Source code for each chapter is posted under the catagories on the right side bar.
]]>
/*
* furniture stores locator.
* Locate furniture stores in Minnesota, Wisconsion, Iowa and
* Illinois based on their zip code.
*
* @author michele davis mdavis@example.com
* @param zipcode the zipcode to search for stores near
* @return store the store id of the nearest store
* @date 2005-12-21
*
*/
]]>
/*
*
* this file is about furniture stores.
* this file is about furniture stores in Minnesota, Wisconsion, Iowa and Illinois.
*
* Portions Copyright 2005-2006 (c) O’Reilly & Associates
* The rest Copyright 2005 (c) from their respective authors
*
* @version $Id: coding_standards.html,v 1.2 2005/12/19 24:49:50
*
*/
]]>
{section name=mysec loop=$comments}
<form action="modify_comment.php" method="post">
<label> Title:
<input type="text" name="title" value="{$comments[mysec].title}" />
</label>
<br />
<br />
<label> Body:
<textarea name="body" cols="40" rows="4">{$comments[mysec].body}</textarea>
</label>
<input type="hidden" name="action" value="{$action}" />
<input type="hidden" name="post_id" value="{$post_id}" />
<input type="hidden" name="comment_id" value="{$comments[mysec].comment_id}" />
<br /><br />
<input type="submit" name="submit" value="Post" />
</form>
{/section}
]]>
<?php
session_start();
require_once('config.php');
require_once('db_login.php');
require_once("DB.php");
// Display the header
$smarty->assign('blog_title',$blog_title);
$smarty->display('header.tpl');
// Check for valid login
if (!isset($_SESSION["username"])) {
echo 'Please <a href="login.php">login</a>.';
exit;
}
// Connect to the database
$connection = DB::connect("mysql://$db_username:$db_password@$db_host/$db_database");
if (DB::isError($connection)){
die ("Could not connect to the database: <br />". DB::errorMessage($connection));
}
$stop = false;
$post_id = $_REQUEST["post_id"];
$title = htmlentities($_POST['title']);
$body = htmlentities($_POST['body']);
$action = htmlentities($_POST['action']);
$category_id = htmlentities($_POST['category_id']);
$user_id = $_SESSION["user_id"];
$comment_id = htmlentities($_POST['comment_id']);
if ($_GET['action'] == "delete" and !$stop) {
$comment_id = $_GET["comment_id"];
$query = "DELETE FROM `comments` WHERE `comment_id`='".$comment_id."' AND `user_id`='".$user_id."'";
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
echo "Deleted successfully.<br />";
$stop = true;
}
// We're editing an entry, explicitly grab the id from the URL
if ($_GET["comment_id"] and !$stop) {
$query = "SELECT * FROM `comments` NATURAL JOIN `users`
WHERE `comment_id`=".$_GET["comment_id"];
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
while ($result_row = $result->fetchRow(DB_FETCHMODE_ASSOC)) {
$comments[] = $result_row;
}
$post_id = $_GET["post_id"];
$smarty->assign('action','edit');
$smarty->assign('comments',$comments);
$smarty->assign('post_id',$post_id);
$smarty->display('comment_form.tpl');
// Display the footer
$smarty->display('footer.tpl');
exit;
}
//The form was submitted, was itan add or an update?
if ($_POST['submit'] and !$stop) {
// Validate fields if ($title == ""){
echo 'Title must not be null.<br />';
$found_error = true;
$stop = true;
}
if ($body == ""){
echo "Body must not be null.<br />";
$found_error = true;
$stop = true;
}
// Validated OK lets hit the database
if ($_POST['action'] == "add" AND !$stop) {
$query = "INSERT INTO `comments` VALUES (NULL,
'".$user_id."','".$post_id."','".$title."','".$body."', NULL)";
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
echo "Posted successfully.<br />";
$stop = true;
}
if ($_POST['action']=="edit" and !$stop){
$query = "UPDATE `comments` SET
`title`='".$title."',
`body`='".$body."'
WHERE `comment_id`='".$comment_id."' AND `user_id`='".$user_id."'";
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
echo 'Updated successfully.<br />';
$stop = true;
}
}
if (!$stop){
// Display blank form
// Create an empty entry
$post_id = $_GET["post_id"];
$result_row = array('title'=>NULL,'body'=>NULL,'comment_id'=>NULL);
$comments[] = $result_row;
// Get the categories
$smarty->assign('post_id',$post_id);
$smarty->assign('comments',$comments);
$smarty->assign('action','add');
$smarty->display('comment_form.tpl');
}
if ($found_error) {
// Assign old vals
// Redisplay form
$post_id = $_POST["post_id"];
$result_row = array('title'=>"$title",'body'=>"$body",'comment_id'=>"$comment_id");
$comments[] = $result_row;
$smarty->assign('action',$action);
$smarty->assign('post_id',$post_id);
$smarty->assign('comments',$comments);
$smarty->display('comment_form.tpl');
}
// Display the footer
$smarty->display('footer.tpl');
?>
]]>
<form action="modify_post.php" method="POST">
<label>
Title: <input type="text" name="title" value="{$posts[mysec].title}">
</label>
<br /><br />
<label>
Body: <textarea name="body" cols="40" rows="4">{$posts[mysec].body}</textarea>
</label>
<input type="hidden" name="action" value="{$action}">
<input type="hidden" name="post_id" value="{$posts[mysec].post_id}"><br>
<label> Category:
{html_options name="category_id" options=$categories selected=$posts[mysec].category_id}
</label>
<br />
<input type="submit" name="submit" value="Post" />
</form>
{/section}
]]>
<?php
include('db_login.php');
require_once( 'DB.php' );
require_once( 'config.php' );
//check for valid login
session_start();
//display the header
$smarty->assign('blog_title',$blog_title);
$smarty->display('header.tpl');
if (!isset($_SESSION['username'])) {
echo ("Please <a href='login.php'>login</a>.");
exit();
}
//grab submission variables
$post_id=$_POST[post_id];
$title=htmlentities($_POST['title']);
$body=htmlentities($_POST['body']);
$action=htmlentities($_POST['action']);
$category_id=htmlentities($_POST['category_id']);
$user_id=$_SESSION["user_id"];
//conected to database
$connection = DB::connect( "mysql://$db_username:$db_password@$db_
host/$db_database" );
if (!$connection)
{
die ("Could not connect to the database: <br>". DB::errorMessage());
};
if ($_GET['action']=="delete" and !$stop)
{
$post_id=$_GET[post_id];
$query = "delete from posts where post_id='".$post_id."' and
user_id='".$user_id."'";
$result = $connection->query($query);
if (DB::isError($result))
{
die ("Could not query the database: <br>". $query. " ".
DB::errorMessage($result));
};
echo ("Deleted successfully.<br>");
$stop="TRUE";
}
//we're editing an entry, explicitly grab the id from the URL
if ($_GET[post_id] AND !$stop) {
$query = "SELECT * FROM users NATURAL JOIN posts NATURAL JOIN categories
where post_id = $_GET[post_id]";
$result = $connection->query($query);
if (DB::isError($result))
{
die ("Could not query the database: <br>". $query. " ".
DB::errorMessage($result));
};
while ($result_row = $result->fetchRow(DB_FETCHMODE_ASSOC)) {
$posts[]=$result_row;
}
$smarty->assign('action','edit');
$smarty->assign('posts',$posts);
//get those categories
$query = "SELECT category_id, category FROM categories";
$smarty->assign('categories',$connection->getAssoc($query));
$smarty->display('post_form.tpl');
$stop="TRUE";
}
//The form was submitted, was it an add or an edit?
if ($_POST['submit'] AND !$stop)
{
//validate fields
if ($title == ""){
echo ("Title must not be null.<br>");
$found_error=TRUE;
$stop="TRUE";
}
if ($body == ""){
echo ("Body must not be null.<br>");
$found_error=TRUE;
$stop="TRUE";
}
//validated OK lets hit the databae
if ( $_POST['action']=="add" AND !$stop)
{
$query = "insert into posts values (NULL,
"."'".$category_id."','".$user_id."','".$title."','".$body."', NULL)";
$result = $connection->query($query);
if (DB::isError($result))
{
die ("Could not query the database: <br>". $query. " ".
DB::errorMessage($result));
};
echo ("Posted successfully.<br>");
$stop="TRUE";
}
if ($_POST['action']=="edit" and !$stop)
{
//do nothing
$query = "update posts set category_id ='".$category_id."',
title ='".$title."',body='".$body."' where post_id='".$post_id."'
and user_id='".$user_id."'";
//echo $query;
$result = $connection->query($query);
if (DB::isError($result))
{
die ("Could not query the database: <br>". $query. " ".
DB::errorMessage($result));
};
echo ("Updated successfully.<br>");
$stop="TRUE";
}
}
if (!$stop)
{
//display blank form
//create an empty entry
$result_row=array('title'=>NULL,'body'=>NULL);
$posts[]=$result_row;
//get the categories
$query = "SELECT category_id, category FROM categories";
$smarty->assign('categories',$connection->getAssoc($query));
$smarty->assign('posts',$posts);
$smarty->assign('action','add');
$smarty->display('post_form.tpl');
}
if ($found_error) {
//assign old vals
//redisplay form
$result_row=array('title'=>"$title",'body'=>"$body",'post_id'=>"$post_id");
$posts[]=$result_row;
$smarty->assign('action',$action);
$smarty->assign('posts',$posts);
$smarty->display('post_form.tpl');
}
//display the footer
$smarty->display('footer.tpl');
?>
]]>
{section name=mysec loop=$posts}
<h2>{$posts[mysec].title}</h2>
{$posts[mysec].body}
<br />
Posted by <b>{$posts[mysec].first_name} {$posts[mysec].last_name}</b>
from the <b>{$posts[mysec].category}</b> category at
<b>{$posts[mysec].posted}</b>.<br />
{if $posts[mysec].user_id == $owner_id}
<a href="modify_post.php?post_id={$posts[mysec].post_id}&action=edit">Edit</a> ||
<a href="modify_post.php?post_id={$posts[mysec].post_id}&action=delete">Delete</a> ||
<a href="modify_comment.php?post_id={$posts[mysec].post_id}&action=add"
>Add a comment</a>
<br />
{/if}
{/section}
{if $comment_count != "0"}
<h3>Comments</h3>
{section name=mysec2 loop=$comments}
<hr />
<b>{$comments[mysec2].title}</b>
<br />
{$comments[mysec2].body}
<br />
Posted by <b>{$comments[mysec2].first_name} {$comments[mysec2].last_name}</b>
at <b>{$comments[mysec2].posted}</b>.<br />
{if $comments[mysec2].user_id == $owner_id}
<a href="modify_comment.php?comment_id={$comments[mysec2].comment_id}&action=edit"
>Edit</a> ||
<a href="modify_comment.php?comment_id={$comments[mysec2].comment_id}&action=delete"
>Delete</a>
<br />
{/if}
{/section}
{/if}
]]>
<?php
session_start();
require_once('config.php');
require_once('db_login.php');
require_once("DB.php");
// Display the header
$smarty->assign('blog_title',$blog_title);
$smarty->display('header.tpl');
// Check for valid login
if (!isset($_SESSION["username"])) {
echo 'Please <a href="login.php">login</a>.';
exit;
}
// Connect to the database
$connection = DB::connect("mysql://$db_username:$db_password@$db_host/$db_database");
if (DB::isError($connection)){
die ("Could not connect to the database: <br />". DB::errorMessage($connection));
}
$post_id = $_GET["post_id"];
$query = "SELECT * FROM `users` NATURAL JOIN `posts` NATURAL JOIN `categories`
WHERE `post_id`=$post_id";
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
while ($result_row = $result->fetchRow(DB_FETCHMODE_ASSOC)) {
$test[]=$result_row;
}
$smarty->assign('posts',$test);
$smarty->assign('owner_id',$_SESSION["user_id"]);
$query = "SELECT * FROM `users` NATURAL JOIN `comments` WHERE `post_id`=$post_id";
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
$comment_count = $result->numRows();
while ($result_row = $result->fetchRow(DB_FETCHMODE_ASSOC)) {
$comments[] = $result_row;
}
$smarty->assign('posts',$test);
$smarty->assign('comments',$comments);
$smarty->assign('comment_count',$comment_count);
$smarty->display('view_post.tpl');
$connection->disconnect();
// Display the footer
$smarty->display('footer.tpl');
?>
]]>
{section name=mysec loop=$posts}
<a href="view_post.php?post_id={$posts[mysec].post_id}">{$posts[mysec].title}</a>
by <b>{$posts[mysec].first_name} {$posts[mysec].last_name}</b>
from the <b>{$posts[mysec].category}</b> category at <b>{$posts[mysec].posted}</b>.
<br />
{/section}
<br />
Click to <a href="modify_post.php?action=add">add</a> a posting.<br />
]]>
<?php
session_start();
require_once('config.php');
require_once('db_login.php');
require_once("DB.php");
// Display the page header
$smarty->assign('blog_title',$blog_title);
$smarty->display('header.tpl');
// Check for valid login
if (!isset($_SESSION['username'])) {
echo 'Please <a href="login.php">login</a>.';
exit;
}
// Connect to the database
$connection = DB::connect("mysql://$db_username:$db_password@$db_host/$db_database");
if (DB::isError($connection)){
die ("Could not connect to the database: <br />". DB::errorMessage($connection));
}
// Query the posts with catagories and user information
$query = "SELECT * FROM `users` NATURAL JOIN `posts` NATURAL JOIN `categories`
ORDER BY `posted` DESC";
// Execute the database query
$result = $connection->query($query);
if (DB::isError($result)){
die("Could not query the database: <br />".$query." ".DB::errorMessage($result));
}
// Place the query results into an array
while ($result_row = $result->fetchRow(DB_FETCHMODE_ASSOC)) {
$test[] = $result_row;
}
// Send the data to the template
$smarty->assign('posts', $test);
// Display the template with the data plugged in
$smarty->display('posts.tpl');
// Close the database connection
$connection->disconnect();
// Display the page footer
$smarty->display('footer.tpl');
?>
]]>
INSERT INTO categories VALUES (1,'Press Releases'); INSERT INTO categories VALUES (2,'Feature Requests');
INSERT INTO posts VALUES (NULL,1,1,'PHP Version 12','PHP Version 12, to be released third quarter 2006. Featuring the artificial inteligence engine that writes the code for you.',NULL);
INSERT INTO posts VALUES (NULL,1,1,'MySQL Version 8','Returns winning lotto number.',NULL);
INSERT INTO posts VALUES (NULL,2,2,'Money Conversion',' Please add functions for converting between foreign currentcies. ',NULL);
INSERT INTO comments VALUES (NULL,1,1,'Correction','Release delayed till the year 2099',NULL);
INSERT INTO users VALUES (NULL,'Michele','Davis','mdavis',md5('secret')); INSERT INTO users VALUES (NULL,'Jon','Phillips','jphillips',md5('password'));
You should see a result similar to the one below for each of the INSERT SQL commands.
Query OK, 1 row affected, 1 warning (0.03 sec)
]]>
CREATE TABLE `users` (
`user_id` int(11) NOT NULL auto_increment,
`first_name` varchar(100) NOT NULL,
`last_name` varchar(100) NOT NULL,
`username` varchar(45) NOT NULL,
`password` varchar(32) NOT NULL, PRIMARY KEY (`user_id`));
SQL code returns, again, that the query value was OK.
Query OK, 0 rows affected (0.02 sec)
]]>
CREATE TABLE `comments` (
`comment_id` int(11) NOT NULL auto_increment,
`user_id` int(11) NOT NULL,
`post_id` int(11) NOT NULL,
`title` varchar(150) NOT NULL,
`body` text NOT NULL,
`posted` timestamp,
PRIMARY KEY (`comment_id`)
);
]]>
CREATE TABLE `categories` (
`category_id` int(11) NOT NULL auto_increment,
`category` varchar(150) NOT NULL, PRIMARY KEY (`category_id`)
);
Example 16-6 returns:
Query OK, 0 rows affected (0.01 sec)
]]>