EVE Technology Lab

Hi guys,

Noob coder and pulling my hair out so appreciate any help.

I'm trying to import my asset api into a mysql database using php. I've done a bit of research and tried some code but to no avail.

$url="https://api.eveonline.com/char/AssetList.xml.aspx?keyID=xxxxx&vCode=xxxxx";

//Begins connecting to eve api

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, false);

//Create XML Parser
$xml = new SimpleXMLElement(curl_exec($ch));
curl_close($ch);

//Parse the file

    foreach ($xml->xpath('//row') as $row) {
       {            
            mysql_query('INSERT into player_inventory (player_name, item_id, qty) Values ('$user', $row['typeid'], $row['quantity']') or die(mysql_error());      

        }
    }

$user comes from a cookie already stored on the webpage.

Many

I've never written a single line of python sorry :(

I did have a characterID variable on the end of the URL but removed it by accident when pasting into here.

I get the following error:

Parse error: syntax error, unexpected T_VARIABLE in /home/bigfatw/public_html/td/charimport.php on line 20

This relates to the following line:

mysql_query('INSERT into player_inventory (player_name, item_id, qty) Values ('$user', $row['typeid'], $row['quantity']') or die(mysql_error());

assume this is something to do with the '$user'

Thanks again for your help. Appreciate it.

Desmont is correct but your error is likely even before you hit that problem. Try using double quotes for the entire SQL statement leaving single quotes inside where necessary.

mysql_query("INSERT into player_inventory (player_name, item_id, qty) Values ($user, $row['typeID'], $row['quantity'])") or die(mysql_error());

Try again - edited to add in missing right parenthesis.

A successful programmer is also a good debugger.

Managed to fix it.

Thanks for your help guys. I was close....


mysql_query("INSERT into player_inventory (player_name, item_id, qty) Values ($user, $row['typeID'], $row['quantity'])") or die(mysql_error());

had to change the array variables to the following

mysql_query("INSERT into player_inventory (player_name, item_id, qty) Values ($user, '$row[typeID]', '$row[quantity]')") or die(mysql_error());

PDO is the way to go.

Sure, in /this/ case sql injection isn't too likely. But the ability to use bind variables in your SQL is a very good thing. And it helps to stay in practive.