Saving data to db from javascript

Asked Oct 14 '17 at 17:19

Active Oct 16 '17 at 09:35

Viewed 289 times

How can i save a javascript variable into MYSQL database? In particular i want to save a score of a game, when it ends. See the code below:

function lastScore(num){
    document.getElementById('lastscore').textContent = num;
}


function saveScore(){
    xmlhttp = new XMLHttpRequest();
    xmlhttp.open("GET","saveScore.php?s="+player.score,false);
    xmlhttp.send(null);
    document.getElementById("endgame").innerHTML = xmlhttp.responseText;
}

PHP

<?php
include('server.php');

$s =  $_GET['s'];
$db = mysqli_connect( ...MY DATA...);

$query = "INSERT INTO scores (name, score) VALUES ('$username' , '$s')";
mysqli_query($db, $query);
?>

Can you tell me what's wrong? what should i do to be able to insert player.score as argument into MYSQL database? Thanks

edited Oct 15 '17 at 09:31

alexander.polomodov

5,396
14
39
46

asked Oct 14 '17 at 17:19

Giacomo Pellicci

I don't see where do you pass value to 'player.score' variable. – sskoko Oct 14 '17 at 17:22
in xmlhttp.open( ... ) isn't it @sskoko ? – Giacomo Pellicci Oct 14 '17 at 17:25
Are you getting any error messages? – S. Walker Oct 14 '17 at 17:27
You are trying to pass variable player.score, but you never assigned any value to that variable. – sskoko Oct 14 '17 at 17:27
No error message when this code should trigger @S.Walker – Giacomo Pellicci Oct 14 '17 at 17:28
@sskoko i assign value to it in other part of my js which is bigger than what i've posted here – Giacomo Pellicci Oct 14 '17 at 17:28
But you never pass it to saveScore function. – sskoko Oct 14 '17 at 17:31
passing it as argument i get this error in chrome console: `[Deprecation] Synchronous XMLHttpRequest on the main thread is deprecated because of its detrimental effects to the end user's experience. For more help, check https://xhr.spec.whatwg.org/.` which is correspondant to the xmlhttp.open line – Giacomo Pellicci Oct 14 '17 at 17:34
If you are not in a protected environment, this code is subject to sql injection. Also, the response to a send is an async by default. I don't see where you have taken that into account. – Bindrid Oct 14 '17 at 17:44
can you give me some sample code to realize it? i'm not interested into security at the moment – Giacomo Pellicci Oct 14 '17 at 17:49

Saving data to db from javascript

0 Answers0