<?phpsession_start();include("db.php");// If not logged in, redirect.if (!isset($_SESSION['sess_user'])){ header("Location: index.php"); exit;}?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Welcome</title></head><body>Welcome <?=$_SESSION['sess_user'] ?><br><br>This page is as ugly as could be, but it shouldn't be a problem to fix that.<br><br><a href="index.php?logout=">Logout</a>         <a href="site.php?user=<?=$_SESSION['sess_id'] ?>">Visit homepage.</a> <br><br><br><br><!----------------------------------------------------------------><hr><br><b>Current layout: </b><?php $result = mysql_query("SELECT * FROM members WHERE id='{$_SESSION['sess_id']}'") or die(mysql_error()); $person = mysql_fetch_array($result, MYSQL_ASSOC); if ($person['template'] == "") { print 'Ingen vald!<br><br>'; } else { print $person['template']."<br><br>\n"; }?><br><!----------------------------------------------------------------><hr><h3> Ändra template </h3> <form method="post"> <select name="mall"><?php if (isset($_POST['template'])) { mysql_query("UPDATE members SET template='{$_POST['mall']}' WHERE id='{$_SESSION['sess_id']}'"); } $mapp_handtag=opendir("./templates"); // Öppna mappen (aktuell mapp) while($tmp = readdir($mapp_handtag)) // Läs in filer och mappar i variabeln tmp { if (($tmp != ".") && ($tmp != "..")) // Kolla så tmp inte är lika med . eller .. { if (filetype("./templates/".$tmp)=="dir") // Är det en mapp? { echo '<option>'.$tmp.'</option>'; } } } closedir($mapp_handtag);?> </select> <input type="submit" name="template" value="Byt mall"> </form><br><!----------------------------------------------------------------><?php if (isset($_POST['skapa_site'])) { mysql_query("INSERT INTO sidor (owner_id, name) VALUES('{$_SESSION['sess_id']}', '{$_POST['sidname']}')") or die(mysql_error()); }?><hr><h3> Skapa site </h3><form method="post">name (för menyn): <input type="text" name="sidname"><input type="submit" name="skapa_site" value="Spara"></form><br><br><!----------------------------------------------------------------><hr><h3> Radera site </h3><form method="post"> <select name="siten"><?php if (isset($_POST['radera_site'])) { mysql_query("DELETE FROM sidor WHERE id='{$_POST['siten']}' AND owner_id='{$_SESSION['sess_id']}'") or die(mysql_error()); } $result = mysql_query("SELECT * FROM sidor WHERE owner_id='{$_SESSION['sess_id']}'") or die(mysql_error()); while ($row = mysql_fetch_array($result, MYSQL_BOTH)) { print '<option value="'.$row['id'].'">'.$row['name'].'</option>'; }?> </select><input type="submit" name="radera_site" value="Radera"></form><br><br><!----------------------------------------------------------------><hr><h3> Ändra site </h3><form method="post" action="edit.php"> <select name="siten"><?php $result = mysql_query("SELECT * FROM sidor WHERE owner_id='{$_SESSION['sess_id']}'") or die(mysql_error()); while ($row = mysql_fetch_array($result, MYSQL_BOTH)) { print '<option value="'.$row['id'].'">'.$row['name'].'</option>'; }?> </select><input type="submit" name="andra_site" value="Ändra"></form></body></html>