break моля влезте в профила си

[tommy_nik]

привет на всички
срещам трудности при следният код, искам само ако си влезнал в профила да можеш да аднеш приятел. Файла се казва addfrend.php

<?php
function secure($var) {
return addslashes(htmlspecialchars($var));
}
if (isset($_SESSION['user'])) {
$islogged = "".$_SESSION['user']."";
} else {
$islogged = "Login";
}


$gge = secure(@$_GET['id']);
$avtor = $_SESSION['user'];
$result = mysql_query("SELECT id FROM members WHERE user='$islogged'");

while($row = mysql_fetch_array($result)){
echo $row['user'] . " " . $row ['$islogged']."". "<br>";
$myid=$row['id'];
}
$gge = secure(@$_GET['id']);
$avtor = $_SESSION['user'];
$sql=mysql_query("SELECT * FROM frends WHERE avtor='$avtor' AND fid='$gge'");
$broi=mysql_num_rows($sql);
if ($broi < 1){
mysql_query("INSERT INTO `frends` (uid, fid, avtor) VALUES('$myid','$gge','$avtor')") or die(mysql_error());
echo "Successfully added to your friends!";
}
else{
echo "This user is already your friend!";
}
?>

 

[ludasam]

<?php
function secure($var) {
return addslashes(htmlspecialchars($var));
}
if (isset($_SESSION['user'])) {
$islogged = "".$_SESSION['user']."";
} else {
$islogged = "Login";
}


$gge = secure(@$_GET['id']);
$avtor = $_SESSION['user'];
if(isSet($avtor)) {
$result = mysql_query("SELECT id FROM members WHERE user='$islogged'");

while($row = mysql_fetch_array($result)){
echo $row['user'] . " " . $row ['$islogged']."". "<br>";
$myid=$row['id'];
}
$gge = secure(@$_GET['id']);
$avtor = $_SESSION['user'];
$sql=mysql_query("SELECT * FROM frends WHERE avtor='$avtor' AND fid='$gge'");
$broi=mysql_num_rows($sql);
if ($broi < 1){
mysql_query("INSERT INTO `frends` (uid, fid, avtor) VALUES('$myid','$gge','$avtor')") or die(mysql_error());
echo "Successfully added to your friends!";
}
else{
echo "This user is already your friend!";
}
} else {
echo "влез си в профила";
}
?>