Dr4g

// User Form With Drop Down Box	<form action=change-rank.php method=post>	  <table width="300" border="0">        <tr>          <td colspan="2">Please Enter The User's ID You'd Like To Change</td>          </tr>        <tr>          <td width="70">User </td>          <td width="220">		  <select name="form_id">		  <?php		  	// Output All User Nicks Associated With Their ID			$query = "SELECT `id`,`nick` FROM `users`";			$result = mysql_query($query);			while($user = mysql_fetch_row($result)) {				echo "<option value='$user[0]'>$user[1]</option>";			}		   		  ?>		  </select>		  </td>        </tr>        <tr>          <td width="70">User Rank</td>          <td width="220"><input type=text name=form_rank maxlength="2" size="16" /></td>        </tr>		        <tr>          <td>&nbsp;</td>          <td><input type=submit name="changeUserRank" value="Change Rank !" /></td>        </tr>      </table>	</form>// Function changeUserRank()function changeUserRank() {	if(!is_numeric($_POST['form_id']))		return 2;			if(!is_numeric($_POST['form_rank']))		return 2;				if(empty($_POST['form_id']))		echo "Form Field 'USER' Not Entered.<br/>Click <a href=change-rank.php>Here</a> to try again.";			if(empty($_POST['form_rank']))		echo "Form Field 'RANK' Not Entered.<br/>Click <a href=change-rank.php>Here</a> to try again.";					$idE = $_POST['form_id'];	$id = htmlentities($idE, ENT_QUOTES);		$rankE = $_POST['form_rank'];	$rank = htmlentities($rankE, ENT_QUOTES);			$query = "UPDATE `users` SET `rank`='$rank' WHERE `id`='$id'";	$sql = mysql_query($query);	if(mysql_affected_rows()==0)		return 0;	else		return 1;}// Handler for changeUserRank() function	if(isset($_POST['changeUserRank'])) {		$ret = changeUserRank(); 		if($ret==0) echo "Unable To Update User ID";		elseif($ret==1) echo "User ID Updated!.";		elseif($ret==2) echo "Non-Numeric ID Entered!.<Br/>Click <a href=change-rank.php>Here</a> to try again.";			} else {                // Display above form