\n");
//print_r($_POST);
//print_r($_SESSION); // Warning, printing session vars could lead to security issues
//print("\n");
function db_table_prepared_test($db, $statement, $prepared_array, $id, $link)
{
try
{
$db->setAttribute( PDO::ATTR_EMULATE_PREPARES, false );
$sth = $db->prepare ($statement);
$sth->execute($prepared_array);
print("\n");
print("\n");
foreach(range(0, $sth->columnCount() - 1) as $column_index)
{
print("| " . $sth->getColumnMeta($column_index)["name"] . " | \n");
}
print("
\n");
$row_count = 0;
while($row = $sth->fetch(PDO::FETCH_BOTH))
{
$row_count++;
print("\n");
for($i = 0; $i < $sth->columnCount(); $i++)
{
if(isset($link[$i]["link"]))
{
$link_str = $link[$i]["link"];
if(!($link_str == ""))
{
$get_string = "";
foreach ($link[$i][0] as $column=>$value) {
if(!($get_string == ""))
$get_string = $get_string . "&";
$get_string = $get_string . "$value=" . htmlspecialchars($row[$column]);
}
$href = "";
$href_prime = "";
}
}
else
{
$href = "";
$href_prime = "";
}
print("| $href" . htmlspecialchars($row[$i]) . "$href_prime | \n");
}
?>
|
\n");
}
print("
\n");
}
catch (PDOException $e)
{
print "
";
print_r("\n" . $e . "\n");
}
}
function db_table_test($db, $statement, $id, $link)
{
try
{
db_table_prepared_test($db, $statement, NULL, $id, $link);
}
catch(PDOException $e)
{
# Print error information from exception object
print (" getCode value: " . $e-> getCode () . "\ n");
print (" getMessage value: " . $e-> getMessage () . "\ n");
# Print error information from database handle
print (" errorCode value: " . $db-> errorCode () . "\ n");
print (" errorInfo value: " . join (",", $db-> errorInfo ()) . "\ n");
// DuBois, Paul (2013-03-28). MySQL (5th Edition) (Developer's Library) (Kindle Locations 16308-16311). Pearson Education. Kindle Edition.
}
}
if(!isset($_SESSION['email']))
{
echo "
You must sign in to view this page
";
goto exit_page;
}
if($_SESSION['admin'] != '1') {
?>
This account does not have priveliges for viewing this page
query($sql);
$num_rows = $result->rowCount();
if ($num_rows == 0){
?>
The entered email is not registered. Please click here to go back.
prepare($statement);
$count = $stmt->execute($prepared_array);
}
if(isset($_POST['transaction_action'])){
if($_POST['transaction_action']=='Delete'){
$sql = "DELETE FROM user_account WHERE transaction_id = ?";
$sth = $db->prepare($sql);
$sth->execute(array($_POST['transaction_id']));
}
}
// display all credits
$statement = "SELECT transaction_id, email, transaction_date, transaction_type, transaction_notes, transaction_amount FROM user_account WHERE email='$customer_email'";
db_table_test($db, $statement, "t01", NULL);
$db = NULL;
?>
$e");
}
?>