if (($_REQUEST['u'] === md5($login['user'])) and ($_REQUEST['p'] === md5($login['pass']))) { $dbid = array_flip($_POST['dbid']); if (is_array($dbid)) { $string .= implode(',', $dbid); mysql_query("UPDATE `" . $cfg['tablename'] . "` SET viewable='1' WHERE `id` IN (" . $string . ")",$dbase); }