form_address.php at PHP OpenTailorShop

<?php session_start(); ?>

<html>
<head>

</head>

<body>
<?php

include ("../settings.php");
include("../language/$cfg_language");
include ("../classes/db_functions.php");
include ("../classes/security_functions.php");
include ("../classes/form.php");
include ("../classes/display.php");


$lang=new language();
$dbf=new db_functions($cfg_server,$cfg_username,$cfg_password,$cfg_database,$cfg_tableprefix,$cfg_theme,$lang);
$sec=new security_functions($dbf,'Admin',$lang);
$display=new display($dbf->conn,$cfg_theme,$cfg_currency_symbol,$lang);

if(!$sec->isLoggedIn())
{
		header ("location: ../login.php");
		exit();
}
//set default values, these will change if $action==update.
$title_value='';
$salutation_value='';
$id=-1;

//decides if the form will be used to update or add a user.
if(isset($_GET['action']))
{
	$action=$_GET['action'];
}
else
{
	$action="insert";
}

//if action is update, sets variables to what the current users data is.
if($action=="update")
{
	$display->displayTitle("$lang->updateAddress");
	
	if(isset($_GET['id']))
	{
		$id=$_GET['id'];
		$tablename = "$cfg_tableprefix".'address';
		$result = mysql_query("SELECT * FROM $tablename WHERE id=\"$id\"",$dbf->conn);
		
		$row = mysql_fetch_assoc($result);
		$title_value=$row['title'];
		$salutation_value=$row['salutation'];
	
	}

}
else
{
	$display->displayTitle("$lang->addAddress");
}
//creates a form object
$f1=new form('process_form_address.php','POST','address','450',$cfg_theme,$lang);

//creates form parts.
$f1->createInputField("<b>$lang->title:</b> ",'text','title',"$title_value",'30','150');
$f1->createInputField("<b>$lang->salutation:</b> ",'text','salutation',"$salutation_value",'40','150');

//sends 2 hidden varibles needed for process_form_address.php.
echo "		
		<input type='hidden' name='action' value='$action'>
		<input type='hidden' name='id' value='$id'>";
$f1->endForm();
$dbf->closeDBlink();


?>
</body>
</html>