/creategame.php

 <?php
    include 'lib/applicationlib.php';
    PageHelper::$PageTitle = "Challenge Player";
    PageHelper::AddScript( "scripts/index.js");    
    if(isset( $_POST['id']))
    {
        $id = mysql_real_escape_string($_POST['id']);
        $user = Application::GetCurrentUser();
        
        
        $gameid = MySql::CreateGame( $id, $user->ID );
        
        PageHelper::Redirect( "canvasgame.php?id=$gameid");
        return;
    }
    
    PageHelper::Render( function() {
    
        $user = Application::GetCurrentUser();
    ?>
<div class="centered-content">
    
    <?
        
    $query = "SELECT * FROM userpass WHERE id != $user->ID";
    $result = mysql_query( $query );
    while( $row = mysql_fetch_array($result))
    {
    ?>
    <div>
        <form action="creategame.php" method="POST">            
            <?=$row['user']?>
            <input type="hidden" name="id" value="<?=$row['id']?>"/>
            <input type="submit" value="Challenge"/>
        </form>
    </div>
    
    <?
    }
    ?>
</div>

  <?      
    });
?>