PHP sql insert (NULL)

[fatepower]

Hi,

i have a quesiton. Well its like this, moderators and admins can see,

//freeleech
if ($CURUSER["edit_torrents"]=="yes") {
if ($results["silver"]=="no" && $results["free"]=="no") {
$selected=" selected=\"selected\""; }
else {
$selected =""; }
if ($results["silver"]=="yes") {
$selected1=" selected=\"selected\""; }
else {
$selected1 =""; }
if ($results["free"]=="yes") {
$selected2=" selected=\"selected\""; }
else {
$selected2 =""; }
print("<tr><TD class=\"header\" align=\"right\">Freeleech: </TD><TD class=\"lista\" align=\"left\">");
print("<select name=\"freeleech\" size=\"1\">");
print("<option value=\"standard\"".$selected.">Standard (0% freeleech)</option>");
print("<option value=\"silver\"".$selected1.">Silver (50% freeleech)</option>");
print("<option value=\"golden\"".$selected2.">Golden (100% freeleech)</option>");
print("</select></TD></tr>");
}
//freeleech

That means, mods and admins allways has an value for this:

//freeleech
$freeleech=$_POST['freeleech'];
if ($freeleech=="standard") {
$si="silver='no', ";
$fr="free='no', ";
}
if ($freeleech=="silver") {
$si="silver='yes', ";
$fr="free='no', "; 
}
if ($freeleech=="golden") {
$si="silver='no', ";
$fr="free='yes', ";
}
//freeleech

But for non staff, and they edit. That means that they don't have a value for $freeleech.

Anyway i maked the rows, silver and free to NULL with default NO.
When they edit, the database seems to use the old values. As i should be. But im little confused about this. Is this correct? Or do i need to add something like, if a non staff edit they will use an old value like insert a <input type=hidden value=$oldvalue> ect. . .

[djjjozsi]

i prefer that:

after you signed in a normal user, add a $_SESSION["user_level"]

1=normal user, 2 is moderator 3 is admin ect.

variables, becouse i could do a form, what send the values you wrote in to your editing program.

Don't belive in that the variables comes from your server/html files. And always check those beeings before update OR insert new entry in database. Use referred page function to check where the data comes from. ect.

[fatepower]

Yea i do have a session, but its builded on cookies. User level looks like this;
$CURUSER = User (selected from db, with user_level, user id ect)
$CURUSER["mod_access"] == "yes" (Means if the user has moderator access).
$CURUSER["edit_torrents"] == "yes" (Means if the user has access to edit, controled by user_level)
user_level strutcure is: Guest, Validating, Members, VIP, Designer, Mod, Admin, Owner

More like, is that, im worried about. If a user edit it will sett the free, silver value to nothing at all. As now it seems that the rows silver, free uses the old info. But as the $freeleech not recive any info when a Member edit, it seems kinda strange to me that its not get blank or return to default no.

Other example there, to get the blank value to return to previous value is:

ALTER TABLE namemap ADD `sticky` enum('yes','no') NOT NULL default 'no'; 

Here the table is NOT NULL.

Returns with posted information:

//sticky
if ($CURUSER["edit_torrents"]=="yes") {
      $sticky=$_POST[stiiicky];
   } else {
      $sticky="$_POST[oldsticky]"; 
}
//sticky

FROM this:

//sticky
$oldsticky = "".$results["sticky"]."";
print("<input type=\"hidden\"  name=\"oldsticky\" value=\"$oldsticky\">");
print("<tr><TD class=\"header\" align=\"right\">Sticky torrent: </TD><TD class=\"lista\" align=\"left\">");
if($results[sticky] == "no" && $CURUSER["edit_torrents"]=="yes"){
echo "
<table border='0' width='120'>
	<tr>
		<td width='30'>".YES."</td>
		<td width='30'><input type='radio' value='yes' name='stiiicky'></td>
		<td width='30'>".NO."</td>
		<td width='30'><input type='radio' value='no' checked name='stiiicky'></td>
	</tr>
</table>
";
}
elseif($results[sticky] == "yes" && $CURUSER["edit_torrents"]=="yes"){
echo "
<table border='0' width='120'>
	<tr>
		<td width='30'>".YES."</td>
		<td width='30'><input type='radio' value='yes'checked name='stiiicky'></td>
		<td width='30'>".NO."</td>
		<td width='30'><input type='radio' value='no' name='stiiicky'></td>
	</tr>
</table>
";
}
print("</TD></tr>");
//sticky

If i not have this:

//sticky
if ($CURUSER["edit_torrents"]=="yes") {
      $sticky=$_POST[stiiicky];
   } else {
      $sticky="$_POST[oldsticky]"; 
}
//sticky

and use this instead there:

      $sticky=$_POST[stiiicky];

The sticky row in database will be left blank or return to default NO.