<?
$username="root";
$password="******";
$database="mc_server";

function checkOK($field)
{
if (eregi("\r",$field) || eregi("\n",$field)){
die("Invalid Input!");
}
}

$user=$_POST['user'];
checkOK($user);

mysql_connect(localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");
$query="SELECT * FROM playerachievements WHERE player='$user'";
$result=mysql_query($query);

$num=mysql_numrows($result);

mysql_close();

echo "<b><center>Database Output</center></b><br><br>";

$i=0;
while ($i < $num) {
$player=mysql_result($result,$i,"player");
$achievement=mysql_result($result,$i,"achievement");
$count=mysql_result($result,$i,"count");

echo "<b>$player</b><br>$achievement: $count<hr><br>";

$i++;
}

?>