PHP - Musician's Profile

i dont know why it doesnt update the db..someone help??

$connection=mysql_connect("$server", "$username", "$password")
   or die("Could not establish connection");
   mysql_select_db($database_name, $connection)
   or die ("Could not select database");

   $strEditProfile = "UPDATE tblemployee SET EmployeeName='".$_POST["edit_thename"]."',
                        Address1 = '".$_POST[edit_address1]."',
                        Address2 = '".$_POST[edit_address2]."',
                        DesignationID = '".$_POST[edit_des]."',
                        Postcode = '".$_POST[edit_postcode]."',
                        State = '".$_POST[edit_state]."',
                        Country = '".$_POST[edit_country]."',
                        Tel1 = '".$_POST[edit_contact]."'            
                        WHERE EEmail='".$_POST["edit_email"]."'";
   
   $resEditProfile = mysql_query($strEditProfile);
   if($resEditProfile)
      echo "<img src=\"images/valid.jpg\" /> Profile updated!";
   else
      echo "><img src=\"images/warning.jpg\">Error!";
   

Hi guys,

Im trying to get my members_profile.php to display the users profile....

I.e members_profile.php?boxerman will display my information.

I've been at it for hours but no luck...

This is what im trying to code:

<?php
include ("connect.php")

$username = $_GET['username'];
$user = mysql_query("SELECT * FROM user WHERE username = '$username'");
$user=mysql_fetch_assoc($user);

echo "<h1>User Info</h1>";

echo "<b>Username:".$user['username']."<br>";

echo "<br>";
  echo '<form name="backlistfrm" method="post" action="members.php">';
echo '<input type="submit" value="Back to The List">';
echo '</form>';
echo "<br>";

?>

It displays nothing when going to members_profile.php?boxerman

Any advice as to why?

Regards,

B-Man

Hi. I am working on a website that has restriction level. An admin, a staff, and ordinary user. In my admin page when I click the button "View Users" it shows all the listed users in a table, from admin to ordinary users. And on each entry is an option to either "Delete" or "Edit" the users account.

Now I have a problem with editing user profile because it appears blank fields. Not like in the admin side wherein if I click "Edit" the fields are filled with the users info.

How do I do this in the staff's page.

Here is the view users code from the admin's page:
Code: [Select]
if (@$_GET['action'] == "View Users")
{
     print "<font size=6 color=yellow><center>View User's Records</center><br></font>";
     
$result = mysql_query ("SELECT * FROM users order by user_lvl, lname asc");
     
$rows = mysql_num_rows($result);
     
if ($rows!=0)
{
        print "<table border=1 align=center cellspacing=10>";

        print " <tr bgcolor=yellow align=center>

                <td>First Name</td>
 
                <td>Last Name</td>
   
                <td>Email</td>

        <td>Username</td>

                <td>Password</td>
 
                <td>Phone Number</td>

<td>User Privilege</td>

<td>Options</td>


       </tr>";


        for ($i=0; $i< $rows; $i++)
 
         {
           $row = mysql_fetch_row ($result);

           print "<tr bgcolor= white align=center>";

           print "<td>$row[0]</td>";

             print "<td>$row[1]</td>";            
 
   print "<td>$row[2]</td>";

           print "<td>$row[3]</td>";

   print "<td>$row[4]</td>";

   print "<td>$row[5]</td>";

   print "<td>$row[6]</td>";

   print "<td>[ <a href=admin_main.php?action=Delete&username=$row[3]>Delete</a> ]";

           print "[ <a href=admin_main.php?action=Edit&username=$row[3]>Edit</a> ]";

           print "</td>";

           print "</tr>";

  }
       
print "</table>";

        print "<font size=1 color=yellow>Number of entries found: $rows";
     }

     else {
           print "No records found!";
          }

     mysql_free_result ($result);
 
}
Now here is the code when I click "Edit" from the "View Users" table:
Code: [Select]
if (@$_GET['action'] == "Edit") {

$result = mysql_query ("Select * from users where username='$_GET[username]'");
 $row = mysql_fetch_row ($result);

 print "<font size=6 color=yellow><center>Edit Records </center></font>";
 print "<form method = get>
 <table border = 1  align=center>
 <tr> <td><font color=yellow>First Name:</font></td>
  <td><input type=text name=fname value=$row[0] ></td></tr>
 <tr> <td><font color=yellow>Last Name:</font></td>
<td><input type=text name=lname value=$row[1]></td></tr>
 <tr> <td><font color=yellow>Email Address: </font></td>
  <td><input type=text name=email value=$row[2] </td></tr>
 <tr> <td><font color=yellow>Username: </font></td>
  <td><input type = text name = username value=$row[3] ></td></tr>
 <tr> <td><font color=yellow>Password:</font></td>
  <td><input type=text name=password value=$row[4]></td></tr>
 <tr> <td><font color=yellow>Contact Number:</font></td>
      <td><input type = text name = phone_number value=$row[5]></td></tr>
 <tr> <td><font color=yellow>User Privilege:</font></td>
<td><input type = txt name = user_lvl value=$row[6]></td></tr>

 <tr><td><input type=submit value='Update Users' Submit name=action></td></tr>
 </table>  
</form> ";
}

  if (@$_GET['action']=="Update Users") {
     $result = mysql_query ("UPDATE users
             SET
             fname='$_GET[fname]',
             lname='$_GET[lname]',
             email='$_GET[email]',
             username='$_GET[username]',
             password='$_GET[password]',
             phone_number='$_GET[phone_number]',
     user_lvl='$_GET[user_lvl]'
     where username= '$_GET[username]'");
     print "<font size=6 color=yellow><center><blink>Record of User successfully updated!</blink></center></font>";
  }

Ok so everything is working the way it is supposed to work Except 2 small problems that have been driving me batty for the last 2 weeks..

for some strange reason the MSN and Email won't display correctly.. When they display it ends up like this ((   JerseyJoe(at)hotmail(dot)com instead of  JerseyJoe@hotmail.com  ))

I really need some help with this folks.. so Please answer asap..thanks

<?php
// $Id$

$cs_lang = cs_translate('users');

$users_id = $_GET['id'];
settype($users_id,'integer');
$cs_user = cs_sql_select(__FILE__,'users','*',"users_id = '" . $users_id . "'");

if(empty($cs_user['users_active'])) {
  $data['head']['action'] = $cs_lang['profile'];
  $data['head']['body_text'] = $cs_lang['not_active_text'];

  echo cs_subtemplate(__FILE__,$data,'users','head');

  $data['lang']['not_active'] = $cs_lang['not_active'];
  echo cs_subtemplate(__FILE__,$data,'users','not_active');
}
elseif(!empty($cs_user['users_delete'])) {
  $data['head']['action'] = $cs_lang['profile'];
  $data['head']['body_text'] = $cs_lang['delete_text'];

  echo cs_subtemplate(__FILE__,$data,'users','head');

  $data['lang']['delete'] = $cs_lang['delete'];
  echo cs_subtemplate(__FILE__,$data,'users','delete');
}
else {
  $data['head']['action'] = $cs_lang['profile'];
  $data['head']['body_text'] = cs_addons('users','view',$users_id,'users');

  echo cs_subtemplate(__FILE__,$data,'users','head');
  
  $old_nick = cs_sql_select(__FILE__,'usernicks','users_nick','users_id = ' . $users_id,'users_changetime DESC',0,1);
  $data['if']['old_nick'] = false;
  if(!empty($old_nick)) {
    $data['if']['old_nick'] = true;
    $data['users']['old_nick'] = $old_nick['users_nick'];  
  }

  $data['users']['id'] = $cs_user['users_id'];

  $data['if']['buddies_active'] = (empty($account['access_buddys']) OR $account['access_buddys'] < 2) ? false : true;

  $hidden = explode(',',$cs_user['users_hidden']);
  #$allow = $users_id == $account['users_id'] OR $account['access_users'] > 4 ? 1 : 0;
  $allow = 0;
  if($users_id == $account['users_id'] OR $account['access_users'] > 4) {
    $allow = 1;
  }

  $data['if']['own_profile'] = $users_id == $account['users_id'] ? true : false;
  $data['url']['picture'] = cs_url('users','picture');
  $data['url']['profile'] = cs_url('users','profile');

  $data['users']['nick'] = cs_secure($cs_user['users_nick']);
  $data['url']['message_create'] = cs_url('messages','create','to_id=' . $cs_user['users_id']);
  if(empty($cs_user['users_picture'])) {
    $data['users']['picture'] = $cs_lang['nopic'];
  } else {
    $place = 'uploads/users/' . $cs_user['users_picture'];
    $size = getimagesize($cs_main['def_path'] . '/' . $place);
    $data['users']['picture'] = cs_html_img($place,$size[1],$size[0]);
  }  

  $content = cs_secure($cs_user['users_name']);
  if(in_array('users_name',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['name'] =  empty($cs_user['users_name']) ? '--' : $content;

  $content = cs_secure($cs_user['users_surname']);
  if(in_array('users_surname',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['surname'] = empty($cs_user['users_surname']) ? '--' : $content;

  $data['lang']['sex'] = $cs_lang['sex'];
  if(empty($cs_user['users_sex'])) { $data['users']['sex'] = '--'; }
  if($cs_user['users_sex'] == 'male') { $data['users']['sex'] = $cs_lang['male']; }
  if($cs_user['users_sex'] == 'female') { $data['users']['sex'] = $cs_lang['female']; }

  $data['lang']['birth_age'] = $cs_lang['birth_age'];
  if (!empty($cs_user['users_age'])) {
    $content = cs_date('date',$cs_user['users_age']);
    $birth = explode ('-', $cs_user['users_age']);
    $age = cs_datereal('Y') - $birth[0];
    if(cs_datereal('m')<=$birth[1]) { $age--; }
    if(cs_datereal('d')>=$birth[2] AND cs_datereal('m')==$birth[1]) { $age++; }
    $content .= ' (' . $age . ')';
  }
  if(in_array('users_age',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['age'] = empty($cs_user['users_age']) ? '--' : $content;

  $content = empty($cs_user['users_height']) ? '--' : $cs_user['users_height'] . '';
  if(in_array('users_height',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['height'] = empty($cs_user['users_height']) ? '--' : $content;
  
  $content = cs_secure($cs_user['users_adress']);
  if(in_array('users_adress',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['adress'] = empty($cs_user['users_adress']) ? '--' : $content;
  
  $data['lang']['postal_place'] = $cs_lang['postal_place'];
  if(empty($cs_user['users_postalcode']) AND empty($cs_user['users_place'])) {
    $data['users']['postal_place'] =  '--';
  }
  else {
    $content = cs_secure($cs_user['users_postalcode']) . ' - ' . cs_secure($cs_user['users_place']);
    if(in_array('users_place',$hidden)) {
      $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
    }
    $data['users']['postal_place'] =   $content;
  }
  
  if(empty($cs_user['users_country'])) {
    $data['users']['country'] = '-';
  }
  else {
    $url = 'symbols/countries/' . $cs_user['users_country'] . '.png';
    $data['users']['country'] =  cs_html_img($url,11,16);
    include_once('lang/' . $account['users_lang'] . '/countries.php');
    $country = $cs_user['users_country'];
    $data['users']['country'] .=  ' ' . $cs_country[$country];
  }

  $data['users']['registered'] = cs_date('unix',$cs_user['users_register'],1);
  $data['users']['laston'] = !empty($cs_users['users_invisible']) ? '--' : cs_date('unix',$cs_user['users_laston'],1);

  $content = cs_html_mail($cs_user['users_email']);
  if(in_array('users_email',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['email'] =  empty($cs_user['users_email']) ? '--' : $content;

  $cs_user['users_url'] = cs_secure($cs_user['users_url']);
  $content = cs_html_link('http://' . $cs_user['users_url'],$cs_user['users_url']);
  if(in_array('users_url',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['url'] = empty($cs_user['users_url']) ? '--' : $content;

  $cs_icqstart = 'http://web.icq.com/whitepages/online?icq=';
  $content = cs_html_link('http://www.icq.com/' . $cs_user['users_icq'],$cs_user['users_icq']);
  $content .= ' ' . cs_html_img($cs_icqstart . $cs_user['users_icq'] . '&amp;img=22','16','15');
  if(in_array('users_icq',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['icq'] = empty($cs_user['users_icq']) ? '--' : $content;

  $cs_user['users_msn'] = cs_secure($cs_user['users_msn']);
#  $content = cs_html_link('http://members.msn.com/' . $cs_user['users_msn'],$cs_user['users_msn']);
  $content = cs_html_msnmail($cs_user['users_msn']);
  if(in_array('users_msn',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['msn'] = empty($cs_user['users_msn']) ? '--' : $content;

  $cs_user['users_skype'] = cs_secure($cs_user['users_skype']);
  $content = cs_html_link('skype:' . $cs_user['users_skype'] . '?userinfo', $cs_user['users_skype']);
  $skype_url = 'http://mystatus.skype.com/smallicon/' . $cs_user['users_skype'];
  $content .= ' ' . cs_html_img($skype_url,'16','16');
  if(in_array('users_skype',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['skype'] = empty($cs_user['users_skype']) ? '--' : $content;

  $content = cs_secure($cs_user['users_phone']);
  if(in_array('users_phone',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['phone'] = empty($cs_user['users_phone']) ? '--' : $content;

  $content = cs_secure($cs_user['users_mobile']);
  if(in_array('users_mobile',$hidden)) {
    $content = empty($allow) ? '--' : cs_html_italic(1) . $content . cs_html_italic(0);
  }
  $data['users']['mobile'] =  empty($cs_user['users_mobile']) ? '--' : $content;

  $data['users']['info'] = empty($cs_user['users_info']) ? '&nbsp;' : cs_secure($cs_user['users_info'],1,1);

  /* Users View Update */
/*  $users_view['users_view'] = $cs_user['users_view'] + 1;
  $users_cells = array_keys($users_view);
  $users_save = array_values($users_view);
  cs_sql_update(__FILE__,'users',$users_cells,$users_save,$cs_user['users_id']);
  $data['users']['view'] = $users_view['users_view'];*/

  echo cs_subtemplate(__FILE__,$data,'users','view');
}

Hi

I am trying to develop an editprofile.php page to allow users to change their details.

So far i have written

Code: [Select]
<?php

$result = mysql_query("SELECT username FROM users WHERE username = {$_SESSION['MM_Username']}");
 
$num_rows = mysql_num_rows($result);
  
if($num_rows > 0)
{
while ($row = mysql_fetch_array($result))
{
$username = $row['username'];
}
 

}
?>
and then tried to test it by using

Code: [Select]
<div><?php echo $username ?></div>
but nothing is being echo'ed out. What am i doing wrong?

Hi,
I have to ask about profile page for each user like facebook and netlog. As u can see in netlog it is like this http://en.netlog.com/ElegantLeo and i have a site http://cyprussaver.com/merchant.php?id=64 and here each merchant profile can be viewed like this but i need to show them like this http://cyprussaver.com/rocksman please guide me what i have to do in order to achieve this result.

Thanks,
Hanan ALi

I'm trying to create a profile page that an unregistered user can view when he enters in the username into the url (e.g. http://localhost/username) Just recently got my mode_rewrite going (tried and tested), but I don't get the users information coming up in the page. Am I going about this the right way?

This is what the page shows:
The requested page was:
Notice: Undefined variable: name_id in C:\x\xampp\htdocs\pages\profile.php on line 27

Notice: Undefined variable: name in C:\x\xampp\htdocs\pages\profile.php on line 28

Notice: Undefined variable: password in C:\x\xampp\htdocs\pages\profile.php on line 29

profile.php

<?php
include 'db.inc.php';

$db = mysql_connect(MYSQL_HOST, MYSQL_USER, MYSQL_PASSWORD) or 
    die ('Unable to connect. Check your connection parameters.');

mysql_select_db(MYSQL_DB, $db) or die(mysql_error($db));
$query = 'SELECT
        name_id, name, password
        FROM
        user
        WHERE
        name = "' . mysql_real_escape_string($_GET['name'], $db) . '"';
    $result = mysql_query($query, $db) or die(mysql_error());


?>

<html>
   <head>
      <title> <?php echo $name; ?> </title>
   </head>
   <body>
      <p>
         The requested page was:
<?php
echo $name_id; 
echo $name;
echo $password;

 ?>
      </p>
   </body>
</html>

I've been messing around with this for awhile so I'm going to hit the sack.

Hi, I recently implemented a code to display user profile information.  Well, it displays the username and password fine, but the edit function doesn't seem to be working.  I edit the information, click submit, get a success message but the username and password didn't change.

myprofile.php
Code: [Select]
<?php

session_start();

include('config.php');
 
$sql = mysql_query( "SELECT * FROM users WHERE id='".$_SESSION['id']."'" ); 

echo "<h2>Profile</h2>
<form method='post' action='editprofile.php'>
<table>";
 
$row = mysql_fetch_array($sql);
echo "<tr><th>Name: </th><td>".$row['username']."</td></tr>
<tr><th>Password: </th><td><input type='password' value='".$row['password']."' disabled='true' /></td></tr>";
 
 
echo "</table><br />
<input type='submit' value='edit profile' />
</form>";

?>

editprofile.php
Code: [Select]
<?php

include('config.php');
 
 
if(isset($_POST['btnedit'])){
$username = $_POST['username'];
$password = $_POST['password'];
 
$sql = mysql_query( "UPDATE users SET username='".$username."', password='".$password."' WHERE id='".$_SESSION['id']."'" );
 
if($sql){
echo "<script>alert('profile updated');window.location='myprofile.php'</script>";
}else{
echo "<script>alert('updating profile failed!');</script>";
}
 
}
 
 
 
 
$sql = mysql_query( "SELECT * FROM users WHERE id='".$_SESSION['id']."'" ); 
$row = mysql_fetch_array($sql);
echo "<h2>Edit profile</h2>
<form method='post'>
<table>
<tr><th>registered:</th><td><input type='text' name='username' value='".$row['username']."'/></td></tr>
<tr><th>password:</th><td><input type='password' name='password' value='".$row['password']."'/></td></tr>
</table><br />
<input type='submit' name='btnedit' value='update' />
</form>";

?>

Basically I'm a member of an "online dating site".  The website tracks who views your profile and displays recent viewers prominently on the home page.  One of the ways to get more people to pay attention to your profile (for dates *wink*) is to view peoples profiles and hope they view yours in return and initiate a conversation.

Now to my question.  I've been able to log into the site successfully with cURL and grab the page contents and implode on unique nodes with php.  How can I crawl through users profiles with this.  Like I'm a tad stumped on how link crawling works. 

Any guides that have helped you out in the past would be appreciated.  I've used google tons on this subject, and have come up empty.  I don't think my keywords are appropriate for genre of question query haha.

Thanks ahead of time.

Hello.

Say i want to view another user profile. I click on user name and i see the profile page.
So how can i link user name to his profile?

I have tried linking it to $id (this is where user id is stored in the database), but no luck.

Thank you.

i get a message saying i cannot be authorised - i have keys, tokens, passwords, users etc but do not know how to implement them or update this script.

any help for a super novice would be great!

Code: [Select]
<html><head><title>Title</title>
<?php
if (!isset($_POST['submit'])) { // if page is not submitted to itself
                                //echo the form
} else {

$username = $_POST["username"];
$password = $_POST["password"];
$image = $_POST["image"];

////// 
//////
////// If you are using file uploads from your form, use the following block
////// NOTE: this particular example code uses file uploads from the input form
//////
//////

$filename = $_FILES["image"]['name'];
$tmpfilename = $_FILES["image"]['tmp_name'];

$fileparts = explode(".", $filename);
/* get file extension */
$ext = $fileparts[count($fileparts) - 1];
$newfilename = substr($tmpfilename, 0, strlen($tmpfilename) - strlen($ext))  . "." .$ext;
//echo $newfilename;
/*
 *  this next line creates a "corrected" file ending in .gif/.png/.jpg so 
 *  the post headers are correct when CURL makes the request
 */
copy($tmpfilename, $newfilename);

////// 
//////
////// Else If you are using canned files local to your server,  use the following block
////// NOTE: you MUST use full path to image!
//////

//
// /* windows, notice FORWARD SLASHES */
// $newfilename = "c:/www/path/to/image.jpg";
//
//
// /* *nix */
// $newfilename = "/www/path/to/image.jpg";
//




// The twitter API address
$url = 'http://twitter.com/account/update_profile_image.xml';
$curl_handle = curl_init();
curl_setopt($curl_handle, CURLOPT_URL, "$url");
curl_setopt($curl_handle, CURLOPT_POST, 1);
curl_setopt($curl_handle, CURLOPT_HTTPHEADER, array('Expect:'));
curl_setopt($curl_handle, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl_handle, CURLOPT_CONNECTTIMEOUT, 2);
curl_setopt($curl_handle, CURLOPT_POSTFIELDS, array("image" => "@$newfilename"));
curl_setopt($curl_handle, CURLOPT_USERPWD, "$username:$password");
$buffer = curl_exec($curl_handle);

curl_close($curl_handle);
       echo $buffer;


// if you want to delete the local temp image from uploading, uncomment this next line:
// unlink($newfilename);


}
?>



</head>
<body>

<form enctype="multipart/form-data" method="post" action="<?php echo $PHP_SELF;?>">
Username:<input type="text" size="12" maxlength="12"
name="username"><br />
Password:<input type="password" size="12" maxlength="36"
name="password"><br />
<input type="file" name="image">
<input type="submit" value="submit" name="submit"><br />
</form><br />

</body>
</html>

Hello all, i require some assistance in a bit of PHP/MySql code.

I have a website setup with register/login scripts already wrote, i also have a basic members page for now, that has there user ID assigned to it for example members.php?id=$id, which is there ID from the database.

I have a members list which shows all members with links to there profiles, now i when i mouse over the link, it will says members.php?id=1 and so on, which is correct but when clicking on any of the members to go to there profile it is my own details that is shown on there profile instead of theres.

members.php
<?php
session_start();
mysql_connect("localhost","root") or die(mysql_error());
mysql_select_db("hireacoder") or die(mysql_error());

$user = $SESSION['username'];
$sql = mysql_query("SELECT * FROM users WHERE username='$user'");
$row = mysql_fetch_assoc($sql);
echo $row['username'];
echo'<br>';
echo $row['fname'];
echo'<br>';
echo $row['lname'];
echo'<a href="users.php">Users</a>';
?>

users.php
<?php
session_start();
mysql_connect("localhost","root") or die(mysql_error());

mysql_select_db("hireacoder") or die(mysql_error());
echo "<table border='0'>
<tr>
<th>UserName</th>
</tr>";
$sql = mysql_query("SELECT * FROM users ORDER BY ID");
while($row = mysql_fetch_assoc($sql))
  {
  $id = $row['id'];
  $username = $row['username'];
  echo"
  <tr>
  <td>
  <a href='members.php?id=$id'>".$username."</a>
  </td>
  </tr>";
  }
echo "</table>";
?>

Now i know what the problem is, the query is getting the details from the DB with the username = the session user which is me and that is why my details show up on all profiles, but i dont know any other way to do it, any help with be very apprciated thanks you.

ok, so I have found this code to edit profiles online, only problem is that the data is not being posted to the database, there are no errors, just basically refreshes the page.  could you take a look and see if you can help me?
Code: [Select]
<?php
}
//action: edit user -----------------------------------------------------------------------------
if (isset($_GET['edit']) && isset($_GET['id'])) {
$userid = (int) $_GET['id'];
if ($userid == 0) {
die("Invalid ID provided.");
}
//execution when completed the edit user form and pressed submit button ---------------------
if (isset($_POST['editUser'])) {
//validate data ------------------------------------------------------------------------
//check empty fields
 //passwords won't be checked, as they are not required
foreach ($_POST as $k=>$v) {
if ($v == "" && !in_array($k,$notRequired)) {
$error[$k] = "<strong>This field is empty</strong>";
}
}
//escape string
$name = mysql_real_escape_string($_POST['name']);
$phone = mysql_real_escape_string($_POST['phone']);
$address = mysql_real_escape_string($_POST['address']);
$city = mysql_real_escape_string($_POST['city']);
$state = mysql_real_escape_string($_POST['state']);
$zip = mysql_real_escape_string($_POST['zip']);
$cell = mysql_real_escape_string($_POST['cell']);
$email = mysql_real_escape_string($_POST['email']);
$username = mysql_real_escape_string($_POST['username']);
$badges = mysql_real_escape_string($_POST['badges']);
$rank = mysql_real_escape_string($_POST['rank']);
$accounttype = mysql_real_escape_string($_POST['accounttype']);


//check email validation, the function is available at config.php
if (!check_email($_POST['email'])) {
$error['email'] .= " <strong>Email is not valid!</strong>";
}
//check email exists in database
$res = mysql_query("SELECT email FROM members WHERE email='".$email."' AND userid != '".$userid."'");
if (mysql_num_rows($res) == 1) {
$error['email'] .= " <strong>Email already existst in database!</strong>";
}
//check username exists in database
$res = mysql_query("SELECT username FROM members WHERE username='".$username."' AND username != '".$username."'");
if (mysql_num_rows($res) == 1) {
$error['username'] .= " <strong>Username already existst in database!</strong>";
}
//check both passwords are the same when password fields are not empty

//end validate data ---------------------------------------------------------------------

//save to database when no errors are detected ------------------------------------------
if (count($error) == 0) {
$query = "UPDATE members SET username='".$username."', email='".$email."',name='".$name."', phone='".$phone."',address='".$address."', city='".$city."',state='".$state."', zip='".$zip."',cell='".$cell."', accounttype='".$accounttype."',badges='".$badges."', rank='".$rank."' ";

$query .= "username='".$username."', email='".$email."',name='".$name."', phone='".$phone."',address='".$address."', city='".$city."',state='".$state."', zip='".$zip."',cell='".$cell."', accounttype='".$accounttype."',badges='".$badges."', rank='".$rank."'  WHERE userid='".$userid."'";

//update username session if you edit yourself
if ($userid == $_SESSION['auth_admin_userid']) {
$_SESSION['auth_admin_username'] = $username;
}

if (mysql_query($query)) {
echo "<p><strong>User has been edited and saved to the database.</strong></p>";
} else {
echo "<strong>User has NOT been edited and saved into the database. ".mysql_error()."</strong>";
}
}
}
//get user from the database and put data into $_POST variables.
$rs = mysql_query("SELECT name, username, phone, address, city, state, zip, cell, email, badges, rank, accounttype FROM members WHERE userid = ".$userid."");
if (mysql_num_rows($rs) == 0) {
die("User does not exists!");
}
$row = mysql_fetch_assoc($rs);
$_POST['name'] = $row['name'];
$_POST['username'] = $row['username'];
$_POST['phone'] = $row['phone'];
$_POST['address'] = $row['address'];
$_POST['city'] = $row['city'];
$_POST['state'] = $row['state'];
$_POST['zip'] = $row['zip'];
$_POST['cell'] = $row['cell'];
$_POST['email'] = $row['email'];
$_POST['badges'] = $row['badges'];
$_POST['rank'] = $row['rank'];
$_POST['accounttype'] = $row['accounttype'];


//if is admin, then $_POST['admin'] exists


?>







<div id="TabbedPanels1" class="TabbedPanels">
  <ul class="TabbedPanelsTabGroup">
    <li class="TabbedPanelsTab" tabindex="0">My Info</li>
    <li class="TabbedPanelsTab" tabindex="0">Merit Badges</li>
    <li class="TabbedPanelsTab" tabindex="0">Scout Rank</li>
    </ul>
  <div class="TabbedPanelsContentGroup">
    <div class="TabbedPanelsContent">
    <form action="admin.php?edit&amp;id=<?php echo $userid;?>" method="post">
      <table align="center" cellpadding="8" cellspacing="8">
        <tr> 
          <td><div align="right">Name:</div></td>
          <td> <p><input type="text" name="name" value='<?php echo $_POST['name'];?>' />
<?php echo(isset($error['name']))?$error['name']:"";?></p></td>
          </tr>
        <tr>
          <td>Phone Number:</td>
          <td><input type="text" name="phone" value='<?php echo $_POST['phone'];?>' />
<?php echo(isset($error['phone']))?$error['phone']:"";?></td>
          </tr> 
        <tr>
          <td><div align="right">Address:</div></td>
          <td><input type="text" name="address" value='<?php echo $_POST['address'];?>' />
<?php echo(isset($error['address']))?$error['address']:"";?></td>
          </tr>
        <tr>
          <td><div align="right">City:</div></td>
          <td><input type="text" name="city" value='<?php echo $_POST['city'];?>' />
<?php echo(isset($error['city']))?$error['city']:"";?></td>
          </tr>
        <tr>
          <td><div align="right">State:</div></td>
          <td><input type="text" name="state" value='<?php echo $_POST['state'];?>' />
<?php echo(isset($error['state']))?$error['state']:"";?></td>
          </tr> 
        <tr>
          <td><div align="right">Zip Code:</div></td>
          <td><input type="text" name="zip" value='<?php echo $_POST['zip'];?>' />
<?php echo(isset($error['zip']))?$error['zip']:"";?></td>
          </tr>
        <tr>
          <td><div align="right">Email:</div></td>
          <td>
<p>
<input type="text" name="email" value='<?php echo $_POST['email'];?>' />
<?php echo(isset($error['email']))?$error['email']:"";?></p></td>
          </tr>
        <tr>
          <td><div align="right">Cell Phone:</div></td>
          <td><input type="text" name="cell" value='<?php echo $_POST['cell'];?>' />
<?php echo(isset($error['cell']))?$error['cell']:"";?></td>
          </tr> 
        <tr>
          <td class="aaaaaaa" align="right">Username:</td>
          <td><label for="username"></label>
            <input type="text" name="username" value='<?php echo $_POST['username'];?>' />
<?php echo(isset($error['username']))?$error['username']:"";?></p>
            </td>
          </tr>
     
        </table>
      <p>&nbsp;        </p>
     
        <input name="submit" type="submit" value="Save" />
     
    </form> 
      </div>
    <div class="TabbedPanelsContent">
      <label for="badges"></label>
      <input name="badges" type="text" id="badges" value="<?php echo "$badges"; ?>" />
      </div>
    <div class="TabbedPanelsContent">
      <input name="badges2" type="text" id="badges2" value="<?php echo $rank; ?>" />
      </div>
    </div>
</div> <script type="text/javascript">
var TabbedPanels1 = new Spry.Widget.TabbedPanels("TabbedPanels1");
  </script>
<?php
}
?>

im trying to link a profile if it is prefixed with an @ symbol. I have tried this but it doesnt work as i thought it wouldnt.

Code: [Select]
$content = preg_replace('|@(.*?)|', profile_link('$1'), $content);