View file visavi_top/prof.php

<?
$id=@mysql_escape_string($id);
$pass=@mysql_escape_string($pass);
$login=@mysql_escape_string($login);
include "config2.php";
include "../top.php";
$linkk=mysql_pconnect ($DB_HOST, $DB_USER, $DB_PASS);
mysql_select_db($DB_NAME);

$q_u=mysql_query("select * from users where id='".$id."';");
$data=mysql_fetch_array($q_u);
if(empty($action)) {
if(!empty($id)) {
	if($id==$data['id']) { 
		if($pass==$data['pass']) {
			echo"<div class=\"blue\">";
echo"<font color=\"#FF0000\">VISAVI.NET</font></div>";
echo"<div>";
print "Ваш id=".$data['id']."<br/>";
?>
<form method="post" action="prof2.php?id=<? print $id; ?>&amp;pass=<? print $pass; ?>">
&#x41D;&#x430;&#x437;&#x432;&#x430;&#x43D;&#x438;&#x435; &#x441;&#x430;&#x439;&#x442;&#x430;:<br/>
<input type="text" name="title" value="<? print $data['title'] ?>"/><br/>
Новый пароль:<br/>
<input type="text" name="newpass" value="<? print $data['pass'] ?>"/><br/>
E-mail:<br/>
<input type="text" name="email" value="<? print $data['email'] ?>"/><br/>
&#x421;&#x441;&#x44B;&#x43B;&#x43A;&#x430;:<br/>
<input type="text" name="link" value="<? print $data['link'] ?>"/><br/>
&#x41E;&#x43F;&#x438;&#x441;&#x430;&#x43D;&#x438;&#x435;:<br/>
<input type="text" name="about" value="<? print $data['about'] ?>"/><br/>
Проверочный код: <? include "brow.dat"; ?><br/>
<input type="text" name="chis" value=""/><br/><br/>
<input value="Изменить" name="do" type="submit"/></form><br/><hr/><a href="../index.php">:На главную</a>
	<?


		} else { print "Пароль не подходит!"; }
	}
	else { print "Данные юзера не верны!"; }
 } else { print "Логин пуст!"; }
}
else
{
	if(($id==$data['id']) && ($pass==$data['pass'])) {

} else {
print "password incorrect";
}

}
?>
</div>
</body>
</html>
<?
mysql_close($linkk);
?>