Unnamed

<style type="text/css"><!--.style3 {font-family: Tahoma; font-size: 12px; }.style6 {	font-family: Tahoma;	font-size: 14px;	font-weight: bold;}.style7 {font-size: 12px}.style9 {font-size: 12px; font-weight: bold; font-family: Tahoma;}.style10 {	font-family: Tahoma;	font-size: 11px;}.supersubmit {padding:5px;margin:3px;background-color:#EEEEEE;font-family:Tahoma;font-size:13px;outline-style:ridge;}.style13 {font-family: Tahoma; }.style14 {font-size: 16px}.style15 {font-family: Tahoma; font-size: 16px; font-weight: bold; }--></style><script type="text/javascript">function changer(el) { el2 = el.parentNode;siblings = el2.cells;for(i = 0; i < siblings.length; i++) { 	//alert(siblings[i]); 	siblings[i].style.backgroundColor = '#F8F8F8';}}function changer2(el) { el2 = el.parentNode;siblings = el2.cells;for(i = 0; i < siblings.length; i++) { 	//alert(siblings[i]); 	siblings[i].style.backgroundColor = '#FFFFFF';}}</script><title>Manage Users</title><br /><?php  error_reporting(1);    ?><div align="center" class="style10">  <?phpinclude("toolbar.php");echo "<BR>";	include("../common.php");	connectdb();if($_GET['action'] == "new"){	$sql = "select * from users where username = '".mysql_real_escape_string($_POST['username'])."'";	$query = mysql_query($sql) or die(mysql_error());		$numrows = mysql_num_rows($query);	if($numrows == 0)	{			$sql = "insert into users (username, fname, sdescription) values ('".mysql_real_escape_string($_POST['username'])."', '".mysql_real_escape_string($_POST['fname'])."', '".mysql_real_escape_string(nl2br($_POST['sdescription']))."')";		$query = mysql_query($sql) or die(mysql_error());		echo $sql;		} else {			echo "Username exists!";	}} elseif ($_GET['action'] == "delete" && $_GET['id'] != ""){	$_GET['id'] = (int) $_GET['id'];		$sql = "delete from users where userid = ".$_GET['id'];	$query = mysql_query($sql) or die(mysql_error());	echo "Deleted.<BR>";	} elseif ($_GET['action'] == "save"){} ?></div><div align="center"><br></div><div align="center"><?php if($_GET['action'] == "edit"){	$sql = "select * from users where userid =".$_GET['id'];	$query = mysql_query($sql) or die(mysql_error());		$row = mysql_fetch_array($query);		}if($_GET['action'] == "editsave"){	$sql = "update users set username = '".mysql_real_escape_string($_POST['username'])."', sdescription = '".mysql_real_escape_string(nl2br($_POST['sdescription']))."', fname = '".mysql_real_escape_string($_POST['fname'])."' where userid =".$_GET['id'];	$query = mysql_query($sql) or die(mysql_error());	echo "Edited.<BR>";}?><form action = "<?php if($_GET['action'] == "edit") echo "manowners.php?action=editsave&id=".$_GET['id']; else echo "manowners.php?action=new&id=".$_GET['id']; ?>" method = "post">  <table width="361" border="0" cellpadding="12" cellspacing="0" bordercolor="#ECE9D8" bgcolor="#EEEEEE">    <tr>      <td colspan="2"><div align="center"><span class="style15"><?php if($_GET['action'] == "edit") echo "Edit"; else echo "New"; ?> Owner </span></div></td>    </tr>    <tr>      <td bgcolor="#FFFFFF"><span class="style9">Username:</span></td>      <td bgcolor="#FFFFFF"><label>        <input type="text" name="username" value = "<?php echo $row['username']; ?>" />      </label></td>    </tr>        <tr>      <td bgcolor="#FFFFFF"><span class="style9">Full name: </span></td>      <td bgcolor="#FFFFFF"><input name="fname" type="text" id="fname" value = "<?php echo $row['fname']; ?>" /></td>    </tr>    <tr>      <td bgcolor="#FFFFFF"><span class="style9">Short Description: </span></td>      <td bgcolor="#FFFFFF"><input name="sdescription" type="text" id="sdescription" value = "<?php echo $row['sdescription']; ?>" /></td>    </tr>    <tr>      <td width="128" bgcolor="#FFFFFF">&nbsp;</td>      <td width="185" bgcolor="#FFFFFF"><input type="submit" name="Submit" value="Submit" /></td>    </tr>  </table>  </form>        <br />  <table width="778" border="0" cellpadding="10" cellspacing="0">    <tr>      <td colspan="5" bgcolor="#F0F0F0"><div align="center" class="style6 style14">Managing Owners </div></td>    </tr>    <tr>      <td bgcolor="#F0F0F0"><span class="style9">Username </span></td>      <td bgcolor="#F0F0F0"><div align="center"><span class="style9">Full Name </span></div></td>      <td bgcolor="#F0F0F0"><div align="center"><span class="style9">Short Description </span></div></td>      <td bgcolor="#F0F0F0"><div align="center" class="style9"># of homes </div></td>      <td bgcolor="#F0F0F0"><div align="center" class="style9">Options</div></td>    </tr>	<?php	$sql = "select * from users order by username DESC";	$query = mysql_query($sql) or die(mysql_error().$sql);	while($row = mysql_fetch_array($query))	{		$sql2 = "select homeid from homes where userid = ".$row['userid'];		$query2 = mysql_query($sql2) or die(mysql_error().$sql2);				$numrows = mysql_num_rows($query2);		?>		<tr>		  <td width="95" onmouseout="try { changer2(this); } catch (e) { } "  onmouseover="try { changer(this); } catch (e) { } "><span class="style3"><?php echo $row['username']; ?></span></td>		  <td width="165" onmouseout="try { changer2(this); } catch (e) { } "  onmouseover="try { changer(this); } catch (e) { } "><div align="center"><span class="style3"><?php echo $row['fname']; ?></span></div></td>		  <td width="172" onmouseout="try { changer2(this); } catch (e) { } "  onmouseover="try { changer(this); } catch (e) { } "><div align="center"><span class="style3">		    <?php echo $row['sdescription']; ?>	      </span></div></td>		  <td width="84" onmouseout="try { changer2(this); } catch (e) { } "  onmouseover="try { changer(this); } catch (e) { } "><div align="center" class="style13"><span class="style7"><?php echo $numrows; ?></span></div></td>		  <td width="162" onmouseout="try { changer2(this); } catch (e) { } "  onmouseover="try { changer(this); } catch (e) { } "><div align="center" class="style3"><a href="manowners.php?action=edit&amp;id=<?php echo $row['userid']; ?>">Edit</a> / <a href="manowners.php?action=delete&amp;id=<?php echo $row['userid']; ?>"> Delete</a></div></td>		</tr>	<?php	}	?>  </table></div>