Sunda Cyber Army

* Sunda Cyber Army 2k17 *
Indonesia Defacer ~
Path : /home/dent/studentexams/spencebl/
Current File : /home/dent/studentexams/spencebl/results.php
<?php
$mysql = new mysqli(
    "webdev.iyaclasses.com",
    "dent_guest",
    "Acad276_Ttrojan_Dev2Ex@m",
    "dent_exam"
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}
?>

<?php
if(empty($_REQUEST['manufacturer_id'])) {
    echo "Please go through search page. (or redirect)";
    exit();
}

if(empty($_REQUEST['system_id'])) {
    echo "Please go through search page. (or redirect)";
    exit();
}

if(empty($_REQUEST['type_id'])) {
    echo "Please go through search page. (or redirect)";
    exit();
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Acad276 Practical Exam: Results</title>
    <style>
        .container {
            width:  600px;
            margin: auto;
        }
        h1 {
            margin: auto;
            text-align: center;
            background-color:   #900;
            color:  #FC0;
            height: 60px;
            line-height: 60px;
        }
        .num-results {
            margin: 20px 10px;
        }
        table {
            margin: auto;
            margin-bottom: 20px;
            width:  80%;
            border-collapse: collapse;
        }
        th, td {
            border: 1px solid #900;
            border-collapse: collapse;
            padding:    10px;
            text-align: center;
        }
        img {
            width: 100px;
        }
        .nav-link{
            margin: 10px 0px;
            font-size: 14px;
        }
    </style>
</head>
<body>
<div class="container">
    <h1>Mobile Device Database: Search Results</h1>
    <div class="nav-link">
        <a href="search.php"><< Back to Search Page</a>
    </div>

    <table>
        <tr>
            <th>Name</th>
            <th>Price</th>
            <th>Manufacturer</th>
            <th>System</th>
            <th>Type</th>
        </tr>

<?php

$sql = 		"SELECT devices.device_id, devices.name, devices.price, manufacturers.manufacturer, systems.system, types.type FROM devices, manufacturers, systems, types WHERE 1=1";

$sql.= " AND devices.manufacturer_id=manufacturers.manufacturer_id";
$sql.= " AND devices.system_id=systems.system_id";
$sql.= " AND devices.type_id=types.type_id";

if($_REQUEST['device_name'] != "") {
    $sql .= " AND name LIKE'%" . $_REQUEST["device_name"] . "%'";
}
if($_REQUEST['manufacturer_id'] != "all") {
    $sql .= " AND manufacturer_id ='" . $_REQUEST["manufacturer_id"] . "'";
}
if($_REQUEST['system_id'] != "all") {
    $sql .=		" AND system_id = '" . $_REQUEST["system_id"] . "'";
}
if($_REQUEST['type_id'] != "all") {
    $sql .=		" AND type_id = '" . $_REQUEST["type_id"] . "'";
}

//echo $sql . "<br>";

$results = $mysql->query($sql);

echo "<em>Your results returned <strong>" . $results->num_rows .
    "</strong> results.</em>" . "<br><br>";


if(!$results) {
 	echo "<hr>Your SQL:<br> " . $sql . "<br><br>";
    echo "SQL Error: " . $mysql->error . "<hr>";
    exit();
}

       while($currentrow = $results->fetch_assoc()) {
           echo "<tr>" .
               "<td><a href='details.php?recordid=" . $currentrow['device_id'] . "'>" . $currentrow['name'] . "</a></td>" .
               "<td>" . $currentrow["price"] . "</td>" .
               "<td>" . $currentrow["manufacturer"] . "</td>" .
               "<td>" . $currentrow["system"] . "</td>" .
               "<td>" . $currentrow["type"] . "</td>" .
               "</tr>";
       }


?>

<!--        <tr>-->
<!--            <td><a href="details.php?id=10">Pixel</a></td>-->
<!--            <td>549.00</td>-->
<!--            <td>Google</td>-->
<!--            <td>Android</td>-->
<!--            <td>Smartphone</td>-->
<!--        </tr>-->
<!--        <tr>-->
<!--            <td><a href="details.php?id=11">Pixel 2</a></td>-->
<!--            <td>649.00</td>-->
<!--            <td>Google</td>-->
<!--            <td>Android</td>-->
<!--            <td>Smartphone</td>-->
<!--        </tr>-->
<!--        <tr>-->
<!--            <td><a href="details.php?id=12">Pixelbook</a></td>-->
<!--            <td>999.00</td>-->
<!--            <td>Google</td>-->
<!--            <td>Android</td>-->
<!--            <td>Laptop</td>-->
<!--        </tr>-->
    </table>
</div>
</body>
</html>