PHP - Field Type For File Directories

Hiya,

Firstly, I'm a complete novice, apologies! But I have got my upload.php working which is nice. I will post the code below.

However, I would now like to restrict the file size and file type to only word documents.

I currently have a restriction of 200KB but it's not working - no idea why as I've looked at other similar codes and they look the same.

Also, just to complicate things - can I stop files overwriting each other when uploaded? At the moment, if 2 people upload files with the same name one will overwrite the other.

Is this too many questions in 1?

Any help is very much appreciated!

Code below:

Code: [Select]
<form enctype="multipart/form-data" action="careers.php" method="POST">
        Please choose a file: <input name="uploaded" type="file" /><br />
<input type="submit" value="Upload" />
</form>

<?php 
 $target = "upload/"; 
 $target = $target . basename( $_FILES['uploaded']['name']) ; 
 $ok=1; 
 
 //This is our size condition 
 if ($uploaded_size > 200) 
 { 
 echo "Your file is too large.<br>"; 
 $ok=0; 
 } 
 
 //This is our limit file type condition 
 if ($uploaded_type =="text/php") 
 { 
 echo "No PHP files<br>"; 
 $ok=0; 
 } 
 
 //Here we check that $ok was not set to 0 by an error 
 if ($ok==0) 
 { 
 Echo "Sorry your file was not uploaded"; 
 } 
 
 //If everything is ok we try to upload it 
 else 
 { 
 if(move_uploaded_file($_FILES['uploaded']['tmp_name'], $target)) 
 { 
 echo "Your file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded."; 
 } 
 else 
 { 
 echo "Sorry, there was a problem uploading your file."; 
 } 
 } 
 ?>

Folks,

I am building a membership script for 21 months now!!! That long!!!
Anyway, I need members to say infront of their cams a few things and then upload the vid file to the site (from the confirm_id.php page) where the member's sponsor (recruiter) will get the video copy to check if it's the real person with the real personal details or not. If true details, then sponsor verifies the member account. Else, unverifies it.
Now, I been testing my code. I uploaded an mp4 file. That should be ok but I get echoed:
"There was a problem uploading your video file $file_name! Make sure your file is an MP4 or a WAV file. You may try again now." 
Why ?

Not pasting the whole script as really long. Would do your head in.
Only pasting relevant part:

if($_SERVER["REQUEST_METHOD"] == "POST") 
    { 
        if(!isset($_FILES["id_verification_video_file"]))  //REtype
        { 
            echo "no isset";
        }
        else 
        { 
            $id_verification_video_file = $_FILES['id_verification_video_file']; //REtype
            //Feed Id Video Verification File Upload Directory Path. 
            $directory_path = "uploads/videos/id_verifications/"; 
            //Make Directory under $user in 'uploads/videos/id_verifications' Folder. 
            if(!is_dir("$directory_path" . "$user")) 
            { 
                $mode = "0777"; 
                mkdir("$directory_path" . "$user", "$mode", TRUE); //Thanks Requinix for my "$mode" typo hint.
            } 
            
            //Grab Uploading File details. 
            $Errors = Array(); //SHOULD I KEEP THIS LINE OR NOT ?
            $file_name = $_FILES["id_verification_video_file"]["name"]; 
            $file_tmp = $_FILES["id_verification_video_file"]["tmp_name"]; 
            $file_type = $_FILES["id_verification_video_file"]["type"]; 
            $file_size = $_FILES["id_verification_video_file"]["size"]; 
            $file_error = $_FILES['id_verification_video_file']['error']; 
            
            //Grab File Extension details. 
            $file_extension = pathinfo($file_name, PATHINFO_EXTENSION); 
            if(file_exists('$directory_path' . '$user/' . '$file_name')) 
            { 
                $Errors[] = "Error: You have already uploaded a video file to verify your ID!"; 
                exit(); 
            } 
            else 
            { 
                //Feed allowed File Extension(s). 
                $allowed_file_extensions = array("mp4" => "video/mp4","wmv" => "video/wmv"); 
                //Feed allowed file size. 
                $max_file_size_allowed_in_bytes = 1024*1024*100; //Allowed limit: 100MB. 
                $max_file_size_allowed_in_kilobytes = 1024*100; 
                $max_file_size_allowed_in_megabytes = 100; 
                
                $max_file_size_allowed = "$max_file_size_allowed_in_bytes"; //RETYPE
                
                //Verify File Extension. 
                if(!array_key_exists($file_extension,$allowed_file_extensions)) die("Error: Select a valid video file format. Select an MP4 or WAV file."); 
                //Verify MIME Type of the file. 
                elseif(!in_array($file_type,$allowed_file_extensions)) 
                { 
                    echo "Error:<font size ='5' font color ='red'><b>There was a problem uploading your video file $file_name! Make sure your file is an MP4 or a WAV file. You may try again now.</b></color></size>"; //THANKS TO REQUINIX FOR BRINNGING IT TO MY ATTENTION I AM STILL PROCESSING THE SCRIPT AFTER THIS LINE WHEN I SHOULD NOT. 
                    exit(); 
                } 
                //Verify File Size. Allowed Max Limit: 100MB. 
                elseif($file_size>$max_file_size_allowed) die("Error: Your Video File Size is larger than the allowed limit of: $max_file_size_allowed_in_megabytes."); //Fixed variable name typo. Thanks to Requinix & Simon JM. 
                //Move uploaded File to newly created directory on the server. 
                move_uploaded_file("file_tmp","$directory_path" . "$user/" . "$file_name"); 
                //Notify user their File was uploaded successfully. 
                echo "<font size ='5' font color ='red'><b>Your Video File \"$file_name\" has been uploaded successfully! You will get notified once your Id has been verified successfully.</b></color></size>"; 
                

Can you spot my coding error ?
Any other errors ?
How-about you show me code sample how you'd do it better and simpler with as much less lines of codes as possible ?

hidden input field type doesnt display the full value i get from table, say if it is a first name and last name i get only the first name. here is my input field
echo "<input type=hidden name=proid value=$result_row[project_id]></include>";
echo "<input type=text value=$result_row[project_name] readonly></include>";

my sql query returns the full name but when i input into the text field it returns an incomplete project name like say if it is fans of soccer, i just get the value "fans" in my display.....

I have this code which uploads fine but I am trying to limit the type of files users can upload.  For some reason this code still let any file type to be uploaded being very new to php any help would be Appreciated.

Quote

Code: [Select]
<?php

if ((($_FILES["image"]["type"] == "image/gif")
|| ($_FILES["image"]["type"] == "image/jpeg")
|| ($_FILES["image"]["type"] == "image/pjpeg"))
&& ($_FILES["image"]["size"] < 20000))
  {
  if ($_FILES["image"]["error"] > 0)
    {
    echo "Error: " . $_FILES["file"]["error"] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES["image"]["name"] . "<br />";
    echo "Type: " . $_FILES["image"]["type"] . "<br />";
    echo "Size: " . ($_FILES["image"]["size"] / 1024) . " Kb<br />";
    echo "Stored in: " . $_FILES["image"]["tmp_name"];
    }
  }

 $target = "testimages/"; 
 $target = $target . basename( $_FILES['image']['name']); //

 
 $company=$_POST['company']; 
 $image=($_FILES['image']['name']);


 mysql_connect("localhost", "user", "pass") or die(mysql_error()) ; 
 mysql_select_db("testupload") or die(mysql_error()) ; 
 
 mysql_query("INSERT INTO `table` (company, image) VALUES ('$company', '$image')") ; 
 
 if(move_uploaded_file($_FILES['image']['tmp_name'], $target)) 
 { 
 
 
 echo "The file ". basename( $_FILES['uploadedfile']['name']). " has been uploaded, and your information has been added to the directory";
 } 
 else { 

 echo "Sorry, there was a problem uploading your file."; 
 } 
 
 ?>

Hi.

I want to create a list of files in a directory. But I don't want all the files to be listed, only .gif, .jpg and .bmp.

Does anyone know the PHP code how to do that? (My directory name is 'images' if you need that).

Thanks!

How to attach any file type to an email using php mail()
It should attach any file that you select.
What would be the Content-type: value?

Thanks!

I have a Windows-style ini file that contains entries as such:

 

[Timers]
Timer(1)=50
Timer(2)=30
Timer(3)=20

The entries represent an array  of 3 different timers

Apparently parse_ini_file can't deal with the () format. Is there any way to use this format ini file without having to change how arrays are designated?

Hey guys!
I'm making a locally run web based application for entering/storing/editing data.
I am trying to do this thing where I export a 'records.txt' file to a different location which can be selected by the user.
I have a lame <input type='text' value='H:\'> box going on which I was going to use to define the path for the file to be saved, but I want to be able to use a pop up windows (or whatever native OS finder application) just like the one which appears when you use <input type='file'>.

Now that I think about it, I think this is more of a html question, but it's 2.30am and my project is due today...
See! what the hell, I just habitually pressed ctrl-s after working in dreamweaver for hours and the exact function which I am looking for popped up, how do I do that?!

Please thanks guys

Hello,

Iv written a small script in JS to add input boxes of the type file to the page.. My problem is when i use multiple of those input boxes and submit the form the $_FILES variable only reads 1 of those boxes.. This is the javascript im using:
Code: [Select]
function addImageBox() {
var imageBoxes = document.getElementById("imageBoxes");
var tr = document.createElement("tr");
var td = document.createElement("td");
var td2 = document.createElement("td");
    var inputFile = document.createElement("input");
   
   
    inputFile.setAttribute("type", "file");
    inputFile.setAttribute("name", "image[]");
    inputFile.setAttribute("style", "width: 450px");

    td.appendChild(document.createTextNode("Image"));
    td2.appendChild(inputFile);
   
    tr.appendChild(td);
    tr.appendChild(td2);
   
    imageBoxes.appendChild(tr);
}

When i add 2 boxes (making it 3 boxes on the page in total) and count the $_FILES var after submiting the form, the count method returns 1, and when i var_dump it only 1 array is in $_FILES. Any idea's? thanks!

hi there,

i am fairly new to OOPs in php, i get an error when i declare the argument type (as object) in a function and pass the same type (object).



class eBlast {
       public static function getEmail(object $result) {
           return $result->email;
       }
}

$r = mysql_fetch_object($query);
eBlast::getEmail($r);

echo gettype($r); // outputs: object



error is :

Code: [Select]
Catchable fatal error: Argument 1 passed to eBlast::getEmail() must be an instance of object, instance of stdClass given, called in C:\wamp\www\integra\client\pl_eblast\admin\send_emails.php on line 145 and defined in C:\wamp\www\integra\client\pl_eblast\app\app.eBlast.php on line 8
if i remove the type declaration in the function it works, but just would like to know why it shows error when pass the same type, also isnt mysql_fetch_object is the instance of stdclass?

thanks in advance!

I'm having some trouble validating a file upload. I have it set to display a message if the file upload name already exists, but it is also displaying the same message when the field is left blank. I tried adding in a message to display when the field was blank, but it always displays the previous message, plus the new message, and on top of that, the error message about the file field being blank displays even if the user has uploaded a file. can anyone help??

Code: [Select]
<?php

$firstname = "";
$lastname = "";
$address = "";
$city = "";
$state = "";
$zip = "";
$phone = "";
$position = "";

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>KulaE_WDP4451_U2IP</title>
</head>

<body>

<form action="process_U2IP.php" method="post" enctype="multipart/form-data">
<h3>Please fill out the form below and upload your resume to apply for a position within our company:</h3>

<table>
<tr>
<td><label for="firstname"><b>First Name*</b></label></td>
<td><input name="firstname" type="text" size="20" id="firstname" value="<?php echo $lastname; ?>" /></td>
</tr>
<tr>
<td><label for="lastname"><b>Last Name*</b></label></td>
<td><input name="lastname" type="text" size="20" id="lastname" value="<?php echo $lastname; ?>" /></td>
</tr>
<tr>
<td><label for="address"><b>Address*</b></label></td>
<td><input name="address" type="text" size="20" id="address" value="<?php echo $address; ?>" /></td>
</tr>
<tr>
<td><label for="city"><b>City*</b></label></td>
<td><input name="city" type="text" size="20" id="city" value="<?php echo $city; ?>" /></td>
</tr>
<tr>
<td><label for="state"><b>State*</b></label></td>
<td><input name="state" type="text" size="20" id="state" value="<?php echo $state; ?>" /></td>
</tr>
<tr>
<td><label for="zip"><b>Zip*</b></label></td>
<td><input name="zip" type="text" size="20" id="zip" value="<?php echo $zip; ?>" /></td>
</tr>
<tr>
<td><label for="phone"><b>Phone*</b></label></td>
<td><input name="phone" type="text" size="20" id="phone" value="<?php echo $phone; ?>" /></td>
</tr>
<tr>
<td><label for="position"><b>Position*</b></label></td>
<td><input name="position" type="text" size="20" id="position" value="<?php echo $position; ?>" /></td>
</tr>
<tr>
 <td><b>Upload Resume*</b></td>
 <td><input type="file" name="file" id="file" /> </td>
 </tr>
 <tr>
 <td colspan="2"><p><i>Your information will not be sold or shared with others.</i></p></td>
 </tr>
 <tr>
 <td colspan="2"><p style="color: red;">* denotes required field</p></td>
 </tr>
 <tr>
 <td colspan="2" align="center"><input type="hidden" name="submitted" value="1" />

<input type="submit" value="Submit" />
<input type="reset" name="reset" value="Reset" /></td>
</tr>
</table>
</form>

</body>
</html>

Code: [Select]
<?php

if (@$_POST['submitted']){
    $firstname = (@$_POST['firstname']);
    $lastname = (@$_POST['lastname']);
    $address = (@$_POST['address']);
    $city = (@$_POST['city']);
    $state = (@$_POST['state']);
    $zip = (@$_POST['zip']);
    $phone = (@$_POST['phone']);
    $position = (@$_POST['position']);
    $file = (@$_POST['file']);
    
    if (get_magic_quotes_gpc()){
        $firstname = stripslashes($firstname);
        $lastname = stripslashes($lastname);
        $address = stripslashes($address);
        $city = stripslashes($city);
        $state = stripslashes($state);
        $zip = stripslashes($zip);
        $phone = stripslashes($phone);
        $position = stripslashes($position);
        
    }
    
    $error_msg=array();
    if ($firstname==""){
        $error_msg[]="Please enter your first name";
    }
    
    if(!preg_match("/^\b[a-zA-Z]+\b$/", $firstname)){
        $error_msg[]="First Name can only contain letters";
    }
    
    if ($lastname==""){
        $error_msg[]="Please enter your last name";
    }
    
    if(!preg_match("/^\b[a-zA-Z]+\b$/", $lastname)){
        $error_msg[]="Last Name can only contain letters";
    }
    
    if ($address==""){
        $error_msg[]="Please enter your address";
    }
    
    if(!preg_match('/^[a-z0-9 ]*$/i', $address)){
        $error_msg[]="Address can only contain numbers, letters and spaces";
    }
    
    
    if ($city==""){
        $error_msg[]="Please enter your city";
    }
    
    if (!preg_match("/^\b[a-zA-Z]+\b$/", $city)){
        $error_msg[]="City can only contain letters";
    }
    
    if ($state==""){
        $error_msg[]="Please enter your state";
    }
    
    if (strlen($state)<>2){
        $error_msg[]="State can only contain 2 letters; use state abbreviation";
    }
    
    if (!preg_match("/^\b[a-zA-Z]+\b$/", $state)){
        $error_msg[]="State can only contain letters";
    }
    
    if ($zip==""){
        $error_msg[]="Please enter your zip code";
    }
    
    if (strlen($zip)<>5){
        $error_msg[]="Zip code can only contain 5 digits";
    }
    
    if(!is_numeric($zip)){
        $error_msg[]="Zip code must contain only numbers";
    }
    
    if ($phone==""){
        $error_msg[]="Please enter your phone number";
    }
    
    if (strlen($phone)<>10){
        $error_msg[]="Phone number can only contain 10 digits";
    }
    
    if(!is_numeric($phone)){
        $error_msg[]="Phone number must contain only numbers";
    }
    
    if ($position==""){
        $error_msg[]="Please enter your desired position";
    }
    
    if(!preg_match('/^[a-z0-9 ]*$/i', $position)){
        $error_msg[]="Position can only contain numbers, letters and spaces";
    }
    
    if (file_exists("upload/" . $_FILES["file"]["name"]))
      {
      $error_msg[]= $_FILES["file"]["name"] . " already exists";
      }
      
      if ((($_FILES["file"]["type"] != "document/msword")
|| ($_FILES["file"]["type"] != "document/pdf"))
&& ($_FILES["file"]["size"] > 50000))
  {
      $error_msg[]= "Uploaded file can only be in MSWord or PDF format and can only be under 50KB in size";
    }
      
      
      

    }
    
    if ($error_msg){
        $display_errors =  "<h3>There were errors in your submission.</h3>
        <p>Please review the following errors, press the Back button on your browser, and make corrections before re-submitting.</p>
        <ul style=color:red>\n";
            foreach ($error_msg as $err){
                $display_errors .= "<li>".$err."</li>\n";
            }
        $display_errors .= "</ul>\n";
        
    }
    
    if (!$error_msg){
        echo  "
<h3>Thank you for applying! Applicants we are interested in interviewing will be contacted within 48 hours.</h3>

<p>You have submitted the following information:</p>

<table>
<tr>
<td><b>First Name:</b></td>
<td>$firstname</td>
</tr>
<tr>
<td><b>Last Name:</b></td>
<td>$lastname</td>
</tr>
<tr>
<td><b>Address:</b></td>
<td>$address</td>
</tr>
<tr>
<td><b>City:</b></td>
<td>$city</td>
</tr>
<tr>
<td><b>State:</b></td>
<td>$state</td>
</tr>
<tr>
<td><b>Zip Code:</b></td>
<td>$zip</td>
</tr>
<tr>
<td><b>Phone Number:</b></td>
<td>$phone</td>
</tr>
<tr>
<td><b>Position Desired:</b></td>
<td>$position</td>
</tr>";

move_uploaded_file($_FILES["file"]["tmp_name"],
      "upload/" . $_FILES["file"]["name"]);
      
      echo "<tr>
      <td><b>Uploaded File:</b></td>
      <td><a href=upload/" . $_FILES["file"]["name"] . ">" . $_FILES["file"]["name"] . "</a></td>
      </tr>
      </table>";
      
        exit();
    }
    
    echo $display_errors;
?>

I want half of the results to to show up with a hyperlink (if I've added the link as a field in my CSV file) and half of the results to show up with no hyperlink. The link URL's are located in field 8 of a database : [8] as seen below.

Could anyone help me to figure out how to add an "if" statement perhaps? Something like "if 8 true" then display "<a href"?

I did not write this php code I am only modifying it. The csv file is very very straightforward, but this PHP is beyond me. Would appreciate the help!

 <p><a href="<?=htmlspecialchars($r[8])?>"><?=htmlspecialchars($r[1])?></a><br />
        <?=htmlspecialchars($r[2])?><br />
        <?=htmlspecialchars($r[3])?><br />
        <?=htmlspecialchars($r[4])?><br />
        <?=htmlspecialchars($r[5])?><br />
        <a href="mailto:<?=htmlspecialchars($r[7])?>"><?=htmlspecialchars($r[7])?></a>
    </p>

Im not much of a coder, and I obviously did this wrong since it is not working. Im trying to bring a new field value in to an existing php file. I created a new table, and an admin page to control that field. I cant, however, figure out how to use that value in a different php file. Actually, there are 2 files. Each using a different field from that new table. I will post what my current code is below with the additions I tried to add. I bolded the lines that contain the tags Im trying to use. Any and help you can give in fixing this to make it work is greatly appreciated.

Code: [Select]
<?php

# INCLUDE ALL NECESSARY FILES.
include_once("Constants.php");
include_once("Database.php");
include_once("SiteSetting.php");

[b]$query = "SELECT arcade_multiplier FROM tbl_point_rewards";
mysql_query($query) or die("Invalid query". mysql_error() );
$result = mysql_fetch_array($result);
$arcade_multiplier = $result["arcade_multiplier"];[/b]

$dbObj = new database();

# SAVE ARCADE GAME POINTS INTO THE DATABASE
function saveGamePoints( $game_id, $user_id, $game_score, $calculate_score_flag, $play_date ){
global $dbObj;

$user_max_plays = getUserMaxPlaysLimit( $user_id, $game_id );
//$_SESSION["arcade_game"]["save_score"] = ($user_max_plays < $_SESSION["arcade_game"]["max_plays"]) ? "yes" : "no" ;

if($user_max_plays < $_SESSION["arcade_game"][$_SESSION["url_gameid"]]["max_plays"]){

$total_points = calculatePointRatio($game_id, $game_score);
//$total_points = $game_score;

$x_gameid = md5($game_id);
if($_SESSION["arcade_game"][$x_gameid]["play_time"] > 0){
$playTime['start'] = $_SESSION["arcade_game"][$x_gameid]["play_time"];
$playTime['end'] = time();
$playTime = ($playTime['end'] - $playTime['start']);
}
else
{
$playTime = 0;
}

# update total points into main score
[b] $update_sql = "update tbl_users set points_gained = (points_gained+(".ceil($total_points)." * $arcade_multiplier)) where usrid={$user_id}";[/b]
$rs = mysql_query($update_sql) or die("Invalid query: {$update_sql} - ". mysql_error());

$table  = "tbl_arcade_game_score";
$fields  = array("game_id", "user_id", "game_score", "calculate_score_flag", "play_date", "game_time");
$values  = array($game_id, $user_id, $game_score, $calculate_score_flag, $play_date, $playTime);

//  return $dbObj->cgi( $table, $fields, $values, 1 );

$insertid = $dbObj->cgi( $table, $fields, $values, "" );

$ceiling_point =  getCeiling($game_id);

if($game_score >= $ceiling_point)
{
$chk_authourity = isAlreadyTrophyOwner($user_id, $game_id);
//if($chk_authority < 1)
if($chk_authourity < 1)
{
# store award details into the database (tbl_trophy_award) 
//$trophy_id  = getTrophy( $game_id );
$trophy = getTrophyDetails($game_id);
$trophy_id = $trophy['ctoon_id'];
$tbl_fields = array('userid', 'game_id', 'award_date', 'trophy' );
$tbl_values = array($user_id, $game_id, $play_date,  $trophy_id );
$insert_tbl_trophy_award_id = $dbObj->cgi('tbl_trophy_award', $tbl_fields, $tbl_values , "" );

# award trophy to user (tbl_users_ctoons)
$table  = "tbl_users_ctoons";
$fl = array("usrid", "ctoon_id", "del_status", "ctoons_auction", "auction_id", "location", "batpts");
$vl = array($user_id, $trophy_id, '0', '', 0, 1, 0);
$dbObj->cgi($table, $fl, $vl , "" );

# send a pm to the user about the trophy
include_once("send_pm_message.php");
$game = getGameDetails($game_id);

$msgSub  = "Grats! You just got a trophy!";
$message = "Grats! You got the ".$trophy["toon_name"]." trophy for the  ".$game["game_name"]." game!<br>
<img src=\"{$game['path']}\">";

  //echo $message;
  //echo "<br><hr><br>";
sendMessage($user_id, 0, 0, $msgSub, $message, 1);
sendMessage(2034, $user_id, 0, $msgSub, $message, 1);

}
}

return $insertid;
}
}//end function

function getCeiling($game_id)
{
$sql = "SELECT ceiling FROM tbl_game WHERE game_id = '".$game_id."'"; 

$rs = mysql_query($sql);

$result = mysql_fetch_assoc($rs);

return $result['ceiling'];
}

function isAlreadyTrophyOwner($user_id, $game_id)
{
$sql  = "SELECT * FROM tbl_trophy_award WHERE game_id = {$game_id} and userid = {$user_id}"; 

$rs  = mysql_query($sql);
$num_rows  = 0;
$num_rows  = mysql_num_rows($rs);

if($num_rows > 0)
{
return $num_rows;
}
else
{
return $num_rows;
}
}

# calculate game ratio
function calculatePointRatio($game_id, $game_score){
//return $game_score;
$sql = "select gs.* from arcade_game_setting as gs where gs.game_id={$game_id}";
$rs = mysql_query($sql) or die( "Invalid query". mysql_error() );
if($rs){
$row = mysql_fetch_array($rs);
switch($row["calculation_type"]){

case "divide":
$x_score =  round($game_score / $row["r_no"]);
break;

case "multiply":
$x_score = round($game_score * $row["r_no"]);
break;

default :
$x_score = ceil($game_score);
break;

}//switch
$row["r_no"];
if($row["game_cap"] > 0){
if($x_score > $row["game_cap"]){
$x_score = $row["game_cap"];
}
}
return $x_score;
}//if
}// end function


# get user total plays 
function getUserMaxPlaysLimit($user_id, $game_id){
global $d_start_time, $d_end_time;
$sql = "select * from tbl_arcade_game_score where user_id={$user_id} and game_id={$game_id} and play_date between {$d_start_time} and {$d_end_time}";
$rs = mysql_query($sql) or die("Invalid query :". mysql_error() );
if($rs){
return mysql_num_rows($rs);

}//if
}

# get game details
function getGameDetails($game_id){
$sql = "select g.game_id, g.game_name, g.award_ctoonid, c.toon_name, c.toon_cat, c.toon_subcat, c.toon_small_img from tbl_game as g, tbl_ctoon as c where g.game_id = {$game_id} and g.award_ctoonid=c.ctoon_id";
$rs = mysql_query($sql);
if($rs){
$row = mysql_fetch_array($rs);

if($row['toon_cat']!="" && $row['toon_subcat']!=0)
$tpth="imgtoon/".$row['toon_cat']."/".$row['toon_subcat']."/thumb";
elseif($row['toon_cat']!="" && $row['toon_subcat']==0)
$tpth="imgtoon/".$row['toon_cat']."/thumb";

$game["game_name"]  = $row["game_name"];
$game["award_ctoon_id"]  = $row["award_ctoonid"];
$game["toon_name"] = $row["toon_name"];
$game["path"] = SITEROOT ."/" . $tpth ."/" . $row["toon_small_img"];


return $game;
}
else
{
return false;
}

}

# send pm message to winner
function sendPMToWinner($user_id, $game_id, $game_score){
include_once("send_pm_message.php");
$g = $game_id;
//$point_prize = calculatePointRatio($game_id, $game_score);
$point_prize = $game_score;
$game = getGameDetails($game_id);

//# select ctoon
//$sql = "select award_ctoonid from tbl_game where game_id=".$g;
//$rsctoon = mysql_query($sql) or die("Invalid query: {$sql} - ". mysql_error());
//$row_ctoon = mysql_fetch_array($rsctoon);
//$ctoon_id = $row_ctoon["award_ctoonid"];

//# award ctoon
//$insert_user_ctoon = "insert into tbl_users_ctoons (usrid, ctoon_id, del_status, ctoons_auction, auction_id, location, batpts)
//values('{$user_id}', '{$ctoon_id}', '0', '', '', '1', '0')";
//mysql_query($insert_user_ctoon) or die("Invalid insert query:".mysql_error() );

//# update points
$update_points_sql = "update tbl_users set points_gained = (points_gained+1500) where usrid={$user_id}";
mysql_query($update_points_sql) or die("Invalid updates points query". mysql_error() );


$dbObj  = new database();
$msgSub  = "Grats! You got a Top Score for ".$game["game_name"]." !";
$message = "Grats! You had one of the Top 10 scores in the ".$game["game_name"]." game last month, and got a 1500 point bonus!<br>";
//<img src=\"{$game['path']}\">";

//  echo $message;
//  echo "<br><hr><br>";
sendMessage($user_id, 0, 0, $msgSub, $message, 1);

}



/**
* function getTrophy( $game_id )
* @param $game_id
*/
function getTrophy( $game_id ){
$sql = "select award_ctoonid from tbl_game where game_id=".$game_id;
$rs = mysql_query( $sql ) or die( mysql_error() );
if( $rs ){
$row = mysql_fetch_assoc( $rs );
}

return $row["award_ctoonid"];

}

// Updated function from above
// Will get more information about the trophy
function getTrophyDetails($game_id)
{
$sql = "select b.ctoon_id,b.toon_name,b.toon_small_img from tbl_game as a,tbl_ctoon as b where a.game_id = '$game_id' and b.ctoon_id = a.award_ctoonid LIMIT 1";
$rs = mysql_query( $sql ) or die( mysql_error() );
if( $rs ){
$row = mysql_fetch_assoc( $rs );
}

return $row;
}

?>

Code: [Select]
<?php

include_once("Constants.php");
include_once("Database.php");
include_once("SiteSetting.php");

/**************************************************/
# SAVE DONETION IN DATABASE
# @param $uid
# @param $donation_amt
/**************************************************/
function saveDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type){

if($transaction_id != "")
        {
    $flag = checkExist($uid);
         
    if($flag > 0){
    updateDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type);
    }else{
    addDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type);
    }
        }

}
/**************************************************/


/**************************************************/
# CHECK IS RECORD EXITS IN DONETION TABLE
# @param $uid
/**************************************************/
function checkExist($uid){

$dbObj = new database();

$sql = "select user_id from tbl_donation where user_id={$uid}";
$dbObj->myquery($sql);

if($dbObj->row_count > 0){
return $dbObj->f_user_id;
}else{
return 0;
}
}
/**************************************************/



/**************************************************/
# INSERT DONETION RECORD IN tbl_donation
# @param $uid
# @param $donation_amt
/**************************************************/

[b]$query = "SELECT arcade_multiplier FROM tbl_point_rewards";
mysql_query($query) or die("Invalid query". mysql_error() );
$result = mysql_fetch_array($result);
$arcade_multiplier = $result["arcade_multiplier"];[/b]


function addDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type){

$dbObj = new database();

$months = floor($donation_amt / 5);
$exp_time = mktime(date("H"),date("i"),date("s"),date("m") + $months,date("d"),date("Y"));

$fields = array("transaction_id", "subscr_id", "user_id", "donation_amt", "donation_date", "exp_date", "donation_type", "transaction_details");
$values = array($transaction_id, $subscr_id, $uid, $donation_amt, time(), $exp_time, $type, serialize($_SESSION["recurring_td"]));

# update points
[b]$update_points_sql = "update tbl_users set points_gained = (points_gained+(($donation_amt / 5) * $donation_pts)) where usrid={$uid}";/[b]
mysql_query($update_points_sql) or die("Invalid updates points query". mysql_error() );


if($donation_amt < 5){
// The user donated less than $5

}else{
upgradeAccount($uid);
}

return $dbObj->cgi("tbl_donation", $fields, $values, false);
}
/**************************************************/


/**************************************************/
# UPDATE EXISTING DONETION RECORD
# @param $uid
# @param $donation_amt
/**************************************************/
function updateDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type){

if(strlen($subscr_id) > 0){
$cd = " AND subscr_id='".$subscr_id."'";
}
$sql_select = "select exp_date, donation_amt from tbl_donation where user_id=".$uid;
//$sql_select = "select exp_date, donation_amt from tbl_donation where user_id=".$uid." and donation_type like '%recurring%'";
$rs_select  = mysql_query($sql_select) or die("Invalid query".mysql_error());
if($rs_select){
$row  = mysql_fetch_array($rs_select);
$expdt  = $row["exp_date"];
$damt  = ($row["donation_amt"] + $donation_amt);
$months = floor($donation_amt / 5);
$exp_time = mktime(23, 59, 59, date("m",$row["exp_date"]) + $months, date("d", $row["exp_date"]), date("Y", $row["exp_date"]));
}

$dbObj = new database();
$sql = "update tbl_donation set 
transaction_id='".$transaction_id."', 
donation_amt=(donation_amt + {$donation_amt}), 
donation_date = ".time().", 
exp_date=".$exp_time.", 
donation_type='".$type."', 
transaction_details='".serialize($_SESSION["recurring_td"])."' 
where user_id={$uid}";

# update points
[b]$update_points_sql = "update tbl_users set points_gained = (points_gained+(($donation_amt / 5) * $donation_pts)) where usrid={$uid}";[/b]
mysql_query($update_points_sql) or die("Invalid updates points query". mysql_error() );

$dbObj->myquery($sql, 1);

if($donation_amt < 5){
// The user donated less than $5

}else{
upgradeAccount($uid);
}

}
/**************************************************/




/**************************************************/
# UPDATE EXISTING RECURRING DONETION RECORD
# @param $uid
# @param $donation_amt
/**************************************************/
function updateRecurringDonetion($subscr_id, $transaction_amt){

$sql_subscr = "select donation_id, transaction_id, user_id from tbl_donation where subscr_id = '".$subscr_id."'";
$rs_subscr  = mysql_query($sql_subscr) or die("Invalid query".mysql_error());
if(strlen($rs_subscr) > 0){
$row_subscr = mysql_fetch_assoc($rs_subscr);
$uid = $row_subscr["user_id"];
$donation_amt = $transaction_amt;
$transaction_id = $row_subscr["transaction_id"];
$subscr_id = $subscr_id;
$type = "Recurring";
updateDonetion($uid, $donation_amt, $transaction_id, $subscr_id='', $type);
}
}
/**************************************************/






/**************************************************/
# UPDATE USER STATUS FROM STANDERED TO PREMIUM
# @param $uid
/**************************************************/
function upgradeAccount($uid){

$dbObj = new database();

$sql = "UPDATE tbl_users SET acc_type = 'P' WHERE usrid={$uid} LIMIT 1 ";

# update points
$update_points_sql = "update tbl_users set points_gained = (points_gained+0) where usrid={$uid}";
mysql_query($update_points_sql) or die("Invalid updates points query". mysql_error() );

$dbObj->myquery($sql, 1);

}//function upgradeDonation($uid)

?>