-
Notifications
You must be signed in to change notification settings - Fork 1
/
slides.php
63 lines (49 loc) · 1.99 KB
/
slides.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php
// First we execute our common code to connection to the database and start the session
require("common.php");
// // At the top of the page we check to see whether the user is logged in or not
// if(empty($_SESSION['user']))
// {
// // If they are not, we redirect them to the login page.
// header("Location: login.php");
// // Remember that this die statement is absolutely critical. Without it,
// // people can view your members-only content without logging in.
// die("Redirecting to login.php");
// }
// Everything below this point in the file is secured by the login system
// We can retrieve a list of members from the database using a SELECT query.
// In this case we do not have a WHERE clause because we want to select all
// of the rows from the database table.
$query = "
SELECT
slideId,
title,
body,
slideImageId
FROM slides
";
try
{
// These two statements run the query against your database table.
$stmt = $db->prepare($query);
$stmt->execute();
}
catch(PDOException $ex)
{
// Note: On a production website, you should not output $ex->getMessage().
// It may provide an attacker with helpful information about your code.
die("Failed to run query: " . $ex->getMessage());
}
// Finally, we can retrieve all of the found rows into an array using fetchAll
$rows = $stmt->fetchAll();
?>
<?php foreach($rows as $row): ?>
<div id="slide-<?php echo $row['slideId']; ?>">
<div class="info">
<h1><?php echo htmlentities($row['title'], ENT_QUOTES, 'UTF-8'); ?></h1>
<p><?php echo htmlentities($row['body'], ENT_QUOTES, 'UTF-8'); ?></p>
</div>
<img src="images/slides/<?php echo $row['slideImageId']; ?>.jpg" />
</div>
<?php endforeach; ?>
<script src="scripts/slides.js"></script>