46 lines
1.2 KiB
PHP
46 lines
1.2 KiB
PHP
<?php
|
|
|
|
header("Access-Control-Allow-Origin: *");
|
|
|
|
require 'creds.php';
|
|
|
|
$banmessage = "<span class='message'>you have been banned from posting on rautafarmi!</span>";
|
|
$backbutton = "<br><a href='/rautafarmi'>[ back ]</a>";
|
|
|
|
if(isset($_POST['message'])) {
|
|
$username = mysqli_real_escape_string($mysqli, $_POST['username']);
|
|
$message = mysqli_real_escape_string($mysqli, $_POST['message']);
|
|
$imgurl = mysqli_real_escape_string($mysqli, $_POST['imgurl']);
|
|
|
|
if(empty($message)) {
|
|
die("<span class='message'>cannot post empty message!</span>".$backbutton);
|
|
}
|
|
|
|
if($_SERVER["HTTP_X_FORWARDED_FOR"] == "37.139.53.81") {
|
|
die($banmessage."<p>Reason: spam</p>.$backbutton");
|
|
}
|
|
|
|
if($username == "Crytoinimi") {
|
|
die($banmessage."<p>Reason: spam</p>.$backbutton");
|
|
}
|
|
if($username == "Tookdono") {
|
|
echo "<p>success</p>";
|
|
echo "<p>done</p>";
|
|
header("Location: index.php");
|
|
exit();
|
|
}
|
|
|
|
$mysqli->query("INSERT INTO posts (username, message, ip, imageurl) VALUES('" . $username . "', '" . $message . "', '" . $_SERVER["HTTP_X_FORWARDED_FOR"] . "', '" . $imgurl . "')");
|
|
//$stmt->bind_param("sis", $username, $message);
|
|
//$stmt->execute();
|
|
|
|
echo "<p>success</p>";
|
|
|
|
header("Location: index.php");
|
|
} else {
|
|
echo "<p>fail! no message!</p>";
|
|
}
|
|
|
|
|
|
?>
|