/form-data" method="post" name="cart">
<input type="hidden" name="ordre" value="<?= $HTTP_POST_VARS["ordre"] ?>" />

<table align="center">

<? if((mysql_num_rows($items) == 0 || $HTTP_POST_VARS["ordre"] != "")
      && $HTTP_POST_VARS["id"] == "" && $isLogged == true) { ?>

<input type="hidden" name="id" />

<tr>
<td valign="top">
    <table>
    <tr>
    <td>item name: </td>
    <td><input type="text" name="name" onchange="save_item();" /></td>
    </tr>

    <tr>
    <td>price: </td>
    <td><input type="text" name="price" onchange="save_item();" /></td>
    </tr>

    <tr>
    <td>summary: </td>
    <td><textarea name="summary" onchange="save_item();"></textarea></td>
    </tr>

    <tr>
    <td>description: </td>
    <td><textarea name="description" onchange="save_item();"></textarea></td>
    </td>
    </tr>

    <tr>
    <td>
    <input type="button" value="save"
           onclick="document.cart.submit();"/>

    &nbsp;&nbsp;
    <input type="button" value="cancel"
           onclick="document.cart.ordre.value = '';
                    document.cart.id.value = '';
                    document.cart.submit();"/>

    &nbsp;&nbsp;
    <input type="button" value="log out"
           onclick="logout();" />

    <br /><br /></td>
    </tr>
    </table>
</td>

<td align="right" valign="top" nowrap>
thumbnail: <input type="file" name="thumbnail" onchange="NewThumb();" />
<br />
<img name="thumbnail_file" />
<br />
image: <input type="file" name="image" onchange="NewImage();" />
<br />
<img name="image_file" />
</td>
</tr>

<? } ?>

<?
while(($item = mysql_fetch_assoc($items)) && ($HTTP_POST_VARS["id"] == null) && ($isLogged == true)) {

$item_id = $item["id"];
$name = $item["name"];
$price = $item["price"];
$summary = $item["summary"];
$description = $item["description"];
$thumbnail = $item["thumbnail"];
$image = $item["image"];
$ordre = $item["ordre"];

if(is_dir("images/") == false)
   mkdir("images/", 0755);

$thumbnail_file = "images/item_" . $item_id . "_thumbnail.jpg";
if($thumbnail != "")
  {
  $thumbnail_file_handle = fopen("./" . $thumbnail_file, "wb");
  fwrite($thumbnail_file_handle, $thumbnail, strlen($thumbnail));
  chmod("./" . $thumbnail_file, 0644);
  }

$image_file = "images/item_" . $item_id . "_image.jpg";
if($image != "")
  {
  $image_file_handle = fopen("./" . $image_file, "wb");
  fwrite($image_file_handle, $image, strlen($image));
  chmod("./" . $image_file, 0644);
  }
?>

<input type="hidden" name="id_<?= $item_id ?>" />

<tr>
<td valign="top">
    <table>
    <tr>
    <td>item name: </td>
    <td><input type="text" name="name_<?= $item_id ?>" value="<?= $name ?>"
               onchange="save_item(<?= $item_id ?>);" /></td>
    </tr>

    <tr>
    <td>price: </td>
    <td><input type="text" name="price_<?= $item_id ?>" value="<?= $price ?>"
               onchange="save_item(<?= $item_id ?>);" /></td>
    </tr>

    <tr>
    <td>summary: </td>
    <td><textarea name="summary_<?= $item_id ?>"
                  onchange="save_item(<?= $item_id ?>);"><?= $summary  ?></textarea></td>
    </tr>

    <tr>
    <td>description: </td>
    <td><textarea name="description_<?= $item_id ?>"
                  onchange="save_item(<?= $item_id ?>);"><?= $description  ?></textarea></td>
    </tr>

    <tr>
    <td>order: </td>
    <td><input type="text" name="ordre_<?= $item_id ?>" value="<?= $ordre ?>"
               onchange="save_item(<?= $item_id ?>);" /></td>
    </tr>

    <tr>
    <td>
    <input type="button" value="add a new item"
           onclick="document.cart.ordre.value = <?= $ordre + 1 ?>;
                    document.cart.submit();"/>

    &nbsp;&nbsp;
    <input type="submit" value="save" />

    &nbsp;&nbsp;
    <input type="button" value="delete"
           onclick="delete_item(<?= $item_id ?>);" />

    &nbsp;&nbsp;
    <input type="button" value="log out"
           onclick="logout();" />

    <br /><br />
    </td>
    </tr>
    </table>
</td>

<td align="right" valign="top" nowrap>
thumbnail: <input type="file" name="thumbnail_<?= $item_id ?>" onchange="NewThumb(<?= $item_id ?>);" />
<br />
<img name="thumbnail_file_<?= $item_id ?>" src="<?= $thumbnail_file ?>" />
<br />
image: <input type="file" name="image_<?= $item_id ?>" onchange="NewImage(<?= $item_id ?>);" />
<br />
<img name="image_file_<?= $item_id ?>" src="<?= $image_file ?>" />
<br />
</td>
</tr>

<? } ?>

<? if($isLogged == false) { ?>
<tr>
<td>User Name </td>
<td><input type="text" name="User" /></td>
</tr>

<tr>
<td>Password</td>
<td><input type="password" name="Pass" /></td>
</tr>

<tr>
<td colspan="2" align="right">
<input type="button" value="log in"
       onclick="document.cookie = 'UserName=' + document.cart.User.value;
                document.cookie = 'PassWord=' + document.cart.Pass.value;
                document.cart.submit();">
</td>
</tr>
<? } ?>

</table>
</form>
</body>
</html>

create table items
(
id int primary key AUTO_INCREMENT,
name varchar(255),
price decimal(6,2),
summary tinytext,
description text,
thumbnail blob,
image blob,
ordre int
);

create table orders
(
id int primary key AUTO_INCREMENT,
item_id int,
transaction_id int,
quantity int
);

create table transactions
(
id int primary key AUTO_INCREMENT,
date date
);

ITEM-SHOPPING-CART-EDIT.PHP