OK, ik heb een if clause, het eerste (edit gedeelte) werkt zonder probs, doet wazt ik em zeg maar het tweede sumbit deel wordt altijd uitgevoerd ook al is $user2 niet toegekend, ik heb an 10talllen mogelijkheden uitgeprobt maar hij blijft die uitvoeren.
Kijk hier voor het voorbeeld: http://mm2heaven.saburovo.com/index.php (het nieuws script, post comments)
gvd frustrerend, plzzz help, code
Kijk hier voor het voorbeeld: http://mm2heaven.saburovo.com/index.php (het nieuws script, post comments)
gvd frustrerend, plzzz help, code
PHP:
1
| <?//Get username from Cookie and globalyse it global $id; global $user; global $record; $sql = mysql_query("SELECT member FROM active WHERE record = '$record'") or die(mysql_error()); while ($recordy = mysql_fetch_array($sql)) { $user = $recordy["member"]; } $sql = "SELECT custom FROM profiles WHERE username = '$user'"; $resu = mysql_query($sql) or die(mysql_error()); while ($recordy = mysql_fetch_array($resu)) { $admin = $recordy["custom"]; global $admin; } if($action == edit){ $result = mysql_query("SELECT user FROM comments WHERE com_id= '$cid'"); while ($recordy = mysql_fetch_array($result)) { $usercom = $recordy["user"]; global $usercom; } if(($usercom == $user) or ($admin == 'Admin')){ $result = mysql_query("SELECT comment, title, user FROM comments WHERE com_id= '$cid' ORDER BY com_id DESC"); while ($recordy = mysql_fetch_array($result)) { $comup =$recordy["comment"]; $title =$recordy["title"]; $usercom =$recordy["user"]; echo"<form action=\"comment.php?action=edit&cid=$cid&id=$id\" method=\"post\" enctype=\"multipart/form-data\"> <input type=\"hidden\" name=\"edit\" value=\"edit\"> <input type=\"hidden\" name=\"cid\" value=\"$cid\"> <input type=\"hidden\" name=\"usercom\" value=\"$usercom\"> // beetje gesnoeid in formpje <input style=\" font-family: Verdana; font-size: 10 px\" type=\"submit\" name=\"edit\" value=\"Edit\" height=\"15\" class=\"mainoption\"> </td> </tr> </table> </div> </form>"; } if($edit) { if($remove){ $remove = "DELETE FROM comments WHERE com_id = '$cid'"; mysql_query($remove) or die(mysql_error()); } else { $update = "UPDATE comments SET comment = '$comupd' WHERE com_id = '$cid'"; mysql_query($update) or die(mysql_error()); } //removeclose echo"<META http-equiv=\"Refresh\" content=\"0;URL=$baselink/redirect.php?id=$id\">"; } //editclose } else { //close usercom echo"You don't have permission to edit this comment."; } } else { //action edit close echo"<table border=\"0\" cellspacing=\"0\" width=\"430\" align=\"center\"> <tr> <td align=\"center\" width=\"430\">"; $sql = mysql_query("SELECT member FROM active WHERE record = '$record'") or die(mysql_error()); while ($recordy = mysql_fetch_array($sql)) { $user2 = $recordy["member"]; } global $user2; echo"$record"; echo"submit, $submit, user, $user2, user, $user"; /* HIER GAAT HET MIS, ook al is $user2 niet toegewezen, gaat ie ewoon lekker verder, grrrrrrrrr */ if($submit == 'Submit'){ if($user2 == $user){ // dit wordt dus altijd uitgevoerd $date = date("d F Y"); $sql = "INSERT INTO comments (title, comment, news_id, date, user) VALUES ('$title', '$comment', '$id', '$date', '$user2')"; mysql_query($sql) or die(mysql_error()); echo"<META http-equiv=\"Refresh\" content=\"0;URL=$baselink/redirect.php?rid=1&id=$id\">"; } else { echo"You are not logged in."; } } else { $resul = mysql_query("SELECT comment, title, date, user, com_id FROM comments WHERE news_id='$id' ORDER BY com_id DESC") or die(mysql_error()); while ($recordy = mysql_fetch_array($resul)) { $comment =$recordy["comment"]; $title =$recordy["title"]; $date =$recordy["date"]; $user =$recordy["user"]; $cid =$recordy["com_id"]; showit($comment, $title, $date, $user, $cid, $id); } echo"</td> </tr> </table>"; ?> <form action="comment.php?id=<? echo"$id"; ?>" method="post" enctype="multipart/form-data"> // (form ff weggelate voor post beetje te verkleinen) <input style="font-family: Verdana; font-size: 10 px" type="submit" name="submit" value="Submit" class="mainoption"> </td> </tr> </table> </div> </form> <? } } //editclose ?> |