PHP - Moved: Code Breaking On Refresh

onlinegamekey. com/MTGT-Auction.php is the page I'm working on.

The problem I'm having is cards with an apostrophe in the name breaks the operation.

I am populating the Select Box with the Card Names and those are coming in fine, its not until I try to use the select value to get that specific card data do I have an issue.
This query specifically
Code: [Select]
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name ='$cards' Order By Price_Per") or die;
I've tried
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name =" . htmlspecialchars($cards) . " Order By Price_Per") or die;
but then I get no data for any card.

Here is the page code I'm working with.

Code: [Select]
<?php
$cards = $_POST['cards'];
//SELECTING DATA FOR THE DROPDOWN
$sql = "Select Card_Name From auctions Group BY Card_Name ASC" or die;
$result = mysql_query($sql);
?>
<script type="text/javascript">
<!--
var optList;
var optsValue = new Array();
var optsText = new Array();
//when the page loads get the original options values and text and store them in arrays
window.onload = function() {
optList = document.getElementsByTagName("option");
for(var i=0; i<optList.length; i++) {
     optsValue[i] = optList[i].value;
     optsText[i] = optList[i].text.toLowerCase();   
}   
}
function searchSel(txtSearch) {
//clear all the current options
document.getElementById("items").options.length = 0;
var count = 0;
for(var i=0; i < optsValue.length; i=i+1) {
    if(optsText[i].indexOf(txtSearch.toLowerCase()) == 0) {  //match found
         //add this option to the select list options
         var newOpt = new Option(optsValue[i],optsText[i],false,false);
         document.getElementById("items").options[count] = newOpt;
         count = count+1;
    }
    }
}
function reload(form)
{
var f1 = document.forms['f1']
var val=f1.cards.options[f1.cards.options.selectedIndex].value;
self.location='MTGT-Auction.php?card=' + val ;
}
//-->
</script>
<style type="text/css">
body {
background-color:#000000;
}
.row-one {
    background-color: #666666;
    font-family: Arial, Helvetica, sans-serif;
font-size:12px;
font-weight: bold;
    line-height: 17px;
    color:#CCFF33;
}
.row-two {
    background-color: #333333;
    font-family: Arial, Helvetica, sans-serif;
font-size:12px;
font-weight: bold;
    line-height: 17px;
    color: #FF0;
}
.th {
background-color:#000000;
font-family:Arial, Helvetica, sans-serif;
font-size:14px;
font-weight:bold;
color:#CC0000;
padding: 2;
}
</style>
<!-- CREATE FORM & SELECT BOX -->
<form method="post" name="f1" action="MTGT-Auction.php">
    <select name="cards" id="items">
    <option value='0'>Select...</option>
    <?php while ($row=mysql_fetch_array($result)) {
if ($row['Card_Name']==@$cards) {
echo "<option selected value='$row[Card_Name]'>$row[Card_Name]</option>";
} else {
echo "<option value='$row[Card_Name]'>$row[Card_Name]</option>";
}
}
 ?>
    </select>
    <br />
     <input type="text" id="txt" value="Card Name?" onfocus="this.value==this.defaultValue?this.value='' :null" onkeyup="searchSel(this.value);" style="color:#000000; font:Arial; font-size:12px; background-color:#e1e1e1;" />
     <BR />
<input type="submit" value="Submit" name="submit" />
                        <input type=button onClick="location.href='MTGT-Auction.php'" value='Reset' />
            </form>
            <!-- CREATE TABLE WHERE DATA GOES -->
<table border="1" bordercolor="#000000">
<tr align="center">
<th class="th">Auction ID</th>
<th class="th">Card Name</th>
<th class="th">Cards Per Auction</th>
<th class="th">Auction Price</th>
<th class="th">Cost Per Card</th>
<th class="th">Date Listed</th>
<th class="th">Seller Name</th>
</tr>
<?php
//GET DATA FOR TABLE BASED ON SELECTED CARD & LOOP THROUGH
$quer2=mysql_query("SELECT * FROM auctions WHERE Card_Name ='$cards' Order By Price_Per") or die;
$i =1;
WHILE($row = mysql_fetch_array($quer2)) { 
if ($i%2 !=0)
$rowColor = "class='row-one'";
else
$rowColor = "class='row-two'";
echo "<tr $rowColor>" . "<td>" . $row[Auction_ID] . "</td><td>" . $row[Card_Name] . "</td><td>" . $row[Qty_Listed] . "</td><td>" . $row[Price] . "</td><td>" . $row[Price_Per] . "</td><td>" . $row[Date] . "</td><td>" . $row[Seller] . "</td></tr>";
$i++;
}
//}
?>
<?php
//QUICK CHECK IS OUR VARIABLE SET???
echo "<font color=\"#FFFFFF\">". $cards . "</font>";
?>
</table>
I image this is probably a very common problem & easy fix that has been answered many times, but I haven't found any thing that worked for me so any help.. or links to similar issues would really be appreciated.

Thank you,

This topic has been moved to JavaScript Help.

http://www.phpfreaks.com/forums/index.php?topic=306168.0

This topic has been moved to Ajax Help.

http://www.phpfreaks.com/forums/index.php?topic=329003.0

I've been doing some searching, but I can't figure this out, as I don't know enough about JS.   I have found a tutorial that does this

<HTML>
<HEAD>
<TITLE>Crunchify - Refresh Div without Reloading Page</TITLE>
 
<style type="text/css">
body {
    background-image:
        url('http://cdn3.crunchify.com/wp-content/uploads/2013/03/Crunchify.bg_.300.png');
}
</style>
<script type="text/javascript"
    src="http://code.jquery.com/jquery-1.10.1.min.js"></script>
<script>
    $(document).ready(
            function() {
                setInterval(function() {
                    var randomnumber = Math.floor(Math.random() * 100);
                    $('#show').text(
                            'I am getting refreshed every 3 seconds..! Random Number ==> '
                                    + randomnumber);
                }, 3000);
            });
</script>
 
</HEAD>
<BODY>
    <br>
    <br>
    <div id="show" align="center"></div>
 
    <div align="center">
        <p>
            by <a href="http://crunchify.com">Crunchify.com</a>
        </p>
    </div>
</BODY>
</HTML>

But I don't know what exactly I can remove, what needs to stay (as far as the js), and where exactly I insert my ad code that is in a <script> tag of its own... but that also has a <noscript> tag as a fallback. While I understand I need to change the refresh from 3 secs, can someone help me take out the example JS code, and tell me where I would put my JS ad code? And do I simply remove the <script tags from my ad code, when inserting it into an area that is already between <script> tags?   Any help on this would be appreciated, thanks!

This topic has been moved to Ajax Help.

http://www.phpfreaks.com/forums/index.php?topic=349338.0

The issue is that if you f5 once attacking another player you can attack them again without any error message... Below is the code, is there a way to prevent the refresh from making the attack happen again?
<?php

$sql = "SELECT * FROM messages WHERE to_username = '$defender_info[username]' AND from_username = '$playerdata[username]' AND type = 'Combat' ORDER BY id DESC LIMIT 1";
$que = mysql_query($sql) or die(mysql_error());
$res = mysql_fetch_array($que);

$now = time();
$lastattack = strtotime($res['timestamp']);
$timesince = $now - $lastattack;

$nextatk = round((10800 - $timesince) / 60);

if($timesince < 10800){
    echo "You can only attack the same player once every 3 hours.<br><br> You can attack this player again in $nextatk minutes.";
}

else{

$sql = "SELECT hits FROM users WHERE id = $playerID";
$que = mysql_query($sql) or die(mysql_error());
$res = mysql_fetch_array($que);

$hits = $res['hits'];
if($hits < 1){
        echo "You have no available hits. New hit allowances are granted every ten minutes on the :05's";
    }
    else{
?>

This topic has been moved to Ajax Help.

http://www.phpfreaks.com/forums/index.php?topic=314750.0

I have a strange problem. When a guest visits my contact-user.php page, they get a message telling them the must login before viewing the page.

After the guest logs in, they view the same page and it tells them they have to login again (keeps on looping). But if they manually refresh that page with the "you must be logged in" message, it recognizes the login and lets them in.

How can I get this page to immediately recognize that the user is logged in and not require them to refresh the page manually?

Here is my code for contact-user.php

<?php 
session_start();
header("Cache-Control: private, max-age=10800, pre-check=10800");
header("Pragma: private");
header("Expires: " . date(DATE_RFC822,strtotime("+2 day")));
include("connection.php"); 
mysql_select_db("database");


if (isset($_SESSION['username'])) { 
********    MY HTML PAGE CONTENT     ********
 }


else {
echo "<meta http-equiv='REFRESH' content='2;url=http://www.mysite.com/login.php'>
<center><font color='#EE0000'><p>You must be logged in before negotiating. You will now be redirect to the login page.</p></font></center>";
}
?>



Here is my code for login.php script:

<?php
include("connection.php"); 
mysql_select_db("database");
session_start();
if(isset($_POST['login'])){
       $username = mysql_real_escape_string($_POST['username']);
       $password = mysql_real_escape_string($_POST['password']);
   $tUnixTime = time();
       $sGMTMySqlString = gmdate("Y-m-d H:i:s", $tUnixTime);
       if (!$username || !$password) {
          print "Please fill out all fields.";
          exit;
       }
       $logres = mysql_num_rows(mysql_query("SELECT * FROM members WHERE username = '$username' and password = '$password'"));
       if ($logres <= 0) {
          print "Login failed. If you have not already, please signup. Otherwise, check your spelling and login again.";
          exit;
       } 
       else {
       $_SESSION['username'] = $username;
       if (isset($_SESSION)) {
         echo'You are now logging in'; mysql_query("UPDATE members SET activity = '$sGMTMySqlString' WHERE username = '$username'");
       }
       else {
         echo "You are not logged in!";
       }  
       echo'<html><head><meta http-equiv="REFRESH" content="1;url=http://www.mysite.com/members/' . $_SESSION['username'] . '/"></head><body></body></html>';
       exit;
       }
}
?>

Hi all,

Thanks for reading.

I'm running a script using jQuery that auto-refreshes a <div> on the index page from an external PHP script to get all the rows in a database and display them on the index page. The script works great - here it is as follows:

Code: [Select]
<script type="text/javascript">

$(document).ready(function() {

$("#responsecontainer").fadeOut("fast").load("getrows.php").fadeIn("slow");

var refreshId = setInterval(function() {
$("#responsecontainer").fadeOut("fast").load('getrows.php').fadeIn("slow");
}, 5000);

$.ajaxSetup({ cache: false });

});

</script>

The getrows.php script I'm working with looks like this:

Code: [Select]
<?php 

$rowsQuery = mysql_query("SELECT * FROM Happenings WHERE HappeningDate='$today'");

if (mysql_num_rows($rowsQuery) == 0) {
$happeningsToday = "There are no happenings today.";
} else {

$allHappeningsToday = 1;

while ($getHappeningsToday = mysql_fetch_array($rowsQuery)) {

$happeningName = stripslashes($getHappeningsToday['HappeningName']);
$happeningDate = $getHappeningsToday['HappeningDate'];
$happeningDescription = $getHappeningsToday['HappeningDescription'];

if ($allHappeningsToday == 1) {

$happeningsToday .= "
<div class=\"box\">
<p>".$happeningName." | ".$happeningDate." | ".$happeningDescription."
</div>";

$allHappeningsToday = 2; 

} else { 

$happeningsToday .= "
<div class=\"box\">
<p>".$happeningName." | ".$happeningDate." | ".$happeningDescription."
</div>";

$allHappeningsToday = 1; 

}

}

}

echo $happeningsToday;

?>

This script works great as well.

Currently, the auto-refresh jQuery script as you can see if getting and fading in/out all of the rows.

Off of the above getrows.php script, is there a way after I could get only the newly created rows since the last refresh and only fade those in and out while leaving the others already loaded by the auto-refresh script to not fade in/out?

Any ideas, thoughts or suggestions would be unbelievably helpful.

Thank you very much.

"BACK" or REFRESH: Preventing database interaction / code execution
how to prevent database interaction / code execution when user presses back or refresh button?
can i detect?
can i disable back/refresh?

This topic has been moved to Third Party PHP Scripts.

http://www.phpfreaks.com/forums/index.php?topic=349890.0

This topic has been moved to HTML Help.

http://www.phpfreaks.com/forums/index.php?topic=352862.0

This topic has been moved to PHP Applications.

http://www.phpfreaks.com/forums/index.php?topic=351710.0

This topic has been moved to Other Libraries and Frameworks.

http://www.phpfreaks.com/forums/index.php?topic=334386.0

This topic has been moved to Beta Test Your Stuff!.

http://www.phpfreaks.com/forums/index.php?topic=309601.0