<?php  // please never use shorttags

$dbhost = 'X';
$dbuser = 'X';
$dbpass = 'X';
$dbname = 'X';

//Connecting to DB
if(isset($_SESSION["username"])) {

  $conn = mysql_connect($dbhost, $dbuser, $dbpass) or die('Error connecting to mysql');
  mysql_select_db($dbname);

  $query  = "SELECT * FROM profiles";
  $result = mysql_query($query);
  
  // shorttags are BAD!
  $dom = new DOMDocument();
  $profile = $dom->createElement('ProfileXML');
  $dom->appendChild($profile);
  while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
    $data = $dom->createElement('Data');
    $profile->appendChild($data);
    $tags = array(
      'id' => $row['id'],
      'name' => $row['name'],
      'autor' => $row['autor'],
      'area' => $row['area'],
      'type' => $row['type'],
      'professions' => $row['professions'],
      'minlevel' => $row['minlevel'],
      'maxlevel' => $row['maxlevel'],
      'faction' => $row['faction'],
      'comment' => $row['comment'],
      'location' => $row['location'],
      'premium' => $row['premium'],
      'date' => $row['date']
    );
    foreach ($tags as $tag => $content) {
      $node = $dom->createElement($tag);
      $fragment = $dom->createFragment();
      if ($fragment->load($content)) {
        $node->appendChild($fragment);
      } else {
        $node->appendChild($dom>createTextNode($content));
      }
    }
  }
  echo $dom->saveXml();
}
?>