118 lines
3.4 KiB
PHP
118 lines
3.4 KiB
PHP
<!-- F8L Exception Online Bank | Transfer -->
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>F8L Exception Online Bank | Transfer</title>
|
|
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1" />
|
|
<?php include 'includes/inc_header.php'; ?>
|
|
|
|
</head>
|
|
<body>
|
|
<hr />
|
|
<h1>Transfer</h1>
|
|
<?php
|
|
include 'includes/inc_validateInput.php';
|
|
include 'includes/inc_validateLogin.php';
|
|
|
|
function transfer($userName,$fromAccountId,$toAccountId,$amount) {
|
|
global $errorCount;
|
|
global $errorMessage;
|
|
include 'includes/inc_dbConnect.php';
|
|
|
|
// Select database.
|
|
if ($db_connect === FALSE) {
|
|
$errorMessage .= "<p>Unable to connect to the database server.</p>" . "<p>Error code " . mysql_errno() . ": " . mysql_error() . "</p>";
|
|
$errorCount++;
|
|
}
|
|
else {
|
|
if (!@mysql_select_db($db_name, $db_connect)) {
|
|
$errorMessage .= "<p>Connection error. Please try again later.</p>";
|
|
$errorCount++;
|
|
}
|
|
else {
|
|
// verify the account belongs to the user
|
|
$sql = "SELECT * FROM account WHERE username='$userName' and accountid='$fromAccountId'";
|
|
$result = mysql_query($sql);
|
|
|
|
// If result matched $myusername and $accountId, table rows must be 1 row
|
|
$count = mysql_num_rows($result);
|
|
if($count == 1){
|
|
// record transfer to both accounts
|
|
$sql2 = "UPDATE account SET balance=balance-'$amount' WHERE username='$userName' and accountid='$fromAccountId'";
|
|
$result = mysql_query($sql2);
|
|
$sql3 = "UPDATE account SET balance=balance+'$amount' WHERE accountid='$toAccountId'";
|
|
$result = mysql_query($sql3);
|
|
$errorMessage .= "<p>Transfer completed.</p>";
|
|
}
|
|
else {
|
|
$errorCount++;
|
|
$errorMessage .= "Invalid user name/account number.<br />";
|
|
}
|
|
}
|
|
mysql_close($db_connect);
|
|
}
|
|
}
|
|
|
|
function displayForm() {
|
|
?>
|
|
<h3>Enter from account number, to account number and transfer amount.</h3>
|
|
<?php
|
|
global $errorMessage;
|
|
echo $errorMessage ?>
|
|
<form method="POST" action="transfer.php">
|
|
<p>From Account Number: <input type="text" name="fromAccountNumber" /></p>
|
|
<p>To Account Number: <input type="text" name="toAccountNumber" /></p>
|
|
<p>Transfer Amount: <input type="amount" name="amount" /></p>
|
|
<p><input type="submit" name="Submit" value="Submit" /></p>
|
|
</form>
|
|
<br /><br />
|
|
|
|
<?php
|
|
}
|
|
|
|
$showForm = TRUE;
|
|
$errorCount = 0;
|
|
$errorMessage = "";
|
|
$fromAccountNumber = 0;
|
|
$toAccountNumber = 0;
|
|
$amount = 0;
|
|
$userName = "";
|
|
$userName = $_SESSION['login'];
|
|
echo "User Name: ".$userName."<br />";
|
|
|
|
// if submit button is clicked, get accountNumber and amount
|
|
if (isset($_POST['Submit'])) {
|
|
$fromAccountNumber = validateInput($_POST['fromAccountNumber'],"From Account Number");
|
|
$toAccountNumber = validateInput($_POST['toAccountNumber'],"To Account Number");
|
|
$amount = validateInput($_POST['amount'],"Transfer Amount");
|
|
if ($amount <= 0) {
|
|
$errorMessage .= "Invalid amount.<br />";
|
|
$errorCount++;
|
|
}
|
|
|
|
if ($errorCount == 0)
|
|
$showForm = FALSE;
|
|
else
|
|
$showForm = TRUE;
|
|
}
|
|
|
|
if ($showForm == TRUE) {
|
|
if ($errorCount > 0) // if there were errors
|
|
$errorMessage .= "<p>Please re-enter the form information below.</p>\n";
|
|
displayForm ();
|
|
}
|
|
else {
|
|
if ($showForm == TRUE) {
|
|
displayForm(); // new page load
|
|
}
|
|
else { // make transfer
|
|
transfer($userName,$fromAccountNumber,$toAccountNumber,$amount);
|
|
echo $errorMessage."<br />";
|
|
}
|
|
}
|
|
?>
|
|
|
|
</body>
|
|
</html>
|