<?php

$time = time();

$numDay = date('d', $time);
$numMonth = date('m', $time);
$strMonth = date('F', $time);
$numYear = date('Y', $time);
$firstDay = mktime(0,0,0,$numMonth,1,$numYear);
$daysInMonth = cal_days_in_month(0, $numMonth, $numYear);
$dayOfWeek = date('w', $firstDay);
?>
<table>
<caption><? echo($strMonth); ?></caption>
<thead>
<tr>
	<th abbr="Sunday" scope="col" title="Sunday">S</th>
	<th abbr="Monday" scope="col" title="Monday">M</th>
	<th abbr="Tuesday" scope="col" title="Tuesday">T</th>
	<th abbr="Wednesday" scope="col" title="Wednesday">W</th>
	<th abbr="Thursday" scope="col" title="Thursday">T</th>
	<th abbr="Friday" scope="col" title="Friday">F</th>
	<th abbr="Saturday" scope="col" title="Saturday">S</th>

</tr>
</thead>
<tbody>
<tr>
<?
if(0 != $dayOfWeek) { echo('<td colspan="'.$dayOfWeek.'"> </td>'); }
for($i=1;$i<=$daysInMonth;$i++) {

	if($i == $numDay) { echo('<td id="today">'); } else { echo("<td>"); }
	echo($i);
	echo("</td>");
	if(date('w', mktime(0,0,0,$numMonth, $i, $numYear)) == 6) {
		echo("</tr><tr>");
	}
}
?>
</tr>
</tbody>
</table>

Usually I’d show the jQuery script first, but this time I’m detailing the PHP callback script.

<?php
//You'll need a MySQL conn
require('mysql.php');

//You need to make sure that a rating AND item ID were sent to the script
if(isset($_POST['rate'])  && isset($_POST['id'])) {

	//Declare 'em
	$rating = $_POST['rate'];
	$bar_id = $_POST['id'];
	$ip_addr = $_SERVER['REMOTE_ADDR'];

	//Check if the IP address has all ready voted, deny if he or she has.
	$check_result = mysql_query('SELECT id FROM ratings WHERE item_id = "'.$bar_id.'" AND ip_addr = "'.$ip_addr.'"');
	if(!mysql_num_rows($check_result)){

		//All clear, insert into MySQL, if insert fails, don't echo; if insert succeed echo true
		$sql = mysql_query('INSERT INTO ratings SET item_id = "'.$bar_id.'", ip_addr = "'.$ip_addr.'", weight = "'.$rating.'"');
		if(!$sql) {
			//echo 'false';
		} else {
			echo 'true';
		}
	} else{
		//echo 'false';
	}
}
?>

This will insert a new row into our ‘ratings’ table which can be used to calculate an items rating. You could, if you wanted, just make ‘rating’ a new field on your MySQL table and have each button click +1 or -1 the value, but there is no way to prevent abuse from a specific IP address.

Now for the front-end mix of PHP and jQuery to get your rating system up.

<span class="thanks" style="display:none">Thanks for rating!</span>
<a class="awesome">Awesome</a>
<a class="sucks">Not For Me.</a>

These are the two buttons. Put them where ever, do what you need just be sure to place the following jQuery script anywhere after.

<?php
	//This script assumes you have pulled the item data from the MySQL and the data is a var called row which is an array

	$ip_addr = $_SERVER['REMOTE_ADDR'];
	$check_result = mysql_query('SELECT id FROM ratings WHERE item_id = "'.$row['id'].'" AND ip_addr = "'.$ip_addr.'"');
	if(mysql_num_rows($check_result) > 0){	?>

			<script>
				$('.thanks').show();
				$('.awesome').hide();
				$('.sucks').hide();
			</script>

	<?php } ?>
	<script>
		$('.awesome').click( function() {

		$.post("rate_callback.php", {rate: 1, item: "<?php echo $row['id'] ?>"}, function(data){
		if(data.length >0) {
			$('.thanks').show();
			$('.awesome').hide();
			$('.sucks').hide();
		} else {
			//Well they rated all ready so don't do anything, they shouldn't even have gotten this far.
		}
		});							

		});

		$('.sucks').click( function() {
				$('.thanks').show();
				$('.awesome').hide();
				$('.sucks').hide();

		});

		</script>

And that’s it! The script checks to see if the user’s IP address has rated the item before, if it has jQuery hides the rate buttons and shows the “Thanks” message. I originally built this within a while() statement, if  anyone needs the script modified or needs to know how I did it, just drop a comment.

Here is a breakdown on how other sites user achievements and ways you can implement achievements into your site

• Kongregate is a Flash game portal with an achievement API developers can tap into. Users sign up, play games, win achievements within different Flash games and earn badges. Each badge is worth so many points and the more points you earn the higher level your account becomes. Kongregate even links certain achievements to GameStop rewards for real-life bonuses.
• GetGlue is a social “check-in” service based around what you are watching or reading. GetGlue is essentially a great marketing plug for television networks, movie company’s, and book publishers. GetGlue calls it’s achievements “stickers”, which you earn by checking into a show, movie, or book so many times or on a certain day. For example, if you check into a television show on the airing of a new show, chances are you’ll earn a sticker to show off you “were there.”
• Foursquare is another social “check-in” based based around where you are; are you at Starbucks? Or are you at Chili’s? You earn points by checking in which helps you beat friends in a weekly “battle” to see who received the most points.  Achievement’s on Foursquare range from when you check-in to a certain place (like a bar at 2am) or with a lot of people (swarm badge I believe is 150 people) or by adding a “shout” to your check-in (adding “it’s a boy” in a hospital is one achievement.)
• Klout is a service that puts a number to your social influence. In this example, Klout isn’t an engaging social service per se, but provides achievements to user activity. If you visit the site for a few days in a row, you’re awarded. If you try out all the different features, you’re rewarded. As your score goes up, you earn achievements.

From: BusinessMBA.org

On my Kenosha Bar Night project, I use a JS Google Map to provide a visual of all the bars listed. However, when you view a bar’s listing I only use a static Google Map to demonstrate it’s location while using less resources.  That is just for the regular desktop version. For the mobile site I only use static maps to shorten render speeds and provide compatibility. Yes, the market is full of smartphones but not all have the same features, certain aspects of the JS Google Maps may not be supported.  You can still place markers on static maps to illustrate your locations.

Integrate the StreetView Image API to help your visitors get an understanding of the locations surroundings instead of providing the interactive map when it isn’t needed.

W3C released a Geolocation API, which is what browser’s use to get geolocation information.

<script type="text/javascript">

//Do we support geolocation

if (navigator.geolocation) {

    //Get the location, requires callback functions for it's parameters
    navigator.geolocation.getCurrentPosition(displayPosition, errorFunction);
} else {
    alert('It seems like Geolocation, which is required for this page, is not enabled in your browser. Please use a browser which supports it.');
}

// Success callback function
function displayPosition(pos) {
    var lat = pos.coords.latitude;
    var lng = pos.coords.longitude;

    //We'll place the code for getting database data here and more.
}

// Error callback function
function errorFunction(pos) {
    alert('Error!');
}
</script>

We invoke getCurrentPosition with two callback functions, one on success and one on error.  In the displayFunction we declare the latitude and longitude variables. This function is also where we will put the code to grab locations from the database. Since PHP is a server-side language and JavaScript a client-side language we cannot put PHP within our JavaScript. We’ll have a different file for the PHP script and grab its contents using some JavaScript. Luckily, there is jQuery and the process is a lot simpler. Place this code within the displayFunction.

//Be sure to add jQuery to your site! Or it won't work
<script src="http://code.jquery.com/jquery-latest.js"></script>

//Uses jQuery to send an HTTP POST, then grabs the return data.
$.post("library/mobile_callback.php", {lat: ""+mylat+"", lng: ""+mylong+"", dst: 1 }, function(data){
		if(data.length >0) {
					$('#locations').html(data);
		}
	});

The code uses HTTP POST to send our parameters to the PHP script and will return an HTML unordered list that will be placed into the div field with the id of locations.  The PHP script access a database table which has the fields id, name, lat, lng. It takes the POST parameters and queries up to 20 results.

<? require('mysql.php'); 

	//Need to have Latitude and Longitude
	if($_POST["lat"] && $_POST["lng"]) {

		//Declare variables, make sure we have a distance
		$lat = $_POST['lat'];
		$lng = $_POST['lng'];
		$dst = (empty($_POST['dst']) ? 1 : $_POST['dst'];

		//The query. I did a search for the math equation, this is first one I found from a math site.
		$sql = 'SELECT *, ( 3959 * acos( cos( radians('.$lat.') ) * cos( radians( lat ) ) * cos( radians( lng ) - radians('.$lng.') ) + sin( radians('.$lat.') ) * sin( radians( lat ) ) ) ) AS distance
FROM locations HAVING distance < '.$dst.' ORDER BY distance';

		echo '<ul id="locations_list">';

		$result = mysql_query($sql);
			while($row = mysql_fetch_array($result)) {
				echo '<li>'.$row['name'].'</a></li>';
			}

		echo '</ul>';
	}
?>

And that’s it! If you want to add a Google Map, just add this code in the displayFunction, for myself I put it under the $.post() call.

	 var gCoords = lat + ', ' + long;
	 var gMap = '<img src="http://maps.googleapis.com/maps/api/staticmap?center=' + gCoords;
	 var gMap2 = '&zoom=14&size=320x200&markers=color:red%7Clabel:Your%20Location%7C' + gCoords + '&sensor=false" />';
	$('#map_canvas').html(gMap+gMap2);

Request

GET https://www.googleapis.com/plus/v1/people/{userId}

Response

{
  "kind": "plus#person",
  "id": "118051310819094153327",
  "displayName": "Chirag Shah",
  "url": "https://plus.google.com/118051310819094153327",
  "image": {
    "url": "https://lh5.googleusercontent.com/-XnZDEoiF09Y/AAAAAAAAAAI/AAAAAAAAYCI/7fow4a2UTMU/photo.jpg"
  }
}

For now the Google+ API covers People, Activites, and Commets.  Google has released Google+ API Libraries for various languages that can be downloaded along with starter scripts.

<a rel="author" href="https://plus.google.com/101530880977549569019/" title="Google+ Profile">

mysql_real_escape_string()

mysql_real_escape_string() should always be used on data being placed into your SQL database.  The function places backslashes before certain characters. That means if someone tried to insert an apostrophe ( ‘ ) into your SQL a backslash would be added ( \’ )  so the apostrophe would be recognized as a character, not part of the script.

$input = 'I'll be darned, this would have broke it.';
$data = mysql_real_escape_string($input);

htmlentities()

htmlentities() is one of my best friends. I learned about XSS early when I was a developer when a hacker posted JavaScript into a field and was able to snatch my admin cookie and deface my site. See, mysql_real_escape_string() may prevent SQL Injections but not XSS. htmlentities() will convert characters to their html entities. This will turn < or > into &lt; or &gt; preventing JavaScript from being inserted and executed on viewing.

$input = '<script>javascript:alert("Alert");</script>'
$data = htmlentities($input);
//Returns &lt;script&gt;

str_replace()

At first I did not use htmlentities() but made my own function using str_replace() to replace characters to their HTML entities. I had one array containing the specific characters to be converted and the other array contained the HTML entities.  This can be safer as htmlentities() does not convert all characters to HTML entities.

$html = array("'", '"', '<', '>');
$entities = array(''', '"', '&lt;', '&gt;');
$data = str_replace($html, $entities, $input);

strtr()

strtr() is essentially the same as str_replace() but is faster. Also, instead using two arrays you can use just one array that uses pairs .

$html = array('<' => '&lt;', '>' => '&gt;');
$data = strtr($input, $html);