Sunda Cyber Army

* Sunda Cyber Army 2k17 *
Indonesia Defacer ~
Current File : /home/dent/public_html/demos/edit_drilldown.php
<?php
var_dump($_REQUEST);

$host = "webdev.iyaserver.com";
$userid = "[youruserid]";
$userpw = "[yourpw]";
$db = "[database name]";

include '../pdloginvariables.php';

$mysql = new mysqli(
    $host,
    $userid,
    $userpw,
    $db
);

if($mysql->connect_errno) {
    echo "db connection error : " . $mysql->connect_error;
    exit();
}

$sql = "SELECT * from movieView2 WHERE dvd_title_id = " . $_REQUEST["id"];
echo "<hr>$sql<hr>";

$results = $mysql->query($sql);
if(!$results) { echo "ERORR: " . $mysql->error; exit(); }

$recorddata = $results->fetch_assoc();

$genresql = "SELECT * from genres";
$genreresults = $mysql->query($genresql);


echo "<h1>Edit movie " . $recorddata["title"] . "</h1>";
?>

<form action="update_drilldown.php">

    <input type="hidden" name="id" value="<?php echo $_REQUEST["id"]?>">

    <input type="text" name="title"
           value="<?php echo $recorddata['title'] ?>"> <br>

    <select name="genre">
        <option value="<?php echo $recorddata["genre_id"] ?>">
            <?php echo $recorddata["genre"] ?>
        </option>
        <?php
        while($currentrow = $genreresults->fetch_assoc()) {
            echo "<option value='" . $currentrow["genre_id"] . "'>" .
                $currentrow["genre"] . "</option>";
        }
        ?>
    </select><br>
    <input type="submit">

</form>