diff --git a/var/www/findFriend.php b/var/www/findFriend.php
index 702754b..a4e26f9 100644
--- a/var/www/findFriend.php
+++ b/var/www/findFriend.php
@@ -20,17 +20,17 @@
$sql_select = "SELECT count(username)";
$sql_from = "FROM contacts";
$sql_where = "WHERE username = input";
- $sql_statement = $sql_select." ".$sql_from." ".$sql_where.;
- if(($db_connection->query($sql_statement) as $row) == 0)
- //username doesn't exist
+ $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
+ if(($db_connection->query($sql_statement)) == 0)
+ echo "username doesn't exist";
$sql_select = "SELECT count(username)";
$sql_from = "FROM friendList";
- $sql_where = "WHERE username = input and friend = ".$_SESSION["loggedInUser"].;
- $sql_statement = $sql_select." ".$sql_from." ".$sql_where.;
- if(($db_connection->query($sql_statement) as $row) == 0)
+ $sql_where = "WHERE username = input and friend = ".$_SESSION["loggedInUser"]."";
+ $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
+ if(($db_connection->query($sql_statement)) == 0)
{
- $sql_statement = "UPDATE friendList SET confirm = true WHERE username = input and friend = ".$_SESSION["loggedInUser"].;
+ $sql_statement = "UPDATE friendList SET confirm = true WHERE username = input and friend = ".$_SESSION["loggedInUser"]."";
$db_connection->query($sql_statement);
$sql_statement = "INSERT INTO friendList VALUES (".$_SESSION["loggedInUser"].", input, true)";
$db_connection->query($sql_statement);
diff --git a/var/www/pendingFriend.php b/var/www/pendingFriend.php
index a720e28..0ac21c4 100644
--- a/var/www/pendingFriend.php
+++ b/var/www/pendingFriend.php
@@ -1,52 +1,41 @@
-
-
-
-
-friendbook
-
-
0)
-{
- // output data of each row
- while($row = mysqli_fetch_assoc($result))
- {
- echo "friends: " . $row["friend"]. ;
- echo "";
- echo "
";
- }
-}
-else
-{
- echo "0 results";
-}
-
+ require 'common.php';
+ require 'loginRequired.php';
?>
+
+
+
+ friendbook Pending Friend Requests
+
+
+
+
+
+
+ ';
+ echo "Pending Friends:\n\n";
+ $sql_select = "SELECT friend";
+ $sql_from = "FROM friendList";
+ $sql_where = "WHERE username = ".$_SESSION["loggedInUser"]."";
+ $sql_statement = $sql_select." ".$sql_from." ".$sql_where."";
+ foreach($db_connection->query($sql_statement) as $row)
+ {
+ echo "".$row["friend"]."";
+ echo "
";
+ }
-
-
+ echo '';
+ }catch(PDOException $e){
+ echo "PDOException: ".$e->getMessage().PHP_EOL;
+ }catch(Exception $e){
+ echo "Exception: ".$e->getMessage().PHP_EOL;
+ }
+ ?>
+
-
+