--- a/admin/displayUNSPSC.php
+++ b/admin/displayUNSPSC.php
@@ -1,23 +1,22 @@
 <?php

 error_reporting(E_ALL);

+  include_once("../lib/common.inc.php");

 

-$link = mysql_connect('localhost', 'team7', 'wlUsnD2xu9');

-if (!$link) {

-    die('Could not connect: ' . mysql_error());

+

+$unspscresult= $conn->prepare('select * from "UNSPSCcategories";');

+$unspscresult->execute();

+foreach ($unspscresult->fetchAll() as $row) {

+	$unspsc[$row['UNSPSC']] = $row['Title'];

+

 }

-@mysql_select_db("team7") or die("Unable to select database");

-

-$unspscresult = mysql_query ("select * from UNSPSCcategories;");

-while ($row = mysql_fetch_assoc($unspscresult)) {

-	$unspsc[$row['UNSPSC']] = $row['Title'];

-}

-$catsresult = mysql_query ("SELECT LEFT( categoryUNSPSC, 2 ) as cat , SUM( value ) as value

-FROM `contractnotice`

-GROUP BY cat ;");

+$catsresult = $conn->prepare('SELECT substr( "categoryUNSPSC"::text, 0, 2 ) as cat , SUM( "value" ) as value

+FROM contractnotice

+GROUP BY cat ;');

 echo "<table>";

-while ($row = mysql_fetch_assoc($catsresult)) {

-	$catName = $unspsc[$row['cat']."000000"].$row['cat'];

-	if ($row['cat'] = "") $catName = "null";

+$catsresult->execute();

+foreach ($catsresult->fetchAll() as $row) {

+	$catName = $unspsc[$row['cat']."0000000"].$row['cat'];

+	if ($row['cat'] == "") $catName = "null";

 	

 	echo "<tr><td>$catName</td><td>".$row['value']."</td></tr>";

 }