mysql_real_escape_string(): Access denied

Discussion in 'PHP' started by killaklown, Jul 5, 2006.

  1. #1
    Im getting this error:

    Im trying to run the phpbannerexchange 2.0 GOLD script from eschew.net but when i put the html code (that users put on their site and shows the banners in the exchange) i get the error above. I know all the mysql database in the config.php is correct, because the rest of the site which requires it works.

    Ive attached the view.php file (as a .txt)
     

    Attached Files:

    killaklown, Jul 5, 2006 IP
  2. vishwaa

    vishwaa Well-Known Member

    Messages:
    271
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    138
    #2
    Try to establish a mysql connection before using any 'mysql_real_escape_string'.

    Your code should look like

    $db=mysql_connect("$dbhost","$dbuser","$dbpass");
    mysql_select_db($dbname,$db);
    ...
    ...
    ...
    $uid=mysql_real_escape_string($uid);
    $cat=mysql_real_escape_string($cat);
     
    vishwaa, Jul 6, 2006 IP
  3. zalka@multiline.com.au

    zalka@multiline.com.au Member

    Messages:
    82
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    41
    #3
    I know this is an old thread but i hope someone can point me in the right direction.

    I have just installed phpbannerexchange2.0 everthing seems to work except for when you get the code to put on your website the result says "invalid code" when you run it i.e.

    <!--Begin Arcade Banner Exchange code -->
    <center><iframe align=top width=100 height=100 marginwidth=0 marginheight=0 hspace=0 vspace=0 frameborder=0 scrolling=no src="http://www.freegamesmachine.com/exchange20/view.php?uid=9&cat=4"><ilayer align=top width=100 height=100 src="http://www.freegamesmachine.com/exchange20/view.php?uid=9&cat=4"></ILAYER> </iframe>
    <!--End Arcade Banner Exchange code -->

    Can anyone give me a hint on what could be causing it to give an invalid code.
    Its driving me nuts.


    Thanking you in advance
    Zalka
     
    zalka@multiline.com.au, Oct 17, 2007 IP
  4. cricketsurf

    cricketsurf Peon

    Messages:
    1
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    When I put the code mentioned in the previous post, I get the following error on the page where the code is inputted into: Invalid Banner Code!

    I am pretty sure it is something in the view.php, but for some reason I can not see what the problem is.

    If anyone has any suggestions, it would be greatly appreciated.

    Thank you
     
    cricketsurf, Feb 12, 2008 IP
  5. vishwaa

    vishwaa Well-Known Member

    Messages:
    271
    Likes Received:
    12
    Best Answers:
    0
    Trophy Points:
    138
    #5
    I have modified the code given by the OP. If your version differs, this code may not work.

    
    <?php
    $file_rev="041308";
    ////////////////////////////////////////////////////////
    //                 phpBannerExchange                  //
    //                   by: Darkrose                     //
    //              (darkrose@eschew.net)                 //
    //                                                    //
    // You can redistribute this software under the terms //
    // of the GNU General Public License as published by  //
    // the Free Software Foundation; either version 2 of  //
    // the License, or (at your option) any later         //
    // version.                                           //
    //                                                    //
    // You should have received a copy of the GNU General //
    // Public License along with this program; if not,    //
    // write to the Free Software Foundation, Inc., 59    //
    // Temple Place, Suite 330, Boston, MA 02111-1307 USA //
    //                                                    //
    //     Copyright 2004 by eschew.net Productions.      //
    //   Please keep this copyright information intact.   //
    ////////////////////////////////////////////////////////
    
    include("config.php");
    include("lang/common.php");
    
    if($use_gzhandler==1){
    	ob_start("ob_gzhandler");
    }
    
    $uid = strip_tags($_REQUEST['uid']);
    $cat = strip_tags($_REQUEST['catid']);
    
    if (get_magic_quotes_gpc()) {
    	$uid = stripslashes($uid);
    	$cat = stripslashes($cat);
    }
    
    if(!$cat){
    	$cat="0";
    }
    
    //if this is false, will return "Invalid Banner!" (see bottom)
    if(ctype_digit($uid) and ctype_digit($cat)){
    	$db=mysql_connect("$dbhost","$dbuser","$dbpass");
    	mysql_select_db($dbname,$db);
    
    	$uid = mysql_real_escape_string(htmlentities($uid));
    	$cat = mysql_real_escape_string(htmlentities($cat));
    	
    	$status = mysql_query("select * from bannerconfig where name='exchangestate'");
    	$get_status=mysql_fetch_array($status);
    	$status=$get_status[data];
    	if($status == '1'){
    		//display default banner.
    		$eligible=mysql_query("select * from bannerurls where uid='0' limit 1");
    		$defaultbanner="1";
    	}else{
    		if($cat=="0" or !$cat){
    			//display the banner + without category support.
    			if($use_dbrand == 1){
    				$eligible=mysql_query("select uid from bannerstats where approved='1' and credits >= '$steexp' and uid != '$uid' order by rand() limit 1");
    			}else{
    				$eligible=mysql_query("select uid from bannerstats where approved='1' and credits >= '$steexp' and uid != '$uid'");
    			}
    		}else{
    			if($use_dbrand == 1){
    				//display the banner + with category support.
    				$eligible=mysql_query("select uid from bannerstats where approved='1' and credits >= '$steexp' and category = '$cat' and uid != '$uid' order by rand() limit 1");
    			}else{
    				$eligible=mysql_query("select uid from bannerstats where approved='1' and credits >= '$steexp' and category = '$cat' and uid != '$uid'");
    			}
    		}
    		//check to see the number of banners found.
    		$get_number=@mysql_num_rows($eligible);
    		if($get_number == 0){
    			if($use_dbrand == 1){
    				$eligible=mysql_query("select uid from bannerstats where defaultacct='1' and uid != '$uid' and uid != '0' order by rand() limit 1");
    			}else{
    				$eligible=mysql_query("select uid from bannerstats where defaultacct='1' and uid != '$uid' and uid != '0'");
    			}
    		}
    		$get_number=@mysql_num_rows($eligible);
    		if($get_number == 0){
    			//if none found, display the default account.
    			$eligible=mysql_query("select bannerurl, targeturl from bannerurls where uid='0' limit 1");
    			$defaultbanner="1";
    		}
    	}
    
    	$find_num=@mysql_num_rows($eligible);
    
    	//if we STILL can't find a banner, display an error.
    	if($find_num == '0'){
    		echo "You're getting this message because there's no default account or default banner set up! Set one up before proceeding!";
    		die();
    	}
    
    	if($defaultbanner=="1"){
    		$get_banner=mysql_fetch_array($eligible);
    		$bannerurl=$get_banner[bannerurl];
    		$bannerid=$get_banner[id];
    		$update_uid=mysql_query("update bannerstats set credits=credits+$steexp,histexposures=histexposures+1 where uid='$uid'");
    		$pick="0";
    	}else{
    		while($rand_rows = @mysql_fetch_array($eligible)){
    			$id_array[] = $rand_rows[uid];
    		}
    	
    		if($use_dbrand == 0){
    			srand((double)microtime()*1000000); 
    			@shuffle($id_array);
    			srand((double)microtime()*1000000); 
    			@shuffle($id_array);
    		}
    		
    		$pick = $id_array[0];
    		$takecred=mysql_query("update bannerstats set credits=credits-$banexp where uid='$pick'");
    
    //anti-cheat
    		if($anticheat=="cookies"){
    			include("cookies.php");
    		}
    
    		if($anticheat=="DB"){
    			include("dblog.php");
    		}
    
    		if($anticheat==""){
    			$update_bid=mysql_query("update bannerstats set exposures=exposures+1 where uid='$pick'");
    			$update_uid=mysql_query("update bannerstats set credits=credits+$steexp,histexposures=histexposures+1 where uid='$uid'");
    		}
    
    		if($use_dbrand == 1){
    			$get_banner = mysql_query("select * from bannerurls where uid='$pick' order by rand() limit 1");
    		}else{
    			$get_banner = mysql_query("select * from bannerurls where uid='$pick'");
    		}
    
    		while($rand_ban = mysql_fetch_array($get_banner)){
    			$ban_array[] = $rand_ban[id];
    		}
    	
    		if($use_dbrand == 0){
    			srand((double)microtime()*1000000); 
    			@shuffle($ban_array);
    			srand((double)microtime()*1000000); 
    			@shuffle($ban_array);
    		}
    
    			$bannerid=$ban_array[0];
    			$get_banner=mysql_query("select bannerurl from bannerurls where id='$bannerid'");
    			$get_banner_url=mysql_fetch_array($get_banner);
    			$update_bannerstats=mysql_query("update bannerurls set views=views+1 where id='$bannerid'");
    			$raw_query=mysql_query("select raw from bannerstats where uid=$pick");
    			$get_raw=@mysql_fetch_array($raw_query);
    			$rawcode=$get_raw[raw];
    		}
    	if($rawcode != '0'){
    		echo "$rawcode";
    	}else{
    	$bannerurl=$get_banner_url[bannerurl];
    	}
    ?>
    	<a href="<? echo "$baseurl"; ?>/click.php?uid=<? echo "$uid"; ?>&bid=<? echo "$pick"; ?>&ban=<? echo"$bannerid"; ?>" target="_blank"><img src="<? echo "$bannerurl"; ?>" border=0 width=<? echo "$bannerwidth"; ?> height=<? echo "$bannerheight"; ?>></a>
    <?
    }else{
    	echo "Invalid Banner Code!";
    }
    ?>
    
    PHP:
     
    vishwaa, Feb 12, 2008 IP