Could someone please tell me what I am doing wrong here? The information is being submitted to the database even though there are empty fields.
I just learned that text fields are always set, no matter if they are blank or not.
<?php
$thispageabsolute = "addnews";
include("./includes/adminheader.php");
if (isset($_POST['submit'])) {
if (isset($_POST['news']) && isset($_POST['title'])) {
include("./includes/db_connect.php");
$sql = "INSERT INTO vvmnews (title, message, user, newsedit, newsdelete) VALUES ('". $_POST['title'] ."', '". $_POST['news'] ."', '". $_SESSION['vvmlogin'] ."', '". $_POST['newsedit'] ."', '". $_POST['newsdelete'] ."')"; // query database
$result=$db->query($sql); // return result
if (DB::isError($result)) {
unset($_POST['submit']);
unset($_POST['news']);
unset($_POST['title']);
echo DB::errorMessage($result);
echo "The database was not updated.<br> Please try again.<br>";
echo "<form action=\"$PHP_SELF\" method=\"post\">";
echo "Title: <input type=\"text\" name=\"title\"><br>";
echo "<textarea name=\"news\" rows=\"12\" cols=\"57\"></textarea><br>";
echo "Edit Group: <select name=\"newsedit\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "Delete Group: <select name=\"newsdelete\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "<input type=\"submit\" value=\"Submit\" name=\"submit\"> <input type=\"reset\" value=\"Reset\">";
echo "</form>";
} else {
echo $_POST['title'] .", was successfully added to the database.";
unset($_POST['submit']);
unset($_POST['news']);
unset($_POST['title']);
}
$db->disconnect();
} else {
echo "You did not fill in all the required fields.<br>Please try again.<br>";
echo "<form action=\"$PHP_SELF\" method=\"post\">";
echo "Title: <input type=\"text\" name=\"title\"><br>";
echo "<textarea name=\"news\" rows=\"12\" cols=\"57\"></textarea><br>";
echo "Edit Group: <select name=\"newsedit\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "Delete Group: <select name=\"newsdelete\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "<input type=\"submit\" value=\"Submit\" name=\"submit\"> <input type=\"reset\" value=\"Reset\">";
echo "</form>";
unset($_POST['submit']);
unset($_POST['news']);
unset($_POST['title']);
}
} else {
echo "<form action=\"$PHP_SELF\" method=\"post\">";
echo "Title: <input type=\"text\" name=\"title\"><br>";
echo "<textarea name=\"news\" rows=\"12\" cols=\"57\"></textarea><br>";
echo "Edit Group: <select name=\"newsedit\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "Delete Group: <select name=\"newsdelete\">";
echo "<option value=\"3\">Administrator</option>";
echo "<option value=\"1\">Billing</option>";
echo "<option value=\"2\">Technician</option>";
echo "</select> ";
echo "<input type=\"submit\" name=\"submit\" value=\"Submit\"> <input type=\"reset\" value=\"Reset\">";
echo "</form>";
}
include("./includes/tablebottom_sm.php");
?>
</div>
</div>
</body>
</html>
