Solved Can you fix this?

[tibianoespanola]

When i click on level or magic level i got this error:
Deprecated: mysql_escape_string(): This function is deprecated; use mysql_real_escape_string() instead. in C:\xampp\htdocs\ranks.php on line 48

<?php
/*
  Copyright (C) 2007 - 2009  Nicaw

  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
  the Free Software Foundation; either version 2 of the License, or
  (at your option) any later version.

  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License along
  with this program; if not, write to the Free Software Foundation, Inc.,
  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
include ("include.inc.php");
$ptitle="Highscores - $cfg[server_name]";
include ("header.inc.php");

$SQL = AAC::$SQL;
?>
<div id="content">
  <div class="top">Highscores</div>
  <div class="mid">
  <select name="sort" onchange="self.location.href=this.value">
  <?php
  if (empty($_GET['sort'])) $_GET['sort'] = 'census';

  $options = array_merge(array('census', 'level', 'maglevel'), $cfg['skill_names']);

  foreach ($options as $skill) {
  if ($skill == $_GET['sort'])
  $selected = ' selected="selected"';
  else
  $selected = '';
  echo '<option value="ranks.php?sort='.$skill.'"'.$selected.'>'.ucfirst($skill).'</option>';
  }
  echo '</select>';

  if (!isset($_GET['page']) || $_GET['page'] < 0) $p = 0;
  else $p = (int) $_GET['page'];

  if ($_GET['sort'] == 'level' || $_GET['sort'] == 'maglevel') {
  if($SQL->isTable('groups')) {
  $query = 'SELECT groups.access, groups.id, players.name, players.level, players.maglevel, players.experience FROM players LEFT OUTER JOIN groups ON players.group_id = groups.id ORDER BY `'.mysql_escape_string($_GET['sort']).'` DESC LIMIT '.$cfg['ranks_per_page']*$p.', '.$cfg['ranks_per_page'].';';
  } else {
  $query = 'SELECT 0 AS access, players.name, players.level, players.maglevel, players.experience FROM players ORDER BY `'.mysql_escape_string($_GET['sort']).'` DESC LIMIT '.$cfg['ranks_per_page']*$p.', '.$cfg['ranks_per_page'].';';
  }
  $key = $_GET['sort'];
  }elseif (in_array($_GET['sort'],$cfg['skill_names'])) {
  if($SQL->isTable('groups')) {
  $query = 'SELECT groups.access, a1.* FROM (SELECT players.group_id, players.name, player_skills.value FROM players, player_skills WHERE players.id = player_skills.player_id AND player_skills.skillid = '.array_search($_GET['sort'], $cfg['skill_names']) .') AS a1 LEFT OUTER JOIN groups ON a1.group_id = groups.id ORDER BY `value` DESC LIMIT '.$cfg['ranks_per_page']*$p.', '.$cfg['ranks_per_page'].';';
  } else {
  $query = 'SELECT 0 AS access, a1.* FROM (SELECT players.group_id, players.name, player_skills.value FROM players, player_skills WHERE players.id = player_skills.player_id AND player_skills.skillid = '.array_search($_GET['sort'], $cfg['skill_names']) .') AS a1 ORDER BY `value` DESC LIMIT '.$cfg['ranks_per_page']*$p.', '.$cfg['ranks_per_page'].';';
  }
  $key = 'value';
  }elseif ($_GET['sort'] == 'census') {
  $SQL->myQuery('SELECT players.sex, COUNT(players.id) as number FROM `players` GROUP BY players.sex');
  $total = 0;
  while ($a = $SQL->fetch_array()) {
  $genders[$a['sex']] = $a['number'];
  $total += $a['number'];
  }
  $gender_names = array(0 => 'Female',1 => 'Male');
  echo '<p><h2>Gender</h2>';
  echo '<table style="font-weight: bold">';
  foreach (array_keys($genders) as $gender)
  echo '<tr><td>'.$gender_names[$gender].'</td><td>'.percent_bar($genders[$gender],$total).'</td><td>('.$genders[$gender].')</td></tr>';
  echo '</table></p>';
  $SQL->myQuery('SELECT players.vocation, COUNT(players.id) as number FROM `players` GROUP BY players.vocation');
  $total = 0;
  while ($a = $SQL->fetch_array()) {
  $vocations[$a['vocation']] = $a['number'];
  $total += $a['number'];
  }
  echo '<p><h2>Vocations</h2>';
  echo '<table style="font-weight: bold">';
  foreach (array_keys($vocations) as $vocation)
  echo '<tr><td>'.$cfg['vocations'][$vocation]['name'].'</td><td>'.percent_bar($vocations[$vocation],$total).'</td><td>('.$vocations[$vocation].')</td></tr>';
  echo '</table></p>';

  }else {$error = "Invalid sort argument";}

  if (isset($query)) {
  ?>
  <input type="button" value="&lt;&lt;" onclick="self.window.location.href='ranks.php?sort=<?php echo urlencode($_GET['sort'])?>&amp;page=<?php echo $p-1?>'"/>
  <b>Statistics page: <?php echo $p+1?></b>
  <input type="button" value="&gt;&gt;" onclick="self.window.location.href='ranks.php?sort=<?php echo urlencode($_GET['sort'])?>&amp;page=<?php echo $p+1?>'"/>
  <table style="width:100%">
  <tr class="color0"><td style="width:30px">#</td><td style="width:150px"><b>Name</b></td><td style="width:60px"><b><?php echo htmlspecialchars(ucfirst($_GET['sort']))?></b></td></tr>
  <?php
  $SQL->myQuery($query);

  $i = $cfg['ranks_per_page']*$p;
  while($a = $SQL->fetch_array())
  if ($a['access'] < $cfg['ranks_access']) {
  $i++;
  echo '<tr '.getStyle($i).'><td>'.$i.'</td><td><a href="characters.php?player_name='.urlencode($a['name']).'">'.htmlspecialchars($a['name']).'</a></td><td>'.$a[$key].'</td></tr>'."\n";
  }

  }
  ?>
  </table>
  </div>
  <div class="bot"></div>
</div>
<?php include('footer.inc.php');?>

Thanks for your view!

 

[EvulMastah]

Well, you already posted the answer. Just replace the function with the one it tells you to use.

 

[tibianoespanola]

Dude it's black magic for me I'm total zero scripting.

 

[53701688]

just replace ->

mysql_escape_string()

with ->

mysql_real_escape_string()

 

[Schmanky]

i have never seen a more straight-forward error message

 

[tibianoespanola]

@53701688 Thank you master. I'm gonna love and hail you till I die! HAIL! HAIL! HAIL @53701688