My code Problem

[al_ltoticmat]

You are the great.

It works perfect.

Thank you.

[al_ltoticmat]

I fixed it.

but it occurs this.
SQL Error
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' 2008-10-21 17:02:56, 'You receive money from ticc Value K\n', 0)' at line 1

$msg = sqlesc("You receive money from ".$CURUSER['username']." value ".$money." K");
				@mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". get_date_time() .", $msg, 0)") or sqlerr(__FILE__, __LINE__);

[al_ltoticmat]

I want to send a message to users who get a seedbonus.

The code above errors.

[djlee]

first of all u need to escape the date

change

get_date_time()

to

sqlesc(get_date_time())

secondly make sure u escape the message .. if you havenet already done this before using $msg in the query
change

$msg

to

".sqlesc($msg)."

[al_ltoticmat]

I don't know why
this problem haven't solve the another problem occurs.

<?
if ($CURUSER["id"] != $user["id"])
{
	print("<tr><td class=rowhead><b>Transfer Money</b></td><td class=tablea align=left>\n");
	print("<form method=post action='userdetails.php?id=".$id."'><input type=hidden name=receiver value=$id><input type=text size=6 name=money>&nbsp;&nbsp;<input type=submit value=\"Transfer\" style='height: 23px'></form>");
	if(isset($_POST["money"]) && ($money = 0+$_POST["money"]))
			$receiver = $_GET["receiver"];
			if ($money > $CURUSER["seedbonus"])
			print("You don't have enough money");
			else
			{
				$msg = sqlesc("You receive from".$CURUSER['username']." value ".$money." K");
				@mysql_query("UPDATE users SET seedbonus = seedbonus + $money WHERE id=$receiver");
				@mysql_query("UPDATE users SET seedbonus = seedbonus - $money WHERE id=".$CURUSER['id']);
				@mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". sqlesc(get_date_time()) .", ".sqlesc($msg).", 0)");
				

			}
}


?>

I think maybe $receiver wrong.

The another problem is the user that I give seedbonus. He didn't receive but my seedbonus decreases. He didn't get a pm too.

[djlee]

try that (untested)

<?
if ($CURUSER["id"] != $user["id"])
{
	print("<tr><td class=rowhead><b>Transfer Money</b></td><td class=tablea align=left>\n");
	print("<form method=post action='userdetails.php?id=".$id."'><input type=hidden name=receiver value=$id><input type=text size=6 name=money>&nbsp;&nbsp;<input type=submit value=\"Transfer\" style='height: 23px'></form>");
	if(isset($_POST["money"]) && ($money = 0+$_POST["money"]) != "")
			$receiver = 0+$_POST["receiver"];
			if ($money > $CURUSER["seedbonus"])
			print("You don't have enough money");
			else
			{
				$msg = "You receive from".$CURUSER['username']." value ".$money." K";
				@mysql_query("UPDATE users SET seedbonus = seedbonus + $money WHERE id=$receiver");
				@mysql_query("UPDATE users SET seedbonus = seedbonus - $money WHERE id=".$CURUSER['id']);
				@mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". sqlesc(get_date_time()) .", ".sqlesc($msg).", 0)");
				

			}
}


?>

[al_ltoticmat]

Hey, you are the best I ever seen.

Very thank you.
Work perfect in every function.

You make me happy.