"; include("../common.php"); connectdb(); if($_GET['action'] == "new") { $sql = "select * from users where username = '".mysql_real_escape_string($_POST['username'])."'"; $query = mysql_query($sql) or die(mysql_error()); $numrows = mysql_num_rows($query); if($numrows == 0) { $sql = "insert into users (username, fname, sdescription) values ('".mysql_real_escape_string($_POST['username'])."', '".mysql_real_escape_string($_POST['fname'])."', '".mysql_real_escape_string(nl2br($_POST['sdescription']))."')"; $query = mysql_query($sql) or die(mysql_error()); echo $sql; } else { echo "Username exists!"; } } elseif ($_GET['action'] == "delete" && $_GET['id'] != "") { $_GET['id'] = (int) $_GET['id']; $sql = "delete from users where userid = ".$_GET['id']; $query = mysql_query($sql) or die(mysql_error()); echo "Deleted.
"; } elseif ($_GET['action'] == "save") { } ?>