I have this code:
<?php
include("include/vars.inc");
include("include/tpl/template.inc");
mysql_connect($dbHost,$dbUser,$dbPass);
@mysql_select_db($dbDatabase) or die( "Unable to select dbDatabase");
$serial=$GET['serial'];
global $serial;
//echo $host;
$query="SELECT * from intitwsrem where serial='$serial'";
print($query);
$result=mysql_query($query) or die('Query Error');
?>
<table border="1">
<tr>
<td bgcolor="#FFFFCC"></td>
<tr><td>Serial</td><td>ID</td><td>Resolved</td><td>Acccept Risk</td><td>Comment</td><td>Updated by</td><td>Updated on</td></tr>
<?
while ($row = mysql_fetch_object($result)) {
$serial=$row->serial;
if ($row->resolved=='on')
{
$checked1="CHECKED";
}
if ($row->acceptrisk=='on')
{
$checked2="CHECKED";
}
print("<tr>");
print("<td>$row->serial</td> ");
print("<td>$row->id</td> ");
print("<td><input type=checkbox name=resolved[] value=$row->resolved $checked1></td>");
print("<td><input type=checkbox name=acceptrisk[] value=$row->acceptrisk $checked2></td>");
print("<td>$row->memo</td>");
print("<td>$row->user</td>");
print("<td>$row->date</td>");
print("</tr>");
}
?>
</tr>
<?
if(isset($GET['commented']))
{
print("Updates accepted");
print("<br>");
$user=getenv('REMOTE_USER');
$today=date("Ymd");
//Connect to DB
mysql_connect($dbHost,$dbUser,$dbPass);
@mysql_select_db($dbDatabase) or die( "Unable to select dbDatabase");
//SET global variables
$resolved=$GET['resolved'];
$acceptrisk=$GET['acceptrisk'];
$comment=$GET['comment'];
$serial=$GET['serial'];
$query="SELECT id from intitws where serial='$serial'";
print($query);
print("<br>");
$result=mysql_query($query) or die('Query Error');
while ($row = mysql_fetch_object($result)){
$id=$row->id;
print("$id");
}
$add_rec="INSERT INTO intitwsrem values ('$serial','$id','$resolved','$acceptrisk','$comment','$user','$today')";
print($add_rec);
mysql_query($add_rec) or die(mysql_error());
}
else
{
?>
<form method='get' action="<?=$_SERVER['PHP_SELF']?>">
Resolved: <input type=checkbox name=resolved><br>
Accept Risk: <input type=checkbox name=acceptrisk><br>
Comment: <input type='text' name='comment'><br><br>
<input type='hidden' name='commented' value='set'>
<input type='hidden' name='serial' value=$serial>
<input type='submit' value='Submit'>
</form>
<?
}
?>
When I hit submit, it should get the serial# from the form that opened it, unfortunately it gets lost.
