/
register_player_process.php
100 lines (86 loc) · 2.45 KB
/
register_player_process.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
<!DOCTYPE html>
<!--
Transit by TEMPLATED
templated.co @templatedco
Released for free under the Creative Commons Attribution 3.0 license (templated.co/license)
-->
<html lang="en">
<head>
<meta charset="UTF-8">
<title>TarneitCricketClub</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="description" content="" />
<meta name="keywords" content="" />
<!--[if lte IE 8]><script src="js/html5shiv.js"></script><![endif]-->
<script src="js/jquery.min.js"></script>
<script src="js/skel.min.js"></script>
<script src="js/skel-layers.min.js"></script>
<script src="js/init.js"></script>
<noscript>
<link rel="stylesheet" href="css/skel.css" />
<link rel="stylesheet" href="css/style.css" />
<link rel="stylesheet" href="css/style-xlarge.css" />
</noscript>
</head>
<body>
<body>
<?php include 'nav.php'; ?>
<?php
function sanitise($data) //eliminating unwanted characters using sanitise function
{
$data = trim($data);
$data = stripslashes($data);
$data = htmlspecialchars($data);
return $data;
}
require_once ("settings.php"); //connection info
$conn = @mysqli_connect($host,
$user,
$pwd,
$sql_db
);
if (!$conn)
{
echo "<p>Database connection failure</p>"; // not in production script
}
else
{
$sql_table="player";
//check whether the form fields in the register form are set
if(isset($_POST["player_fname"]))
{
//$playerid = sanitise($_POST["player_id"]);
$playerfname= sanitise($_POST["player_fname"]);
$playerlname= sanitise($_POST["player_lname"]);
$playerdob= sanitise($_POST["player_dob"]);
$playernationality= sanitise($_POST["player_nationality"]);
}
$query = "INSERT INTO $sql_table (PlayerFirstName, PlayerLastName, PlayerDOB, PlayerNationality) VALUES ('$playerfname', '$playerlname','$playerdob', '$playernationality')";
$result = mysqli_query($conn, $query);
if ($result)
{
header("location:register_player_role.php");
}
else
{
echo"<section id='main' class='wrapper'>";
echo"<div class='container'>";
echo"<header class='major'>";
echo"<h4>Please Enter a Non existing Role ID</h4>";
echo"</header>";
echo"<div class='container 25%'>";
echo"<a class='button fit' href='role.php'>Add Role</a>";
echo"</div>";
//header("location:index.php");
}
mysqli_close($conn);
}
?>
</section>
<footer>
</br>
</br>
<?php include 'footer.php'; ?>
</footer>
</body>
</html>