adminandClaude Opus 5
210a6c47a8
- incs/db.php: db_verbinden() setzt utf8mb4, strikten sql_mode und schaltet die mysqli-Exceptions von PHP 8.1+ ab, damit die bestehenden "or error(mysqli_error())"-Pruefungen weiter greifen. - db_abfrage/db_zeilen/db_zeile/db_wert mit ?-Platzhaltern (mysqli_execute_query, PHP 8.2). - Alle neun kopierten mysqli_connect/select_db-Stellen nutzen jetzt db_verbinden(). Nur zusammen mit der auf utf8mb4 migrierten Datenbank einsetzbar. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
48 lines
1.5 KiB
PHP
48 lines
1.5 KiB
PHP
<?php
|
|
include_once("constants.php");
|
|
require_once(__DIR__."/db.php");
|
|
function readsettings()
|
|
{
|
|
if(is_file(CONFIG_PATH.CONFIG_FILE))
|
|
{
|
|
include(CONFIG_PATH.CONFIG_FILE);
|
|
if(isset($mysql_server) && isset($mysql_pw) && isset($mysql_db) && isset($mysql_user))
|
|
$ret = "valid";
|
|
else
|
|
$ret = -1;
|
|
}
|
|
else
|
|
$ret = -1;
|
|
|
|
return $ret;
|
|
}
|
|
|
|
|
|
function getUserSetting($dbconn,$setting, $user, $default = 0)
|
|
{
|
|
$qry2 = mysqli_query($dbconn, "SELECT val FROM setting WHERE opt = '".mysqli_real_escape_string($dbconn, $setting)."' AND user_id = '".mysqli_real_escape_string($dbconn, $user)."'") or die(mysqli_error($dbconn));
|
|
if($res = mysqli_fetch_array($qry2))
|
|
$ret = $res[0];
|
|
else
|
|
$ret = $default;
|
|
|
|
return $ret;
|
|
}
|
|
|
|
function updateUserSetting($dbconn,$setting, $value, $user)
|
|
{
|
|
$qry = mysqli_query($dbconn,"SELECT id FROM setting WHERE opt = '".mysqli_real_escape_string($dbconn, $setting)."' AND user_id = '".mysqli_real_escape_string($dbconn, $user)."'") or die(mysqli_error($dbconn));
|
|
if(mysqli_num_rows($qry))
|
|
{
|
|
$res = mysqli_fetch_array($qry);
|
|
mysqli_query($dbconn, "UPDATE setting SET val = '".mysqli_real_escape_string($dbconn, $value)."' WHERE id = ".$res[0]) or die($mysqli_error($dbconn));
|
|
echo "update";
|
|
}
|
|
else
|
|
{
|
|
mysqli_query($dbconn, "INSERT INTO setting SET val = '".mysqli_real_escape_string($dbconn, $value)."', user_id = '".mysqli_real_escape_string($dbconn, $user)."', opt = '".mysqli_real_escape_string($setting)."'") or die(mysqli_error($dbconn));
|
|
}
|
|
}
|
|
|
|
|
|
?>
|