PHP - [help] Hiding Website.com/admin Control Panel Php?

Hi Everybody i am working on admin panel but right now i encounter a problem i can't edit i also can't delete news but insert is working maybe somebody can help me find mistake and fix it up .

You can visit web and see what is what
Admin Panel http://faksx.sytes.net/blogs/?page=cp
Admin Panels news management http://faksx.sytes.net/blogs/?page=news_cp
user andis |pw andis
(don't try hack it won't work)

Here is code  i .
if ($_POST['submit'])
{
        $id          = (int)$_POST['id'];
        $news_title      = mysql_real_escape_string($_POST['news_title']);
        $news_category      = mysql_real_escape_string($_POST['news_category']);
        $news_short_text = mysql_real_escape_string($_POST['news_short_text']);
        $news_text       = mysql_real_escape_string($_POST['news_text']);
        $news_title      = htmlentities($_POST['news_title']);
        $news_category      = htmlentities($_POST['news_category']);
        $news_short_text = htmlentities($_POST['news_short_text']);
        $news_text          = htmlentities($_POST['news_text']);
            
        
    if (!empty($id))
    {
        $sql = ("UPDATE news SET news_title = '$news_title', news_category = '$news_category', news_short_text = '$news_short_text', news_text = '$news_text' WHERE id = '$id' ");
    }
else 
    {
        $sql = "INSERT INTO news (news_title,news_category,news_short_text,news_text,news_author,news_date) VALUES ('".$news_title."','".$news_category."','".$news_short_text."','".$news_text."','".$_SESSION[u_nick]."','".$last_time_seen."')";
        mysql_query($sql) or die (mysql_error());
    }
}        
    if($_GET['edit'] == 1)    
    {
        $id = (int)$_GET['id'];
        $sql = ("DELETE FROM news WHERE id = '$id'");
        mysql_query($sql) or die (mysql_error());
    }
    
    if ($_GET['edit'] == 1)
    {
        $id = (int)$_GET['id'];
        $sql = ("SELECT * FROM news WHERE id = '$id'");
        $date = mysql_query($sql) or die (mysql_error());
        $row = mysql_fetch_array($date);
        $edit_title = $row['news_title'];
        $edit_group = $row['news_category'];
        $edit_short_text = $row['news_short_text'];
        $edit_text = $row['news_text'];
        $edit_id = (int)$row['id'];                
    }    
        
mysqlutf8();
$sql = ("SELECT * FROM news");
$date = mysql_query($sql) or die (mysql_error());
echo '<select>';
while($row = mysql_fetch_array($date))
{
echo "<option value='$row[id]'>".$row[news_title].'</option>'
    ;
}
#" <a href='/blogs/?page=comment&id=".$row['id']."'>Comment</a> "
#"<a href='/blogs/?page=news_cp&edit=id=".$row['id']."'>"
echo '</select>'."<a href='/blogs/?page=news_cp&edit&id=".$row['id']."'><input type='button' name='edit' id='button2' value='Edit' /></a>
  <a href='/blogs/?page=news_cp&delete&id=".$row['id']."'><input type='button' name='delete' id='button3' value='Delete' /></a>";


    echo "<form id='form1' name='submit' method='post'>
  <p>Virsrakts
    <label for='textfield'></label>
  </p>
  <p>
  <input type='text' name='news_title' value='$news_title'>
  </p>
  <p>Zi&#326;u Gruppa</p>
  <p>
    <label for='select'></label>
  <select name='news_category' value='$edit_group'>
    <option>News</option>
    <option>Bugs</option>
  </select>

  </p>
  <p>Teksts</p>
  <p>
    <label for='textfield2'></label>
    <textarea name='news_short_text' cols='50' rows='10' id='textfield2' value='$edit_short_text_text'></textarea>
  </p>
  <p>Pilns Teksts</p>
  <p>
    <label for='textfield3'></label>
    <textarea name='news_text' cols='70' rows='15' id='textfield3' value='$news_text'></textarea>
  </p>
  <p>
    <input type='submit' name='submit' id='button' value='Pievienot' />
    <input type='reset' name='reset' id='button4' value='Reset' />
  </p>
</form>";    
    }

Well lately I've decided to split the big script in admin.php(admin control panel file) into several smaller script files such as admin_index.php, admin_settings.php and admin_createuser.php. I was thinking about this idea of locating all menus/submenus to the left hand side of the page and use an iframe to load info from any admin script files. This way the admin can access everything without having to be directed to a different url. I believe this is what Vbulletin has been doing for its ACP(they may have used javascript though), and I have a few questions to ask:

1. Is this a feasible idea, especially if I choose not to use javascript?
2. Is it safe to design admin control panel this way for a PHP script? If not, please lemme know possible security issues?
3. Is it possible to restrict direct access to other admin type script files, but allow access if they are loaded in iframe?

Please do lemme know, thanks.

please i need tutorial to learn me how to create admin panel like jommla or other >>>

please dont late to answer this is my first topic

Hello,   I am making a UCP to go along side a game server. The game server adds a mysql row when a account is created and places the password under Whirlpool encryption.   I am looking for someone who can help me make a basic login page that needs to enter a user name and password, with the password then encrypting to Whirlpool or whatever needs to be done for the login to be a success.   I am a total new guy to HTML / PHP scripting and looking to do this as a learning project.

what am i doing wrong?
 
Parse error: syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /****/*****/*/domains/klikertje.nl/public_html/adminpaneel/index.php on line 123
script of adminpaneel/index.php


<?php
include("../config.php");
include('../cronjobs.php');
$gebruikersnaam = "robin"; //De gewenste gebruikernaam
$wachtwoord     = "rg953gejFDI3c"; //Het gewenste wachtwoord
if(preg_match('/^[a-zA-Z ]+$/D', $_SERVER['PHP_AUTH_USER']) == 0){
if(preg_match('/^[a-zA-Z ]+$/D', $_SERVER['PHP_AUTH_PW']) == 0){
if($_SERVER['PHP_AUTH_USER'] != $gebruikersnaam || $_SERVER['PHP_AUTH_PW'] != $wachtwoord)
{
  header("WWW-Authenticate: Basic realm=\"Beveiliging\"");
  header("HTTP/1.0 401 Unauthorized");
  echo "Je bent niet ingelogd! Probeer het <A HREF=\"javascript:location.reload();\">opnieuw</A>.";
  exit;
}
?>


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
   <title>MiljoenenMail</title>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

    <meta name="keywords" content="miljoenenmail" />
    <meta name="description" content="MiljoenenMail" />
    <meta http-equiv="content-language" content="nl" />

    <link href="../css/style.css" rel="stylesheet" type="text/css" />


</head>
<body>
<div id="containermain">
<div id="headercontainer">
<div id="headerleft">
        <div id="logo"><img src="../images/miljoenenmaillogo.png"></div>
<div id="menu">
<ul>
<li class="first"><a href="index.php">Algemeen</a></li>
<li><a href="afmelden.php">Uitloggen</a></li>
<li><a href="profile.php">profiel</a></li>
<li><a href="payout.php">Uitbetaling</a></li>
</ul>
</div>


</div>
<div id="headerright">

<center><i>Welkom Beheerder</i></center>

<table border="0" width="235px" style="margin-top: 5px;" height="85px">
<tr><td><img src="images/parel.png" alt="Parel" /></td><td style="text-align:left;">Parels: <?=$gebruiker->parels?></td><td><img src="images/eurosymbol.png" alt="Euro"  /></td><td style="text-align:left;"><?=$gebruiker->saldo?></td></tr>
<tr><td><img src="images/klikmissie.png" alt="Kliknissie" /></td><td style="text-align:left;">Klikmissie</td><td><img src="images/wallet.png" alt="Uitbetalen"/></td><td style="text-align:left;">Uitbetalen</td></tr>
<tr><td><img src="images/message.png" alt="Berichten" /></td><td style="text-align:left;">Berichten: <b><?=$gebruiker->berichten?></b></td><td><img src="images/nl_flag.png" alt="" /></td><td style="text-align:left;">Nederland</td></tr>
2 </table>

        </div>
</div>

<div id="floatheader"></div>
<div id="tab_understroke"></div>

<div id="container">
<div id="rechtscontainer">
<div id="topblue"></div>

<div id="main">
<p><strong><h2>AdminPaneel</h2></strong></p>
<hr />
<form name="form1" method="post" action="">
  <table  border="0">
    <tr>
      <td>de nieuws/voorpagina wijzigen:</td>
      <?php if(!isset($_POST['Submit'])) { ?>
      <td><input name="nieuws" type="text" size="20" <?php if(isset($nieuws->inhoud)) { ?>value="<?=$nieuws->inhoud?>"<?php } ?>></td>
    </tr>
    <tr>
      <td colspan="2">
      <input type="submit" name="Submit" value="Opslaan">
      </td>
    </tr>
  </table>
</form>
<?php } else {
        if(isset($_POST['nieuws'])     OR $_POST['nieuws']     !== $nieuws->inhoud ) {        mysql_query("UPDATE cmssysteem SET inhoud='".$_POST['nieuws']."'"); }
        echo "bedankt voor je wijzigingen ze zijn succesvol opgeslagen en veel plezier verder met de site admin ;)";
}
?>
</div>

<div id="right">
<div class="title">Statistieken</div>
<div class="right_content">
Aantal leden: <?=$leden?><br />
Leden online: <?=$leden?><br />
Totaal aantal parels: <?=$totaalparels?><br />
&euro; 532,00 uitgekeerd!
</div>

</div>
</div>


<div id="float"></div>

<div id="footer"></div>

</div>
</div>
  <center><table border="0" width="861px">
        <tr><td align="left"><pre>&copy; 2010 Miljoenenmail.nl</pre></td><td align="right"><pre>made by: Ismail Metaich</pre></td></tr>
        </table></center>



</body>
</html>
<?
}
else
{
echo "<html><body>$_SERVER['PHP_AUTH_PW'] bevat cijfers of speciale tekens alleen letters mogelijk!</html></body>"
}

}
else
{
 echo "$_SERVER['PHP_AUTH_USER'] bevat cijfers of speciale tekens alleen letters mogelijk!";
}
?>