Mercurial > bms / file revision

<?php
require_once('config.php');

#Connect to the database
$connect = mysqli_connect(DBASE_HOST, DBASE_USER, DBASE_PASS, DBASE_NAME);
if (! $connect) {
        die('Connect Error (' . mysqli_connect_errno() . ') ' . mysqli_connect_error());
}
mysqli_set_charset($connect, "utf8" );
$sql = "";

if (isset($_POST['beername']) && isset($_POST['beercode']) && isset($_POST['beeruuid'])) {
	$sql  = "UPDATE `mon_ispindels` SET ";
	$sql .=    "beername='" . mysqli_real_escape_string($connect, $_POST['beername']);
	$sql .= "', beercode='" . mysqli_real_escape_string($connect, $_POST['beercode']);
	$sql .= "', beeruuid='" . mysqli_real_escape_string($connect, $_POST['beeruuid']);
	$sql .= "' WHERE uuid='" . $_POST['uuid'] . "';";
} else if (isset($_POST['mode'])) {
	$sql  = "UPDATE `mon_ispindels` SET mode='" .$_POST['mode'] . "' WHERE uuid='" . $_POST['uuid'] . "';";
} else {
	syslog(LOG_NOTICE, "cmd_ispindel: unknown POST");
}

$result = mysqli_query($connect, $sql);
if (! $result) {
	syslog(LOG_NOTICE, "cmd_ispindel: result: ".mysqli_error($connect));
}
echo $result;
?>