zmena zaznamu v databaze

<?php
include 'ibuf.inc';
  define("SQL_HOST","localhost");
  define("SQL_DBNAME","lieky");
  define("SQL_USERNAME","root");
  define("SQL_PASSWORD","");
  
  mysql_connect(SQL_HOST, SQL_USERNAME, SQL_PASSWORD) or die("Nelze se připojit k MySQL: " . mysql_error());
  mysql_select_db(SQL_DBNAME) or die("Nelze vybrat databázi: ". mysql_error());
?>


<?php

if (empty ($_POST))
{
 ?> <form method="post" action="pomoc.php">
    nazov lieku: <input name="nazov" value="<?php echo $_POST["nazov"]?>";
      <input type="Submit" name="odesli">
  </form>
 



<?php
}
 else
 {
 $BudemeZobrazovat=false;
$sql = mysql_query("select * from lieky where nazov = '$_POST[nazov]'" ) or die("Query failed with error: ".mysql_error());

$radku=mysql_num_rows($sql);
      if ($radku==0) echo "liek ".$_POST["nazov"]." nie je v databaze";
   
      else while($zaznam = mysql_fetch_array($sql))
 {
 
 $nazov        = mysql_Result($sql, 0, "nazov");
 $cena        = mysql_Result($sql, 0, "cena"); 
 $pocet_ks = mysql_Result($sql, 0, "pocet_ks");
 $id_dodavatela        = mysql_Result($sql, 0, "id_dodavatela");
 $id_exp_doby        = mysql_Result($sql, 0, "id_exp_doby"); 
 $id_kat1 = mysql_Result($sql, 0, "id_kat1");
 $id_kat2        = mysql_Result($sql, 0, "id_kat2");
 
 
 }
}
?>
<form method="post" action="pomoc2.php" 
    onsubmit="return Kontrola()">
  

<table> 
 <tr>
   <th>Položka</th>
   <th>Hodnota</th>
  </tr> 
  <tr>
   <td>nazvo lieku</td>
   <td> 
    <input style="width: 100%" 
         name="nazov" value="<?php echo $nazov;?>"/>
   </td> 
  </tr>  
  <tr>    
   <td>cena</td>
   <td> 
    <input style="width: 100%" name="cena" 
      value="<?php echo $cena;?>"/>    
   </td>
  </tr>
  <tr>    
   <td>pocet_ks</td>   
   <td>     
    <input style="width: 100%" name="pocet_ks" 
      value="<?php echo $pocet_ks;?>"/> 
   </td> 
  </tr>  
  
  <tr>    
   <td>id dodavatela</td>   
   <td>     
    <input style="width: 100%" name="id_dodavatela" 
      value="<?php echo $id_dodavatela;?>"/> 
   </td> 
  </tr>  
  
  <tr>    
   <td>id exp doby</td>   
   <td>     
    <input style="width: 100%" name="id_exp_doby" 
      value="<?php echo $id_exp_doby;?>"/> 
   </td> 
  </tr>  
  
  <tr>    
   <td>id kat1</td>   
   <td>     
    <input style="width: 100%" name="id_kat1" 
      value="<?php echo $id_kat1;?>"/> 
   </td> 
  </tr>  
  
  <tr>    
   <td>id kat2</td>   
   <td>     
    <input style="width: 100%" name="id_kat2" 
      value="<?php echo $id_kat2;?>"/> 
   </td> 
  </tr>  
  
  
  
  <tr>   
   <td> &nbsp;</td> 
   <td>   
    <input type="submit" value="Zápis do databázy" 
      title="Odošle zadané údaje do databázy" /> 
   </td> 
  </tr>
</table>
</form>

<?php
include 'ibuf.inc';
  define("SQL_HOST","localhost");
  define("SQL_DBNAME","lieky");
  define("SQL_USERNAME","root");
  define("SQL_PASSWORD","");
  
  mysql_connect(SQL_HOST, SQL_USERNAME, SQL_PASSWORD) or die("Nelze se připojit k MySQL: " . mysql_error());
  mysql_select_db(SQL_DBNAME) or die("Nelze vybrat databázi: ". mysql_error());
?>



<?php
do {
 
  $nazov=DajParam("nazov");
  $cena=DajParam("cena");  
  $pocet_ks=DajParam("pocet_ks"); 
  $id_dodavatela=DajParam("id_dodavatela");
  $id_exp_doby=DajParam("id_exp_doby");  
  $id_kat1=DajParam("id_kat1");
  $id_kat2=DajParam("id_kat2");
 
   
     
$sSql = mysql_query ("UPDATE lieky SET    
    nazov='$nazov',   
      cena='$cena',   
       pocet_ks='$pocet_ks', 
       id_dodavatela='$id_dodavatela',
      id_exp_doby='$id_exp_doby',
       id_kat1='$id_kat1',
       id_kat2='$id_kat2'  
      
      WHERE nazov = '$_POST[nazov]'") or die ("Query failed with error: ".mysql_error());
      
   $vysledok=MySQL_Query($sSql); 
  if(!$vysledok) { echo "Chyba pri zmena záznamu 
      v tabuľke Lieky !!!<br/><br/>\n", mysql_error(); break; }
   
  
  $Oznam="Bola urobená zmena záznamu v tabuľke <b>Stranky</b> !"; 
  echo $Oznam; 
  mysql_Close();
} while(false);  
 
  
?>

<?php
function DajParam($Nazov="", $NieJe="" )
{ 
  global $HTTP_POST_VARS, $HTTP_GET_VARS;
  if (strlen($Nazov)==0) return $NieJe;
//  echo "<br/>Nazov..", $Nazov, "--";
  $Param=$NieJe;
  if (isset($HTTP_POST_VARS[$Nazov])) {
//    echo "<br/>HTTP_POST_VARS";
    $Param=$HTTP_POST_VARS[$Nazov];
    if (strlen($Param)>0) {
      $Param=stripslashes(urldecode($Param));
    }
  } else {
//    echo "<br/>ELSE .. HTTP_POST_VARS";
    if (isset($HTTP_GET_VARS[$Nazov])) {
//      echo "<br/>HTTP_GET_VARS";
      $Param=$HTTP_GET_VARS[$Nazov];
      if (strlen($Param)>0) {
        $Param=stripslashes(urldecode($Param));
      }
    }
//    else echo "<br/>ELSE .. HTTP_GET_VARS";
  }
//  echo "<br/>Param..",$Param ,"--<br/>";
  return $Param;
}