Jeg er et eksempel jeg har lavet. Har dog ikke testet det, og det er ikke klar til at blive lagt på nette, da det ikke sanitizer get værdien og derfor forsage SQL injection.
SQL kodeb:CREATE DATABASE `booking`;
CREATE TABLE `booking`.`events` (
`id` INT(11) NOT NULL AUTO_INCREMENT,
`name` VARCHAR(45) NOT NULL,
`club` VARCHAR(45) NOT NULL,
`price` DECIMAL(30) NOT NULL,
PRIMARY KEY (`id`));
INSERT INTO `booking`.`events` (`name`, `club`, `price`) VALUES ('Roskilde F', 'Orange', '100000.45');
INSERT INTO `booking`.`events` (`name`, `club`, `price`) VALUES ('Sort Sol', 'Vega', '542');
INSERT INTO `booking`.`events` (`name`, `club`, `price`) VALUES ('La Roux', '5 Øren', '450');
INSERT INTO `booking`.`events` (`name`, `club`, `price`) VALUES ('Gesaffelstein', 'DR Koncert', '700');
INSERT INTO `booking`.`events` (`name`, `club`, `price`) VALUES ('Daft Punk', 'Operaen', '1200.32');
CREATE USER 'bookie'@'localhost' IDENTIFIED BY '***';GRANT USAGE ON *.* TO 'bookie'@'localhost' IDENTIFIED BY '***' WITH MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0;GRANT ALL PRIVILEGES ON `booking`.* TO 'bookie'@'localhost';
PHP - club_events.php<html>
<head>
<title>Club Events</title>
</head>
<body>
<div id="form">
<form action="club_events.php" method="get">
Select Event:<br />
<div id="combobox">
<select name="events">
<?php
$db = mysqli_connect('127.0.0.1', 'bookie', 'nbfDwR9ApeUmHx6A', 'booking') or die("Database error");
if (mysqli_connect_errno())
{
printf("Connect failed: %s\n", mysqli_connect_error());
exit();
}
$query = "SELECT id, name, club FROM events";
if ($result = mysqli_query($db, $query))
{
while ($obj = mysqli_fetch_object($result)) {
printf ('<option value="%s"> %s ( %s )</option><br />', $obj->id, $obj->name, $obj->club);
}
}
mysqli_free_result($result);
?>
</select>
</div>
<input type="submit" value="Submit">
</form>
</div>
<div id="result">
<?php
$e = $_GET["events"];
if(isset($e))
{
$query = "SELECT id, name, club, price FROM events WHERE id = '". $e ."'";
if (mysqli_connect_errno())
{
printf("Connect failed: %s\n", mysqli_connect_error());
exit();
}
if ($result = mysqli_query($db, $query))
{
echo "Price list:<br />";
while ($obj = mysqli_fetch_object($result)) {
printf ("Event: %s, Club: %s, Price: %s\n", $obj->name, $obj->club, $obj->price);
}
mysqli_free_result($result);
}
}
mysqli_close($db);
?>
</div>
</body>
</html>
