update,

_resources/it114105/itp4513/Assignment/18-19/addOrder.php

@@ -0,0 +1,69 @@
+<?php
+	require_once('ini/conn.php');
+
+	$name = $_POST["DealerName"];
+	$addr = $_POST["Address"];
+	$phone = $_POST["phone"];
+	$countFaild = 0;
+	if(strlen(trim($name))>0&strlen(trim($addr))>0&strlen(trim($phone))>0){
+	foreach($_POST as $key => $value){
+		if($key!="DealerName" && $key!="Address" && $key!="phone"){
+		  if($value>0){
+			$sesTitle = "";
+			$sesTitle =$name.substr($key,8);
+			$orderPart[$sesTitle] = $value;
+		  }else
+			  $countFaild++;
+		  }
+	}
+	$sql = "SELECT count(*) as count FROM part";
+	$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
+	$record = mysqli_fetch_assoc($result);
+	
+	if($record["count"]==($countFaild)){
+		header("location:createOrder.php?NotQty=0");
+	}else{
+	$sql = "SELECT dealerID FROM dealer WHERE name='$name'";
+	$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
+	$record = mysqli_fetch_assoc($result);
+	$getToday=date("Y-m-d H:i:s");
+
+	$sql = "INSERT INTO orders(dealerID, orderDate,deliveryAddress,status) VALUES('$record[dealerID]','$getToday','$addr',1)";
+	$re = mysqli_query($conn, $sql) or die(mysqli_error($conn));
+	
+	$insertID = mysqli_insert_id($conn);
+		
+	foreach($orderPart as $key => $value){
+		$partNo = substr($key,strlen($name));
+		$getPricesql = "SELECT stockPrice FROM part WHERE partNumber='$partNo'";
+		$getPricesqlrs = mysqli_query($conn, $getPricesql) or die(mysqli_error($conn));
+		$getPricesqlrc  = mysqli_fetch_assoc($getPricesqlrs);
+		$price = $getPricesqlrc["stockPrice"] * $value;
+
+		$sql = "INSERT INTO orderpart VALUES('$insertID','$partNo','$value','$price')";
+		$result = mysqli_query($conn, $sql) or die(mysqli_error($conn));
+	}
+		
+		if(mysqli_affected_rows($conn)>0)
+			
+			header("location:confirmOrder.php?orderID=$insertID");
+		else
+			header("location:createOrder.php?createOrder=FALSE");
+	}
+	
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+?>