I'm trying to create a page that can toggle devices on and off, a smart home kind of thing.
The code looks as follows:
<form method="post" action="toggle.php">
<input type="hidden" name="id" value="<?php echo {$row['id']};?>"/>
<button type="submit" name="on" id="on" class="btn btn-success">On</button>
<button type="submit" name="off" id="off" class="btn btn-danger">Off</button>
</form>
This is the form that sends either "on" or "off" to toggle.php.
Toggle.php looks like this:
<?php
include('devices.php');
if (isset($_POST["on"])){
mysqli_query($mysqli,"UPDATE devices SET status = 'On' WHERE id = '$row['id']'");
}
if(isset($_POST["off"])){
mysqli_query($mysqli,"UPDATE devices SET status = 'Off' WHERE id = '$row['id']'");
}
?>
My question is: how do i get what's in $row['id'] in the form to get sent to toggle.php and then be used to update the status of the device?
You can access the data you are posting to the toggle.php with the superglobal $_POST, just as you did with $_POST['off'] for example.
mysqli_query($mysqli,"UPDATE devices SET status = 'On' WHERE id = '".$_POST['id']."'");
Quick note: Your code is vulnerable to SQL injections, you might want to learn about them here: How can I prevent SQL injection in PHP?