Report & Warn Script

CREATE TABLE `reps` (
`id` INT( 11 ) NOT NULL auto_increment,
`username` VARCHAR( 255 ) NOT NULL,
`reason` TEXT NOT NULL,
`date` VARCHAR( 255 ) NOT NULL,
`reported_by` VARCHAR( 255 ) NOT NULL,
PRIMARY KEY(`id`)
);
 
CREATE TABLE warnings (
`id` INT( 11 ) NOT NULL auto_increment,
`user` VARCHAR( 255 ) NOT NULL,
`reason` TEXT NOT NULL,
`from` VARCHAR( 255 ) NOT NULL,
`date` VARCHAR( 255 ) NOT NULL,
PRIMARY KEY(`id`)
);

<?php
if(!$logged['username']){//check for logged username
	print "<h2>Error</h2>
	<p>
	You Are Not Logged In
	</p>"; //they aren't so give err
}else{ //or
	if(!$_POST['report']){ //form wasn't submitted
		print "<h2>Report User</h2>
		<form method=\"post\" action=\"$_SERVER[PHP_SELF]\">
		<p>
		<label>Username</label>
		<input type=\"text\" name=\"user\" size=\"30\" />
		<label>Reason</label>
		<textarea cols=\"25\" rows=\"5\" name=\"reason\"></textarea>
		<input type=\"submit\" name=\"report\" value=\"Report User\" />
		</p>
		</form>"; //give the form to report someone :)
	}else{ //or...
		$user = protect($_POST['user']); //protect the username being reported
		$reason = protect($_POST['reason']); //protect the text input again
		$date = date("d-m-y h:i A"); //today's date
		$from = $logged['username']; //logged user :)
		if(empty($user) || empty($reason)){ //something was empty!!!!
			print "<h2>Error</h2>
			<p>
			You Must Fill Out The Form Completely
			</p>"; //haha you fail!
		}else{ //or not?
			$insert = mysql_query("INSERT INTO `reps` (`username`,`reason`,`date`,`reported_by`) VALUES ( '$user','$reason','$date','$from');"); //insert the data
			if(mysql_error()){ //poo theres an error
				print "<h2>Error</h2>
				<p>" . mysql_error() . "</p>"; //echo the error
			}else{ //or...
				print "<h2>Success</h2>
				<p>
				Report Sent!
				</p>"; //no error
			} //end error check
		} //end empty check
	}//end form check
} //end logged in check
?>

<?php
if(!$logged['username']){ //check logged user
	print "<h2>Error</h2>
	<p>
	You Are Not Logged In!
	</p>"; //nope
}elseif($logged['username'] && $logged['userlevel'] < '4'){ //not an admin or mod
	print "<h2>Error</h2>
	<p>
	You Do Not Have Access to this Function.
	</p>"; //give error >:|
}else{ //or they are :D
	switch($_GET['x']){ //make multiple pages
		default: //default
			$get_reps = mysql_query("SELECT * FROM `reps` ORDER BY `id` DESC"); //get all reports
			if(mysql_num_rows($get_reps) == 0){ //none >:(
				print "<h2>No Reports</h2>
				<p>
				There are No Reports in the Database.
				</p>"; //woohoo error!!
			}else{ //or not >)
				print "<table width=\"500\">
				<tr>
				<td align=\"left\" valign=\"middle\">
				<b>User</b>
				</td>
				<td align=\"left\" valign=\"middle\">
				<b>Reported By</b>
				</td>
				<td align=\"left\" valign=\"middle\">
				<b>Reason</b>
				</td>
				<td align=\"left\" valign=\"middle\">
				<b>Date Sent</b>
				</td>
				<td align=\"center\" valign=\"middle\">
				<b>Options</b>
				</td>
				</tr>"; //table headers
				while($reps = mysql_fetch_array($get_reps)){ //make a loop for the reports to be shown
					print "<tr>
					<td align=\"left\" valign=\"middle\">
					$reps[username]
					</td>
					<td align=\"left\" valign=\"middle\">
					$reps[reported_by]
					</td>
					<td align=\"left\" valign=\"middle\">
					$reps[reason]
					</td>
					<td align=\"left\" valign=\"middle\">
					$reps[date]
					</td>
					<td align=\"center\" valign=\"middle\">
					<a href=\"repcp.php?x=warn&id=$reps[id]\">Warn $reps[username]</a>&nbsp;||&nbsp;
					<a href=\"repcp.php?x=delete&id=$reps[id]\">Delete Report</a>
					</td>
					</tr>"; //yay for data to be shown :)
				} //end the loop :(
			} //end the reports check
			break; //end the default page
		case 'warn': //haha i get to warn the dude >:)
			$id = (int) addslashes($_GET['id']); //make the ID Safe
			if(!$id){ //no id sucker!
				print "<h2>Error</h2>
				<p>
				No ID Selected
				</p>"; //haha you got an error
			}else{ //or not :(
				$check = mysql_query("SELECT * FROM `reps` WHERE `id` = '$id';"); //check to make sure
				if(mysql_num_rows($check) == 0){ //lol you still got an error >:)
					print "<h2>Error</h2>
					<p>
					Invalid ID Selected.
					</p>"; //give him/her what they came for!
				}else{ //or not...
					$array = mysql_fetch_array($check); //array the data
					if(!$_POST['warn']){ //warn form wasn't submitted
						print "<h2>Warn $array[username]</h2>
						<form method=\"post\" action=\"$_SERVER[PHP_SELF]?x=warn&id=$id\">
						<p>
						<label>Reason</label>
						<textarea rows=\"5\" cols=\"25\" name=\"reason\"></textarea>
						<input type=\"submit\" name=\"warn\" value=\"Warn $array[username]\">
						</p>
						</form>"; //give the reasoning form :)
					}else{ //chyea the form was submitted
						$reason = protect($_POST['reason'])); //make the reason safe
						$date = date("m-d-y h:i A"); //the date
						$from = $logged['username']; //who warned
						if(empty($reason)){ //reason was empty
							print "<h2>Error</h2>
							<p>
							You Must Give A Reason
							</p>"; //lol you got an error
						}else{ //darn. your not.
							$insert = mysql_query("INSERT INTO `warns` (`user`,`reason`,`from`,`date`) VALUES ('$array[username]','$reason','$from','$date');"); //warn the user
							$delete = mysql_query("DELETE FROM `warns` WHERE `id` = '$id';"); //delete the report
							if(!mysql_error()){ //no mySQL Error
								print "<h2>Success</h2>
								<p>
								$array[user] Has Been Warned!
								</p>"; //yay they were warned!
							}else{ //or not
								print "<h2>Error</h2>
								<p>
								".mysql_error()."
								</p>"; //HAHA YOU GOT AN ERROR
							} //end error check
						} //end empty form check
					} //end the form submit check
				} //end the verification check
			} //end the final check if id is there or not xD
			break;
		case 'delete': //the delete report page >:)
			$id = (int) addslashes($_GET['id']); //make the ID safe
			if(!$id){ //no id HAHA
				print "<h2>Error</h2>
				<p>
				No ID Selected
				</p>"; //lol you got an error
			}else{ //there was an id D:
				$check = mysql_query("SELECT * FROM `reps` WHERE `id` = '$id';"); //check DB for ID
				if(mysql_num_rows($check) == 0){ //haha not found
					print "<h2>Error</h2>
					<p>
					Invalid ID Selected
					</p>"; //invalid ID
				}else{ //its found :) :(
					$delete = mysql_query("DELETE FROM `reps` WHERE `id` = '$id';"); //delete it 
					if(!mysql_error()){ //no error
						print "<h2>Success</h2>
						<p>
						Report Deleted
						</p>"; //yay!!
					}else{ //or not....
						print "<h2>Error</h2>
						<p>
						".mysql_error()."
						</p>"; //you got an error
					} //end error check
				} //end verification check
			} //end first id check
			break; //end the page
	}//end the switch function
} //end logged username check
?>

<?php
if(!$logged['username']){ //not logged in
	print "<h2>Error</h2>
	<p>
	You Are not Logged In
	</p>"; //lol error
}else{ //or they are
	print "<h2>Your Warnings</h2>
	<table width=\"400\">
	<tr>
	<td align=\"left\" valign=\"middle\">
	<b>Warned By</b>
	</td>
	<td align=\"left\" valign=\"middle\">
	<b>Reason</b>
	</td>
	<td align=\"left\" valign=\"middle\">
	<b>Date Warned</b>
	</td>
	</tr>"; //table headers
	$get_warns = mysql_query("SELECT * FROM `warns` WHERE `user` = '$logged[username]';"); //get the users warns
	while($warns = mysql_fetch_array($get_warns)){ //loop them
		print "<tr>
		<td align=\"left\" valign=\"middle\">
		$warns[from]
		</td>
		<td align=\"left\" valign=\"middle\">
		$warns[reason]
		</td>
		<td align=\"left\" valign=\"middle\">
		$warns[date]
		</td>
		</tr>"; //display their warns
	} //end loop
	print "	</table>"; //end table
}
?>