diff -r bb97e0de63cf -r 395833e20f88 www/includes/db_inventory_fermentables.php --- a/www/includes/db_inventory_fermentables.php Mon Aug 13 23:01:25 2018 +0200 +++ b/www/includes/db_inventory_fermentables.php Thu Aug 16 16:01:13 2018 +0200 @@ -17,7 +17,7 @@ $sql = "INSERT INTO `inventory_fermentables` SET name='" . mysqli_real_escape_string($connect, $_GET['name']); $sql .= "', type='" . $_GET['type']; $sql .= "', yield='" . $_GET['yield']; - $sql .= "', color='" . ebc_to_srm($_GET['color']); + $sql .= "', color='" . $_GET['color']; ($_GET['add_after_boil'] == 'true') ? $sql .= "', add_after_boil='1" : $sql .= "', add_after_boil='0"; $sql .= "', origin='" . mysqli_real_escape_string($connect, $_GET['origin']); $sql .= "', supplier='" . mysqli_real_escape_string($connect, $_GET['supplier']); @@ -37,11 +37,14 @@ $sql .= "', cost='" . $_GET['cost']; $sql .= "', production_date='" . $_GET['production_date']; $sql .= "', tht_date='" . $_GET['tht_date']; - $sql .= "', supplier_rec='" . $_GET['supplier_rec']; + //$sql .= "', supplier_rec='" . $_GET['supplier_rec']; $sql .= "';"; - error_log("\"$sql\""); - $result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect)); - error_log("result " . $result); + $result = mysqli_query($connect, $sql); + if (! $result) { + syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect)); + } else { + syslog(LOG_NOTICE, "db_inventory_fermentables: inserted ".$_GET['name']); + } echo $result; } else if (isset($_GET['update'])) { @@ -49,7 +52,7 @@ $sql = "UPDATE `inventory_fermentables` SET name='" . mysqli_real_escape_string($connect, $_GET['name']); $sql .= "', type='" . $_GET['type']; $sql .= "', yield='" . $_GET['yield']; - $sql .= "', color='" . ebc_to_srm($_GET['color']); + $sql .= "', color='" . $_GET['color']; ($_GET['add_after_boil'] == 'true') ? $sql .= "', add_after_boil='1" : $sql .= "', add_after_boil='0"; $sql .= "', origin='" . mysqli_real_escape_string($connect, $_GET['origin']); $sql .= "', supplier='" . mysqli_real_escape_string($connect, $_GET['supplier']); @@ -69,19 +72,25 @@ $sql .= "', cost='" . $_GET['cost']; $sql .= "', production_date='" . $_GET['production_date']; $sql .= "', tht_date='" . $_GET['tht_date']; - $sql .= "', supplier_rec='" . $_GET['supplier_rec']; + //$sql .= "', supplier_rec='" . $_GET['supplier_rec']; $sql .= "' WHERE record='" . $_GET['record'] . "';"; - error_log("\"$sql\""); - $result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect)); - error_log("result " . $result); + $result = mysqli_query($connect, $sql); + if (! $result) { + syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect)); + } else { + syslog(LOG_NOTICE, "db_inventory_fermentables: updated record ".$_GET['record']); + } echo $result; } else if (isset($_GET['delete'])) { // DELETE COMMAND $sql = "DELETE FROM `inventory_fermentables` WHERE record='".$_GET['record']."';"; - error_log("\"$sql\""); - $result = mysqli_query($connect, $sql) or die("SQL Error 1: " . mysqli_error($connect)); - error_log("result " . $result); + $result = mysqli_query($connect, $sql); + if (! $result) { + syslog(LOG_NOTICE, "db_inventory_fermentables: ".$sql." result: ".mysqli_error($connect)); + } else { + syslog(LOG_NOTICE, "db_inventory_fermentables: deleted record ".$_GET['record']); + } echo $result; } else {