StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

PORemove Users Script
primarykey
Id
16510545
data
AcceptedAnswerId
16510703
AnswerCount
2
ClosedDate
CommentCount
1
CommunityOwnedDate
CreationDate
2013-05-12T18:10:50.520
FavoriteCount
0
LastActivityDate
2016-02-27T00:03:52.257
LastEditDate
2016-02-27T00:03:52.257
LastEditorUserId
0
OwnerUserId
2371759
ParentId
0
PostTypeId
1
Score
0
ViewCount
961
LastEditorDisplayName
user5942421
text
Body
<p>I found this script for adding and deleting users on the internet and I tweaked it to make it work for my uses. I understand that this script is vulnerable to sql injection and that mysql_* is depreciated, but for my purposes it doesn't matter as this will never be released in a live environment.</p> <p>I am unable to delete any records. I also want to remove the add user functionality, for if a new user is to be created they can just use the registration page I have created.</p> <p>Here are the scripts:</p> <pre><code><?php //admin.php session_start(); $user = $_SESSION['username']; include ("connection.php"); $get = mysql_query ("SELECT * FROM Users WHERE username='$user'"); while ($row = mysql_fetch_assoc($get)) { $admin = $row['admin']; } if ($admin==0) die("Your not an ADMIN!"); ?> </code></pre> <p>Next Script:</p> <pre><code><?php//conection.php $mysql_hostname = "localhost"; $mysql_user = "root"; $mysql_password = ""; $mysql_database = "ninjaz_gaming"; $prefix = ""; $bd = mysql_connect($mysql_hostname, $mysql_user, $mysql_password) or die("Could not connect database"); mysql_select_db($mysql_database, $bd) or die("Could not select database"); ?> </code></pre> <p>Remove and update users script:</p> <pre><code><?php//urmuser.php include('admin.php'); include('connection.php'); if (isset($_POST['id']) && isset($_POST['username']) && isset($_POST['password']) && isset($_POST['email']) && isset($_POST['birth']) && isset($_POST['age']) && isset($_POST['ircts3']) && isset($_POST['game']) && isset($_POST['gender']) && isset($_POST['name']) && isset($_POST['admin'])) { $id = get_post('id'); $username = get_post('username'); $password = get_post(md5('password')); $email = get_post('email'); $birth = get_post('birth'); $age = get_post('age'); $ircts3 = get_post('ircts3'); $game = get_post('game'); $gender = get_post('gender'); $name = get_post('name'); $administrator = get_post('admin'); if (isset($_POST['delete']) && $id != "") { $query = "DELETE FROM Users WHERE id='$id'"; if (!mysql_query($query, $bd)) echo "DELETE failed: $query<br />" . mysql_error() . "<br /><br />"; } else { $query = "INSERT INTO Users VALUES" . "('$id', '$username', '$password', '$email', '$birth', '$age', '$ircts3', '$game', '$gender', '$name'. '$administrator')"; if (!mysql_query($query, $bd)) echo "INSERT failed: $query<br />" . mysql_error() . "<br /><br />"; } } echo <<<_END <form action="urmuser.php" method="post"><pre> Id: <input type="text" name="id" /> Username: <input type="text" name="username" /> Password: <input type="text" name="password" /> E-mail: <input type="text" name="email" /> Birth Year: <input type="text" name="birth" /> Age: <input type="text" name="age" /> IRCTS3: <input type="text" name="ircts3" /> Game: <input type="text" name="game" /> Gender: <input type="text" name="gender" /> Name: <input type="text" name="name" /> Admin: <input type="text" name="admin" /> <input type="submit" value="ADD USER" /> </pre></form> _END; $query = "SELECT * FROM Users"; $result = mysql_query($query); if (!$result) die ("Database access failed: " . mysql_error()); $rows = mysql_num_rows($result); for ($j = 0 ; $j < $rows ; ++$j) { $row = mysql_fetch_row($result); echo <<<_END <pre> Id: $row[0] Username: $row[1] Password: $row[2] Email: $row[3] Birth: $row[4] Age: $row[5] IRCTS3: $row[6] Fav Game: $row[7] Gender: $row[8] Name: $row[9] Admin: $row[10] </pre> <form action="urmuser.php" method="post"> <input type="hidden" name="delete" value="yes" /> <input type="hidden" name="id" value="$row[0]" /> <input type="submit" value="DELETE USER" /></form> _END; } mysql_close($bd); function get_post($var) { return mysql_real_escape_string($_POST[$var]); } ?> </code></pre>
Tags
<php>
Title
Remove Users Script
singulars
PostAcceptedAnswerId
1. PO
  singulars
  PostTypePostTypeId
  PTAnswer
PostParentId
1. This table or related slice is empty.
PostTypePostTypeId
1. PTQuestion
UserLastEditorUserId
1. This table or related slice is empty.
UserOwnerUserId
1. USNick
plurals
PostLinksPostIdRelatedPostId
1. This table or related slice is empty.
PostLinksRelatedPostIdPostId
1. This table or related slice is empty.
PostsAcceptedAnswerId
1. This table or related slice is empty.
PostsParentIdCreationDate
1. PO
  singulars
  PostTypePostTypeId
  PTAnswer
2. PO
  singulars
  PostTypePostTypeId
  PTAnswer
VotesPostIdCreationDate
1. This table or related slice is empty.
CommentsPostId
1. COCan you fix the indentation, it's hard to tell the nesting of your `if` statements.
  singulars
  PostPostId
  PORemove Users Script
  UserUserId
  USBarmar

Querying!

Guidance

A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.