[connor]

Ok, so I am making a forum system for my website and I can't get this script:

PHP Code:

$topic_id = $_REQUEST['topic_id'];
$sqla="SELECT * FROM ".$tablepre."forum_post WHERE topic_id='".$topic_id."' ORDER BY id DESC";
$qa = @mysql_query($sqla) or die("Cannot connect to table (".$tablepre."forum_topic).");
while($rowa = @mysql_fetch_array($qa))
     {
    $author .= $rowa['author'];
    $sqlb="SELECT * FROM ".$tablepre."users WHERE id='".$author."'";
    $qb = @mysql_query($sqlb) or die("Cannot connect to table (".$tablepre."users (Author)).");
    while($rowb = @mysql_fetch_array($qb))
         {
        $posts .= "<table id='full_border' align='center' width='100%'>
                             <tr>
                         <td align='left'><center><b><u>Author Info</u></b></center>
                         By:&nbsp;".$rowb['username']."<br>
                         Status:&nbsp;";
                         if($rowb['status']=="Admin"){
                             $posts .="Administrator";
                         }else
                         if($rowb['status']=="Staff"){
                             $posts .="Staff Member";
                         }else
                              if($rowb['status']=="User"){
                             $posts .="Site User";
                         }
        $posts .= "<br>
                 Date:&nbsp;".$rowa['pdate']."<br>
                 Time:&nbsp;".$rowa['ptime']."
                 </td>
                 <td align='left'>&raquo;".$rowa['subject']."<hr>".$rowa['post']."</td>
                      </tr>
                  </table>";
    }
}
echo "<table id='no_border' align='center' width='100%'>
             <tr>
            <td>".$posts."</td>
         </tr>
      </table>"; 

To show more than one post, can anyone help me with this issue?

[wirehopper]

Connor,

Unless you are building a forum to learn how to build one, I would recommend finding one and using it.

Life is too short to reinvent the wheel. There are many great forums available, for free, many times they are included with hosting.

You can go to hotscripts.com, or Google to find them.

Good luck

[connor]

I am wanting to learn how to make one, + I want my site to be completely custom.

[wirehopper]

Learn how to customize an existing forum.

It is not worth building one from scratch.

[End User]

PHP Code:

$topic_id = $_REQUEST['topic_id'];
$sqla="SELECT * FROM ".$tablepre."forum_post WHERE topic_id='".$topic_id."' ORDER BY id DESC";
$qa = @mysql_query($sqla) or die("Cannot connect to table 

Guess what happens if I figure out your table prefix and then submit a query string something like this:

PHP Code:

http://domain.com?script.php?topic_id=;DROP tableprefix.forum_post 

That's right, your table goes bye-bye. This is why you should listen to what others here are telling you. Writing your own forum from scratch is a BAD IDEA. Customize an existing forum, or I can practically guarantee you'll regret it. Learn from the mistakes of others, don't repeat them.