<?php
// Settings
$tablename = "rarefinder";

// Initialize DB
$mysqli = new mysqli('localhost', 'my_user', 'my_password', 'my_db');
if ($mysqli->connect_error) {
    die('Database Error (' . $mysqli-connect_errno . ') ' . $mysql->connect_error);
}

$data = url_decode($_GET['str']);
$public = $mysqli->real_escape_string($_GET['public']);

$allDataOrganized = explode(' - ', $data);
$coords = str_replace("[", "", $allDataOrganized[0]);
$coords = str_replace("]", "", $allDataOrganized[0]);
$coords = str_replace(" ", "", $allDataOrganized[0]);
$coords = str_replace("x=", "", $allDataOrganized[0]);
$coords = str_replace("y=", "", $allDataOrganized[0]);
$coords = str_replace("z=", "", $allDataOrganized[0]);
$coordX = $mysqli->real_escape_string(explode(',', $coords)[0]);
$coordY = $mysqli->real_escape_string(explode(',', $coords)[1]);
$coordZ = $mysqli->real_escape_string(explode(',', $coords)[2]);
$itemName = $mysqli->real_escape_string($allDataOrganized[1]);
$time = date("H:i:s d-m-Y", $mysqli->real_escape_string($allDataOrganized[2]));

$mysqli->query("INSERT INTO $tablename (ID, name, coordX, coordY, coordZ, timeRead, time, public) VALUES (null, '" . $itemName . "', '" . $coordX . "', '" . $coordY . "', '" . $coordZ . "', '" . $time . "', '" . $mysqli->real_escape_string($allDataOrganized[2]) . "', '" . $public . "')");