wish_remove.list.inc.php

A website for keeping track of wishes for your character in WoW Users are able to make a user accoun

<?php
include "conn.inc.php";

echo "You need to select one of your wishes from <a href=\"alt_list.php\">here</a>, or here:<br />";

echo "<form action=\"wish_remove.fw.php\" method=\"post\">";
echo "<select name=\"wishid\">";

//get wishid array for current user
$s_session_user_logged = addslashes($_SESSION['user_logged']);
$widquery = "SELECT wishid FROM wishes INNER JOIN alts ON wishes.wishaltid = alts.altid AND alts.owner = '" .$s_session_user_logged."' ORDER BY wishes.wishaltid;";
$widresult = mysql_query($widquery) or die(mysqli_error());

while ($widarray = mysql_fetch_array($widresult))
{
	$aquery = "SELECT altname, altrealm FROM alts INNER JOIN wishes ON wishes.wishid = '" .addslashes($widarray[wishid]) ."' AND alts.altid = wishes.wishaltid";
	$aresult = mysql_query($aquery) or die(mysql_error());
	$arow = mysql_fetch_assoc($aresult);
	
	$dquery = "SELECT dungeonname FROM dungeons INNER JOIN wishes ON dungeons.dungeonid = wishes.wishdungeonid AND wishes.wishid = '" .addslashes($widarray[wishid]) ."';";
	$dresult = mysql_query($dquery) or die(mysql_error());
	$drow = mysql_fetch_assoc($dresult);
	
	$hcquery = "SELECT heroic FROM wishes WHERE wishid = '". addslashes($widarray[wishid]) ."';";
	$hcresult = mysql_query($hcquery) or die(mysql_error());
	$hcrow = mysql_fetch_assoc($hcresult);
		
	if ($hcrow[heroic] == 1)
		{ $hc = " (hc)"; }
	else
		{ $hc = ""; }
	
	echo "<option value=\"" .htmlentities($widarray[wishid]). "\">" .htmlentities($arow[altname])." (".htmlentities($arow[altrealm]).") - " .htmlentities($drow[dungeonname]).$hc. "</option>";
}
	
echo "</select>";
echo "<input type=\"submit\" name=\"submit\" value=\"Go\">";
echo "</form>";
?>