Проблем с сесия

HackeR

Registered
<?php
session_start();
ob_start();
if($_SESSION['user'])
{
echo '<center><div align="center"><b><a href="?page=inbox">ЛС-та</a>
<br><a href="?page=write">Напиши ново ЛС</a></b></div>
<a href="members.php">Всички потребители</a><br>
<a href="logout.php">Излез</a><br></center>';
$pmsesusername = $_SESSION['user'];
include "connect.php";
switch($_GET[page])
{
default:
break;
case 'write':
if (!$_POST[send])
{
echo ("<center><form method='POST' style='margin: 0px;'>Избери потребител:<font color=red>*</font><br>
<select name='to'>
");
$getmembers = mysql_query("SELECT * FROM members ORDER BY 'user' ASC");
while ($members = MySQL_Fetch_Array($getmembers)) {
echo ("<center><option value='$members[user]'>$members[user]</option>");
}
echo ("<center>
</select>
<br>Заглавие:<font color=red>*</font>
<br><input type='text' name='subject' size='20'>
<br>Съобщение:<font color=red>*</font>
<br><textarea rows='7' name='message' cols='35'></textarea>
<br><input type='submit' value='Изпрати' name='send'>
</form>
");
}
if ($_POST[to])
{
$subject = htmlspecialchars(addslashes("$_POST[subject]"));
$message = htmlspecialchars(addslashes("$_POST[message]"));
$to = htmlspecialchars(addslashes("$_POST[to]"));
$send = mysql_query("INSERT INTO `pmessages` ( `title` , `message` ,
`touser` , `from` , `unread` ,
`date` ) VALUES ('$subject', '$message', '$to',
'$pmsesusername', 'unread', NOW())");
echo ("<center>Съобщението е изпратено!");
}
break;
case 'delete':
if (!$_GET[msgid])
{
echo ("<center>Sorry, but this is an invalid message!");
}
else
{
$getmsg = mysql_query("SELECT * from pmessages where id = '$_GET[msgid]'");
$msg = mysql_fetch_array($getmsg);
if ($msg[touser] != $pmsesusername)
{
echo ("<center>Неможе да си изпратите ЛС!");
}
else
{
$delete = mysql_query("delete from pmessages where id = '$_GET[msgid]'");
echo ("<center>ЛС Изтрито!");
}
}
break;
case 'inbox':
$get = mysql_query("SELECT * from pmessages where touser = '$pmsesusername' order by id desc");
echo ("
<table bgcolor='#dddddd' border='0' width='100%' cellspacing='0'>
<tr>
<td align='center'>Заглавие</td>
<td align='center' width='125'>Изпратено от</td>
<td align='center' width='97'>Дата</td>
<td width='25'>Изтриване</td>
</tr>
</table>
");
$nummessages = mysql_num_rows($get);
if ($nummessages == 0)
{
echo ("<center>Нямате нови ЛС-та!");
}
else
{
echo("<table border='0' width='100%' cellspacing='1'>");
while ($messages = mysql_fetch_array($get))
{
echo ("<center>
<tr>
<td><a href='?page=view&msgid=$messages[id]'>");
if ($messages[reply] == yes)
{
echo ("<center>Отговор до: ");
}
echo ("<center>$messages[title]</a></td>
<td width='125'>$messages[from]</td>
<td width='97'>$messages[date]</td>
<td width='25'><a href='?page=delete&msgid=$messages[id]'>Изтрий</a></td>
</tr>");
}
echo ("<center></table>");
}
break;
case 'view':
if (!$_GET[msgid])
{
echo ("<center>Invalid message!");
}
else
{
$getmsg= mysql_query("SELECT * from pmessages where id = '$_GET[msgid]'");
$msg = mysql_fetch_array($getmsg);
if ($msg[touser] == $pmsesusername)
{
if (!$_POST[message])
{
$markread = mysql_query("Update pmessages set unread = 'read' where id = '$_GET[msgid]'");
$msg[message] = nl2br(stripslashes("$msg[message]"));
echo ("<center>
<form method='POST' style='margin: 0px;'>
<b>Изпратено от: $msg[from]</b><br><b>Subject: $msg[title]</b>
<b><br>Съобщение:<br><u>$msg[message]</u></br></b>
<b>Отговор:<br></b>
<center><textarea rows='6' name='message' cols='45'></textarea></center>
<input type='submit' value='Изпрати!' name='send'>
</form>");
}
if ($_POST[message])
{
$message = htmlspecialchars(addslashes("$_POST[message]"));
$do = mysql_query("INSERT INTO `pmessages` ( `title` , `message` , `touser` , `from` , `unread` ,
`date`, `reply`) VALUES
('$msg[title]', '$message', '$msg[from]', '$pmsesusername',
'unread', NOW(), 'yes')");
echo ("<center>Съобщението е изпратено!");
}
}
}
break;
}
}
else
{
echo "Нямате достъп! Моля <a href='index.php'>влезте</a>";
}
?>

Дето е с червено там ми дава грешка :idea:
 
session_start();
ob_start();

тези двата реда, трябва да седят на първия ред на самия документ, над всичко без празно място тоест

<?
session_start();
ob_start();
?>

НАД ВСИЧКО !
 

Back
Горе