forum fejl

PHP kode 

 <?php
 session_start();
 ob_start();
 
 require("pages_design/header.php");
 include ("../connection/config.php");
 
 
 if (!empty($_GET['slet'])) {
 
     $id = $_GET['id'];
     //$theDeleteId = mysql_escape_string($_GET[slet]);
 mysql_query("UPDATE forum_svar SET synlig = 'nej' WHERE nr = '$id'") or die(mysql_error());    
     
     header("Location:forum.laes.php?id=$_GET[id]");
 }
 
 if (!empty($_GET['slettrad'])) {
 
     $id = $_GET['id'];
     //$theDeleteId = mysql_escape_string($_GET['slettrad']);
     mysql_query("UPDATE forum SET synlig = 'nej' WHERE id = '$id'") or die(mysql_error());
     
     
     header("Location:forum.php");
 }
 
 
     
 if(isset($_POST['submit']))
 {
     $navn = $_POST['navn'];
     $dato    = date('d/m-Y');
     $klok    = date('H:i');
     $svar = $_POST['svar'];
     $nr = $_POST['nr'];
     $ip = $_SERVER['REMOTE_ADDR'];
     
         if(empty($navn) || empty($svar))
         {
             $fejl = "<img src='../images/ikoner/exclamation.png' alt='Fejl' /> Alle felter skal udfyldes<br /><br />";
         } else {
         
             
     
     mysql_query("INSERT INTO forum_svar (id, navn, svar, dato, klok, nr, ip) VALUES ('', '$navn', '$svar', '$dato', '$klok', '$nr', '$ip')") or die(mysql_error());
     
     $oprettet = "Svaret blev oprettet";
         }
 }
 
 
 $id = $_GET[id];
 
 // Tjekker om der er klikket på Slet indlæg
 
 
 
 if(!empty($id)){
 
     $hent = mysql_query("SELECT * FROM forum WHERE id = '$id'") or die(mysql_error()); // Henter Alt fra tabellen forum
     $vis = mysql_fetch_array($hent);
 
     echo "<center>";
     echo $fejl;
     ?>
     </center>
 
 <div style="width:506px; height:26px; color:#c4c4c4; border:1px solid #c5c5c5; background-color:#ededed; margin-left:20px;" id="forum_menu">
 <div style="width:350px; height:20px; color:#c4c4c4; border-top:1px solid #ffffff; background-color:#ededed; padding-left:150px; padding-top:5px;" id="forum_menu2">
 | <a href="forum.php">Forum</a> | 
 <a href="forum.regler.php">Regler</a> |
 <a href="forum.opret.php">Opret Spørgesmål</a> |
 </div><!-- forum_menu2 -->
 </div><!-- forum_menu -->
 <br />
 <br />
     <center>
     <table bgcolor='black' cellpadding='2' cellspacing='1' width='485'>
     <tr>
     <td style="background-image:url(../images/forum_trod.png); color:#FFFFFF;" width="477">
     
     <?php echo "Skrevet af <b>". $vis['forfatter'] ."</b>"; ?>
     <?php echo "D. <b>". $vis['dato'] ."</b>"; ?>
     <?php echo "Kl: <b>". $vis['klok'] ."</b>"; ?>    </td>
     </tr><tr>
     <td bgcolor='#f9f9f9' height='50' valign='top'>
     
     <?php echo nl2br($vis[spg]); ?>
 
     </td>
     </tr>
 <?php
     if($_SESSION['brugernavn'] == true)
     {
     ?>
         <tr>
         <td bgcolor="#f9f9f9">
         
         
         <div style="float:left; margin-right:5px;" id="admin_menu">Admin Menu: </div>
          <a href="forum.laes.php?slettrad=ja&id=<?php echo $_GET[id]; ?>"><img border="0" onmouseover="Tip('Slet Svar')" onmouseout="UnTip()" src="../images/ikoner/cross.png" /></a>
          <a href="administrator/ban.php?ban=<?php echo $show['ip']; ?>"><img border="0" onmouseover="Tip('Ban IP: <?php echo $show[ip]; ?>')" onmouseout="UnTip()" src="../images/ikoner/bell_error.png" /></a>
         </td>
         </tr>
 <?php
     }
 ?>
     
     </table>
     
 <br />
     <br />
     <img src="../images/skille_linje.png" />
     <br />
 <br />
 
     
     <?php
     
     $get = mysql_query("SELECT * FROM forum_svar WHERE nr = '$id'") or die(mysql_error());
     $tjek = mysql_num_rows($get);
     
     if($tjek == 0)
     {
         echo "Der er ingen som har svaret på dette indlæg<br>";
     } else {
     
         while($show = mysql_fetch_array($get)){
         
             ?>
             
             <table bgcolor='black' cellpadding='2' cellspacing='1' width='492'>
             
             
             <tr><td width="484" style="background-image:url(../images/forum_trod_red.png); color:#FFFFFF;">
             
             Skrevet af <font color="<?php echo $show['farver']; ?>"><b><?php echo $show['navn']; ?></font></b>
             <?php echo "D. <b>". $show['dato'] ."</b>"; ?>
             <?php echo "Kl: <b>". $show['klok'] ."</b>"; ?>
             </td>
             </tr>
             
             
             <tr>
             <td bgcolor='#f9f9f9' height='50' valign='top'>
             <?php echo nl2br($show['svar']); ?>
             </td>
            </tr>
                        <?php
             if($_SESSION['brugernavn'] == true)
             {
             ?>
                 <tr>
                 <td bgcolor="#f9f9f9">
                 
                 
                 <div style="float:left; margin-right:5px;" id="admin_menu">Admin Menu: </div>
                  <a href="forum.laes.php?slet=ja&id=<?php echo $show['nr'];  ?>"><img border="0" onmouseover="Tip('Slet Svar')" onmouseout="UnTip()" src="../images/ikoner/cross.png" /></a>
                  <a href="administrator/ban.php?ban=<?php echo $show['ip']; ?>"><img border="0" onmouseover="Tip('Ban IP: <?php echo $show[ip]; ?>')" onmouseout="UnTip()" src="../images/ikoner/bell_error.png" /></a>
                 </td>
                 </tr>
             <?php
             }
             ?>
           </table>
 <br />
             
             
             <?php
     }// lukker while løkken
 }//Lukker else sætningen
 ?>
 <br />
 <br />
 <br />
 
 
 
 </center>
 <form method="POST" action="">
 <input type="hidden" name="nr" value="<?php echo $_GET['id']; ?>" />
 Dit Navn:<br>
 
 <?php 
 if($_SESSION['brugernavn'] == true)
 {
 ?>
 <input maxlength="40" value="<?php echo $_SESSION['brugernavn']; ?>" type="text" name="navn" style="width:200px; height:15px; border:1px solid #999999;" />
 <?php
 } elseif($_SESSION['brugernavn'] != true)
 {
 ?>
 <input maxlength="40" type="text" name="navn" style="width:200px;  height:15px; border:1px solid #999999;" />
 <?php
 }
 ?>
 
 
 <br>
 Svar:<br>
 <textarea type="text" name="svar" style="width:500px; height:200px; border:1px solid #999999;" /></textarea>
 <br>
 <br />
 
 <input type="submit" name="submit" value="Tilføj svar" style="margin-top:2px; border:1px solid #999999;" />
 </form>
 
 <?php
 }
 ?>
 <br />
 <br />
 
 <a href="forum.php">Tilbage</a>
 <?php
 require("pages_design/bund.php");
 ob_end_flush();
 ?>