Adding xp throws error

[thereaper87]

Hello there, first post! 

 

I have two pages:

This one is submitxp.php

<?php include("../../tophead.php"); ?>
<form id="addxp" method="post" action="addxp.php">
<input type="submit" value="Add">
</form>

 

Then the process page addxp.php

<?php include("../../tophead.php"); ?>
<?php
include('../database.php'); 
$userid = $_SESSION['user']; 

$result = mysql_query("SELECT xp, level FROM user WHERE id=$userid");   row 7
$row = mysql_num_rows($result); 

while($row = mysql_fetch_assoc($result))       row9
{ 
    $exp = $row['xp']; 
} 
if (surfed){ 
$newexp += 100; 
} 
$inputexp = mysql_query("UPDATE user SET xp='$newexp' WHERE id='$userid'");
?>

 

What this supposed to do, is the person presses the submit button on submitxp.php it will take the logged in user, find their row in the database and add 100 to their total xp amount. It gives at least two errors that say:

mysql_num_rows(): supplied argument is not a valid MySQL result resource in row 7

and

mysql_num_rows(): supplied argument is not a valid MySQL result resource in row 9

[Pikachu2000]

Add a session_start(); to the head of the script. $user_id has no value without it.

 

 

That can all be done in one query, by the way.

 

UPDATE `user` SET `xp`=(`xp`+100) WHERE `id` = $userid"

[thereaper87]

So it would look like this?? Sorry I am very new to PHP. 3rd week actually 

 

<?php
session_start();
include('../database.php'); 
$userid = $_SESSION['user']; 

$result = mysql_query("SELECT xp, level FROM user WHERE id=$userid");
(UPDATE `user` SET `xp`=(`xp`+100) WHERE `id` = $userid")
?>

 

Is that how to do it?

[thereaper87]

Well using that code I posted above didn't give any errors, but it also didn't add the 100.

[Pikachu2000]

You should really separate your query string from the query execution, Makes debugging easier . . .

 

<?php
session_start();
include('../database.php'); 
$userid = $_SESSION['user']; 

$query = "UPDATE `user` SET `xp`=(`xp`+100) WHERE `id` = $userid LIMIT 1";
$result = mysql_query($query) or die('Query Failed');

[thereaper87]

I ran that exact code and it said "Query Failed". 

Just from the limited experience, should this "UPDATE `user` have the apostrophe? Would instead it go like "UPDATE user SET... ?

[thereaper87]

Never mind that idea.

[Pikachu2000]

Those aren't apostrophes, they're backticks, and it won't hurt anything to have them on field and table names. They're sometimes necessary, so I'm in the habit of always using them.

 

Change the query execution to:

$result = mysql_query($query) or die('Query: ' . $query . '<br />Failed with: ' . mysql_error());

and see what the error is.

[thereaper87]

It gives this, which I have no idea what it is saying.

Query: UPDATE user SET xp=(xp+100) WHERE 'id' = ksystem LIMIT 1

Failed with: Unknown column 'ksystem' in 'where clause'

 

 

ksystem is the profile i'm logged into. Is that the problem? Since, shouldn't it be a number?

Because my MySql table is set up like this:

 

`id` int(4) unsigned NOT NULL auto_increment,

  `username` varchar(32) NOT NULL,

  `password` varchar(32) NOT NULL,

  `xp` int(11) default '0',

  PRIMARY KEY  (`id`)

 

 

 

 

[Pikachu2000]

Yup. Somehow, somewhere, the $_SESSION['user'] var is being given the wrong value, or the wrong $_SESSION var is being used. And don't use single-quotes on field names as I see you have on 'id'. Like I explained above, they should be in backticks,  which are on the key with the tilde(~) on the top left of (most) keyboards.

[thereaper87]

Any idea where to go from here?

Maybe use this?

$sql="select username,xp from user where username='{$_SESSION['user']}' limit 1";

 

That is on my profile page that I put together. Not sure if that is useful.

[thereaper87]

With putting that line instead, it now gave this error when ran:

Query: UPDATE `user` SET `xp`=(`xp`+100) WHERE `id` = Limit 1

Failed with: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Limit 1' at line 1

[Pikachu2000]

"UPDATE `user` SET `xp`=(`xp`+100) WHERE `username` = '$userid' LIMIT 1" should work for now, as long as you don't have any duplicate usernames in the database.

[thereaper87]

I think I love you.  I know, but I have been working on this for 2 weeks and you are just amazing! Thank you so much!!!