inserisci-film.php

<?php
/*
 *      This file is part of Project Lumiére <http://monossido.ath.cx/cinema>
 *      
 *      Project Lumiére is free software: you can redistribute it and/or modify
 *      it under the terms of the GNU General Public License as published by
 *      the Free Software Foundation, either version 3 of the License, or
 *      (at your option) any later version.
 *      
 *      Project Lumiére  is distributed in the hope that it will be useful,
 *      but WITHOUT ANY WARRANTY; without even the implied warranty of
 *      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *      GNU General Public License for more details.
 *      
 *      You should have received a copy of the GNU General Public License
 *      along with Project Lumiére.  If not, see <http://www.gnu.org/licenses/>.
 *      
 */
require("configure.php");
require("library.php");
session_start();

page_start("Project Lumi&eacute;re - Inserisci Film");

$conn=mysql_connect(dbhost, dbuser, dbpwd)
	or die("Connessione al server MySQL fallita!");
mysql_select_db(dbname);

if(isset($_SESSION['logged'])) # Se l'utente è loggato
{
	$query="SELECT amministratore FROM Utenti WHERE Username='".$_SESSION['logged']."'";
	$result=mysql_query($query, $conn)
	  or die("Query fallita!" . mysql_error());
	$admin=mysql_fetch_array($result);

	if ($admin['amministratore']==1) # Se l'utente è anche amministratore
	{
		if($_POST['submit'])
		{
			$titolo=$_POST['titolo'];
			$durata=$_POST['durata'];
			if ($_POST['visto']=="si") $visto=1;
			else	$visto=0;
			$query10="INSERT INTO Film (titolo, visto, risoluzione, durata, lingua) VALUES('$titolo','$visto','bluray','$durata', 'tutte')";
			mysql_query($query10, $conn)
			  or die("Query fallita! " . mysql_error());
			# Fine qui
			echo "<p align=center>Inserimento Compiuto! Torna alla <a href=index.php>HOME</a></p>";
		}else
		{
			echo "<p align=center>";
			echo "<table border=0>";
			echo "<form method=POST action=inserisci-film.php>";
			echo "<tr><td>Titolo</td><td><input type=text name=titolo></tr></td>
				<tr><td>Visto</td><td><input type=text name=visto></tr></td>
				<tr><td>Durata</td><td><input type=text name=durata></tr></td>
				<tr><td><input type=submit name=submit value=Inserisci></form></tr></td>";
			echo "</p>";
		}
	}
	else	echo "Non sei un amministratore!";
}
else	echo "Devi prima loggarti";