I have not placed much of the 'Habbo' stuff in it, because my plan was to make one if it works make the others. Members.php:
<?php
session_start(); //allows session
include "config.php";
echo "<center>";
if ($_POST[submit]) {
$name = strip_tags(htmlspecialchars($_POST["username"]));
$sub = strip_tags(htmlspecialchars($_POST["sub"]));
$comment = strip_tags(htmlspecialchars($_POST["comment"]));
$user = strip_tags(htmlspecialchars($_POST["user"]));
$db = mysql_query("INSERT INTO `guestbook` (`author`, `sub`, `comment`, `puser`) VALUES ('$name','$sub','$comment','$user')") or die(mysql_error());
if(!$db){
echo(" Error Posting Comment ");
}else{
echo(" Comment Posted ");
}
}
if(isset($_GET['user'])){ //if there trying to view a profile
//gets the user name and makes it safe
$username = addslashes($_GET[user]);
//querys the db to find the username
$getuser = mysql_query("SELECT * FROM `members` WHERE `username` = '$username'");
//checks see if the username exists in the db
$usernum = mysql_num_rows($getuser);
//if it don't exist
if ($usernum == 0)
{
//don't exist
echo ("User Not Found");
}
//if it does exist then show there profile
else
{
$user = mysql_fetch_array($getuser);
echo "<fieldset style='width: 350'>
<b>$user[username]'s Profile</b><br><br>
Email: $user[email]<br>
Location: $user[habboname]<br>
Sex: $user[sex]<br>
Age: $user[age]<br>
</fieldset>";
echo("<br><br><font size="5">User Comments</font>");
$guest = mysql_query("SELECT * FROM `guestbook` WHERE `puser` = '" . $user[username] . "'");
while($guestbook = mysql_fetch_array($guest)) {
echo("<br><br>
From: $guestbook[author]<br>
Subject: $guestbook<sub><br>
Comment: <br>
$guestbook[comment]<br><br>");
}
echo("<form method="POST">
Name: <input type="text" name="username" maxlength="255"><br>
Subject: <input type="text" name="sub" maxlength="255"><br>
Comment: <textarea name="comment" rows="4" cols="40"></textarea><br>
<input type="hidden" name="user" value="" . $user[username] . "">
<input type="submit" name="submit" value="Post Comment">
");
}
}
else
{
//gets all the members from the database
$getusers = mysql_query("SELECT * FROM `members` ORDER BY `id` ASC") or die(mysql_error());
//loops there name out
while ($user = mysql_fetch_array($getusers))
{
echo "<a href='members.php?user=$user[username]'>$user[username]</a><br>";
}
}
echo "<center>";
?>
AND I fixed up the phpMyAdmin to those things :D
