<?php include 'header.php'; ?>
<div align="center">
<?php

$urun = $_POST['siparis'];

include 'ayar.php'; 

function guvenlik($suz) {
$sansurle = array('CREATE','DELETE','SELECT','FROM','LIMIT','TABLE','MYISAM','*','ORDER','ASC','JOIN','BINARY','WHERE','<','>');
$editle = array('---','---','---','---','---','---','---','---','---','---','---','---','---','---','---');
$isle = str_replace($sansurle,$editle,$suz);

$safhal = mysql_real_escape_string($isle);

if(empty($safhal)){
@mysql_close();
}

return $safhal;

}

$urun2 = guvenlik($urun);

if($urun2 == 'hosting'){
echo "<h2>Almak Ýstediðiniz Paketi Seçin;</h2>";
echo "<form method=\"post\" action=\"siparisekle2.php\">";
echo "<select name=\"paketsec\">";
$listeisl = mysql_query("SELECT webalani, trafik, paketadi, id FROM hostingpaketleri");
while($listele = mysql_fetch_array($listeisl)){     
$hpid = $listele['id'];     
$hpad = $listele['paketadi'];     
$halan = $listele['webalani'];     
$htrafik = $listele['trafik'];     
echo "<option value=\"$hpid\">$hpad - $halan Web Alaný - $htrafik Aylýk Trafik</option>"; 
}
echo "</select><br /><input type=\"submit\" value=\"Devam >>\" /></form>";
}

if($urun2 == 'alanadi'){
echo "<h2>Almak Ýstediðiniz Uzantýyý Seçin;</h2>";
echo "<form method=\"post\" action=\"alanadisiparis2.php\">";
echo "<select name=\"alanadisec\">";
$liste = mysql_query("SELECT * FROM alanadifiyat"); 
while($listele = mysql_fetch_array($liste))
{
$aid = $listele['id'];
$auzanti = $listele['uzanti'];
$akayit = $listele ['kayitfiyat'];
$atransfer = $listele['transferfiyat'];
$ayenileme = $listele['yenilemefiyat'];

echo "<option value=\"$auzanti\">$auzanti - Kayýt Ücreti: $akayit - Transfer Ücreti: $atransfer - Yenileme Ücreti: $ayenileme</option>";
}

echo "</select><br /><input type=\"submit\" value=\"Devam >>\" /></form>";
}
?>
</div>
<?php include 'footer.php'; ?>