From your code
<?php
$path = $_SERVER['PHP_SELF'];
$path_parts = pathinfo($path);
$string = $path_parts["basename"];
$exclude = ".jpg.php";
$path = substr("$string",0,strpos($string,$exclude));
echo "Image: $path ";
if(isset($_POST['submit'])) {
$ip = $HTTP_SERVER_VARS["REMOTE_ADDR"];
$query = "SELECT last_ip FROM photographs WHERE name=$path";
if ($query = $ip) {
header("Location: error.php");
}
I couldn't see a connection to MySQL DB before SELECT Statment and also, you didnt execute $query
change that part to...
<?php
$path = $_SERVER['PHP_SELF'];
$path_parts = pathinfo($path);
$string = $path_parts["basename"];
$exclude = ".jpg.php";
$path = substr("$string",0,strpos($string,$exclude));
echo "Image: $path ";
if(isset($_POST['submit'])) {
$ip = $HTTP_SERVER_VARS["REMOTE_ADDR"];
$link = mysql_connect('localhost', 'andrew', '1357908642');
$db_selected = mysql_select_db('andrew_site', $link);
$query = "SELECT last_ip FROM photographs WHERE name='$path'";
$result = mysql_query($query);
$extip = mysql_result($result,0);
if ($extip == $ip) {
header("Location: error.php");
}
// And attach rest of your code
You were comparing IP address with some string "SELECT..." which is not true any time... you should execute query to execute query u should connect to DB...
Good Luck
TommYNandA
200