[gdrcd advanced] come creare una pagina segreta

<?php /*Inserimento di un nuovo record*/
if ($_POST['op']=='insert') {
/*Eseguo l'inserimento*/
$MySql="SELECT count(*) AS N FROM bgsegreto WHERE nome_bg='".$_SESSION['login']."' AND nome_permesso='".gdrcd_filter('input',$_POST['nome_bg'])."'";
$n=mysql_query($MySql);
if($n['N']==0){
if (!empty($_POST['nome_bg'])){
gdrcd_query("INSERT INTO bgsegreto (nome_bg, nome_permesso) VALUES ('".$_SESSION['login']."', '".gdrcd_filter('in',$_POST['nome_permesso'])."')");
?>
<div class="warning">
<?php echo gdrcd_filter('out',$MESSAGE['warning']['inserted']);?>
</div>
<?php } else {?>
<div class="warning">
<?php echo gdrcd_filter('out',$MESSAGE['warning']['cant_do']);?>
</div>
<?php }
}
else{?>
echo "Questo Permesso esiste già!";
<?php }
?>

<?php
$MySql="SELECT count(*) AS N FROM bgsegreto WHERE nome_bg='".gdrcd_filter('input',$_GET['pg'])."' AND nome_permesso='".gdrcd_filter('input',$_SESSION['login'])."'";
$n=gdrcd_query($MySql);
if($_GET['pg']==$_SESSION['login'] || $n['N']>0){?>
<div class="titolo_box">
<?php echo gdrcd_filter('out',$MESSAGE['interface']['sheet']['box_title']['relationships']); ?> (Bgsegreto)
</div>

<div class="body_box">
<?php

/** * Html, bbcode o entrambi ?
* @author Blancks
*/
if ($PARAMETERS['mode']['user_bbcode'] == 'ON')
{
if ($PARAMETERS['settings']['user_bbcode']['type'] == 'bbd' && $PARAMETERS['settings']['bbd']['free_html'] == 'ON')
{
echo bbdecoder(gdrcd_html_filter($record['bgsegreto']), true);

}elseif ($PARAMETERS['settings']['user_bbcode']['type'] == 'bbd')
{
echo bbdecoder(gdrcd_filter('out',$record['bgsegreto']), true);

}else
{
echo gdrcd_bbcoder(gdrcd_filter('out',$record['bgsegreto']));
}

}else
{
echo gdrcd_html_filter($record['bgsegreto']);
}
?>
</div>
<?php }?>

<?php /*Form di inserimento*/
if ((gdrcd_filter('get',$_POST['op']=='edit')) || (gdrcd_filter('get',$_REQUEST['op'])=='new')){
/*Preseleziono l'operazione di inserimento*/
$operation='insert'; ?>

<!-- Form di inserimento -->
<div class="panels_box">
<form action="main.php?page=bgsegreto" method="post" class="form_gestione">

<div class='form_label'>
<?php echo gdrcd_filter('out',$MESSAGE['interface']['administration']['rules']['art']); ?>
</div>

<div class='form_label'>
<?php echo gdrcd_filter('out',$MESSAGE['interface']['administration']['rules']['infos']); ?>
</div>
<div class='form_field'>
<select name="nome_permesso">
<?php $query="SELECT nome, cognome FROM personaggio WHERE nome !='".$_SESSION['login']."' ORDER BY nome";
$result = gdrcd_query($query, 'result');?>
<?php while($row=gdrcd_query($result, 'fetch')){ ?>
<option value="<?php echo gdrcd_filter('out',$row['nome'])?>" ?>
<?php echo gdrcd_filter('out',$row['nome']).' '.gdrcd_filter('out',$row['cognome']);?>
</option>
<?php } gdrcd_query($result, 'free');?>
</select>
</div>

<div class="form_info">
<?php echo gdrcd_filter('out',$MESSAGE['interface']['help']['bbcode']); ?>
</div>

<!-- bottoni -->
<div class='form_submit'>
<input name="nome_bg" type="hidden" value="<?php echo $_SESSION['login']; ?>" />

<input type="hidden" name="op" value="insert">
<input type="submit" value="<?php echo gdrcd_filter('out',$MESSAGE['interface']['forms']['submit']);?>" />
</div>

</form>
</div>