view tb.php @ 87:249de0d66f8c

Data Access: Ajout d'un helper pour nettoyer les données
author Franck Deroche <franck@defr.org>
date Sun, 02 Dec 2018 21:31:19 +0100
parents e43b756548b4
children
line wrap: on
line source
<?php
	header("Content-Type: text/xml");
	echo("<?xml version='1.0' encoding='utf-8'?>");
	require_once("classes.php");
	$Req = new Requete();
	$id = $_GET['id'];
	$Data->Query("SELECT * FROM Messages WHERE num_mess=$id");
	$post_infos = $Data->GetRow();
	$titre = $Req->Get('title', 'POST', 'Undefined');
	$url = $Req->Get('url', 'POST', '#');
	$info = $Req->Get('__info', 'POST', -1);
	if($info == 1) {
		$error = 0;
		$message = "Some informations";
	} else if($url == "#") {
		$error = 1;
		$message = "The url field is needed for trackback to do something usefull !";
	} else if($post_infos === 0) {
		$error = 1;
		$message = "There's no post with this id";
	} else {
		$excerpt = $_POST['excerpt'];
		$DateComment = gmdate("Y-m-d H:i:s");
		if(strlen($excerpt) > 255) $excerpt = substr($excerpt, 0, 255) . "...";
		$Data = new DataAccess();
		$Data->Query("INSERT INTO Commentaires(MessId, Auteur, Adresse, Comment, DateComment, isTrackback)
					VALUES({$id}, '{$titre}', '{$url}', '{$excerpt}', '{$DateComment}', 1)");
		$Data->Query("UPDATE Mess SET NbCommentaires=NbCommentaires+1 WHERE num_mess={$id}");
		$error = 0;
		$excerpt = htmlentities(urlencode(substr(strip_tags($post_infos['Message']), 0, 252) . "...")
	}
	
	echo "<response>
 <error>$error</error>
 <message>$message</message>
 <engine>Dual Blog custom made PHP script</engine>
 <encoding>UTF-8</encoding>
 <blog>Dual Blog</blog>
 <title>{$post_infos['Titre']}</title>
 <url>" . BLOG_URL . "/posts/{$post_infos['num_mess']}</url>
 <excerpt>$excerpt</excerpt>
</response>";
?>