Bravo List - My code Problem

Page 2 of 2

Show 40 post(s) from this thread on one page

Bravo List (http://www.bvlist.com/index.php)

- TBDev (http://www.bvlist.com/forumdisplay.php?f=20)

- - My code Problem (http://www.bvlist.com/showthread.php?t=1224)

al_ltoticmat

21st October 2008 10:32

You are the great.

It works perfect.

Thank you.

al_ltoticmat

21st October 2008 10:56

I fixed it.

but it occurs this.
SQL Error
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' 2008-10-21 17:02:56, 'You receive money from ticc Value K\n', 0)' at line 1

Code:

$msg = sqlesc("You receive money from ".$CURUSER['username']." value ".$money." K");

                                @mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". get_date_time() .", $msg, 0)") or sqlerr(__FILE__, __LINE__);

al_ltoticmat

22nd October 2008 10:40

I want to send a message to users who get a seedbonus.

The code above errors.

djlee

22nd October 2008 16:53

first of all u need to escape the date

change

Code:

get_date_time()

Code:

sqlesc(get_date_time())

secondly make sure u escape the message .. if you havenet already done this before using $msg in the query
change

Code:

$msg

Code:

".sqlesc($msg)."

al_ltoticmat

22nd October 2008 17:39

I don't know why
this problem haven't solve the another problem occurs.

Code:


if ($CURUSER["id"] != $user["id"])

{

        print("

Transfer Money

\n");
print("");
if(isset($_POST["money"]) && ($money = 0+$_POST["money"]))
$receiver = $_GET["receiver"];
if ($money > $CURUSER["seedbonus"])
print("You don't have enough money");
else
{
$msg = sqlesc("You receive from".$CURUSER['username']." value ".$money." K");
@mysql_query("UPDATE users SET seedbonus = seedbonus + $money WHERE id=$receiver");
@mysql_query("UPDATE users SET seedbonus = seedbonus - $money WHERE id=".$CURUSER['id']);
@mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". sqlesc(get_date_time()) .", ".sqlesc($msg).", 0)");

}
}

?>

I think maybe $receiver wrong.

The another problem is the user that I give seedbonus. He didn't receive but my seedbonus decreases. He didn't get a pm too.

djlee

23rd October 2008 00:27

try that (untested)

Code:


if ($CURUSER["id"] != $user["id"])

{

        print("

Transfer Money

\n");
print("");
if(isset($_POST["money"]) && ($money = 0+$_POST["money"]) != "")
$receiver = 0+$_POST["receiver"];
if ($money > $CURUSER["seedbonus"])
print("You don't have enough money");
else
{
$msg = "You receive from".$CURUSER['username']." value ".$money." K";
@mysql_query("UPDATE users SET seedbonus = seedbonus + $money WHERE id=$receiver");
@mysql_query("UPDATE users SET seedbonus = seedbonus - $money WHERE id=".$CURUSER['id']);
@mysql_query("INSERT INTO messages (sender, receiver, added, msg, poster) VALUES(0, $receiver, ". sqlesc(get_date_time()) .", ".sqlesc($msg).", 0)");

}
}

?>

al_ltoticmat

23rd October 2008 09:35

Hey, you are the best I ever seen.

Very thank you.
Work perfect in every function.

You make me happy.

All times are GMT +2. The time now is 01:01.

Page 2 of 2

Show 40 post(s) from this thread on one page