Jump to content

Not redirecting page properly

HDFilmMaker2112

By HDFilmMaker2112
in PHP Coding Help

 Share

Recommended Posts

HDFilmMaker2112 Advanced Member

HDFilmMaker2112

Posted
Posted

The following should be redirecting to a certain page based upon the variables given. If someone is logged into the admincp but enters the address index.php?admincp=users, all that shows up is a blank page, it should re-direct back to the admincp main page; aka index.php?admincp. Everything other than this is working... It's just not going back to the admincp when index.php?admincp=users is entered.

 

 

 

<?php
require_once 'db_select.php';
require_once 'func.php';
session_start();
$cadmin2=$_SESSION['admin_check'];
if($cadmin2=="4" && isset($_SESSION['mypassword3']) && $_SESSION['mypassword3']==$_SESSION['mypassword2']){
$SQL1="SELECT position FROM $tbl_name4 WHERE film_number='1' ORDER BY ABS(cost) ASC";
$result1=mysql_query($SQL1) or die(mysql_error());
if($_GET['do']=="add"){
$section.=' - Add User';
$content.='
<div class="main">
<div class="main_header">Add New User</div>
<div class="user_form">
<form action="./index.php?admincp=users&do=process&source=new" method="post">
    <p><label>Name:</label> <input type="text" name="name" size="30" /></p>
    <p><label>E-Mail:</label> <input type="email" name="email" size="32" /></p>
    <p><label>Amount:</label> <input type="text" name="amount" size="8" /></p>
    <p><label>Username:</label> <input type="text" name="username" size="30" /></p>
    <p>
    <label>Level:</label> 
    <select name="level">
    <option value=""></option>
    <option value="nickel">Nickel</option>
    <option value="copper">Copper</option>
    <option value="bronze">Bronze</option>
    <option value="silver">Silver</option>
    <option value="gold">Gold</option>
    <option value="platinum">Platinum</option>
    <option value="palladium">Palladium</option>
    </select>
    </p>
    <p>
    <label>User Level:</label> 
    <select name="user_level">
    <option value="0">No Account</option>
    <option value="1">Credit Purchase</option>
    <option value="2">Donation</option>
    <option value="3">Moderator</option>
    <option value="4">Admin</option>
    </select>
    </p>
    <p><label>Credit:</label>
    <select name="credit">
    <option value=""></option>';
while($row1=mysql_fetch_array($result1)){
extract($row1);
    $content.='<option value="'.ucfirst($position).'">'.ucfirst($position).'</option>';
}
$content.='
    </select>
<!--<label>Film Number:</label>
    <select name="film_number">
    <option value=""></option>
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    </select>-->
</p>
    <p><label>Password:</label> <input type="text" name="password" size="30" /></p>
    <p><input type="submit" value="Submit" name="Submit" /></p>
</form>
</div>
</div>
';
}
elseif($_GET['do']=="edit"){

if(isset($_GET['id'])){
$id=(int)$_GET['id'];

$edit_user_query="SELECT * FROM $tbl_name WHERE $tbl_name.donor_id=$id";
$edit_user_result=mysql_query($edit_user_query);
while($edit_user_row=mysql_fetch_array($edit_user_result)){
extract($edit_user_row);
}
$credits_query="SELECT * FROM donors_credits WHERE donor_id=".$id." ORDER BY id";
$credits_result=mysql_query($credits_query);
while($credits_row=mysql_fetch_array($credits_result)){
$credits[]=$credits_row['credit'];
}
if(count($credits) > 0){
$credit=implode(", ",$credits);
}

if(!empty($amount)){
$amount=number_format($amount, 2, '.', ',');
}

$section.=' - Edit User: '.$username.'';
$content.='
<div class="main">
<div class="main_header">Edit User - '.(!empty($username) ? ''.$username.'' : ''.$name.'').'</div>
<div class="user_form">
<form action="./index.php?admincp=users&do=process&source=edit&id='.$id.'" method="post">
    <p><label>Name:</label> <input type="text" name="name" size="30" value="'.$name.'" /></p>
    <p><label>E-Mail:</label> <input type="email" name="email" size="32" value="'.$email.'" /></p>
    <p><label>Amount:</label> <input type="text" name="amount" size="8" value="'.$amount.'" /></p>
    <p><label>Username:</label> <input type="text" name="username" size="30" value="'.$username.'" /></p>
    <p>
    <label>Level:</label> 
    <select name="level">
    <option value=""'.(empty($level) ? ' selected="selected"' : '').'></option>
    <option value="nickel"'.($level=="nickel" ? ' selected="selected"' : '').'>Nickel</option>
    <option value="copper"'.($level=="copper" ? ' selected="selected"' : '').'>Copper</option>
    <option value="bronze"'.($level=="bronze" ? ' selected="selected"' : '').'>Bronze</option>
    <option value="silver"'.($level=="silver" ? ' selected="selected"' : '').'>Silver</option>
    <option value="gold"'.($level=="gold" ? ' selected="selected"' : '').'>Gold</option>
    <option value="platinum"'.($level=="platinum" ? ' selected="selected"' : '').'>Platinum</option>
    <option value="palladium"'.($level=="palladium" ? ' selected="selected"' : '').'>Palladium</option>
    </select> (Blank if something other than Donation)
    </p>
    <p>
    <label>User Level:</label> 
    <select name="user_level">
    <option value="0"'.($admin=="0" ? ' selected="selected"' : '').'>No Account</option>
    <option value="1"'.($admin=="1" ? ' selected="selected"' : '').'>Credit Purchase</option>
    <option value="2"'.($admin=="2" ? ' selected="selected"' : '').'>Donation</option>
    <option value="3"'.($admin=="3" ? ' selected="selected"' : '').'>Moderator</option>
    <option value="4"'.($admin=="4" ? ' selected="selected"' : '').'>Admin</option>
    </select>
    </p>
    <p><label>Credit:</label> <input type="text" name="credit_old" size="30" value="'.$credit.'" disabled="disabled" /></p>
    <p><label>New Credit:</label>
    <select name="credit">
    <option value=""></option>';
while($row1=mysql_fetch_array($result1)){
extract($row1);
    $content.='<option value="'.ucfirst($position).'">'.ucfirst($position).'</option>';
}
$content.='
    </select>
<!--<label>Film Number:</label>
    <select name="film_number">
    <option value=""></option>
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    </select>-->
</p>
    <p><input type="submit" value="Submit" name="Submit" /></p>
</form>
</div>
</div>
';
}
else{
$user_list_query="SELECT * FROM $tbl_name";
$user_list_result=mysql_query($user_list_query);
$content='';
while($user_list_row=mysql_fetch_array($user_list_result)){
extract($user_list_row);
$content.='<div class="center"><a href="./index.php?admincp=users&do=edit&id='.$donor_id.'">'.(!empty($username) ? ''.$username.'' : ''.$name.'').'</a></div>';
}
}
}

elseif($_GET['do']="process"){
$source=sanitize($_GET['source']);
$name=sanitize($_POST['name']);
$email=sanitize($_POST['email']);
$amount=amount_verify(sanitize($_POST['amount']));
$username=sanitize($_POST['username']);
$level=sanitize($_POST['level']);
$password=kam3($_POST['password']);
$admin=sanitize($_POST['user_level']);
//$film_number=sanitize($_POST['film_number']);
$credits=sanitize($_POST['credit']);
$credits=explode(",",$credits);
array_walk($credits, 'trim_value');

if($amount=="00" || $amount==".00"){
$amount="";
}

if($_GET['source']=="new"){
$add_user_query="INSERT INTO $tbl_name (username, name, level, amount, password, admin, email) VALUES ('$username', '$name', '$level', '$amount', '$password', '$admin', '$email')";
mysql_query($add_user_query);
$insert_id=mysql_insert_id();
if(!empty($credits)){
$CreditArray = array();
foreach($credits as $credit){
$CreditArray[] = "('$credit',$insert_id)";
}
if(mysql_affected_rows()==1){
$content.='<div class="center">User Added.</div>';
}
if (count($CreditArray) > 0 ){
$credit_array_query="INSERT INTO $tbl_name2 (credit,donor_id) VALUES " . implode(',',$CreditArray);
mysql_query($credit_array_query);
}
}
}

elseif($_GET['source']=="edit"){
$insert_id=$_GET['id'];
$edit_user_query="UPDATE $tbl_name SET username='$username', name='$name', level='$level', amount='$amount', admin='$admin', email='$email' WHERE donor_id='$insert_id'";
mysql_query($edit_user_query);
if(!empty($credits)){
$CreditArray = array();
foreach($credits as $credit){
$CreditArray[] = "('$credit',$insert_id)";
}
if(mysql_affected_rows()==1){
$content.='<div class="center">User Edited.</div>';
}
if (count($CreditArray) > 0 ){
$credit_array_query="INSERT $tbl_name2 (credit,donor_id) VALUES " . implode(',',$CreditArray);
mysql_query($credit_array_query);
}
}
}

}

else{
header('Location: ./index.php?admincp');
}
}
else{
header("Location: ./index.php?usercp");
}
?>

Link to comment
Share on other sites
This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.