Flat Files

[distortion]

Hi.

I have made a script called "clan admin" and i have made all the submit scripts but now im up to edit/delete.

Im trying to do the users editor for a start and it writes to a flat file like

username:password:level:email

how would i go about editing this?

would i open it then set them all to variables then call them into a form?

then how would i go about security.

I tried <?php die('piss off'); ?> but it didn't seem to work it just came up with error on line one so i need a different way. Can i include it into the index.php maybe? but can it be as a text file in index.php if i do:

($id == "users") {
username:password:level:email
}

if ($id == "edituser") {
$post_data = "id?=users";
$data = fopen($post_data, "r");
$post = list('$user,$pass,$level,$email');
fclose($data);
echo "<form name="edituser" action="id?=edituser" method="POST">
<table border="0" cellpadding="0" cellspacing="2" width="232">
<tr>
<td width="77">Username:</td>
<td><input type="text" name="$user" size="24"></td>
</tr>
<tr>
<td width="77">Password:</td>
<td><input type="password" name="$pass" size="24"></td>
</tr>
<tr>
<td width="77">Email:</td>
<td><input type="text" name="$email" size="24"></td>
</tr>
<tr>
<td width="77">Status:</td>
<td><select name="$level" size="1">
<option value="guest">Guest</option>
<option value="poster">Poster</option>
<option value="admin">Admin</option>
</select></td>
</tr>
<tr>
<td colspan="2">
<div align="center">
<input type="submit" name="submit" value="Add User"><input type="reset" name="resetbutton" value="Reset"></div>
</td>
</tr>
</table>
</form>";

and then make an action page.

Would that work or would i have to do something different?

[khaine]

Right what you need to do first is move the files to a directory that the web server cant access. Seems strange but it does work. for example on linux the root directory might be /usr/local/apache/htdocs so store the files in /usr/local/apache/files that way only the php scripts can access the files. security solved. as for the edit script. try something like.

the file contains the line

username:password:level:email

username
<?php
$filename="/usr/local/apache/file/userfile.txt";
$fpr=fopen($filename, "r") or die();
$fields=fgetcsv($fpr, ":");
fclose($fpr);

echo "<FORM action=\"action.php\" method=\"post\">\n";
echo "username ";
echo "<INPUT type=\"text\" name=\"username\" size=30 value=\"".$fields[0]."\"><BR>\n";
echo "password ";
echo "<INPUT type=\"text\" name=\"password\" size=30 value=\"".$fields[1]."\"><BR>\n";
echo "level ";
echo "<INPUT type=\"text\" name=\"level\" size=30 value=\"".$fields[2]."\"><BR>\n";
echo "email ";
echo "<INPUT type=\"text\" name=\"email\" size=30 value=\"".$fields[3]."\"><BR>\n";
echo "<P>\n<INPUT type=\"submit\" value=\"Submit\">\n";
echo "</FORM>";

?>

This will display the old values and accept in new ones. The password should really be masked abd it should really be stored in an unencrypted format.

Mark.