PHP - I Can't Get The 2 Functions To Write Properly To The Page ??

The Query:

$query = "SELECT * FROM ttn01 WHERE id = $_GET['id']";

I am getting an error.

Hi,
Struggling to find the problem just getting page is not redirecting properly from browser

Code: [Select]
<?php

function seoclean_ad( $uc_string )
{
    $seo_clean_string = strtolower( "{$uc_string}" );
    $seo_clean_string = str_replace( " ", "_".SS_SEOSPREP."", "{$seo_clean_string}" );
    $seo_clean_string = str_replace( "&", "and", "{$seo_clean_string}" );
    $seo_clean_string = preg_replace( "[^A-Za-z0-9_-]", "", $seo_clean_string );
    $seo_clean_string = "{$seo_clean_string}".SEO_SUFFIX."";
    return $seo_clean_string;
}

function prepare_template_output( $data )
{
    if ( is_array( $data ) )
    {
        $ret = array( );
        foreach ( $data as $key => $value )
        {
            $ret[$key] = prepare_template_output( $value );
        }
        return $ret;
    }
    if ( !is_numeric( $data ) )
    {
        $data = stripslashes( $data );
        $data = trim( $data );
        $data = htmlentities( $data );
    }
    return $data;
}

function ukDate( $inDate )
{
    global $outDate;
    list( $uYear, $uMonth, $uDay ) = explode( "-", "{$inDate}" );
    $outDate = "{$uDay}-{$uMonth}-{$uYear}";
    return $outDate;
}

function write_cache( $f_cache_data, $f_cache_file )
{
    if ( !( $fp = fopen( $f_cache_file, "w" ) ) )
    {
        trigger_error( "Error opening cache file" );
        exit( );
    }
    if ( !flock( $fp, LOCK_EX ) )
    {
        trigger_error( "Unable to lock file" );
        exit( );
    }
    if ( !fwrite( $fp, serialize( $f_cache_data ) ) )
    {
        trigger_error( "Error writing to cache file" );
        exit( );
    }
    flock( $fp, LOCK_UN );
    fclose( $fp );
}

function read_cache( $f_cache_file )
{
    if ( !file_exists( $f_cache_file ) )
    {
        trigger_error( "Invalid cache file" );
        exit( );
    }
    return unserialize( file_get_contents( $f_cache_file ) );
}

function list_options( $arrayname, $mode )
{
    global $row;
    global $row_2;
    $sarray = "";
    foreach ( $arrayname as $v )
    {
        if ( !isset( $row['salutation'] ) && $row['salutation'] == $v || isset( $row_2['salutation'] ) && $row_2['salutation'] == $v )
        {
            if ( !isset( $mode ) )
            {
                echo "<option value=\"".$v."\" selected>{$v}</option>\n";
            }
            else
            {
                $sarray .= "<option value=\"".$v."\" selected>{$v}</option>\n";
            }
        }
        else if ( !isset( $mode ) )
        {
            echo "<option value=\"".$v."\">{$v}</option>\n";
        }
        else
        {
            $sarray .= "<option value=\"".$v."\">{$v}</option>\n";
        }
    }
    return $sarray;
}

function genprevnext( $total_pages, $position, $nresults, $scriptis, $extras )
{
    global $shopurl;
    global $seoFriend;
    global $connection;
    global $instdir;
    global $smode;
    if ( !empty( $smode ) )
    {
        $smodebits = "{$smode}/";
    }
    else
    {
        $smodebits = "";
    }
    if ( !empty( $_GET['smode'] ) )
    {
        $smodebits = "".htmlentities( $_GET['smode'] )."/";
    }
    else
    {
        $smodebits = "";
    }
    $disppages = intval( $total_pages / $nresults );
    if ( $total_pages % $nresults )
    {
        ++$disppages;
    }
    if ( $nresults <= $position )
    {
        $current_page_num = $position / $nresults + 1;
    }
    else
    {
        $current_page_num = 1;
    }
    $limit = $nresults;
    $stages = 3;
    $position = $position;
    $page = $position / $nresults + 1;
    if ( $page )
    {
        $start = ( $page - 1 ) * $limit;
    }
    else
    {
        $start = 0;
    }
    if ( $page == 0 )
    {
        $page = 1;
    }
    $prev = $page - 1;
    $next = $page + 1;
    $lastpage = ceil( $total_pages / $limit );
    $LastPagem1 = $lastpage - 1;
    $paginglinks = "";
    if ( 1 < $lastpage )
    {
        if ( 1 < $page )
        {
            $prevoffset = $position - $nresults;
            $paginate .= "<a href=\"".$scriptis."?position={$prevoffset}&nresults={$nresults}{$extras}\">&laquo; Prev</a>";
        }
        else
        {
            $paginate .= "<span class='pagination-disabled'>&laquo; Prev</span>";
        }
        if ( $lastpage < 7 + $stages * 2 )
        {
            $counter = 1;
            for ( ;  
 
 $counter <= $lastpage; ++$counter )
                {
                    $newoffset = $counter * $limit - $limit;
                    if ( $counter == $page )
                    {
                        $paginglinks .= "<span class=\"pagination-current\">".$counter."</span>";
                    }
                    else
                    {
                        $paginglinks .= "<a href=\"".$scriptis."?position={$newoffset}&nresults={$nresults}{$extras}\">{$counter}</a>";
                    }
                    break;
                }
            } while ( 1 );
        }
        else if ( 5 + $stages * 2 < $lastpage )
        {
            if ( $page < 1 + $stages * 2 )
            {
                $counter = 1;
                for ( ; $counter < 4 + $stages * 2; ++$counter )
                {
                    $newoffset = $counter * $limit - $limit;
                    if ( $counter == $page )
                    {
                        $paginglinks .= "<span class=\"pagination-current\">".$counter."</span>";
                    }
                    else
                    {
                        $paginglinks .= "<a href=\"".$scriptis."?position={$newoffset}&nresults={$nresults}{$extras}\">{$counter}</a>";
                    }
                }
                $paginglinks .= "...";
                $newoffsetlm1 = $LastPagem1 * $limit - $limit;
                $newoffsetlp = $lastpage * $limit - $limit;
                $paginglinks .= "<a href=\"".$scriptis."?position={$newoffsetlm1}&nresults={$nresults}{$extras}\">{$LastPagem1}</a>";
                $paginglinks .= "<a href=\"".$scriptis."?position={$newoffsetlp}&nresults={$nresults}{$extras}\">{$lastpage}</a>";
            }
            else if ( $page < $lastpage - $stages * 2 && $stages * 2 < $page )
            {
                $paginglinks .= "<a href=\"".$scriptis."?position=0&nresults={$nresults}{$extras}\">1</a>";
                $paginglinks .= "<a href=\"".$scriptis."?position={$limit}&nresults={$nresults}{$extras}\">2</a>";
                $paginglinks .= "...";
                $counter = $page - $stages;
                for ( ; $counter <= $page + $stages; ++$counter )
                {
                    $newoffset = $counter * $limit - $limit;
                    if ( $counter == $page )
                    {
                        $paginglinks .= "<span class=\"pagination-current\">".$counter."</span>";
                    }
                    else
                    {
                        $paginglinks .= "<a href=\"".$scriptis."?position={$newoffset}&nresults={$nresults}{$extras}\">{$counter}</a>";
                    }
                }
                $paginglinks .= "...";
                $newoffsetlm1 = $LastPagem1 * $limit - $limit;
                $newoffsetlp = $lastpage * $limit - $limit;
                $paginglinks .= "<a href=\"".$scriptis."?position={$newoffsetlm1}&nresults={$nresults}{$extras}\">{$LastPagem1}</a>";
                $paginglinks .= "<a href=\"".$scriptis."?position={$newoffsetlp}&nresults={$nresults}{$extras}\">{$lastpage}</a>";
            }
            else
            {
                $paginglinks .= "<a href=\"".$scriptis."?position=0&nresults={$nresults}{$extras}\">1</a>";
                $paginglinks .= "<a href=\"".$scriptis."?position={$limit}&nresults={$nresults}{$extras}\">2</a>";
                $paginglinks .= "...";
                $counter = $lastpage - ( 2 + $stages * 2 );
                for ( ; $counter <= $lastpage; ++$counter )
                {
                    $newoffset = $counter * $limit - $limit;
                    if ( $counter == $page )
                    {
                        $paginglinks .= "<span class=\"pagination-current\">".$counter."</span>";
                    }
                    else
                    {
                        $paginglinks .= "<a href=\"".$scriptis."?position={$newoffset}&nresults={$nresults}{$extras}\">{$counter}</a>";
                    }
                }
            }
        }
        $paginate .= $paginglinks;
        if ( $page < $counter - 1 )
        {
            $newoffset = $position + $nresults;
            $paginate .= "<a href=\"".$scriptis."?position={$newoffset}&nresults={$nresults}{$extras}\">Next &raquo;</a>";
        }
        else
        {
            $paginate .= "<span class=\"pagination-disabled\">Next &raquo;</span>";
        }
    }
    if ( $nresults < $total_pages )
    {
        echo $paginate;
    }


function buildCategorySelect( )
{
    global $connection;
    global $category_id;
    $level = "0";
    $sql = "SELECT * from categories WHERE category_parent_id='deftl'";
    if ( !( $result = @mysql_query( $sql, $connection ) ) )
    {
        exit( "** COULD NOT BUILD CATEGORY DROP DOWN ** ".mysql_error( ) );
    }
    while ( $row = mysql_fetch_array( $result ) )
    {
        $parent = "{$row['category_id']}";
        $row[category_name] = stripslashes( "{$row['category_name']}" );
        if ( $category_id == $row[category_id] )
        {
            echo "<option value=\"".$row['category_id']."\" selected>+ {$row['category_name']}</option>\n";
        }
        else
        {
            echo "<option value=\"".$row['category_id']."\">+ {$row['category_name']}</option>\n";
        }
        getchildren( $parent, $level );
    }
}

function getChildren( $parent, $level )
{
    global $connection;
    global $category_id;
    ++$level;
    if ( !ctype_digit( $parent ) )
    {
        $parent = "";
    }
    $sql1 = "SELECT * from categories WHERE category_parent_id='".$parent."' order by category_name";
    if ( !( $result1 = @mysql_query( $sql1, $connection ) ) )
    {
        exit( "Couldn't build category tree child part: ".mysql_error( ) );
    }
    while ( $row1 = mysql_fetch_array( $result1 ) )
    {
        $parent = "{$row1['category_id']}";
        if ( $category_id == $row1[category_id] )
        {
            echo "<option value=\"".$row1['category_id']."\" selected>";
        }
        else
        {
            echo "<option value=\"".$row1['category_id']."\">";
        }
        $i = 0;
        for ( ; $i < $level; ++$i )
        {
            echo " ";
        }
        echo "|--[".$level."]";
        echo " ".$row1['category_name']."</option>\n";
        getchildren( $parent, $level );
    }
}

function getChildrenSEL( $parent, $myparent, $level )
{
    global $connection;
    global $https;
    global $category_id;
    ++$level;
    if ( !ctype_digit( $parent ) )
    {
        $parent = "";
    }
    $sql1 = "SELECT * from categories WHERE category_parent_id='".$parent."' order by category_name";
    if ( !( $result1 = @mysql_query( $sql1, $connection ) ) )
    {
        exit( "Couldn't build category tree child part: ".mysql_error( ) );
    }
    while ( $row1 = mysql_fetch_array( $result1 ) )
    {
        $parent = "{$row1['category_id']}";
        if ( $myparent == $row1[category_id] )
        {
            echo "<option value=\"".$row1['category_id']."\" selected>";
        }
        else if ( $category_id == $row1[category_id] )
        {
            echo "<option value=\"deftl\">";
        }
        else
        {
            echo "<option value=\"".$row1['category_id']."\">";
        }
        $i = 0;
        for ( ; $i < $level; ++$i )
        {
            echo " ";
        }
        echo "|".$level."|";
        echo "{$row1['category_name']}</option>\n";
        getchildrensel( $parent, $myparent, $level );
    }
}

function makeCategoryMap( )
{
    global $connection;
    global $adminurl;
    $level = "0";
    $sql = "SELECT * from categories WHERE category_parent_id='deftl'";
    if ( !( $result = @mysql_query( $sql, $connection ) ) )
    {
        exit( "Couldn't build category tree parent part: ".mysql_error( ) );
    }
    while ( $row = mysql_fetch_array( $result ) )
    {
        $parent = "{$row['category_id']}";
        $sql3 = "SELECT product_id from products WHERE category_id='".$parent."'";
        if ( !( $result3 = @mysql_query( $sql3, $connection ) ) )
        {
            exit( "Couldn't get data from products db" );
        }
        $numrows = mysql_num_rows( $result3 );
        if ( $numrows < 1 )
        {
            $linker = "";
        }
        else
        {
            $linker = "<input type=\"button\" class=\"list\" onclick=\"location.href='".$adminurl."products/productlist.php?category_id={$row['category_id']}'\" value=\"Products ({$numrows})\" />";
        }
        $row[category_name] = stripslashes( "{$row['category_name']}" );
        echo "<tr>\n\t\t\t\t<td> + <a href=\"".$adminurl."products/editcategory.php?category_id={$row['category_id']}\" title=\"{$row['category_desc']}\">{$row['category_name']}</a> </td>\n\t\t\t\t<td>";
        if ( $row[category_publish] == Y )
        {
            echo "<input type=\"button\" class=\"deactivate\" value=\"(click to deactivate)\" onclick=\"location.href='".$adminurl."products/bin/categoryonoff.php?category_id={$row['category_id']}&act=N'\" />";
        }
        else
        {
            echo "<input type=\"button\" class=\"activate\" value=\"(click to activate)\" onclick=\"location.href='".$adminurl."products/bin/categoryonoff.php?category_id={$row['category_id']}&act=Y'\" />";
        }
        echo "</td>\n\t\t\t\t<td> <input type=\"button\" class=\"add\" onclick=\"location.href='".$adminurl."products/addproduct.php?category_id={$row['category_id']}'\" value=\"Add\" /> {$linker} </td>\n\t\t\t\t<td> <input type=\"button\" class=\"edit\" onclick=\"location.href='{$adminurl}products/editcategory.php?category_id={$row['category_id']}'\" value=\"Edit\" /> <input type=\"button\" class=\"delete\" value=\"DELETE\" onclick='usr_conf(\"{$adminurl}products/bin/deletecategory.php\",\"category_id={$row['category_id']}\",\"Are you sure you want to delete this category?\");' /> </td>\n\t\t\t</tr>\n";
        getchildrenlist( $parent, $level );
    }
}

function getChildrenList( $parent, $level )
{
    global $connection;
    global $adminurl;
    ++$level;
    $where_in_level = "0";
    if ( !ctype_digit( $parent ) )
    {
        $parent = "";
    }
    $sql1 = "SELECT * from categories WHERE category_parent_id='".$parent."'";
    if ( !( $result1 = @mysql_query( $sql1, $connection ) ) )
    {
        exit( "Couldn't build category tree child part: ".mysql_error( ) );
    }
    while ( $row1 = mysql_fetch_array( $result1 ) )
    {
        ++$where_in_level;
        $parent = "{$row1['category_id']}";
        $level_indent = $level - 1;
        $i = 0;
        for ( ; $i < $level_indent; ++$i )
        {
            echo " ";
        }
        if ( $last_level == $level )
        {
            echo " ";
        }
        else
        {
            echo " ";
        }
        $i = 0;
        for ( ; $i < $level; ++$i )
        {
            echo " ";
        }
        $sql3 = "SELECT product_id from products WHERE category_id='".$parent."'";
        if ( !( $result3 = @mysql_query( $sql3, $connection ) ) )
        {
            exit( "Couldn't get data from products db" );
        }
        $numrows = mysql_num_rows( $result3 );
        if ( $numrows < 1 )
        {
            $linker = "";
        }
        else
        {
            $linker = "<input type=\"button\" class=\"list\" onclick=\"location.href='".$adminurl."products/productlist.php?category_id={$row1['category_id']}'\" value=\"Products ({$numrows})\" />";
        }
        echo "\t<tr>\n\t\t<td> &raquo; (".$level.") <a href=\"{$adminurl}products/editcategory.php?category_id={$row1['category_id']}\" title=\"{$row1['category_desc']}\">{$row1['category_name']}</a></td>\n\t\t\t<td>";
        if ( $row1[category_publish] == Y )
        {
            echo "<input type=\"button\" class=\"deactivate\" value=\"(click to deactivate)\" onclick=\"location.href='".$adminurl."products/bin/categoryonoff.php?category_id={$row1['category_id']}&act=N'\" />";
        }
        else
        {
            echo "<input type=\"button\" class=\"activate\" value=\"(click to activate)\" onclick=\"location.href='".$adminurl."products/bin/categoryonoff.php?category_id={$row1['category_id']}&act=Y'\" />";
        }
        echo "</td> \n\t\t\t<td><input type=\"button\" class=\"add\" onclick=\"location.href='".$adminurl."products/addproduct.php?category_id={$row1['category_id']}'\" value=\"Add\" /> {$linker}</td>\n\t\t\t<td> <input type=\"button\" class=\"edit\" onclick=\"location.href='{$adminurl}products/editcategory.php?category_id={$row1['category_id']}'\" value=\"Edit\" /> <input type=\"button\" class=\"delete\" value=\"DELETE\" onclick='usr_conf(\"{$adminurl}products/bin/deletecategory.php\",\"category_id={$row1['category_id']}\",\"Are you sure you want to delete this category?\");' /></td>\n\t</tr>\n";
        getchildrenlist( $parent, $level );
        $last_level = $level;
    }
}

function productcheckcategories( )
{
    global $connection;
    global $oktoadd;
    $sql3 = "SELECT * from categories";
    if ( !( $result3 = @mysql_query( $sql3, $connection ) ) )
    {
        exit( "Couldn't get data from category db" );
    }
    $numrows = mysql_num_rows( $result3 );
    if ( 1 <= $numrows )
    {
        $oktoadd = "Y";
    }
}

function countrycompareDD( $country_dd )
{
    global $connection;
    echo "<select name=\"country\">";
    $sql3 = "SELECT country_short, country_long from country WHERE zone_id !='0'";
    if ( !( $result3 = @mysql_query( $sql3, $connection ) ) )
    {
        exit( "Couldn't execute request 1" );
    }
    while ( $row3 = mysql_fetch_array( $result3 ) )
    {
        if ( $row3[country_short] == $country_dd )
        {
            echo "<option value=\"".$row3['country_short']."\" selected>{$row3['country_long']}</option>\n";
        }
        else
        {
            echo "<option value=\"".$row3['country_short']."\">{$row3['country_long']}</option>\n";
        }
    }
    echo "</select>";
}

function alternatecolour( $level )
{
    global $altclass;
    $class_1 = " class=altlight";
    $class_2 = " class=altdark";
    $altclass = $class_1;
    $level % 2 ? 0 : ( $altclass = $class_2 );
}

function check_email_address( $email )
{
    if ( !preg_match( "/[^@]{1,64}@[^@]{1,255}/i", $email ) )
    {
        return FALSE;
    }
    $email_array = explode( "@", $email );
    $local_array = explode( ".", $email_array[0] );
    $i = 0;
    for ( ; $i < sizeof( $local_array ); ++$i )
    {
        if ( preg_match( ">^(([A-Za-z0-9!#\$%&'*+/=?^_`{|}~-][A-Za-z0-9!#\$%&'*+/=?^_`{|}~\\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))\$>i", $local_array[$i] ) )
        {
            continue;
        }
        return FALSE;
    }
    if ( !preg_match( "/^\\[?[0-9\\.]+\\]?\$/i", $email_array[1] ) )
    {
        $domain_array = explode( ".", $email_array[1] );
        if ( sizeof( $domain_array ) < 2 )
        {
            return FALSE;
        }
        $i = 0;
        for ( ; $i < sizeof( $domain_array ); ++$i )
        {
            if ( preg_match( "/^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))\$/i", $domain_array[$i] ) )
            {
                continue;
            }
            return FALSE;
        }
    }
    return TRUE;
}

if ( get_magic_quotes_gpc( ) )
{
    $in = array(
        $GLOBALS['_GET'],
        $GLOBALS['_POST'],
        $GLOBALS['_COOKIE']
    );
    while ( list( $k, $v ) = each( &$in ) )
    {
        foreach ( $v as $key => $val )
        {
            if ( !is_array( $val ) )
            {
                $in[$k][$key] = stripslashes( $val );
            }
            else
            {
                $in[] =& $in[$k][$key];
            }
        }
    }
    unset( $in );
}
if ( isset( $_POST ) || isset( $_GET ) )
{
    $in = array(
        $GLOBALS['_GET'],
        $GLOBALS['_POST']
    );
    while ( list( $k, $v ) = each( &$in ) )
    {
        foreach ( $v as $key => $val )
        {
            if ( !is_array( $val ) )
            {
                if ( ( $key == "txtContent" || $key == "category_desc" || !( $key == "metaadd" ) && !( $admin_ok_check == $_SESSION[admin_ok] ) ) || !preg_match( "/".$adminDir."/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/paypalcallback.php/", "{$_SERVER['PHP_SELF']}" ) || !preg_match( "/updatecurrency.php/", "{$_SERVER['PHP_SELF']}" ) )
                {
                    if ( !preg_match( "/createcurrency.php/", "{$_SERVER['PHP_SELF']}" ) )
                    {
                        $val = preg_replace( "/\\s+/", " ", $val );
                        $in[$k][$key] = htmlentities( trim( $val ) );
                    }
                }
            }
            else
            {
                $in[] =& $in[$k][$key];
            }
        }
    }
    unset( $in );
}
$sYear = "2007";
$cwd = dirname( __FILE__ );
$instdir = str_replace( "private", "", "{$cwd}" );
include( "{$instdir}private/config.php" );
include( "{$instdir}private/cache.php" );
include( "{$instdir}private/pca_config.php" );
if ( empty( $shopurl ) )
{
    header( "Location: install/" );
    exit( );
}
include( "{$instdir}private/db_connect.php" );
include( "{$instdir}private/messages.php" );
include( "{$instdir}private/shop_messages.php" );

$admin_dirs = array( "settings", "orders", "newsletter", "reports", "shoppers", "products", "content" );
$mtta = array( "mail", "smtp" );
$ppgfields = array( "ppemail", "ppmerchantid", "ppsecret", "pptestmode", "ppinstid", "ppintip", "ppextip", "ppgiftaid", "ppApply3DSecure", "ppApplyAVSCV2", "ppauthmode", "ppsignature" );
$category_style = array( "List with Thumbnail", "List no Thumbnail", "Grid" );
$category_sort_order = array( "Alphabetical", "Newest Items First", "Newest Items Last", "Featured Items First", "Custom Sort", "Price Low - High", "Price High - Low" );
$sf_style = array( "List", "Grid" );
$sf_sort_order = array( "Alphabetical", "By ID", "Randomised" );
$cf_sort_order = array( "Alphabetical", "By ID", "Custom" );
$allow_next = array( "selectdeliveryaddress.php", "revieworder.php", "reviewproduct.php", "revieworder.php?clearptid=Y", "orders.php" );
if ( $_GET[next] && !in_array( "{$_GET['next']}", $allow_next ) )
{
    echo "Not allowed!";
    exit( );
}
if ( !ctype_digit( $_GET[cmsid] ) )
{
    $GLOBALS['_GET'][cmsid] = "";
}
$GLOBALS['_GET'][cmsid] = mysql_real_escape_string( "{$_GET['cmsid']}" );
if ( !ctype_digit( $_GET[category_id] ) )
{
    $GLOBALS['_GET'][category_id] = "";
}
$GLOBALS['_GET'][category_id] = mysql_real_escape_string( "{$_GET['category_id']}" );
if ( !ctype_digit( $_GET[product_id] ) )
{
    $GLOBALS['_GET'][product_id] = "";
}
$GLOBALS['_GET'][product_id] = mysql_real_escape_string( "{$_GET['product_id']}" );
if ( !ctype_digit( $_GET[product_xo_id] ) )
{
    $GLOBALS['_GET'][product_xo_id] = "";
}
$GLOBALS['_GET'][product_xo_id] = mysql_real_escape_string( "{$_GET['product_xo_id']}" );
if ( !ctype_digit( $_GET[o_id] ) )
{
    $GLOBALS['_GET'][o_id] = "";
}
$GLOBALS['_GET'][o_id] = mysql_real_escape_string( "{$_GET['o_id']}" );
if ( !ctype_digit( $_GET[p_id] ) )
{
    $GLOBALS['_GET'][p_id] = "";
}
$GLOBALS['_GET'][p_id] = mysql_real_escape_string( "{$_GET['p_id']}" );
if ( !ctype_digit( $_GET[a_id] ) )
{
    $GLOBALS['_GET'][a_id] = "";
}
$GLOBALS['_GET'][a_id] = mysql_real_escape_string( "{$_GET['a_id']}" );
$GLOBALS['_POST'][query_string] = mysql_real_escape_string( "{$_POST['query_string']}" );
if ( !ctype_digit( $_POST[pre_xo_id] ) )
{
    $GLOBALS['_POST'][pre_xo_id] = "";
}
$GLOBALS['_POST'][pre_xo_id] = mysql_real_escape_string( "{$_POST['pre_xo_id']}" );
if ( !ctype_digit( $_POST[p_id] ) )
{
    $GLOBALS['_POST'][p_id] = "";
}
$GLOBALS['_POST'][p_id] = mysql_real_escape_string( "{$_POST['p_id']}" );
if ( !ctype_digit( $_POST[qty] ) )
{
    $GLOBALS['_POST'][qty] = "";
}
$GLOBALS['_POST'][qty] = mysql_real_escape_string( "{$_POST['qty']}" );
$GLOBALS['_POST'][loginemail] = mysql_real_escape_string( "{$_POST['loginemail']}" );
$GLOBALS['_POST'][loginpass] = mysql_real_escape_string( "{$_POST['loginpass']}" );
if ( $_POST[mail_outs] != "Y" && $_POST[mail_outs] != "N" )
{
    $GLOBALS['_POST'][mail_outs] = "Y";
}
$GLOBALS['_POST'][mail_outs] = mysql_real_escape_string( "{$_POST['mail_outs']}" );
$GLOBALS['_POST'][old_password] = mysql_real_escape_string( "{$_POST['old_password']}" );
$GLOBALS['_POST'][confirm_password] = mysql_real_escape_string( "{$_POST['confirm_password']}" );
$search = array( "@<script[^>]*?>.*?</script>@si", "@<[\\/\\!]*?[^<>]*?>@si", "@&(quot|#34);@i", "@&(amp|#38);@i", "@&(lt|#60);@i", "@&(gt|#62);@i", "@&(nbsp|#160);@i", "@&(iexcl|#161);@i", "@&(cent|#162);@i", "@&(pound|#163);@i", "@&(copy|#169);@i", "@&#(\\d+);@e" );
$replace = array(
    "",
    "",
    "\\1",
    "\"",
    "&",
    "<",
    ">",
    " ",
    chr( 161 ),
    chr( 162 ),
    chr( 163 ),
    chr( 169 ),
    "chr(\\1)"
);
$GLOBALS['_POST'][company] = mysql_real_escape_string( "{$_POST['company']}" );
$GLOBALS['_POST'][company] = mysql_real_escape_string( "{$_POST['company']}" );
$GLOBALS['_POST'][company] = preg_replace( $search, $replace, $_POST[company] );
$GLOBALS['_POST'][first_name] = mysql_real_escape_string( "{$_POST['first_name']}" );
$GLOBALS['_POST'][first_name] = preg_replace( $search, $replace, $_POST[first_name] );
$GLOBALS['_POST'][last_name] = mysql_real_escape_string( "{$_POST['last_name']}" );
$GLOBALS['_POST'][last_name] = preg_replace( $search, $replace, $_POST[last_name] );
$GLOBALS['_POST'][email] = mysql_real_escape_string( "{$_POST['email']}" );
$GLOBALS['_POST'][email] = preg_replace( $search, $replace, $_POST[email] );
$GLOBALS['_POST'][no_name] = mysql_real_escape_string( "{$_POST['no_name']}" );
$GLOBALS['_POST'][no_name] = preg_replace( $search, $replace, $_POST[no_name] );
$GLOBALS['_POST'][street] = mysql_real_escape_string( "{$_POST['street']}" );
$GLOBALS['_POST'][street] = preg_replace( $search, $replace, $_POST[street] );
$GLOBALS['_POST'][town] = mysql_real_escape_string( "{$_POST['town']}" );
$GLOBALS[

There seems to be something wrong with my code when run in Firefox I get an error, the full code is:
Code: [Select]
<head>
<script type="text/javascript" src="tabber.js"></script>
<link rel="stylesheet" href="example.css" TYPE="text/css" MEDIA="screen">
<link rel="stylesheet" href="example-print.css" TYPE="text/css" MEDIA="print">
<script type="text/javascript">
</script>
</head>
<div class="tabber">
<?php
if (!isset($_GET["name"]) || empty($_GET["name"])) 
{
$corpname = rawurlencode(stripslashes($_POST['corpname']));
}
else
{
$corpname = rawurlencode(stripslashes($_GET['name']));
}

//Check if Corp is in DataBase
$sql = "SELECT * FROM `corps` where `name` = '$corpname'";
$result = mysql_query($sql);
$num = mysql_num_rows($result);


// If Corp Is In DB
if ($num > 0)
{
While ($row = mysql_fetch_array($result))
{
?>
<div class="tabbertab">
<h2>Corp Info</h2>
<table width ="700" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="128" rowspan="7"><?php echo "<img src=http://image.eveonline.com/Corporation/".$row['id']."_128.png width=128 height=128 />"; ?></td>
    <td width="128">Corp Name</td>
    <td><?php echo "<a href= http://eve.battleclinic.com/killboard/combat_record.php?type=corp&name=".rawurlencode($row['name'])." target=_blank>".$row['name']."</a>"; ?></td>
  </tr>
  <tr>
    <td width="128">Ticker</td>
    <td><?php echo $row['ticker']; ?></td>
  </tr>
  <tr>
    <td width="128">Allance</td>
     <td><?php
$alliance = $row['alliance'];
if($alliance =="0")
{
$alliance0 = "No Alliance";
echo $alliance0;
}
Else
{
$sql = "SELECT * FROM `alliance` WHERE `id` = '$alliance'";
$result = mysql_query($sql);
$num=mysql_numrows($result);
$i=0;
while ($i < $num) {
$alliance0=mysql_result($result,$i,"name");
$i++;
}
echo $alliance0;
}
?></td>
  </tr>
  <tr>
    <td width="128">CEO Name</td>
    <td><?php echo "<a href=main.php?id=pilotsearch.php&name=".$row['ceo'].">".$row['ceo']."</a>"; ?></td>
  </tr>
  <tr>
    <td width="128">Headquarters</td>
    <td><?php echo $row['hq']; ?></td>
  </tr>
  <tr>
    <td width="128">Tax Rate</td>
    <td><?php echo $row['tax']; ?> %</td>
  </tr>
  <tr>
    <td width="128">Member Count</td>
    <td><?php echo $row['members']; ?></td>
  </tr>
</table>
</div>
<div class="tabbertab">
<?php
  $query=mysql_query("SELECT DISTINCT(name) FROM `characters` WHERE `corporation` = '$corpname' ORDER BY name ASC") or die("Error Occured,please try again");
$numm = mysql_num_rows($query);

      echo "<h2>Known Members (".$numm."/".$row['members'].") </h2>";

echo "<table border='0' width='100%' cellspacing='0' cellpadding='0'>";

$left = true;
while($row=mysql_fetch_array($query))
{
if ($left)
{
echo "<tr>";
}
echo "<td align='left' width='50%' cellspacing='0' cellpadding='0' >";
echo "<a href=main.php?id=pilotsearch.php&name=".rawurlencode($row['name']).">".$row['name']."</a>";
echo"</td>";
if (!$left)
{
echo"</tr>";
}
$left = !$left;
}

echo"</table>";
?>
</div>
<div class="tabbertab">
    <?php
 $sql = "SELECT * FROM `corpwhsystems` WHERE `corpname` = '$corpname'";
$result = mysql_query($sql);
$num_rows = mysql_num_rows($result);
echo"<h2>WH Locations (".$num_rows.")</h2>";


$i=0;
?>
<table width="728" border="0">
  <tr>
    <td><strong>System Name</strong></td>
    <td><strong>System Class</strong></td>
    <td><strong>Effect</strong></td>
    <td><strong>Date Added</strong></td>
    <td><strong>Added By</strong></td>
  </tr>
<?php  
while ($i <= $num_rows) {

$sname=mysql_result($result,$i,"systemname");
$sclass=mysql_result($result,$i,"systemtype");
$anomaly=mysql_result($result,$i,"anomaly");
$addedby=mysql_result($result,$i,"updatedby");
$dateupdated=mysql_result($result,$i,"dateupdated");

?>
  <tr>
    <td>
    <?php echo $sname; ?></td>
    <td>
    <?php echo $sclass; ?></td>
    <td>
        <?php echo $anomaly; ?></td>
    <td>
    <?php echo $dateupdated; ?></td>
    <td>
    <?php echo $addedby; ?></td>
<?php
$i++;
}
?>
  </tr>
</table>
<hr />
<form action="main.php?id=addwh.php" method="post">
Add WH Location: <input name="location" type="text" />
<select name="systemtype">
<option value="Class 1">Class 1</option>
<option value="Class 2">Class 2</option>
<option value="Class 3">Class 3</option>
<option value="Class 4">Class 4</option>
<option value="Class 5">Class 5</option>
<option value="Class 6">Class 6</option>
</select>
<select name="anomaly">
<option value="None">None</option>
<option value="Magnetar">Magnetar</option>
<option value="Red Giant">Red Giant</option>
<option value="Pulsar">Pulsar</option>
<option value="Wolf Rayet">Wolf Rayet</option>
<option value="Cataclysmic Variable">Cataclysmic Variable</option>
<option value="Black Hole">Black Hole</option>
</select>
<input name="corpname" type="hidden" value="<?php echo $cnamedb; ?>" />
<input name="addwh" type="submit" value="Add" />
</form>
</div>
<div class="tabbertab">
<?php
$sql = "SELECT * FROM `corps` WHERE `name` = '$corpname' AND `notedate` != '0000-00-00'";
$result = mysql_query($sql);
$num_rows = mysql_num_rows($result);
 echo"<h2>Notes(".$num_rows.")</h2>";


$i=0;
?>
<table width="700" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="480"><strong>Note</strong></td>
    <td width="119"><strong>Note Date</strong></td>
    <td width="101"><strong>Added By</strong></td>
  </tr>
<?php
while ($i <= $num_rows) {

$notes=mysql_result($result,$i,"notes");
$notedate=mysql_result($result,$i,"notedate");
$updatedby=mysql_result($result,$i,"updatedby");

?>
  <tr>
  <td><br />
    <?php echo $notes; ?></td>
  <td width="136"><br />
    <?php echo $notedate; ?></td>
  <td width="105"><br />
   <?php echo $updatedby; ?></td>
  </tr>
<?php
$i++;
}
?>
  </table>
 <hr />
 <form action="main.php?id=updatecorptint.php" method="post">
<strong>Add Notes:</strong>
<textarea name="notes" cols="50" rows="10"></textarea>
<input name="cname" type="hidden" value="<?php echo $cnamedb; ?>" />
<input name="add" type="submit" value="Add Notes" />
</form>
</div>
<div class="tabbertab">
<?php  
$sql = "SELECT * FROM `pos` WHERE `corp` = '$corpname'";
$result = mysql_query($sql);
$num_rows = mysql_num_rows($result);
  echo"<h2>POS (".$num_rows.")</h2>";


$i=0;
?>
POS:
<table width="700" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td><strong>Location</strong></td>
    <td><strong>Type</strong></td>
    <td><strong>Size</strong></td>
    <td><strong>Corp Hangars</strong></td>
    <td><strong>Ship Hangars</strong></td>
    <td><strong>Notes</strong></td>
   
  </tr>
<?php
while ($i <= $num_rows) {

$location=mysql_result($result,$i,"location");
$type=mysql_result($result,$i,"type");
$size=mysql_result($result,$i,"size");
$changar=mysql_result($result,$i,"changar");
$shangar=mysql_result($result,$i,"shangar");
$notes=mysql_result($result,$i,"notes");

?>
  <tr>
  <td><br /><?php echo $location; ?></td>
  <td><br /><?php echo $type; ?></td>
  <td><br /><?php echo $size; ?></td>
  <td><br /><?php echo $changar; ?></td>
  <td><br /><?php echo $shangar; ?></td>
  <td><br /><?php echo $notes; ?></td>
  </tr>
<?php
$i++;
}
?>
</table>
<hr />
<form action="main.php?id=addpos.php" method="post">
<table width="350" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td>Location:</td>
    <td><label for="location"></label>
      <input type="text" name="location" id="location" /></td>
    <td>Type:</td>
    <td><select name="type">
    <option value="Amarr">Amarr</option>
    <option value="Angel">Angel</option>
    <option value="Blood">Blood</option>
    <option value="Caldari">Caldari</option>
    <option value="Dark Blood">Dark Blood</option>
    <option value="Domination">Domination</option>
    <option value="Dread Guristas">Dread Guristas</option>
    <option value="Gallente">Gallente</option>
    <option value="Gurstas">Gurstas</option>
    <option value="Minmatar">Minmatar</option>
    <option value="Sansha">Sansha</option>
    <option value="Serpentis">Serpentis</option>
    <option value="Shadow">Shadow</option>
    <option value="True Sansha">True Sansha</option>
    </select></td>
    <td>Size:</td>
    <td><select name="size">
    <option value="Large">Large</option>
    <option value="Medium">Medium</option>
    <option value="Small">Small</option>
    </select></td>
  </tr>
  <tr>
    <td>Corp Hangars:</td>
    <td><input name="changar" type="text" size="10" /></td>
    <td>Ship Hangars:</td>
    <td><input name="shangar" type="text" size="10" /></td>
    <td>Notes:</td>
    <td><textarea name="notes"></textarea></td>
  </tr>
</table>
<input name="cname" type="hidden" value="<?php echo $cnamedb; ?>" />
<input name="submit1" type="submit" value="Add POS" />
</form>
</div>
</div>
<?php
}}
// IF Corp Is Not In DB
ELSE
{
$url = 'http://api.eve-dev.com/eve/CharacterID.xml.aspx?names='.$corpname.'';
$xml = simpleXML_load_file($url,"SimpleXMLElement",LIBXML_NOCDATA);
$url = 'http://api.eve-dev.com/eve/CharacterID.xml.aspx?names='.$corpname.'';
$xml = simpleXML_load_file($url,"SimpleXMLElement",LIBXML_NOCDATA);
$corpid = $xml->result->rowset->row['characterID'];
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
if($corpid == 0 OR $cname =="")
{
Echo $corpname."<br>No Corp Found In EVE Database";
}
ELSE
{
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
$ticker = $xml1->result->ticker;
$ceo = $xml1->result->ceoName;
$station = $xml1->result->stationName;
$descrption = $xml1->result->description;
$alliance = $xml1->result->allianceID;
$tax = $xml1->result->taxRate;
$members = $xml1->result->memberCount;
$username = $_SESSION['username'];
mysql_query("INSERT INTO `corps` (`editid` , `id` , `name` , `ticker` , `alliance` , `ceo` , `tax` , `members` , `hq` , `apidate` , `notes` , `notedate` , `updatedby`) VALUES ( '' , '$corpid', '$cname', '$ticker', '$alliance', '$ceo', '$tax', '$members', '$station', NOW(), '', '', '$username')");
header('Location: main.php?id=corpsearch.php&name='.$corpname);
exit;
}
}
?>

The problem area is somewhere in here (I think):
Code: [Select]
// IF Corp Is Not In DB
ELSE
{
$url = 'http://api.eve-dev.com/eve/CharacterID.xml.aspx?names='.$corpname.'';
$xml = simpleXML_load_file($url,"SimpleXMLElement",LIBXML_NOCDATA);
$url = 'http://api.eve-dev.com/eve/CharacterID.xml.aspx?names='.$corpname.'';
$xml = simpleXML_load_file($url,"SimpleXMLElement",LIBXML_NOCDATA);
$corpid = $xml->result->rowset->row['characterID'];
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
if($corpid == 0 OR $cname =="")
{
Echo $corpname."<br>No Corp Found In EVE Database";
}
ELSE
{
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
$url1 = 'http://api.eve-dev.com/corp/CorporationSheet.xml.aspx?CorporationID='.$corpid.'';
$xml1 = simpleXML_load_file($url1,"SimpleXMLElement");
$cname = $xml1->result->corporationName;
$ticker = $xml1->result->ticker;
$ceo = $xml1->result->ceoName;
$station = $xml1->result->stationName;
$descrption = $xml1->result->description;
$alliance = $xml1->result->allianceID;
$tax = $xml1->result->taxRate;
$members = $xml1->result->memberCount;
$username = $_SESSION['username'];
mysql_query("INSERT INTO `corps` (`editid` , `id` , `name` , `ticker` , `alliance` , `ceo` , `tax` , `members` , `hq` , `apidate` , `notes` , `notedate` , `updatedby`) VALUES ( '' , '$corpid', '$cname', '$ticker', '$alliance', '$ceo', '$tax', '$members', '$station', NOW(), '', '', '$username')");
header('Location: main.php?id=corpsearch.php&name='.$corpname);
exit;
}
}
?>

Any one with any ideas?

I am trying to integrate facebook login into my application.  If the user isn't logged in,  I want to make sure that they get sent to the index page, but this doesn't work.

Code: [Select]
<?php

if ($user) {
  try {
    // Proceed knowing you have a logged in user who's authenticated.
    $user_profile = $facebook->api('/me');
  } catch (FacebookApiException $e) {
$user = null;
    //echo '<pre>'.htmlspecialchars(print_r($e, true)).'</pre>';
  }
} else {
header('Location: /');
}

?>

Any thoughts on how to fix?

I keep getting a 'The page isn't redirecting properly error on Firefox.  Anyone have an idea?  I think it has something to do with the header() function, but I can't seem to pinpoint it.  Code for the two files are below.

Code: [Select]
login.php

<?php

require_once('./lib/myform.class.php');
require_once('./functions.php');

$page = 'Login Page';
$myStyles = './css/mystyles.css';


if (isset($_POST['submit'])) {

$error_ar = array();
$values_ar = array();


$username = sanatize($_POST['username']);
$password = sanatize($_POST['password']);

if (empty($username)) {

$error_ar['username'] = 'You must enter your username';
//echo $arr_error['username'];
}

else {

$values_ar['username'] = $_POST['username'];
}

if (empty($password)) {

$error_ar['password'] = 'You must enter a password';
}

}

if (count($error_ar) == 0) {

session_start();

$_SESSION['username'] = $username;
$_SESSION['password'] = md5($password);


header('Location: processform.php');
exit();
}


?>


<html>
<head>
  <title><?php print $page ?></title>
  <link href="<?php print $myStyles ?>" rel="stylesheet" type="text/css">
 
</head>

<body>
<div id="container">
<div id="form">

<?php 


$f = new myForm($error_ar);


$f->beginForm("login.php");

$f->beginFieldset(array('class'=>'form'));
$f->addLegend($page);
$f->beginList();

$f->beginListItem();
$f->addLabel('username', 'Username');
$f->addInput('text', 'username', $values_ar['username'], array('class'=>'text', 'id'=>'username'));
$f->endListItem();

$f->beginListItem();
$f->addLabel('password', 'Password');
$f->addPassword();
$f->endListItem();

$f->endList();
$f->endFieldset();

$f->beginFieldset(array('class'=>'form'));
$f->addLegend('Submit');
$f->beginList();
$f->beginListItem();
$f->submitButton('Login', array('class'=>'submit'));
$f->endListItem();
$f->endList();
$f->endFieldset();

echo $f->printForm();

?>
</div>
</div>
</body>
</html>

Code: [Select]
processform.php


<?php

session_start();

require_once('./lib/mysqldb.class.php');



if (!isset($_SESSION['username'])) {
header('Location: login.php');
exit();
}

$db = new MySQLDB();

$username =  $_SESSION['username'];
$password =  $_SESSION['password'];

if ($db->authenticateUser($username, $password)) {

echo "SUCCESS!!!";
}

else {



$_SESSION = array();
session_destroy();

header('Location: login.php');


}






?>