Reply to thread

Message

<blockquote data-quote="Hypothesis" data-source="post: 467722" data-attributes="member: 83881">Your code runs fine, you were just missing semicolons after your echo statements. Although, I will say this isn't a very good way to update things in your database. Could be a security problem, recommended that you move this into your class.users.php and have it all update from there.[CODE=php]&lt;div class=&quot;content-box&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;div class=&quot;title&quot;&gt;Friend Requests&lt;/div&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;div class=&quot;box-content d-flex justify-content-center align-items-center&quot;&gt;&nbsp; &nbsp; &lt;?php&nbsp; &nbsp; if (isset($_POST['profileForm'])) {&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $efr = filter($_POST['friendRequestsAllowed']);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if ($efr == 1) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;div class=&quot;ml-3 mr-auto&quot;&gt;You currently have friend requests &lt;b&gt;Disabled&lt;/b&gt;&lt;/div&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;UPDATE users SET block_newfriends = '0' WHERE id = '&quot; . $_SESSION['user']['id'] . &quot;'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else if ($efr == 0) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;div class=&quot;ml-3 mr-auto&quot;&gt;You currently have friend requests &lt;b&gt;Enabled&lt;/b&gt;&lt;/div&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;UPDATE users SET block_newfriends = '1' WHERE id = '&quot; . $_SESSION['user']['id'] . &quot;'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }?&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;div class=&quot;mr-3&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;form method=&quot;post&quot; id=&quot;profileForm&quot; class=&quot;form-block&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;hidden&quot; name=&quot;_token&quot; value=&quot;4e26eaf44aedd954ff26441a92b2b42bbe4d1ada&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;input type=&quot;hidden&quot; name=&quot;block_friend_requests&quot; value=&quot;&quot; value=&quot;true&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;?php&nbsp; &nbsp; if (isset($_POST['profileForm'])) {&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $efr = filter($_POST['friendRequestsAllowed']);&nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if ($efr == 1) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;button type=&quot;submit&quot;&nbsp; name=&quot;friendRequestsAllowed&quot; class=&quot;button green&quot;&gt;Disable&lt;/button&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;UPDATE users SET block_newfriends = '0' WHERE id = '&quot; . $_SESSION['user']['id'] . &quot;'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else if ($efr == 0) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;button type=&quot;submit&quot;&nbsp; name=&quot;friendRequestsAllowed&quot; class=&quot;button green&quot;&gt;Enabled&lt;/button&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;UPDATE users SET block_newfriends = '1' WHERE id = '&quot; . $_SESSION['user']['id'] . &quot;'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }?&gt;&lt;/form&gt;[/CODE]</blockquote>

[QUOTE="Hypothesis, post: 467722, member: 83881"] Your code runs fine, you were just missing semicolons after your echo statements. Although, I will say this isn't a very good way to update things in your database. Could be a security problem, recommended that you move this into your class.users.php and have it all update from there. [CODE=php]<div class="content-box"> <div class="title">Friend Requests</div> <div class="box-content d-flex justify-content-center align-items-center"> <?php if (isset($_POST['profileForm'])) { $efr = filter($_POST['friendRequestsAllowed']); if ($efr == 1) { echo '<div class="ml-3 mr-auto">You currently have friend requests Disabled</div>'; mysql_query("UPDATE users SET block_newfriends = '0' WHERE id = '" . $_SESSION['user']['id'] . "'"); } else if ($efr == 0) { echo '<div class="ml-3 mr-auto">You currently have friend requests Enabled</div>'; mysql_query("UPDATE users SET block_newfriends = '1' WHERE id = '" . $_SESSION['user']['id'] . "'"); } } ?> <div class="mr-3"> <form method="post" id="profileForm" class="form-block"> <input type="hidden" name="_token" value="4e26eaf44aedd954ff26441a92b2b42bbe4d1ada"> <input type="hidden" name="block_friend_requests" value="" value="true"> <?php if (isset($_POST['profileForm'])) { $efr = filter($_POST['friendRequestsAllowed']); if ($efr == 1) { echo '<button type="submit" name="friendRequestsAllowed" class="button green">Disable</button>'; mysql_query("UPDATE users SET block_newfriends = '0' WHERE id = '" . $_SESSION['user']['id'] . "'"); } else if ($efr == 0) { echo '<button type="submit" name="friendRequestsAllowed" class="button green">Enabled</button>'; mysql_query("UPDATE users SET block_newfriends = '1' WHERE id = '" . $_SESSION['user']['id'] . "'"); } } ?> </form>[/CODE] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members