new_add.php

<?php
/**********************************************************************************************************************************************************************************

SQL for adding a new address. Called from address function in jsfunc.js file.
-Nachiket Desai

**********************************************************************************************************************************************************************************/

require 'connection.php';
require 'current_page.php';
if(loggedin()){
	if(isset($_GET['first'])&&isset($_GET['last'])&&isset($_GET['mobile'])&&isset($_GET['add1'])&&isset($_GET['add2'])&&isset($_GET['pin'])){
	$user = getuserfield('user_id');
	$first = mysql_real_escape_string($_GET['first']);
	$last = mysql_real_escape_string($_GET['last']);
	$add1 = mysql_real_escape_string($_GET['add1']);// line1 address
	$add2 = mysql_real_escape_string($_GET['add2']);// line1 address
	$city = mysql_real_escape_string($_GET['city']);
	$state = mysql_real_escape_string($_GET['state']);
	$pin = mysql_real_escape_string($_GET['pin']);
	$mobile = mysql_real_escape_string($_GET['mobile']);
	$new_add = "INSERT INTO `address`(`userid`,`firstname`, `lastname`, `mobile`, `address1`, `address2`, `city`, `state`, `pin`, `def`) VALUES ('$user','$first','$last','$mobile','$add1','$add2','$city','$state','$pin','0')";
			if($query_new_add = mysql_query($new_add)){
			echo 'Added successfully, Please reload to see changes.';
			}else{
			echo 'Could not update information';
			}
				
	}
}else{
 echo 'Please login to continue';
}
?>