/media/sda-magnetic/david/Dok-15-2023-11-27/informatik/www-intel-compute-stick-2022-06-13/mysocial20220412.bad/thread.php

<?php 
session_start ();
?>

<?php 
include ('./config.php');
include ('./banner.php');
?>


<link rel="stylesheet" href="./styles/styles.css">
<script src="./styles/styles.js"></script>
<a href="./search.php">Andere Nutzer anzeigen</a>
<?php 
include ('./styles/head.php');
?>
<div class="overall">
<?php 
$i = 0;
if (isset ($_SESSION ["name"])) {
    $sessionname = $_SESSION ["name"];
    echo "<form action=\"./post.php\" method=\"GET\" rows=\"20\"><textarea class=\"contentinputbox01\"  name=\"content\"></textarea><select name=\"choosepublic\" class=\"select01\"><option>privat</option><option>&ouml;ffentlich</option></select><input class=\"submit01\" type=\"submit\"></input></form>";

    
    $handle = mysql_connect ($server, $MYSQL_NAME, $MYSQL_PASSWORD);
    $sessionname = htmlentities(mysql_real_escape_string ($sessionname, $handle));
    
    mysql_query ("use " . $databasename, $handle);
    $result = mysql_query ("SELECT * FROM postings WHERE nickname=\"" . $sessionname ."\"", $handle);
    $result2 = mysql_query ("SELECT * FROM users WHERE nickname=\"" . $sessionname ."\"", $handle);
    if ($row2 = mysql_fetch_assoc ($result2));
    else
        echo "Error: You are not a registered user";
    while ($row = mysql_fetch_assoc ($result))
        echo "<div class=\"post01\" id=\"postid" . $i . "\">\n<div class=\"postdatetime01\" id=\"postdatetimeid" . $i . "\">" . $row ["datetime"] . "</div>\n<br><hr><br>\n<div class=\"postcontent01\"><div class=\"usercontent01\">" . $sessionname .  "<br><hr><br><code>" . $row2 ["mail"] . "</code><br><hr><br><img width=\"50%\"src=\"showphoto.php?name=".$sessionname."\"></div><div class=\"postcontent02\" id=\"postcontentid" . $i++ . "\">" . $row ["content"] ."</div></div></div>\n\n";
    echo "<div class=\"freundschaftsanfrage01\">\n";
    echo "<FORM action=\"freundschaftsanfragebestaetigen.php\" METHOD=\"GET\">\n";
    echo "<SELECT name=\"freundschaftsanfrage[]\" MULTIPLE>\n";
    $result = mysql_query ("SELECT * FROM freundschaftsanfrage WHERE nicknamezu=\"" . $sessionname . "\"", $handle);
    while ($row = mysql_fetch_assoc ($result))
        echo "<OPTION>" . $row ["nicknamevon"] . "</OPTION>"; 
    echo "</SELECT><br><br>\n";
    echo "<INPUT TYPE=\"submit\">Freundschaftsanfragen bestaetigen</INPUT><br>";
    echo "</FORM>\n";
    echo "</div>";

    echo "<div class=\"freundschaftsanfrage01\">\n";
    echo "<FORM>\n";
    echo "<SELECT MULTIPLE>\n";
    $result = mysql_query ("SELECT * FROM freunde WHERE freund1=\"" . $sessionname . "\"  OR freund2=\"" .$sessioname. "\" OR freund2=\"" . $sessionname . "\"  OR freund1=\"" .$sessioname. "\"", $handle);
    while ($row = mysql_fetch_assoc ($result))
        echo "<OPTION>" . $row ["freund1"] . "." . $row ["freund2"] . "</OPTION>"; 
    echo "</SELECT><br>\n";
    echo "</FORM>\n";
    echo "</div>";

    

    mysql_close ();

}
else
    echo "Sie m&uuml;ssen eingeloggt sein<br>";
echo "<div style=\"width:100;clear:both;\">";
include("./collection.php");
echo "</div>";
?>
</div>