<?php
session_start();
session_register("ic_search");
session_register("ename_search");
?>
<?php
$IC = $POST['txtICNumber'];
$emp_name = $POST['txtName'];
$emp_address = $POST['txtAddress'];
$date_join = $POST['txtDjoin'];
$job_title = $POST['txtJobTitle'];
$dept = $POST['txtDept'];
$sex = $_POST['rdoSex'];
$add = $POST['Insert'];
$ic_find = $POST['ICSearch'];
$ename_find = $_POST['EmpSearch'];
if(isset ($add) ){
$correct_IC = chkICNo($IC);
if(!$correct_IC)
print("Format of IC number is incorrect. Please check again</br>");
$correct_empName = chkEmpName($emp_name);
if(!$correct_empName)
print("Format of Employee name is incorrect. Please check again</br>");
if(!$emp_address)
print("Employee Address cannot be empty. Please check again</br>");
$correct_dateJoin = chkDateJoin($date_join);
if(!$correct_dateJoin)
print("Format of date is incorrect. Please check again</br>");
$correct_jobTitle = chkJobTitle($job_title);
if(!$correct_jobTitle)
print("Format of Job Title is incorrect. Please check again</br>");
$correct_Dept = chkDept($dept);
if(!$dept)
print("Format of Department is incorrect. Please check again</br>");
if(!$sex)
print("You must specify male or female.</br>");
if($correct_IC && $correct_empName && $emp_address && $correct_dateJoin && $correct_jobTitle && $correct_Dept && $sex){
if(findDuplicate($IC))
print("Duplicate found! Please check your entry</br>");
else
insertRec($IC,$emp_name,$emp_address,$date_join,$job_title,$dept,$sex);
}
}
function chkICNo($IC){
if($IC && preg_match("/ [FS] \d{7} [A-Z]$ /x",$IC,$array))
return true;
else
return false;
}
function chkEmpName($emp_name){
if($emp_name && preg_match("/ [a-zA-Z ]+$ /x",$emp_name,$array))
return true;
else
return false;
}
function chkDateJoin($date_join){
if($date_join && preg_match("/ [0-9]{4}-[0-9]{2}-[0-9]{2} /x",$date_join,$array))
return true;
else
return false;
}
function chkJobTitle($correct_jobTitle){
if($correct_jobTitle && preg_match("/ [a-zA-Z ]+$ /x",$correct_jobTitle,$array))
return true;
else
return false;
}
function chkDept($dept){
if($dept && preg_match("/ [a-zA-Z ]+$ /x",$dept,$array))
return true;
else
return false;
}
function insertRec($IC,$emp_name,$emp_address,$date_join,$job_title,$dept,$sex){
$IC = addslashes($IC);
$emp_name = addslashes($emp_name);
$emp_address = addslashes($emp_address);
$date_join = addslashes($date_join);
$job_title = addslashes($job_title);
$dept = addslashes($dept);
$sex = addslashes($sex);
$db = mysql_connect("localhost","root","root");
if(!$db){
print("Could not connect to database. Please try again later.");
exit;
}
mysql_select_db("lms");
$query = "INSERT into emp values ('".$IC."', '".$emp_name."', '".$emp_address."', '".$job_title."', '".$date_join."', '".$dept."', '".
$sex."')";
$result = mysql_query($query);
if($result)
echo mysql_affected_rows()." records inserted into database.";
mysql_close($db);
}
function findDuplicate($IC){
$rvalue = false;
$db = mysql_connect("localhost","root","root");
if(!$db){
print("Could not connect to database. Please try again later.");
exit;
}
mysql_select_db("lms");
$result = mysql_query("SELECT icnum from emp");
while ($a_row = mysql_fetch_row($result)){
foreach ($a_row as $field){
if((strcmp("$field","$IC")==0)){
$rvalue = true;
break;
}
}
}
mysql_close($db);
return $rvalue;
}
if(isset($ic_find)){
$ic_search=$_POST['txtICSearch'];
$correct_IC = chkICNo($ic_search);
if(!$correct_IC)
print("Format of IC number is incorrect. Please check again</br>");
else{
include("prtUserTableByIC.php");
//header("Location: prtUserTableByIC.php");
}
}
if(isset($ename_find)){
$ename_search=$_POST['txtNameSearch'];
print("$ename_search");
$correct_name = chkEmpName($ename_search);
if(!$correct_name)
print("Format of Employee Name number is incorrect. Please check again</br>");
else{
include("prtUserTableByName.php");
//header("Location: printUserTable.php");
}
}
?>
<html>
<head>
<title>Capture Employee detail</title>
</head>
<body>
</body>
</html>
As can be seen, I commented out the 2 headers line. If I used those 2 lines, the session variables will not retain its values in other pages.