olliee

I also manged to fix my other security issue as well :D, I'm off to bed now for some well earned rest. This web site is going to be the death of me.

Thank you very much!! That did the trick nicely.

Hey all, The site i've been working on since September/October is almost finished now (for a University project), but have just been stumbled by the last peice of code im doing. Just wondering if any of your guys have any insight to how to fix it. --- I have serval pages using an iFrame which im using to load a menu, im using this menu to provide some security. E.g. if roleID = 1 display links for admins to use, if roleID = 2 display links for teachers else go way (by this it loads up the denied.php file telling the user the page is resitricted. Now my problem is that my html code for these links is interfering with the php code. Is ther anyway to get them to work together, if so how? Thanks in advance! [code]  <?php     if ($roleID ==2){                       <a href="excel.php" target="_parent">Download Database</a>            <a href="urlenter.php" target="_parent">URL Page</a>         <a href="admin.php" target="_parent">CP Home </a>         <a href="Teacher_creation.php" target="_parent">Admin/Teacher Creation </a>         Account Removal      } elseif ($roleID ==1) {          <a href="../excel.php" target="_parent">Download Database</a> }    else {         header("Location: denied.php");         exit; };?>[/code]

Ok first you need to create search form. It will need a text box and submit button in the form section. Then you will need to set these properties. text box: textfield button: submit form name: test (The object names can be be anything you want them to be, I'm just using what i've used in my code) So the code will look like this now. <form name="test" method="post" action="search_result.php"> <label> <input name="textfield" type="text" id="textfield" /> </label> <label> <input type="submit" name="Submit" value="Submit" /> </label> </form> Now click on the form properties. Now set those properties. Method: post Action: search_results.php (This name should be whatever the name of your search results page is) This page is now done. For the next page You need to create a recordset. Select the appropriate table and database. then you need to set these values. Filter: first (The field name in the database your searching in) Now change 'URL Parameter' to 'Form Variable' - then with the adjacent combo-box change it to the name of the textfield in the search page. In this cases its 'textfield' Now you can add your dynamictext recordset (if you want a repeat region <table width="400" border="1"> <?php do { ?> <tr> <td><?php echo $row_Recordset1['first']; ?></td> <td><?php echo $row_Recordset1['last']; ?></td> <td><?php echo $row_Recordset1['pay']; ?></td> </tr> <?php } while ($row_Recordset1 = mysql_fetch_assoc($Recordset1)); ?> </table> The rest of the code will be generated by dreamweaver. Is this what you wanted?