Advertisement
Guest User

Untitled

a guest
Feb 22nd, 2019
242
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.85 KB | None | 0 0
  1. <?php
  2. //SQLi apsaugos funkcija
  3.  
  4. function extendedAddslash(array $params): array{
  5.  
  6. foreach ($params as &$var) {
  7. is_array($var) ? ExtendedAddslash($var) : $var = addslashes($var);
  8. unset($var);
  9. }
  10.  
  11. return $params;
  12.  
  13. }
  14.  
  15. //Doumenų gavimas
  16.  
  17. $submissionData = @$_POST;
  18.  
  19. //Duomenų patikra
  20.  
  21. if (! isset($submissionData["submission_id"])) {
  22. die("Invalid submission data! 'submission_id' not exists.")
  23.  
  24.  
  25. //Databazės duomenys
  26.  
  27. $db_host = "localhost";
  28. $db_username = '123';
  29. $db_password = '123';
  30. $db_name = '123';
  31.  
  32. //Prisijungimas į databazę
  33.  
  34. mysql_connect($db_host, $db_username, $db_password) or die(mysql_error()); //Connect your MYSQL database
  35. mysql_select_db($db_name); //Select your corresponding database where your table is located 'table_name'
  36.  
  37. //Patikrinti ar jau yra tokia informacija
  38.  
  39. $query = "SELECT * FROM `table_name` WHERE `submission_id` = '" . $submissionData["submission_id"] . "'";
  40. $sqlsearch = mysql_query($query);
  41. $resultcount = mysql_numrows($sqlsearch);
  42.  
  43. //Jei duomenys jau yra databazėje, juos atnaujinti
  44.  
  45. if ($resultcount > 0) {
  46.  
  47. mysql_query("UPDATE `table_name` SET
  48. `name` = '" . $submissionData["name"] . "',
  49. `email` = '" . $submissionData["email"] . "',
  50. `message` = '" . $submissionData["message"] . "'
  51. WHERE `submission_id` = '" . $submissionData["submission_id"] . "'") or die(mysql_error());
  52.  
  53. } else {
  54.  
  55. mysql_query("INSERT INTO `table_name` (submission_id, formID, name, email, message)
  56. VALUES ('" . $submissionData["submission_id"] . "',
  57. '" . $submissionData["formID"] . "',
  58. '" . $submissionData["name"] . "',
  59. '" . $submissionData["email"] . "',
  60. '" . $submissionData["message"] . "' ) ") or die(mysql_error());
  61.  
  62. }
  63. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement