Example #1
0
         $values['item'] = $_POST['item'];
         $values[$person] = $_POST[$person];
         $values['phone'] = $_POST['phone'];
         $values['email'] = $_POST['email'];
         $values['building'] = $_POST['building'];
         $values['room'] = $_POST['room'];
         $values['description'] = $_POST['description'];
         $result = false;
         if (isset($_POST['report'])) {
             $result = insert_item($dbc, $values, $page_status);
         } else {
             $values['id'] = $_POST['id'];
             $result = update_item($dbc, $values);
         }
         # Check for any errors
         $errors = validate_values($dbc, $values);
         if ($result != false && $errors == 0) {
             # If the record was inserted successfully, redirect to the item information page
             Header("Location: /item.php?id={$result}");
         } else {
             /*
             echo 'The following errors occurred: ';
             echo "<div style='margin-left:5em'>";
             foreach($errors as $e) {
             	echo $e;
             }
             echo '</div>';
             */
         }
     }
 }
//xml database file
$xmlFile = 'native.flashradio.ratings.xml';
//settings file
$settings = 'native.flashradio.rating.settings.xml';
//generate unique user fingerprint
if (!isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
    $user = md5($_SERVER['REMOTE_ADDR']);
} else {
    $user = md5($_SERVER['HTTP_X_FORWARDED_FOR']);
}
if (isset($_POST['song']) && isset($_POST['name']) && isset($_POST['set'])) {
    $song = $_POST['song'];
    $name = $_POST['name'];
    $set = $_POST['set'];
    if (file_exists($settings)) {
        if (validate_values($song, $name, $set, $settings)) {
            if (file_exists($xmlFile)) {
                update_xml($user, $song, $name, $set, $xmlFile);
                echo "update";
            } else {
                create_xml($user, $song, $name, $set, $xmlFile);
                echo "create";
            }
        } else {
            echo "not valid";
        }
    } else {
        echo "settings not found";
    }
}
function validate_values($song, $name, $set, $settings)