Jump to content

PHP/MYSQL including php, not echo


sp@rky13

Recommended Posts

Hi

 

Can't see anything in that code fragment that would cause it.

 

However you also seem to have removed the GROUP_CONCAT, and I think with that before you would have returned a single row with all of them joined together while now you are looping through the results.

 

All the best

 

Keith

I think you are looking for something like this

 

if i < 10 =>

echo x between 100*i and (100*i+99) and Y between 0 and 99

else

echo x between ((i/10 rest of division)*100 ) and ((i/10 rest of division)*100 +99 ) and y between (i/10 integer part of division)*100 +99 

 

so you need to find or write a function that return you

1 the rest of a division

2 the integer part of a division

 

I think there will be a function like that available in php I just don't know it

 

 

 

Yes, but where is the rest of the code to generate that javascript?

 

The assumption in that post is that you would want some other data from the select, hence not using GROUP_CONCAT was more flexible.

 

All the best

 

Keith

Hi

 

The code posted above just generates a list of X and Y coordinates. There is nothing in it at all to put out the javascript calls . My guess would be that the Javascript is  put out in a fixed format with a line break half way through and then the coordinates are echoed out, but that is just a guess. Without see where the rest of it comes from I cannot say anything useful about where the line break comes from.

 

For example my guess is you have code like this:-

 

<pre class="alt2" dir="ltr" style="
	margin: 0px;
	padding: 6px;
	border: 1px inset;
	width: 640px;
	height: 34px;
	text-align: left;
	background-color: #EFE6C9;
	overflow: auto">javascript:function%20end(){c='
<?php
$yLow = floor($k1 / 10) * 100;
$yHigh = $yLow + 99;

$xLow = ($k1 % 10) * 100;
$xHigh = $xLow + 99;
$BetweenClause = "x BETWEEN $xLow AND $xHigh AND y BETWEEN $yLow AND $yHigh";

$con = mysql_connect("localhost","*******","******");
if (!$con)
{
   die('Could not connect: ' . mysql_error());
}

mysql_select_db("wwwspark_tribalwars", $con);

$result = mysql_query("SELECT c.player AS playerid, CONCAT_WS('|',c.x,c.y) AS xy FROM ally_en28 a INNER JOIN players_en28 b ON a.id = b.ally INNER JOIN villages_en28 c ON b.id = c.player WHERE a.tag = '$vpt_sub' AND $BetweenClause ORDER BY c.player") or die(mysql_error());

while($row = mysql_fetch_array($result))
{
echo $row['xy']." "; 
}
mysql_close($con);
?>';var%20d=document;if(window.frames.length>0)d=window.main.document;url=d.URL;if(url.indexOf('screen=place')==-1)alert('This%20script%20needs%20to%20be%20run%20from%20the%20rally%20point');a=c.match(/(\d+\|\d+)/g);b=a[Math.round(Math.random()*(a.length-1))].split("|").forms[0].x.value=b[0].forms[0].y.value=b[1].forms[0].spear.value=0;d.forms[0].sword.value=0;d.forms[0].axe.value=0;d.forms[0].spy.value=0;d.forms[0].light.value=0;d.forms[0].heavy.value=0;d.forms[0].ram.value=0;d.forms[0].catapult.value=0;d.forms[0].snob.value=0;d.forms[0].archer.value=0;d.forms[0].marcher.value=0;d.forms[0].knight.value=0;}end();</pre>

 

whereas you want something subtly different like this.

 

<pre class="alt2" dir="ltr" style="
	margin: 0px;
	padding: 6px;
	border: 1px inset;
	width: 640px;
	height: 34px;
	text-align: left;
	background-color: #EFE6C9;
	overflow: auto">javascript:function%20end(){c='<?php
$yLow = floor($k1 / 10) * 100;
$yHigh = $yLow + 99;

$xLow = ($k1 % 10) * 100;
$xHigh = $xLow + 99;
$BetweenClause = "x BETWEEN $xLow AND $xHigh AND y BETWEEN $yLow AND $yHigh";
$con = mysql_connect("localhost","*******","******");
if (!$con)
{
   die('Could not connect: ' . mysql_error());
}

mysql_select_db("wwwspark_tribalwars", $con);

$result = mysql_query("SELECT c.player AS playerid, CONCAT_WS('|',c.x,c.y) AS xy FROM ally_en28 a INNER JOIN players_en28 b ON a.id = b.ally INNER JOIN villages_en28 c ON b.id = c.player WHERE a.tag = '$vpt_sub' AND $BetweenClause ORDER BY c.player") or die(mysql_error());

while($row = mysql_fetch_array($result))
{
echo $row['xy']." "; 
}
mysql_close($con);
?>';var%20d=document;if(window.frames.length>0)d=window.main.document;url=d.URL;if(url.indexOf('screen=place')==-1)alert('This%20script%20needs%20to%20be%20run%20from%20the%20rally%20point');a=c.match(/(\d+\|\d+)/g);b=a[Math.round(Math.random()*(a.length-1))].split("|").forms[0].x.value=b[0].forms[0].y.value=b[1].forms[0].spear.value=0;d.forms[0].sword.value=0;d.forms[0].axe.value=0;d.forms[0].spy.value=0;d.forms[0].light.value=0;d.forms[0].heavy.value=0;d.forms[0].ram.value=0;d.forms[0].catapult.value=0;d.forms[0].snob.value=0;d.forms[0].archer.value=0;d.forms[0].marcher.value=0;d.forms[0].knight.value=0;}end();</pre>

 

However I would be tempted to just built up the list of coordinates and then echo them out once like this

 

<?php
$yLow = floor($k1 / 10) * 100;
$yHigh = $yLow + 99;

$xLow = ($k1 % 10) * 100;
$xHigh = $xLow + 99;
$BetweenClause = "x BETWEEN $xLow AND $xHigh AND y BETWEEN $yLow AND $yHigh";

$con = mysql_connect("localhost","*******","******");
if (!$con)
{
   die('Could not connect: ' . mysql_error());
}

mysql_select_db("wwwspark_tribalwars", $con);

$result = mysql_query("SELECT c.player AS playerid, CONCAT_WS('|',c.x,c.y) AS xy FROM ally_en28 a INNER JOIN players_en28 b ON a.id = b.ally INNER JOIN villages_en28 c ON b.id = c.player WHERE a.tag = '$vpt_sub' AND $BetweenClause ORDER BY c.player") or die(mysql_error());

$CoOrdStr = "";

while($row = mysql_fetch_array($result))
{
$CoOrdStr .= $row['xy']." "; 
}
mysql_close($con);
?>
<pre class="alt2" dir="ltr" style="
	margin: 0px;
	padding: 6px;
	border: 1px inset;
	width: 640px;
	height: 34px;
	text-align: left;
	background-color: #EFE6C9;
	overflow: auto">javascript:function%20end(){c='<?php echo $CoOrdStr; ?>';var%20d=document;if(window.frames.length>0)d=window.main.document;url=d.URL;if(url.indexOf('screen=place')==-1)alert('This%20script%20needs%20to%20be%20run%20from%20the%20rally%20point');a=c.match(/(\d+\|\d+)/g);b=a[Math.round(Math.random()*(a.length-1))].split("|").forms[0].x.value=b[0].forms[0].y.value=b[1].forms[0].spear.value=0;d.forms[0].sword.value=0;d.forms[0].axe.value=0;d.forms[0].spy.value=0;d.forms[0].light.value=0;d.forms[0].heavy.value=0;d.forms[0].ram.value=0;d.forms[0].catapult.value=0;d.forms[0].snob.value=0;d.forms[0].archer.value=0;d.forms[0].marcher.value=0;d.forms[0].knight.value=0;}end();</pre>

 

All the best

 

Keith

Thank you very much. It works perfectly. I'm gonna use that echo thing now too.

 

A question though on security. Is there anyway for someone to get the password for the database if they go to the right document? If so how can that be stopped?

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.