<?php
if($_POST['submit']) {
$entrie=mysql_real_escape_string($_POST['username']);
if(!is_numeric($entrie)) {
$select=mysql_query("SELECT * FROM `".PREFIX."user` WHERE nickname LIKE '%".$entrie."%' ");
if($select) {
if(mysql_num_rows($select)==0) { echo '• Es wurde kein Benutzer gefunden.'; return false; }
echo '<div class="sm_div1"><strong>Nickname</strong>:</div><div class="sm_div2"><strong>Stadt</strong>:</div><div class="sm_div3"><strong>Land</strong>:</div><div class="sm_div4"><strong>Email</strong>:</div><div class="sm_div1"> </div>';
while($sm=mysql_fetch_array($select)) {
echo '<div class="sm_div1"><a href="index.php?site=profile&id='.$sm['userID'].'">'.$sm['nickname'].'</a></div><div class="sm_div2">'.$sm['town'].' </div><div class="sm_div3">'.$sm['country'].' </div><div class="sm_div4">'.$sm['email'].' </div><div class="sm_div1"> </div>';
}
}
echo '<div class="sm_back"><a href="index.php?site=usersearch">zurück</a></div>';
return false;
} else {
$select=mysql_query("SELECT * FROM `".PREFIX."user` WHERE userID='".$entrie."' LIMIT 1");
if(mysql_num_rows($select)==0) { echo '• Es wurde kein Benutzer gefunden.'; return false; }
$sm=mysql_fetch_array($select);
echo '<div class="sm_div1"><strong>Nickname</strong>:</div><div class="sm_div2"><strong>Stadt</strong>:</div><div class="sm_div3"><strong>Land</strong>:</div><div class="sm_div4"><strong>Email</strong>:</div><div class="sm_div1"> </div>';
echo '<div class="sm_div1"><a href="index.php?site=profile&id='.$sm['userID'].'">'.$sm['nickname'].'</a></div><div class="sm_div2">'.$sm['town'].' </div><div class="sm_div3">'.$sm['country'].' </div><div class="sm_div4">'.$sm['email'].' </div><div class="sm_div1"> </div>';
}
echo '<div class="sm_back"><a href="index.php?site=usersearch">zurück</a></div>';
return false;
}
?>
|