PHP - How To Create Admin Panel To My Site

Hi Everybody i am working on admin panel but right now i encounter a problem i can't edit i also can't delete news but insert is working maybe somebody can help me find mistake and fix it up .

You can visit web and see what is what
Admin Panel http://faksx.sytes.net/blogs/?page=cp
Admin Panels news management http://faksx.sytes.net/blogs/?page=news_cp
user andis |pw andis
(don't try hack it won't work)

Here is code  i .
if ($_POST['submit'])
{
        $id          = (int)$_POST['id'];
        $news_title      = mysql_real_escape_string($_POST['news_title']);
        $news_category      = mysql_real_escape_string($_POST['news_category']);
        $news_short_text = mysql_real_escape_string($_POST['news_short_text']);
        $news_text       = mysql_real_escape_string($_POST['news_text']);
        $news_title      = htmlentities($_POST['news_title']);
        $news_category      = htmlentities($_POST['news_category']);
        $news_short_text = htmlentities($_POST['news_short_text']);
        $news_text          = htmlentities($_POST['news_text']);
            
        
    if (!empty($id))
    {
        $sql = ("UPDATE news SET news_title = '$news_title', news_category = '$news_category', news_short_text = '$news_short_text', news_text = '$news_text' WHERE id = '$id' ");
    }
else 
    {
        $sql = "INSERT INTO news (news_title,news_category,news_short_text,news_text,news_author,news_date) VALUES ('".$news_title."','".$news_category."','".$news_short_text."','".$news_text."','".$_SESSION[u_nick]."','".$last_time_seen."')";
        mysql_query($sql) or die (mysql_error());
    }
}        
    if($_GET['edit'] == 1)    
    {
        $id = (int)$_GET['id'];
        $sql = ("DELETE FROM news WHERE id = '$id'");
        mysql_query($sql) or die (mysql_error());
    }
    
    if ($_GET['edit'] == 1)
    {
        $id = (int)$_GET['id'];
        $sql = ("SELECT * FROM news WHERE id = '$id'");
        $date = mysql_query($sql) or die (mysql_error());
        $row = mysql_fetch_array($date);
        $edit_title = $row['news_title'];
        $edit_group = $row['news_category'];
        $edit_short_text = $row['news_short_text'];
        $edit_text = $row['news_text'];
        $edit_id = (int)$row['id'];                
    }    
        
mysqlutf8();
$sql = ("SELECT * FROM news");
$date = mysql_query($sql) or die (mysql_error());
echo '<select>';
while($row = mysql_fetch_array($date))
{
echo "<option value='$row[id]'>".$row[news_title].'</option>'
    ;
}
#" <a href='/blogs/?page=comment&id=".$row['id']."'>Comment</a> "
#"<a href='/blogs/?page=news_cp&edit=id=".$row['id']."'>"
echo '</select>'."<a href='/blogs/?page=news_cp&edit&id=".$row['id']."'><input type='button' name='edit' id='button2' value='Edit' /></a>
  <a href='/blogs/?page=news_cp&delete&id=".$row['id']."'><input type='button' name='delete' id='button3' value='Delete' /></a>";


    echo "<form id='form1' name='submit' method='post'>
  <p>Virsrakts
    <label for='textfield'></label>
  </p>
  <p>
  <input type='text' name='news_title' value='$news_title'>
  </p>
  <p>Zi&#326;u Gruppa</p>
  <p>
    <label for='select'></label>
  <select name='news_category' value='$edit_group'>
    <option>News</option>
    <option>Bugs</option>
  </select>

  </p>
  <p>Teksts</p>
  <p>
    <label for='textfield2'></label>
    <textarea name='news_short_text' cols='50' rows='10' id='textfield2' value='$edit_short_text_text'></textarea>
  </p>
  <p>Pilns Teksts</p>
  <p>
    <label for='textfield3'></label>
    <textarea name='news_text' cols='70' rows='15' id='textfield3' value='$news_text'></textarea>
  </p>
  <p>
    <input type='submit' name='submit' id='button' value='Pievienot' />
    <input type='reset' name='reset' id='button4' value='Reset' />
  </p>
</form>";    
    }

well i have a problem... i have a website running and anyone can get to the admin control panel login page by going to "mywebsite.com/admin" how can i hide this or change it so that they cant get to it unless they know it...?



problem 2... when u visit my website... its shows in the url the path of the file for example... "mywebsite.com/register.php" when on the register page or like "mywebsite.com/sells.php" if on the sells page... how can i hide it so that only my website name is showing and not the path of the file?

Well lately I've decided to split the big script in admin.php(admin control panel file) into several smaller script files such as admin_index.php, admin_settings.php and admin_createuser.php. I was thinking about this idea of locating all menus/submenus to the left hand side of the page and use an iframe to load info from any admin script files. This way the admin can access everything without having to be directed to a different url. I believe this is what Vbulletin has been doing for its ACP(they may have used javascript though), and I have a few questions to ask:

1. Is this a feasible idea, especially if I choose not to use javascript?
2. Is it safe to design admin control panel this way for a PHP script? If not, please lemme know possible security issues?
3. Is it possible to restrict direct access to other admin type script files, but allow access if they are loaded in iframe?

Please do lemme know, thanks.

what am i doing wrong?
 
Parse error: syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /****/*****/*/domains/klikertje.nl/public_html/adminpaneel/index.php on line 123
script of adminpaneel/index.php


<?php
include("../config.php");
include('../cronjobs.php');
$gebruikersnaam = "robin"; //De gewenste gebruikernaam
$wachtwoord     = "rg953gejFDI3c"; //Het gewenste wachtwoord
if(preg_match('/^[a-zA-Z ]+$/D', $_SERVER['PHP_AUTH_USER']) == 0){
if(preg_match('/^[a-zA-Z ]+$/D', $_SERVER['PHP_AUTH_PW']) == 0){
if($_SERVER['PHP_AUTH_USER'] != $gebruikersnaam || $_SERVER['PHP_AUTH_PW'] != $wachtwoord)
{
  header("WWW-Authenticate: Basic realm=\"Beveiliging\"");
  header("HTTP/1.0 401 Unauthorized");
  echo "Je bent niet ingelogd! Probeer het <A HREF=\"javascript:location.reload();\">opnieuw</A>.";
  exit;
}
?>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
   <title>MiljoenenMail</title>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

    <meta name="keywords" content="miljoenenmail" />
    <meta name="description" content="MiljoenenMail" />
    <meta http-equiv="content-language" content="nl" />

    <link href="../css/style.css" rel="stylesheet" type="text/css" />


</head>
<body>
<div id="containermain">
<div id="headercontainer">
<div id="headerleft">
        <div id="logo"><img src="../images/miljoenenmaillogo.png"></div>
<div id="menu">
<ul>
<li class="first"><a href="index.php">Algemeen</a></li>
<li><a href="afmelden.php">Uitloggen</a></li>
<li><a href="profile.php">profiel</a></li>
<li><a href="payout.php">Uitbetaling</a></li>
</ul>
</div>


</div>
<div id="headerright">

<center><i>Welkom Beheerder</i></center>

<table border="0" width="235px" style="margin-top: 5px;" height="85px">
<tr><td><img src="images/parel.png" alt="Parel" /></td><td style="text-align:left;">Parels: <?=$gebruiker->parels?></td><td><img src="images/eurosymbol.png" alt="Euro"  /></td><td style="text-align:left;"><?=$gebruiker->saldo?></td></tr>
<tr><td><img src="images/klikmissie.png" alt="Kliknissie" /></td><td style="text-align:left;">Klikmissie</td><td><img src="images/wallet.png" alt="Uitbetalen"/></td><td style="text-align:left;">Uitbetalen</td></tr>
<tr><td><img src="images/message.png" alt="Berichten" /></td><td style="text-align:left;">Berichten: <b><?=$gebruiker->berichten?></b></td><td><img src="images/nl_flag.png" alt="" /></td><td style="text-align:left;">Nederland</td></tr>
2 </table>

        </div>
</div>

<div id="floatheader"></div>
<div id="tab_understroke"></div>

<div id="container">
<div id="rechtscontainer">
<div id="topblue"></div>

<div id="main">
<p><strong><h2>AdminPaneel</h2></strong></p>
<hr />
<form name="form1" method="post" action="">
  <table  border="0">
    <tr>
      <td>de nieuws/voorpagina wijzigen:</td>
      <?php if(!isset($_POST['Submit'])) { ?>
      <td><input name="nieuws" type="text" size="20" <?php if(isset($nieuws->inhoud)) { ?>value="<?=$nieuws->inhoud?>"<?php } ?>></td>
    </tr>
    <tr>
      <td colspan="2">
      <input type="submit" name="Submit" value="Opslaan">
      </td>
    </tr>
  </table>
</form>
<?php } else {
        if(isset($_POST['nieuws'])     OR $_POST['nieuws']     !== $nieuws->inhoud ) {        mysql_query("UPDATE cmssysteem SET inhoud='".$_POST['nieuws']."'"); }
        echo "bedankt voor je wijzigingen ze zijn succesvol opgeslagen en veel plezier verder met de site admin ;)";
}
?>
</div>

<div id="right">
<div class="title">Statistieken</div>
<div class="right_content">
Aantal leden: <?=$leden?><br />
Leden online: <?=$leden?><br />
Totaal aantal parels: <?=$totaalparels?><br />
&euro; 532,00 uitgekeerd!
</div>

</div>
</div>


<div id="float"></div>

<div id="footer"></div>

</div>
</div>
  <center><table border="0" width="861px">
        <tr><td align="left"><pre>&copy; 2010 Miljoenenmail.nl</pre></td><td align="right"><pre>made by: Ismail Metaich</pre></td></tr>
        </table></center>



</body>
</html>
<?
}
else
{
echo "<html><body>$_SERVER['PHP_AUTH_PW'] bevat cijfers of speciale tekens alleen letters mogelijk!</html></body>"
}

}
else
{
 echo "$_SERVER['PHP_AUTH_USER'] bevat cijfers of speciale tekens alleen letters mogelijk!";
}
?>

Hello.  I'm not  a php programmer.  I just play one on the internet.   Point being that I know enough to make small things happen and can slop some code together for little ideas.  For my newest idea, I'm trying to have a user submitted form that requires admin approval.  I know how to create a form and do the mysql insert, but how I do create a "hold" on the data being sent from a form, so that I can require approval?  I'm looking for the easiest way..  If I need to approve directly through mysql (instead of creating an admin.php page), then that would be fine.  I don't anticipate a lot of submissions.  Just wasn't sure how this is usually handled. 

Thanks!