load.php 1.1 KB

12345678910111213141516171819202122232425262728
  1. <?php
  2. session_start();
  3. $http_host = $_SERVER['HTTP_HOST'];
  4. include("../functions.php");
  5. $proto = getProtocol();
  6. $con = startdb('rw');
  7. $server = "$proto$http_host";
  8. // Get parameters
  9. /*$t = mysqli_real_escape_string($con, urldecode($_GET['t'])); // table
  10. $f = mysqli_real_escape_string($con, urldecode($_GET['f'])); // field (column)
  11. $i = mysqli_real_escape_string($con, urldecode($_GET['i'])); // id
  12. $c = mysqli_real_escape_string($con, urldecode($_GET['c'])); // content (translation)
  13. $l = mysqli_real_escape_string($con, urldecode($_GET['l'])); // language
  14. $n = mysqli_real_escape_string($con, urldecode($_GET['n'])); // translator name*/
  15. $t = urldecode($_GET['t']); // table
  16. $f = urldecode($_GET['f']); // field (column)
  17. $i = urldecode($_GET['i']); // id
  18. $c = urldecode($_GET['c']); // content (translation)
  19. $l = urldecode($_GET['l']); // language
  20. $n = urldecode($_GET['n']); // translator name
  21. // TODO: Validate parameters
  22. $q_string = "INSERT INTO translation (username, tab, field, eid, lang, text) VALUES ('$n', '$t', '$f', '$i', '$l', '$c');";
  23. mysqli_query($con, $q_string);
  24. ?>