Sunda Cyber Army


* Sunda Cyber Army 2k17 *
Indonesia Defacer ~


Path : /home/dent/studentexams/itsang/
File Upload :
Current File : /home/dent/studentexams/itsang/details.php

<?php


//echo ($_REQUEST["id"]);

$host = "webdev.iyaclasses.com";
$userid = "dent_guest";
$userpw = "Acad276_Ttrojan_Dev2Ex@m";
$db = "dent_exam";


$mysql = new mysqli($host, $userid, $userpw, $db); //existing object/behavior in PHP

if ($mysql->connect_errno) {
    echo "ERROR in database connection";
    echo $mysql->connect_error;
    exit();
}

?>


<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Acad276 Practical Exam: Details</title>
    <style>
        .container {
            width:  800px;
            margin: auto;
        }
        h1 {
            margin: auto;
            text-align: center;
            background-color:   #900;
            color:  #FC0;
            height: 60px;
            line-height: 60px;
        }
        .details {
            border:     1px solid #990000;
            width:      600px;
            margin:     auto;
            margin-top: 20px;
            padding:    20px;
        }
        table {
            height: 300px;
            width:      100%;
        }
        table img {
            height: 300px;

        }
        img {
            width: 300px;

        }
        .label {
            text-align: right;
            width:      20%;
            padding:    3px 10px 3px;
        }
        .data {
            width: 40%;
        }
        .input>input, .input>select {
            width:  100%;
        }
        .nav-link{
            margin: 10px 0px;
            font-size: 14px;
        }
    </style>
</head>
<body>
<div class="container">
    <h1>Mobile Device Database: Details Page</h1>
    <div class="nav-link">
        <a href="search.php"><< Back to Search Page</a>
    </div>

    <div class="details">
        <table>
            <tr>
                <td rowspan="5" class="img">
                    <img src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQLSc5M0hh5A5s91IIVx16V05mno_XhawYhSZB1_wmlSpZHfbw2" class="img">
                </td>
                <td class="label">Name:</td>
                <td class="data"><strong><em>

                            <?php
                            $sql = "SELECT manufacturer, system, type, name, price
                        FROM devices, manufacturers, systems, types 
                        WHERE devices.manufacturer_id = manufacturers.manufacturer_id
                        AND devices.system_id = systems.system_id
                        AND devices.type_id = types.type_id
                        " . $_REQUEST["recordid"];

                            $results = $mysql ->query($sql);

                            $currentrow = $results -> fetch_assoc();

                            echo  $currentrow["name"];

                            ?> </em></strong></td>
            </tr>
            <tr>
                <td class="label">Price:</td>
                <td><strong>

                        <?php
                        $sql = "SELECT manufacturer, system, type, name, price
                        FROM devices, manufacturers, systems, types 
                        WHERE devices.manufacturer_id = manufacturers.manufacturer_id
                        AND devices.system_id = systems.system_id
                        AND devices.type_id = types.type_id
                        " . $_REQUEST["recordid"];;

                        $results = $mysql ->query($sql);

                        $currentrow = $results -> fetch_assoc();

                        echo  $currentrow["price"];

                        ?>
                    </strong></td>
            </tr>
            <tr>
                <td class="label">Manufacturer:</td>
                <td>
                    <?php
                    $sql = "SELECT manufacturer, system, type, name, price
                        FROM devices, manufacturers, systems, types 
                        WHERE devices.manufacturer_id = manufacturers.manufacturer_id
                        AND devices.system_id = systems.system_id
                        AND devices.type_id = types.type_id
                        " . $_REQUEST["recordid"];;

                    $results = $mysql ->query($sql);

                    $currentrow = $results -> fetch_assoc();

                    echo  $currentrow["manufacturer"];

                    ?>
                </td>
            </tr>
            <tr>
                <td class="label">System:</td>
                <td><?php
                    $sql = "SELECT manufacturer, system, type, name, price
                        FROM devices, manufacturers, systems, types 
                        WHERE devices.manufacturer_id = manufacturers.manufacturer_id
                        AND devices.system_id = systems.system_id
                        AND devices.type_id = types.type_id
                        " . $_REQUEST["recordid"];;

                    $results = $mysql ->query($sql);

                    $currentrow = $results -> fetch_assoc();

                    echo  $currentrow["system"];

                    ?></td>
            </tr>
            <tr>
                <td class="label">Type:</td>
                <td><?php
                    $sql = "SELECT manufacturer, system, type, name, price
                        FROM devices, manufacturers, systems, types 
                        WHERE devices.manufacturer_id = manufacturers.manufacturer_id
                        AND devices.system_id = systems.system_id
                        AND devices.type_id = types.type_id
                        " . $_REQUEST["recordid"];;

                    $results = $mysql ->query($sql);

                    $currentrow = $results -> fetch_assoc();

                    echo  $currentrow["type"];

                    ?></td>
            </tr>
        </table>
    </div>

</div>
</body>
</html>