Mercurial > bms / file diff

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/www/cmd_ispindel.php	Fri May 01 16:37:31 2020 +0200
@@ -0,0 +1,29 @@
+<?php
+require_once('config.php');
+
+#Connect to the database
+$connect = mysqli_connect(DBASE_HOST, DBASE_USER, DBASE_PASS, DBASE_NAME);
+if (! $connect) {
+        die('Connect Error (' . mysqli_connect_errno() . ') ' . mysqli_connect_error());
+}
+mysqli_set_charset($connect, "utf8" );
+$sql = "";
+
+if (isset($_POST['beername']) && isset($_POST['beercode']) && isset($_POST['beeruuid'])) {
+	$sql  = "UPDATE `mon_ispindels` SET ";
+	$sql .=    "beername='" . mysqli_real_escape_string($connect, $_POST['beername']);
+	$sql .= "', beercode='" . mysqli_real_escape_string($connect, $_POST['beercode']);
+	$sql .= "', beeruuid='" . mysqli_real_escape_string($connect, $_POST['beeruuid']);
+	$sql .= "', og_gravity=0 WHERE uuid='" . $_POST['uuid'] . "';";
+} else if (isset($_POST['mode'])) {
+	$sql  = "UPDATE `mon_ispindels` SET mode='" .$_POST['mode'] . "' WHERE uuid='" . $_POST['uuid'] . "';";
+} else {
+	syslog(LOG_NOTICE, "cmd_ispindel: unknown POST");
+}
+
+$result = mysqli_query($connect, $sql);
+if (! $result) {
+	syslog(LOG_NOTICE, "cmd_ispindel: result: ".mysqli_error($connect));
+}
+echo $result;
+?>