function redirectToFile($file) { $db = new DownloadsDB(); $ipaddress = $db->escape($_SERVER['REMOTE_ADDR']); $agent = $db->escape($_SERVER['HTTP_USER_AGENT']); $id = $db->escape($file['id']); $path = $db->escape($file['path']); $db->query("INSERT INTO requests (dateRequested, IPAddress, requestedFileID, userAgent) VALUES (NOW(), '{$ipaddress}', {$id}, '{$agent}')"); header("Status: 302 Found"); header("Location: {$path}"); }
<?php if (!$_POST || !$_POST['package'] || !$_POST['version'] || !$_POST['path']) { print "MISSING PARAMETERS"; } else { include "DownloadsDB.php"; $db = new DownloadsDB(); if (!$db->isLoggedIn()) { print "INVALID CREDENTIALS"; return; } $package = $db->escape($_POST['package']); $version = $db->escape($_POST['version']); $path = $db->escape($_POST['path']); $db->query("INSERT INTO releases (package, version, path, dateAdded) VALUES ('{$package}', '{$version}', '{$path}', NOW())"); } print "SUCCESS";