view singular, not multiple records

[whitey]

I want to change the following piece of code to only show the actual user who is logged in, and not let them see other peoples information.

What can i do. Im totally baffled.

Could the answer please include line numbers.

thank y ou so much for you help

 
<?php
//connect to database
$mysqli = mysqli_connect("localhost", "geothermal", "password", "geothermal");
 
if (!$_POST)  {
    //haven't seen the selection form, so show it
    $display_block = "<h1>Select an Entry</h1>";
 
    //get parts of records
    $get_list_sql = "SELECT master_id,
                     CONCAT_WS(', ', l_name, f_name) AS display_name
                     FROM tbl_master_name ORDER BY l_name, f_name";
    $get_list_res = mysqli_query($mysqli, $get_list_sql) or die(mysqli_error($mysqli));
 
    if (mysqli_num_rows($get_list_res) < 1) {
        //no records
        $display_block .= "<p><em>Sorry, no records to select!</em></p>";
 
    } else {
        //has records, so get results and print in a form
        $display_block .= "
        <form method=\"post\" action=\"".$_SERVER["PHP_SELF"]."\">
        <p><strong>Select a Record to View:</strong><br/>
        <select name=\"sel_id\">
        <option value=\"\">-- Select One --</option>";
 
        while ($recs = mysqli_fetch_array($get_list_res)) {
            $id = $recs['master_id'];
            $display_name = stripslashes($recs['display_name']);
 
            $display_block .= "<option value=\"".$id."\">".$display_name."</option>";
        }
 
        $display_block .= "
        </select>
        <p><input type=\"submit\" name=\"submit\" value=\"View Selected Entry\"></p>
        </form>";
    }
    //free result
    mysqli_free_result($get_list_res);
 
} else if ($_POST) {
    //check for required fields
    if ($_POST["sel_id"] == "")  {
        header("Location: selentry.php");
        exit;
    }
 
    //get master_info
    $get_master_sql = "SELECT concat_ws(' ', f_name, l_name) as display_name
                       FROM tbl_master_name WHERE master_id = '".$_POST["sel_id"]."'";
    $get_master_res = mysqli_query($mysqli, $get_master_sql) or die(mysqli_error($mysqli));
 
    while ($name_info = mysqli_fetch_array($get_master_res)) {
        $display_name = stripslashes($name_info['display_name']);
    }
 
    $display_block = "<h1>Showing Record for ".$display_name."</h1>";
 
    //free result
    mysqli_free_result($get_master_res);
 
    //get all addresses
    $get_addresses_sql = "SELECT address1, address2, town, county, postcode, type
                          FROM tbl_address WHERE master_id = '".$_POST["sel_id"]."'";
    $get_addresses_res = mysqli_query($mysqli, $get_addresses_sql) or die(mysqli_error($mysqli));
 
     if (mysqli_num_rows($get_addresses_res) > 0) {
 
        $display_block .= "<p><strong>Addresses:</strong><br/>
        <ul>";
 
        while ($add_info = mysqli_fetch_array($get_addresses_res)) {
            $address1 = stripslashes($add_info['address1']);
            $address2 = stripslashes($add_info['address2']);
            $town = stripslashes($add_info['town']);
            $county = stripslashes($add_info['county']);
            $postcode = stripslashes($add_info['postcode']);
            $address_type = $add_info['type'];
 
            $display_block .= "<li>$address1 $address2 $town $county $postcode ($address_type)</li>";
        }
 
        $display_block .= "</ul>";
    }
 
    //free result
    mysqli_free_result($get_addresses_res);
 
    //get all tel
    $get_tel_sql = "SELECT tel_number, type FROM tbl_telephone
                    WHERE master_id = '".$_POST["sel_id"]."'";
    $get_tel_res = mysqli_query($mysqli, $get_tel_sql) or die(mysqli_error($mysqli));
 
    if (mysqli_num_rows($get_tel_res) > 0) {
 
        $display_block .= "<p><strong>Telephone:</strong><br/>
        <ul>";
 
        while ($tel_info = mysqli_fetch_array($get_tel_res)) {
            $tel_number = stripslashes($tel_info['tel_number']);
            $tel_type = $tel_info['type'];
 
            $display_block .= "<li>$tel_number ($tel_type)</li>";
        }
 
        $display_block .= "</ul>";
    }
 
    //free result
    mysqli_free_result($get_tel_res);
 
    //get all fax
    $get_fax_sql = "SELECT fax_number, type FROM tbl_fax
                    WHERE master_id = '".$_POST["sel_id"]."'";
    $get_fax_res = mysqli_query($mysqli, $get_fax_sql) or die(mysqli_error($mysqli));
 
    if (mysqli_num_rows($get_fax_res) > 0) {
 
        $display_block .= "<p><strong>Fax:</strong><br/>
        <ul>";
 
        while ($fax_info = mysqli_fetch_array($get_fax_res)) {
            $fax_number =  stripslashes($fax_info['fax_number']);
            $fax_type = $fax_info['type'];
 
            $display_block .= "<li>$fax_number ($fax_type)</li>";
        }
 
        $display_block .= "</ul>";
    }
 
    //free result
    mysqli_free_result($get_fax_res);
 
    //get all email
    $get_email_sql = "SELECT email, type FROM tbl_email
                      WHERE master_id = '".$_POST["sel_id"]."'";
    $get_email_res = mysqli_query($mysqli, $get_email_sql) or die(mysqli_error($mysqli));
 
     if (mysqli_num_rows($get_email_res) > 0) {
 
        $display_block .= "<p><strong>Email:</strong><br/>
        <ul>";
 
        while ($email_info = mysqli_fetch_array($get_email_res)) {
            $email = stripslashes($email_info['email']);
            $email_type = $email_info['type'];
 
            $display_block .= "<li>$email ($email_type)</li>";
        }
 
        $display_block .= "</ul>";
    }
 
    //free result
    mysqli_free_result($get_email_res);
 
    //get personal note
    $get_notes_sql = "SELECT note FROM tbl_personal_notes
                      WHERE master_id = '".$_POST["sel_id"]."'";
    $get_notes_res = mysqli_query($mysqli, $get_notes_sql) or die(mysqli_error($mysqli));
 
    if (mysqli_num_rows($get_notes_res) == 1) {
        while ($note_info = mysqli_fetch_array($get_notes_res)) {
            $note = nl2br(stripslashes($note_info['note']));
        }
 
        $display_block .= "<p><strong>Personal Notes:</strong><br/>$note</p>";
    }
 
    //free result
    mysqli_free_result($get_notes_res);
 
    $display_block .= "<br/>
    <p align=\"center\"><a href=\"".$_SERVER["PHP_SELF"]."\">select another</a></p>";
}
//close connection to MySQL
mysqli_close($mysqli);
?>
<html>
<head>
<title>My Records</title>
</head>
<body>
<?php echo $display_block; ?>
</body>
</html>
 

[Markus]

That's alot of code to look through, but if i understand you right you could just add the LIMIT to your sql query.

[php]
$_query = "SELECT * FROM `tbl_name` WHERE `something` = 'something' LIMIT 1";
[/php]