Reply to thread

Message

<blockquote data-quote="vRory" data-source="post: 196818" data-attributes="member: 2857">[PHP]&lt;?php $pagerank = 4; include &quot;templates/header.php&quot;; ?&gt;&nbsp;&nbsp; &nbsp; &lt;div id=&quot;site_content&quot;&gt;&nbsp; &nbsp; &lt;?php include &quot;templates/sidebar.php&quot;; ?&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;div id=&quot;content_container&quot;&gt;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;div id=&quot;content&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;h1&gt;{hotelName} Hotel ASE :: Give VIP!&lt;/h1&gt;&lt;hr/&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;?php&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(isset($_POST['give']) &amp;&amp; $_SESSION['user']['rank'] &gt;= $pagerank)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if(mysql_num_rows(mysql_query(&quot;SELECT * FROM users WHERE username = '&quot;.filter($_POST['username']).&quot;'&quot;)))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;INSERT INTO `cms_housekeeping_logs` (userid,ip_address,page,time,extra_data) VALUES ('&quot;.$_SESSION['user']['id'].&quot;', '&quot;.$_SERVER['REMOTE_ADDR'].&quot;', 'admin_vip.php', '&quot;.date(&quot;D, d F Y H:i&quot;, time()).&quot;'), '&quot;.filter($_POST['username']).&quot;' &quot;)or die(mysql_error());&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $getInfo = mysql_fetch_assoc(mysql_query(&quot;SELECT * FROM users WHERE username = '&quot;.filter($_POST['username']).&quot;'&quot;))or die(mysql_error());&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; if ($getInfo['rank'] == 1)&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;UPDATE users SET rank = '2' WHERE username = '&quot;.filter($_POST['username']).&quot;'&quot;)or die(mysql_error());&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; @Mus(&quot;updatevip&quot;.&quot; &quot;.$getInfo['id']);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;div class=&quot;alert alert-success&quot;&gt;'.$_POST['username'].' is now VIP!&lt;/div&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo '&lt;div class=&quot;alert alert-error&quot;&gt;User does not exist.&lt;/div&gt;';&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ?&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;form method=&quot;post&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;table class=&quot;table table-bordered table-condensed&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;tr&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;td&gt;Username&lt;/td&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;username&quot; /&gt;&lt;/td&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/tr&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;tr&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;td&gt;&lt;/td&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;submit&quot; value=&quot;VIP User&quot; name=&quot;give&quot;/&gt;&lt;/td&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/tr&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/table&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/form&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;/div&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;/div&gt;&nbsp; &nbsp; &lt;/div&gt;&nbsp; &nbsp; &lt;?php include &quot;templates/footer.php&quot;; ?&gt;[/PHP]This is the page i use for giving a user vip, this makes a record of whom is given vip i tried adding the users name to the record and i get this error&nbsp;The query is this as shown above:[PHP]mysql_query(&quot;INSERT INTO `cms_housekeeping_logs` (userid,ip_address,page,time,extra_data) VALUES ('&quot;.$_SESSION['user']['id'].&quot;', '&quot;.$_SERVER['REMOTE_ADDR'].&quot;', 'admin_vip.php', '&quot;.date(&quot;D, d F Y H:i&quot;, time()).&quot;'), '&quot;.filter($_POST['username']).&quot;' &quot;)or die(mysql_error());[/PHP]</blockquote>

[QUOTE="vRory, post: 196818, member: 2857"] [PHP]<?php $pagerank = 4; include "templates/header.php"; ?> <div id="site_content"> <?php include "templates/sidebar.php"; ?> <div id="content_container"> <div id="content"> <h1>{hotelName} Hotel ASE :: Give VIP!</h1><hr/> <?php if(isset($_POST['give']) && $_SESSION['user']['rank'] >= $pagerank) { if(mysql_num_rows(mysql_query("SELECT * FROM users WHERE username = '".filter($_POST['username'])."'"))) { mysql_query("INSERT INTO `cms_housekeeping_logs` (userid,ip_address,page,time,extra_data) VALUES ('".$_SESSION['user']['id']."', '".$_SERVER['REMOTE_ADDR']."', 'admin_vip.php', '".date("D, d F Y H:i", time())."'), '".filter($_POST['username'])."' ")or die(mysql_error()); $getInfo = mysql_fetch_assoc(mysql_query("SELECT * FROM users WHERE username = '".filter($_POST['username'])."'"))or die(mysql_error()); if ($getInfo['rank'] == 1) { mysql_query("UPDATE users SET rank = '2' WHERE username = '".filter($_POST['username'])."'")or die(mysql_error()); } @Mus("updatevip"." ".$getInfo['id']); echo '<div class="alert alert-success">'.$_POST['username'].' is now VIP!</div>'; } else { echo '<div class="alert alert-error">User does not exist.</div>'; } } ?> <form method="post"> <table class="table table-bordered table-condensed"> <tr> <td>Username</td> <td><input type="text" name="username" /></td> </tr> <tr> <td></td> <td><input type="submit" value="VIP User" name="give"/></td> </tr> </table> </form> </div> </div> </div> <?php include "templates/footer.php"; ?>[/PHP] This is the page i use for giving a user vip, this makes a record of whom is given vip i tried adding the users name to the record and i get this error The query is this as shown above: [PHP]mysql_query("INSERT INTO `cms_housekeeping_logs` (userid,ip_address,page,time,extra_data) VALUES ('".$_SESSION['user']['id']."', '".$_SERVER['REMOTE_ADDR']."', 'admin_vip.php', '".date("D, d F Y H:i", time())."'), '".filter($_POST['username'])."' ")or die(mysql_error()); [/PHP] [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members