NEED URGENT HELP -> DATABASE / EXPLODING

[Jazz00006]

Yes, it is a big project, but its almost done, and im sorry, i should have been more specific. This code in the file, Check.php doesnt submit the selected IP's to the database.

<?php
if(isset($_COOKIE['Admin'])) {
if ($_COOKIE['Admin']==1) {
    echo '<table width="358" height="18" border="0" background="bar.gif">
        <tr>
          <td width="352" background="images/bar.gif"><div align="center"><a href="Check.php">View Tempdatabase </a> | <a href="Clean.php">Clean</a></div></td>
        </tr>
      </table><p><BR><BR><BR></div>';
    include ("include.inc.php");
    $DB = $GLOBALS["db2table"];



if (isset($_GET['IP'])) {
    if ($_GET['IP'] != '') {
        $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
        $dbHandle = mysql_select_db($GLOBALS["dbname"]);    
        $result = mysql_query("SELECT * FROM `tempbase` WHERE `IP` = '".mysql_real_escape_string($_GET['IP'])."';", $sql);
        $data = mysql_fetch_assoc($result);
            if ($data['IP'] != '') {
                echo 'Data found...<BR>Deleting...<BR>';    
                $result = mysql_query("DELETE FROM `tempbase` WHERE `IP` = '".mysql_real_escape_string($_GET['IP'])."';", $sql);
                $data2 = mysql_fetch_assoc($result);    
                mysql_close($sql);
                echo 'Data deleted...<BR>Moving...<BR>';
                $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
                $dbHandle = mysql_select_db($GLOBALS["dbname"]);    
                $IP = $data['IP'];
                $EMAIL = $data['Email'];
                $REASON = $data['Reason'];
                $Submitter = $data['spare'];
                $sql = "INSERT INTO `$DB` ( `IP` , `Reason` , `Email` , `Submiter` )
                VALUES (
                '$IP', '$REASON', '$EMAIL', '$Submitter'
                );";     
                echo 'Data moved successfully!<BR><BR><BR>';
                $result = mysql_query($sql);
                mysql_close($sql);
            }
    }
}
    
//
//  BIG PROBLEM GETTING THIS TO WORK TOO
//

if (isset($_GET['UID'])) {
    if ($_GET['UID'] != '') {
        while ($data['Uid'] != '') {
            $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
            $dbHandle = mysql_select_db($GLOBALS["dbname"]);    
            $result = mysql_query("SELECT * FROM `tempbase` WHERE `Uid` = '".mysql_real_escape_string($_GET['UID'])."';", $sql);
            $data = mysql_fetch_assoc($result);            
            if ($data['Uid'] != '') {    
            echo 'Data found...<BR>Deleting...<BR>';
            $result = mysql_query("DELETE FROM `tempbase` WHERE `Uid` = '".mysql_real_escape_string($_GET['UID'])."';", $sql);
            $data2 = mysql_fetch_assoc($result);    
            mysql_close($sql);            
            echo 'Data deleted...<BR>Moving...<BR>';
            $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
            $dbHandle = mysql_select_db($GLOBALS["dbname"]);    
            $IP = $data['IP'];
            $EMAIL = $data['Email'];
            $REASON = $data['Reason'];
            $Submitter = $data['spare'];
            $sql = "INSERT INTO `$DB` ( `IP` , `Reason` , `Email` , `Submiter` )
            VALUES (
            '$IP', '$REASON', '$EMAIL', '$Submitter'
            );";     
            echo 'Data moved successfully!<BR><BR><BR>';
            $result = mysql_query($sql);
            mysql_close($sql);
            }
        }
    }
}














    $Total=0;
    header("Cache-Control: no-cache, must-revalidate");
    header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); 
    $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
    $dbHandle = mysql_select_db($GLOBALS["dbname"]);    
    $result = mysql_query('SELECT * FROM `TempBase`', $sql);
    $data = mysql_fetch_assoc($result);
    $rows = mysql_query('select * from `TempBase`');


    if (is_resource($rows)) {
        echo '  <table width="589" border="0">';
          while ($row = mysql_fetch_assoc($rows)) {
            echo '<tr><td width="15">IP:</td>
              <td width="150">'.$row['IP'].'</td>
              <td width="35">LOG:</td>
             <td width="50"><a href="http://greyfyre.info/'.$row['Log'].'">[X]</a></td>
              <td width="30">UID:</td>
              <td width="220">'.$row['Uid'].'</td>
              <td width="25"><a href="?IP='.$row['IP'].'">[S]</a></td>
              <td width="25"><a href="?UID='.$row['Uid'].'">[A]</a></td> </tr>'; 
    
            $Total++;
          }
        
      echo '</table>';
      echo '<BR>Total databse items: '.$Total;
    } else {
      echo mysql_error();
    } 
    


} else {echo '<meta http-equiv="refresh" content="0;URL=http://greyfyre.info/index.php" />';}          
} else {echo '<meta http-equiv="refresh" content="0;URL=http://greyfyre.info/index.php" />';}      
      



?>

And this code in the submit part is what splits them up into the database

<?PHP

//Import teh database variables
include ("include.inc.php");
$DB = $GLOBALS["dbtable"];
//Remove cahing ability
header("Cache-Control: no-cache, must-revalidate");
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT"); 

$Code = strtoupper($_POST['CODE']);
$Verify = m_crypt($_POST['Verify'],"de","Password");


$extension1 = explode('.',basename($_FILES['LOG']['name']));
$extension = strtolower($extension1[1]);
$target_path = 'Temp_Logs/'.date("F-j-Y-g-i-s-a").'.'.$extension; 



//$Number = is_number(str_replace('.','',$_POST['IP']));
//echo 'number is : ' . $Number; //Number = 1 is a number, 0 = not 
if (strpos($_FILES["LOG"]["type"]."  app", "app") == 0) {
    echo '<span class="Invalid">Invalid file type!</span>';
} else {
    if ($Code == $Verify && $Code != '' && $Verify != '') {
    
        
        if(move_uploaded_file($_FILES['LOG']['tmp_name'], $target_path)) {
            echo "The file has been uploaded<BR>";
        } else{
            echo "There was an error uploading the file, please try again!<BR>";
        }

$UID = randomkey(10).'-'.randomkey(10);

$counterMax =  substr_count($_POST['IP'],"\r\n");


for ( $counter = 0; $counter <= $counterMax; $counter += 1) {

    $sql = mysql_connect($GLOBALS["dbhost"], $GLOBALS["dbuser"], $GLOBALS["dbpass"]);
    $dbHandle = mysql_select_db($GLOBALS["dbname"]);
    
    $EMAIL = mysql_real_escape_string($_POST['EMAIL']); 
    $REASON = mysql_real_escape_string($_POST['REASON']); 
    $LOG = mysql_real_escape_string($target_path); 
    $SPARE = (gethostbyaddr($_SERVER['REMOTE_ADDR']));
    $IP = preg_split("/[\n,]+/", $_POST['IP'], -1, PREG_SPLIT_OFFSET_CAPTURE);
    $NewIP = utf8_encode(str_replace(' ','',mysql_real_escape_string($IP[$counter][0])));
    $NewIP = $NewIP."\r\n";
    $NewIP = mysql_real_escape_string($NewIP);
    $sql = "INSERT INTO `$DB` ( `IP` , `Email` , `Reason` , `Log` , `spare` , `Uid` )
    VALUES (
    '$NewIP', '$EMAIL', '$REASON', '$LOG', '$SPARE' ,'$UID'
    );"; 
    
    $result = mysql_query($sql);
    
    mysql_close($sql);
    if (is_resource($rows)) {
          } else {
        echo mysql_error();
        }
        
}
  
    echo 'Thankyou for your input, your entry will be verified before it is added to the main database.<BR><BR><BR>';
    
} else {
    if ($Code != '' && $Verify != '') {
        echo '<span class="Invalid">Invalid Code!<BR><BR><BR></span>';    
    }
    }
}


$KEY = m_crypt(randomkey(5),"en","Password");
?>