Sure I added the password protection and it stopped working. It reloads the page like it sends it to the DB but it doesnt.
Here is the script if you want to check it out.
And I can still modify I just cant add a new entry.
<?
if (!class_exists(auth))
{
include ("auth.php");
}
include ("authconfig.php");
include ("check.php");
if ($check["level"] != 1)
{
print "<font face=\"Arial, Helvetica, sans-serif\" size=\"5\" color=\"#FF0000\">";
print "<b>Illegal Access</b>";
print "</font><br>";
print "<font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\" color=\"#000000\">";
print "<b>You do not have permission to view this page.</b></font>";
exit; // End program execution. This disables continuation of processing the rest of the page.
}
?>
Welcome <? echo $check["uname"] ?>
<link rel="stylesheet" type="text/css" href="default.css">
<?
require ("config.php");
?>
<html>
<head>
<title>News Content Administration-BETA</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<?
$connection = mysql_connect($dbhost, $dbusername, $dbpassword);
?>
<form name="News" method="post" action="">
<?
// Add / Edit news
if ($Submit == "Add")
{
$news = nl2br($news);
// Time offsetting
$adjusted = $hrdiff * 60 * 60;
if ($ahead=="+")
{
$Add = mysql_db_query ($dbname, "INSERT INTO newscontent VALUES (uname=$uname, '',trim('$news'),DATE_ADD(NOW(), INTERVAL '$adjusted' SECOND))");
}
else
{
$Add = mysql_db_query ($dbname, "INSERT INTO newscontent VALUES ( uname=$uname, '',trim('$news'),DATE_SUB(NOW(), INTERVAL '$adjusted' SECOND))");
}
$action="";
}
elseif ($Submit == "Modify")
{
$news = nl2br($news);
$Update = mysql_db_query ($dbname, "UPDATE newscontent SET news=trim('$news') WHERE id='$id'");
$action = "";
}
// Delete News
if ($action=="delete")
{
$Delete = mysql_db_query($dbname, "DELETE FROM newscontent WHERE id='$id'");
}
// Show specific news
if ($id != "")
{
// Show selected news
$Show = mysql_db_query($dbname, "SELECT * FROM newscontent WHERE id='$id'");
$ShowRow = mysql_fetch_array($Show);
$ShowNews = strip_tags($ShowRow["news"]);
mysql_free_result($Show);
}
// Show all news
$result = mysql_db_query($dbname, "SELECT * FROM newscontent ORDER BY id DESC");
$row = mysql_fetch_array($result);
?>
<table width="97%" border="1" cellspacing="2" cellpadding="0" align="center" bordercolor="#000000">
<tr>
<td bgcolor="#FFFFFF" colspan="2">
<div align="center"><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="#000000">News
Content Administration-BETA</font></div>
</td>
</tr>
<tr valign="middle">
<td width="11%" bgcolor="#CCCCCC"><font face="Verdana, Arial, Helvetica, sans-serif" size="2">News</font></td>
<td width="89%">
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">
<?
print "<textarea name=\"news\" cols=\"45\" rows=\"12\" wrap=\"VIRTUAL\">";
if ($action=="edit")
{
print trim($ShowNews);
}
print "</textarea>";
?>
</font>
</td>
</tr>
<tr valign="middle">
<td colspan="2">
<div align="center">
<font face="Verdana, Arial, Helvetica, sans-serif" size="2">
<?
if ($action!="edit")
{
print "<input type=\"submit\" name=\"Submit\" value=\"Add\">";
}
else
{
print "<input type=\"submit\" name=\"Submit\" value=\"Modify\">";
}
?>
<input type="reset" name="Reset" value="Reset">
</font></div>
</td>
</tr>
</table>
</form>
<table width="97%" border="1" cellspacing="0" cellpadding="0" align="center" bordercolor="#000000">
<tr bgcolor="#999999" valign="top">
<td width="5%">
<div align="center"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><b>ID</b></font></div>
</td>
<td width="60%">
<div align="center"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><b>News</b></font></div>
</td>
<td width="26%">
<div align="center"><font size="2" face="Verdana, Arial, Helvetica, sans-serif"><b>Date/Time</b></font></div>
</td>
<td width="9%">
<div align="center"><font face="Verdana, Arial, Helvetica, sans-serif"><b><font size="2">Action</font></b></font></div>
</td>
</tr>
<?
while ($id=$row["id"])
{
$id = $row["id"];
$uname = $row["uname"];
$news = $row["news"];
$date = date("n-j-Y g:i A", strtotime($row["event"]));
print "<tr valign=\"middle\">";
print " <td width=\"5%\">";
print " <div align=\"center\"><font size=\"1\" face=\"Verdana, Arial, Helvetica, sans-serif\">";
print " $id</font></div>";
print " </td>";
print " <td width=\"60%\"><font size=\"1\" face=\"Verdana, Arial, Helvetica, sans-serif\">";
print " $news</font></td>";
print " <td width=\"26%\">";
print " <div align=\"center\"><font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"1\">";
print " $date</font></div>";
print " </td>";
print " <td width=\"9%\">";
print " <div align=\"center\"><font face=\"Verdana, Arial, Helvetica, sans-serif\" size=\"2\">";
print " <a href=\"newscontent.php?id=$id&action=edit\"><img border=\"0\" src=\"edit.gif\" width=\"15\" height=\"15\" alt=\"Modify news\"></a> ";
print " <a href=\"newscontent.php?id=$id&action=delete\"><img border=\"0\" src=\"delete.gif\" width=\"15\" height=\"15\" alt=\"Delete news\"></a></font></div>";
print " </td>";
print "</tr>";
$row = mysql_fetch_array($result);
}
mysql_free_result ($result);
?>
</table>
<p> </p>
<table width="97%" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td>
<div align="right"><font face="Verdana, Arial, Helvetica, sans-serif" size="1"><a href="newsadmin.php">Home</a>
| <a href="#">Design Administration-BETA</a></font></div>
</td>
</tr>
</table>
<p> </p>
</body>
</html>
