using POST data to select toons

8 лет назад · be1d25da5b
--- a/gw-pull.php
+++ b/gw-pull.php
@@ -1,7 +1,8 @@
 <TITLE>Treasure Data</TITLE>
 <?php
 include_once 'gw-connect.php';
 $con = new mysqli(DATABASE_HOST, DATABASE_USER, DATABASE_PASS, DATABASE_NAME);
 $cnameid = mysqli_real_escape_string($con, $_GET['toonid']); //need to sanitize this input somehow
 $cnameid = mysqli_real_escape_string($con, $_POST['cname']); //need to sanitize this input somehow
 if ($con->connect_errno > 0){
 	die ('Unable to connect to database [' . $db->connect_errno . ']');
 }
@@ -28,5 +29,6 @@ if (mysqli_num_rows($result) > 0) {
 	echo 'no data to display for that character';
 }
 ?>

 <TITLE>Treasure Dates</TITLE>
 <BODY>
 <BR />
 Return to <A HREF=gw-toon.php">character selection</A> page
--- a/gw-toon.php
+++ b/gw-toon.php
@@ -8,7 +8,16 @@ $sql = "SELECT playerid, charname FROM `playername` WHERE `userid` = '1' ORDER B
 if (!$result = $con->query($sql)){
 	die ('There was an error running the query [' . $con->error . ']');
 }
 while ($row = $result->fetch_array()){
 /* while ($row = $result->fetch_array()){
 	echo 'Please select a character to continue: <A HREF="gw-pull.php?toonid=' . $row['charname'] . '">' . $row['charname'] . '</A><BR />';
 } */
 //will be changing weblink with GET data to SELECT box with POST data
 echo '<FORM METHOD="POST" NAME="cselect" ACTION="gw-pull.php">';
 echo '<SELECT name="cname">';
 while ($row = $result->fetch_array()){
 	$charid = $row['playerid'];
 	$charname = $row['charname'];
 	echo '<OPTION VALUE="' . $charid . '">' . $charname . '</OPTION>';
 }
 ?>
 echo '<INPUT TYPE="SUBMIT" VALUE="Choose Toon"></FORM>'; //gw-pull doesn't accept post data yet. or does it?
 ?>