Fixed a bug where URLs with question marks could not be submitted -- need to make sure data is safe still.
This commit is contained in:
parent
4ab3f8ba08
commit
a1c0043c73
1 changed files with 12 additions and 3 deletions
|
@ -1,4 +1,5 @@
|
||||||
<?php
|
<?php
|
||||||
|
header("Access-Control-Allow-Origin: *");
|
||||||
$conf = json_decode(file_get_contents('../../conf/wia.conf'));
|
$conf = json_decode(file_get_contents('../../conf/wia.conf'));
|
||||||
|
|
||||||
include_once('../lib/database.php');
|
include_once('../lib/database.php');
|
||||||
|
@ -14,9 +15,17 @@ if(filter_var($url,FILTER_VALIDATE_URL) == false || !preg_match('{http://}',$url
|
||||||
die('{"message":"Malformed URL."}');
|
die('{"message":"Malformed URL."}');
|
||||||
|
|
||||||
if($db->connect_error) die('{"message":"No Database Connection."}');
|
if($db->connect_error) die('{"message":"No Database Connection."}');
|
||||||
|
|
||||||
$db->query("INSERT INTO wia_links (url,text,status) VALUES ('$url','$title',0)");
|
$query = $db->prepare("INSERT INTO wia_links (url,text,status) VALUES (?,?,0)");
|
||||||
if($db->error) die('{"message":"Could Not Add."}');
|
$query->bind_param('ss',$url,$title);
|
||||||
|
$query->execute();
|
||||||
|
if($db->error) {
|
||||||
|
$error = array(
|
||||||
|
'message' => 'Could Not Add.',
|
||||||
|
'error' => $db->error,
|
||||||
|
);
|
||||||
|
die(json_encode($error));
|
||||||
|
}
|
||||||
|
|
||||||
$db->close();
|
$db->close();
|
||||||
?>
|
?>
|
||||||
|
|
Loading…
Reference in a new issue