I did a pretty **** job @ this, but yoou can always change it - I got stuff on my mind with my *****
example -> http://interstudios.co.uk/freeScripts/job-applications/admin.php?password=omgpassword
http://interstudios.co.uk/freeScripts/job-applications/
---------------------
Login via -> admin.php?password=omgpassword
This code below is called "admin.php"
<?php session_start(); ?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1">
<meta name="author" content="InterStudios.co.uk">
<style type="text/css">
.replied
{
width: 500px;
border-color: red;
border-style: dashed;
border-width: thin;
margin-bottom: 50px;
padding: 15px;
font-family: Tahoma;
font-size: 12px;
}
.notreplied
{
width: 500px;
border-color: black;
border-style: dashed;
border-width: thin;
margin-bottom: 50px;
padding: 15px;
font-family: Tahoma;
font-size: 12px;
}
</style>
<title>Admin bit</title>
</head>
<body>
<?php
require_once ( 'mysqlDatabase.php' );
if ( $_SESSION [ 'wet' ] === true )
{
switch ( $_GET [ 'cmd' ] )
{
case 'reply':
mysql_query ( 'UPDATE `job-applications` SET `replied` = "1" WHERE `job-applications`.`id` = "' . mysql_real_escape_string ( $_GET[ 'replied' ] ) . '" LIMIT 1 ;' );
echo ( '<a href="admin.php"> go back </a>' );
break;
default:
$mysqlQuery = mysql_query ( 'SELECT * FROM `job-applications`' );
if ( mysql_num_rows ( $mysqlQuery ) <= 0 )
{
echo ( 'Sorry, no job applications located in the database.' );
}
else
{
while ( $r = mysql_fetch_array ( $mysqlQuery ) )
{
if ( $r[ 'replied' ] == 1 )
{
echo ( '<div class="replied"><B>Name:</B> ' . $r[ 'field-name' ] . '<br /><B>Age:</B> ' . $r[ 'field-age' ] . '<br /><B>Email:</B> ' . $r[ 'field-email' ] . '<br /><B>Job:</B> ' . $r[ 'field-job' ] . '<br /><B>Message:</B> ' . $r[ 'field-message' ] . '</div><br /><br /><br />' );
}
else
{
echo ( '<div class="notreplied"><B>Name:</B> ' . $r[ 'field-name' ] . '<br /><B>Age:</B> ' . $r[ 'field-age' ] . '<br /><B>Email:</B> ' . $r[ 'field-email' ] . '<br /><B>Job:</B> ' . $r[ 'field-job' ] . '<br /><B>Message:</B> ' . $r[ 'field-message' ] . '<br /><br /><br /><a href="?cmd=reply&replied=' . $r[ 'id' ] . '">Reply?</a><br /><br /></div><br />' );
}
}
}
}
}
else
{
if ( $_GET[ 'password' ] === 'omgpassword' ) // I recommend you change "omgpassword"
{
$_SESSION [ 'wet' ] = true;
echo ( '<meta http-equiv="refresh" content="0;url=' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] . '">' );
}
else
{
$_SESSION [ 'wet' ] = false;
exit ( 'ACCESS DENIED!!!!' ); // lols
}
}
?>
</body>
</html>
post-application.php
You can see the table for the MYSQL is there.
<?php
/**
* @author InterStudios.co.uk
* @website www.InterStudios.co.uk
* @coder James Rozee
*/
/*
CREATE TABLE `interstu_japp`.`job-applications` (
`id` TINYINT NOT NULL AUTO_INCREMENT ,
`field-name` VARCHAR( 255 ) NOT NULL ,
`field-age` VARCHAR( 255 ) NOT NULL ,
`field-email` VARCHAR( 255 ) NOT NULL ,
`field-job` VARCHAR( 255 ) NOT NULL ,
`field-message` VARCHAR( 255 ) NOT NULL ,
`replied` VARCHAR( 255 ) NOT NULL ,
PRIMARY KEY ( `id` )
) ENGINE = MYISAM
*/
function cleanString ( $str )
{
return ( mysql_real_escape_string ( strip_tags( $str ) ) );
}
require_once ( 'mysqlDatabase.php' );
$formFields = Array( 'field-name',
'field-age',
'field-email',
'field-job',
'field-message'
);
$errors = Array();
for ( $i = 0; $i <= sizeof ( $formFields ); $i++ )
{
$explode = explode( '-', $formFields [ $i ] );
if ( $_POST [ $formFields [ $i ] ] === '' )
{
$errors[] = 'Please enter information for ' . $explode [ 1 ];
}
}
if ( sizeof( $errors ) <= 0 )
{
$mysqlQuery = mysql_query ( 'INSERT INTO `job-applications`
(`id`, `field-name`, `field-age`, `field-email`, `field-job`, `field-message`, `replied`) VALUES ( NULL, "' . cleanString ( $_POST [ $formFields [ 0 ] ] ) . '", "' . cleanString ( $_POST [ $formFields [ 1 ] ] ) . '", "' . cleanString ( $_POST [ $formFields [ 2 ] ] ) . '", "' . cleanString ( $_POST [ $formFields [ 3 ] ] ) . '", "' . cleanString ( $_POST [ $formFields [ 4 ] ] ) . '", "0" ); ' );
// Not the nicest way, but oh well.
if ( $mysqlQuery )
{
echo ( 'Information has been submitted without a problem!' );
include ( 'index.html' );
}
else
{
echo ( 'Sorry, some reason your submission failed please try again' );
include ( 'index.html' );
}
}
else
{
for ( $i = 0; $i <= sizeof ( $errors ); $i++ )
{
echo ( $errors [ $i ] . '<br />' );
}
}
?>index.html below...
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1">
<meta name="author" content="InterStudios.co.uk">
<style type="text/css">
.label
{
float: left;
width: 150px;
height: 30px;
font-family: Tahoma;
font-size: 12px;
margin-right: 20px;
padding: 5px;
}
</style>
<title>Job Applications</title>
</head>
<body>
<form name="job-applications" id="form" method="POST" action="post-application.php">
<div class="label">Name</div>
<input type="text" name="field-name"><br /><br />
<div class="label">Age</div>
<input type="text" name="field-age"><br /><br />
<div class="label">Email</div>
<input type="text" name="field-email"><br /><br />
<div class="label">Which job?</div>
<select name="field-job">
<option selected="selected" disabled="true">Please select...</option>
<option value="job1">Job #1</option>
<option value="job2">Job #2</option>
<option value="job3">Job #3</option>
</select><br /><br />
<div class="label">Message</div>
<textarea name="field-message"></textarea><br /><br />
<input type="submit" value="Send application">
</form>
</body>
</html>
mysqlDatabase.php below...
<?php
$mysqlData = Array ( 'username' => 'interstu_japp',
'password' => 'japp',
'database' => 'interstu_japp',
'host' => 'localhost'
);
$mysqlConnection = mysql_connect ( $mysqlData [ 'host' ], $mysqlData [ 'username' ], $mysqlData [ 'password' ] ) or die ( 'Can\'t connect to the database because: ' . mysql_error () );
mysql_select_db ( $mysqlData [ 'database' ] );
?>