Forums topic

[yuws]

Hi, im making a custom forums, and ive been having some problems.

 

Here is the code for viewing posts

 

<?php include('mysql.php'); ?>
<?php
  if (isset($_GET['p'])) {
    $topic = $_GET['p'];
  } else {
    $topic = 1;
  }
  $tnamequery = 'SELECT * FROM `[f]topic` WHERE `num` = \''.$topic.'\'';
  $tnameresult = mysql_query($tnamequery);
  while ($tnamerow = @mysql_fetch_assoc($tnameresult)) {
    $forumnum = $tnamerow['forum'];
$topicname = $tnamerow['name'];
  }
  $fnamequery = 'SELECT * FROM `[f]forums` WHERE `num` = \''.$forumnum.'\'';
  $fnameresult = mysql_query($fnamequery);
  while ($fnamerow = @mysql_fetch_assoc($fnameresult)) {
    $catnum = $fnamerow['cat'];
$forumname = $fnamerow['name'];
  }
  $cnamequery = 'SELECT * FROM `[f]cats` WHERE `num` = \''.$catnum.'\'';
  $cnameresult = mysql_query($cnamequery);
  while ($cnamerow = @mysql_fetch_assoc($cnameresult)) {
    $catname = $cnamerow['name'];
  }
  $findertext = ' <a href=viewforum.php?f='.$forumnum.'>'.$forumname.'</a> > <a href="viewpost.php?p='.$topic.'">'.$topicname.'</a>';
?>
<?php include('header.php'); ?>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<?php
  // Check how many pages to make
  $postcount = 0;
  $pagecount = 0;
  $countquery = 'SELECT * FROM `[f]post` WHERE `topic` = \''.$topic.'\' ORDER BY `num` ASC';
  $countresult = mysql_query($countquery);
  while ($countrow = @mysql_fetch_assoc($countresult)) {
    $postcount++;
  }
  $pagecount = ceil($postcount/10);
  if ($pagecount == 0) {
    $pagecount = 1;
  }
  // Now set page
  if (isset($_GET['pg'])) {
    $page = $_GET['pg'];
  } else {
    $page = 1;
  }
  if(isset($_COOKIE['rs_usr'])) {
    $reply = '<img src="ico/reply.gif" /> <a href="post.php?t='.$topic.'">Reply</a> ';
  }
  echo '	<tr bgcolor="#000000">
        <td colspan="1" class="brown-left">Page <b>'.$page.'</b> of <b>'.$pagecount.' </td>
	<td colspan="1" class="brown-right" align="right">'.$reply.' <img src="ico/refresh.gif" width="15" height="15" /><a href="'.$_SERVER['PHP_SELF'].'?p='.$_GET['p'].'"> Refresh</a></td>
        </tr><tr><td colspan="2"> </td>';
    $postquery = 'SELECT * FROM `[f]topic` WHERE `num` = \''.$topic.'\'';
    $postresult = mysql_query($postquery);
while ($postrow = @mysql_fetch_assoc($postresult)) {
      $userquery = 'SELECT * FROM `players` WHERE `username` = \''.$postrow['username'].'\'';
      $userresult = mysql_query($userquery);
  while ($userrow = @mysql_fetch_assoc($userresult)) {


    if ($userrow['donator'] == 1) {
  	    $title = '<div class="modtype">Donator</div>';
	$icon = '<img src="ico/donator_1.gif" /> ';
  }

if ($userrow['rigts'] == 0) {

	$bordercolor = "#3f2e0f";
	$leftcolor = "#2c200a";
	$rightcolor = "#1f1707";
  }
  if ($userrow['rights'] == 1) {
    $title = '<div class="modtype">Forum Mod</div>';
	$icon = '<img src="ico/crown_green.gif" /> ';
	$bordercolor = "#294729";
	$leftcolor = "#092709";
	$rightcolor = "#092009";
  }
  if ($userrow['rights'] == 2) {
    $title = '<div class="modtype">Funified Mod</div>';
	$icon = '<img src="ico/crown_gold.gif" /> ';
	$bordercolor = "#957c07";
	$leftcolor = "#645305";
	$rightcolor = "#403503";
  }
  if ($userrow['rights'] == 3) {
    $title = '<div class="modtype">Funified Owner</div>';
	$icon = '<img src="ico/crown_gold.gif" /> ';
	$bordercolor = "#0066CC";
	$leftcolor = "#003399";
	$rightcolor = "#003366";
  }
  if ($userrow['rights'] == 4) {
    $title = '<div class="modtype">Funified Co-Owner</div>';
	$icon = '<img src="ico/crown_pink.gif" /> ';
$bordercolor = "#0066CC";
	$leftcolor = "#003399";
	$rightcolor = "#003366";
  }
      echo '  <tr>
    <td width="150" rowspan="2" bgcolor="'.$leftcolor.'" style="border: 4px solid '.$bordercolor.'; border-right: 0px none;"  align="center" valign="top">'.$icon.' '.$postrow['username'].'<br />'.$title.'</td>
    <td align="right" bgcolor="'.$rightcolor.'" style="border-top: 4px solid '.$bordercolor.'; color: #888888; border-right: 4px solid '.$bordercolor.';" valign="top">'.$postrow['date'].'</td>
  </tr>
  <tr>
    <td align="left" bgcolor="'.$rightcolor.'" valign="top" style="border-bottom: 4px solid '.$bordercolor.'; border-right: 4px solid '.$bordercolor.';">'.$postrow['text'].'<br /><br /></td>
  </tr>
  <tr>
    <td colspan="2"> </td>
  </tr>';
  	  }
    }

    $postquery = 'SELECT * FROM `[f]post` WHERE `topic` = \''.$_GET['p'].'\' ORDER BY `num` ASC';
    $postresult = mysql_query($postquery);
$postlimit = 5;
$postnum = -1;
while ($postrow = @mysql_fetch_assoc($postresult)) {
  $postlimit++;
      $userquery = 'SELECT * FROM `players` WHERE `username` = \''.$postrow['username'].'\'';
      $userresult = mysql_query($userquery);
  while ($userrow = @mysql_fetch_assoc($userresult)) {
  if ($userrow['donator'] == 1) {
  	    $title = '<div class="modtype">Donator</div>';
	$icon = '<img src="ico/donator_1.gif" /> ';
  }

if ($userrow['rigts'] == 0) {

	$bordercolor = "#3f2e0f";
	$leftcolor = "#2c200a";
	$rightcolor = "#1f1707";
  }

  if ($userrow['rights'] == 1) {
    $title = '<div class="modtype">Forum Mod</div>';
	$icon = '<img src="ico/crown_green.gif" /> ';
	$bordercolor = "#294729";
	$leftcolor = "#092709";
	$rightcolor = "#092009";
  }
  if ($userrow['rights'] == 2) {
    $title = '<div class="modtype">Funified Mod</div>';
	$icon = '<img src="ico/crown_gold.gif" /> ';
	$bordercolor = "#8c7a16";
	$leftcolor = "#4c4205";
	$rightcolor = "#3e3605";
  }
if ($userrow['rights'] == 3) {
    $title = '<div class="modtype">Funified Owner</div>';
	$icon = '<img src="ico/crown_gold.gif" /> ';
	$bordercolor = "#0066CC";
	$leftcolor = "#003399";
	$rightcolor = "#003366";
  }
  if ($userrow['rights'] == 4) {
    $title = '<div class="modtype">Funified Co-Owner</div>';
	$icon = '<img src="ico/crown_pink.gif" /> ';
$bordercolor = "#0066CC";
	$leftcolor = "#003399";
	$rightcolor = "#003366";
  }
	$hidden = $postrow['hidden'];
	if($hidden == 0){
	echo '
		<tr>
				<td width="150" rowspan="2" bgcolor="'.$leftcolor.'" style="border: 4px solid '.$bordercolor.'; border-right: 0px none;"  align="center" valign="top">'.$icon.' '.$postrow['username'].'<br />'.$title.'</td>
		<td align="right" bgcolor="'.$rightcolor.'" style="border-top: 4px solid '.$bordercolor.'; color: #888888; border-right: 4px solid '.$bordercolor.';" valign="top">'.$postrow['date'].'</td>
		</tr>
		<tr>
			<td align="left" bgcolor="'.$rightcolor.'" valign="top" style="border-bottom: 4px solid '.$bordercolor.'; border-right: 4px solid '.$bordercolor.';">'.$postrow['text'].'<br /><br /></td>
		</tr>
		<tr>
			<td colspan="2"> </td>
		</tr>
	';
	} else {
	/*
	$bordercolor = "#3f2e0f";
	$leftcolor = "#2c200a";
	$rightcolor = "#1f1707";
	*/
	echo '
	<tr>
				<td width="150" rowspan="2" bgcolor="#2c200a" style="border: 4px solid #3f2e0f; border-right: 0px none;"  align="center" valign="top"></td>
		<td align="right" bgcolor="#1f1707" style="border-top: 4px solid #3f2e0f; color: #888888; border-right: 4px solid #3f2e0f;" valign="top">'.$postrow['date'].'</td>
		</tr>
		<tr>
			<td align="left" bgcolor="#1f1707" valign="top" style="border-bottom: 4px solid #3f2e0f; border-right: 4px solid #3f2e0f;">The contents of this message have been hidden<br /><br /></td>
		</tr>
		<tr>
			<td colspan="2"> </td>
		</tr>
	';
	}
  	  }
    }
?>
    </table><br />

<center>Quick find code: <?php echo $topic; ?></center>
<?php include('footer.php'); ?>

 

 

 

Im trying to make it use pages but its not working.

If anyone can help me add pages and fix some security problems that would be awesome!

 

 

http://www.funified.com/forum/funpost.php?p=1070

 

is an example.

 

 

If you have msn tell me =D

[yuws]

anyone? i really need help!

[Andy-H]

Why are you using your querys in single quotes and escaping the single quotes around the variables instead of just double quoting the entire query string and single quoting the string vars?

[yuws]

i made this over a year ago, by knowledge in php is far gone atm.

If you can help me out i will give you full credits.

 

possibly funds also, talk on msn please.