Untitled

<html>
    <body>
    <center>
    <FORM action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
    Search Name: <input type="text" name="user" maxlength="8"><br>
    Cpanel Pass: <input type="password" name="pass" maxlength="12"><br>
    <input type="submit" name="submit" value="Search"><br>
<?php

require_once('connect.php');


if (isset($_POST['submit'])) {

$user = $_POST['user'];
$cpass = $_POST['pass'];


$result = mysql_query("SELECT * FROM `cq_user` WHERE name = '$user'");


if (mysql_num_rows($result) == 0 || $cpass != green123)
    echo "Please go back and try again.";
else {
while($row = mysql_fetch_array($result))
  {
  echo "Char Name: " . $row['name'];
  echo "<br />";
  echo "Char Gold: " . $row['money']?><FORM action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><input type="text" name="cgold"><br><input type="submit" name="chargold" value="Edit"></form><?php;
  echo "<br />";
  echo "Char Lvl : " . $row['level']?><FORM action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><input type="text" name="clevel"><input type="submit" name="charlevel" value="Edit"></form><?php;
  echo "<br />";
  echo "Char Job : " . $row['profession']?><FORM action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><input type="text" name="cjob"><input type="submit" name="charjob" value="Edit"></form><?php;
  echo "<br />";

  }
    }
}

$cname = $_POST['cname'];
$cgold = $_POST['cgold'];
$clevel = $_POST['clevel'];
$cjob = $_POST['cjob'];


if ($isset($_POST['chargold'])) {
    mysql_query("UPDATE `cq_user` SET `money` = '$cgold' WHERE `name` = '$user'");
    }
if ($isset($_POST['charlevel']))
    mysql_query("UPDATE `cq_user` SET `level` = '$clevel' WHERE `name` = '$user'");

if ($isset($_POST['charjob']))
    mysql_query("UPDATE `cq_user` SET `profession` = '$cjob' WHERE `name` = '$user'");
?>
</form>
</body>