<?
// Viewed.php
// Richard A. Knox
// www.thewebcamsite.net


include "db_connection.php";   //Database connection 
?>
<?php
$dblink = mysql_connect($dbhostname,$dbusername, $dbpassword) OR DIE ("Unable to connect to database! Please try again later.");
mysql_select_db($dbname, $dblink);

// Get the ID number from the end of the ace.php?id=2
$id=$_GET['id'];
$searchIP = mysql_escape_string( $_SERVER['REMOTE_ADDR'] );

// query the database
$query = "SELECT * FROM wcviewed_ip WHERE camid = ($id) LIMIT 0, 30 ";

$result = mysql_query($query,$dblink);

// Testing the results
while ($row=mysql_fetch_row($result))
        {
            if( $row[1]==$searchIP )
            {
                if ($row[3] != date('Y-m-d'))
                {
                // update the database.
            $sql =    "UPDATE
                        `wcviewed_ip`
                    SET
                        `lastdate`=CURDATE()
                    WHERE
                        `ip_bin`=INET_ATON('$searchIP')";
                        
                        $result = mysql_query($query,$dblink);
                        
                        @mysql_unbuffered_query( $sql, $dblink )
            or die( mysql_errno($dblink) . ' - ' . mysql_error($dblink) );
            
// This is where we update the count in the main webcam database.

        $query2 = "SELECT * FROM wcdatabase WHERE id = ($id) LIMIT 0, 30 ";

        $result2 = mysql_query($query2,$dblink);

        $row2 = mysql_fetch_assoc($result2);

        $row2["viewed"]++;
    
        $viewed = $row2["viewed"];

        $query2 = "UPDATE wcdatabase SET viewed = ($viewed) where id = ($id)";

        $result2 = mysql_query($query2, $dblink); 
        return;
                                
                }
                else
                {
                return;
                }
        
        
        }
        
}
       
// Not in the Database, time to insert.
        $sql =    "INSERT INTO
                    `wcviewed_ip`
                    ( `camid`, `ip_bin`, `ip`, `lastdate`)
                    VALUES
                    ( '$id', INET_ATON('$searchIP'), '$searchIP', NOW())";
                    @mysql_unbuffered_query( $sql, $dblink )
            or die( mysql_errno($dblink) . ' - ' . mysql_error($dblink) );
            
            $query2 = "SELECT * FROM wcdatabase WHERE id = ($id) LIMIT 0, 30 ";

        $result2 = mysql_query($query2,$dblink);

        $row2 = mysql_fetch_assoc($result2);

        $row2["viewed"]++;
    
        $viewed = $row2["viewed"];

        $query2 = "UPDATE wcdatabase SET viewed = ($viewed) where id = ($id)";

        $result2 = mysql_query($query2, $dblink); 
       
   

        
?>

// ...

// Get the ID number from the end of the ace.php?id=2
// BAD --> $id=$_GET['id']; replace this with:
$id = intval( $_GET['id'] );

// ...