problem z php

[lion]

Emano.

Mam problem ze skryptem, oto on:

 

<?
ob_start();
include("config.php");
if($logged[username] && $logged[level] ==5)
{
if($_GET[user])
{
if (!$_POST[update])
{
$user = mysql_query("SELECT * from users where username = '$_GET[user]'");
$user = mysql_fetch_array($user);
echo("
<div align=\"center\"><form method=\"POST\">
<table width=\"100%\">
<tr>
<td align=\"right\" width=\"25%\">
User Level 
</td>
<td align=\"left\">
<input type=\"text\" size=\"25\" maxlength=\"25\" name=\"level\"
value=\"$user[level]\"></td>
</tr>
<tr>
<td align=\"right\" width=\"25%\">
Location 
</td>
<td align=\"left\">
<input type=\"text\" size=\"25\" maxlength=\"25\" name=\"locate\"
value=\"$user[location]\"></td>
</tr>
<tr>
<td align=\"right\" width=\"25%\">
MSN Messenger 
</td>
<td align=\"left\">
<input size=\"25\" name=\"msn\" value=\"$user[msn]\"></td>
</tr>
<tr>
<td align=\"right\" width=\"25%\">
AOL Messenger</td>
<td align=\"left\">
<input size=\"25\" name=\"aim\"  value=\"$user[aim]\"></td>
</tr>
<tr>
<td align=\"right\" width=\"25%\">
Email Address</td>
<td align=\"left\">
<input size=\"25\"  name=\"email\" value=\"$user[email]\"></td>
</tr>
<tr>
<td align=\"center\">
</td>
<td align=\"left\">
<input type=\"submit\" name=\"update\" value=\"Update\"></td>
</tr>
</table>
</form>
</div>");
}
else
{
$email = htmlspecialchars($_POST[email]);
$aim = htmlspecialchars($_POST[aim]);
$msn = htmlspecialchars($_POST[msn]);
$locate = htmlspecialchars($_POST[locate]);
$level = htmlspecialchars($_POST[level]);
echo ("$_GET[user]'s profile has been updated.");
$update = mysql_query("Update users set email = '$email',
msn = '$msn', aim = '$aim',
location = '$locate', level = '$level' where username = '$_GET[user]'");
}
}
else
{
$getusers = mysql_query("Select * from users order by username asc");
while($users = mysql_fetch_array($getusers))
{
echo("<a href=\"admin.php?user=$users[username]\">$users[username]</a><br />");
}
}
}
else
{
echo("Sorry, but you are not allowed to view this page!");
}
?>

 

Noo i kurna nie dziala mi. Bo gdy sie loguje i probuje wejsc na stronke z tym skrypcikiem to wywala mi "Sorry, but you are not allowed to view this page!", a mam ustawiony level 5 dla swojego konta. Wiecie może ocb?

 

BTW. Dawno nie byłem na gmclanie to postanowiłem sobie coś tutaj szrajbnąć ; dd

[Ranmus]

Po co dajesz środek niedziałającego if'a? I co jest w config.php? Jaka wartosc ma register_globals?

[lion]

config.php

<?
ob_start(); 
$conn = mysql_connect("localhost","root","krasnal");
mysql_select_db(cms) or die(mysql_error());
$logged = MYSQL_QUERY("SELECT * from users WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
$logged = mysql_fetch_array($logged);
?>

[Zakol]

A ciacha masz ustawione tak jak trzeba?

[lion]

a jak trzeba? ; ]]

[Zakol]

Heh, tak jak masz w warunku :]

Pobaw sie tym skryptem, np. zrob cos takiego i przeanalizuj wyniki:

echo '
$logged[username] = '.$logged[username].';
$logged[level] = '.$logged[level].';

$_COOKIE[id] = '.$_COOKIE[id].';
$_COOKIE[pass] = '.$_COOKIE[pass].';

Ilosc pol = '.mysql_num_rows(MYSQL_QUERY("SELECT * from users WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'")).';';