I'm working on a simple newsscript, with a login. When you login everything works fine, you get the page you want etc. But when you post a message the script sends you back to the login page without posting the news. What went wrong? This is my script:
<?
$server = localhost;
$database = dbase;
$username = user;
$password = w8woord;
$link = mysql_connect("$server", "$username", "$password") or die("Could not connect to server");
mysql_select_db("$database") or die("Could not select database");
if ($HTTP_POST_VARS['submit'] == 'login') {
$user = $HTTP_POST_VARS[user];
$password = $HTTP_POST_VARS[password];
$check_query="SELECT * FROM leneinlogtest WHERE user = '".$user."' AND password = '".$password."'";
$check = mysql_query($check_query) or die (mysql_error());
$numrows = mysql_num_rows($check);
if ($numrows == "0"){
echo "<p><center>De naam van de site of het wachtwoord is onjuist, probeer het nogmaals.</center></p><center><a href=\"javascript:history.back()\">Terug</a></center>";
exit;
}
else {
if ($HTTP_POST_VARS['submit'] == 'Post') {
$subject = $HTTP_POST_VARS[subject];
$poster = $HTTP_POST_VARS[poster];
$email = $HTTP_POST_VARS[email];
$nieuws = nl2br(htmlspecialchars($HTTP_POST_VARS[nieuws]));
$query = "INSERT INTO lenenieuwstest (subject,poster,nieuws,email,datum) VALUES ('$subject','$poster','$nieuws','$email',NOW())";
$result = mysql_query($query) or die (mysql_error());
if ($result == 1) {
print("bla gelukt");
} elseif ($result <> 1) {
print("en nu mislukt");
}
}
else {
$result = mysql_query("SELECT * FROM leneinlogtest WHERE user = '".$user."' AND password = '".$password."'") or die("Query failed in file " . __FILE__ . " on line " . __LINE__ . ", mysql-error: " . mysql_error() . "<BR>Query: " . $query);
$numrows = mysql_num_rows($result);
while ($p = mysql_fetch_assoc($result)) {
echo "<form name=globe method=post action=".$PHP_SELF.">
<tr><td><p><span style='font-size:9.0pt;mso-bidi-font-size:7.5pt;font-family:
Verdana;color:cornflowerblue'>Subject:</span><span style='font-size:
9.0pt;mso-bidi-font-size:12.0pt'><o:p></o:p></span></p></td>
<td><INPUT type=\"text\" name=\"subject\"></td></tr>
<tr><td><p><span style='font-size:9.0pt;mso-bidi-font-size:7.5pt;font-family:
Verdana;color:cornflowerblue'>News:</span><span style='font-size:
9.0pt;mso-bidi-font-size:12.0pt'><o:p></o:p></span></p></td>
<td><TEXTAREA name=\"nieuws\" rows=\"5\" cols=\"40\"></TEXTAREA></td></tr>
<INPUT TYPE=HIDDEN NAME=poster VALUE=\"".$p['user']."\">
<INPUT TYPE=HIDDEN NAME=email VALUE=\"".$p['email']."\">
<tr><td colspan=2> </td></tr>
<tr><td colspan=2 align=\"center\"><input type=\"submit\" value=\"Post\" name=\"submit\">
<input type=\"reset\" value=\"Clear Form\"></td></tr>
</FORM></table>";
}
}
}
}
else {
echo "<table width=100%>
<form method=post action=".$PHP_SELF.">
<tr><td><font face=\"arial\" color=\"#0099CC\" size=1>Gebruikersnaam:</font></td><td><INPUT type=text name=user></td></tr>
<tr><td><font face=\"arial\" color=\"#0099CC\" size=1>Wachtwoord:</font></td><td><INPUT type=password name=password></td></tr>
<tr><td colspan=\"2\"><center><input class=\"button\" type=\"submit\" value=\"login\" name=\"submit\"></center></td></tr>
</FORM></table><br>";
}
?>
