PDQ/PDQacknowledge.php

<?php
include('pdqconnect.inc');

extract($_POST);
$subKID = mysqli_real_escape_string($mydb,$subKID);

$parseMe = str_replace(" ", "" ,trim(mysqli_real_escape_string($mydb,$current)));
$parseMe = str_replace("<br>", "" ,$parseMe);
$parseMe = str_replace("&nbsp;", "" ,$parseMe);

if($subKID>0){
	if($column=="subKack"){
		$sql = "update subK set subKack = ''	where subKID = " . mysqli_real_escape_string($mydb,$subKID);
		$rs=mysqli_query($mydb,$sql) or die(mysqli_error());
		echo "Success";
	} elseif($column=="subKstatus"){
		if($parseMe=="Finished"){
			$sql = "update subK set subKstatus = 'Shipped'	where subKID = " . mysqli_real_escape_string($mydb,$subKID);
			$rs=mysqli_query($mydb,$sql) or die(mysqli_error());
			echo "Success";
		}
		if($parseMe=="Shipped"){
			$sql = "update subK set subKstatus = ''	where subKID = " . mysqli_real_escape_string($mydb,$subKID);
			$rs=mysqli_query($mydb,$sql) or die(mysqli_error());
			echo "Success";
		}
		if($parseMe==""){
			$sql = "update subK set subKstatus = 'Finished'	where subKID = " . mysqli_real_escape_string($mydb,$subKID);
			$rs=mysqli_query($mydb,$sql) or die(mysqli_error());
			echo "Success";
		}
	}
}