sorry maar ben er niet echt in thuis
, zou iemand het misschien voor me aan willen passen ??
hieronder het admin script:
<?php
include "connect.php";
include "ubb.php";
?>
<html>
<head>
<title>Gastenboek DeDrieBiertjes</title>
<link rel="stylesheet" type="text/css" href="layout.css">
</head>
<body bgcolor="#003366"><center>
<table bgcolor="#EEEEEE"><tr>
<td><b><font color="#666666">Gastenboek-Admin</font></b></td>
</tr></table><br>
<?php
$admin = "D3B";
$wachtwoord = "WW";
//uitloggen
if (isset($uitloggen)) { session_destroy();
echo "<script>location.href='index.php'</script>"; }
//logincheck
if ($_POST['login']) {
if ($_POST['naam'] == $admin AND $_POST['wachtwoord'] == $wachtwoord){
session_register(gastenboekadmin);
} else { echo "<table><tr><td align=center><b>Fout! Pannenkoek!</b></td></tr></table><br>";}}
//ff kijken of sessie is aangemaakt
if(session_is_registered("gastenboekadmin")){
//bericht edit-form
if (isset($editid)) {
$sql = "SELECT * FROM gastenboek WHERE id='$editid'";
$resultaat = mysql_query($sql) or die ("query mislukt");
$rij = mysql_fetch_object($resultaat);
$naam = htmlspecialchars($rij->naam);
$email = htmlspecialchars($rij->email);
$homepage = htmlspecialchars($rij->homepage);
$bericht = htmlspecialchars($rij->bericht);?>
<table><form method="post" action="<? echo "$PHP_SELF"; ?>" name="gastenboek"><input type="hidden" name="editid" value="<? echo "$editid"; ?>">
<tr><td><b><font color="#666666">Reactie toevoegen</font></b></td></tr>
<tr><td width="150">Naam:</td><td width="250"><input type="text" name="naam" size="35" value="<? echo "$naam"; ?>"></td></tr>
<tr><td width="150">Email:</td><td width="250"><input type="text" name="email" size="35" value="<? echo "$email"; ?>"></td></tr>
<tr><td width="150">Homepage:</td><td width="250"><input type="text" name="homepage" size="35" value="<? echo "$homepage"; ?>"></td></tr>
<tr><td valign="top">Reactie:</td><td><textarea name="bericht" cols="34" rows="5"><? echo "$bericht"; ?></textarea><br><? show_ubb(); ?></td></tr>
<tr><td></td><td><input type="submit" name="submit" value="wijzigen"></td></tr></form></table><br>
<? }
//bericht deleten
if (isset($deleteid)) {
mysql_query ("DELETE FROM gastenboek WHERE id='$deleteid'"); }
//bericht editen
if ($_POST['submit']) {
mysql_query("UPDATE gastenboek SET naam='".$_POST[naam]."',email='".$_POST."',homepage='".$_POST[homepage]."',bericht='".$_POST[bericht]."' WHERE id = '".$editid."'") or die(mysql_error());
echo "<script>location.href='$PHP_SELF'</script>";}
//alle berichten weergeven ?>
<? $sql = "SELECT * FROM gastenboek ORDER BY datum DESC";
$resultaat = mysql_query($sql) or die ("query mislukt");?>
<?php while ($rij = mysql_fetch_object($resultaat)){
$naam = htmlspecialchars($rij->naam);
$email = htmlspecialchars($rij->email);
$homepage = htmlspecialchars($rij->homepage);
$bericht = htmlspecialchars($rij->bericht);
set_smilies($bericht);
echo "<table><tr><td width=60><a href=$PHP_SELF?editid=".$rij->id."><img src=\"smilies/edit.png\" border=\"0\"></a><a href=$PHP_SELF?deleteid=".$rij->id."><img src=\"smilies/del.png\" border=\"0\"></a></td><td width=120><a href=mailto:".$email."><b>".$naam."</b></a><br><font size=1>";
if ($homepage=="" OR $homepage=="http://") {} else {
echo "<a href=\"".$homepage."\" target=\"_blan\">website</a>"; }
echo"</font></td><td width=220>".$bericht."</td></tr></table><br>"; }
echo "<a href=$PHP_SELF?uitloggen=0>Log uit</a>";
} else
{ //login-form ?>
<table width="400"><form method="post" action="admin.php">
<tr>
<td width="150"><b><font color="#666666">Inloggen</font></b></td>
<td width="250"></td></tr>
<tr><td>Naam:</td><td><input type="text" name="naam" size="35"></td></tr>
<tr><td>Wachtwoord:</td><td><input type="password" name="wachtwoord" size="35"></td></tr>
<tr><td></td><td><input type="submit" name="login" value="login"></td></tr>
</form></table>
<?php } ?>
</center></body>
</html>
