das kommt
MySQL Error: 1064 : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE id = 93' at line 50 in Query: UPDATE `ic1_user` SET realname = '', userclan = '', userteam = '', cpu = '', memory = '', mainboard = '', grafikkarte = '', soundkarte = 'kp', maus = '', mauspad = '', headset = '', gehaeuse = '', monitor = '', internet = '', tastatur = '', festplatte = '', betriebssystem = '', getraenke = '', essen = '', film = '', schauspieler = '', serie = '', band = '', song = '', buch = '', autor = '', spiel = '', auto = '', person = '', sport = '', kuenstler = '', icq = '269189468', homepage = 'http://gighost.eu', wohnort = 'Ulm', icq = '269189468', msn = '', yahoo = 'braucht man net', aim = 'will niemand', staat = 'Germany.gif', geschlecht = '1', status = '1', opt_mail = '1', opt_pm = '1', opt_pm_popup = '1', gebdatum = '1992-02-12', sig = 'MfG freak', WHERE id = 93 Debug backtrace: @ mysql.php:32 -- debug_bt() @ mysql.php:50 -- db_check_error(...) @ profil_edit.php:179 -- db_query(...) @ user.php:24 -- require_once(...) @ index.php:25 -- require_once(...)
meine daten
<?php # Copyright by: Manuel # Support: www.ilch.de defined ('main') or die ( 'no direct access' ); $title = $allgAr['title'].' :: Users :: Profil'; $hmenu = $extented_forum_menu.'<a class="smalfont" href="?user">Users</a><b> » </b> Profil'.$extented_forum_menu_sufix; $design = new design ( $title , $hmenu, 1); if ( $_SESSION['authright'] <= -1 ) { if ( empty ($_POST['submit']) ) { $design->header(); $abf = 'SELECT realname,userclan,userteam,cpu,memory,mainboard,grafikkarte,soundkarte,maus,mauspad,headset,gehaeuse,monitor,internet,tastatur,festplatte,betriebssystem,getraenk,essen,film,schauspieler,serie,band,song,buch,autor,spiel,auto,person,sport,kuenstler,email,wohnort,homepage,aim,msn,icq,yahoo,avatar,status,staat,gebdatum,sig,opt_pm_popup,opt_pm,opt_mail,geschlecht,spezrank FROM `prefix_user` WHERE id = "'.$_SESSION['authid'].'"'; $erg = db_query($abf); if ( db_num_rows($erg) > 0 ) { $row = db_fetch_assoc($erg); $tpl = new tpl ('user/profil_edit'); $row['staat'] = '<option></option>'.arliste ( $row['staat'] , get_nationality_array() , $tpl , 'staat' ); $row['geschlecht0'] = ( $row['geschlecht'] < 1 ? 'checked' : '' ); $row['geschlecht1'] = ( $row['geschlecht'] == 1 ? 'checked' : '' ); $row['geschlecht2'] = ( $row['geschlecht'] == 2 ? 'checked' : '' ); if ( $row['status'] == 1 ) { $row['status1'] = 'checked'; $row['status0'] = ''; } else { $row['status1'] = ''; $row['status0'] = 'checked'; } if ( $row['opt_mail'] == 1 ) { $row['opt_mail1'] = 'checked'; $row['opt_mail0'] = ''; } else { $row['opt_mail1'] = ''; $row['opt_mail0'] = 'checked'; } if ( $row['opt_pm'] == 1 ) { $row['opt_pm1'] = 'checked'; $row['opt_pm0'] = ''; } else { $row['opt_pm1'] = ''; $row['opt_pm0'] = 'checked'; } if ( $row['opt_pm_popup'] == 1 ) { $row['opt_pm_popup1'] = 'checked'; $row['opt_pm_popup0'] = ''; } else { $row['opt_pm_popup1'] = ''; $row['opt_pm_popup0'] = 'checked'; } $row['avatarbild'] = ( file_exists ( $row['avatar'] ) ? '<img src="'.$row['avatar'].'" alt=""><br />' : '' ); $row['Fabreite'] = $allgAr['Fabreite']; $row['Fahohe'] = $allgAr['Fahohe']; $row['Fasize'] = $allgAr['Fasize']; $row['forum_max_sig'] = $allgAr['forum_max_sig']; $row['uid'] = $_SESSION['authid']; $row['forum_usergallery'] = $allgAr['forum_usergallery']; $tpl->set_ar_out($row,0); if ($allgAr['forum_avatar_upload']) $tpl->out(1); $tpl->set_ar_out($row,2); profilefields_change ( $_SESSION['authid'] ); $tpl->out(3); } else { $tpl = new tpl ( 'user/login.htm' ); $tpl->set_out('WDLINK','index.php',0); } } else { # submit # change poassword if ( !empty($_POST['np1']) AND !empty($_POST['np2']) AND !empty($_POST['op'])) { if ($_POST['np1'] == $_POST['np2']) { $akpw = db_result(db_query("SELECT pass FROM prefix_user WHERE id = ".$_SESSION['authid']),0); if ($akpw == md5($_POST['op'])) { $newpw = md5($_POST['np1']); db_query("UPDATE prefix_user SET pass = '".$newpw."' WHERE id = ".$_SESSION['authid']); setcookie(session_und_cookie_name(), $_SESSION['authid'].'='.$newpw, time() + 31104000, "/" ); $fmsg = $lang['passwortchanged']; } else { $fmsg = $lang['passwortwrong']; } } else { $fmsg = $lang['passwortnotequal']; } } # avatar speichern START $avatar_sql_update = ''; if ( !empty ( $_FILES['avatarfile']['name'] ) AND $allgAr['forum_avatar_upload'] ) { $file_tmpe = $_FILES['avatarfile']['tmp_name']; $rile_type = ic_mime_type ($_FILES['avatarfile']['tmp_name']); $file_type = $_FILES['avatarfile']['type']; $file_size = $_FILES['avatarfile']['size']; $fmsg = $lang['avatarisnopicture']; $size = @getimagesize ($file_tmpe); $endar = array (1 => 'gif', 2 => 'jpg', 3 => 'png'); if ( ($size[2] == 1 OR $size[2] == 2 OR $size[2] == 3) AND $size[0] > 10 AND $size[1] > 10 AND substr ( $file_type , 0 , 6 ) == 'image/' AND substr ( $rile_type , 0 , 6 ) == 'image/' ) { $endung = $endar[$size[2]]; $breite = $size[0]; $hoehe = $size[1]; $fmsg = $lang['avatarcannotupload']; if ( $file_size <= $allgAr['Fasize'] AND $breite <= $allgAr['Fabreite'] AND $hoehe <= $allgAr['Fahohe'] ) { $neuer_name = 'include/images/avatars/'.$_SESSION['authid'].'.'.$endung; @unlink (db_result(db_query("SELECT avatar FROM prefix_user WHERE id = ".$_SESSION['authid']),0)); move_uploaded_file ( $file_tmpe , $neuer_name ); @chmod($neuer_name, 0777); $avatar_sql_update = "avatar = '".$neuer_name."',"; $fmsg = $lang['pictureuploaded']; } } } elseif ( isset($_POST['avatarloeschen']) ) { $fmsg = $lang['picturedelete']; @unlink (db_result(db_query("SELECT avatar FROM prefix_user WHERE id = ".$_SESSION['authid']),0)); $avatar_sql_update = "avatar = '',"; } # avatar speichern ENDE # email aendern if ($_POST['email'] != $_POST['aemail']) { $id = $_SESSION['authid'].'||'.md5 (uniqid (rand())); db_query("INSERT INTO prefix_usercheck (`check`,email,datime,ak) VALUES ('".$id."','".escape($_POST['email'],'string')."',NOW(),3)"); $page = $_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"]; $text = $lang['changedthemail'] . sprintf ($lang['registconfirmlink'], $page, $id ); icmail ($_POST['email'], $lang['mail'].' '.$lang['changed'], $text ); $fmsg = $lang['pleaseconfirmmail']; } # #remove account if (isset($_POST['removeaccount'])) { $id = $_SESSION['authid'].'-remove-'.md5 (uniqid (rand())); db_query("INSERT INTO prefix_usercheck (`check`,email,datime,ak) VALUES ('".$id."','".escape($_POST['email'],'string')."',NOW(),5)"); $page = $_SERVER["HTTP_HOST"].$_SERVER["SCRIPT_NAME"]; $text = $lang['removeconfirm'] . sprintf ($lang['registconfirmlink'], $page, $id ); icmail ($_POST['email'], html_entity_decode($lang['removeaccount']), $text ); $fmsg = $lang['pleaseconfirmremove']; } #remove account # statische felder speichern db_query("UPDATE prefix_user SET realname = '".escape($_POST['realname'], 'string')."', userclan = '".escape($_POST['userclan'], 'string')."', userteam = '".escape($_POST['userteam'], 'string')."', cpu = '".escape($_POST['cpu'], 'string')."', memory = '".escape($_POST['memory'], 'string')."', mainboard = '".escape($_POST['mainboard'], 'string')."', grafikkarte = '".escape($_POST['grafikkarte'], 'string')."', soundkarte = '".escape($_POST['soundkarte'], 'string')."', maus = '".escape($_POST['maus'], 'string')."', mauspad = '".escape($_POST['mauspad'], 'string')."', headset = '".escape($_POST['headset'], 'string')."', gehaeuse = '".escape($_POST['gehaeuse'], 'string')."', monitor = '".escape($_POST['monitor'], 'string')."', internet = '".escape($_POST['internet'], 'string')."', tastatur = '".escape($_POST['tastatur'], 'string')."', festplatte = '".escape($_POST['festplatte'], 'string')."', betriebssystem = '".escape($_POST['betriebssystem'], 'string')."', getraenke = '".escape($_POST['getraenke'], 'string')."', essen = '".escape($_POST['essen'], 'string')."', film = '".escape($_POST['film'], 'string')."', schauspieler = '".escape($_POST['schauspieler'], 'string')."', serie = '".escape($_POST['serie'], 'string')."', band = '".escape($_POST['band'], 'string')."', song = '".escape($_POST['song'], 'string')."', buch = '".escape($_POST['buch'], 'string')."', autor = '".escape($_POST['autor'], 'string')."', spiel = '".escape($_POST['spiel'], 'string')."', auto = '".escape($_POST['auto'], 'string')."', person = '".escape($_POST['person'], 'string')."', sport = '".escape($_POST['sport'], 'string')."', kuenstler = '".escape($_POST['kuenstler'], 'string')."', icq = '".escape($_POST['icq'], 'string')."', homepage = '".get_homepage(escape($_POST['homepage'], 'string'))."', wohnort = '".escape($_POST['wohnort'], 'string')."', icq = '".escape($_POST['icq'], 'string')."', msn = '".escape($_POST['msn'], 'string')."', yahoo = '".escape($_POST['yahoo'], 'string')."', aim = '".escape($_POST['aim'], 'string')."', staat = '".escape($_POST['staat'], 'string')."', geschlecht = '".escape($_POST['geschlecht'], 'string')."', status = '".escape($_POST['status'], 'string')."', opt_mail = '".escape($_POST['opt_mail'], 'string')."', opt_pm = '".escape($_POST['opt_pm'], 'string')."', opt_pm_popup = '".escape($_POST['opt_pm_popup'], 'string')."', gebdatum = '".get_datum(escape($_POST['gebdatum'], 'string'))."', sig = '".substr(escape($_POST['sig'], 'string'),0,$allgAr['forum_max_sig'])."', ".$avatar_sql_update." WHERE id = ".$_SESSION['authid'] ); # change other profil fields profilefields_change_save ( $_SESSION['authid'] ); $design->header(); # definie and print msg $fmsg = ( isset($fmsg) ? $fmsg : $lang['changesuccessful'] ); wd('?user-8' , $fmsg , 3 ); } } else { $tpl = new tpl ( 'user/login' ); $tpl->set_out('WDLINK', '?user-8', 0); } $design->footer(); ?>
mein template
<form action="index.php?user-profil" method="POST" enctype="multipart/form-data"> <fieldset> <legend>Persönliche Daten ändern</legend> <br /> <label style="float:left; width:35%;">{_lang_mail}</label><input style="margin-bottom:2px;" name="email" value="{email}" /><input type="hidden" name="aemail" value="{email}" /><font class="smalfont">{_lang_mustbeentered}</font><br /> <label style="float:left; width:35%;">{_lang_homepage}</label><input style="margin-bottom:2px;" name="homepage" value="{homepage}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Realname</label><input style="margin-bottom:2px;" name="realname" value="{realname}" /><br style="clear:both;" /> <label style="float:left; width:35%;">User Clan</label><input style="margin-bottom:2px;" name="userclan" value="{userclan}" /><br style="clear:both;" /> <label style="float:left; width:35%;">User Team</label><input style="margin-bottom:2px;" name="userteam" value="{userteam}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_hometown}</label><input style="margin-bottom:2px;" name="wohnort" value="{wohnort}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_icq}</label><input style="margin-bottom:2px;" name="icq" value="{icq}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_msn}</label><input style="margin-bottom:2px;" name="msn" value="{msn}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_yahoo}</label><input style="margin-bottom:2px;" name="yahoo" value="{yahoo}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_aim}</label><input style="margin-bottom:2px;" name="aim" value="{aim}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_birthday}</label><input style="margin-bottom:2px;" name="gebdatum" value="{gebdatum}" /><font class="smalfont">{_lang_dateformat}</font><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_state}</label><select style="margin-bottom:2px;" name="staat">{_list_staat@<option%1 value="%2">%3</option>}</select><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_sex}</label><input style="margin-bottom:2px;" type="radio" value="1" id="geschlecht1" name="geschlecht" {geschlecht1} /><label for="geschlecht1"> {_lang_male}</label>, <input id="geschlecht2" type="radio" value="2" name="geschlecht" {geschlecht2} /><label for="geschlecht2"> {_lang_female}</label>, <input id="geschlecht0" type="radio" value="0" name="geschlecht" {geschlecht0} /><label for="geschlecht0"> {_lang_itdoesntmatter}</label><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_status}</label><input id="status_aktiv" type="radio" value="1" name="status" {status1} /><label for="status_aktiv"> {_lang_active}</label>, <input id="status_inaktiv" type="radio" value="0" name="status" {status0} /><label for="status_inaktiv"> {_lang_inactive}</label><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_mails}<span class="smalfont"> {_lang_fromotherusers}?</span></label><input id="opt_mail1" type="radio" value="1" name="opt_mail" {opt_mail1} /><label for="opt_mail1"> {_lang_yes}</label>, <input id="opt_mail0" type="radio" value="0" name="opt_mail" {opt_mail0} /><label for="opt_mail0"> {_lang_no}</label><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_privatemessages}<span class="smalfont"> {_lang_fromotherusers}?</span></label><input id="opt_pm1" type="radio" value="1" name="opt_pm" {opt_pm1} /><label for="opt_pm1"> {_lang_yes}</label>, <input id="opt_pm0" type="radio" value="0" name="opt_pm" {opt_pm0} /><label for="opt_pm0"> {_lang_no}</label><br style="clear:both;" /> <label style="float:left; width:35%;">{_lang_privatemessages}<span class="smalfont"> {_lang_popupbynewmsg}?</span></label><input id="opt_pm_popup1" type="radio" value="1" name="opt_pm_popup" {opt_pm_popup1} /><label for="opt_pm_popup1"> {_lang_yes}</label>, <input id="opt_pm_popup0" type="radio" value="0" name="opt_pm_popup" {opt_pm_popup0} /><label for="opt_pm_popup0"> {_lang_no}</label><br style="fclear:both;" /> <br /> <strong>Rechneraussttatung</strong><br /> <br /> <label style="float:left; width:35%;">CPU</label><input style="margin-bottom:2px;" name="cpu" value="{cpu}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Memory</label><input style="margin-bottom:2px;" name="memory" value="{memory}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Mainboard</label><input style="margin-bottom:2px;" name="mainboard" value="{mainboard}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Grafikkarte</label><input style="margin-bottom:2px;" name="grafikkarte" value="{grafikkarte}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Soundkarte</label><input style="margin-bottom:2px;" name="soundkarte" value="{soundkarte}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Maus</label><input style="margin-bottom:2px;" name="maus" value="{maus}" /><br style="clear:both;" /> <label style="float:left; width:35%;">{Mauspad</label><input style="margin-bottom:2px;" name="mauspad" value="{mauspad}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Headset</label><input style="margin-bottom:2px;" name="headset" value="{headset}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Gehäuse</label><input style="margin-bottom:2px;" name="gehaeuse" value="{gehaeuse}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Monitor</label><input style="margin-bottom:2px;" name="monitor" value="{monitor}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Internet</label><input style="margin-bottom:2px;" name="internet" value="{internet}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Tastatur</label><input style="margin-bottom:2px;" name="tastatur" value="{tastatur}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Festplatte</label><input style="margin-bottom:2px;" name="festplatte" value="{festplatte}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Betriebssystem</label><input style="margin-bottom:2px;" name="betriebssystem" value="{betriebssystem}" /><br style="clear:both;" /><br /> <strong>Lieblings</strong><br /> <br /> <label style="float:left; width:35%;">Getränke</label><input style="margin-bottom:2px;" name="getraenk" value="{getraenk}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Essen</label><input style="margin-bottom:2px;" name="essen" value="{essen}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Film</label><input style="margin-bottom:2px;" name="film" value="{film}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Schauspieler</label><input style="margin-bottom:2px;" name="schauspieler" value="{schauspieler}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Serie</label><input style="margin-bottom:2px;" name="serie" value="{serie}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Band</label><input style="margin-bottom:2px;" name="band" value="{band}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Song</label><input style="margin-bottom:2px;" name="song" value="{song}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Buch</label><input style="margin-bottom:2px;" name="buch" value="{buch}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Autor</label><input style="margin-bottom:2px;" name="autor" value="{autor}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Spiel</label><input style="margin-bottom:2px;" name="spiel" value="{spiel}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Auto</label><input style="margin-bottom:2px;" name="auto" value="{auto}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Person</label><input style="margin-bottom:2px;" name="person" value="{person}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Sport</label><input style="margin-bottom:2px;" name="sport" value="{sport}" /><br style="clear:both;" /> <label style="float:left; width:35%;">Künstler</label><input style="margin-bottom:2px;" name="kuenstler" value="{kuenstler}" /><br style="clear:both;" /><br /> {_if_{forum_usergallery}=='1'}<div align="center"> <a href="index.php?user-usergallery-{uid}">Usergallery</a> <a href="index.php?user-remove"/></a> </div>{/_endif}<br /> {EXPLODE} <fieldset> <legend>{_lang_removeaccount}</legend> <label style="float:left; width:35%;"> </label><input type="checkbox" value="yes" name="removeaccount" /> {_lang_delete}? <font class="smalfont">{_lang_mustbeentered}</font> </fieldset> <fieldset> <legend>{_lang_avatar}</legend> <label style="float:left; width:35%;"> </label>{avatarbild}<input type="checkbox" value="yes" name="avatarloeschen" /> {_lang_delete}?<br /><br /> <label style="float:left; width:35%;"> </label><input style="margin-bottom:2px;" type="file" name="avatarfile" /><br /><font class="smalfont"><br />{_lang_criterions}: {_lang_maxwidth} {Fabreite}px, {_lang_maxheight} {Fahohe}px {_lang_and} max size {Fasize} bytes. {_lang_otherwisenoaction}.</font><br /> </fieldset> <br /> {EXPLODE} <fieldset> <legend>{_lang_signature}</legend> <label style="float:left; width:35%;"><font class="smalfont">{_lang_max} {forum_max_sig} {_lang_signs}.</font></label><textarea style="margin-bottom:2px;" cols="60" rows="2" name="sig">{sig}</textarea><br /> </fieldset> <br /> <fieldset> <legend>{_lang_editpassword}</legend> <br /> <label style="float:left; width:35%;">{_lang_current}</label><input style="margin-bottom:2px;" type="password" name="op" maxlength="20"><br /> <label style="float:left; width:35%;">{_lang_new}</label><input style="margin-bottom:2px;" type="password" name="np1" maxlength="20"><br /> <label style="float:left; width:35%;">{_lang_repeat}</label><input style="margin-bottom:2px;" type="password" name="np2" maxlength="20"><br /> </fieldset> <br /> <fieldset> <br /> {EXPLODE} </fieldset> <br /> <div align="center"> <input style="margin-bottom:2px;" type="submit" value="{_lang_send2}" name="submit"> </div> </fieldset> </form>
MfG freak