pokemonDB/pokemon_info.php at master · samchamper/pokemonDB · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
<?php

include('connectionData.txt');

$conn = mysqli_connect($server, $user, $pass, $dbname, $port)
or die('Error connecting to MySQL server.');

?>

<html>
<head>
  <title>Pokemon Information Query</title>
  </head>

  <body bgcolor="white">


  <hr>


<?php

$pmon = $_POST['pmon'];

$pmon = mysqli_real_escape_string($conn, $pmon);
// this is a small attempt to avoid SQL injection
// better to use prepared statements

$query = "SELECT p1.pokemon_id, p1.name, p1.type_1 AS type1, p1.type_2 AS type2, p1.hit_points, p1.attack, p1.defense, p1.special_attack, p1.special_defense, p1.speed, p1.legendary, p2.name AS evolves_to, p3.name AS second_evolution, p4.name AS previous_evolution, p5.name AS second_previous_evolution FROM pokemon p1 LEFT JOIN pokemon p2 on p1.pokemon_id=p2.evolves_from_id LEFT JOIN pokemon p3 on p2.pokemon_id=p3.evolves_from_id LEFT JOIN pokemon p4 on p4.pokemon_id=p1.evolves_from_id LEFT JOIN pokemon p5 on p5.pokemon_id=p4.evolves_from_id WHERE p1.name LIKE ";
$query = $query."'".$pmon."' OR p1.pokemon_id LIKE ";
$query = $query."'".$pmon."';";

$query2 = "SELECT loc_name FROM pokemon p JOIN pokemon_at_location pl on p.pokemon_id=pl.mon_id JOIN location l on l.loc_id=pl.location_id WHERE p.name LIKE ";
$query2 = $query2."'".$pmon."' OR p.pokemon_id LIKE '$pmon';";

$query3 = "SELECT trainer_id, loc_name, loc_type, level FROM pokemon p JOIN trainer_has_pokemon tp ON tp.pokemon_num=p.pokemon_id JOIN trainer t on t.trainer_id=tp.trainer_num JOIN location l on l.loc_id=t.route WHERE p.name LIKE ";
$query3 = $query3."'".$pmon."' OR p.pokemon_id LIKE '$pmon';";

?>

<p>
The following queries were submitted to the pokemon database:
<p>
<?php
print $query;
?>
<p>
<?php
print $query2;
?>
<p>
<?php
print $query3;
?>

<hr>
<p>

<?php
$pmon_name = "";
$result = mysqli_query($conn, $query)
or die(mysqli_error($conn));

print "<pre>";
if(! mysqli_num_rows($result))
{
	$res_str = "There are no pokemon matching your query! ";
	$res_str = $res_str."'".$pmon."' was not found in the database. Please try a different name/pokedex number!\n";
    print $res_str;
}
else
{
while($row = mysqli_fetch_array($result, MYSQLI_BOTH))
  {
	$pmon_name = $row[name];
    print "\n";
	print "'".$pmon."' was found in the database, with the following information:\n\n";
    print "Pokedex number: $row[pokemon_id]\nName: $row[name]\nType: $row[type1] $row[type2]\n";
	print "Stats:\n Hit points $row[hit_points]\n Attack: $row[attack]\n Defense: $row[defense]\n Special Attack: $row[special_attack]\n Special Defense: $row[special_defense]\n Speed: $row[speed]\n\n";
    if($row[evolves_to])
	{
		print "$row[name] evolves into $row[evolves_to]";
		if($row[second_evolution])
		{
			print " which in turn evolves into $row[second_evolution]";
		}
		print ".\n";
	}
	if($row[previous_evolution])
	{
		print "$row[name] evolves from $row[previous_evolution]";
		if($row[second_previous_evolution])
		{
			print " which in turn evolves from $row[second_previous_evolution]";
		}
		print ".\n";
	}

	if($row[legendary] == "TRUE")
	{
		print "$row[name] is a legendary pokemon. Approach with caution.\n";
	}
  }

print "\n\n";
$result = mysqli_query($conn, $query2)
or die(mysqli_error($conn));

if(! mysqli_num_rows($result))
{
	print "There are no routes along which $pmon_name can be captured!";
}
else
{
	print "$pmon_name can be captured on the following route(s):";
}
while($row = mysqli_fetch_array($result, MYSQLI_BOTH))
  {
    print "\n";
    print " $row[loc_name]";
  }


print "\n\n";
$result = mysqli_query($conn, $query3)
or die(mysqli_error($conn));

if(! mysqli_num_rows($result))
{
	print "There are no trainers in possession of a $pmon_name!";
}
else
{
	print "The following trainers have a $pmon_name:";
}
while($row = mysqli_fetch_array($result, MYSQLI_BOTH))
{
    print "\n";
    print " Trainer $row[trainer_id], located in $row[loc_name], has a level $row[level] $pmon_name";
	if($row[loc_type] == "Town")
	{
		print ", and is a gym leader";
	}
	print ".";
}
}
?>


<?php
print "</pre>";
mysqli_free_result($result);
mysqli_close($conn);
?>
<p>
<hr>
</body>
</html>