function setStatDRY($type, $statName, $trackingID, $value) { include $_SERVER['DOCUMENT_ROOT'] . '/include/db_browsergame.inc.php'; settype($trackingID, "int"); settype($value, "int"); createIfNotExistsDRY($type, $statName, $trackingID); try { $sql = "UPDATE entity_stats SET \n\t\tvalue = :value \n\t\tWHERE stat_id = \n\t\t\t(SELECT id \n\t\t\tFROM stats \n\t\t\tWHERE short_name = :shortname) \n\t\t\tAND entity_id = :trackingid\n\t\t\tAND entity_type = :type"; $s = $pdo->prepare($sql); $s->bindValue(':value', $value); $s->bindValue(':type', $type); $s->bindValue(':shortname', $statName); $s->bindValue(':trackingid', $trackingID); $s->execute(); } catch (PDOException $e) { $error = 'Error updating DRY stats value list.' . $e->getMessage(); include $_SERVER['DOCUMENT_ROOT'] . '/include/error.html.php'; exit; } }
function setStatDRY($type, $statName, $trackingID, $value) { createIfNotExistsDRY($type, $statName, $trackingID); $query = sprintf("UPDATE entity_stats SET value = '%s' WHERE stat_id = (SELECT id FROM stats WHERE display_name = '%s' OR short_name = '%s') AND entity_id = '%s' AND entity_type = '%s'", mysql_real_escape_string($value), mysql_real_escape_string($statName), mysql_real_escape_string($statName), mysql_real_escape_string($trackingID), mysql_real_escape_string($type)); $result = mysql_query($query); }