Build A Shopping Cart With PHP Part-3 - W3programmers

18 JUNE, 2015
(https://www.facebook.com/g
(https://twitter.com/w3p
(https://plus.googl
(http://www.w3programmers.com/)
HOME (HTTP://WWW.W3PROGRAMMERS.COM/)
CATEGORIES (HTTP://WWW.W3PROGRAMMERS.COM/#)
POSTED ON 11 SEPTEMBER, 2012

(HTTP://WWW.W3PROGRAMMERS.COM/BUILD-A-SHOPPING-CARTWITH-PHP-PART-3/) BY MASUD ALAM
(HTTP://WWW.W3PROGRAMMERS.COM/AUTHOR/MASUD1985/)
Build a shopping cart

with php part-3
Categories
Android Application
Development
(http://www.w3program
mers.com/category/andr
oid-apps-development/)
ADMINISTRATOR PAGES
Angular JS
mers.com/category/angu
After completing shopping cart part1
lar-js-2/)
(www.w3programmers.com/build-a-shopping-cart-with-php-part1/)and part2 (http://www.w3programmers.com/build-a-shopping-
CakePHP
cart-with-php-part-2/), In this tutorial well learn shopping cart
administration, The administration side of the shopping cart is very
mers.com/category/cake
simple. The primary function for the admin is to view and confirm
php/)
completed orders. When an order has been confirmed, the

administrator has successfully sent out the product.
CODEIGNITER
The first step is to provide an administrator login. Create a new file

called adminlogin.phpand add the following code:
1
2
3
4
5
6
7
<?php
session_start();
require("config.php");
if(isset($_SESSION['SESS_ADMINLOGGEDIN'])
== TRUE) {
8
9 header("Location: " . $config_basedir);
mers.com/category/code
igniter/)
Drupal
mers.com/category/drup
al/)
Facebook
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
if($_POST['submit'])
$loginsql = "SELECT * FROM admin WHERE

username = '" . $_POST['userBox'] . "' AND
password = '" . sha1($_POST['passBox']).
"'";
$loginres = mysql_query($loginsql) or
die(mysql_error());
$numrows = mysql_num_rows($loginres);
if($numrows == 1)
$loginrow = mysql_fetch_assoc($loginres);
session_register("SESS_ADMINLOGGEDIN");
$_SESSION['SESS_ADMINLOGGEDIN'] = 1;
header("Location: " . $config_basedir .

"adminorders.php");
else

"adminlogin.php?error=1");
else
require("header.php");
echo "<h1>Admin Login</h1>";
if(@$_GET['error'] == 1) {
echo "<strong>Incorrect username/password!

</strong>";
?>
<p>
<form action="<?php echo

$_SERVER['SCRIPT_NAME']; ?>" method="POST">
<table>
mers.com/category/face
book1/)
FAT FREE FRAMEWORK
mers.com/category/fatfree-framework/)
HTML and CSS
mers.com/category/html
-and-css/)
JAVASCRIPT
mers.com/category/java
script/)
Joomla
mers.com/category/joo
mla/)
JQUERY and AJAX with
PHP
mers.com/category/jque
ry-and-ajax-with-php/)
JSON, XML and Web
Services
mers.com/category/jsonxml-and-web-services/)
Laravel
mers.com/category/larav
el/)
Magento
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
<tr>
<td>Username</td>
<td><input type="textbox" name="userBox">
</tr>
<tr>
<td>Password</td>
<td><input type="password" name="passBox">
</tr>
<tr>
<td></td>
<td><input type="submit" name="submit"

value="Log in">
</tr>
</table>
</form>
<?php
require("footer.php");
?>
Much of this code should look familiar to you. When the admin has
mers.com/category/mag
ento/)
MySQL Tutorial
mers.com/category/mys
ql-tutorial/)
PHP
mers.com/category/php/
)
PHP & MySQL Basics
(http://www.w3progr
ammers.com/categor
y/php/php-mysqlbasics/)
PHP & MySQL
Projects
(http://www.w3progr
ammers.com/categor
y/php/php-mysqlprojects/)
successfully logged in, the SESS_ADMINLOGGEDIN variable is
PHP Arrays, Strings
created.
and Numbers
(http://www.w3progr
Logging Out the Administrator

To log out the administrator, create a file called
adminlogout.phpand add the following code:
1
2
3
4
5
6
7
8
9
10
11
<?php
session_start();
session_unregister("SESS_ADMINLOGGEDIN");
header("Location: " . $config_basedir);
?>
As with the normal user logout, you unregister the variableas
ammers.com/categor
y/php/php-arraysstrings-andnumbers/)
PHP Date Time and
RegEx
mers.com/category/phpdate-time-and-regex/)
PHP Design patterns
opposed to destroying the entire session. This prevents against the
mers.com/category/php-
administrator being logged out completely when logged in as both
design-patterns/)
an admin and a user.

Managing Completed Orders
The main administrator page shows the list of completed orders.
The purpose of this page is to enable an admin to see which orders
need products mailed. The admin can then create the package and
confirm the order after it has been mailed.
PHP File, Mail, Session

and Cookie
mers.com/category/phpfile-mail-session-andcookie/)
PHP Object Oriented
This page is fairly straightforward; it simply outputs data from
Programming
some tables. The script has two primary states: either displaying
orders or confirming them. The default page displays the orders. If
mers.com/category/php-
you pass the page func=conf GET variable and the order number,
object-oriented-
the order will be confirmed.
programming/)
Create a new file called adminorders.php and write following code:
PHP PDO and MySQLi

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
<?php
session_start();
require("functions.php");
== FALSE) {
if(isset($_GET['func']) == TRUE) {
if($_GET['func'] != "conf") {
$validid =
pf_validate_number($_GET['id'],"redirect",
$config_basedir);
$funcsql = "UPDATE orders SET status = 10

WHERE id = " . $_GET['id'];
mysql_query($funcsql);

"adminorders.php");
else {
echo "<h1>Outstanding orders</h1>";
mers.com/category/phppdo-and-mysqli/)
PHP Security and
Exceptions
mers.com/category/phpsecurity-and-exceptions/)
Python
mers.com/category/pyth
on/)
SASS and LESS
mers.com/category/sass
-and-less/)
Standard PHP Library
(SPL)
mers.com/category/stan
dard-php-library-spl/)
Symfony
38
39 $orderssql = "SELECT * FROM orders WHERE
status = 2";
40
41 $ordersres = mysql_query($orderssql);
42
43 $numrows = mysql_num_rows($ordersres);
44
45 if($numrows == 0)
46
47 {
48
49 echo "<strong>No orders</strong>";
50
51 }
52
53 else
54
55 {
56
57 echo "<table cellspacing=10>";
58
59 while($row = mysql_fetch_assoc($ordersres))
60
61 {
62
63 echo "<tr>";
64
65 echo "<td>[<a href='adminorderdetails.php?
id=" . $row['id']. "'>View</a>]</td>";
66
67 echo "<td>". date("D jS F Y g.iA",
strtotime($row['date'])). "</td>";
68
69 echo "<td>";
70
71 if($row['registered'] == 1)
72
73 {
74
75 echo "Registered Customer";
76
77 }
78
79 else
80
81 {
82
83 echo "Non-Registered Customer";
84
85 }
86
87 echo "</td>";
88
89 echo "<td>£" . sprintf('%.2f',
90
91 $row['total']) . "</td>";
92
93 echo "<td>";
94
95 if($row['payment_type'] == 1)
96
97 {
98
99 echo "PayPal";
100
101 }
mers.com/category/symf
ony/)
Twitter Bootstrap
mers.com/category/twitt
er-bootstrap/)
Useful PHP Functions
and Features
mers.com/category/usef
ul-php-functions-andfeatures/)
WordPress
mers.com/category/basi
c-wordpress-tutorial/)
YII
mers.com/category/yii/)
Zend Framework 2.x
mers.com/category/zend
-framework-2-x/)
Latest Posts
Dive into Python
mers.com/dive-intopython/)
Getting Started Python
mers.com/gettingstarted-python/)
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
else
echo "Cheque";
echo "</td>";
echo "<td><a href='adminorders.php?

func=conf&id=" . $row['id']. "'>Confirm
Payment</a></td>";
echo "</tr>";
echo "</table>";
?>
Now below we explainthe code:

1
2
3
4
5
6
7
8
9
10
11
12
13
<?php
session_start();
== FALSE) {
SonataAdminBundle of
Symfony2
mers.com/sonataadminb
undle-of-symfony2/)
FOSUserBundle of
Symfony2
mers.com/fosuserbundle
-of-symfony2/)
Magento Extension
Development Part-2
mers.com/magentoextension-developmentpart-2/)
Magento Extension
Development Part-1
mers.com/magentoextension-developmentpart-1/)
Magento Theme
Development From
Scratch Part-3
After the usual introductory code, make a check to see if the func
mers.com/magento-
GET variable exists:
theme-development-
1
2
3
4
5
6
7
8
9
10
11
if(isset($_GET['func']) == TRUE) {
if($_GET['func'] != "conf") {
$validid =
$config_basedir);
12
13 $funcsql = "UPDATE orders SET status = 10
WHERE id = " . $_GET['id'];
scratch-part-3/)
Magento Theme
Development From
Scratch Part-2
mers.com/magentotheme-developmentfrom-scratch-part-2/)
Magento Theme
14
15
16
17
mysql_query($funcsql);

"adminorders.php");
18
19 }
If the func GET variable exists, the page redirects when the variable
Development From
Scratch Part-1
mers.com/magentotheme-developmentfrom-scratch-part-1/)
is set to anything other than conf; this prevents against a SQL

injection attack. Next, the id GET variable is validated. The order is
User registration with
finally confirmed by updating the orderstable and setting the status
Symfony
field to 10.
mers.com/user-
The page then redirects to the orders summary.

If no func GET variable exists, set the page to display completed
registration-withsymfony/)
orders:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
else {
echo "<h1>Outstanding orders</h1>";
$orderssql = "SELECT * FROM orders WHERE

status = 2";
$ordersres = mysql_query($orderssql);
$numrows = mysql_num_rows($ordersres);
if($numrows == 0)
echo "<strong>No orders</strong>";
else
echo "<table cellspacing=10>";
while($row = mysql_fetch_assoc($ordersres))
echo "<tr>";
echo "<td>[<a href='adminorderdetails.php?

id=" . $row['id']. "'>View</a>]</td>";
echo "<td>". date("D jS F Y g.iA",

strtotime($row['date'])). "</td>";
echo "<td>";
if($row['registered'] == 1)
Archives
June 2015
mers.com/2015/06/)
May 2015
mers.com/2015/05/)
February 2015
mers.com/2015/02/)
January 2015
mers.com/2015/01/)
December 2014
mers.com/2014/12/)
November 2014
mers.com/2014/11/)
October 2014
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
echo "Registered Customer";
else
echo "Non-Registered Customer";
echo "</td>";
echo "<td>£" . sprintf('%.2f',
$row['total']) . "</td>";
echo "<td>";
if($row['payment_type'] == 1)
echo "PayPal";
else
echo "Cheque";
echo "</td>";
echo "<td><a href='adminorders.php?

func=conf&id=" . $row['id']. "'>Confirm
Payment</a></td>";
echo "</tr>";
echo "</table>";
?>
If all went well, the completed orders summary should look similar
to the page shown Figure 6-9.
mers.com/2014/10/)
July 2014
mers.com/2014/07/)
June 2014
mers.com/2014/06/)
May 2014
mers.com/2014/05/)
March 2014
mers.com/2014/03/)
February 2014
mers.com/2014/02/)
January 2014
mers.com/2014/01/)
December 2013
mers.com/2013/12/)
November 2013
mers.com/2013/11/)
October 2013
mers.com/2013/10/)
September 2013
mers.com/2013/09/)
August 2013
mers.com/2013/08/)
July 2013
mers.com/2013/07/)
(http://www.w3programmers.com/wpcontent/uploads/2012/09/shop6.jpg)
May 2013
mers.com/2013/05/)
FIGURE 6-9 The outstanding orders page provides a simple means

of viewing orders that need products sent out.
April 2013
Viewing a Specific Order
mers.com/2013/04/)
For the administrator to get the postal address for a particular
March 2013
order, she needs to view the specific details for the order. This next
page lists the order information (order number, address, products
mers.com/2013/03/)
purchased, payment method, and so on).

February 2013
Create a new file called adminorderdetails.phpand add the
following code:
mers.com/2013/02/)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
<?php
session_start();
== FALSE) {
header("Location: " . $basedir);
$validid =
$config_basedir . "adminorders.php");
echo "<h1>Order Details</h1>";
echo "<a href='adminorders.php'>< go back

to the main orders screen</a>";
$ordsql = "SELECT * from orders WHERE id =

" . $validid;
$ordres = mysql_query($ordsql);
January 2013
mers.com/2013/01/)
December 2012
mers.com/2012/12/)
November 2012
mers.com/2012/11/)
October 2012
mers.com/2012/10/)
September 2012
mers.com/2012/09/)
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
$ordrow = mysql_fetch_assoc($ordres);
echo "<table cellpadding=10>";
echo "<tr><td><strong>Order Number</strong>

</td><td>" . $ordrow['id'] . "</td>";
echo "<tr><td><strong>Date of
order</strong></td><td>" . date('D jS F Y
g.iA',strtotime($ordrow['date'])) . "
</td>";
echo "<tr><td><strong>Payment Type</strong>

</td><td>";
if($ordrow['payment_type'] == 1)
echo "PayPal";
else
echo "Cheque";
echo "</td>";
echo "</table>";
if($ordrow['delivery_add_id'] == 0)
$addsql = "SELECT * FROM customers WHERE id

= " . $ordrow['customer_id'];
$addres = mysql_query($addsql);
else
$addsql = "SELECT * FROM delivery_addresses

WHERE id = " . $ordrow['delivery_add_id'];
$addres = mysql_query($addsql);
$addrow = mysql_fetch_assoc($addres);
echo "<tr>";
echo "<td><strong>Address</strong></td>";
echo "<td>" . $addrow['forename'] . " ".
August 2012
mers.com/2012/08/)
July 2012
mers.com/2012/07/)
June 2012
mers.com/2012/06/)
May 2012
mers.com/2012/05/)
April 2012
mers.com/2012/04/)
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
$addrow['surname'] . "<br>";
echo $addrow['add1'] . "<br>";
echo $addrow['postcode'] . "<br>";
echo "<br>";
if($ordrow['delivery_add_id'] == 0)
echo "<i>Address from member account</i>";
else
echo "<i>Different delivery address</i>";
echo "</td></tr>";
echo "<tr><td><strong>Phone</strong></td>
<td>". $addrow['phone'] . "</td></tr>";
echo "<tr><td><strong>Email</strong></td>
<td><a href='mailto:" . $addrow['email'] .
"'>". $addrow['email'] . "</a></td></tr>";
echo "</table>";
$itemssql = "SELECT products.*,

orderitems.*,orderitems.id AS itemid FROM
products, orderitems WHERE
orderitems.product_id = products.id AND
order_id = " . $validid;
$itemsres = mysql_query($itemssql);
$itemnumrows = mysql_num_rows($itemsres);
echo "<h1>Products Purchased</h1>";
echo "<th></th>";
echo "<th>Product</th>";
echo "<th>Quantity</th>";
echo "<th>Price</th>";
echo "<th>Total</th>";
while($itemsrow =
mysql_fetch_assoc($itemsres))
144
145 $quantitytotal = $itemsrow['price']*
$itemsrow['quantity'];
146
147 echo "<tr>";
148
149 if(empty($itemsrow['image'])) {
150
151 echo "<td><img
src='./productimages/dummy.jpg' width='50'
alt='". $itemsrow['name'] . "'></td>";
152
153 }
154
155 else {
156
157 echo "<td><img src='./productimages/".
$itemsrow['image'] . "' width='50' alt='".
$itemsrow['name'] . "'></td>";
158
159 }
160
161 echo "<td>" . $itemsrow['name'] . "</td>";
162
163 echo "<td>" . $itemsrow['quantity'] . " x
</td>";
164
165 echo "<td><strong>£" .
sprintf('%.2f',$itemsrow['price']) . "
</strong></td>";
166
sprintf('%.2f',$quantitytotal) . "</strong>
</td>";
168
169 echo "</tr>";
170
171 @$total = $total + $quantitytotal;
172
173 }
174
175 echo "<tr>";
176
177 echo "<td></td>";
178
179 echo "<td></td>";
180
181 echo "<td></td>";
182
183 echo "<td>TOTAL</td>";
184
sprintf('%.2f', $total). "</strong></td>";
186
187 echo "</tr>";
188
189 echo "</table>";
190
191 require("footer.php");
192
193 ?>
This code should look familiar you to you; it simply displays details
from the orders, orderitems, and delivery_addressestables.
The completed page should look like the one shown in Figure 6-10.
(http://www.w3programmers.com/wpcontent/uploads/2012/09/shop7.jpg)
Masud Alam
(http://www.w3programmers.com/author/masud
1985/)
Hi, My name is Masud Alam, love to work with Open Source
Technologies, living in Dhaka, Bangladesh. I graduated in
2009 with a bachelors degree in Engineering from State
University Of Bangladesh, Im also a Certified Engineer on
ZEND PHP 5.3, I served my first five years a number of
leadership positions at Winux Soft Ltd, SSL Wireless Ltd,
CIDA and MAX Group where I worked on ERP software and
web development., but now im a co-founder and Chief
Executive Officer and Managing Director of TechBeeo
Software Consultancy Services Ltd. Im also a Course
Instructor of ZCE PHP 5.3 Certification and professional web
development course at IBCS-PRIMAX Software (Bangladesh)
Limited a leading Training Institute in the country.
(www.facebook.com/profile.php?id=1413202909)
(twitter.com/masudeden)
PHP & MYSQL PROJECTS

(HTTP://WWW.W3PROGRAMMERS.COM/CATEGORY/PHP/PHPMYSQL-PROJECTS/)
12 comments on Build a shopping cart

with php part-3
REPLY (/BUILD-A-SHOPPING-CART-WITH-PHP-PART-3/?
MUHAMMAD EJAZ
REPLYTOCOM=522#RESPOND)
10 OCTOBER, 2012 AT 5:27 PM
(HTTP://WWW.W3PROGRAMMERS.COM/BUILD-ASHOPPING-CART-WITH-PHP-PART-3/#COMMENT522)
Nice Work very good
ALLBDLOGMIJAN
(HTTP://WWW.PHPPROGRAMMER.HOST.ORG/WORDPRESS/)
12 NOVEMBER, 2012 AT 11:08 PM

(HTTP://WWW.W3PROGRAMMERS.COM/BUILD-ASHOPPING-CART-WITH-PHP-PART-3/#COMMENT-
652)
What a beautiful Post
VINMEDDIE
22 MARCH, 2013 AT 12:00 AM
Any additional features??
CHARLES
27 AUGUST, 2013 AT 4:08 PM
hi, i have a problem with the header on line 27

wondering if you could keep a solution if you
dont mind? thanks
VALERIE
30 SEPTEMBER, 2013 AT 1:43 PM
Excellent post. I certainly love this site. Keep it

up!
GENE
13 JANUARY, 2014 AT 4:40 PM
nice post!! sir can i have the source code of this

tuts. because im having a lot of error. thanks
sir!
DHARMENDRA K RAI
3 JULY, 2014 AT 2:00 PM
hi
nice work and also thanks for share experience
in php
MARTYN
22 SEPTEMBER, 2014 AT 5:49 PM
Hi
This looks exactly what I am after but following
the tutorial I am missing register.php and its
not on any of the 3 pages. ?
Most pages will not open due to some error (I
think its down to some php error )
I click on either of the categories and it just
takes me to a blank white page. When I look at
the source code there is nothing there and the
page is just blank.
This is not the only page the links dont work
with. The same happens when I click on View
basket the same happens.
Also is there any chance we can download the

tutorial ?
Are the above issues down to php versions ?
Thanks
Martyn
LJUBICA
10 DECEMBER, 2014 AT 10:24 PM
Great job and thank you very much.

So, is there any changes to download the
tutorial? I get a lot of issues
ADEDIVI
19 JANUARY, 2015 AT 4:17 PM
Syntax error near at line 1 on showcart.php

Pls this tutorial will be fine with Mysqli also, pls
kindly to see to it
KELVIN
1 APRIL, 2015 AT 1:40 PM
HI i cannot t find the file called register.php

from the one you have uploaded as source
code of this program can please send it to me
YASH
2 JUNE, 2015 AT 4:49 PM
Masud Alam,
I have suggestion for you.
please provide project source code and running
demo with every tutorial.
Its helpfull and more effective for new comer
learner
Leave a Reply
YOUR EMAIL ADDRESS WILL NOT BE PUBLISHED. REQUIRED FIELDS
ARE MARKED
*
NAME *
EMAIL *
WEBSITE
(#)
CAPTCHA CODE
*
COMMENT
POST COMMENT
COPYRIGHT 2015 W3PROGRAMMERS

Build A Shopping Cart With PHP Part-3 - W3programmers

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Build A Shopping Cart With PHP Part-3 - W3programmers

Încărcat de

Drepturi de autor:

Formate disponibile

18 JUNE, 2015

POSTED ON 11 SEPTEMBER, 2012

Build a shopping cart

After completing shopping cart part1

(www.w3programmers.com/build-a-shopping-cart-with-php-part1/)and part2 (http://www.w3programmers.com/build-a-shopping-

cart-with-php-part-2/), In this tutorial well learn shopping cart

administration, The administration side of the shopping cart is very

completed orders. When an order has been confirmed, the

The first step is to provide an administrator login. Create a new file

$loginsql = "SELECT * FROM admin WHERE

header("Location: " . $config_basedir .

header("Location: " . $config_basedir .

echo "<h1>Admin Login</h1>";

echo "<strong>Incorrect username/password!

<form action="<?php echo

<td><input type="textbox" name="userBox">

<td><input type="password" name="passBox">

<td><input type="submit" name="submit"

successfully logged in, the SESS_ADMINLOGGEDIN variable is

PHP Arrays, Strings

Logging Out the Administrator

header("Location: " . $config_basedir);

As with the normal user logout, you unregister the variableas

opposed to destroying the entire session. This prevents against the

administrator being logged out completely when logged in as both

an admin and a user.

PHP File, Mail, Session

This page is fairly straightforward; it simply outputs data from

orders or confirming them. The default page displays the orders. If

the order will be confirmed.

Create a new file called adminorders.php and write following code:

PHP PDO and MySQLi

header("Location: " . $config_basedir);

header("Location: " . $config_basedir);

$funcsql = "UPDATE orders SET status = 10

header("Location: " . $config_basedir .

echo "<h1>Outstanding orders</h1>";

echo "<td><a href='adminorders.php?

Now below we explainthe code:

header("Location: " . $config_basedir);

GET variable exists:

header("Location: " . $config_basedir);

header("Location: " . $config_basedir .

is set to anything other than conf; this prevents against a SQL

User registration with

finally confirmed by updating the orderstable and setting the status

The page then redirects to the orders summary.

echo "<h1>Outstanding orders</h1>";

$orderssql = "SELECT * FROM orders WHERE

echo "<strong>No orders</strong>";

echo "<table cellspacing=10>";

echo "<td>[<a href='adminorderdetails.php?

echo "<td>". date("D jS F Y g.iA",

echo "Registered Customer";

echo "Non-Registered Customer";

echo "<td>&pound;" . sprintf('%.2f',

echo "<td><a href='adminorders.php?

FIGURE 6-9 The outstanding orders page provides a simple means

Viewing a Specific Order

For the administrator to get the postal address for a particular

page lists the order information (order number, address, products

purchased, payment method, and so on).

header("Location: " . $basedir);

echo "<td>£" . sprintf('%.2f',