add_software.php

<?php
// *************************************************************
// file: add_software.php
// created by: Alex Gordon, Elliott Staude
// date: 04-6-2014
// purpose: The page used to add software item content to GQUIP’s database.
// 
// *************************************************************

// include nav bar and other default page items
// include nav bar and other default page items
include('header.php');
if(!isset($_SESSION['user'])) {
	header('Location: login.php');
}
// Manager or User
if($_SESSION['access']==ADMIN_PERMISSION) {
?>

<!-- begin content -->
<div class="row">
<div class="large-10 large-centered columns">
<h1>New Software</h1>

<?php
// if submit post request
if (isset($_POST['submit'])){

    //connect to the database 
	include 'open_db.php';

    //display error if database cannot be accessed 
    if (!$conn ) 
    {
        echo('<div data-alert class="alert-box warning">
        	  Sorry! Database is unavailable.
        	  <a href="#" class="close">&times;</a>
        	</div>');
        echo( print_r( sqlsrv_errors(), true));
    }
    //assign form input to variables
    // get current date and time
    include 'dateTime.php';
	$last_updated_by = $_SESSION['user'];
	$last_updated_at = $dateTime;
	$created_at = $dateTime; 
    $name = $_POST['name'];
    $software_type = $_POST['software_type'];

    //SQL query to insert variables above into table
    $sql = "INSERT INTO dbo.software ([last_updated_by],[last_updated_at],[created_at],[name],[software_type])VALUES('$last_updated_by','$last_updated_at','$created_at','$name','$software_type')";
    $result = sqlsrv_query($conn, $sql);
    //if the query cant be executed
    if(!$result)
    {
        echo print_r( sqlsrv_errors(), true);
        exit;
    }
    // close the connection

    sqlsrv_close( $conn);
    echo "<h3>Data successfully added</h3>";
	echo "<a class=\"button\" href=\"software.php\">OK</a>";
	echo "</div>";
}
else {
?>
<!-- form -->
<form data-abide type="submit" name="submit" enctype='multipart/form-data' action="add_software.php" method="POST">
	<fieldset>
		<legend>Software Info</legend>

		<div class="row">

			<div class="large-4 columns">
				<label>Name</label>
					<input type="text" name="name" placeholder="Microsoft Office" required>
			</div>
			<div class="large-4 columns">
				<label>Software type</label>
					<input type="text" name="software_type" placeholder="Document editing package" required>
			</div>
		</div>
	</fieldset>
		<div class="large-12 columns">
		<div class="row" align="center">
		<a class="button large-4 columns" href="software.php">Cancel</a>
		<input type="submit" name="submit" value="Create New Item" class="button large-4 columns" formmethod="post" action="software.php">
		</div>
		</div>
</form>
</div>
</div>

<?php
	}
	}
	// Faculty
	if($_SESSION['access']==FACULTY_PERMISSION OR $_SESSION['access']==USER_PERMISSION ) {
	// Faculty and users should not have access to this page. 
	header('Location: home.php');
	}
	//footer
	include('footer.php')
?>