MockStock/dash.php at master · sumukhatv/MockStock · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
<?php
                    session_start();
    if(!isset($_SESSION['user_email'])) {
        header('Location: login.html');
    }
    $userEmail = $_SESSION['user_email'];
    #$userEmail = "sumukhatv@live.in";
    $userName = $_SESSION['user_name'];
    #$userName = "Sumukha TV";
    $file = file_get_contents('./config.txt', FILE_USE_INCLUDE_PATH);
    $str = preg_split("/[\s,\n]+/", $file);
    $sql_host = $str[1];
    $sql_user = $str[3];
    $sql_password = $str[5];
    $sql_db = $str[7];

    $conn = mysqli_connect($sql_host, $sql_user, $sql_password, $sql_db);

    echo ("
            <table id='t1'>
                <caption><b><font color='white' size = '+2'>My shares</font></b></caption>
                <tr>
                    <th>
                        Company
                    </th>
                    <th>
                        Shares
                    </th>
                    <th>
                        Share Price (&#8377;)
                    </th>
                </tr>
        ");


    if (mysqli_connect_errno()) {
        echo "<font color='white'>Failed to connect to MySQL: " . mysqli_connect_error()."</font>";
        }
        $query = "SELECT * FROM `shares_data` WHERE `email` = \"$userEmail\"";
        $result = mysqli_query($conn, $query);
        #echo (mysqli_num_rows($result));
        while($row = mysqli_fetch_array($result)) {
            $company = $row['company'];
            $shares = $row['shares'];
            $query1 = "SELECT * FROM `companies` WHERE `name` = \"$company\"";
            $result1 = mysqli_query($conn, $query1);
            $row1 = mysqli_fetch_array($result1);
            $share_price = $row1['share_price'];
            echo("
                <tr>
                    <td>
                        ".$company."
                    </td>
                    <td>
                        ".$shares."
                    </td>
                    <td>
                        ".$share_price."
                    </td>
                </tr>
                ");
             }
             mysqli_close($conn);

    echo ("</table>");
?>