Page 1 of 1

help with acc. modifer

Posted: Thu Jan 06, 2005 12:22 am
by rodrigorules
here is a piece of my script given to by a friend
what do i add to it to make it add +1 to a column named "Resets"
in a table named MEMB_INFO?

here is the peice of code

Code: Select all

<?php

$msquery = "UPDATE dbo.Character 
set Inventory = 0xAA5C7F0000000060FFFFFFFF(many F's here)
where Name like '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login' ";}
?>
?>
i tried ADDING this to the end, but i got parse error when trying to use it

Code: Select all

<?php
UPDATE dbo.memb_info
SET resets+=1
?>
how do i change this a bit mroe to work?

Posted: Thu Jan 06, 2005 12:42 am
by feyd
resets = resets + 1

?

Posted: Thu Jan 06, 2005 12:45 am
by rodrigorules
parse error

Posted: Thu Jan 06, 2005 12:53 am
by rodrigorules
WHERE Resets = Resets + 1

dont work ethier

heres what i tried latest

Code: Select all

<?php
else {

if ($row[1]==0 OR $row[1]==1){
$msquery = "UPDATE dbo.Character 
set Inventory = 0xAA5C7F0000000060FFFFFFFFFFFFFFF(more F's)
where Name like '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login' ";
UPDATE dbo.MEMB_INFO
WHERE Resets = Resets + 1
}
?>

Posted: Thu Jan 06, 2005 12:59 am
by andre_c
post the whole updated code.
'Resets = Resets + 1' should not be after the WHERE statement

Posted: Thu Jan 06, 2005 1:00 am
by rodrigorules
its on top of your post
remember all im trying to do is add 1 to the reset column in MEMB_INFO table

Posted: Thu Jan 06, 2005 1:08 am
by andre_c
you really should take a basic PHP/MySQL tutorial, you can find one on google.
in the mean time:

Code: Select all

if ($row[1]==0 OR $row[1]==1){
$msquery = "
  UPDATE dbo.Character 
    SET Inventory=0xAA5C7F0000000060FFFFFFFFFFFFFFF(more F's), 
      clevel=1, AccountID = '$login', Experience = '0'
    WHERE Name = '$name'
      AND AccountID = '$login' ";
$query2 = "
  UPDATE dbo.MEMB_INFO 
     SET Resets = Resets + 1
      WHERE Name = '$name'";

// i can't remember how to run the queries with ms sql
// with mysql it would be something like this:
//$run = mysql_query( $msquery ) or die(mysql_error());
//$run2 = mysql_query( $query2 ) or die(mysql_error());
}
?>
Something like that, but for more i would really need to know what you're trying to do

Posted: Thu Jan 06, 2005 8:12 am
by feyd
he's using MSSQL.

Posted: Thu Jan 06, 2005 1:19 pm
by rodrigorules
ts not adding 1 to resets column(in MEMB_INFO table) like its suppoused to..

Posted: Thu Jan 06, 2005 1:26 pm
by rodrigorules
ic, i found a misplaced } in the first set of FFFFFFFFF
so i got rid of error...
but it is still not adding 1 to reset column like it should =/

but theres no errors,

oo i know y, there is no Name collumn in MEMB_INFO

Posted: Thu Jan 06, 2005 1:52 pm
by rodrigorules
heres the new code, im sure its right, but it just doesnt work...no errors or anything
but 1 is not added to table MEMB_INFO, column Resets =/

Code: Select all

<style type="text/css">
<!--
.style1 {
color: #FF0000;
font-size: 14px;
**
-->
</style>
<table width="760" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td height="1" style="border-left:1px solid #666666;border-right:1px solid #666666"></td>
</tr>
</table>
<html>
<head> 
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<link href="img/css.css" rel="stylesheet" type="text/css">
<p> 
<style type="text/css">
<!--
.style1 {color: #FF0000;**
.style2 {color: #FF0000**
.Estilo5 {color: #666666**
.Estilo6 {font-size: larger**
.Estilo8 {color: #FF0000; font-weight: bold; **
-->
</style><body leftmargin="0" topmargin="0">
<?php
require 'config.php';
$msconnect=mssql_connect("$dbhost","$dbuser","$dbpasswd");
$msdb=mssql_select_db("MuOnline",$msconnect);

require_once "sql_inject.php"; 
$bDestroy_session = TRUE; 
$url_redirect = 'index.php'; 
$sqlinject = new sql_inject('./log_file_sql.log',$bDestroy_session,$url_redirect)  ; 

$name = stripslashes($_POST['name']);
$login = stripslashes($_POST['login']);
$oldpwd = stripslashes($_POST['oldpwd']);

$sql_username_check = mssql_query("SELECT memb___id FROM MEMB_INFO WHERE memb___id='$login'"); 
$username_check = mssql_num_rows($sql_username_check); 

$sql_name_check = mssql_query("SELECT Name FROM Character WHERE Name='$name' and AccountID = '$login'"); 
$name_check = mssql_num_rows($sql_name_check); 

$sql_pw_check = mssql_query("SELECT memb__pwd FROM MEMB_INFO WHERE memb__pwd='$oldpwd' and memb___id='$login'"); 
$pw_check = mssql_num_rows($sql_pw_check); 

$result = mssql_query("Select Clevel, Class From Character where Name='$name'");
$row = mssql_fetch_row($result);

if (empty($name) || empty($login) || empty($oldpwd)){
	echo "Error: some fields were left blank. Please go back and try again.<br>";}

elseif ($username_check <= 0){ 
echo "Your Login does not exist in our database. Please go back and try again.<br>";}

elseif ($name_check <= 0){ 
echo "Your Character does not exist in your account and / or in our database. Please go back and try again.<br>"; }

elseif ($row[0] < 349){ 
        echo "Error: Your Level ($row[0]) Is Not High Enough!<br>"; }

elseif ($pw_check <= 0){ 
echo "Your Password Seems To Be Invalid!<br>"; }

else {

if ($row[1]==0 OR $row[1]==1){
$msquery = "UPDATE dbo.Character 
set Inventory = 0xAA5C7F0000000060FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
where Name like '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login' ";
$query2 = "  
UPDATE dbo.MEMB_INFO 
SET Resets = Resets + 1 
WHERE MEMB___ID = '$login'";}








if ($row[1]==16 OR $row[1]==17){
$msquery = "UPDATE dbo.Character 
set Inventory = 0x11DC7D00000000600000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
where Name = '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login'";
$query2 = "  
UPDATE dbo.MEMB_INFO 
SET Resets = Resets + 1 
WHERE MEMB___ID = '$login'";}

if ($row[1]==32 OR $row[1]==33){
$msquery = "UPDATE dbo.Character 
set Inventory = 0xFFFFFFFFFFFFFFFFFFFF91DC7000000000600000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
where Name = '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login'";
$query2 = "  
UPDATE dbo.MEMB_INFO 
SET Resets = Resets + 1 
WHERE MEMB___ID = '$login'";}

if ($row[1]==48){
$msquery = "UPDATE dbo.Character 
set Inventory = 0x135C780000000060F8B6135C7800000000600000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
where Name = '$name'
UPDATE dbo.Character
SET clevel=1
WHERE Name = '$name'
AND AccountID = '$login'
UPDATE dbo.Character SET Experience = '0'
WHERE Name = '$name'
AND AccountID = '$login'";
$query2 = "  
UPDATE dbo.MEMB_INFO 
SET Resets = Resets + 1 
WHERE MEMB___ID = '$login'";}

$sqlinject->test($msquery);

$msresults = mssql_query($msquery);
echo "$name is successfully resetted and has been rewarded likewise.<br>";}

?>


</body>
</html>
</body>
</html>

feyd | Help us, help you. Please use

Code: Select all

and

Code: Select all

tags where approriate when posting code. Read:  [url=http://forums.devnetwork.net/viewtopic.php?t=21171]Posting Code in the Forums[/url][/color]