I am trying to check the check boxes if the database records are enabled, this seemed to work when I was displaying the checkboxes enclosed in <? ?> but does not seem to work via the HTML <from> </form> construct.
Here is the code:
<?php
include("include/vars.inc");
include("include/tpl/template.inc");
mysql_connect($dbHost,$dbUser,$dbPass);
@mysql_select_db($dbDatabase) or die( "Unable to select dbDatabase");
$serial=$_GET['serial'];
//Retreive the upload id of the corresponding serial number
$query="SELECT id from intitws where serial='$serial'";
print($query);
print("<br>");
$result=mysql_query($query) or die('Query Error');
//
while ($row = mysql_fetch_object($result))
{
$id=$row->id;
print("Record Upload ID is:$id");
print("<br>");
}
//Insert records if they do not exist in remediation table
$query="SELECT * from intitwsrem where serial='$serial'";
print($query);
print("<br>");
$result=mysql_query($query) or die('Query Error');
//
while ($row = mysql_fetch_object($result))
{
$rec=$row->serial;
print("Record exists:$rec");
}
if ($rec<>$serial)
{
$add_rec="INSERT INTO intitwsrem values ('$serial','$id','','','','','')";
// $add_rec="INSERT INTO intitwsrem values ('$serial','$id','$resolved','$acceptrisk','$comment','$user','$today')";
print("Generated SQL statement:$add_rec");
mysql_query($add_rec) or die(mysql_error());
}
?>
<?
if(isset($_GET['commented']))
{
print("Updates accepted");
print("<br>");
//Connect to DB
mysql_connect($dbHost,$dbUser,$dbPass);
@mysql_select_db($dbDatabase) or die( "Unable to select dbDatabase");
//SET global variables
$resolved=$GET['resolved'];
$acceptrisk=$GET['acceptrisk'];
$comment=$GET['comment'];
$serial=$GET['serial'];
$id=$GET['id'];
$date=$GET['date'];
$user=$_GET['user'];
$update="UPDATE intitwsrem SET serial='$serial',id='$id',resolved='$resolved',acceptrisk='$acceptrisk',memo='$comment',user='$use
r',date='$date' where serial='$serial'";
print($update);
mysql_query($update) or die(mysql_error());
}
else
{
//Retreive record to display
$query="SELECT * from intitwsrem where serial='$serial'";
print($query);
print("<br>");
$result=mysql_query($query) or die('Query Error');
//
while ($row = mysql_fetch_object($result))
{
$serial=$row->serial;
$id=$row->id;
if ($row->resolved=='on')
{
$resolved="CHECKED";
print($resolved);
}
else
{
$resolved=$row->resolved;
print($resolved);
}
if ($row->acceptrisk=='on')
{
$acceptrisk="CHECKED";
print($acceptrisk);
}
else
{
$acceptrisk=$row->acceptrisk;
print($acceptrisk);
}
$memo=$row->memo;
if ($row->user=="")
{
$user=getenv('REMOTE_USER');
}
else
{
$user=$row->user;
}
if ($row->date=="")
{
$date=date("Ymd");
}
else
{
$date=$row->date;
}
}
?>
<form method='get' action="<?=$_SERVER['PHP_SELF']?>">
Serial:<input type='hidden' name='serial' value="<?php echo $serial; ?>"><br>
ID:<input type='hidden' name='id' value="<?php echo $id; ?>"><br>
Resolved: <input type=checkbox name=resolved $resolved><br>
Accept Risk: <input type=checkbox name=acceptrisk $acceptrisk><br>
Comment: <input type='text' name='comment' value="<? echo $memo; ?>"><br><br>
User:<input type='text' name='user' value="<?php echo $user;?>"><br>
Date:<input type='text' name='date' value="<?php echo $date;?>"><br>
<input type='hidden' name='commented' value='set'>
<input type='submit' value='Submit'>
</form>
<?
}
?>
