Scripts

template voor website met login

Dit is een template voor een basis opzet van een website met een klant/admin inlog systeem en een database beheer systeem voor de administrator. Neem de tijd en kijk rustig naar de code. Het is belangrijk dat je in je directory 3 mappen aanmaakt. 1 = system Deze map worden systeem bestanden in opgeslagen. zoals connection met de database, header, footer, etc. In deze map moet je de volgende bestanden in zetten. header_klant.php header_admin.php header.php gegevens.php footer.php connection.php 2 = java In deze map worden de java scripts ingezet( ik heb er maar 1 gebruikt maar het is voor de netheid om het in een aparte op te slaan. In deze map moet je de volgende bestanden in zetten. java.html 3 = css Hier wordt de css in opgeslagen. In deze map moet je de volgende bestanden in zetten. style.css Ik hoop dat ik je hiermee kan helpen. Veel succes en plezier met php.

wijzigen.php
<?php require_once ("system/header_admin.php") ?>
<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>
<?php

	// functie om een variable klaar te maken voor de database
	function mysql_prep( $value ) {
		$magic_quotes_active = get_magic_quotes_gpc();
		$new_enough_php = function_exists( "mysql_real_escape_string" );
		if( $new_enough_php ) {
			if( $magic_quotes_active ) { $value = stripslashes( $value ); }
			$value = mysql_real_escape_string( $value );
		} else {
			if( !$magic_quotes_active ) { $value = addslashes( $value ); }
		}
		return $value;
	}

?>	

<?php
	//controleren of het formulier opgestuurd is
	if (isset($_POST['klopt']) && ($_POST['klopt']) == "waar" ) {
		
		// een array om de errors op te vangen$errors = array();
			$errors = array();
			// kijkt of de velden niet leeg zijn en anders error
			if (empty($_POST['veld1'])){
				$errors[0] = "veld1 niet goed ingevoerd";
			}
			if (empty($_POST['veld2'])){
				$errors[1] = "veld2 niet goed ingevoerd"; 
			}
			if (empty($_POST['veld3'])){
				$errors[2] = "veld3 niet goed ingevoerd"; 
			}
			
			// kijkt of de velden de juiste lengte hebben
			if (strlen(trim(mysql_prep($_POST['veld1']))) <6 || strlen(trim(mysql_prep($_POST['veld1']))) >20) {
				$errors[0] = "veld1 niet goed ingevoerd";
			}
			if (strlen(trim(mysql_prep($_POST['veld3']))) <6 || strlen(trim(mysql_prep($_POST['veld2']))) >30) {
				$errors[1] = "veld2 niet goed ingevoerd";
			}	
			if (strlen(trim(mysql_prep($_POST['veld3']))) <6 || strlen(trim(mysql_prep($_POST['veld3']))) >30) {
				$errors[2] = "veld3 niet goed ingevoerd";
			}
			
			$veld1 = trim(strip_tags(mysql_prep($_POST['veld1'])));
			$veld2 = trim(strip_tags(mysql_prep($_POST['veld2'])));
			$veld3 = trim(strip_tags(mysql_prep($_POST['veld3'])));
			$id = $_POST['id'];
			
			//als de array "errors" leeg is mag hij de data wegschijven in de database
			if ( empty($errors) ) {
			
			//doe de update
				$query = "UPDATE tabel SET ";
				$query .= "veld1 = '{$veld1}', ";
				$query .= "veld2 = '{$veld2}', ";
				$query .= "veld3 = '{$veld3}' ";
				$query .= "WHERE id = {$id}";
				$result = mysql_query($query);
					if (!$result) {
						die("Database query failed: " . mysql_error());
					}
				
				$message = "update succesvol";
				$message .= "<br /><a href=\"overzicht.php?nr=0-10&sorteer_asc=1\">Terug</a>";
			
			} else {
			// zet de $error om in $message die op het scherm worden getoond
				$aantal_errors = count($errors);
				$message = "Update failed:";
				if (isset ($errors[0])){$message .= "<br />" . $errors[0] . "<br />";}
				if (isset ($errors[1])){$message .= "<br />" . $errors[1] . "<br />";}
				if (isset ($errors[2])){$message .= "<br />" . $errors[2] . "<br />";}
				$message .= "<br /><a href=\"wijzigen.php?wijzigid={$id}\">Probeer opnieuw</a>";
			}
			

		
	} elseif (isset($_GET['wijzigid'])) {
					
					$wijzig_id = $_GET['wijzigid'];
					$query = "SELECT * ";
					$query .= "FROM tabel ";
					$query .= "WHERE id = {$wijzig_id} ";
					$query .= "LIMIT 1";
					$result = mysql_query($query, $connection);
					if (!$result) {
						die("Database query failed: " . mysql_error());
					}
					$wijzig = mysql_fetch_array($result);
					
			?>
		<div id="content">
			<h4>
			<form action="wijzigen.php" method="post">

			
			<table id="tabel1">
				<tr>
					<td id="header" colspan="2">
						Record wijzigen
					</td>
				</tr>
				<tr>
					<td>ID:</td>
					<td><?php echo $wijzig['id']; ?>
					<input type="hidden" name="id" value="<?php echo $wijzig['id']; ?>">
					</td>
				</tr>
				<tr>
					<td>veld1:</td>
					<td><input type="text" name="veld1" maxlength="30" size="20" value="<?php echo $wijzig['veld1']; ?>" /></td>
				</tr>
				<tr>
					<td>veld2:</td>
					<td><input type="text" name="veld2" maxlength="30" size="20" value="<?php echo $wijzig['veld2']; ?>" /></td>
				</tr>
				<tr>
					<td>veld3</td>
					<td><input type="text" name="veld3" maxlength="30" size="20" value="<?php echo $wijzig['veld3']; ?>" /></td>
				</tr>
				<tr>
					<input type="hidden" name="klopt" value="waar">
					<td colspan="2" align="center"><input type="submit" name="submit" value="wijzig" /></td>
				</tr>
			</form>
				<tr>
					<td colspan="2" align="center"><a href="overzicht.php?nr=0-10&sorteer_asc=1">terug</a></td>
				</tr>
			</table>
			</h4>

<?php
} else {
header("Location: overzicht.php");
}
?>
<?php
	// hier worden de message op het scherm weergegeven
	if (!empty($message)){
		echo "<tr><td  id=\"header\" colspan=\"2\">";
		echo "" . $message;
		echo "</td></tr>";
	}
?>
</div>
<?php require_once ("system/footer.php") ?>
header_klant.php
<!DOCTYPE HTML>
<?php session_start(); ?>
<?php require_once("system/connection.php") ?>
<?php
	if (!isset($_SESSION['rechten'])) {
		header("Location: index.php");
	}
	if ($_SESSION['rechten'] == 1) {
		header("Location: admin.php");
		$naam = $_SESSION['username'];
	}
?>
<html>
<head>
<LINK HREF="css/style.css" TYPE="text/css" REL="stylesheet">
<!-- include("javascripts.php"); -->
<title> shop </title>
</head>
<body>
<div id="titel">
hallo<br />
SHOP + LOGO
<?php
	if (isset($_SESSION['username'])){
		echo "<div id=\"titel_header\">";
		echo "<table align=\"right\" id=\"header\"><tr><td>ingelogd:</td></tr>";
		echo "<tr><td>{$_SESSION['username']}</td></tr>";
		echo "<tr><td><a href=\"klant.php\">Klant Page</a></td></tr>";
		echo "<tr><td><a href=\"logout.php\">logout</a></td></tr></table>";
		echo "</div>";
	}
?>
</div>

overzicht.php
<?php require_once ("system/header_admin.php") ?>
<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="admin.php"> Admin Page </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>
<?php
//functies
	function get_db ($value1, $value2, $sorteer_asc_var){
			
	if($sorteer_asc_var == 1){ $sorteer_asc_var = "id"; }
	if($sorteer_asc_var == 2){ $sorteer_asc_var = "veld1"; }
	if($sorteer_asc_var == 3){ $sorteer_asc_var = "veld2"; }
	if($sorteer_asc_var == 4){ $sorteer_asc_var = "veld3"; }
		$query = "SELECT * FROM tabel ORDER BY {$sorteer_asc_var} ASC LIMIT {$value1}, {$value2}";
		$result = mysql_query($query);
			if (!$result) {
				die("Database query failed1: " . mysql_error());
			}
		return $result;
	}
	
	function get_db_by_sorteren ($value1, $value2, $sorteer_desc_var){
	
	if($sorteer_desc_var == 1){ $sorteer_desc_var = "id"; }
	if($sorteer_desc_var == 2){ $sorteer_desc_var = "veld1"; }
	if($sorteer_desc_var == 3){ $sorteer_desc_var = "veld2"; }
	if($sorteer_desc_var == 4){ $sorteer_desc_var = "veld3"; }
		$query = "SELECT * FROM tabel ORDER BY {$sorteer_desc_var} DESC LIMIT {$value1}, {$value2}";
		$result = mysql_query($query);
			if (!$result) {
				die("Database query failed2: " . mysql_error());
			}
		return $result;
	}

?>	

<?php

if (isset($_GET['nr'])) {
	$get_nr = $_GET['nr'];
	if (preg_match("/^([0-9])*-([0-9])/", $get_nr)) {
	
	$get_nr_array = explode("-",$get_nr,2);
	$value1 = $get_nr_array[0];
	$value2 = $get_nr_array[1];
	
	} else {
	echo"error";
	}
} else {
	header("Location: index.php");	
}
				$query_select = "SELECT * FROM tabel ";
				$result_select = mysql_query($query_select);
							if (!$result_select) {
								die("Database query failed: " . mysql_error());
							}
					$nummer_select = mysql_num_rows($result_select);
					$nummer_select_mintien = $nummer_select -10;
					
	if (isset($_GET['sorteer_asc'])) {
		$sorteer_asc_var = $_GET['sorteer_asc'];
	}
	if (isset($_GET['sorteer_desc'])) {
		$sorteer_desc_var = $_GET['sorteer_desc'];
	}
			
	if(isset($value1)){
		$huidig_value1 = $value1;
	}	$huidig_value2 = 10;	
					
	if(isset($value1)){
		$terug_value1 = $value1 - 10;
		if ($terug_value1 < 0) {
			$terug_value1 = 0;
		}
	}
	
	if(isset($value1)){
		$terug_value1_10 = $value1 - 100;
		if ($terug_value1_10 < 0) {
			$terug_value1_10 = 0;
		}
	}
		$terug_value2 = 10;

	if(isset($value1)){
		$verder_value1 = round($value1, -1) +10;
		if ($verder_value1 >= $nummer_select_mintien) {
			$verder_value1 = round($nummer_select_mintien, -1);
		}
	}
	
	if(isset($value1)){
		$verder_value1_10 = round($value1, -1) +100;
		if ($verder_value1_10 >= $nummer_select_mintien) {
			$verder_value1_10 = round($nummer_select_mintien, -1);
		}
	}
		$verder_value2 = 10;
		
?>
	<div id="content">
			<br />
			<table id="tabel1" width="90%">
			<tr>		<!-- colspan aanpassen -->
				<td id="nav" colspan="6" align="left">
					<?php if (isset($_GET['txt'])) {
						echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\">Normaal formaat</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;";
						} else {
						echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1&txt=1\">Text formaat</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;";
						}
					?>
					<a href="invoeg.php">Rij toevoegen</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;
					<form action="delete.php" method="post">
						Delete&nbsp;| &nbsp; Range van id:
						<input type="text" name="1" maxlength="6" size="4"/>
						<input type="text" name="2" maxlength="6" size="4"/>
						<input type="submit" name="submit" value="delete" onClick="return confirmDelete();"/>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;
						<a href="delete.php?del=truncate" onClick="return confirmDelete();">Leeg tabel</a>
					</form>	

				</td>
			</tr>
			<tr>				<!-- colspan aanpassen -->
				<td colspan="6" align="center">
					<table id="table1">
					<tr>
						<td>
							<a href="overzicht.php?nr=0-10
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> <-< </a>
						</td>
						<td>
							<a href="overzicht.php?nr=<?php echo $terug_value1_10; ?>-<?php echo $terug_value2; ?>
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> <10 </a>
						</td>
						<td>
							<a href="overzicht.php?nr=<?php echo $terug_value1; ?>-<?php echo $terug_value2; ?>
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> < </a>
						</td>
						<td width="300px">
						<?php 
						$weergaven1 = $value1;
						$weergaven1 ++;
						$weergaven2 = $value1 + 10 ;
						//$weergaven2 ++;
							if ($weergaven2 >= $nummer_select) {
							$weergaven2 = $nummer_select;
							}
						echo $weergaven1 . "/"; echo $weergaven2; echo " van de :" . $nummer_select;
						
						if (isset($sorteer_desc_var)) {
							if($sorteer_desc_var == 1){ $sorteer_desc_var_display = "id"; }
							if($sorteer_desc_var == 2){ $sorteer_desc_var_display = "veld1"; }
							if($sorteer_desc_var == 3){ $sorteer_desc_var_display = "veld2"; }
							if($sorteer_desc_var == 4){ $sorteer_desc_var_display = "veld3"; }
							
							echo"<br />Geselecteerd op Z-A: " . $sorteer_desc_var_display . "";
							
						}
						if (isset($sorteer_asc_var)) {
							if($sorteer_asc_var == 1){ $sorteer_asc_var_display = "id"; }
							if($sorteer_asc_var == 2){ $sorteer_asc_var_display = "veld1"; }
							if($sorteer_asc_var == 3){ $sorteer_asc_var_display = "veld2"; }
							if($sorteer_asc_var == 4){ $sorteer_asc_var_display = "veld3"; }
							
							echo"<br />Geselecteerd op A-Z: " . $sorteer_asc_var_display . "";
							
						}
						
						?>
						</td>
						<td>
							<a href="overzicht.php?nr=<?php echo $verder_value1; ?>-<?php echo $verder_value2; ?>
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> > </a>
						</td>
						<td>
							<a href="overzicht.php?nr=<?php echo $verder_value1_10; ?>-<?php echo $verder_value2; ?>
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> 10> </a>
						</td>
						<td>
							<a href="overzicht.php?nr=<?php echo round($nummer_select_mintien, -1); ?>-10
							<?php if(isset($_GET['sorteer_desc'])){ echo "&sorteer_desc={$sorteer_desc_var}";	}?>
							<?php if(isset($_GET['sorteer_asc'])){ echo "&sorteer_asc={$sorteer_asc_var}";	}?>
							<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>
							"> >-> </a>
						</td>
					</tr>
					
					</table>
				</td>
			</tr>
				<tr>
					<td id="header" width="10%" align="center"><b>id</b></td>

					<td id="header" width="20%" align="center"><b>veld1</b></td>

					<td id="header" width="20%" align="center"><b>veld2</b></td>

					<td id="header" width="20%" align="center"><b>veld3</b></td>
					
					<td id="header" width="10%" align="center"><b>wijzig</b></td>
					
					<td id="header" width="10%" align="center"><b>delete</b></td>

				</tr>
				<tr>
						<td id="header">
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_desc=1<?php if(isset($_GET['txt'])){ echo "&txt=1";}?> ">&#709;</a>&nbsp;
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_asc=1<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>">&#708;</a>
						</td>
						<td id="header">
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_desc=2<?php if(isset($_GET['txt'])){ echo "&txt=1";}?> ">&#709;</a>&nbsp;
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_asc=2<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>">&#708;</a>
						</td>
						<td id="header">
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_desc=3<?php if(isset($_GET['txt'])){ echo "&txt=1";}?> ">&#709;</a>&nbsp;
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_asc=3<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>">&#708;</a>
						</td>
						<td id="header">
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_desc=4<?php if(isset($_GET['txt'])){ echo "&txt=1";}?> ">&#709;</a>&nbsp;
						<a href="overzicht.php?nr=<?php echo $huidig_value1; ?>-<?php echo $huidig_value2; ?>&sorteer_asc=4<?php if(isset($_GET['txt'])){ echo "&txt=1";}?>">&#708;</a>
						</td>
						<td>
						</td>
						<td>
						</td>
				</tr>
					
<?php

	if (isset($_GET['txt']) && ($_GET['txt']) == 1) {
		if (isset($_GET['sorteer_desc'])){
			
			$result = get_db_by_sorteren ($value1, $value2, $sorteer_desc_var);
			$nummer = mysql_num_rows($result);
			
			while ($verleng = mysql_fetch_array($result)) {
					
					echo "<tr>";  //colspan aanpassen
					echo "<td colspan=\"4\">" . $verleng['id']  . "; ";
					echo "" . $verleng['veld1'] . "; ";
					echo "" . $verleng['veld2'] . "; ";
					echo "" . $verleng['veld3']  . "; </td>";
					echo "<td> <a href=\"wijzigen.php?wijzigid={$verleng['id']}\"> wijzig </a></td>";
					echo "<td> <a href=\"delete.php?deleteid={$verleng['id']}\" onClick=\"return confirmDelete();\"> delete </a></td>";
					echo "</tr>";
			}
		
		
		} 
		if(isset($_GET['sorteer_asc']))  {
				
			$result = get_db ($value1, $value2, $sorteer_asc_var);
			$nummer = mysql_num_rows($result);
			
			while ($verleng = mysql_fetch_array($result)) {
					
					echo "<tr>";	//colspan aanpassen
					echo "<td colspan=\"4\">" . $verleng['id']  . "; ";
					echo "" . $verleng['veld1'] . "; ";
					echo "" . $verleng['veld2'] . "; ";
					echo "" . $verleng['veld3']  . "; </td>";
					echo "<td> <a href=\"wijzigen.php?wijzigid={$verleng['id']}\"> wijzig </a></td>";
					echo "<td> <a href=\"delete.php?deleteid={$verleng['id']}\" onClick=\"return confirmDelete();\"> delete </a></td>";
					echo "</tr>";
			}
			
		}
		
	} else {
		if (isset($_GET['sorteer_desc'])) {
				
			$result = get_db_by_sorteren ($value1, $value2, $sorteer_desc_var);
			$nummer = mysql_num_rows($result);
						
			$count1 = $value1;
			$count1 ++;
			while ($verleng = mysql_fetch_array($result)) {
					
					echo"<tr>";
					echo "<td>" . $verleng['id']  . "</td>";
					echo "<td>" . $verleng['veld1'] . "</td>";
					echo "<td>" . $verleng['veld2'] . "</td>";
					echo "<td>" . $verleng['veld3']  . "</td>";
					echo "<td> <a href=\"wijzigen.php?wijzigid={$verleng['id']}\"> wijzig </a></td>";
					echo "<td> <a href=\"delete.php?deleteid={$verleng['id']}\" onClick=\"return confirmDelete();\"> delete </a></td>";
					echo "</tr>";
			}
		
		}
		if(isset($_GET['sorteer_asc']))  {

			$result = get_db ($value1, $value2, $sorteer_asc_var);
			$nummer = mysql_num_rows($result);
						
			$count1 = $value1;
			$count1 ++;
			while ($verleng = mysql_fetch_array($result)) {
					
					echo"<tr>";
					echo "<td>" . $verleng['id']  . "</td>";
					echo "<td>" . $verleng['veld1'] . "</td>";
					echo "<td>" . $verleng['veld2'] . "</td>";
					echo "<td>" . $verleng['veld3']  . "</td>";
					echo "<td> <a href=\"wijzigen.php?wijzigid={$verleng['id']}\"> wijzig </a></td>";
					echo "<td> <a href=\"delete.php?deleteid={$verleng['id']}\" onClick=\"return confirmDelete();\"> delete </a></td>";
					echo "</tr>";
			}
		}
	}
?>
</table>
	
<?php

	if (!empty($message)){
		echo "" . $message;
	}

?>

</div>
<?php require_once ("system/footer.php") ?>
logout.php
<?php
	session_start();
	
	$_SESSION = array();
	
	if(!isset($_COOKIE[session_name()])) {
		setcookie(session_name(), '', time()-42000, '/');
	}
	
	session_destroy();
	
	header("Location: index.php");
?>
login.php
<?php require_once ("system/header.php") ?>

<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="login.php"> Login </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="overzicht_producten.php"> Bekijk producten </a></li>
	</ul>
</div>

<?php

	function mysql_prep( $value ) {
		$magic_quotes_active = get_magic_quotes_gpc();
		$new_enough_php = function_exists( "mysql_real_escape_string" ); // i.e. PHP >= v4.3.0
		if( $new_enough_php ) { // PHP v4.3.0 or higher
			// undo any magic quote effects so mysql_real_escape_string can do the work
			if( $magic_quotes_active ) { $value = stripslashes( $value ); }
			$value = mysql_real_escape_string( $value );
		} else { // before PHP v4.3.0
			// if magic quotes aren't already on then add slashes manually
			if( !$magic_quotes_active ) { $value = addslashes( $value ); }
			// if magic quotes are active, then the slashes already exist
		}
		return $value;
	}

	function redirect_to( $location = NULL ) {
		if ($location != NULL) {
			header("Location: {$location}");
			exit;
		}
	}

?>	

<?php
	if (isset($_POST['klopt']) && ($_POST['klopt']) == "waar" ) {

		$errors = array();
		
			if (!empty($_POST['username'])){
				if (strlen(trim(mysql_prep($_POST['username']))) <6 || strlen(trim(mysql_prep($_POST['username']))) >20) {
				$errors[0] = "Username niet de juiste lengte";
				}
			} else {
			$errors[0] = "Username niet ingevoerd";
			}
			
			if (!empty($_POST['password'])){
				if (strlen(trim(mysql_prep($_POST['password']))) <6 || strlen(trim(mysql_prep($_POST['password']))) >30) {
					$errors[1] = "password niet de juiste lengte";
				}
			} else {
				$errors[1] = "Password niet ingevoerd"; 
			}
			
		$username = trim(mysql_prep($_POST['username']));
		$password = trim(mysql_prep($_POST['password']));
		$hashed_password = sha1($password);
				
		if ( empty($errors) ) {
			
			$query = "SELECT id_accounts, username, voornaam, rechten ";
			$query .= "FROM accounts ";
			$query .= "WHERE username = '{$username}' ";
			$query .= "AND hashed_password = '{$hashed_password}' ";
			$query .= "LIMIT 1";
			$result = mysql_query($query);
			if (!$result) {
				die("Database query failed: " . mysql_error());
			}
			$nummer = mysql_num_rows($result);
			if ($nummer == 1) {

				$found_user = mysql_fetch_array($result);
				
					$_SESSION['id_accounts'] = $found_user['id_accounts'];
					$_SESSION['username'] = $found_user['username'];	
					$_SESSION['voornaam'] = $found_user['voornaam'];
					$_SESSION['rechten'] = $found_user['rechten'];
					if (!isset($found_user['rechten'])){
						exit;
					} elseif ($found_user['rechten'] == 1){
						header("Location: admin.php");
						exit;
					} elseif ($found_user['rechten'] == 0) {
						header("Location: klant.php");
					} else {
						exit;
					}
			} else {
				$message = "<br />Username/password combination incorrect.<br />
					Please make sure your caps lock key is off and try again.";
			}
			
		} else {
			$message = "";
			if (isset ($errors[0])){$message =  "<br />" . $errors[0] . "<br />";}
			if (isset ($errors[1])){$message =  "<br />" . $errors[1] . "<br />";}
		}
		
	} else {
		$username = "";
		$password = "";
	}

?>
<div id="content">
			<h1>Login</h1>
			<form action="login.php" method="post" name="f1">
			<table align="center">
				<tr>
					<th>Username:</th>
					<td align="center"><input type="text" name="username" maxlength="30" value="<?php echo htmlentities($username); ?>" /></td>
				</tr>
				<tr>
					<th>Password:</th>
					<td align="center"><input type="password" name="password" maxlength="30" value="<?php echo htmlentities($password); ?>" /></td>
				</tr>
				<tr>
					<input type="hidden" name="klopt" value="waar">
					<td colspan="2" align="center"><input type="submit" name="submit" value="Login" /></td>
				</tr>
			</table>
			</form>
<?php
	if (!empty($message)){
		echo "" . $message;
	}
?>
</div>
<?php require_once ("system/footer.php") ?>
klant.php
<?php require_once ("system/header_klant.php") ?>

<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="klant.php"> Klant Page </a></li>
		<li> <a href="overzicht_klant.php?nr=0-10&sorteer_asc=1"> overzicht producten </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>

<div id="content">
	KLANT pagina.<br />
	<< inhoud + plaatsjes etc >>
	<?php
		if (isset($_SESSION)){
		echo "hallo {$_SESSION['username']}";
		}
	?>
</div>
<?php require_once ("system/footer.php") ?>
invoeg.php
<?php require_once ("system/header_admin.php") ?>
<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>

<?php

	// functie om een variable klaar te maken voor de database
	function mysql_prep( $value ) {
		$magic_quotes_active = get_magic_quotes_gpc();
		$new_enough_php = function_exists( "mysql_real_escape_string" );
		if( $new_enough_php ) {
			if( $magic_quotes_active ) { $value = stripslashes( $value ); }
			$value = mysql_real_escape_string( $value );
		} else {
			if( !$magic_quotes_active ) { $value = addslashes( $value ); }
		}
		return $value;
	}

?>	

<?php
	//controleren of het formulier opgestuurd is
	if (isset($_POST['klopt']) && ($_POST['klopt']) == "waar" ) {

		// een array om de errors op te vangen
		$errors = array();
		
			// kijkt of de velden niet leeg zijn en anders error
			if (empty($_POST['veld1'])){
				$errors[0] = "veld1 niet goed ingevoerd";
			}
			if (empty($_POST['veld2'])){
				$errors[1] = "veld2 niet goed ingevoerd"; 
			}
			if (empty($_POST['veld3'])){
				$errors[2] = "veld3 controle niet goed ingevoerd"; 
			}
			
			// kijkt of de velden de juiste lengte hebben
			if (strlen(trim(mysql_prep($_POST['veld1']))) <6 || strlen(trim(mysql_prep($_POST['veld1']))) >20) {
				$errors[0] = "veld1 niet goed ingevoerd";
			}
			if (strlen(trim(mysql_prep($_POST['veld2']))) <6 || strlen(trim(mysql_prep($_POST['veld2']))) >30) {
				$errors[1] = "veld2 niet goed ingevoerd";
			}	
			if (strlen(trim(mysql_prep($_POST['veld3']))) <6 || strlen(trim(mysql_prep($_POST['veld3']))) >30) {
				$errors[2] = "veld3 niet goed ingevoerd";
			}
			
			$veld1 = trim(strip_tags(mysql_prep($_POST['veld1'])));
			$veld2 = trim(strip_tags(mysql_prep($_POST['veld2'])));
			$veld3 = trim(strip_tags(mysql_prep($_POST['veld3'])));	

		//als de array "errors" leeg is mag hij de data wegschijven in de database
		if ( empty($errors) ) {
						
									//tabel naam
				$query = "INSERT INTO tabel ( ";
				$query .= "veld1, veld2, veld3 ";
				$query .= ") VALUES ( ";
				$query .= "'{$veld1}', '{$veld2}', '{$veld3}' ";
				$query .= ")";
				$result = mysql_query($query);
					if (!$result) {
						die("Database query failed: " . mysql_error());
					}
					$message = "<br /> iets succesvol toegevoegd";	
					$veld1 = "";
					$veld2 = "";
					$password_controle = "";
				
		} else {
		// zet de $error om in $message die op het scherm worden getoond
			$aantal_errors = count($errors);
			$message = "";
				if (isset ($errors[0])){$message .= "<br />" . $errors[0] . "<br />";}
				if (isset ($errors[1])){$message .= "<br />" . $errors[1] . "<br />";}
				if (isset ($errors[2])){$message .= "<br />" . $errors[2] . "<br />";}
		}
		
	} else {
	// als het formulier niet opgestuurd is worden deze variabelen in het formulier weergegeven.
		$veld1 = "";
		$veld2 = "";
		$veld3 = "";
	}
	
?>
		<div id="content">
			<h1 align="center">Iets toevoegen</h1>
			<h4 align="center">
			<form action="invoeg.php" method="post" name="f1">
			<table id="tabel1">
				<tr>
					<td>veld1:</td>
					<td><input type="text" name="veld1" maxlength="30" size="20" value="<?php echo ($veld1); ?>" /></td>
				</tr>
				<tr>
					<td>veld2:</td>
					<td><input type="text" name="veld2" maxlength="30" size="15" value="<?php echo ($veld1); ?>" /></td>
				</tr>
				<tr>
					<td>veld3</td>
					<td><input type="text" name="veld3" maxlength="30" value="<?php echo ($veld3); ?>" /></td>
				</tr>
				<tr>
					<input type="hidden" name="klopt" value="waar">
					<td colspan="2" align="center"><input type="submit" name="submit" value="Toevoegen" /></td>
				</tr>
			</table>
			</form>
			<a href="overzicht.php?nr=0-10&sorteer_asc=1"> terug </a>
			
			
<?php
	// hier worden de message op het scherm weergegeven
	if (!empty($message)){
		echo "" . $message;
	}
?>
</h4>
</div>
<?php require_once ("system/footer.php") ?>
index.php
<?php require_once ("system/header.php") ?>

<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<?php if (!isset($_SESSION['username'])) {
					echo "<li> <a href=\"login.php\"> Login </a></li>"; }
		?>

		<li> <a href="overzicht_producten.php"> Bekijk producten </a></li>
	</ul>
</div>

<div id="content">
	Hallo en welkom bij deze pagina.<br />
	<< inhoud + plaatsjes etc >>
</div>
<?php require_once ("system/footer.php") ?>
delete.php
<?php require_once ("system/header_admin.php") ?>
<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>
		<div id="content">
<?php


if (isset($_GET['deleteid'])){
	$id = $_GET['deleteid'];
	$query = "DELETE FROM tabel WHERE id = {$id} LIMIT 1";
	$result = mysql_query($query, $connection);
	if(!$result){
		echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
		die("Database query failed: " . mysql_error());
	}
		echo "Deleten van af records succesvol<br />";
		echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a>";
		
} elseif (!empty($_POST['1']) && (!empty($_POST['2']))){
		
		$var1 = $_POST['1'];
		$var2 = $_POST['2'];
		if ($var2 >= $var1){
		
			while ($var1 < $var2){
				$query = "DELETE FROM tabel WHERE id={$var1}";
				$result = mysql_query($query, $connection);
				if(!$result){
					echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
					die("Database query failed: " . mysql_error());
				}
				$var1++;
			}
			$query = "DELETE FROM tabel WHERE id={$var2}";
			$result = mysql_query($query, $connection);
			if(!$result){
				echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
				die("Database query failed: " . mysql_error());
			}
			echo "delete succesvol<br />";
			echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
							
		} else {
		echo "error veld 2 is groter dan veld 1";
		}

} elseif (isset($_GET['del']) && $_GET['del'] == "truncate") {
	$query = "DELETE FROM tabel";
	$query2 = "ALTER TABLE tabel AUTO_INCREMENT =1";
		
	$result = mysql_query($query, $connection);
	if(!$result){
		echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
		die("Database query failed: " . mysql_error());
	}
		
	$result2 = mysql_query($query2, $connection);
	if(!$result2){
		echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a><br />";
		die("Database query failed: " . mysql_error());
	}
	
		echo "Deleten van af records:  succesvol<br />";
		echo "<a href=\"overzicht.php?nr=0-10&sorteer_asc=1\"> TERUG </a>";
} else {
	header("Location: overzicht.php?nr=0-10&sorteer_asc=1");
}


?>
</div>
<?php require_once ("system/footer.php") ?>
admin.php
<?php require_once ("system/header_admin.php") ?>

<div id="navigation">
	<ul>
		<li> <a href="index.php"> Home </a></li>
		<li> <a href="admin.php"> Admin Page </a></li>
		<li> <a href="overzicht.php?nr=0-10&sorteer_asc=1"> Overzicht </a></li>
		<li> <a href="logout.php"> Logout </a></li>
	</ul>
</div>

<div id="content">
	ADMIN pagina.<br />
	<< inhoud + plaatsjes etc >>
	<?php
		if (isset($_SESSION)){
		echo "hallo {$_SESSION['username']}";
		}
	?>
</div>
<?php require_once ("system/footer.php") ?>
header_admin.php
<!DOCTYPE HTML>
<?php session_start(); ?>
<?php require_once("system/connection.php") ?>

<?php
	if (!isset($_SESSION['rechten'])) {
		header("Location: index.php");
	}
	if ($_SESSION['rechten'] == 0) {
		header("Location: klant.php");
		$naam = $_SESSION['username'];
	}
?>
<html>
<head>
<LINK HREF="css/style.css" TYPE="text/css" REL="stylesheet">
<?php require_once("java_scripts/java.html") ?>
<title> shop </title>
</head>
<body>
<div id="titel">
hallo<br />
SHOP + LOGO
<?php
	if (isset($_SESSION['username'])){
		echo "<div id=\"titel_header\">";
		echo "<table align=\"right\" id=\"header\"><tr><td>ingelogd:</td></tr>";
		echo "<tr><td>{$_SESSION['username']}</td></tr>";
		echo "<tr><td><a href=\"admin.php\">Admin Page</a></td></tr>";
		echo "<tr><td><a href=\"logout.php\">logout</a></td></tr></table>";
		echo "</div>";
	}
?>
</div>

header.php
<!DOCTYPE HTML>
<?php session_start(); ?>
<?php require_once("system/connection.php") ?>
<?php
/*	if (isset($_SESSION['rechten'])){
		if ($_SESSION['rechten'] == 0) {
			header("Location: klant.php");
			$naam = $_SESSION['username'];
		}
		if ($_SESSION['rechten'] == 1) {
			header("Location: admin.php");
			$naam = $_SESSION['username'];
		}
	} */
?>
<html>
<head>
<LINK HREF="css/style.css" TYPE="text/css" REL="stylesheet">
<!-- include("javascripts.php"); -->
<title> shop </title>
</head>
<body>
<div id="titel">
hallo SHOP + LOGO
<?php
	if (isset($_SESSION['username'])){
		echo "<div id=\"titel_header\">";
		echo "<table align=\"right\" id=\"header\"><tr><td>ingelogd:</td></tr>";
		echo "<tr><td>{$_SESSION['username']}</td></tr>";
		if ($_SESSION['rechten'] == 1){
			echo "<tr><td><a href=\"admin.php\">Admin Page</a></td></tr>";
		}
		if ($_SESSION['rechten'] == 0){
			echo "<tr><td><a href=\"klant.php\">Klant Page</a></td></tr>";
		}
		echo "<tr><td><a href=\"logout.php\">logout</a></td></tr></table>";
		echo "</div>";
	}
?>
</div>
gegevens.php
<?php

define("DB_SERVER", "localhost");
define("DB_USER", "root");
define("DB_PASSWORD", "");
define("DB_NAME", "table");

?>
footer.php
<div id="footer">
hallo
</div>
</body>
</html>
<?php
	// 5. Close connection
	mysql_close($connection);
?>
connection.php
<?php
require_once ("gegevens.php");

$connection = mysql_connect(DB_SERVER, DB_USER, DB_PASSWORD);
if (!$connection) {
	die ("database connection failed for some reason" . mysql_error());
}

$db_select = mysql_select_db(DB_NAME, $connection);
if (!$db_select) {
	die ("database selection failed for some reason" . mysql_error());
}

?>
java.html
<script language="JavaScript" type="text/javascript">
function confirmDelete() {
if (confirm("Weet u het zeker?")) {
return true;
} else {
return false;
}
}
</script> 
style.css
 div#titel {
 FONT-SIZE: 30px;
 FONT-FAMILY: Verdana;
 position:absolute;
 top: 50px;
 left: 100px;
 width: 1000px;
 height: 150px;
 border:0px solid black;
 text-align: center;
 background-color: red;
}

 div#titel_header {
 FONT-SIZE: 15px;
 FONT-FAMILY: Verdana;
 position:absolute;
 top: 25px;
 left: 900px;
 width: 100px;
 height: 125px;
 text-align: center;
 background-color: red;
}

 div#navigation {
 FONT-SIZE: 20px;
 FONT-FAMILY: Verdana;
 position:absolute;
 top: 200px;
 left: 100px;
 width: 200px;
 height: 600px;
 border:0px solid black;
 text-align: left;
 background-color: yellow;
}

 div#content {
 FONT-SIZE: 15px;
 FONT-FAMILY: Verdana;
 position:absolute;
 top: 200px;
 left: 300px;
 width: 800px;
 height: 600px;
 border:0px solid black;
 text-align: center;
 background-color: green;
}

 div#footer {
 FONT-SIZE: 15px;
 FONT-FAMILY: Verdana;
 position:absolute;
 top: 800px;
 left: 100px;
 width: 1000px;
 height: 50px;
 border:0px solid black;
 text-align: center;
 background-color: blue;
}


/*table */

table#tabel1 {

 FONT-SIZE: 15px;
 FONT-FAMILY: Verdana;
 border-width: 4px;
 border-spacing: 3px;
 border-style: outset;
 border-color: black;
 border-collapse: collapse ; /* separate or collapse */
 text-align: left;
 margin-left:auto; margin-right:auto;
 background-color: #FFFFFF;
}

table#tabel1 td#nav{
FONT-SIZE: 20px;
FONT-FAMILY: Verdana;
border-width: 2px;
padding: 5px;
border-style: outset;
border-color: black;
text-align: left;
}

table#tabel1 td#header{
FONT-SIZE: 15px;
FONT-FAMILY: Verdana;
border-width: 2px;
padding: 5px;
border-style: outset;
border-color: black;
text-align: center;
}

table#tabel1 td{

FONT-SIZE: 15px;
FONT-FAMILY: Verdana;
border-width: 2px;
padding: 5px;
border-style: outset;
border-color: black;
}

/* table in header */
table#header {
 FONT-SIZE: 10px;
 FONT-FAMILY: Verdana;
 text-align: left;
}

table#header td{

FONT-SIZE: 15px;
FONT-FAMILY: Verdana;
border-width: 2px;
padding: 5px;
border-style: hidden;
border-color: black;
}

Reacties

0
Nog geen reacties.