Проблем със сесия

explozen

Registered
Имам пак проблем.
Искам да извадя името на потребителят. Ето файла:
PHP:
Потребителски панел <? echo $res['user']; ?>
<?
	$logged = mysql_query("SELECT * from members WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
    $logged = mysql_fetch_array($logged);
	$user = $logged['user'];
    $result = mysql_query("SELECT * FROM members WHERE user='$user'");
    $row = mysql_fetch_assoc($result);
 if($logged['user']){
echo "Здравей, <b>$user</b>";
}
else {
echo "Вход";
}
?>
<br>
<?php
if (isset($_SESSION['user'])) {

if (isset($_SESSION['login'])) {
echo '[ <a href="./admin/index.php">Админ панел</a> ]<br><br>';
echo '[ <a href="messages.php">Лични съобщения</a> ]<br>[ <a href="members.php">Всички потребители</a> ]<br>[ <a href="logout.php">Излез</a> ]';
} else {
echo "[ <a href='messages.php'>Лични съобщения</a> ]<br>[ <a href='members.php'>Всички потребители</a> ]<br>[ <a href='logout.php'>Излез</a> ]";
}

} else {
echo '<form name="form1" method="post" action="login.php">
<table width="95%" align="center" border="0">
<tr><td align="center">Потребител:</td></tr>
<tr><td align="center"><input name="user" type="text" id="user"></td></tr>
<tr><td align="center">Парола:</td></tr>
<tr><td align="center"><input name="pass" type="password" id="pass"></td></tr>
<tr><td align="center"><input type="submit" name="submit" value="Влез"><br></td><td>
</table>
<div align="center">[ <a href="registration.php">Регистрирай се</a> ]</div>
</form>';
}
?>

Искам на всеки потребител да вади името пример:
Потребителски панел: username
 
PHP:
Потребителски панел <?php echo $_SESSION['user']; ?>
<?php
$logged = mysql_query("SELECT * from members WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
$logged = mysql_fetch_array($logged);
$user = $logged['user'];
$result = mysql_query("SELECT * FROM members WHERE user='$user'");
$row = mysql_fetch_assoc($result);
if($logged['user']){
	echo "Здравей, <b>$user</b>";
} else {
	echo "Вход";
}
?>
<br>
<?php
if (isSet($_SESSION['user'])) {
	if (isSet($_SESSION['login'])) {
		echo '[ <a href="./admin/index.php">Админ панел</a> ]<br><br>';
		echo '[ <a href="messages.php">Лични съобщения</a> ]<br>[ <a href="members.php">Всички потребители</a> ]<br>[ <a href="logout.php">Излез</a> ]';
	} else {
		echo "[ <a href='messages.php'>Лични съобщения</a> ]<br>[ <a href='members.php'>Всички потребители</a> ]<br>[ <a href='logout.php'>Излез</a> ]";
	}
} else {
echo '<form name="form1" method="post" action="login.php">
<table width="95%" align="center" border="0">
<tr><td align="center">Потребител:</td></tr>
<tr><td align="center"><input name="user" type="text" id="user"></td></tr>
<tr><td align="center">Парола:</td></tr>
<tr><td align="center"><input name="pass" type="password" id="pass"></td></tr>
<tr><td align="center"><input type="submit" name="submit" value="Влез"><br></td><td>
</table>
<div align="center">[ <a href="registration.php">Регистрирай се</a> ]</div>
</form>';
}
?>







ИЛИ




PHP:
<?php
$logged = mysql_query("SELECT * from members WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
$logged = mysql_fetch_array($logged);
$user = $logged['user'];
$result = mysql_query("SELECT * FROM members WHERE user='$user'");
$row = mysql_fetch_assoc($result);
?>
Потребителски панел <?php echo $logged['user']; ?>
<?php
if($logged['user']){
	echo "Здравей, <b>$user</b>";
} else {
	echo "Вход";
}
?>
<br>
<?php
if (isSet($_SESSION['user'])) {
	if (isSet($_SESSION['login'])) {
		echo '[ <a href="./admin/index.php">Админ панел</a> ]<br><br>';
		echo '[ <a href="messages.php">Лични съобщения</a> ]<br>[ <a href="members.php">Всички потребители</a> ]<br>[ <a href="logout.php">Излез</a> ]';
	} else {
		echo "[ <a href='messages.php'>Лични съобщения</a> ]<br>[ <a href='members.php'>Всички потребители</a> ]<br>[ <a href='logout.php'>Излез</a> ]";
	}
} else {
echo '<form name="form1" method="post" action="login.php">
<table width="95%" align="center" border="0">
<tr><td align="center">Потребител:</td></tr>
<tr><td align="center"><input name="user" type="text" id="user"></td></tr>
<tr><td align="center">Парола:</td></tr>
<tr><td align="center"><input name="pass" type="password" id="pass"></td></tr>
<tr><td align="center"><input type="submit" name="submit" value="Влез"><br></td><td>
</table>
<div align="center">[ <a href="registration.php">Регистрирай се</a> ]</div>
</form>';
}
?>
 
Това е го направих :)
Сега пък не знам как да направя да се едитва профила от потребитела.
Ето файла:

PHP:
<?php
$logged = mysql_query("SELECT * from members WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
$user = $logged['user'];
$result = mysql_query("SELECT * FROM members WHERE user='$user'");
$row = mysql_fetch_assoc($result);
?>
<?
$result = mysql_query("SELECT * FROM members WHERE user = '$user'");
$row = mysql_fetch_assoc($result);
$sql = "SELECT * FROM members WHERE user='$user'";
$result = mysql_query($sql);
$raw = mysql_fetch_assoc($result);
if ($user) {
 switch ($_GET['change']) {
default:
echo "<div class='table'><center>
<a href='edit_profile.php?change=avatar'>смяна на аватар</a> |
<a href='edit_profile.php?change=profile'>потребителски профил</a> |
<a href='edit_profile.php?change=password'>смяна на парола</a>
</center></div>";
break;
case "avatar" :
?>
<center>
<a href='edit_profile.php?change=avatar'>смяна на аватар</a> |
<a href='edit_profile.php?change=profile'>потребителски профил</a> |
<a href='edit_profile.php?change=password'>смяна на парола</a>
</center>
<form method="post" enctype='multipart/form-data'><br />
<span style="font:12px arial; text-align:right;"><b>Избери файл от компютъра ..</b></span><br />
<table><tr><td style="font-size: 11px;" width="15%">
<input type="file" name="avatar" size="50" />
<input class='button' type='submit' name='changeavatar' value='Смени аватара' /> <br/>
<?
if($_POST['changeavatar']) {
    $avatar = $_FILES['avatar'];
    $tmp_name = $_FILES['avatar']['tmp_name'];
    $name = $_FILES['avatar']['name'];
	$format = end(explode(".", $name));
	if($format != "png" && $format != "gif" && $format != "jpeg" && $format != "jpg") {
	echo "<br /><br />Позволени формати: <font color='red'>PNG, GIF, JPEG</font> <br />";
}
	else {
	$runq = mysql_query("SELECT * FROM members WHERE user='$user'");
	$row = mysql_fetch_assoc($runq);
	$location = "templates/avatars/$name.$format";
	move_uploaded_file($tmp_name, $location);
	$avatar = $location;
	$run_q = mysql_query("UPDATE `members` set avatar='$avatar' WHERE user='$user'");
	header("Location: edit_profile.php?change=avatar");
		}
}
echo "</td><td class='table' style='width:100px; height:100px;'><img style='width:100px; height:100px;' src='$raw[avatar]'/><br />
</td></tr></table></form>";
break;
case "profile":
?>
<center>
<a href='edit_profile.php?change=avatar'>смяна на аватар</a> |
<a href='edit_profile.php?change=profile'>потребителски профил</a> |
<a href='edit_profile.php?change=password'>смяна на парола</a>
</center>
<form method='post' name='inputform'>
<table width="100%">
<tr>
<td width="30%" style="font:12px arial; text-align:right;"><b>Име</b> </td>
<td><input type='text' class='input' name='name' value='<? echo"$raw[name]"; ?>' onclick="this.value=''" size='25' /></td>
</tr>
<tr>
  <td width="30%" style="font:12px arial; text-align:right;"><b>Емайл</b> </td>
<td><?
if($raw['viewmail'] != 1) {
echo "<span style='font:13px arial; text-align:right;'><b>$raw[email]</b></span>";
} elseif($raw['viewmail'] == 1) {
echo "<span style='font:13px arial; text-align:right;'><i><b>[скрито по желание]</b></i></span>";
}
?></td>
</tr>
<tr>
  <td><input type='checkbox' name='viewmail' value='1' style='float:right' /></td>
  <td><span style='font:13px tahoma'>Скрий моя <b>емайл</b> в профила</span></td>
</tr>
<tr>
  <td width="30%" style="font:12px arial; text-align:right;"><b>Населено място</b> </td>
<td><input type='text' class='input' name='city' value='<? echo"$raw[city]"; ?>' onclick="this.value=''" size='25' /></td>
</tr>
<tr>
  <td width="30%" style="font:12px arial; text-align:right;"><b>Скайп</b> </td>
<td><input type='text' class='input' name='skype' value='<? echo"$raw[skype]"; ?>' onclick="this.value=''" size='25' /></td>
</tr>
<tr>
  <td width="30%" style="font:12px arial; text-align:right;"><b>Пол;</b> </td>
  <td><select name='gender'><option value='1'>Момче</option><option value='2'>Момиче</option></select></td>
</tr>
<tr>
<td colspan="2">
<input type='image' src='emoticons/emote.png' class='bbcodes' onclick="return overlay(this, 'bbcode_smileys_list_message', 'bottomleft');"   title='Smileys' />
<img src='emoticons/smile.gif' onclick="insertText('message', ':)', 'inputform');" />
<img src='emoticons/tong.gif' onclick="insertText('message', ':P', 'inputform');" />
<img src='emoticons/bigsmile.gif' onclick="insertText('message', ':D', 'inputform');" />
<img src='emoticons/kiss.gif' onclick="insertText('message', ':*', 'inputform');" />

<img src='emoticons/crying.gif' onclick="insertText('message', ';(', 'inputform');" />
<img src='emoticons/wink.gif' onclick="insertText('message', ';)', 'inputform');" />
<img src='emoticons/hi.gif' onclick="insertText('message', '(wave)', 'inputform');" />
<img src='emoticons/nod.gif' onclick="insertText('message', '(nod)', 'inputform');" />
<img src='emoticons/finger.gif' onclick="insertText('message', '(finger)', 'inputform');" />
<img src='emoticons/mooning.gif' onclick="insertText('message', '(mooning)', 'inputform');" />
<img src='emoticons/wondering.gif' onclick="insertText('message', '(wondering)', 'inputform');" />
<img src='emoticons/yes.gif' onclick="insertText('message', '(yes)', 'inputform');" />
<img src='emoticons/no.gif' onclick="insertText('message', '(no)', 'inputform');" />
<img src='emoticons/party.gif' onclick="insertText('message', '(party)', 'inputform');" />
<input type='image' src='templates/img/bbimg/b.png' class='bbcodes' onclick="addText('message','[b]','[/b]','inputform');return false;"   title='Удебелява избрания текст' />
<input type='image' src='templates/img/bbimg/i.png' class='bbcodes' onclick="addText('message','[i]','[/i]','inputform');return false;"   title='Прави текста наклонен' />
<input type='image' src='templates/img/bbimg/u.png' class='bbcodes' onclick="addText('message','[u]','[/u]','inputform');return false;"   title='Прави избрания текст подчертан' />
<input type='image' src='templates/img/bbimg/url.png' class='bbcodes' onclick="addText('message','[url]','[/url]','inputform');return false;"   title='Прави URL кликване' />
<input type='image' src='templates/img/bbimg/img.png' class='bbcodes' onclick="addText('message','[img]','[/img]','inputform');return false;"   title='Показва изображение от определена страница' />
<input type='image' src='templates/img/bbimg/code.png' class='bbcodes' onclick="addText('message','[code]','[/code]','inputform');return false;"   title='Показва текста като код' />
<input type='image' src='templates/img/bbimg/quote.png' class='bbcodes' onclick="addText('message','[quote]','[/quote]','inputform');return false;"   title='Цитат' />
<a onclick="document.getElementById('chat').value=entobg(document.getElementById('chat').value);">
<img style="float: right; margin-top: 7px;" src="templates/img/icons/bg.png" title="Смени езика на БГ" /></a>
<hr style="border: 1px solid #d7d7d7;" /><br/>
<textarea style="width: 100%; height: 150px; margin-top: -15px; border: none;" id="chat" name="message"></textarea>
</td>
</tr>
<tr><td colspan="2"><input type='submit' name='submit' class='button' value='Запази промените' /></td>
</tr>
</table>
<?
if ($_POST['submit']) {
	$user = htmlspecialchars($_POST['user']);
	$skype = htmlspecialchars($_POST['skype']);
	$mail = $_POST['mail'];
	$zaqvka = "UPDATE members SET skype='$skype', mail='$mail' WHERE user='$user'";
	$sql = mysql_query($zaqvka);
	echo "<br/>Успешно променихте профила си.";
        @header("Location: ".$_SERVER['HTTP_REFERER']."");
	}
	echo "</form>";
break;
case "pass":
?>
<center>
<a href='settings.php?change=avatar'>смяна на аватар</a> |
<a href='settings.php?change=profile'>потребителски профил</a> |
<a href='settings.php?change=password'>смяна на парола</a>
</center>
<form method='post' action=''>
<table width="100%">
<tr>
<td width="30%" style="font:12px arial; text-align:right;"><b>Нова парола</b> </td>
<td><input type='pass' class='input' name='pass' size='25' /></td></tr>
<tr><td width="30%" style="font:12px arial; text-align:right;"><b>Повтори нова парола</b> </td>
<td><input type='pass' class='input' name='pass2' size='25' /></td>
</tr>
<tr><td colspan="2"><input type='submit' name='changepassword' class='button' value='Смени паролата' /></td>
</tr>
</table>
<?
$pass = htmlspecialchars($_POST['pass']);
$pass2 = htmlspecialchars($_POST['pass2']);
if($_POST['changepassword']) {
 if ($pass != $pass2) {
echo "<div style='color:red'>Паролите не съвпадат</div>";
}
elseif($pass == NULL || $pass2 == NULL) {
    echo '<span style="color:red"> Попълни празните полето</span>';
}
else {
$sql = "UPDATE `members` set pass='".md5($pass)."' WHERE user='$user'";
$result = mysql_query($sql);
echo "<br/>Успешно сменихте вашата парола";
header("Location: ".$_SERVER['HTTP_REFERER']."");
}
}
echo "</form>";
break;
}
}
else {
@header("Location: index.php");
}
?>
 
Сега го направих така само трябва да се направи всеки потребител са си отваря неговата страница за едит и да няма право да едитва чужда.

PHP:
<?php
$gge =  (int)$_GET['id'];
$query = "SELECT * FROM members where id='$gge'";
$result = mysql_query($query);
while($r=mysql_fetch_array($result))
{

$member=$r[user];
$data1=$r[data1];
$activ=$r[activ];
$iad=$r[ip];
$mail=$r[mail];
$skype=$r[skype];
$rajdane=$r[rajdane];
$avatar=$r[avatar];
$sub=$r[sub];
$icq=$r[icq];

$url1 = "$url";
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{
for($x = 2; $x<=5; $x++)
{
$profile="profile0$x";
$url1=str_replace('profile',$profile,$url);

}
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{
for($x = 2; $x<=4; $x++)
{
$profile="profile0$x";
$url1=str_replace('profile05',$profile,$url);
}
}
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{
for($x = 2; $x<=3; $x++)
{
$profile="profile0$x";
$url1=str_replace('profile04',$profile,$url);
}
}
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{
for($x = 2; $x<=2; $x++)
{
$media="media0$x";
$url1=str_replace('profile03',"$profile",$url);
}
}
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{
for($x = 2; $x<=1; $x++)
{

$url1=str_replace('profile02',$profile,$url);
}
}
if(@fopen($url1, "r"))
{
$url="$url1";
}
else{

}
}
}
?>
<?php
$logged = mysql_query("SELECT * from members WHERE id='$_COOKIE[id]' AND password = '$_COOKIE[pass]'");
$user = $logged['user'];
$result = mysql_query("SELECT * FROM members WHERE user='$user'");
$row = mysql_fetch_assoc($result);
?>
<?php
$id = $_GET['id'];
if(isset($_POST['submit'])){
$mail = $_POST['mail'];
$skype = $_POST['skype'];
$sub = $_POST['sub'];
$rajdane = $_POST['rajdane'];
$avatar = $_POST['avatar'];
$update = mysql_query("UPDATE members SET mail='$mail',skype='$skype',rajdane='$rajdane',avatar='$avatar',sub='$sub' WHERE id='$id'");
echo "<br />
Новината е успешно променена";
}
$db = ("SELECT * FROM members WHERE id='$id'");
$results = mysql_query($db);
$row = mysql_fetch_array($results);
$mail = $row['mail'];
$skype = $row['skype'];
$sub = $row['sub'];
$rajdane = $row['rajdane'];
$avatar = $row['avatar'];
mysql_query("SET NAMES utf8");
mysql_query("SET CHARACTERS utf8");
?>	
            <form method="post" action="">
            Емайл:
			<br><input type="text" class="textbox" name="mail" value='<? echo"$mail"; ?>' size="80"> <div class="hr"></div><br>             
			Аватар<br />
			<img src="<?php echo $avatar;?>" class='news_img_rec' width='140' height='90' border="0"><br />
            <input type="text" name="avatar" value='<? echo"$avatar"; ?>' style="width: 360px;"> <br /><br>
			Скайп<br />
            <input type="text" name="skype" value='<? echo"$skype"; ?>' size="80"> <div class="hr"></div><br> 
			Статус<br />
            <input type="text" name="sub" value='<? echo"$sub"; ?>' style="width: 100px;"> <br /><br>
			Дата на раждане<br />
            <input type="text" name="rajdane" value='<?PHP echo"$rajdane"; ?>' style="width: 100px;"> <br /><br>
            <input type="submit" name="submit" value="Редактирай новината"><br>
        </form>
 

Back
Горе