Проблем с администратор панел!

b0nb0n40 · 25 Юли 2011

Здравейте! Това ми е администратор панела

PHP:

<?php
ob_start();
session_start();
include('../config.php');
?>
<html>
<head>

<title>Object not found!</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251">

</head>
<body >

<tr>
<td bgcolor="#E6E6E6"><b><?php 
	if($_SESSION["name"] != "Admin" and $_SESSION["name"] != "admin")
		{
		print("");
			}
		else
		{
include("menu.php"); 
}?></b></td>
</tr>
<tr>
<br>


<?
$action = $_GET["act"];

switch($action)
{

	
	default:
		if($_SESSION["name"] != "Admin" and $_SESSION["name"] != "admin")
		{
			print("
			
			
	<title>Object not found!</title>
<link rev='made' href='mailto:admin@localhost'>
<style type='text/css'></style>
</head><body>
<h1>Object not found!</h1>
<p>


    The requested URL was not found on this server.

  

    If you entered the URL manually please check your
    spelling and try again.

  

</p>
<p>
If you think this is a server error, please contact
the <a href='mailto:admin@localhost'>webmaster</a>.

</p>

<h2>Error 404</h2>
<address>
  <a href='http://xrac3.com/'>xrac3.com</a><br>
  
  <span>03/08/10 16:16:38<br>
  Apache/2.2.8 (Win32) DAV/2 mod_ssl/2.2.8 OpenSSL/0.9.8g mod_autoindex_color PHP/5.2.5</span>
</address>
</body></html>		
			
			
			");
		}
		else
		{
		include("intro.php");
		}
	break;
	 case "bans":
	print(' <br /><table border=1 cellspacing=0> 
<tr> 
<td><center><b>IP Адрес:</b></center></td><td><center><b>Потребител:</b></center></td><td><center><b>Последно Влизане:</b></center></td><td><center><b>Браузар:</b></center></td><td><center><b>OS:</b></center></td><td><center><b>Статус:</b></center><td><center><b>Действие:</b></center></td></tr> ');
$dir = "./info/";   
if(!is_dir($dir))   
{   
mkdir($dir); }   
$dh = opendir($dir); while($file = readdir($dh)) {   
if($file != "." and $file != "..") 
{   
$lower = strtolower($file);   
if(!eregi(".ht",$file))   
{   
$browser = file_get_contents("$dir/$file/browser.inc"); 
$date = file_get_contents("$dir/$file/date.inc"); 
$ip = file_get_contents("$dir/$file/ip.inc"); 
$os = file_get_contents("$dir/$file/os.inc"); 
$sql = "SELECT * FROM regip WHERE p='$ip'";
$result = mysql_query($sql) or die(mysql_error());

$test = "./info/$ip/banned.inc"; 
if(file_exists($test)) $status = '<font color=red><b>Баннът</b></font>'; 
else $status = '<font color=green><b>ОК</b></font>'; 
if("$status" == "Banned") $neshto = 'БАН/ЪНБАН'; 
else $neshto = 'БАН/ЪНБАН'; 
echo "<form method='post' action=ban.php>"; 
print "<tr><td><center>$ip</center></td>";
if (mysql_num_rows($result)>0){
while($row = mysql_fetch_array($result)){
print "<td><center>".$row['un']."</center></td>";
}}else {print "<td><center>N/A</center></td>";}
print "<td><center>$date</center></td><td><center>$browser</center></td><td><center>$os</center></td><td><center>$status</center></td><td><center><input type=hidden name=ip value='$ip'><input type=submit value=$neshto></form></center></td></tr>"; 
}   
}   
}   
print "</table>";   
  
	 break;
	
	case "tochki":
	 if($_SESSION["name"] != "Admin" and $_SESSION["name"] != "admin")
		{
			print("Нямате достъп до тази страница");
		}
		else
		{
		
				if(!isset($_POST["submit"]))
			{
				print("<center><br><br><form method=\"post\" action=\"\">Промени точките на<br><br><input type=\"text\" name=\"user\" size='15' />");
				
				print("<br /><br />
				<input type=\"submit\" name=\"submit\" value=\"Промени\" /></form><br>");
			}
			else
			{
			$user = $_POST["user"];
			$result1 = mysql_query("SELECT * FROM users WHERE name = '$user'");
			if (mysql_num_rows($result1)>0) {
			$query = mysql_query("SELECT * FROM `users` WHERE name='$user'");
			$row=mysql_fetch_array($query);
			$ban = $row[ban];
			$namepro = $row[namepro];
			$bandsc = $row[bandsc];
			$money = $row[money];
			$credits = $row[credits];
			$speed = $row[speed];
			$acceleration = $row[acceleration];
			$stability = $row[stability];
			$power = $row[power];
			$tochki = $row[points];
			$training = $row[training];
			$bonus_turbo = $row[bonus_turbo];
			$bonus_nitrous = $row[bonus_nitrous];
			$bonus_wheels = $row[bonus_wheels];
			$bonus_spoilers = $row[bonus_spoilers];
			$bonus_generation = $row[bonus_generation];
			$bonus_dampers = $row[bonus_dampers];
			$bonus_abs = $row[bonus_abs];
			$wins = $row[wins];
			$loses = $row[loses];
			$nrg = $row[nrg];
			$maxnrg = $row[maxnrg];
			$bank = $row[bank];
			echo "";
		print("<br><br><form method=\"post\" action=\"?act=edit-user\">
		<input type=\"hidden\" name=\"user\" value=\"$user\" />
		<center>
		PRO <br><input type=\"text\" name=\"namepro\" value='$namepro' size='15' /><br><br>
		За БАН 1 / 0 <br><input type=\"text\" name=\"ban\" value='$ban' size='15' /><br><br>
		Описание на БАН-а <br><input type=\"text\" name=\"bandsc\" value='$bandsc' size='15' /><br><br>
		Пари <br><input type=\"text\" name=\"money\" value='$money' size='15' /><br><br>
		Кредити <br><input type=\"text\" name=\"credits\" value='$credits' size='15' /><br><br>
		Бързина <br><input type=\"text\" name=\"speed\" value='$speed' size='15' /><br><br>
		Ускорение <br><input type=\"text\" name=\"acceleration\" value='$acceleration' size='15' /><br><br>
		Стабилност <br><input type=\"text\" name=\"stability\" value='$stability' size='15' /><br><br>
		Опит <br><input type=\"text\" name=\"power\" value='$power' size='15' /><br><br>
		Точки <br><input type=\"text\" name=\"tochki\" value='$tochki' size='15' /><br><br>
		Часове за тренировка <br><input type=\"text\" name=\"training\" value='$training' size='15' /><br><br>
		Бонус: Турбо <br><input type=\"text\" name=\"bonus_turbo\" value='$bonus_turbo' size='15' /><br><br>
		Бонус: Нитро <br><input type=\"text\" name=\"bonus_nitrous\" value='$bonus_nitrous' size='15' /><br><br>
		Бонус: Джанти <br><input type=\"text\" name=\"bonus_wheels\" value='$bonus_wheels' size='15' /><br><br>
		Бонус: Спойлери <br><input type=\"text\" name=\"bonus_spoilers\" value='$bonus_spoilers' size='15' /><br><br>
		Бонус: Ауспух <br><input type=\"text\" name=\"bonus_generation\" value='$bonus_generation' size='15' /><br><br>
		Бонус: Амортисьори <br><input type=\"text\" name=\"bonus_dampers\" value='$bonus_dampers' size='15' /><br><br>
		Бонус: ABS <br><input type=\"text\" name=\"bonus_abs\" value='$bonus_abs' size='15' /><br><br>
		Победи <br><input type=\"text\" name=\"wins\" value='$wins' size='15' /><br><br>
		Загуби <br><input type=\"text\" name=\"loses\" value='$loses' size='15' /><br><br>
		Бензин <br><input type=\"text\" name=\"nrg\" value='$nrg' size='15' /><br><br>
		Max. Бензин <br><input type=\"text\" name=\"maxnrg\" value='$maxnrg' size='15' /><br><br>
		Пари в банката <br><input type=\"text\" name=\"bank\" value='$bank' size='15' /><br><br>
		
		");
				
				print("<br /><br />
				<input type=\"submit\" name=\"submit\" value=\"Промени\" /></form></center><br></center>");
		
		
	} else{	print("Няма такъв играч!");}
		
		}
	 }
	break;
	
		case "edit-user":
	 if($_SESSION["name"] != "Admin" and $_SESSION["name"] != "admin")
		{
			print("Нямате достъп до тази страница");
		}
		else
		{
		
			
			$user = $_POST["user"];
			$tochki = $_POST["tochki"];
			$power = $_POST["power"];
			$ban = $_POST[ban];
			$namepro = $_POST[namepro];
			$bandsc = $_POST[bandsc];
			$money = $_POST[money];
			$credits = $_POST[credits];
			$speed = $_POST[speed];
			$acceleration = $_POST[acceleration];
			$stability = $_POST[stability];
			$training = $_POST[training];
			$bonus_turbo = $_POST[bonus_turbo];
			$bonus_nitrous = $_POST[bonus_nitrous];
			$bonus_wheels = $_POST[bonus_wheels];
			$bonus_spoilers = $_POST[bonus_spoilers];
			$bonus_generation = $_POST[bonus_generation];
			$bonus_dampers = $_POST[bonus_dampers];
			$bonus_abs = $_POST[bonus_abs];
			$wins = $_POST[wins];
			$loses = $_POST[loses];
			$nrg = $_POST[nrg];
			$maxnrg = $_POST[maxnrg];
			$bank = $_POST[bank];
			$sql = "UPDATE `users` SET `ban` = '$ban' , `namepro` = '$namepro' , `bandsc` = '$bandsc' , `money` = '$money' , `credits` = '$credits' , `speed` = '$speed' , `acceleration` = '$acceleration' , `stability` = '$stability' , `power` = 'power' , `points` = '$tochki' , `training` = '$training' , `bonus_turbo` = '$bonus_turbo' , `bonus_nitrous` = '$bonus_nitrous' , `bonus_wheels` = '$bonus_wheels' , `bonus_spoilers` = '$bonus_spoilers' , `bonus_generation` = '$bonus_generation' , `bonus_dampers` = '$bonus_dampers' , `bonus_abs` = '$bonus_abs' , `wins` = '$wins' , `loses` = '$loses' , `nrg` = '$nrg' , `maxnrg` = '$maxnrg' , `bank` = '$bank'";
			$q = mysql_query($sql) or die(mysql_error());
			print "Готово!"; 
	
	 }
	break;
	

	
		}

ob_end_flush();
?>
</td></table>			
<br><br>
<br> <br></center>
</td>
</tr>
<tr>
</tr>
</table>
</body>
</html>

Проблема ми е следния. Когато ми даде да избера име ми селектира успешно името от базата данни. Когато променя обаче информация на даден потребител стойностите които съм дал в полетата ми стават за всички потребители, а не само за потребителя когото съм посочил. Как може да се оправи това и от къде идва?!

Благодаря предварително!

kriss · 25 Юли 2011

заявката за ъпдейт:

UPDATE `users` SET ... WHERE `user` = '$user'

b0nb0n40 · 25 Юли 2011

Дава ми тази грешка:
Unknown column 'user' in 'field list'

И защо ще стане като аз искам да ъпдейтвам ид от таблицата users

UPDATE `users` SET ... WHERE `user` = '$user'

[/quote]

kriss · 25 Юли 2011

Оф объркал съм.
Замести ето този ред:

$sql = "UPDATE `users` SET `ban` = '$ban' , `namepro` = '$namepro' , `bandsc` = '$bandsc' , `money` = '$money' , `credits` = '$credits' , `speed` = '$speed' , `acceleration` = '$acceleration' , `stability` = '$stability' , `power` = 'power' , `points` = '$tochki' , `training` = '$training' , `bonus_turbo` = '$bonus_turbo' , `bonus_nitrous` = '$bonus_nitrous' , `bonus_wheels` = '$bonus_wheels' , `bonus_spoilers` = '$bonus_spoilers' , `bonus_generation` = '$bonus_generation' , `bonus_dampers` = '$bonus_dampers' , `bonus_abs` = '$bonus_abs' , `wins` = '$wins' , `loses` = '$loses' , `nrg` = '$nrg' , `maxnrg` = '$maxnrg' , `bank` = '$bank'";

Със:

$sql = "UPDATE `users` SET `ban` = '$ban' , `namepro` = '$namepro' , `bandsc` = '$bandsc' , `money` = '$money' , `credits` = '$credits' , `speed` = '$speed' , `acceleration` = '$acceleration' , `stability` = '$stability' , `power` = 'power' , `points` = '$tochki' , `training` = '$training' , `bonus_turbo` = '$bonus_turbo' , `bonus_nitrous` = '$bonus_nitrous' , `bonus_wheels` = '$bonus_wheels' , `bonus_spoilers` = '$bonus_spoilers' , `bonus_generation` = '$bonus_generation' , `bonus_dampers` = '$bonus_dampers' , `bonus_abs` = '$bonus_abs' , `wins` = '$wins' , `loses` = '$loses' , `nrg` = '$nrg' , `maxnrg` = '$maxnrg' , `bank` = '$bank' WHERE `name` = '$user'";

b0nb0n40 · 25 Юли 2011

Боже, Боже.. Аз забравям да селектирам name на какво отговаря в случея

PHP:

WHERE `name` = '$user'";

не го бях забелязал

+1

Проблем с администратор панел!

b0nb0n40

Registered

kriss

Registered

b0nb0n40

Registered

kriss

Registered

b0nb0n40

Registered