qemudb/admin/addCategory.php

<?php
include("path.php");
require(BASE."include/incl.php");
require(BASE."include/category.php");

$aClean = array(); //array of filtered user input

$aClean['catId'] = makeSafe($_REQUEST['catId']);
$aClean['name'] = makeSafe($_REQUEST['name']);
$aClean['description'] = makeSafe($_REQUEST['description']);
$aClean['parentId'] = makeSafe($_REQUEST['parentId']);
$aClean['submit'] = makeSafe($_REQUEST['submit']);

if(!$_SESSION['current']->hasPriv("admin"))
{
    util_show_error_page();
    exit;
}
$oCat = new Category($aClean['catId']);
if($aClean['submit'])
{
    $oCat->update($aClean['name'],$aClean['description'],$aClean['parentId']);
    redirect(apidb_fullurl("appbrowse.php?catId=".$oCat->iCatId));
}
else
{
    apidb_header("Add Category");
    $sQuery = "SELECT catId, catName FROM appCategory WHERE catId!='?'";
    $hResult = query_parameters($sQuery, $aClean['catId']);
    while($oRow = mysql_fetch_object($hResult))
    {
        $aCatsIds[]=$oRow->catId;
        $aCatsNames[]=$oRow->catName;
    }
    echo "<form method=\"post\" action=\"addCategory.php\">
      <input type=\"hidden\" name=\"catId\" value=\"".$oCat->iCatId."\" /> 
      <table border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"2\">
        <tr>
          <td width=\"15%\" class=\"box-label\"><b>Category name</b></td>
          <td class=\"box-body\">
            <input type=\"text\" size=\"50\" name=\"name\" value=\"".$oCat->sName."\" /> 
          </td>
        </tr>
        <tr>
          <td width=\"15%\" class=\"box-label\"><b>Description</b></td>
          <td class=\"box-body\">
            <input type=\"text\" size=\"50\" name=\"description\" value=\"".$oCat->sDescription."\" /> 
          </td>
        </tr>
        <tr>
          <td width=\"15%\" class=\"box-label\"><b>Parent</b></td>
          <td class=\"box-body\">
            ".html_select("parentId",$aCatsIds,$oCat->iParentId,$aCatsNames)." 
          </td>
        </tr>
        <tr>
          <td colspan=\"2\" class=\"box-body\">
            <input type=\"submit\" name=\"submit\" value=\"Submit\" />
          </td>
        </tr>
      </table>
      </form>";
}
apidb_footer();
?>