[+] EDITÃ˜R MODE [+]

htdocs > web > PHP_script > loader_staff.php

Edit File: loader_staff.php

<?php
$link = mysqli_connect("hostingmysql323.register.it", "gregorio", "fontana2015", "fontanaarchitetti");
 
// Check connection
if($link === false){
    die("ERROR: Could not connect. " . mysqli_connect_error());
}

// Escape user inputs for security
$nome = mysqli_real_escape_string($link, $_POST['nome']);
$cognome = mysqli_real_escape_string($link, $_POST['cognome']);
$ruolo = mysqli_real_escape_string($link, $_POST['ruolo']);
$bio_IT = mysqli_real_escape_string($link, $_POST['bio_IT']);
$bio_EN = mysqli_real_escape_string($link, $_POST['bio_EN']);
 
$required = array('nome', 'cognome', 'ruolo');

$error = false;
foreach($required as $field) {
  if (empty($_POST[$field])) {
    $error = true;
  }
}

if ($error) {
  header('location:../admin_staff.php?load=no');
} else {
	$sql = "INSERT INTO staff (nome, cognome, ruolo, bio_IT, bio_EN) VALUES ('$nome', '$cognome', '$ruolo', '$bio_IT', '$bio_EN')";
				if(mysqli_query($link, $sql)){
				   header("location:../admin_staff_edit.php?load=yes");
				} else{
					echo "ERROR: Could not able to execute $sql. " . mysqli_error($link);
				}
}

if($_POST['submit'])
{
header("location:one.php");
}

// close connection
mysqli_close($link);
?>

Method: