Admin Panel

MCP · 2007-06-05T15:56:36+01:00

https://rmb-scripting.com/tutorials.php?tutorial&tid=148 I used that tutorial and now it says "Zup, admin? Your userlevel is 6" I cannot see any admin controls. Now I am stumped. Help? Thanks. :)

Posted on Thursday 31st May 2007 at 08:28 AM

SkillMaster
SkillMaster's Avatar

PHP Code

<?php
session_start(); 
include "config.php"; 
if($logged[username] && $logged[level] == 6)
{ 
switch($_GET[page]) 
{ 
default: 
$fetch = mysql_query("SELECT * FROM `members` ORDER BY username ASC"); 
while($users = mysql_fetch_array($fetch)) 
{ 
echo ("<a href='?page=edit&member=$users[username]'>- $users[username]</a><br>"); 
}
break; 
 
case 'edit': 
$member = $_GET[member];
$user = mysql_query("SELECT * FROM `members` where username = '$member'");
$users = mysql_fetch_array($user); 
echo ("
<form method='POST'> 
<table width='100%'> 
<tr> 
<td align='right' width='25%'> 
User Level</td> 
<td align='left'> 
<select name='level'> 
<option value='2'>User</option> 
<option value='4'>Mod</option> 
<option value='6'>Admin</option> 
</select> </td> 
</tr> 
<tr> 
<td align='right' width='25%'> 
Email</td> 
<td align='left'> 
<input type='text' size='25' maxlength='25' name='email' value='$users[email]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Location</td> 
<td align='left'> 
<input size='25' name='location' value='$users[location]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Age</td> 
<td align='left'> 
<input size='25' name='age'  value='$users[age]'></td> 
</tr> 
<tr> 
<td align='center'></td> 
<td align='left'> 
<input type='submit' name='submit' value='Update'></td> 
</tr> 
</table> 
</form>  
");
if($_POST[submit]) 
{ 
$email = htmlspecialchars($_POST[email]);
$age = htmlspecialchars($_POST[age]); 
$location = htmlspecialchars($_POST[location]); 
$level = htmlspecialchars($_POST[level]);
echo ("Thank you $logged[username], $member's profile was updated!"); 
$update = mysql_query(UPDATE `members` SET location = '$location', age = '$age', level = '$level', email = '$email' where username = '$member'"); 
} 
break;
}
else
{ 
echo ("Sorry, but only Admins may view this page. Please go back!"); 
} 
?>

Try that one, just whipped it up now.

Posted on Thursday 31st May 2007 at 02:47 PM

MCP

That one is still just a blank page.

Posted on Thursday 31st May 2007 at 07:37 PM

Diablosblizz
Diablosblizz's Avatar

PHP Code

else
{ 
echo ("Sorry, but only Admins may view this page. Please go back!");

Replace that with this:

PHP Code

if($logged[username] && $logged[level] == !6)
{
echo ("Sorry, but only Admins may view this page. Please go back!");

The ! makes sure that the user isn't 6 so it can be anything else.

Not 100% sure if it works.

Posted on Thursday 31st May 2007 at 09:30 PM

SkillMaster
SkillMaster's Avatar

Tsk if you need help please post your code and we can find errors its the only way.

Posted on Thursday 31st May 2007 at 09:35 PM

MCP

Here it is. My entire admin.php code

PHP Code

<?php
session_start(); 
include "config.php"; 
if($logged[username] && $logged[level] == 6)
{ 
switch($_GET[page]) 
{ 
default: 
$fetch = mysql_query("SELECT * FROM `members` ORDER BY username ASC"); 
while($users = mysql_fetch_array($fetch)) 
{ 
echo ("<a href='?page=edit&member=$users[username]'>- $users[username]</a><br>"); 
}
break; 
 
case 'edit': 
$member = $_GET[member];
$user = mysql_query("SELECT * FROM `members` where username = '$member'");
$users = mysql_fetch_array($user); 
echo ("
<form method='POST'> 
<table width='100%'> 
<tr> 
<td align='right' width='25%'> 
User Level</td> 
<td align='left'> 
<select name='level'> 
<option value='2'>User</option> 
<option value='4'>Mod</option> 
<option value='6'>Admin</option> 
</select> </td> 
</tr> 
<tr> 
<td align='right' width='25%'> 
Email</td> 
<td align='left'> 
<input type='text' size='25' maxlength='25' name='email' value='$users[email]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Location</td> 
<td align='left'> 
<input size='25' name='location' value='$users[location]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Age</td> 
<td align='left'> 
<input size='25' name='age'  value='$users[age]'></td> 
</tr> 
<tr> 
<td align='center'></td> 
<td align='left'> 
<input type='submit' name='submit' value='Update'></td> 
</tr> 
</table> 
</form>  
");
if($_POST[submit]) 
{ 
$email = htmlspecialchars($_POST[email]);
$age = htmlspecialchars($_POST[age]); 
$location = htmlspecialchars($_POST[location]); 
$level = htmlspecialchars($_POST[level]);
echo ("Thank you $logged[username], $member's profile was updated!"); 
$update = mysql_query(UPDATE `members` SET location = '$location', age = '$age', level = '$level', email = '$email' where username = '$member'"); 
} 
break;
}
if($logged[username] && $logged[level] == !6)
{
echo ("Sorry, but only Admins may view this page. Please go back!");
} 
?>

Posted on Friday 1st June 2007 at 11:09 PM

SkillMaster
SkillMaster's Avatar

PHP Code

<?php
session_start(); 
include "config.php"; 
if($logged[username] && $logged[level] == 6)
{ 
switch($_GET[page]) 
{ 
default: 
$fetch = mysql_query("SELECT * FROM `members` ORDER BY username ASC"); 
while($users = mysql_fetch_array($fetch)) 
{ 
echo ("<a href='?page=edit&member=$users[username]'>- $users[username]</a><br>"); 
}
break; 
 
case 'edit': 
$member = $_GET[member];
$user = mysql_query("SELECT * FROM `members` where username = '$member'");
$users = mysql_fetch_array($user); 
echo ("
<form method='POST'> 
<table width='100%'> 
<tr> 
<td align='right' width='25%'> 
User Level</td> 
<td align='left'> 
<select name='level'> 
<option value='2'>User</option> 
<option value='4'>Mod</option> 
<option value='6'>Admin</option> 
</select> </td> 
</tr> 
<tr> 
<td align='right' width='25%'> 
Email</td> 
<td align='left'> 
<input type='text' size='25' maxlength='25' name='email' value='$users[email]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Location</td> 
<td align='left'> 
<input size='25' name='location' value='$users[location]'></td> 
</tr> 
<tr> 
<td align='right' width='25%'>Age</td> 
<td align='left'> 
<input size='25' name='age'  value='$users[age]'></td> 
</tr> 
<tr> 
<td align='center'></td> 
<td align='left'> 
<input type='hidden' value='$member' name='member'>
<input type='submit' name='submit' value='Update'></td> 
</tr> 
</table> 
</form>  
");
if($_POST[submit]) 
{ 
$member = htmlspecialchars($_POST[member]);
$email = htmlspecialchars($_POST[email]);
$age = htmlspecialchars($_POST[age]); 
$location = htmlspecialchars($_POST[location]); 
$level = htmlspecialchars($_POST[level]);
echo ("Thank you $logged[username], $members profile was updated!"); 
$update = mysql_query(UPDATE `members` SET location = '$location', age = '$age', level = '$level', email = '$email' where username = '$member'"); 
} 
break;
}
if($logged[username] && $logged[level] == !6)
{
echo ("Sorry, but only Admins may view this page. Please go back!");
} 
?>

Try that.

Posted on Saturday 2nd June 2007 at 12:40 AM

MCP

Nope. Still a blank page.

Posted on Sunday 3rd June 2007 at 08:55 PM

SkillMaster
SkillMaster's Avatar

I can't see anything wrong, If anyone is able to examine over it and find the problem?

Posted on Sunday 3rd June 2007 at 08:56 PM

SkillMaster
SkillMaster's Avatar

As i posted it i found it. change $logged[level] to $logged[userlevel]

That should work.

Posted on Monday 4th June 2007 at 04:59 PM

MCP

Ok I tried that. I ended up with another blank page. :(

This is the code for my admin.php

PHP Code

<?
session_start(); //allows session
include "config.php"; // Includes the config
if($logged[username] && $logged[userlevel] == 6)// Checks you are an admin
{
if($_GET[member])//gets the username
{
if (!$_POST[edit])//Checks if you are editing a user already
{
$user = mysql_query("SELECT * from members where username = '$_GET[member]'");// Selcts the right user from the database
$users = mysql_fetch_array($user);
echo "<form method='POST'>
<table width='100%'>
<tr>
<td align='right' width='25%'>
User Level</td>
<td align='left'>
<select name='level'>
<option value='2'>User</option>
<option value='4'> Mod </option>
<option value='6'> Admin</option>
</select> </td>
</tr>
<tr>
<td align='right' width='25%'>
Email</td>
<td align='left'>
<input type='text' size='25' maxlength='25' name='email'
value='$users[email]'></td>
</tr>
<tr>
<td align='right' width='25%'>Location</td>
<td align='left'>
<input size='25' name='location' value='$users[location]'></td>
</tr>
<tr>
<td align='right' width='25%'>Age</td>
<td align='left'>
<input size='25' name='age'  value='$users[age]'></td>
</tr>
<tr>
<td align='center'></td>
<td align='left'>
<input type='submit' name='edit' value='Update'></td>
</tr>
</table>
</form> 
"; // Displays the form
}else{
$email = htmlspecialchars($_POST[email]);//removes all HTML
$age = htmlspecialchars($_POST[age]);//removes all HTML
$location = htmlspecialchars($_POST[location]);//removes all HTML
$level = htmlspecialchars($_POST[level]);//removes all HTML
echo "Thank you $logged[username], $_GET[member]'s Profile was updated!"; // Shows the message of your choice (feel free to change it)
$update = mysql_query("Update members set location = '$location', age = '$age', level = '$level', email = '$email' where username = '$_GET[member]'"); // updates the user
}
}else{
$adminuser = mysql_query("Select * from members order by username asc"); //Makes a list of all the users in alphabeticle order!
while($adminusers = mysql_fetch_array($adminuser))
{
echo "<a href='admin.php?member=$adminusers[username]'>$users[username]</a>"; //Displayes the links to edit the user.
}
}
}else{
//If someone is trying to get onto this page without being an admin then they wont get through!
echo "Sorry, but only Admins may view this page. Please go back!";
}
?>