Viên ngọc phương Đông

<?php 
session_start();
require_once 'scripts-includes/universal.php';
require_once 'scripts-includes/display.php';

$ship_id = is_numeric_id($_GET['ship']);

$connID = connect_to_db();
$shipping = mysql_query("select * from shipping where ship_id='$ship_id'");

head('orders','Administration Panel');
if(!$shipping || mysql_num_rows($shipping)<1)
{
?>
	<p class="center">Record not found.</p> 
<?php
}
else
{
	$s = mysql_fetch_assoc($shipping);
?>
	<form name="add_shipping" id="add_shipping" action="processes/process-shipping-edit.php" method="post" enctype="multipart/form-data" class="add">
		<input type="hidden" name="ship_id" value="<?php echo $ship_id; ?>" />
		<p class="center">
			Location: <input name="location" id="location" type="text" size="30" maxlength="60" value="<?php echo $s['location']; ?>" /> &nbsp;&nbsp;
			Cost: $<input name="shipping_cost" id="shipping_cost" type="text" size="4" value="<?php echo number_format($s['shipping_cost'],2,'.',''); ?>" maxlength="7" /> &nbsp;&nbsp;
			Show now: <input name="active" id="active" type="checkbox" value="1" <?php echo ($s['active']) ? 'checked="checked"' : ''; ?> /> &nbsp;&nbsp;
			<input type="submit" name="add" value="Update location" />
		</p>
	</form>
<?php
}
footer();
exit;