Jump to content

Not redirecting page properly


HDFilmMaker2112

Recommended Posts

The following should be redirecting to a certain page based upon the variables given. If someone is logged into the admincp but enters the address index.php?admincp=users, all that shows up is a blank page, it should re-direct back to the admincp main page; aka index.php?admincp. Everything other than this is working... It's just not going back to the admincp when index.php?admincp=users is entered.

 

 

 

<?php
require_once 'db_select.php';
require_once 'func.php';
session_start();
$cadmin2=$_SESSION['admin_check'];
if($cadmin2=="4" && isset($_SESSION['mypassword3']) && $_SESSION['mypassword3']==$_SESSION['mypassword2']){
$SQL1="SELECT position FROM $tbl_name4 WHERE film_number='1' ORDER BY ABS(cost) ASC";
$result1=mysql_query($SQL1) or die(mysql_error());
if($_GET['do']=="add"){
$section.=' - Add User';
$content.='
<div class="main">
<div class="main_header">Add New User</div>
<div class="user_form">
<form action="./index.php?admincp=users&do=process&source=new" method="post">
    <p><label>Name:</label> <input type="text" name="name" size="30" /></p>
    <p><label>E-Mail:</label> <input type="email" name="email" size="32" /></p>
    <p><label>Amount:</label> <input type="text" name="amount" size="8" /></p>
    <p><label>Username:</label> <input type="text" name="username" size="30" /></p>
    <p>
    <label>Level:</label> 
    <select name="level">
    <option value=""></option>
    <option value="nickel">Nickel</option>
    <option value="copper">Copper</option>
    <option value="bronze">Bronze</option>
    <option value="silver">Silver</option>
    <option value="gold">Gold</option>
    <option value="platinum">Platinum</option>
    <option value="palladium">Palladium</option>
    </select>
    </p>
    <p>
    <label>User Level:</label> 
    <select name="user_level">
    <option value="0">No Account</option>
    <option value="1">Credit Purchase</option>
    <option value="2">Donation</option>
    <option value="3">Moderator</option>
    <option value="4">Admin</option>
    </select>
    </p>
    <p><label>Credit:</label>
    <select name="credit">
    <option value=""></option>';
while($row1=mysql_fetch_array($result1)){
extract($row1);
    $content.='<option value="'.ucfirst($position).'">'.ucfirst($position).'</option>';
}
$content.='
    </select>
<!--<label>Film Number:</label>
    <select name="film_number">
    <option value=""></option>
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    </select>-->
</p>
    <p><label>Password:</label> <input type="text" name="password" size="30" /></p>
    <p><input type="submit" value="Submit" name="Submit" /></p>
</form>
</div>
</div>
';
}
elseif($_GET['do']=="edit"){

if(isset($_GET['id'])){
$id=(int)$_GET['id'];

$edit_user_query="SELECT * FROM $tbl_name WHERE $tbl_name.donor_id=$id";
$edit_user_result=mysql_query($edit_user_query);
while($edit_user_row=mysql_fetch_array($edit_user_result)){
extract($edit_user_row);
}
$credits_query="SELECT * FROM donors_credits WHERE donor_id=".$id." ORDER BY id";
$credits_result=mysql_query($credits_query);
while($credits_row=mysql_fetch_array($credits_result)){
$credits[]=$credits_row['credit'];
}
if(count($credits) > 0){
$credit=implode(", ",$credits);
}

if(!empty($amount)){
$amount=number_format($amount, 2, '.', ',');
}

$section.=' - Edit User: '.$username.'';
$content.='
<div class="main">
<div class="main_header">Edit User - '.(!empty($username) ? ''.$username.'' : ''.$name.'').'</div>
<div class="user_form">
<form action="./index.php?admincp=users&do=process&source=edit&id='.$id.'" method="post">
    <p><label>Name:</label> <input type="text" name="name" size="30" value="'.$name.'" /></p>
    <p><label>E-Mail:</label> <input type="email" name="email" size="32" value="'.$email.'" /></p>
    <p><label>Amount:</label> <input type="text" name="amount" size="8" value="'.$amount.'" /></p>
    <p><label>Username:</label> <input type="text" name="username" size="30" value="'.$username.'" /></p>
    <p>
    <label>Level:</label> 
    <select name="level">
    <option value=""'.(empty($level) ? ' selected="selected"' : '').'></option>
    <option value="nickel"'.($level=="nickel" ? ' selected="selected"' : '').'>Nickel</option>
    <option value="copper"'.($level=="copper" ? ' selected="selected"' : '').'>Copper</option>
    <option value="bronze"'.($level=="bronze" ? ' selected="selected"' : '').'>Bronze</option>
    <option value="silver"'.($level=="silver" ? ' selected="selected"' : '').'>Silver</option>
    <option value="gold"'.($level=="gold" ? ' selected="selected"' : '').'>Gold</option>
    <option value="platinum"'.($level=="platinum" ? ' selected="selected"' : '').'>Platinum</option>
    <option value="palladium"'.($level=="palladium" ? ' selected="selected"' : '').'>Palladium</option>
    </select> (Blank if something other than Donation)
    </p>
    <p>
    <label>User Level:</label> 
    <select name="user_level">
    <option value="0"'.($admin=="0" ? ' selected="selected"' : '').'>No Account</option>
    <option value="1"'.($admin=="1" ? ' selected="selected"' : '').'>Credit Purchase</option>
    <option value="2"'.($admin=="2" ? ' selected="selected"' : '').'>Donation</option>
    <option value="3"'.($admin=="3" ? ' selected="selected"' : '').'>Moderator</option>
    <option value="4"'.($admin=="4" ? ' selected="selected"' : '').'>Admin</option>
    </select>
    </p>
    <p><label>Credit:</label> <input type="text" name="credit_old" size="30" value="'.$credit.'" disabled="disabled" /></p>
    <p><label>New Credit:</label>
    <select name="credit">
    <option value=""></option>';
while($row1=mysql_fetch_array($result1)){
extract($row1);
    $content.='<option value="'.ucfirst($position).'">'.ucfirst($position).'</option>';
}
$content.='
    </select>
<!--<label>Film Number:</label>
    <select name="film_number">
    <option value=""></option>
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    </select>-->
</p>
    <p><input type="submit" value="Submit" name="Submit" /></p>
</form>
</div>
</div>
';
}
else{
$user_list_query="SELECT * FROM $tbl_name";
$user_list_result=mysql_query($user_list_query);
$content='';
while($user_list_row=mysql_fetch_array($user_list_result)){
extract($user_list_row);
$content.='<div class="center"><a href="./index.php?admincp=users&do=edit&id='.$donor_id.'">'.(!empty($username) ? ''.$username.'' : ''.$name.'').'</a></div>';
}
}
}

elseif($_GET['do']="process"){
$source=sanitize($_GET['source']);
$name=sanitize($_POST['name']);
$email=sanitize($_POST['email']);
$amount=amount_verify(sanitize($_POST['amount']));
$username=sanitize($_POST['username']);
$level=sanitize($_POST['level']);
$password=kam3($_POST['password']);
$admin=sanitize($_POST['user_level']);
//$film_number=sanitize($_POST['film_number']);
$credits=sanitize($_POST['credit']);
$credits=explode(",",$credits);
array_walk($credits, 'trim_value');

if($amount=="00" || $amount==".00"){
$amount="";
}

if($_GET['source']=="new"){
$add_user_query="INSERT INTO $tbl_name (username, name, level, amount, password, admin, email) VALUES ('$username', '$name', '$level', '$amount', '$password', '$admin', '$email')";
mysql_query($add_user_query);
$insert_id=mysql_insert_id();
if(!empty($credits)){
$CreditArray = array();
foreach($credits as $credit){
$CreditArray[] = "('$credit',$insert_id)";
}
if(mysql_affected_rows()==1){
$content.='<div class="center">User Added.</div>';
}
if (count($CreditArray) > 0 ){
$credit_array_query="INSERT INTO $tbl_name2 (credit,donor_id) VALUES " . implode(',',$CreditArray);
mysql_query($credit_array_query);
}
}
}

elseif($_GET['source']=="edit"){
$insert_id=$_GET['id'];
$edit_user_query="UPDATE $tbl_name SET username='$username', name='$name', level='$level', amount='$amount', admin='$admin', email='$email' WHERE donor_id='$insert_id'";
mysql_query($edit_user_query);
if(!empty($credits)){
$CreditArray = array();
foreach($credits as $credit){
$CreditArray[] = "('$credit',$insert_id)";
}
if(mysql_affected_rows()==1){
$content.='<div class="center">User Edited.</div>';
}
if (count($CreditArray) > 0 ){
$credit_array_query="INSERT $tbl_name2 (credit,donor_id) VALUES " . implode(',',$CreditArray);
mysql_query($credit_array_query);
}
}
}

}

else{
header('Location: ./index.php?admincp');
}
}
else{
header("Location: ./index.php?usercp");
}
?>

Link to comment
https://forums.phpfreaks.com/topic/246856-not-redirecting-page-properly/
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.