GFX-Sector - PHP, MySQL

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:

<?php
    //set vars
    $uploadPath = "shop/";
    $action = $_GET['action'];
    
    //check whether $action is set
    if ($action == 'send'){
        //set vars
        $name = $_POST['bez'];
        $cat = $_POST['kategorie'];
        $number = $_POST['anzahl'];
        $price = $_POST['preis'];
        //set vars for uploaded pic
        $picName = $_FILES['bild']['name'];
        $picType = $_FILES['bild']['type'];
        $picTmpName = $_FILES['bild']['tmp_name'];
        
        //set Sessions
        $_SESSION['name'] = $name;
        $_SESSION['cat'] = $cat;
        $_SESSION['number'] = $number;
        $_SESSION['price'] = $price;
        
        //check entries        
        if (!empty($name) && !empty($cat) && !empty($price) && ((!empty($picName) && stristr($picType,'image')) || empty($picName))){
                    if (empty($number)){
                        $number = '9999';
                    }
                    if (empty($picName)){
                        $sqlPicPath = "$uploadPath/none.jpg";
                    }
                    else $sqlPicPath = "$uploadPath/$picName";
                    
                    move_uploaded_file($picName,$uploadPath);
        }
        else{
            $errorStyle = "style=\"background-color: #ff0000;\"";
            if (empty($name)){
                $nameStyle = $errorStyle;
            }
            if (empty($cat)){
                $catStyle = $errorStyle;
            }
            if (empty($price)){
                $priceStyle = $errorStyle;
            }
            if (!empty($picName) && !stristr($picType,'image')){
                $imgStyle = "background-color: #ff0000;";
            }
        }
    }
?>

<a name="formular">&nbsp;</a><form enctype="multipart/form-data" action="?sid=17&amp;action=send" method="post">
    <b>Name</b><br>
    <input type="text" name="bez" <?= $nameStyle; ?>/><br><br>
    <b>Kategorie</b><br>
    <select name="kategorie" size="1">
        <option value="media">Media</option>
        <option value="textil">Textilien</option>
    </select><br><br>
    
    <b>Anzahl</b><br>
    <input type="text" name="anzahl"/><br><br>
    
    <b>Preis</b><br>
    <input type="text" name="preis" <?= $priceStyle; ?>/><br><br>
    
    <b>Bild</b><br>
    <input type="file" name="bild" style="width: 99%; <?= $imgStyle; ?>"/><br><br>
    
    <b>Info</b>
    <textarea name="info"></textarea><br><br>
    <input type="submit" value="Speichern"/> <input type="reset" value="Reset"/>
</form>