<%@ page import="java.sql.*" %> Video Orders <%@ include file="db.jsp" %>

Ordering System

<% if (request.getParameter("Lookup") != null) { String title = request.getParameter("title"); String query = new String("Select tapeid from tapes v natural join titles t where t.title = '" + title + "' and tapeid not in (select tapeid from neworders where status = 'o')") ; ResultSet rs = statement.executeQuery(query); if (!rs.next()) { %>

No tapes found for <%= title %>

<% } else { %>
Order Entry
Select tapeid:
Enter CustomerID:
<% } // end else %> <% } else if (request.getParameter("Order") != null) { String tapeid = request.getParameter("tapeid"); String customerid = request.getParameter("customer"); String update = new String("Insert into neworders values (null," + customerid + "," + tapeid + ", '2008-10-31','o')"); statement.executeUpdate(update); %> <% } statement.close(); connect.close(); %>

Title Lookup
Title: