Sum Total Help

Anon

Can someone please tell me what I'm doing wrong here?

When the user logs in, I want to find out what level he's at ($sql) and add one to that, giving that sum and $newlevel value.

Example: User is on level 4. I want the "$newlevel" value to actually read "5" in the html instead of 4+1

Here's my code below. Any advice would be incredibly helpful.

Mada

$sql = "
SELECT *
FROM $table_name Where username = \"$username\" AND password = \"$password\"
";
$query = mysql_query("SELECT SUM($level+1) AS $newlevel FROM $table_name");

$result = @($sql,$connection) or die("Couldn't execute query.");
while ($row = mysql_fetch_array($result)) {
$id = $row['id'];
$username = $row['username'];
$password = $row['password'];
$level = $row['level'];
$email = $row['email'];

$display_block .= "
<font face=arial size=2><b></b></font>
";
}

Anon

You just need to add 1 outside the sum() function:

  select sum(level)+1 ...

Well, actually you need to changle a little more than that,
since it appears you never actually fetch the data from
that query.

Anon

Sorry, didn't paste the entire code (below)

I get an query2 execution error. Am I not assigning a new variable the correct way?

Thanks again for your help.

Mada

<?
$db_name = "ohrats_net";
$table_name = "quiz2";

$connection = @mysql_connect("localhost", "XXXXX", "XXXXX")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "
SELECT *
FROM $table_name Where username = \"$username\" AND password = \"$password\"
";

$display_block .= "
<font face=arial size=2><b></b></font>
";
}

<?
$db_name = "ohrats_net";
$table_name = "quiz2";

$connection = @mysql_connect("localhost", "XXXXX", "XXXXX")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "
SELECT SUM($level)+1 AS $newlevel FROM $table_name Where username = \"$username\" AND password = \"$password\"
";

$result = @($sql,$connection) or die("Couldn't execute query2.");
while ($row = mysql_fetch_array($result)) {
$id = $row['id'];
$username = $row['username'];
$password = $row['password'];
$level = $row['level'];

$display_block .= "
<font face=arial size=2><b>$newlevel</b></font>
";
}

Anon

There's a number of things I don't understand here, but
foremost is this:

  $sql = "SELECT SUM($level)+1 AS $newlevel ...

What is $newlevel? It's never defined as far as I can see.
And why do you need to give this aggregate column a name,
anyway? And you still never read the results of that query,
so of course $newlevel is gonna be empty (or have whatever
previous value it had.)

Anon

I agree with Kirk, a lot of things look messed up here.

$sql = "SELECT SUM($level)+1 AS $newlevel FROM $table_name Where username = \"$username\" AND password = \"$password\"

Use single quotes, then you won't have to escape them.
Okay...If you know that $level is equal to some integer, why would you SELECT $level+1 ?? Why even go to the database when you can just say $level++?
You're second datbase query only selects one thing, the sum. So those calls to $row["id"], etc are going to give you errors b/c they don't exist. You didn't select them...

I think you need to start over from scratch...I don't even see what you're trying to do here...

Okay...maybe I do. Your first query selects data about people at level X. Then you want your second query to select the data from people at level X+1... How about something like

$sql = "SELECT * FROM $table_name WHERE username='$username' AND password='$password' AND (level='$level' OR level='" . ++$level . "') ORDER BY level ASC";

That should give you everyone at level X, followed by everyone at level X+1.

Also, do you expect more than one row to be returned?? more than one row has the same username and password?? that doesn't sound right...

---JH

Anon

Hi,

Read over all of your posts and I think that I'm heading in the right direction, but have run into a couple of snags...

I created a database with the following users

username/password
user0/zero
user1/one
user2/two
user3/three

They are on the level that is in their user name eg. user1 has finished level 1, user0 has just logged in.

When I go in as user0 I don't get any questions showing.

If I go in as any of the others, it shows the level they just completed, despite the level in the URL.

Can one of you guys give me a clue here? It would be very much appreciated.

I pasted the different pages in different rplies.

The actual url is

http://www.ohrats.net/tests/index.php

Thanks in advance for any help.

Mada

Anon

<?
include("http://www.ohrats.net/includes/header.inc");
?>

<table width=750>
<tr>
<td valign=top width=125>
<?
include("http://www.ohrats.net/includes/main_categories.inc");
?>
<br><br>
<?
include("http://www.ohrats.net/tests/includes/sub_categories.inc");
?>
</td>
<td valign=top width=75><img src=http://www.ohrats.net/links/images/vertical_bar.jpg></td>
<td valign=top width=550>
<font face=arial>
Welcome to the OhRats.net Test Database. In order to participate in this test, you must complete the following form in order to log in, your browser must accept cookies, and you must supply a valid email address to keep track of your progress.<br><br>
<FORM ACTION="signup_validation.php" METHOD="POST">
<input type ="hidden" name="quiz2_id">
<input type ="hidden" name="quiz2_level" value="0">
UserName:<br>
<INPUT TYPE="text" NAME="username"><BR><br>
Password:<br>
<INPUT TYPE="password" NAME="password"><BR><br>
Email:<br>
<INPUT TYPE="text" NAME="email"><BR><br>
<INPUT TYPE="submit" Value="Sign Up">
</FORM>
<br><br>
If you have already created a username and password, please login here.<br><br>
<FORM ACTION="login.php" METHOD="POST">
<input type ="hidden" name="quiz2_id">
<input type ="hidden" name="quiz2_level">
UserName:<br>
<INPUT TYPE="text" NAME="username"><BR><br>
Password:<br>
<INPUT TYPE="password" NAME="password"><BR><br>

</font>
</td>
</tr>
</table>

<?
include("http://www.ohrats.net/includes/footer.inc");
?>

Anon

<?
$db_name = "ohrats_net";
$table_name = "quiz2";

$connection = @mysql_connect("localhost", "xxx", "xxx")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "SELECT * FROM $table_name WHERE username='$username' AND password='$password'

";

$result = @($sql,$connection) or die("Couldn't execute query.");
while ($row = mysql_fetch_array($result)) {
$quiz2_id = $row['quiz2_id'];
$username = $row['username'];
$password = $row['password'];
$quiz2_level = $row['quiz2_level'];

$newlevel = "$quiz2_level"+1;

$level_block .= "
<font face=arial>You have successfully completed Level $quiz2_level, and are ready for Level <a href=http://www.ohrats.net/tests/questions.php?quiz2_id=$quiz2_id&quiz2_level=$newlevel>$newlevel</a></font>
";
}
$none .= "
<font face=arial>You have not completed any levels yet. Please start at Level <a href=http://www.ohrats.net/tests/questions.php?quiz2_id=$quiz2_id&quiz2_level=1>1</a></font>
";
?>

<?
include("http://www.ohrats.net/includes/header.inc");
?>

<? echo "$level_block"; ?>

</font>
</td>
</tr>
</table>

<?
include("http://www.ohrats.net/includes/footer.inc");
?>

Anon

<?
$db_name = "ohrats_net";
$table_name = "quiz2";

$connection = @mysql_connect("localhost", "xxx", "xxx")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "INSERT INTO $table_name
(quiz2_id, quiz2_level, username, password, email)
VALUES
(\"$quiz2_id\", \"$quiz2_level\",\"$username\",\"$password\",\"$email\")

$result = @($sql,$connection) or die("Couldn't execute query.");
$login_form .= "
<FORM ACTION=login.php METHOD=POST>
UserName:<br>
<INPUT TYPE=\"text\" NAME=\"username\" value=\"$username\"><BR><br>
Password:<br>
<INPUT TYPE=\"password\" NAME=\"password\" value=\"$password\"><BR><br>

<INPUT TYPE=\"submit\" Value=\"Login\">
</FORM>
";

<?
include("http://www.ohrats.net/includes/header.inc");
?>
<br><br>
<table width=750>
<tr>
<td valign=top width=125>
<?
include("http://www.ohrats.net/includes/main_categories.inc");
?>
<br><br>
<?
include("http://www.ohrats.net/tests/includes/sub_categories.inc");
?>
</td>
<td valign=top width=75><img src=http://www.ohrats.net/links/images/vertical_bar.jpg></td>
<td valign=top width=550>
<font face=arial>

<P> Your username has now been added. Please login using the form below:<br><br>
<? echo "$login_form"; ?>

</font>
</td>
</tr>
</table>
<br><br>
<?
include("http://www.ohrats.net/includes/footer.inc");
?>

Anon

<?
$db_name = "ohrats_net";
$table_name = "quiz2";

$connection = @mysql_connect("localhost", "xxx", "xxx")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "SELECT * FROM $table_name WHERE quiz2_id = \"$quiz2_id\"
";

}

$db_name = "ohrats_net";
$table_name = "quiz";

$connection = @mysql_connect("localhost", "mharris", "firework")
or die("Couldn't connect.");

$db = @mysql_select_db($db_name, $connection)
or die("Couldn't select database.");

$sql = "SELECT *
FROM $table_name Where level = \"$quiz2_level\" ";

$result = @($sql,$connection) or die("Couldn't execute query.");

while ($row = mysql_fetch_array($result)) {
$id = $row['id'];
$question = $row['question'];
$a = $row['a'];
$b = $row['b'];
$c = $row['c'];
$correct = $row['correct'];
$newlevel = "$quiz2_level"+1;

$question_block .= "
<font face=arial>
<DL> $question
<DD> a) <INPUT TYPE=RADIO NAME=\"$a\" Value=\"a\"> $a
<DD> b) <INPUT TYPE=RADIO NAME=\"$b\" Value=\"b\"> $b
<DD> c) <INPUT TYPE=RADIO NAME=\"$c\" Value=\"c\"> $c</DL>
</font>
";

}
$level_block .= "
<font face=arial size=4>Level $quiz2_level</font><br><br>
<font face=arial>You are currently at Level $quiz2_level. In order to advance to the Level $newlevel, you must answer 8 out of the 10 questions correctly.</font>
<br>";
?>

<?
include("http://www.ohrats.net/includes/header.inc");
?>

<? echo "$question_block"; ?>
<br>
<p align=right>
<input type=submit value=Submit Answers>
</font>
</td>
</tr>
</table>

<?
include("http://www.ohrats.net/includes/footer.inc");
?>

Anon

In questions.php, I have a hidden input for quiz2_id which will be needed to update the user to the next level once the quiz has been graded.

For some reason, it's not populating with the variable even though it's in the url.

What did I do wrong here?

Thanks,

Mada

Anon

Shouldn't you have some kind of logic here based on what level was pulled out of the database, whether to display $none or $level_block?? You seem to show $level_block no matter what, even if it's level zero...

---JH

Anon

Okay...since you only pass $quiz2_id, it'd be easy for people to hijack other peoples questions by just changing the id number in the url. Say my url is

questions.php?quiz2_id=344

So I just change the 344 to something else, answer all the questions wrong, and screw up their records...

---JH

Anon

Should be:

Anon

Yea, I had an if else statement, but it wasn't working, so I just took it out until I could figure out what the heck I was doing wrong...