session_start(); if (!session_is_registered("LLC")) { // if session check fails, invoke error handler header("Location: ../loginform.php"); exit(); } $user = $_SESSION['UNAME']; $Title = isset($_GET['title']) ? $_GET['title'] : ""; $Name = isset($_GET['name']) ? $_GET['name'] : ""; $title = addslashes($Title); $name = addslashes($Name); include("../include/dbconfig.php"); $connection = mysql_connect($db_host, $db_user, $db_pass) or die ("Unable to connect!"); mysql_select_db($db_name); $query = "SELECT File, Type from MM_media where Title = '$title' and Name='$name'"; $result1 = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); $row1 = mysql_fetch_row($result1); $file = $row1[0]; $type = $row1[1]; $query = "SELECT URL_header from MM_titles where Title = '$title'"; $result1 = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); $row1 = mysql_fetch_row($result1); $header = $row1[0]; ?>