i have a slight problem now, the security works for all the pages except the last delete page...hmmm... just great :rolleyes: heres the code:
(delete2.php)
<? include "session.php" ?>
<style>
A:link {font-family: Verdana; font-size: 12pt; color:#000000;}
A:visited {font-family: Verdana; font-size: 12pt; color: red;}
A:hover {font-family: Verdana; font-size: 12pt; color: blue;}
</style>
<?
if($_SESSION['level']=='admin'){
$id=$_POST['id'];
$content=$_POST['content'];
include "database.php";
$query=" SELECT * FROM $table WHERE id='$id'"; // put the databasename here
$result=mysql_query($query);
while ($row= mysql_fetch_array($result)) {
if ($username == $row['author']) {
$query="DELETE FROM $table WHERE id='$id'";
$result = mysql_query($query);
echo "Successfully Deleted! [<a href='myhomepage.php'>Back</a>]";
mysql_close($result);
}
else echo "Sorry but you didnt create this topic!";
}
?>
<?
}
else if($_SESSION['level']==''){
echo "Not logged in.";
}
else echo "Not logged in.";
?>
it works on the first page, delete.php, but not delete2.php.. is it a form problem????
(delete.php)
<? include "session.php" ?>
<script>
function add_link(){
var loc=prompt("What is the Location?","http://")
var pagedesc=prompt("What is the name of the page","My Home Page")
var str="<a href='" + loc + "'>" + pagedesc + "</a>"
document.edit.content.value+=str
}
function bold(){
var bold=prompt("Please enter the text you want to be bold","bold text")
var str="<B>" + bold + "</B>"
document.edit.content.value+=str
}
function italic(){
var italic=prompt("Please enter the text you want to be italic","italic text")
var str="<I>" + italic + "</I>"
document.edit.content.value+=str
}
function add_image(){
var loc=prompt("What is the Location of the image?","moo.gif")
var alt=prompt("Alternitive text (optional)","image1")
var str="<img src='" + loc + "' alt='" + alt + "'>"
document.edit.content.value+=str
}
</script>
<style>
.textinput { font-size: 9pt; font-family: verdana, helvetica, sans-serif; vertical-align: middle }
</style>
<?
if($_SESSION['level']=='admin'){
$id=$_GET['id'];
include "database.php";
$query=" SELECT * FROM $table WHERE id='$id'"; // put the databasename here
$result=mysql_query($query);
while ($row= mysql_fetch_array($result)) {
if ($username == $row['author']) {
echo "<pre><input type='button' value='Add Link' onClick='add_link()'> <input type='button' value='Bold Text' onClick='bold()'> <input type='button' value='Italic Text' onClick='italic()'> <input type='button' value='Add Image' onClick='add_image()'></pre>";
?>
<?
echo "
<form action='delete2.php' method='post' name='edit'>
<input type='hidden' name='id' value='";?><? echo $row['id']; ?><?echo "'>
Content:<BR><textarea cols='60' style='width:95%' rows='15' wrap='soft' tabindex='3' class='textinput' name='content'>";?><? echo $row['content']; ?><? echo"</text><br>
<input type='Submit' value='Delete'>
</form>";
?>
<?
}
else echo "Sorry but you didnt create this topic!";
}
?>
<?
}
else if($_SESSION['level']==''){
echo "Not logged in.";
}
else echo "Not logged in.";
?>