prepare("SELECT d.ISBN, title, description, publisher, price, edition, pages, GROUP_CONCAT(DISTINCT concat('', namef, ' ', namel, '') ORDER BY namel SEPARATOR ', ') as authors FROM bookauthors a, bookauthorsbooks ba, bookdescriptions d, bookcategoriesbooks cb, bookcategories c WHERE a.AuthorID = ba.AuthorID AND ba.ISBN = d.ISBN AND d.ISBN = cb.ISBN AND c.CategoryID = cb.CategoryID AND d.isbn = ? GROUP BY d.ISBN ORDER BY title LIMIT 1;"); $query->execute(array($_GET['isbn'])); $number = $query->rowCount(); if ($number > 0) { $result = $query->fetch(); $title = "$result[title]"; $content = "

$result[title]

By: $result[authors]
Price: $$result[price]

ISBN: $result[ISBN]
Publisher: $result[publisher]
Pages: $result[pages]
Edition: $result[edition]

$result[description]

"; if ($userUUID) { $db->beginTransaction(); $isUpdate = $db->prepare("SELECT v.viewID FROM bookcustomerviews v WHERE v.ISBN = :isbn AND v.uuid = :uuid;"); $isUpdate->execute(array(':uuid' => hex2bin($userUUID), ':isbn' => (string) $result['ISBN'])); if ($isUpdate->rowCount()) { $pageView = $db->prepare('UPDATE bookcustomerviews SET time = :time WHERE ISBN = :isbn AND uuid = :uuid'); $pageView->execute(array(':uuid' => hex2bin($userUUID), ':isbn' => (string) $result['ISBN'], ':time' => time())); } else { $pageView = $db->prepare('INSERT INTO bookcustomerviews (uuid, isbn, time) VALUES (:uuid, :isbn, :time);'); $pageView->execute(array(':uuid' => hex2bin($userUUID), ':isbn' => (string) $result['ISBN'], ':time' => time())); } $db->commit(); } } else { $title = 'No Results'; $isbn = htmlspecialchars($_GET['isbn']); $content = "

ISBN $isbn is not in our database. Sorry!

"; } } else { header('location: index.php'); exit(); } require 'template.php'; ?>