Cały kod :
<?php
session_start();
require("config/bd.php");
$prodsql = "SELECT * FROM produkty WHERE id = " . $_GET['id'] . ";";
$prodres = mysql_query($prodsql);
$numrows = mysql_num_rows($prodres);
$prodrow = mysql_fetch_assoc($prodres);
if($numrows == 0)
{
header("Location: " . $config_basedir);
}
else
{
if($_POST['submit'])
{
if($_SESSION['SESS_LOGGEDIN'])
{
$suma = $prodrow['cena'] * $_POST['amountBox'] ;
$ilosc = $_POST['amountBox'];
$id_klient = $_SESSION['SESS_USERID'];
$id_produktu=$prodrow['id'];
$sql = "INSERT INTO zamowienie VALUES('','$id_klienta'$id_produktu', NOW(),'$ilosc','$suma','0')";
mysql_query($sql);
header("Location: " . $config_basedir . "pokaz_koszyk.php");
}
else
{
header("Location: " . $config_basedir . "logowanie.php");
}
}
require("main.php");
echo "<form action='dodawanie_do_koszyka.php?id=" . $_GET['id'] . "' method='POST'>";
echo "<table cellpadding='10'>";
echo "<tr>";
if(empty($prodrow['obraz'])) {
echo "<td><img src='./admin/obrazy/brak_obrazu.jpg' width='50' alt='" . $prodrow['nazwa'] . "'></td>";
}
else {
echo "<td><img src='./admin/obrazy/" . $prodrow['obraz'] . "' width='50' alt='" . $prodrow['nazwa'] . "'></td>";
}
echo "<td>" . $prodrow['nazwa'] . "</td>";
echo "<td>Okre¶l ilo¶ć<select name='amountBox'>";
$ile=mysql_query('SELECT stan_magazyn FROM produkty WHERE id = '.$_GET['id']);
$arr=mysql_fetch_assoc($ile);
echo $arr['stan_magazyn'];
for($i=1;$i<=$arr['stan_magazyn'];$i++)
{
echo "<option>" . $i . "</option>";
}
echo "</select></td>";
echo "</select></td>";
echo "<td><strong>" . sprintf('%.2f', $prodrow['cena']) . "zł</strong></td>";
echo "<td><input type='submit' name='submit' value='Dodaj do koszyka'></td>";
echo "</tr>";
echo "</table>";
echo "</form>";
}
?>