I am trying to make it so my script will show a drop down form of all accepted credit cards from a certain table called devbg_credit_cards. I've checked all the spellings / letter cases and it's all right....but for some reason it won't show those credit cards in my options... any ideas?
Specifically this is the line
echo'<tr><td>Credit Card:</td><td>';
echo' <select size="1" name="CreditCard">
<option selected value="BAD">Select Credit Card</option>';
while( $a3 = mysql_fetch_array( $r3 ) ) {
echo'<option value="' . $a3[CreditCard] . '">' . $a3[CreditCard] . '</option>';
}
echo'</select>';
echo'</td></tr>';
here's the whole code:
<?php
require_once("conn.php");
require_once("header.php");
echo'<h1>Payment Via Credit Card</h1><br />';
if( $_GET[process] == now ) {
if( $_POST['CreditCardNumber'] == "" || $_POST['SocialNumber'] == "" || $_POST['CreditCard'] == "BAD") {
echo'Please fill out all forms!';
} Else {
echo'Thank you. You will recieve an email with your reciept. You may want to write down or copy and paste your order id, just for security...';
$q2 = "SELECT * FROM devbg_orders_content WHERE OrderID = '$_POST[OrderID]'";
$r2 = mysql_query( $q2 );
$update = "UPDATE devbg_orders SET
CC_type = '$_POST[CreditCard]',
CC_number = '$_POST[CreditCardNumber]',
CC_sec = '$_POST[SocialNumber]'
WHERE OrderID = $_POST[OrderID]";
$result = mysql_query( $update );
while( $a2 = mysql_fetch_array( $r2 ) ) {
$u1 = "UPDATE devbg_products SET
stat = stat + 1
WHERE
ItemID = '$a2[ItemID]'
";
$ur1 = mysql_query( $u1 );
$items .= '' . $a2[ItemName] . ' :: Quantity: ' . $a2[ItemQty] . ' :: Colour: ' . $a2[ItemColor] . ' :: Size: ' . $a2[ItemSize] . ' <br />';
}
//Multiple Recipients
$to = $aset[MerchantEmail] . ',' . $_POST[email];
// subject
$subject = 'Credit Card Order Reciept at ' . $_SERVER[HTTP_HOST] . ' - Quick email.';
// message
$message = '
Hello ' . $_POST[first_name] . ',
<br />
Here is a list of products that you ordered. Your OrderID is ' . $_POST[OrderID] . ', we suggest recording it. <br />
' . $items . '
Your credit card number and the last 4 digits of your Social Security Number are safely recorded in our database.
Thanks!
';
}
} else {
$q3 = "SELECT * FORM devbg_credit_cards";
$r3 = mysql_query( $q3 );
echo'<form action="CreditCard.php?process=now" method="POST">';
echo'<table border="0" cellpadding="2">';
echo'<tr><td>Credit Card:</td><td>';
echo' <select size="1" name="CreditCard">
<option selected value="BAD">Select Credit Card</option>';
while( $a3 = mysql_fetch_array( $r3 ) ) {
echo'<option value="' . $a3[CreditCard] . '">' . $a3[CreditCard] . '</option>';
}
echo'</select>';
echo'</td></tr>';
echo'<tr><td>Credit Card Number:
<br />(Will be kept private!)';
echo'</td><td>';
echo'<input type=text name=CreditCardNumber>';
echo'</td></tr>';
echo'<tr><td>Last 4 Digits of Social Security Number:
<br/> (Will be kept private!)</td><td>';
echo'<input type=text name=SocialNumber</td></tr><tr><td colspan="2">';
echo'<input type=hidden name=OrderID value=' . $_POST['item_name'] . '>';
echo'<input type=hidden name=OrderAmount value=' . $_POST['amount'] . '>';
echo'<input type=hidden name=OrderCurrency value=' . $_POST['currency_code'] . '>';
echo'
<input type=hidden name=first_name value="<?=$_POST[first_name]?>">
<input type=hidden name=last_name value="<?=$_POST[last_name]?>">
<input type=hidden name=email value="<?=$_POST[email]?>">
';
echo'<center><input type=submit name=Submit value=Continue></center></td>';
echo'</tr></table>';
echo'</form>';
}
require_once("footer.php");
?>
