php cookie help

[Jiraiya]

i need help fixing my cookies so that they run the second script

the first script is the login script the second script is the my npc fighting script that needs some fixing

 

 

if(isset($_COOKIE['ID_my_site']))




//if there is, it logs you in and directes you to the members page
{
$username = $_COOKIE['ID_my_site'];
$pass = $_COOKIE['Key_my_site'];
$check = mysql_query("SELECT * FROM users WHERE username = '$username'")or die(mysql_error());
while($info = mysql_fetch_array( $check ))
{
if ($pass != $info['password'])
{
}
else
{
header("Location: player.php");

}
}
}

//if the login form is submitted
if (isset($_POST['submit'])) { // if form has been submitted

// makes sure they filled it in
if(!$_POST['username'] | !$_POST['pass']) {
die('You did not fill in a required field.');
}
// checks it against the database

if (!get_magic_quotes_gpc()) {
$_POST['email'] = addslashes($_POST['email']);
}
$check = mysql_query("SELECT * FROM users WHERE username = '".$_POST['username']."'")or die(mysql_error());

//Gives error if user dosen't exist
$check2 = mysql_num_rows($check);
if ($check2 == 0) {
die('That user does not exist in our database. <a href=http://narutotalesofthesannin.com/join.php>Click To Sign Up</a>');
}
while($info = mysql_fetch_array( $check ))
{
$_POST['pass'] = stripslashes($_POST['pass']);
$info['password'] = stripslashes($info['password']);
$_POST['pass'] = md5($_POST['pass']);

//gives error if the password is wrong
if ($_POST['pass'] != $info['password']) {
die('Incorrect password, please try again.');
}
else
{

// if login is ok then we add a cookie
$_POST['username'] = stripslashes($_POST['username']);
$hour = time() + 3600;
setcookie(ID_my_site, $_POST['username'], $hour);
setcookie(Key_my_site, $_POST['pass'], $hour);

//then redirect them to the members area
header("Location: player.php");
}
}
}
else
{

// if they are not logged in
?>
<form action="<?php echo $_SERVER['PHP_SELF']?>" method="post">
<table border="0">
<tr><td colspan=2><h1>Login</h1></td></tr>
<tr><td>Username:</td><td>
<input type="text" name="username" maxlength="40">
</td></tr>
<tr><td>Password:</td><td>
<input type="password" name="pass" maxlength="50">
</td></tr>
<tr><td colspan="2" align="right">
<input type="submit" name="submit" value="Login">
</td></tr>
</table>
</form>
<?php
}

?> 

</body>
</html>

 

 

 

 

session_start();

if(!isset($_GET['NPC']))
   {
echo "1";
   echo "You have not selected a NPC to fight! Please select one from below <br><br>";

   $NPCS = mysql_query("SELECT * FROM `npc`");
   while($Show = mysql_fetch_array($NPCS))
      {
      echo "<a href=\"Attack.php?NPC={$Show['npcname']}\">{$Show['npcname']}</a><br>";
      }
   exit();
   }

$NPC = mysql_real_escape_string($_GET['NPC']);

echo "<a href=\"Attack.php?NPC=" . $NPC . "&Action=Attack\">Attack</a><br>
<a href=\"Attack.php?NPC=" . $NPC . "&Action=Run\">Run</a><br>";

$username = $_COOKIE['ID_my_site'];

if(isset($_COOKIE['NPC']))
   {
echo "2";
   $UserSQuery = mysql_query("SELECT * FROM `users` WHERE username='$username'");
   $UserS = mysql_fetch_array($UserSQuery);
   $UserH = $_COOKIE['health'];
   $UserA = $UserS['skill'];
   $UserA *= .1;

   $NPCSQuery = mysql_query("SELECT * FROM `npc` WHERE npcname='$NPC'");
   $NPCS = mysql_fetch_array($NPCSQuery);
   $NPCH = $_COOKIE['NPCH'];
   $NPCA = $NPCS['dmg'];
   $NPCA *= .1;
   $NPCX = $NPCS['skillgained'];

   $NPCH -= $UserA;

   if($NPCH <= 0)
      {
      echo "You win and have gained " . $NPCX . " skill";

      $UserA = $UserS['skill'] + $NPCX;

      mysql_query("UPDATE `users`
      SET skill='$UserA'
      WHERE username='$username'");

      unset($_COOKIE['NPC']);

      exit();
      }

   setcookie('NPCH', $NPCH, 2400);

   $UserH -= $NPCA;

   if($UserH <= 0)
      {
      echo "You have lost";

      $UserA = $UserA * .95;

      mysql_query("UPDATE `users`
      SET skill='$UserA'
      WHERE username='$username'");

      unset($_COOKIE['NPC']);

      exit();
      }

   setcookie('health', $UserH, 2400);
   }
else
   {
echo "3";
   $UserSQuery = mysql_query("SELECT * FROM `users` WHERE username='$username'");
   $UserS = mysql_fetch_array($UserSQuery);

   $NPCSQuery = mysql_query("SELECT * FROM `npc` WHERE npcname='$NPC'");
   $NPCS = mysql_fetch_array($NPCSQuery);
   
   setcookie('NPC', $NPC, 2400);
   setcookie('health', $UserS['health'], 2400);
   setcookie('skill', $UserS['skill'], 2400);
   setcookie('NPCH', $NPCS['health'], 2400);
   }

?>


</body>
</html>

[Yesideez]

Post your 3 scripts that use sessions and I'll go through them with premiso and convert them to use sessions - if you want.

[Jiraiya]

i posted the 3 scripts in the other thread