PHP - Moved: Update The Database

Hi i have this simple update form and scrip but somehow it doesnt seem to be update the field on the database can someone help out please.
The html form is the second form bellow where the action send to status_update.php
HTML FORM
Code: [Select]
<?php                include("../header.html");            ?>
<?php                include("header_news.html");            
extract($_REQUEST,EXTR_SKIP);
?><?php            
/*                print("sfilm_refnum = $sfilm_refnum<BR>");                
print("sfilm_addr01 = $sfilm_addr01<BR>");                
print("sfilm_postcode = $sfilm_postcode<BR>");                
print("Film Client = $fclient<BR>");            */             
?>           
<form id="search" action="list.php" method="post" name="search">               
<table width="780" border="0" cellspacing="0" cellpadding="4" bgcolor="#eeeeee">                   
<tr>                       
<td align="right" width="140"></td>                       
<td width="320"><span class="hofblack10">                           
</span>                           
</td>                       
<td align="center" width="100"><input type="hidden" name="lstart" value="<?php print("$lstart"); ?>" /><input type="hidden" name="lend" value="<?php print("$lend"); ?>" /><input type="hidden" name="lamount" value="<?php print("$lamount"); ?>" /></td>                        <td align="center" width="100"></td>                       
<td align="right"></td>                   
</tr>               
</table>           
</form>           
<table width="780" border="0" cellspacing="0" cellpadding="4" bgcolor="#4050c4">               
<tr>                 
<td width="60" class="hofwhite10">action</td>                   
<td width="140"><span class="hofwhite14">DATE</span></td>                   
<td width="80"><span class="hofwhite14">ID</span></td>                   
<td><span class="hofwhite14">News Titile</span></td>                   
<td width="100"><span class="hofwhite14">Status</span></td>               
</tr>               
<tr height="0">                 
<td bgcolor="white" width="60"></td>                   
<td bgcolor="white" width="140" height="0"></td>                   
<td bgcolor="white" width="80" height="0"></td>                   
<td bgcolor="white" height="0"></td>                   
<td bgcolor="white" width="100" height="0"></td>               
</tr>           
</table><table width="780" border="0" cellspacing="0" cellpadding="4"><tr>                   
<td width="60"></td>                 
<td width="80"></td>                   
<td><a class="blueullrg" href="add.php">Add News</a></td>                   
<td align="right" width="120"></td>               
</tr>               
<tr height="0">                   
<td width="60" height="0"></td>                 
<td width="80" height="0"></td>                   
<td height="0"></td>                   
<td align="right" width="120" height="0"></td>               
</tr>           
</table>  <?php          
//get the DB connection variables    
include("../../../includes/config.php");        
//connect to DB        
$connection = @mysql_connect($db_address,$db_username,$db_password) or die("Couldn't CONNECT.");        
$db = @mysql_select_db($db_name, $connection) or die("Couldn't select DATABASE.");                
$query2="SELECT * FROM news WHERE !(news_status='deleted')";        
$result2 = mysql_query($query2) or die("Couldn't execute QUERY - Select NEWS Qty");        
$fqty = mysql_num_rows($result2);            
//SELECT or FIND the same USERNAME        
$query3="SELECT * FROM news WHERE !(news_status='deleted') ORDER BY news_id DESC";        
$result3 = mysql_query($query3) or die("Couldn't execute QUERY - Select NEWS");        
while ($row = mysql_fetch_array($result3))            
{                
$news_id                 = $row['news_id'];                
$news_title                = $row['news_title'];                
$news_story                = $row['news_story'];                
$news_image                = $row['news_image'];                
$news_image_caption        = $row['news_image_caption'];                
$news_image_link        = $row['news_image_link'];                
$news_date_day            = $row['news_date_day'];                
$news_date_month        = $row['news_date_month'];                
$news_date_year            = $row['news_date_year'];                
$news_status            = $row['news_status'];                
$news_website            = $row['news_website'];                
$news_date_created        = $row['news_date_created'];        
        $news_date_modified        = $row['news_date_modified'];    ?>           
        <table width="780" border="0" cellspacing="0" cellpadding="4" bgcolor="#eeeeee">               
        <tr>                 
        <td width="60"><span class="hofblack10">                   
         <?php                    
         if($news_status=="deleted"){                        
         print("<a class='hifblack10'>deleted</span>");                    
         }ELSE{                        
         print("<a class='blueul' href='edit.php?id=$news_id'>edit</a>");                    
         }                    
         ?>                 
          </span></td>                   
          <td width="140"><span class="titlegrey12">                     
          <?php                      
          if(!$news_date_day) 
          { echo "00"; }
          else{ echo $news_date_day; }                      
          echo "/";                     
           if(!$news_date_month) { echo "00"; }else{ echo $news_date_month; }                      
           echo "/";                      
           if(!$news_date_year) { echo "0000"; }else{ echo $news_date_year; }                    
           ?>                   
           </span></td>                   
           <td width="80"><span class="titlegrey12"><?php                    print("$news_id");                    ?></span>
           </td>                   
           <td><?php                    
           if($news_status=="deleted")
           {                        
           print("<class='hofblack10'>$news_title</span>");                    
           }ELSE{                        
           print("<a class='blueul' href='edit.php?id=$news_id'>$news_title</a>");                    
           }                    
           ?></td>                   
           <td width="100">                       
           <form id="list_update" action="status_update.php" method="post" name="list_update">                           
        <select name="newnstatus" size="1">                               
           <option  <?php if($row['news_status'] == "") 
           {
            print("selected");
           } ?>
           selected="selected" value="">Status...</option>                               
           <option  <?php if($row['news_status'] == "on")
           {
            print("selected");
           } ?> value="on">On</option>
               <option  <?php if($row['news_status'] == "off")
           {
            print("selected");
           } ?> value="off">Off</option>
            <option  <?php if($row['news_status'] == "deleted")
           {
            print("selected");
           } ?> value="deleted">Delete</option>
        </select>
         <input type="hidden" name="nstatus" value="<?php echo $row[news_status]; ?>" />                           
           <input type="hidden" name="id" value="<?php echo $row[news_id]; ?>" />                       
           <input type="submit" name="update" value="update" />                       
           </form>                     
            </td>               
            </tr>               
            <tr height="0">                 
            <td bgcolor="white" width="60"></td>                   
            <td bgcolor="white" width="140" height="0"></td>                   
            <td bgcolor="white" width="80" height="0"></td>                   
            <td bgcolor="white" height="0"></td>                   
            <td bgcolor="white" width="100" height="0"></td>               
            </tr>           
            </table>
            <?php            }        mysql_close($connection);//}?>           
            <table width="780" border="0" cellspacing="0" cellpadding="4">         
            <tr>                   
            <td width="60"></td>                 
            <td width="80"></td>                   
            <td><a class="blueullrg" href="add.php">Add News</a></td>                   
            <td align="right" width="120"></td>               
            </tr>           
            </table><?php                // include("list_navigation.html");            ?>
            <?php                include("../footer.html");            ?>
            </div></body></html>
The action script php
Code: [Select]
<?php
/*    echo "fstatus: ".$fstatus."<BR>";    
echo "id: ".$id."<BR>";    
echo "fclient: ".$fclient."<BR>";    
echo "newfstatus: ".$newfstatus."<BR>";*/    
//set the date of agreement        
$timestamp = date('l jS \of F Y h:i:s A');    
//get the DB connection variables        
include("../../../includes/config.php");
//connect to DB        
$connection = @mysql_connect($db_address,$db_username,$db_password) or die("Couldn't CONNECT.");        
$db = @mysql_select_db($db_name, $connection) or die("Couldn't select FILMS DATABASE.");    
// All appears well, so enter into database                
$query= "UPDATE news SET news_status = '$newnstatus' WHERE news_id='$id'";

$result = mysql_query($query) or die("could not execute query - Update FILMS Record to DB");    
//setup an email to the Admin @ hof, w/o attachment            
$emailto="xx@xxx.co.uk";        
$emailfrom="no-reply@xxxx.co.uk";        
$emailsubject="xx Record Updated";        
$emailmessage="Hello Registrar\n\n";        
$emailmessage.="News ID: ".$id."\n";        
$emailmessage.="Updated on: ".$timestamp."\n\n";        
$emailmessage.="Status was: ".$nstatus."\n";        
$emailmessage.="Status now: ".$newfnstatus."\n";        
$emailmessage.="Thank you,\n\n";        
$emailmessage.="Web Site ROBOT\n";        
$emailmessage.="(Administrator)\n";        
$emailmessage.="xxx.co.uk | xxx.biz\n";        
$emailmessage.="----------------------------------------------\n";        
$emailmessage.="e. http://www.xxx.co.uk/contact.php\n";        
$emailmessage.="w. http://www.xxx.co.uk\n";        
$emailheader="From: xxx.co.uk<$emailfrom>";
$emailheader  .= 'Cc: xxx@xxx.co.uk'."\r\n";
$emailheader  .= 'Bcc: xxx@xxxxx.co.uk'."\r\n";        
$ok=mail($emailto,$emailsubject,$emailmessage,$emailheader);        
mysql_close($connection);            
if ($ok)
 {        
 header("Location: list.php"); 
 /* Redirect browser */        
 exit;    
 } else {        
 $errmsg="There was a problem, please try later or telephone us direct.";        
 $errsta="1";        
 include("edit_error.html");        
 //echo "<p>Mail could not be sent. Sorry!</p>";        
 exit;    
 }        
 ?> Thanks in advance

I'm trying to update my database so that if someone enters an e-mail address that doesn't exist, the program updates the database with the new address. I've tested everything and $result returns the correct data every time (0 or 1) but if the address doesn't exist, nothing gets updated. I know I'm missing something, just not sure what it is...
Code: [Select]
{
$result = mysql_query("
SELECT *
FROM PlayerInfo
WHERE Player_Email = '$playeremail'");

IF($result) {

     IF (mysql_num_rows($result) = 0)
{
//Insert into database: new e-mail address...
}
}
I've also tested the insert into statement and it works, so that's not the issure.  Any help appreciated. Thanks.

Hi guys,

I have had to make some changes to a database that I updated hockey players stats with. Since doing this I can no longer edit player stats in my admin section of the website. I was wondering if someone could possibly have a look at it for me. It is driving me nuts not being able to fix it.

What should happen is: I choose the player from a list of teams to update. Their stats show up on next page in a table for the different competitions they play in (league, cup, play-offs). I could then update the stats and then once pressing the edit button at the bottom, this then updates my SQL database.

Can anyone help?
<?php if ($stat==1) { 
// normal players 
$table = "players"; }
else  {
// snl_players
$table ="snl_players"; }

if ($act==edit) {
$query11 = "SELECT * FROM `$table` WHERE `PlayerID` = '$PlayerID'";
$result11 = mysql_query($query11) or die ('Error: Sh2');
$rows = mysql_fetch_array($result11);
$PlayerID = $rows['PlayerID'];
$TeamID = $rows['TeamID'];
$Team = $rows['Team'];
$Player = $rows['Player'];
$Games = $rows['Games'];
$Goals = $rows['Goals'];
$PPGoals = $rows['PPGoals'];
$SHGoals = $rows['SHGoals'];
$Assists = $rows['Assists'];
$PIM = $rows['PIM'];
$Points = $rows['Points'];
$GamesCup = $rows['GamesCup'];
$GoalsCup = $rows['GoalsCup'];
$PPGoalsCup = $rows['PPGoalsCup'];
$SHGoalsCup = $rows['SHGoalsCup'];
$AssistsCup = $rows['AssistsCup'];
$PIMCup = $rows['PIMCup'];
$PointsCup = $rows['PointsCup'];
/* $GamesNPL = $rows['GamesNPL'];
$GoalsNPL = $rows['GoalsNPL'];
$PPGoalsNPL = $rows['PPGoalsNPL'];
$SHGoalsNPL = $rows['SHGoalsNPL'];
$AssistsNPL = $rows['AssistsNPL'];
$PIMNPL = $rows['PIMNPL'];
$PointsNPL = $rows['PointsNPL']; */
$GamesPO = $rows['GamesPO'];
$GoalsPO = $rows['GoalsPO'];
$PPGoalsPO = $rows['PPGoalsPO'];
$SHGoalsPO = $rows['SHGoalsPO'];
$AssistsPO = $rows['AssistsPO'];
$PIMPO = $rows['PIMPO'];
$PointsPO = $rows['PointsPO'];
$Nationality = $rows['Nationality'];

$query11 = "SELECT * FROM `teams` WHERE `TeamID` = '$TeamID'";
$result11 = mysql_query($query11) or die ('Error: Sh2');
$rows = mysql_fetch_array($result11);
$TeamName = $rows['TeamName'];


echo ("<form name=\"form1\" method=\"post\" action=\"playerstats.php?act=editdo&PlayerID=$PlayerID&stat=$stat\">
  <table width=\"80%\" border=\"0\">
    <tr>
      <td width=\"30%\" class=\"data\">Player Name </td>
      <td width=\"70%\"><input name=\"Player\" type=\"text\" id=\"Player\" value=\"$Player\"></td>
    </tr>
    <tr>
      <td class=\"data\">Associated Team ID </td>
      <td class=\"data\">  <select name=\"TeamID\">");
  
$query11 = "SELECT * FROM `teams`";
$result11 = mysql_query($query11) or die ('Error: Sh2');
while ( $rows = mysql_fetch_array($result11) ) {
$TeamName = $rows['TeamName'];   
$TeamID2 = $rows['TeamID'];
  
  if ($TeamID==$TeamID2) { echo("    <option value=\"$TeamID2\" selected>$TeamName</option>"); } else {
  echo("    <option value=\"$TeamID2\">$TeamName</option>"); }
  }
  
  
  echo("</select></td>
    </tr>
    <tr>
      <td class=\"data\">Games</td>
      <td><input name=\"Games\" type=\"text\" id=\"Games\" size=\"6\" value=\"$Games\"></td>
    </tr>
    <tr>
      <td class=\"data\">Goals</td>
      <td><input name=\"Goals\" type=\"text\" id=\"Goals\" size=\"6\" value=\"$Goals\"></td>
    </tr>    <tr>
      <td class=\"data\">PPGoals</td>
      <td><input name=\"PPGoals\" type=\"text\" id=\"Goals\" size=\"6\" value=\"$PPGoals\"></td>
    </tr>    <tr>
      <td class=\"data\">SHGoals</td>
      <td><input name=\"SHGoals\" type=\"text\" id=\"Goals\" size=\"6\" value=\"$SHGoals\"></td>
    </tr>
    <tr>
      <td class=\"data\">Assists</td>
      <td><input name=\"Assists\" type=\"text\" id=\"Assists\" size=\"6\" value=\"$Assists\"></td>
    </tr>
    <tr>
      <td class=\"data\">PIM</td>
      <td><input name=\"PIM\" type=\"text\" id=\"PIM\" size=\"6\" value=\"$PIM\"></td>
    </tr>
    <tr>
      <td class=\"data\">Points</td>
      <td><input name=\"Points\" type=\"text\" id=\"Points\" size=\"6\" value=\"$Points\"></td>
    </tr>
    <tr>
      <td class=\"data\">GamesCup</td>
      <td><input name=\"GamesCup\" type=\"text\" id=\"GamesCup\" size=\"6\" value=\"$GamesCup\"></td>
    </tr>  <tr>
      <td class=\"data\">GoalsCup</td>
      <td><input name=\"GoalsCup\" type=\"text\" id=\"GoalsCup\" size=\"6\" value=\"$GoalsCup\"></td>
    </tr>
<tr>
      <td class=\"data\">PPGoalsCup</td>
      <td><input name=\"PPGoalsCup\" type=\"text\" id=\"GoalsCup\" size=\"6\" value=\"$PPGoalsCup\"></td>
    </tr><tr>
      <td class=\"data\">SHGoalsCup</td>
      <td><input name=\"SHGoalsCup\" type=\"text\" id=\"GoalsCup\" size=\"6\" value=\"$SHGoalsCup\"></td>
    </tr>
    <tr>
      <td class=\"data\">AssistsCup</td>
      <td><input name=\"AssistsCup\" type=\"text\" id=\"AssistsCup\" size=\"6\" value=\"$AssistsCup\"></td>
    </tr>
    <tr>
      <td class=\"data\">PIMCup</td>
      <td><input name=\"PIMCup\" type=\"text\" id=\"PIMCup\" size=\"6\" value=\"$PIMCup\"></td>
    </tr>     <tr>
      <td class=\"data\">PointsCup</td>
      <td><input name=\"PointsCup\" type=\"text\" id=\"PointsCup\" size=\"6\" value=\"$PointsCup\"></td>
    </tr>  "); 

if ($stat==1) { } else { 
echo("
<tr><td class=\"data\">GamesPO</td>
      <td><input name=\"GamesPO\" type=\"text\" id=\"GamesPO\" size=\"6\" value=\"$GamesPO\"></td>
    </tr> <tr>
      <td class=\"data\">GoalsPO</td>
      <td><input name=\"GoalsPO\" type=\"text\" id=\"GoalsPO\" size=\"6\" value=\"$GoalsPO\"></td>
    </tr>
<tr>
      <td class=\"data\">PPGoalsPO</td>
      <td><input name=\"PPGoalsPO\" type=\"text\" id=\"GoalsPO\" size=\"6\" value=\"$PPGoalsPO\"></td>
    </tr>
<tr>
      <td class=\"data\">SHGoalsPO</td>
      <td><input name=\"SHGoalsPO\" type=\"text\" id=\"GoalsPO\" size=\"6\" value=\"$SHGoalsPO\"></td>
    </tr><tr>
      <td class=\"data\">AssistsPO</td>
      <td><input name=\"AssistsPO\" type=\"text\" id=\"AssistsPO\" size=\"6\" value=\"$AssistsPO\"></td>
    </tr><tr>
      <td class=\"data\">PIMPO</td>
      <td><input name=\"PIMPO\" type=\"text\" id=\"PIMPO\" size=\"6\" value=\"$PIMPO\"></td>
    </tr><tr>
      <td class=\"data\">PointsPO</td>
      <td><input name=\"PointsPO\" type=\"text\" id=\"PointsPO\" size=\"6\" value=\"$PointsPO\"></td>
    </tr><tr>
      <td class=\"data\">Nationality</td>
      <td><input name=\"Nationality\" type=\"text\" id=\"Nationality\" value=\"$Nationality\"></td>
    </tr> <td class=\"data\">&nbsp;</td>
      <td>&nbsp;</td>
    </tr>
    <tr>
      <td class=\"data\">&nbsp;</td>
      <td><input type=\"submit\" name=\"Submit\" value=\"Edit\"></td>
    </tr>
  </table>
</form>"); 
}

if ($stat!=0) {
$query = "UPDATE `players` 
SET `Nationality` = '$Nationality', 
`GamesPO` = '$GamesPO' , 
`AssistsPO` = '$AssistsPO' , 
`GoalsPO` = '$GoalsPO' , 
`PPGoalsPO` = '$PPGoalsPO' , 
`SHGoalsPO` = '$SHGoalsPO' , 
`PointsPO` = '$PointsPO' , 
`PIMPO` = '$PIMPO' ,
`PIM` = '$PIM' ,
`PointsCup` = '$PointsCup' ,
`PIMCup` = '$PIMCup' ,
`AssistsCup` = '$AssistsCup' ,
`GoalsCup` = '$GoalsCup' ,
`PPGoalsCup` = '$PPGoalsCup' ,
`SHGoalsCup` = '$SHGoalsCup' ,
`GamesCup` = '$GamesCup' ,
`Points` = '$Points',
`Assists` = '$Assists' ,
`Goals` = '$Goals' ,
`PPGoals` = '$PPGoals' ,
`SHGoals` = '$SHGoals' ,
`TeamID` = '$TeamID' ,
`Player` = '$Player' ,
`Games` = '$Games' 
WHERE `PlayerID` = '$PlayerID'";
$result = mysql_query($query) or die ("Can't Update");
echo ("The player has been updated.<br><br><a href=\"playerstats.php\"> Go back to the player List</a>");

} else {
$query = "UPDATE `snl_players` 
SET `PIM` = '$PIM' ,
`GamesPO` = '$GamesPO' , 
`AssistsPO` = '$AssistsPO' , 
`GoalsPO` = '$GoalsPO' , 
`PPGoalsPO` = '$PPGoalsPO' , 
`SHGoalsPO` = '$SHGoalsPO' , 
`PointsPO` = '$PointsPO' , 
`PIMPO` = '$PIMPO' ,
`PointsCup` = '$PointsCup' ,
`PIMCup` = '$PIMCup' ,
`AssistsCup` = '$AssistsCup' ,
`GoalsCup` = '$GoalsCup' ,
`PPGoalsCup` = '$PPGoalsCup' ,
`SHGoalsCup` = '$SHGoalsCup' ,
`GamesCup` = '$GamesCup' ,
`Points` = '$Points',
`Assists` = '$Assists' ,
`Goals` = '$Goals' ,
`PPGoals` = '$PPGoals' ,
`SHGoals` = '$SHGoals' ,
`TeamID` = '$TeamID' ,
`Player` = '$Player' ,
`Games` = '$Games' 
WHERE `PlayerID` = '$PlayerID'";
$result = mysql_query($query) or die ("Can't Update");
echo ("The player has been updated.<br><br><a href=\"playerstats.php\"> Go back to the player List</a>");

}
} elseif ($act==teamlist) {
$query112 = "SELECT * FROM `teams` WHERE `TeamID` = '$TeamID'";
$result112 = mysql_query($query112) or die ('Error: Sh2');
$rows2 = mysql_fetch_array($result112);
$TeamName = $rows2['TeamName'];
$Logo = $rows2['Logo'];

if ($Logo!="") { echo("<img src=\"../Images/$Logo\" /><br><br>"); } else { }
echo ("<strong>Edit $TeamName Players</strong><br><br>Click Player Names to edit details<br><br>");
$query11 = "SELECT * FROM `players` WHERE `TeamID` = '$TeamID'";
$result11 = mysql_query($query11) or die ('Error: Sh2');
while ( $rows = mysql_fetch_array($result11) ) {
$Player = $rows['Player'];
$PlayerID = $rows['PlayerID'];
$TeamID = $rows['TeamID'];


echo ("<span class=\"style1\"><a href=\"playerstats.php?act=edit&PlayerID=$PlayerID&stat=1\">$Player</a><br>");
} 
} else {
echo ("Click Team Names to view players<br><br>");
$query11 = "SELECT distinct TeamID FROM `players` ORDER BY `TeamID`";
$result11 = mysql_query($query11) or die ('Error: Sh2');
while ( $rows = mysql_fetch_array($result11) ) {
$TeamID = $rows['TeamID'];

$query112 = "SELECT * FROM `teams` WHERE `TeamID` = '$TeamID'";
$result112 = mysql_query($query112) or die ('Error: Sh2');
$rows2 = mysql_fetch_array($result112);
$TeamName = $rows2['TeamName'];

echo ("<span class=\"style1\"><a href=\"playerstats.php?act=teamlist&TeamID=$TeamID&stat=1\">$TeamName</a><br>");
} echo ("<a name=\"snl\"></a><br><strong><a href=\"snlplayerstats.php\">SNL Teams</a></strong><br><br>");

}

?>

I'm not shore what to do this update code isn't updating my database this is just the update code for my login
Code: [Select]
mysql_query("UPDATE users SET session_id='$session' WHERE email='$email' AND password='$pas'") or die(mysql_error()); //Add session ID to DB
mysql_query("UPDATE users SET login_ip='$ip' WHERE email='$email' AND password='$pas'") or die(mysql_error()); //Add login IP to DBand this is all of it
Code: [Select]
<title>Log In</title><?php
require('database.php'); //Include DB connection information

if (isset($_POST['login'])) { //Execute the following if form is submitted
$ip = mysql_real_escape_string($_SERVER["REMOTE_ADDR"]); //Geet user's IP Address
$email = mysql_real_escape_string($_POST['email']); //Post email from form
$password = mysql_real_escape_string(sha1(md5($_POST['pass']))); //Post password from form and encrypt

if (empty($email) || empty($password)) { //Check for empty fields
die("<b>Error:</b> All fields are required to be filled in.");
}

$check = mysql_query("SELECT * FROM users WHERE email = '$email'") or die(mysql_error());
$check2 = mysql_num_rows($check);
if ($check2 == 0) { //Check if account exists
die("<b>Error:</b> Email and password do not match the database.");
}
$row = mysql_fetch_array($check);
$db_password = $row['password']+$row['key'];
if ($password != $db_password) { //Check if password is correct
die("<b>Error:</b> Email and password do not match the database.");
}

$allowed = $row['u'];
if ($allowed != 1) { //Check if they have permission
die("<b>Error:</b> You do not have permission to view this section.");
}

function randomstring($length = 10) {
    $validCharacters = "abcdefghijklmnopqrstuxyvwz1234567890";
    $validCharNumber = strlen($validCharacters);
 
    $result = "";
 
    for ($i = 0; $i < $length; $i++) {
        $index = mt_rand(0, $validCharNumber - 1);
        $result .= $validCharacters[$index];
    }
 
    return $result;

 
}
$session = randomstring();
$key = $row['key'];
$pas = $password . $key;

mysql_query("UPDATE users SET session_id='$session' WHERE email='$email' AND password='$pas'") or die(mysql_error()); //Add session ID to DB
mysql_query("UPDATE users SET login_ip='$ip' WHERE email='$email' AND password='$pas'") or die(mysql_error()); //Add login IP to DB

$level = $row['accounttype'];
$u = $row['u'];
$fs = $row['fs'];
$bc = $row['bc'];
$fam = $row['fam'];
$future = time() + 1209600;
setcookie("uemail", $email, $future); //Set cookie containing username
setcookie("sessionid", $session, $future); //Set cookie containging session ID
setcookie("acounttype", $level, $future);
setcookie("u", $u, $future);
setcookie("fs", $fs, $future);
setcookie("bc", $bc, $future);
setcookie("fam", $fam, $future);
//////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////
//header("Location: undefined.php"); //Redirect to members page

}
else
{ //If form is not submitted display the form
echo<<<login
<center>
<h1>Log In To The Undefiend Section</h1>
<h2>Or GO <a href="../main.php">Home</a></h2>
<form method="post" action="">
Email: <input type="text" name="email"><br>
Password: <input type="password" name="pass"><br>
<input type="submit" name="login" value="Login"><br><br>

</form></center>
login;
}
?>

I am trying to make a rating system and this script is not working.

Code: [Select]
$ratingget = $_REQUEST['star2'];
mysql_select_db($database_news, $news);
$query_ratingsys = "UPDATE news SET votes = votes +1 AND rating = rating +'$ratingget' WHERE id = '$id'";
$ratingsys = mysql_query($query_ratingsys, $news) or die(mysql_error());