$reply = array(); if ( strlen($_COOKIE['sid']) == 18 ) { $reply = query("SELECT code FROM sessions WHERE sid='".escape($_COOKIE['sid'],'str')."' AND ipaddr='".getipaddr()."'"); } $userinfo = null; if ( count($reply) != 0 ) { $reply = query("SELECT * FROM users WHERE code=".$reply[0][0]); if ( count($reply) != 0 ) { $userinfo = $reply[0][0]; } } if ( ($userinfo == null) && ( ($_GET['main'] == 'messager') || ($_GET['main'] == 'create') || ($_GET['main'] == 'huntlist') || ($_GET['main'] == 'speedlist') || ($_GET['main'] == 'control') || ($_GET['main'] == 'profile') || ($_GET['main'] == 'newmsg') || ($_GET['main'] == 'setlist') ) ) { error($msg_invalidSID); }