getInput(); if (!isset($input["name"]) || !isset($input["text"])) { $api->answer(400, [ "error" => "missing_fields", "error_text" => "Some fields are missing" ], true); return; } $html_allowed = $api->getSetting("allow_html"); if ($html_allowed == "true") { $name = $input["name"]; $text = $input["text"]; }else{ $name = htmlspecialchars($input["name"]); $text = htmlspecialchars($input["text"]); } $date = date("Y-m-d H:i:s"); $approve = $api->getSetting("approve_entrys") == "true" ? true : false; if ($approve) { $status = 0; }else{ $status = 1; } // Insert Into Database $command = "INSERT INTO entrys (name, text, date, status) VALUES (:name, :text, :date, :status)"; $api->dbCommand($command, false, true, [ ":name" => $name, ":text" => $text, ":date" => $date, ":status" => $status ]); $api->answer(200);