jrtechs-Panda-Quotes/quotes/newQuote.php

<?php

    if($loggedIn)
    {
        $errors = array();
        
        if(isset($_POST['new_quote']))
        {
            $i_name = mysqli_real_escape_string($dbc, trim($_POST['add_quote_name']));
            $i_quote = mysqli_real_escape_string($dbc, trim($_POST['add_quote_quote']));
            
            $q = "select * from people where name ='$i_name'";
            
            $r = mysqli_query($dbc, $q);
            
            if(@mysqli_num_rows($r) == 1)
            {
                while($row = mysqli_fetch_array($r))
                {
                    $person_id = $row['person_id'];
                
                }
                
                if($_POST['add_quote_visibility'])
                {
                    $q_create = "insert into quote (user_id, creation_date, person_id, quote, visibility) values ('" . $_SESSION['user_id'] . "', now(), '$person_id', '$i_quote', true)";
                }
                else
                {
                    $q_create = "insert into quote (user_id, creation_date, person_id, quote, visibility) values ('" . $_SESSION['user_id'] . "', now(), '$person_id', '$i_quote', false)";
                }
                
                
                //echo $q_create;
                
                mysqli_query($dbc, $q_create);
                
                header("Location: quotes.php");
            }
        }
                
        echo '<h1 class="w3-text-teal"><center>New Quote</center></h1>';
        
        echo '<form action="quotes.php" method ="post" class="w3-container w3-card-4">';
        
        $q = "select name from people order by name asc";
        $r = mysqli_query($dbc, $q);
        echo '<select class="w3-select" name ="add_quote_name">';
        
        while($row = mysqli_fetch_array($r))
        {
            echo '<option value="' . $row['name'] . '">';
            
            echo $row['name'] . '</option>';
        }
        
        echo '</select>';

        echo '<div class="w3-group">
            <input class="w3-input" type="text" name="add_quote_quote" required>
            <label class="w3-label w3-validate">Quote</label>
        </div>

        <input class="w3-check" type="checkbox" name="add_quote_visibility" checked>
        <label class="w3-validate">Public<label>


        <p><input type="submit" name="Submit" value="Create Quote" class="w3-padding-16 w3-hover-dark-grey w3-btn-block w3-center-align" /></p>
        <input type="hidden" name="new_quote" value="TRUE" />
            
        
        </form>';
        
        foreach($errors as $msg)
        {
            echo " - $msg<br />";
        }
    }
    
?>