From 8864c8711f9ee51d13ca07c48a1dec2230381a6d Mon Sep 17 00:00:00 2001
From: mauirixxx <mauirixxx@users.noreply.github.com>
Date: Wed, 24 May 2017 23:27:15 -1000
Subject: [PATCH] more session fun

---
 gw-location.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/gw-location.php b/gw-location.php
index c627929..23df8d1 100644
--- a/gw-location.php
+++ b/gw-location.php
@@ -1,9 +1,11 @@
 <TITLE>Location Selection</TITLE>
 <?php
+session_start();
 include_once 'gw-connect.php';
 $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
 //all POST variable data under here
-$playerid = mysqli_real_escape_string($con, $_POST['playerid']);
+//$playerid = mysqli_real_escape_string($con, $_POST['playerid']);
+$playerid = $_SESSION['playerid'];
 if ($con->connect_errno > 0){
 	die ('Unable to connect to database [' . $db->connect_errno . ']');
 }
@@ -21,6 +23,6 @@ while ($rowmap = $resultmap->fetch_array()){
 	echo '<OPTION VALUE="' . $locid . '">' . $locname . '</OPTION>';
 }
 echo '</SELECT><NOSCRIPT><INPUT TYPE="SUBMIT" VALUE="Choose Map Location"></NOSCRIPT></FORM></CENTER><BR />';
-echo '<CENTER><FORM METHOD="POST" ACTION="gw-toon.php"><INPUT TYPE="HIDDEN" NAME="cnameid" VALUE="0"><INPUT TYPE="SUBMIT" VALUE="Return to character selection"></FORM>';
+echo '<CENTER><FORM METHOD="POST" ACTION="gw-toon.php"><INPUT TYPE="HIDDEN" NAME="playeridid" VALUE="0"><INPUT TYPE="SUBMIT" VALUE="Return to character selection"></FORM>';
 echo '</BODY>';
 ?>
\ No newline at end of file