Untitled

<html><head>
<title>Achievements</title>
<link type="text/css" rel="stylesheet" href="style/achievements.css" \>
</head><body>
<script type="text/javascript" src="scripts/ext-all-base.js"></script>
<script type="text/javascript" src="scripts/ext-all-debug.js"></script>
<script type="text/javascript">
    //Ext.QuickTips.init();
</script>

<div id="results">
<div>
<?
$username="root";
$password="*******";
$database="mc_server";
$maxDesc = 100;

function checkOK($field)
{
    if (eregi("\r",$field) || eregi("\n",$field) || strpos($field,"'")){
        die("Invalid Input!");
}
}

$user=$_POST['user'];
checkOK($user);

mysql_connect(localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");
$query="select a.achievement,
      a.description,
      case when pa.player is not null then achievedImagePath else unachievedImagePath end as imagePath
 from achievements a
      left outer join playerachievements pa on (pa.achievement = a.achievement and pa.player = '$user')";
$result=mysql_query($query);

$num=mysql_numrows($result);

mysql_close();

$i=0;
while ($i < $num) {
    $name=mysql_result($result,$i,"achievement");
    $imagepath=mysql_result($result,$i,"imagePath");
    $desc=mysql_result($result,$i,"description");
    $shortDesc = substr($desc, 0, $maxDesc);
    if (strlen($desc) > $maxDesc)
    {
        $shortDesc .= "...";
    }

    echo "
    <span class=\"achievement\">
        <img src=\"$imagepath\"\>
        <div class=\"name\">$name</div>
        <div ext:qtip=\"$desc\" class=\"description\">$shortDesc</div>

    </span>";

    $i++;

    if ($i != $num && $i % 5 == 0) {
        echo "</div><div>";
    }
}

?>

</div>
</div>
</body>
</html>