Question

Here is my php code. I want to know if its possible to make an if statement so it can only be viewed by the user with a user level of 1. I tried an if statement but I get an Unexpected T_STRING my database had this http://prntscr.com/glmqi cat_mod is for the if statement because it’s a moderator topic.

<?php





$sql = "SELECT
        cat_id,
        cat_name,
        cat_description
    FROM
        categories
    WHERE
        cat_id = " . mysql_real_escape_string($_GET['id']);

$result = mysql_query($sql);

if(!$result)
{
echo 'The category could not be displayed, please try again later.' .   mysql_error();
}
else
{
if(mysql_num_rows($result) == 0)
{
    echo 'This category does not exist.';
}
else
{
    //display category data
    while($row = mysql_fetch_assoc($result))
    {
        echo '

<h3>You are currently in this section: <u>' . $row['cat_name'] . '<u/></h3>
</div>
  <div class="container_oro2" style="overflow: hidden;">
  Users currently viewing this section:
  </div><div class="header">
    <h3 class="header_title">Topics in this section</h3>
    <div class="header_topics">Hits</div>
    <div class="header_replies">Replies</div>
    <div class="header_action">Last Action</div>
</div><table class="container">';
    }

    //do a query for the topics
    $sql = "SELECT  
                topics.topic_id,
                topics.topic_subject,
                topics.topic_date,
                topics.topic_cat,
                topics.topic_by,
                topics.view,
                topics.reply,
                users.user_id,
                users.user_name
            FROM
                topics

            LEFT JOIN
                    users
                ON
                    topics.topic_by = users.user_id             
            WHERE
                topic_cat = " . mysql_real_escape_string($_GET['id']);

    $result = mysql_query($sql);

    if(!$result)
    {
        echo 'The topics could not be displayed, please try again later.';
    }
    else
    {
        if(mysql_num_rows($result) == 0)
        {
            echo 'There are no topics in this section yet.';
        }
        else
        {
            //prepare the table



            while($row = mysql_fetch_assoc($result))
            {               
                echo '




                <tr class="altcolor_2">';

            echo '<td class="title">';
            echo '  <table>';
                    echo '<tr>';
                        echo '<td class="title_icon_small">
                            <img src="http://www.naruto-boards.com/images/forum/topic_old.gif" alt="" />                            </td>
                        <td class="title_icon_small">
                            <img src="http://www.naruto-boards.com/images/forum/topic_sticky.gif" alt="" />                             </td>
                        <td class="title_title">';
                            echo '<h4 class="inline"><a href="/index.php?area=topic&id=' . $row['topic_id'] . '">' . $row['topic_subject'] . '</a>   ';                                          echo '<img class="pages" src="http://naruto-boards.com/images/forum/topic_paging.gif"  alt="" /> </h4> ';
                            echo'<span>Started on ';  echo date(" F j, Y, g:i A", strtotime($row['topic_date'])); echo' by <a  href="/profile/kross/" class="profilelink"></a></span>';
                        echo '</td>';
                    echo '</tr>';
                echo '</table>';

            echo '</td>';
            echo '<td class="info1">' . $row['view'] . '</td>';
            echo '<td class="info1">' . $row['reply'] . '</td>';
            echo '<td class="info2">
                <div>';
                    echo'Date: ';echo date(" F j, Y, g:i A", strtotime($row['topic_date']));echo'<br />';
                    echo 'By: <a href="/profile/igi33/"  class="profilelink"></a>';

                echo '</div>';
            echo '</td>';
        echo '</tr>';
        echo '<tr class="spacer"><td colspan="4"></td></tr>


';








            }
        }
    }
}
}


?>

Answer 1

Try adding an if at the end of the $sql, before the $result = ....

if ($user_level != 1) { $sql .=  " AND `cat_mod` = 0";}