Web Database Applications With Php And Mysql (2nd Edition) [Electronic resources] نسخه متنی

17.3 The Customer Form

The
script customer/details.php

is shown in Example 17-2. If the user is logged in and validation has
not previously failed, the customer data is retrieved from the
customer table and used to populate the form
widgets. If the user isn't logged in, and validation
has not previously failed, a blank form is shown to collect new
member details. If data has failed validation, the form is
repopulated and the error messages are displayed. Error messages and
previously entered form values are stored by the
customer/validate.php script in the session
array variables $_SESSION["custFormVars"] and
$_SESSION["custErrors"] respectively.

The customer form and its widgets are displayed using our
winestoreFormTemplate class
that's derived from the PEAR ITX template class.
It's discussed in detail in Chapter 16.

Example 17-2. The customer form script customer/details.php

<?php
require_once "DB.php";
require_once "../includes/winestore.inc";
require_once "../includes/authenticate.inc";
require_once "../includes/template.inc";
set_error_handler("customHandler");
// Show meaningful instructions for UPDATE or INSERT
if (isset($_SESSION["loginUsername"]))
$instructions = "Please amend your details below as required.";
else
$instructions = "Please fill in the details below to join.";
// Takes <form> heading, instructions, action, formVars name, 
// and formErrors name as parameters
$template = new winestoreFormTemplate("Customer Details",
$instructions, S_VALIDATE, "custFormVars", "custErrors");
session_start( );
$connection = DB::connect($dsn, true);
if (DB::isError($connection))
trigger_error($connection->getMessage( ), E_USER_ERROR);
// Is the user logged in and are there no errors from previous
// validation?  If so, look up the customer for editing
if (isset($_SESSION["loginUsername"]) &&
!isset($_SESSION["custErrors"]))
{
// Check the user is properly logged in
sessionAuthenticate(S_MAIN);
$query = "SELECT title_id, surname, firstname, initial, address,
city, state, zipcode, country_id, phone,
birth_date
FROM users, customer
WHERE users.cust_id = customer.cust_id
AND user_name = '{$_SESSION["loginUsername"]}'";
$result = $connection->query($query);
if (DB::isError($result))
trigger_error($result->getMessage( ), E_USER_ERROR);
$row = $result->fetchRow(DB_FETCHMODE_ASSOC);
// Reset $_SESSION["custFormVars"], since we're loading
// from the customer table
$_SESSION["custFormVars"] = array( );
// Load all the <form> widgets with customer data
foreach($row as $variable => $value)
$_SESSION["custFormVars"]["{$variable}"] = $value;
}
// Load the titles from the title table
$titleResult = $connection->query("SELECT * FROM titles");
if (DB::isError($titleResult))
trigger_error($titleResult->getMessage( ), E_USER_ERROR);
// Load the countries from the country table
$countryResult = $connection->query("SELECT * FROM countries");
if (DB::isError($countryResult))
trigger_error($countryResult->getMessage( ), E_USER_ERROR);
// Create widgets for each of the customer fields
$template->selectWidget("title_id", "Title:",
"title", $titleResult);
$template->mandatoryWidget("firstname", "First name:", 50);
$template->mandatoryWidget("surname", "Surname:", 50);
$template->optionalWidget("initial", "Middle initial:", 1);
$template->mandatoryWidget("address", "Address:", 50);
$template->mandatoryWidget("city", "City:", 50);
$template->optionalWidget("state", "State:", 20);
$template->mandatoryWidget("zipcode", "Zip code:", 10);
$template->selectWidget("country_id", "Country:",
"country", $countryResult);
$template->optionalWidget("phone", "Telephone:", 15);
$template->mandatoryWidget("birth_date", 
"Date of Birth (dd/mm/yyyy):", 10);
// Only show the username/email and password widgets to new users
if (!isset($_SESSION["loginUsername"]))
{
$template->mandatoryWidget("loginUsername", "Email/username:", 50);
$template->passwordWidget("loginPassword", "Password:", 15);
}
// Add buttons and messages, and show the page
$template->showWinestore(NO_CART, B_ALL & ~B_EMPTY_CART & ~B_UPDATE_CART &
~B_PURCHASE & ~B_DETAILS & ~B_LOGINLOGOUT)
?>

17.3.1 The Customer Receipt Page

Example 17-3
shows the customer receipt script,
customer/receipt.php,
that is called after a database write
to insert or update a customer. The script is a receipt page that can
be bookmarked and the script only reads details from the database.
Reloading of the page therefore has no undesirable side effects.

Example 17-3. The customer/receipt.php customer receipt page

<?php
// This script shows the user a receipt for their customer
// UPDATE or INSERT. It carries out no database writes and
// can be bookmarked.
// The user must be logged in to view it.
require_once "DB.php";
require_once "../includes/winestore.inc";
require_once "../includes/authenticate.inc";
require_once "../includes/template.inc";
set_error_handler("customHandler");
// Show the user a customer INSERT or UPDATE receipt
function show_HTML_receipt($cust_id, $connection, &$template)
{
// Retrieve the customer details
$query = "SELECT * FROM customer WHERE cust_id = {$cust_id}";
$result = $connection->query($query);
if (DB::isError($result))
trigger_error($result->getMessage( ), E_USER_ERROR);
$row = $result->fetchRow(DB_FETCHMODE_ASSOC);
// Is there an optional phone field? If so, add it to the output
if (!empty($row["phone"]))
{
$template->setCurrentBlock("phone");
$template->setVariable("PHONE", $row["phone"]);
$template->parseCurrentBlock("address");
}
// Now, add all the mandatory fields to the output
$template->setCurrentBlock( );
$template->setVariable("EMAIL", $_SESSION["loginUsername"]);
$template->setVariable("FIRSTNAME", $row["firstname"]);
$template->setVariable("SURNAME", $row["surname"]);
$template->setVariable("INITIAL", $row["initial"]);
$template->setVariable("ADDRESS", $row["address"]);
$template->setVariable("CITY", $row["city"]);
$template->setVariable("STATE", $row["state"]);
$template->setVariable("ZIPCODE", $row["zipcode"]);
$template->setVariable("DOB", $row["birth_date"]);
$template->setVariable("CUSTTITLE", showTitle($row["title_id"],
$connection));
$template->setVariable("COUNTRY", showCountry($row["country_id"],
$connection));
}
// -----
session_start( );
$connection = DB::connect($dsn, true);
if (DB::isError($connection))
trigger_error($connection->getMessage( ), E_USER_ERROR);
// Check the user is properly logged in
sessionAuthenticate(S_MAIN);
// Find out the cust_id of the user
$cust_id = getCust_id($_SESSION["loginUsername"]);
// Start a new page
$template = new winestoreTemplate(T_CUSTRECEIPT);
// Show the customer confirmation
show_HTML_receipt($cust_id, $connection, $template);
// Add buttons and messages, and show the page
$template->showWinestore(NO_CART, B_HOME);
?>

Customers can view their receipts only when logged in. The
cust_id of the customer is again retrieved using
the function getCust_id( )
that's discussed in Chapter 16.

The receipt script populates the
templates/custreceipt.tpl

template shown in Example 17-4. The receipt page uses the
winestoreTemplate class that's
discussed in Chapter 16 to provide the HTML
framework for displaying the page and to show messages to the user.
The templates/custreceipt.tpl template is
therefore only part of the body of the page.

Example 17-4. The templates/custreceipt.tpl customer receipt template

h1>Account details for <font color="red">{EMAIL}</font></h1>
<p><i>Please record your password somewhere safe for future use.</i>
<p>Your shipping and billing details are as follows:
<br><b>{CUSTTITLE}&nbsp;{FIRSTNAME}&nbsp;{INITIAL}&nbsp;{SURNAME}
<br>{ADDRESS}
<br>{CITY} {STATE} {ZIPCODE}
<br>{COUNTRY}</b>
<br>
<!-- BEGIN phone -->
<br><b>Telephone: {PHONE}
<!-- END phone -->
<br><b>Date of Birth: {DOB}</b>
<br>
<br>