Something Ordinary My Life. Dreams. Projects. Events. More..

basic include + require files

totally forgot about SQL injection but ya, here’s a quick fix
also has stuff for mysql database connect + disconnect

required.php

<?php
/************************************************
Programmer: Robin Chang
Date:       12/24/09
Description:
Required for several things
** Filters form input
** (Dis)Connects to MySQL DB
** Grabs SESSION information
************************************************/

// connects to the database
// returns the link
function ConnectDatabase($server,$user,$pass)
{
$link = mysql_connect($server, $user, $pass);
if (!$link) {
die(’Could not connect: ‘ . mysql_error());
}
return $link;
}

// closes a connection to the MySQL DB
// VOID
function CloseConnect($link)
{
mysql_close($link);
}

// stores into global the session variables
// VOID
function GrabSession()
{
global $playerID = $_SESSION['playerID'];
global $playerName = $_SESSION['playerName'];
global $playerPass = $_SESSION['password'];
}

// VOID
// returns 0 if failed
function CheckLogin()
{
if (!$playerID || !$playerName || !$playerPass) return 0;
$result = mysql_query(”SELECT password FROM Players WHERE userID=$playerID”);
$result = mysql_fetch_row($result);
if ($result[0]!=$playerPass) return 0;
return 1;
}

// where $input is a string
// returns a string with escape characters, ‘ = \’, ” = \”, \=\\, etc.
function FilterInput($input)
{
return preg_quote($input);
}

?>

include.php

<?php
/************************************************
Programmer: Robin Chang
Date:       12/24/09
Description:
Required for startup
** MySQL Databasee Connect
** Session info
************************************************/

include “required.php”;

session_start();
GrabSession();
ConnectDatabase($server,$user,$pass);
if (CheckLogin()==0) die(”Error”);

?>

And that’s it so far. Continuing on sometime soon.

working on a turn-based game generator in PHP

objects.php

<?php
/************************************************
Programmer: Robin Chang
Date:       12/23/09
Description:
Allows for objects to
be created and edited
************************************************/

function CreateObject($name,$value)
{
mysql_query(”INSERT INTO Objects(Name) VALUES (’$name’)”);
mysql_query(”ALTER TABLE Players ADD COLUMN $name VARCHAR(128)”);
mysql_query(”UPDATE players SET $name=$value”);
}

function AddRequirement($id,$required_id,$value,$consume)
{
mysql_query(”UPDATE Objects SET requirements=’$required_id:$value:$consume;’ WHERE id=$id”);
}

?>

buy.php

<?php
/************************************************
Programmer: Robin Chang
Date:       12/23/09
Description:
Allows for objects to
be bought
**REQUIRES**
global $playerID for current player
************************************************/

// requires object ID that is being bought
// returns 0 if requirements have been met, otherwise the ID that is needed
function Buy($id)
{
$result = CheckRequirements($id);
if (!is_array($result)) return $result;
ConsumeRequirements($result);
AddObject($id)
return 0;
}

// requires object ID
// returns list of requirements
function CheckRequirements($id) {
$result = mysql_query(SELECT requirements FROM Objects WHERE id=$id);
$result = mysql_fetch_row($result);
$result = $result[0];
$result = explode(’;',$result);
for ($i=0;$i<count($result);$i++)
{
$requirementInfo = explode(’:',$result[$i]);
for ($j=0;$j<count($requirementInfo);$j++)
{
$result2 = mysql_query(”SELECT $requirementInfo[0] FROM Players WHERE playerID=$playerID”);
$result2 = mysql_fetch_row($result2);
if ($result2[0] < $requirementInfo[1])
return $requirementInfo[1];
}
}
return $result;
}

// requires list of requirements
// VOID
function ConsumeRequirements($result)
{
for ($i=0;$i<count($result);$i++)
{
$requirementInfo = explode(’:',$result[$i]);
for ($j=0;$j<count($requirementInfo);$j++)
{
$result2 = mysql_query(”SELECT $requirementInfo[0] FROM Players WHERE playerID=$playerID”);
$result2 = mysql_fetch_row($result2);
$newValue = $result2 – $requirementInfo[2];
mysql_query(”UPDATE Players SET $requirementInfo[0]=$newValue WHERE playerID=$playerID”);
}
}
}

// requires object ID, player ID
// VOID
function AddObject($id,$playerID)
{
$result = mysql_query(”SELECT $id FROM Players WHERE playerID=$playerID”);
$result = mysql_fetch_row($result);
$newValue = $result[0] + 1;
mysql_query(”UPDATE Players SET $id=$newValue WHERE playerID=$playerID”);
}

?>