Something

<?
mysql_connect(localhost,"","");
mysql_select_db("btssu") or die("Unable to select database");

function sqlesc($x) {
    return "'".mysql_real_escape_string($x)."'";
}
if ($_SERVER["REQUEST_METHOD"] == "POST"){
	if($_GET["action"]=="add"){
		$name=trim(sqlesc($_POST["name"]));
		$location=trim(sqlesc($_POST["location"]));
		$url=trim(sqlesc($_POST["url"]));
		if (!$name || !$location || !$url){
		//if ($name=="" || $location=="" || $url==""){
			print "Error, missing form data.";
		}else{
			mysql_query("INSERT INTO hosts (name, location, url) VALUES($name,  $location, $url)");
			header("location:hosts.php");
		}
	}else if($_GET["action"]=="rate"){
		$rated=$_POST['rating'];
		if($rated==0){ exit; }
		$id=$_GET["id"];
		list($rate_sum, $rate_num) = mysql_fetch_array(mysql_query("SELECT rate_sum,rate_num FROM hosts WHERE id='".mysql_real_escape_string($id)."'"));
		$rate_sum=$rate_sum+$rated;
		$rate_num++;
		mysql_query("UPDATE hosts SET rate_sum='$rate_sum', rate_num='$rate_num' WHERE id='$id'");
		header("location:hosts.php");
	}
}
?>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1250" />
<link rel="shortcut icon" href="icon/favicon.ico" type="image/x-icon" />
<title>Hosts @ BTSSU.org</title>
<link href="styleLog.css" rel="stylesheet" type="text/css">
</head>
<body>
<center>
<?php
$result=mysql_query("SELECT * FROM hosts");
$hosts_num=mysql_numrows($result);

function tr($x,$y,$noesc=0) {
    if ($noesc)
        $a = $y;
    else {
        $a = htmlspecialchars($y);
        $a = str_replace("\n", "<br />\n", $a);
    }
    print("<tr><td class=\"heading\" valign=\"top\" align=\"right\">$x</td><td valign=\"top\" align=left>$a</td></tr>\n");
}

print "<center><table border=1 cellspacing=0 cellpadding=5><tr bgcolor='#BBBBBB'>
	   <td><b><u>Host</u></b></td>
	   <td><b><u>Location</u></b></td>
	   <td><b><u>URL</u></b></td>
	   <td><b><u>Rating</u></b></td></tr>";
	
	for ($i=0; $i<$hosts_num; $i++) {//For1 
		$id=mysql_result($result,$i,"id");
		$name=mysql_result($result,$i,"name");
		$location=mysql_result($result,$i,"location");
		$url=mysql_result($result,$i,"url");
		$rate_sum=mysql_result($result,$i,"rate_sum");
		$rate_num=mysql_result($result,$i,"rate_num");
		@$rating=$rate_sum/$rate_num;
		$rating=round($rating, 1);		
		print "<tr><input type='text' style='visibility:hidden' name='id' value=$id><td><a href=hostdetails.php?host_id=".$id.">$name</a></td><td>$location</td><td>$url</td><td><form method=\"post\" action=\"hosts.php?action=rate&id=".$id."\"><input type=\"hidden\" name=\"id\" value=\"".$id."\">".($rate_num==0 ? "no rating" : $rating."/5")." 
		<select name=\"rating\">
		<option value=0>(add rating)</option>
		<option value=1>1 - Sucks!</option>
  		<option value=2>2 - Pretty bad</option>
  		<option value=3>3 - Decent</option>
  		<option value=4>4 - Pretty good</option>
  		<option value=5>5 - Great!</option>
		</select><input type=submit value='Rate it!'></form></td></tr>";
		
		
	}//End For1
print "<br>";

/*print("<tr><td>Rating</td><td>
	<select name=\"rating\">
		<option value=1>1 - Sucks!</option>
  		<option value=2>2 - Pretty bad</option>
  		<option value=3>3 - Decent</option>
  		<option value=4>4 - Pretty good</option>
  		<option value=5>5 - Great!</option>
	</select>");*/

ob_start("ob_gzhandler");

	print "<br><br>";
		
	print("<table border=1 cellspacing=0 cellpadding=5>");
	print("<br>Add Host<br>");
	print("<form method=post action=hosts.php?action=add>");
	print("<tr><td class=rowhead>Name</td><td><input type=text name=name size=40></td></tr>");
	print("<tr><td class=rowhead>Location</td><td><input type=text name=location size=40></td></tr>");
	print("<tr><td class=rowhead>URL</td><td><input type=text name=url size=40></td></tr>");
	print("<tr><td colspan=2><input type=submit value='Add' class=btn></td></tr>");
	print("</form></table>");




?>
</center>
</body>
</html>