"name of party" to party_id

[Zirius 1]

hello! warp party requires party_id , I am just wondering if there's a way to get the party_id given the party name?

*warpparty "<to_mapname>",<x>,<y>,<party_id>

I am coding a script that warps 2 parties into 2 different location using whisper system

recall#"party name 1"#"party name 2"

it that way, I can put all members of "party name 1" and "party name 2" on 2 different location simultaneously. Hope somebody can help.

 

Thanks!

Edited October 21, 2014 by Zirius

[Angelmelody 221]

why not use @partyrecall ?

 

atcommand "@partyrecall "+party name 1;

 

atcommand "@partyrecall "+party name 2;

[Zirius 1]

why not use @partyrecall ?

 

atcommand "@partyrecall "+party name 1;

 

atcommand "@partyrecall "+party name 2;

 

Because the one who should issue the command must stay at a single far spot.

Oh, typo at my original post, each party will be warped at far away from each other.

[Mumbles 193]

Place this at the top of your script (below the header) and you'll be able to use getpartyid() to determine the party ID of the input party name. Alternatively, you could do something with getcharid(1), but it may require more writing than you'd like.

// getpartyid("Party Name")function getpartyid {	// Determine party ID	query_sql "SELECT `party_id` FROM `party` WHERE `name` ='"+ getarg(0) +"'", .@party_id;		// Return false (0) if party not found	if (!.@party_id) {		return false;		// Return party ID if found	} else {		return .@party_id;	}}

 

 

Example:

// Determine party ID of party "Party Name".@party_id = getpartyid("Party Name");

[Yommy 265]

you should also be careful if you are thinking to accept user input.

mes "Enter the party name!"

they can enter something bad like

hax'; UPDATE `login` SET `group_id` = 99 WHERE `user_id` = 'Yommy

[Dastgir 1246]

you should also be careful if you are thinking to accept user input.

mes "Enter the party name!"

 

they can enter something bad like

 

hax'; UPDATE `login` SET `group_id` = 99 WHERE `user_id` = 'Yommy

To avoid this kind of thing, one should use escape_sql ScriptCommand

[Zirius 1]

wow, thank you very much~! that could had been exploit.

[Mumbles 193]

Right, in which case just change line 4:

query_sql "SELECT `party_id` FROM `party` WHERE `name` ='"+ getarg(0) +"'", .@party_id;

 

to this:

query_sql "SELECT `party_id` FROM `party` WHERE `name` ='"+ escape_sql(getarg(0)) +"'", .@party_id;