peterisgb

well i dont have alot of cash left in my bugdet, for for what i have i want to secure one page at a time untill they all get done, my budget is tight, i got the users but they need protecting.

Which page is the least secured from hackers and admin hacks and that, (not forums in my case) and how much would it cost to secure that one file?

well i edited to fit the game, but didnt work grr

$used=array(); $q=mysql_query("SELECT * FROM inventory WHERE inv_userid=$userid"); while ( $r=mysql_fetch_array($q) ) { if ( ! in_array ( $r['inv_id'], $used ) ) { $currdel=array(); $used[] =$r['inv_id']; $currdel[]=$r['inv_id']; $amount=$r['inv_qty']; $q2=mysql_query("SELECT * FROM inventory WHERE inv_userid=$userid AND inv_itemid = {$r['inv_itemid']} AND inv_id != {$r['inv_id']}"); while ( $r2 = mysql_fetch_array($q2) ) { $used[]=$r2['inv_id']; $currdel[]=$r2['inv_id']; $amount+=$r2['inv_qty']; } mysql_query("DELETE FROM inventory WHERE inv_id IN(".implode(",",$currdel).")"); mysql_query("INSERT INTO inventory VALUES('', {$r['inv_itemid']}, $userid, $amount)"); } } this might help aswell,

i tried that djkanna, i get an error when i do that

only thing i would suggest is go into your phpmyadmin (if thats what your using) and change all your stats in BIGINT 55 this is what i did to overcome the limits.

give this a try.   <?php require "global_func.php"; require "header.php"; $h = new headers; $h->startheaders(); include "mysql.php"; global $c; $is=mysql_query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",$c) or die(mysql_error()); $ir=mysql_fetch_array($is); check_level(); $fm=money_formatter($ir['money']); $lv=date('F j, Y, g:i a',$ir['laston']); $h->userdata($ir,$lv,$fm); $h->menuarea(); $m=mysql_query("SELECT FROM users WHERE userid={$ir['married']}"); $par=mysql_fetch_row($m); if($ir['married'] == 0) { die("You are not married, come back when you have a partner"); } $_GET['action'] = (isset($_GET['action']) && is_string($_GET['action'])) ? stripslashes(trim($_GET['action'])) : FALSE; switch($_GET['action']) { case 'givemoney': give_money_form(); break; case 'givemoneysub': give_money_submit(); break; case 'givecrystals': give_crystals_form(); break; case 'givecrystalssub': give_crystals_submit(); break; case 'givebank': give_bank_form(); break; case 'givebanksub': give_bank_submit(); break; case 'givebankcrystals': give_bankcrystals_form(); break; case 'givebankcrystalssub': give_bankcrystals_submit(); break; case 'takemoney': take_money_form(); break; case 'takemoneysub': take_money_submit(); break; case 'takecrystals': take_crystals_form(); break; case 'takecrystalssub': take_crystals_submit(); break; case 'takebank': take_bank_form(); break; case 'takebanksub': take_bank_submit(); break; case 'takecbank': take_cbank_form(); break; case 'takecbanksub': take_cbank_submit(); break; case 'sleep': sleep_form(); break; case 'sleepsub': sleep_submit(); break; case 'divorce': divorce(); break; case 'allowence': allowence_form(); break; default: index(); break; } function give_money_form() { global $db,$ir,$c,$h,$userid,$par; print "<h3>Giving Money</h3> This action will give your money to your partner You currently have <b>\${$ir['money']}</b> that you could send. <form action='partner.php?action=givemoneysub' method='post'> Money: <input type='text' name='money' value='0'> <input type='submit' value='Give Money' /></form>"; } function give_money_submit() { global $db,$ir,$c,$h,$userid,$par; if ($ir['money'] < $_POST['money']) { die("You are trying to give more money than you can <a href='partner.php'?action=givemoney>Back</a>"); } else { mysql_query("UPDATE users SET money=money+".abs(floatval($_POST['money']))." WHERE userid={$par['userid']}"); mysql_query("UPDATE users SET money=money-".abs(floatval($_POST['money']))." WHERE userid=$userid"); event_add($par['userid'],"You partner has just given you \${$_POST['money']}",$c); print"You gave \${$_POST['money']} to your partner"; } } function give_crystals_form() { global $db,$ir,$c,$h,$userid,$par; print "<h3>Giving crystals</h3> This action will give your crystals to your partner You currently have <b>{$ir['crystals']}</b> crystals that you could send. <form action='partner.php?action=givecrystalssub' method='post'> Crystals: <input type='text' name='crystals' value='0'> <input type='submit' value='Give crystals' /></form>"; } function give_crystals_submit() { global $db,$ir,$c,$h,$userid,$par; if ($ir['crystals'] < $_POST['crystals']) { die("You are trying to give more crystals than you can. <a href='partner.php'?action=givecrystals>Back</a>"); } else { mysql_query("UPDATE users SET crystals=crystals+".abs(floatval($_POST['crystals']))." WHERE userid={$par['userid']}"); mysql_query("UPDATE users SET crystals=crystals-".abs(floatval($_POST['crystals']))." WHERE userid=$userid"); event_add($par['userid'],"You partner has just given you {$_POST['crystals']} crystals",$c); print"You gave {$_POST['crystals']} crystals to your partner"; } } function give_bank_form() { global $db,$ir,$c,$h,$userid,$par; if ($ir['bankmoney'] < 0) { die("You dont have a bank account"); } if ($par['bankmoney'] < 0) { die("Your partner doesnt have a bank account"); } else { print "<h3>Giving Bank Money</h3> This action will give bank money to your partner You currently have <b>\${$ir['bankmoney']}</b> that you could send. <form action='partner.php?action=givebanksub' method='post'> Bank Money: <input type='text' name='bankmoney' value='0'> <input type='submit' value='Give Bank Money' /></form>"; } } function give_bank_submit() { global $db,$ir,$c,$h,$userid,$par; if ($ir['bankmoney'] < $_POST['bankmoney']) { die("You are trying to give more bank money than you can <a href='partner.php'?action=givecrystals>Back</a>"); } else { mysql_query("UPDATE users SET bankmoney=bankmoney+".abs(floatval($_POST['bankmoney']))." WHERE userid={$par['userid']}"); mysql_query("UPDATE users SET bankmoney=bankmoney-".abs(floatval($_POST['bankmoney']))." WHERE userid=$userid"); event_add($par['userid'],"You partner has just wired you \${$_POST['bankmoney']} into your bank account",$c); print"You wired \${$_POST['bankmoney']} to your partner"; } } function give_bankcrystals_form() { global $db,$ir,$c,$h,$userid,$par; print "<h3>Giving Bank crystals</h3> This action will give your bank crystals to your partner You currently have <b>{$ir['bankcrystals']}</b> bank crystals that you could send. <form action='partner.php?action=givebankcrystalssub' method='post'> Bank Crystals: <input type='text' name='bankcrystals' value='0'> <input type='submit' value='Give Bank Crystals' /></form>"; } function give_bankcrystals_submit() { global $db,$ir,$c,$h,$userid,$par; if ($ir['bankcrystals'] < $_POST['bankcrystals']) { die("You are trying to give more bank crystals than you can. <a href='partner.php'?action=givebankcrystals>Back</a>"); } else { mysql_query("UPDATE users SET bankcrystal=bankcrystal+".abs(floatval($_POST['bankcrystals']))." WHERE userid={$par['userid']}"); mysql_query("UPDATE users SET bankcrystal=bankcrystal-".abs(floatval($_POST['bankcrystals']))." WHERE userid=$userid"); event_add($par['userid'],"You partner has just given you {$_POST['bankcrystals']} crystals",$c); print"You gave {$_POST['bankcrystals']} crystals to your partner"; } } function take_money_form() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their money."); } else { print "<h3>Take Money</h3> This action will take money from your partner Your partner has \${$par['money']}. <form action='partner.php?action=takemoneysub' method='post'> Money: <input type='text' name='money' value='{$par['money']}'> <input type='submit' value='Take Money' /></form>"; } } function take_money_submit() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their money."); } if ($par['money'] < $_POST['money']) { die("You are trying to take more money than you can. <a href='partner.php'?action=takemoney>Back</a>"); } else { mysql_query("UPDATE users SET money=money+".abs(floatval($_POST['money']))." WHERE userid=$userid"); mysql_query("UPDATE users SET money=money-".abs(floatval($_POST['money']))." WHERE userid={$par['userid']}"); event_add($par['userid'],"Your partner has just taken \${$_POST['money']} from your hand money",$c); print"You took \${$_POST['money']} from your partner"; } } function take_crystals_form() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their crystals"); } else { print "<h3>Take Crystals</h3> This action will take crystals from your partner Your partner has {$par['crystals']} crystals. <form action='partner.php?action=takecrystalssub' method='post'> Crystals: <input type='text' name='crystals' value='{$par['crystals']}'> <input type='submit' value='Take Crystals' /></form>"; } } function take_crystals_submit() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their crystals."); } if ($par['crystals'] < $_POST['crystals']) { die("You are trying to take more crystals than you can. <a href='partner.php'?action=takecrystals>Back</a>"); } else { mysql_query("UPDATE users SET crystals=crystals+".abs(floatval($_POST['crystals']))." WHERE userid=$userid"); mysql_query("UPDATE users SET crystals=crystals-".abs(floatval($_POST['crystals']))." WHERE userid={$par['userid']}"); event_add($par['userid'],"Your partner has just taken {$_POST['crystals']} crystals from you",$c); print"You took {$_POST['crystals']} crystals from your partner"; } } function take_bank_form() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their finacial bank money."); } if ($ir['bankmoney'] < 0) { die("You dont have a bank account"); } if ($par['bankmoney'] < 0) { die("Your partner dose not have a bank account"); } else { print "<h3>Take Bank Money</h3> This action will take bank money from your partner Your partner has \${$par['bankmoney']}. <form action='partner.php?action=takebanksub' method='post'> Bank Money: <input type='text' name='bank' value='{$par['bankmoney']}'> <input type='submit' value='Take Bank Money' /></form>"; } } function take_bank_submit() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their bank money."); } if ($par['bankmoney'] < $_POST['bankmoney']) { die("You are trying to take more bank money than you can <a href='partner.php'?action=takebank>Back</a>"); } else { mysql_query("UPDATE users SET bankmoney=bankmoney+".abs(floatval($_POST['bankmoney']))." WHERE userid=$userid"); mysql_query("UPDATE users SET bankmoney=bankmoney-".abs(floatval($_POST['bankmoney']))." WHERE userid={$par['userid']}"); event_add($par['userid'],"Your partner has just taken \${$_POST['bank']} from your bank account",$c); print"You took \${$_POST['bank']} from your partner"; } } function take_cbank_form() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their bank crystals."); } if ($ir['bankcrystals'] < 0) { die("You dont have a crystal bank account"); } if ($par['bankcrystals'] < 0) { die("Your partner doesnt have a crystal bank account."); } else { print "<h3>Take Bank Crystals</h3> This action will take bank money from your partner Your partner has {$par['bankcrystals']} bank crystals. <form action='partner.php?action=takebanksub' method='post'> Bank Crystals: <input type='text' name='cbank' value='{$par['bankcrystals']}'> <input type='submit' value='Take Bank Money' /></form>"; } } function take_cbank_submit() { global $db,$ir,$c,$h,$userid,$par; if ($par['allowence'] == 0) { die("Your partner hasnt allowed your to access their bank crystals."); } if ($par['bankcrystals'] < $_POST['cbank']) { die("You are trying to take more bank money than you can <a href='partner.php'?action=takecbank>Back</a>"); } else { mysql_query("UPDATE users SET bankcrystals=bankcrystals+".abs(floatval($_POST['bankcrystals']))." WHERE userid=$userid"); mysql_query("UPDATE users SET bankcrystals=bankcrystals-".abs(floatval($_POST['bankcrystals']))." WHERE userid={$par['userid']}"); event_add($par['userid'],"Your partner has just taken {$_POST['bankcrystals']} crystals from your bank account",$c); print"You took {$_POST['bankcrystals']} bank crystals from your partner"; } } function sleep_form() { global $db,$ir,$c,$h,$userid,$par; if($ir['tired'] == 1) { die("You are too tired to sleep with your partner again"); } print "<h3>Sleep with your Partner?</h3> <form action='partner.php?action=sleepsub' method='post'> <input type='submit' value='Sleep With {$par['username']}' /></form>"; } function sleep_submit() { global $db,$ir,$c,$h,$userid,$par; if($ir['tired'] == 1) { die("You are too tired to sleep with your partner again"); } if (!$_POST['msg']) { mysql_query("UPDATE users SET happiness=happiness+1 WHERE userid=$userid"); mysql_query("UPDATE users SET tired=1 WHERE userid=$userid"); event_add($par['userid'],"Your partner has just slept with you. Please take a pregnancy test.",$c); print"You slept with your partner and gained 1 happiness!"; } } function divorce() { global $ir, $mr, $c, $userid, $h; mysql_query("UPDATE users SET married=0 WHERE userid IN($userid, {$ir['married']})", $c); event_add($ir['married'],"{$ir['username']} divorced you... Your now single...",$c); print "You divorced your partner and went back to being single. > <a href='index.php'>Back</a>"; } function allowence_form() { global $db,$ir,$c,$h,$userid,$par; print "<h3>C</h3> This action will decide wether you want to allow your partner to take money, crystals, bank money, bank crystals, etc or not... [<a href='partner.php'?action=allowence&allow=yes>Allo w</a>] [<a href='partner.php'?action=allowence&allow=no>Do Not Allow</a>] "; if($_GET['allow'] == yes) { mysql_query("UPDATE users SET allowence=1 WHERE userid=$userid"); print" Now your partner is allowed to access your finance"; } else if($_GET['allow'] == no) { mysql_query("UPDATE users SET allowence=0 WHERE userid=$userid"); print" Now your partner isnt allowed to access your finance"; } } function index() { global $db,$ir,$c,$h,$userid,$par; print " <h3><center>Information</h3> <center><table width=60% cellspacing=1 class='table' border='1' bordercolor='#636363'></center> <tr> <th><font color=gold>Theirs</th> <th><font color=gold>Yours</th> </tr> <tr> <td><center>Money: \${$par['money']}</td> <td><center>Money: \${$ir['money']}</td> </tr> <td><center>Crystals: {$par['crystals']}</td> <td><center>Crystals: {$ir['crystals']}</td> </tr> <tr> <td><center>Banked Money: \${$par['bankmoney']}</td> <td><center>Banked Money: \${$ir['bankmoney']}</td> </tr> <tr> <td><center>Banked Crystals: {$par['bankcrystals']}</td> <td><center>Banked Crystals: {$ir['bankcrystals']}</td> </tr> </table> <h3><center>Partner Managment</h3> <center><table width=60% cellspacing=1 class='table' border='1' bordercolor='#636363'></center> <tr> <td><a href='partner.php'?action=givemoney><center>Send Money</a></td> <td><a href='partner.php'?action=takemoney><center>Take Money</a></td> </tr><tr> <td><a href='partner.php'?action=givebank><center>Send Bank Money</a></td> <td><a href='partner.php'?action=takebank><center>Take Bank Money</a></td> </tr><tr> <td><a href='partner.php'?action=givecrystals><center>Sen d Crystals</a></td> <td><a href='partner.php'?action=takecrystals><center>Tak e Crystals</a></td> </tr><tr> <td><a href='partner.php'?action=givebankcrystals><center >Send Bank Crystals</a></td> <td><a href='partner.php'?action=takecbank><center>Take Bank Crystals</a></td> </tr><tr> <td><a href='partner.php'?action=sleep'><center>Sleep With {$par['username']}</td> <td><a href='partner.php'?action=allowence><center>Marria ge Allowence!</a></td> </tr><tr> <td colspan='2'><a href='partner.php'?action=divorce><center>Divorce</a></td></tr></table> <h3><center>Marriage Stats</h3> <center><table width=60% cellspacing=1 class='table' border='1' bordercolor='#636363'></center> <tr> <td><center>Your Happiness: {$ir['happiness']}</td> <td><center>Their Happiness: {$par['happiness']}</td></tr></table>"; } $h->endpage();

i done it now, thanks anyway

well not for me, this is my whole page   <style type="text/css"> <!-- body { font-family:arial;font-size:12px;color: red; scrollbar-base-color: #005B70; scrollbar-arrow-color: #F3960B; scrollbar-DarkShadow-Color: #000000; } a:visited,a:active,a:hover,a:link { color: white;text-decoration: none; } table,tr,td { font-family:arial;font-size: 12px; } img { border:none; } textarea { font-family:arial;font-size:12px;color: black; } a#button1a { display: block; width: 170px; height: 16px; background-image: url(menu.jpg); background-position: 0 0; margin: 0 auto; } a#button1a:hover { background-image: url(menu3.jpg); background-position: 0 -37px; } a .alt { display: none; } a#button1b { display: block; width: 170px; height: 30px; background-image: url(menu3.jpg); background-position: 0 0; margin: 0 auto; } a#button1b:hover { background-image: url(menu3.jpg); background-position: 0 -37px; } a .alt { display: none; } --> </style> <?php session_start(); if (!isset ($_SESSION['userid']) ) { echo '<p>Not logged in.</p>'; exit; } include "config.php"; global $_CONFIG,$set,$ir; define("MONO_ON", 1); require "class/class_db_{$_CONFIG['driver']}.php"; $db=new database; $db->configure($_CONFIG['hostname'], $_CONFIG['username'], $_CONFIG['password'], $_CONFIG['database'], $_CONFIG['persistent']); $db->connect(); $c=$db->connection_id; $set=array(); $settq=$db->query("SELECT * FROM settings"); while($r=$db->fetch_row($settq)) { $set[$r['conf_name']]=$r['conf_value']; } $userInfo = $db->query('SELECT `userid`, `level`, `energy`, `maxenergy`, `will`, `maxwill`, `brave`, `maxbrave`, `exp`, `hp`, `maxhp`, `gymxp`, `gexp_needed` FROM `users` WHERE (`userid` = '.$_SESSION['userid'].')'); if ($db->num_rows($userInfo) > 0) { $ir = $db->fetch_row($userInfo); $exp_needed=(($ir['level']+1.5)*($ir['level']+1.5)*($ir['level']+1)*2.7); $enperc=(int) ($ir['energy']/$ir['maxenergy']*100); $wiperc=(int) ($ir['will']/$ir['maxwill']*100); $experc=number_format(($ir['exp']/$exp_needed*100), 2); $brperc=(int) ($ir['brave']/$ir['maxbrave']*100); $hpperc=(int) ($ir['hp']/$ir['maxhp']*100); $gymperc=number_format(($ir['gymxp']/$ir['gexp_needed']*100), 2); $enopp=100-$enperc; $wiopp=100-$wiperc; $exopp=100-$experc; $bropp=100-$brperc; $hpopp=100-$hpperc; $gymopp=100-$gymperc; print "<center> <a id='button1b' href='energyrefill.php'> <b>Energy:</b> {$ir['energy']}/{$ir['maxenergy']} <small>[<font color='green'>Refill</font>]</small><br /> <img src=bargreen.gif width=$enperc height=12><img src=barred.gif width=$enopp height=12> </a> <a id='button1b' href=''> <b>Will:</b> {$wiperc}%<br /> <img src=bluebar.gif width=$wiperc height=12><img src=barred.gif width=$wiopp height=12> </a> <a id='button1b' href='criminal.php' target='_parent'> <b>Brave:</b> {$ir['brave']}/{$ir['maxbrave']}<br /> <img src=barpurple.gif width=$brperc height=12><img src=barred.gif width=$bropp height=12> </a> <a id='button1b' href=''> <b>Health:</b> {$hpperc}%<br /> <img src=bargreen.gif width=$hpperc height=12><img src=barred.gif width=$hpopp height=12> </a> <a id='button1b' href=''> <b>XP:</b> {$experc}%<br /> <img src=bluebar.gif width=$experc height=12><img src=barred.gif width=$exopp height=12> </a> <a id='button1b' href=''> <b>Gym XP:</b> {$gymperc}%<br /> <img src=bluebar.gif width=$gymperc height=12><img src=barred.gif width=$gymopp height=12></a> <br /><br /> </center>"; } ?>

i have this gang war system where you buy territorys, (cant find the orginal post) but you buy a sector of teritory for your gang i was wondering is there a way i can clear the tables, the tables are as follows $db->query(sprintf("UPDATE gangs SET gangTER1=0)); $db->query(sprintf("UPDATE gangs SET gangTER2=0)); $db->query(sprintf("UPDATE gangs SET gangTER3=0)); $db->query(sprintf("UPDATE gangs SET gangTER4=0)); $db->query(sprintf("UPDATE gangs SET gangTER5=0)); $db->query(sprintf("UPDATE gangs SET gangTER6=0)); $db->query(sprintf("UPDATE gangs SET gangTER7=0)); $db->query(sprintf("UPDATE gangs SET gangTER8=0)); $db->query(sprintf("UPDATE gangs SET gangTER9=0)); $db->query(sprintf("UPDATE gangs SET gangTER10=0)); $db->query(sprintf("UPDATE gangs SET gangTER11=0)); $db->query(sprintf("UPDATE gangs SET gangTER12=0)); $db->query(sprintf("UPDATE gangs SET gangTER13=0)); $db->query(sprintf("UPDATE gangs SET gangTER14=0)); $db->query(sprintf("UPDATE gangs SET gangTER15=0)); $db->query(sprintf("UPDATE gangs SET gangTER16=0)); $db->query(sprintf("UPDATE gangs SET gangTER17=0)); $db->query(sprintf("UPDATE gangs SET gangTER18=0)); $db->query(sprintf("UPDATE gangs SET gangTER19=0)); $db->query(sprintf("UPDATE gangs SET gangTER20=0)); $db->query(sprintf("UPDATE gangs SET gangTER21=0)); $db->query(sprintf("UPDATE gangs SET gangTER22=0)); $db->query(sprintf("UPDATE gangs SET gangTER23=0)); $db->query(sprintf("UPDATE gangs SET gangTER24=0)); $db->query(sprintf("UPDATE gangs SET gangTER25=0)); is there a way i can get them wiped so i can add then to the weekly cron, i was thinking along the same lines as like the voting crons, but that wipes the table completely, can someone help. Thanks

niether one worked.

i tried this, but then the bars dont work correcty and it goes upto a higher number, the 100 = 100% When i changed all the 100% to 150 all the things go into 150% which does not compute in my books lol

i know this might seem dumb but on the playerbars in your codes it will be in erm... header.php (i've changed mine so its different) well anyway you have the stats bar on the side panel which is this selected code below:   $exp_needed=(($ir['level']+1.5)*($ir['level']+1.5)*($ir['level']+1)*2.7); $enperc=(int) ($ir['energy']/$ir['maxenergy']*100); $wiperc=(int) ($ir['will']/$ir['maxwill']*100); $experc=number_format(($ir['exp']/$exp_needed*100), 2); $brperc=(int) ($ir['brave']/$ir['maxbrave']*100); $hpperc=(int) ($ir['hp']/$ir['maxhp']*100); $gymperc=number_format(($ir['gymxp']/$ir['gexp_needed']*100), 2); $enopp=100-$enperc; $wiopp=100-$wiperc; $exopp=100-$experc; $bropp=100-$brperc; $hpopp=100-$hpperc; $gymopp=100-$gymperc; print "<center> <a id='button1b' href='energyrefill.php'> <b>Energy:</b> {$ir['energy']}/{$ir['maxenergy']} <small>[<font color='green'>Refill</font>]</small><br /> <img src=bargreen.gif width=$enperc height=12><img src=barred.gif width=$enopp height=12> </a> <a id='button1b' href=''> <b>Will:</b> {$wiperc}%<br /> <img src=bluebar.gif width=$wiperc height=12><img src=barred.gif width=$wiopp height=12> </a> <a id='button1b' href='criminal.php' target='_parent'> <b>Brave:</b> {$ir['brave']}/{$ir['maxbrave']}<br /> <img src=barpurple.gif width=$brperc height=12><img src=barred.gif width=$bropp height=12> </a> <a id='button1b' href=''> <b>Health:</b> {$hpperc}%<br /> <img src=bargreen.gif width=$hpperc height=12><img src=barred.gif width=$hpopp height=12> </a> <a id='button1b' href=''> <b>XP:</b> {$experc}%<br /> <img src=bluebar.gif width=$experc height=12><img src=barred.gif width=$exopp height=12> </a> <a id='button1b' href=''> <b>Gym XP:</b> {$gymperc}%<br /> <img src=bluebar.gif width=$gymperc height=12><img src=barred.gif width=$gymopp height=12></a> <br /><br /> </center>"; } ?>   So well my point is these bars only go a certain percent which is 100% but this limits tge size width it goes, How do i make the stats bar longer than what is it.

make sure you get screenies lol, screenies sell lol

Warning: system() has been disabled for security reasons in /home/ividenco/public_html/*********.php on line 24 any help with this?

shame. this is a good idea, just needed the foundation so i can build on lol

nice addition, could you please use the [ code ] [ / code ] tags

i take it with all the replys that this mod is no longer around.

you should check out the demo page http://redux.mccodes.com/login.php

i have this mailbox, (code posted below) what i would like it to do it have the option check all and uncheck all funtioning, i've tried to edit this, tried a few javascripts and havent been able to get it to work could someone help me with this problem   <?php include "globals.php"; require "bbcodestyle.css"; require "bbcode.php"; global $db,$ir,$r,$c,$userid,$h; $db->query("UPDATE users SET lastpage='Mailbox' WHERE userid=$userid"); if($ir['mailban']) { die("<font color=red><h3>! ERROR</h3> You have been mail banned for {$ir['mailban']} days. <b>Reason: {$ir['mb_reason']}</font></b>"); } $_GET['ID'] = abs((int) $_GET['ID']); print "<table width=100% class='table' cellspacing='1'> <tr> <td align=center><a href='mailbox.php?action=inbox'><img src='images/indox.gif'></a></td> <td align=center><a href='mailbox.php?action=outbox'><img src='images/sent.gif'></a></td> <td align=center><a href='mailbox.php?action=compose'><img src='images/compose.gif'></a></td> <td align=center><a href='mailbox.php?action=delall'><img src='images/deleteall.gif'></a></td> <td align=center><a href='mailbox.php?action=archive'><img src='images/archiveall.gif'></a></td> <td align=center><a href='contactlist.php'><img src='images/contacts.gif'></a></td> </tr> </table> "; switch($_GET['action']) { case 'inbox': mail_inbox(); break; case 'outbox': mail_outbox(); break; case 'compose': mail_compose(); break; case 'delete': mail_delete(); break; case 'send': mail_send(); break; case 'delall': mail_delall(); break; case 'delall2': mail_delall2(); break; case 'archive': mail_archive(); break; case 'del': mail_massdel(); break; case 'read': mail_view(); break; default: mail_inbox(); break; } function mail_inbox() { global $db,$ir,$c,$userid,$h; print<<<END <SCRIPT><!-- HIDE function setCheckboxes(the_form, do_check) { var elts = (typeof(document.forms[the_form].elements['ID[]']) != 'undefined') ? document.forms[the_form].elements['ID[]'] : (typeof(document.forms[the_form].elements['ID[]']) != 'undefined') ? document.forms[the_form].elements['ID[]'] : document.forms[the_form].elements['ID[]']; var elts_cnt = (typeof(elts.length) != 'undefined') ? elts.length : 0; if (elts_cnt) { for (var i = 0; i < elts_cnt; i++) { elts[i].checked = do_check; } // end for } else { elts.checked = do_check; } // end if... else return true; } // STOP HIDING --></SCRIPT> END; print <<<OUT Only the last 25 messages sent to you are visible. <table width=100% class=table cellspacing="1" border="1"> <tr> <td class="h" align=center>From</td> <td class="h" align=center>Subject</td> <td class="h" align=center>Status</td> <td class="h" align=center>Read</td> <td class="h" align=center>Delete</td> </tr> <form name='masssell' method=post action=mailbox.php?action=del> OUT; $q=$db->query("SELECT m.*,u.* FROM mail m LEFT JOIN users u ON m.mail_from=u.userid WHERE m.mail_to=$userid ORDER BY mail_time DESC LIMIT 25"); $i=0; while($r=$db->fetch_row($q)) { print "<tr class=\"d".($i & 1)."\"><td align=center>"; $i++; if($r['userid']) { print "<a href='viewuser.php?u={$r['userid']}'>{$r['username']}</a> [{$r['userid']}]"; } else { print "SYSTEM"; } $fm=$r['mail_subject']; if($r['mail_read'] == 0) { $status="<font color=red>Unread</font>"; } else { $status="<font color=green>Read</font>"; } print " </td> <td align=center> $fm </td> <td align=center> $status </td> <td align=center> <a href='mailbox.php?action=read&ID={$r['mail_id']}'>Open</a> </td> <td align=center> <a href='mailbox.php?action=delete&ID={$r['mail_id']}'> <img src=images/trash.gif height=20 width=20 > </a> <input type='checkbox' name='del$i' value='yes'> <input type='hidden' name='id$i' value='{$r['mail_id']}'> </td></tr>"; } print<<<END <tr> <td colspan=5 align=center> <input name=sellmass type=submit id=sellmass value='Delete selected'> <br /> <a href=# onClick="setCheckboxes('masssell',true); return false;'>Check All</a> | <a href=# onClick="setCheckboxes('masssell',false); return true;'>Uncheck All </a> </form> </td> </tr> </table> END; } function mail_outbox() { global $db,$ir,$c,$userid,$h; print "Only the last 25 messages you have sent are visible.<br /> <table width=75% cellspacing=1 class='table'><tr style='background:gray'><th>To</th><th>Subject/Message</th></tr>"; $q=$db->query("SELECT m.*,u.* FROM mail m LEFT JOIN users u ON m.mail_to=u.userid WHERE m.mail_from=$userid ORDER BY mail_time DESC LIMIT 25"); if($r=$db->fetch_row($q)) { $sent=date('F j, Y, g:i:s a',$r['mail_time']); print "<tr><td><a href='viewuser.php?u={$r['userid']}'>{$r['username']}</a> [{$r['userid']}]</td><td>{$r['mail_subject']}</td></tr><tr><td>Sent at: $sent<br /></td><td>{$r['mail_text']}</td></tr>"; } echo '</table>'; } function mail_compose() { global $ir,$c,$userid,$h; echo <<< EOF <script type="text/javascript"> function insert(el,ins) { if (el.setSelectionRange){ el.value = el.value.substring(0,el.selectionStart) + ins + el.value.substring(el.selectionStart,el.selectionEnd) + el.value.substring(el.selectionEnd,el.value.length); } else if (document.selection && document.selection.createRange) { el.focus(); var range = document.selection.createRange(); range.text = ins + range.text; } } </script> <form action='mailbox.php?action=send' method='post'> <table width=75% border=2> <tr> <td>ID to send to:</td> <td><input type='text' name='userid' value='{$_GET['ID']}'/></td></tr><tr> <td>Subject:</td> <td><input type='text' name='subject'/></td></tr><tr> <td>Message:</td> <td> <center> <input type="button" class="bbcode_hover" onClick="insert(this.form.message,'[b][/b]'); return false;" value="" /> <input type="button" class="bbcode_hover1" onClick="insert(this.form.message,'[i][/i]'); return false;" value="" /> <input type="button" class="bbcode_hover2" onClick="insert(this.form.message,'[u][/u]'); return false;" value="" /> <input type="button" class="bbcode_hover3" onClick="insert(this.form.message,'[url][/url]'); return false;" value="" /> <input type="button" class="bbcode_hover4" onClick="insert(this.form.message,''); return false;" value="" /> <input type="button" class="bbcode_hover5" onClick="insert(this.form.message,'[img][/img]'); return false;" value="" /> <input type="button" class="bbcode_hover6" onClick="insert(this.form.message,''); return false;" value="" /> <input type="button" class="bbcode_hover7" onClick="insert(this.form.message,'[color=#xxxxxx][/color]'); return false;" value="" /> <textarea name='message' rows='10' cols='70' style='color: black; background-color: white'></textarea><br /> <input type="image" src="smilies/smiley1.gif" alt="Smile" title="smile" onclick="insert(this.form.message,':)'); return false;" /> <input type="image" src="smilies/smiley2.gif" alt="Wink" title="Wink" onclick="insert(this.form.message,';)'); return false;" /> <input type="image" src="smilies/smiley3.gif" alt="Suprised" title="Suprised" onclick="insert(this.form.message,':o'); return false;" /> <input type="image" src="smilies/smiley4.gif" alt="Cheesy Grin" title="Cheesy Grin" onclick="insert(this.form.message,':D'); return false;" /> <input type="image" src="smilies/smiley5.gif" alt="Confused" title="Confused" onclick="insert(this.form.message,':s'); return false;" /> <input type="image" src="smilies/smiley6.gif" alt="Sad" title="Sad" onclick="insert(this.form.message,':('); return false;" /> <input type="image" src="smilies/smiley7.gif" alt="Angry" title="Angry" onclick="insert(this.form.message,':red'); return false;" /> <input type="image" src="smilies/smiley8.gif" alt="Clown" title="Clown" onclick="insert(this.form.message,':clown'); return false;" /> <input type="image" src="smilies/smiley9.gif" alt="Embarrassed" title="Embarrassed" onclick="insert(this.form.message,':bashful'); return false;" /> <input type="image" src="smilies/smiley10.gif" alt="Star" title="Star" onclick="insert(this.form.message,':x'); return false;" /> <input type="image" src="smilies/smiley11.gif" alt="Sick" title="Sick" onclick="insert(this.form.message,':green'); return false;" /> <input type="image" src="smilies/smiley12.gif" alt="Bored" title="Bored" onclick="insert(this.form.message,':|'); return false;" /> <input type="image" src="smilies/smiley13.gif" alt="Begging" title="Begging" onclick="insert(this.form.message,';('); return false;" /> <input type="image" src="smilies/smiley14.gif" alt="Smug" title="Smug" onclick="insert(this.form.message,':]'); return false;" /> <input type="image" src="smilies/smiley15.gif" alt="Horny" title="Horny" onclick="insert(this.form.message,':horny'); return false;" /> <input type="image" src="smilies/smiley16.gif" alt="Cool" title="Cool" onclick="insert(this.form.message,':cool'); return false;" /></center> </td></tr><tr> </td></tr><td colspan=2><input type='submit' value='Send' class='btn'></td></tr></table></form> EOF; if($_GET['ID']) { print "<br /><table width=75% border=2><tr><td colspan=2><b>Your last 5 mails to/from this person:</b></td></tr>"; $q=mysql_query("SELECT m.*,u1.username as sender from mail m left join users u1 on m.mail_from=u1.userid WHERE (m.mail_from=$userid AND m.mail_to={$_GET['ID']}) OR (m.mail_to=$userid AND m.mail_from={$_GET['ID']}) ORDER BY m.mail_time DESC LIMIT 5",$c); while($r=mysql_fetch_array($q)) { $sent=date('F j, Y, g:i:s a',$r['mail_time']); print "<tr><td>$sent</td> <td><b>{$r['sender']} wrote:</b> {$r['mail_text']}</td></tr>"; } } } function mail_send() { global $ir,$c,$userid,$h; $subj=str_replace(array("\n"),array("<br />"),strip_tags($_POST['subject'])); $msg=bb2html($_POST['message']); $codes = array(":)", ";)", ":o", ":D", ":s", ":(", ":red", ":clown", ":bashful", ":x", ":green", ":|", ";(", ":]", ":horny", ":cool"); $images = array("<img src=smilies/smiley1.gif>", "<img src=smilies/smiley2.gif>", "<img src=smilies/smiley3.gif>", "<img src=smilies/smiley4.gif>", "<img src=smilies/smiley5.gif>", "<img src=smilies/smiley6.gif>", "<img src=smilies/smiley7.gif>", "<img src=smilies/smiley8.gif>", "<img src=smilies/smiley9.gif>", "<img src=smilies/smiley10.gif>", "<img src=smilies/smiley11.gif>", "<img src=smilies/smiley12.gif>", "<img src=smilies/smiley13.gif>", "<img src=smilies/smiley14.gif>", "<img src=smilies/smiley15.gif>", "<img src=smilies/smiley16.gif>"); $newmsg = str_replace($codes, $images, $msg); $to= (int) $_POST['userid']; mysql_query("INSERT INTO mail VALUES ('',0,$userid,$to,unix_timestamp(),'$subj','$newmsg')",$c) or die(mysql_error()); mysql_query("UPDATE users SET new_mail=new_mail+1 WHERE userid={$to}") or die(mysql_error()); print "Message sent.<br /> <a href='mailbox.php'>> Back</a>"; } function mail_delete() { global $db,$ir,$c,$userid,$h; $db->query("DELETE FROM mail WHERE mail_id={$_GET['ID']} AND mail_to=$userid"); print "Message deleted.<br /> <a href='mailbox.php'>> Back</a>"; } function mail_view() { global $db,$ir,$c,$userid,$h; print <<<OUT <table width=100% class="table" border="1" cellspacing="1"> <tr> <td class="h" width=25%>From</td> <td class="h" width=75%>Subject/Message</td> </tr> OUT; $id= abs((int) $_GET['ID']); $q=$db->query("SELECT m.*,u.* FROM mail m LEFT JOIN users u ON m.mail_from=u.userid WHERE m.mail_id=$id LIMIT 1"); $r=$db->fetch_row($q); $sent=date('F j, Y, g:i:s a',$r['mail_time']); print "<tr><td>"; if($r['userid']) { print "<a href='viewuser.php?u={$r['userid']}'>{$r['username']}</a> [{$r['userid']}]"; } else { print "SYSTEM"; } $fm=urlencode($r['mail_text']); print "</td>\n<td>{$r['mail_subject']}</td></tr><tr><td>Sent at: $sent<br /> "; if($ir['mailban'] == 0) { print "<a href='mailbox.php?action=compose&ID={$r['userid']}'>Reply</a><br /> "; } print "<a href='mailbox.php?action=delete&ID={$r['mail_id']}'>Delete</a><br /> <a href='preport.php?ID={$r['userid']}'>Report</a></td><td>{$r['mail_text']}</td></tr>"; if($r['mail_read'] == 0) { $db->query("UPDATE mail SET mail_read=1 WHERE mail_to=$userid AND mail_id=$id LIMIT 1"); $db->query("UPDATE users SET new_mail=new_mail-1 WHERE userid=$userid"); } print "</table>"; } function mail_delall() { global $ir,$c,$userid,$h; print "This will delete all the messages in your inbox.<br /> There is <b>NO</b> undo, so be sure.<br /> <a href='mailbox.php?action=delall2'>> Yes, delete all messages</a><br /> <a href='mailbox.php'>> No, go back</a>"; } function mail_delall2() { global $db,$ir,$c,$userid,$h; $db->query("DELETE FROM mail WHERE mail_to=$userid"); print "All ".$db->affected_rows()." mails in your inbox were deleted.<br /> <a href='mailbox.php'>> Back</a>"; } function mail_archive() { global $ir,$c,$userid,$h; print "This tool will download an archive of all your messages.<br /> <a href='dlarchive.php?a=inbox'>> Download Inbox</a><br /> <a href='dlarchive.php?a=outbox'>> Download Outbox</a>"; } function mail_massdel() { global $db,$ir,$c,$userid,$h; $counter = 1; $deleted=0; while ($counter < 25) { $dodel = "del" . $counter; if ($_POST[$dodel] == "yes") { $delid = "id" . $counter; $db->query("DELETE FROM mail WHERE mail_to=$userid AND mail_id={$_POST[$delid]}") or die(mysql_error()); $deleted++; } $counter++; } print "<center> $deleted messages deleted. <a href=mailbox.php>> Back</a>"; } print " Mail count mixed up? Click <a href='fix.php?fix=1'>Here</a> to fix"; $h->endpage(); ?>

i dont quite get what you mean there illusions, still an amature at the moment, still learning as of yet

well in the attack php, a sql update is sent to the users, lastwon and last lost in profile it displays like this Last Win: {$r['lastwon']} <br /> Last Lost: {$r['lastlost']} <br /> What is inserted into the database is the id of the user. which is working good.

well it didnt display anything

use the sqls????

ok, well this didnt work, :(