// $link,
// $host,
// $user,
// $password,
// $db,
// $port
// );
// // echo $success;
// mysqli_query($link,"SET NAMES utf8");
$title = $_POST['title'];
$director = $_POST['director'];
$rating = $_POST['rating'];
$year = $_POST['year'];
$length = $_POST['length'];
$boxOffice = $_POST['boxOffice'];
$sql = "INSERT INTO Movies (`title`, `director`, `year`, `rating`, `length`, `boxOffice`) VALUES (" . sqlPreprocess($title) . ", " . sqlPreprocess($director) . ", " . sqlPreprocess($year) . ", " . sqlPreprocess($rating) . ", " . sqlPreprocess($length) . ", " . sqlPreprocess($boxOffice) . ")";
$result = mysqli_query($link, $sql);
echo $result;
echo '<script type="text/javascript">
window.location = "index.html"</script>';
function sqlPreprocess($origin)
{
if (get_magic_quotes_gpc()) {
$origin = stripslashes($origin);
}
$origin = "'" . mysql_real_escape_string($origin) . "'";
return $origin;
}
?>
</tbody>
<body>
<?php
$user = '******';
$password = '';
$db = 'movie';
$host = 'localhost';
$port = 3306;
$link = mysqli_init();
$success = mysqli_real_connect($link, $host, $user, $password, $db, $port);
// echo $success;
mysqli_query($link, "SET NAMES utf8");
$movieTitle = $_POST['movieTitle'];
$review = $_POST['review'];
$reviewerName = $_POST['reviewerName'];
$sql = "INSERT INTO Reviews (`movieTitle`, `reviewerName`, `review`) VALUES (" . sqlPreprocess($movieTitle) . ", " . sqlPreprocess($reviewerName) . ", " . sqlPreprocess($review) . ")";
$result = mysqli_query($link, $sql);
echo $result;
echo '<script type="text/javascript">
window.location = "index.html"</script>';
function sqlPreprocess($origin)
{
if (get_magic_quotes_gpc()) {
$origin = stripslashes($origin);
}
$origin = "'" . mysql_real_escape_string($origin) . "'";
return $origin;
}
?>
</tbody>
echo $key;
echo "</td>";
echo "<td>";
if ($key == "length)") {
echo " minutes";
}
echo $row[$value];
echo "</td>";
echo "</tr>";
}
echo '</table>';
// echo $row['rate'];
// echo $row['Driver.carId'];
}
// echo "good";
$sql = "select * from Reviews where movieTitle = " . sqlPreprocess($movieTitle);
// echo $sql;
if ($result = mysqli_query($link, $sql)) {
while ($row = mysqli_fetch_assoc($result)) {
echo "<p>";
echo $row['review'];
echo "</p>";
}
mysqli_free_result($result);
}
function sqlPreprocess($origin)
{
if (get_magic_quotes_gpc()) {
$origin = stripslashes($origin);
}
$origin = "'" . mysql_real_escape_string($origin) . "'";