<?php
  // COMMIT ADD AND EDITS
  $error\; =\; \text{'}\text{'};$link = mysql_connect("localhost", "bp5am", "bp5ampass") 
    or die("Could not connect: " . mysql_error()); 
  mysql_select_db('moviesite', $link)\; or\; die\; (\; mysql\_error());\; switch\; ($_GET['action']) {
    case "edit":
      switch ($\_GET[\text{'}type\text{'}])\; \{\; case\; "people":$sql = "UPDATE people SET " .
                 "people_fullname = '" . $\_POST[\text{'}people\_fullname\text{'}]\; .\; "\text{'}\; WHERE\; people\_id\; =\; \text{'}"\; .$_GET['id'] . "'";
          break;
        case "movie":
          $movie\_rating\; =\; trim($_POST['movie_rating']);
          if (!is_numeric($movie\_rating))\; \{$error .= "Please+enter+a+numeric+rating+%21%0D%0A";
          } else {
            if (movie_rating > 10) {
              $error\; .=\; "Please+enter+a+rating+"\; .\; "between+0+and+10\%21\%0D\%0A";\; \}\; \}\; if\; (!ereg("([0-9]\{2\})-([0-9]\{2\})-([0-9]\{4\})",$_POST['movie_release'] , 
                    $reldatepart))\; \{$error .= "Please+enter+a+date+" .
                      "with+the+dd-mm-yyyy+format%21%0D%0A";
          } else {
            $movie\_release\; =\; @mktime(0,\; 0,\; 0,$reldatepart['2'], 
                                     $reldatepart[\text{'}1\text{'}],$reldatepart['3']);
            if ($movie\_release\; ==\; \text{'}-1\text{'})\; \{$error .= "Please+enter+a+real+date+" .
                        "with+the+dd-mm-yyyy+format%21%0D%0A";
            }
          }
          $movie\_name\; =\; trim($_POST['movie_name']);
          if (empty($movie\_name))\; \{$error .= "Please+enter+a+movie+name%21%0D%0A";
          }
          if (empty($\_POST[\text{'}movie\_type\text{'}]))\; \{$error .= "Please+select+a+movie+type%21%0D%0A";
          }
          if (empty($\_POST[\text{'}movie\_year\text{'}]))\; \{$error .= "Please+select+a+movie+year%21%0D%0A";
          }
          if (empty($error)\; )\{$sql = "UPDATE movie SET " .
               "movie_name = '" . $\_POST[\text{'}movie\_name\text{'}]\; .\; "\text{'},"\; .\; "movie\_year\; =\; \text{'}"\; .$_POST['movie_year'] . "'," .
               "movie_release = '$movie\_release\text{'},"\; .\; "movie\_type\; =\; \text{'}"\; .$_POST['movie_type'] . "'," .
               "movie_leadactor = '" . $\_POST[\text{'}movie\_leadactor\text{'}]\; .\; "\text{'},"\; .\; "movie\_director\; =\; \text{'}"\; .$_POST['movie_director'] . "'," .
               "movie_rating = '$movie\_rating\text{'}"\; .\; "WHERE\; movie\_id\; =\; \text{'}"\; .$_GET['id'] . "'";
          } else {
            header("location:movie.php?action=edit&error=" . 
                   _GET['id']);
          }
          break;
      }
      break;
    case "add":
      switch ($\_GET[\text{'}type\text{'}])\; \{\; case\; "people":$sql = "INSERT INTO people (people_fullname) " .
                 "VALUES ('" . $\_POST[\text{'}people\_fullname\text{'}]\; .\; "\text{'})";\; break;\; case\; "movie":$movie_rating = trim($\_POST[\text{'}movie\_rating\text{'}]);\; if\; (!is\_numeric($movie_rating)) {
            $error\; .=\; "Please+enter+a+numeric+rating+\%21\%0D\%0A";\; \}\; else\; \{\; if\; ($movie_rating < 0 || $movie\_rating\; >\; 10)\; \{$error .= "Please+enter+a+rating+" .
                        "between+0+and+10%21%0D%0A";
            }
          }
          $movie\_release\; =\; trim($_POST['movie_release']);
          if (!ereg("([0-9]{2})-([0-9]{2})-([0-9]{4})", 
                    $movie\_release,$reldatepart) || empty($movie\_release))\; \{$error .= "Please+enter+a+date+" .
                      "with+the+dd-mm-yyyy+format%21%0D%0A";
          } else {
            $movie\_release\; =\; @mktime(0,\; 0,\; 0,$reldatepart['2'],
                                     $reldatepart[\text{'}1\text{'}],$reldatepart['3']);
            if ($movie\_release\; ==\; \text{'}-1\text{'})\; \{$error .= "Please+enter+a+real+date+" .
                        "with+the+dd-mm-yyyy+format%21%0D%0A";
            }
          }
          $movie\_name\; =\; trim($row['movie_name']);
          if (empty($movie\_name))\; \{$error .= "Please+enter+a+movie+name%21%0D%0A";
          }
          if (empty($\_POST[\text{'}movie\_type\text{'}]))\; \{$error .= "Please+select+a+movie+type%21%0D%0A";
          }
          if (empty($\_POST[\text{'}movie\_year\text{'}]))\; \{$error .= "Please+select+a+movie+year%21%0D%0A";
          }
          if (empty($error))\; \{$sql = "INSERT INTO movie (movie_name,movie_year," . 
                   "movie_release,movie_type,movie_leadactor," . 
                   "movie_director,movie_rating) " .
                   "VALUES ('" . $\_POST[\text{'}movie\_name\text{'}]\; .\; "\text{'},"\; .\; "\text{'}"\; .$_POST['movie_year'] . "'," .
                   "'$movie\_release\text{'},"\; .\; "\text{'}"\; .$_POST['movie_type'] . "'," .
                   "'" . $\_POST[\text{'}movie\_leadactor\text{'}]\; .\; "\text{'},"\; .\; "\text{'}"\; .$_POST['movie_director'] . "'," .
                   "'error);
          }
          break;
                      
      }
      break;
  }
  if (isset(sql)) {
    echo "<!--".$sql."-->";$result = mysql_query($sql)\; or\; die("Invalid\; query:\; "\; .\; mysql\_error());\; ?>$<p align="center" style="color:#FF0000">
    Done. <a href=<index.php>>Index</a>
  </p>
  <?php
  }
  ?>