<?php


/**
 * @author Kevin van't ijssel
 * @copyright 2011
 */


if(isset($_POST['search'])){   
    $naar   = $_POST['order']; 
    
$result = mysql_query("SELECT `orderid` FROM `bestelling` WHERE `id`=".mysql_real_escape_string($naar)) or die(mysql_error()); 


if(mysql_num_rows($result) == 0) { 
?>
Er zijn geen resultaten gevonden! <br /><br />
<?php
} else { 
$sql = mysql_query("SELECT `id`, `status`, `orderid`, `gekocht` FROM `bestelling` WHERE `id`=".mysql_real_escape_string($naar)) or die(mysql_error());
?>
<table width="70%" align="center">
        <tr>
            <td><strong>OrderID:</strong></td>
            <td><strong>Gekocht op:</strong></td>
            <td><strong>Status:</strong></td>
            <td><strong>ID:</strong></td>
        </tr>
<?php
while($res = mysql_fetch_assoc($sql)){ 
?>
        <tr>
            <td><?=$res['orderid']?></td>
            <td><?=$res['gekocht']?></td>
            <td><?=$res['status']?></td>
            <td><?=$res['id']?></td>
        </tr>  
<?php 
}
?>
</table>
<?php
}
?> 
<form method='post'> 
    <table width="70%" align="center">
        <tr>
            <td>Zoek op ID:</td>
            <td><input type="text" name="order" maxlength="25" /></td>
        </tr>
        <tr>
            <td></td>
            <td><input type="submit" name="search" value="Zoek Bestelling!" /></td>
        </tr>
    </table>
</form>
<?php
}
?>