GMWeb/www/traducir/load.php

<?php
    session_start();
    $http_host = $_SERVER["HTTP_HOST"];
    include("../functions.php");
    $con = startdb("rw");

    // Get parameters
    $t = mysqli_real_escape_string($con, urldecode($_GET["t"])); // table
    $f = mysqli_real_escape_string($con, urldecode($_GET["f"])); // field (column)
    $i = mysqli_real_escape_string($con, urldecode($_GET["i"])); // id
    $c = mysqli_real_escape_string($con, urldecode($_GET["c"])); // content (translation)
    $l = mysqli_real_escape_string($con, urldecode($_GET["l"])); // language
    $n = mysqli_real_escape_string($con, urldecode($_GET["n"])); // translator name

    if (strlen($t) == 0 || strlen($f) == 0 || 
      is_numeric($i) == false || strlen($c) == 0 || 
      ($l != 'en' && $l != 'eu') || strlen($n) == 0){
         http_response_code(400); // Bad request
    }
    else{
        $q_string = "INSERT INTO translation (username, tab, field, eid, lang, text) VALUES ('$n', '$t', '$f', '$i', '$l', '$c');";
        mysqli_query($con, $q_string);
    }
?>