Administración de Reseñas con PHP y MySQL

http://www.sitioweb.com/Resenias/?uid=1

http://www.sitioweb.com/Resenias/?user=msdkjlxmEN293QU3828cnaqewijljn

http://www.cicklow.com/Resenias.rar

	if($_GET['uid']!="" || $_GET['user']!="") $_U = false;

Notice: Undefined index: uid in C:\xamppp\htdocs\Resenias\index.php on line 7

	if(isset($_GET['uid']) && ( $_GET['uid']!="" || $_GET['user']!="")) $_U = false;

$SQL = mysql_query("SELECT epago,resenia,uid FROM res_usuarios WHERE resenia='".$_POST['sitio']."'");

SELECT epago,resenia,uid FROM res_usuarios WHERE resenia='' or '1'='1'

	function Filtrar(){
		foreach($_POST as $K=>$_P){
			$_POST[$K] = mysql_real_escape_string($_P);
		}

		foreach($_GET as $K=>$_G){
			$_GET[$K] = mysql_real_escape_string($_G);
		}
	}

	Filtrar();

[B]//index.php[/B]

<?php
session_start();
if(isset($_SESSION['admin'])){
	echo "bienvenido administrador: ".$_SESSION['admin']." <a href=logout.php>Cerrar session</a>";
} else {
?>

<h1>Inicia Sesion Ocean Report</h1>
<form action="comprobacion.php" method='post'>
E-mail:<br>
<input type="email" name="email"><br>
Password:<br>
<input type="password" name="pass"><br>
<input type=submit value="Iniciar session">
</form><br>
<?php
if(isset($_SESSION['llene'])){
echo $_SESSION['llene'];
unset($_SESSION['llene']);
} elseif(isset($_SESSION['error'])){
echo $_SESSION['error'];
unset($_SESSION['error']);
}
}
?>

[B]//comprobacion.php[/B]

<?php
session_start();
	if ($_POST['email'] !="" AND $_POST['pass'] !="") {
		if($_POST['email'] =="raylin" and $_POST['pass'] == "123"){
		$_SESSION['admin'] = $_post['user'];
	} else {
		$_SESSION['error'] ="Login incorrecto";
	}
} else {
	$_SESSION['llene'] ="Llene los campos";
} 
header("location:index.php");
?>

[HTML][B]//cerrar sesion[/B]
<?php
session_start();
if(isset($_SESSION['admin'])) {
	unset($_SESSION['admin']);
}
header("location:index.php");
?>
[/HTML]

$_SESSION['admin'] = $_post['user'];

$_SESSION['admin'] = $_POST['email'];