mysql_connect('localhost','eric','placenta') or die("Unable to connect"); mysql_select_db("eric") or die("Unable to select db"); mysql_query(" CREATE TABLE IF NOT EXISTS pq6hi ( name char(30) NOT NULL, passkey int(11) NOT NULL, race char(30) default NULL, class char(30) default NULL, level int(11) default NULL, plot char(30) default NULL, item char(50) default NULL, spell char(30) default NULL, stat char(10) default NULL, motto char(50) default NULL, stamp timestamp default NULL ) ") or die(mysql_error()); if ($cmd == 'blah') { //$result = mysql_query("UPDATE pq6hi SET plot='Backward ass', item='Nothing', spell='Nada'") or die(mysql_error()); exit(); } if ($cmd == 'create') { header('content-type: text/plain'); srand((double)microtime()*1000000); $passkey = rand(); $name = mysql_escape_string($name); $result = mysql_query("SELECT * FROM pq6hi WHERE name='$name' and level >= 1") or die(mysql_error()); if (mysql_num_rows($result) > 0) { echo("taken|The character name you have selected is not available. Please choose a different name."); } else { mysql_query("DELETE FROM pq6hi WHERE name='$name'") or die(mysql_error()); mysql_query("INSERT INTO pq6hi(name,passkey) VALUES ('$name',$passkey)") or die(mysql_error()); echo("ok|$passkey"); } exit(); } else if ($cmd == 'brag') { $name = mysql_escape_string($name); $class = mysql_escape_string($class); $race = mysql_escape_string($race); $level = intval($level); $plot = mysql_escape_string($plot); $item = mysql_escape_string($item); $spell = mysql_escape_string($spell); $stat = mysql_escape_string($stat); $motto = mysql_escape_string($motto); $result = mysql_query("SELECT passkey FROM pq6hi WHERE name='$name'") or die(mysql_error()); $key = mysql_result($result,0,0); if ($passkey == (~$level * 9831) ^ $key) { mysql_query("UPDATE pq6hi SET class='$class', race='$race', level='$level', item='$item', spell='$spell', stat='$stat', plot='$plot', motto='$motto' WHERE name='$name'"); echo("ok"); } else { echo("forbidden"); } exit(); } else if (isset($query) && $passwd == 'livers') { $query = stripslashes($query); $query2 = htmlspecialchars($query); echo("
| $col_value | \n"; } print "\t
| Rank | Name | Race | Class | Level | Prime Stat | Plot Stage | Most Prized Item | Specialty | Motto (Ctrl-M) |
|---|---|---|---|---|---|---|---|---|---|
| $n. | $name | $race | $class | $level | $stat | $plot | $item | $spell | $motto |