Archief - PHP: 2 vraagjes (session vraagje / addslashes vraagje)

//slashes toevoegen aan vars
$login = addslashes($uname);
$pass = md5(addslashes($upass));

//query uitvoeren
$query = mysql_query("SELECT * FROM tblUsers WHERE username = '$login' AND userpass = '$pass'");

//resulaat van query stockeren
$result = mysql_num_rows($query);

//Als er 1 account gevonden is, dan IF uitvoeren
if($result == '1')
{
	$userid = mysql_query("SELECT userid FROM tblUsers WHERE username = '$login' AND userpass = '$pass'");
	$ingelogd = 1;
	session_register("userid");
	session_register("ingelogd");
					
					
	$showfunctions = 1;
}

if($submit)
{
	//vars inlezen
	$ntitel = $_POST[title];
	$nmessage = $_POST[message];
				
	//controle op de invoer
	if(empty($ntitel) || empty($nmessage))
	{
		$errorempty = 1;
	}
	else
	{
		$ntitel = addslashes($ntitel);
		$nmessage = addslashes($nmessage);
		$ntimestamp = date("Y-m-d H:i:s");
		$nposter = $userid; //userid ophalen uit session
					
		mysql_query("INSERT INTO tblNews (newstitle, newsmessage, newstimestamp, newsposter) VALUES ('$ntitel', '$nmessage', '$ntimestamp', '$nposter')");
					
		$errorempty = 0;
		$sent = 1;
	}
}