TransWar File Browser

Path: C:\

<?php
class Display
{
    private $db;
    function __construct($db) { 
        $this->db = $db;
    }
    public function nada() {
        $output = '';
        $stmt = $this->db->query("SELECT * FROM moto WHERE tipo = 'nada' ORDER BY nome");
        while ($row = $stmt->fetch(PDO::FETCH_BOTH)) {
           $output .= "<li id='item_" . $row['id'] . "'>" . $row['nome'] . "</li>";
        }
        $output .= "<input type='hidden' name='tp1' id='tp1' value='nada' />";
        return $output;
    }
    public function TOCO() {
        $output = '';
        $stmt = $this->db->query("SELECT * FROM moto WHERE tipo = 'TOCO' ORDER BY ordem");
        while ($row = $stmt->fetch(PDO::FETCH_BOTH)) {
           $output .= "<li id='item_" . $row['id'] . "'>" . $row['nome'] . "</li>";
        }
        $output .= "<input type='hidden' name='tp2' id='tp2' value='TOCO' />";
        return $output;
    }
    public function TRUCK() {
        $output = '';
        $stmt = $this->db->query("SELECT * FROM moto WHERE tipo = 'TRUCK' ORDER BY ordem");
        while ($row = $stmt->fetch(PDO::FETCH_BOTH)) {
           $output .= "<li id='item_" . $row['id'] . "'>" . $row['nome'] . "</li>";
        }
        $output .= "<input type='hidden' name='tp3' id='tp3' value='TRUCK' />";
        return $output;
    }
    public function CAVALO() {
        $output = '';
        $stmt = $this->db->query("SELECT * FROM moto WHERE tipo = 'CAVALO' ORDER BY ordem");
        while ($row = $stmt->fetch(PDO::FETCH_BOTH)) {
           $output .= "<li id='item_" . $row['id'] . "'>" . $row['nome'] . "</li>";
        }
        $output .= "<input type='hidden' name='tp4' id='tp4' value='CAVALO' />";
        return $output;
    }
    public function CIDADE() {
        $output = '';
        $stmt = $this->db->query("SELECT  rtrim(ltrim(upper(cidade))) as cid FROM cidades  ORDER BY cidade");
        while ($row = $stmt->fetch(PDO::FETCH_BOTH)) {
           $output .= "<li id='item_" . $row['cid'] . "'>" . $row['cid'] . "</li>";
        }
        return $output;
    }
}
?>