hacker_marc/spamhasi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Finish Opfer Page

Browse Source
This commit is contained in:
marc-go
2026-04-22 18:50:08 +02:00
parent 1f5ada7bfa
commit 8d0245c769
10 changed files with 559 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
api/opfer/delete.php Normal file
View File

@@ -0,0 +1,31 @@
<?php
require "../api.php";
$api = new spamhasiApi();
if (!$api->checkAuth()) {
header("Location: /index.html?status=500&error=Unauthorized");
exit;
}
if (!isset($_POST["id"])) {
die('{"status":500, "error":"Missing fields"}');
}
$id = intval($_POST["id"]);
$db = $api->getDB();
$sql = "DELETE FROM opfer WHERE id = :id";
$stmt = $db->prepare($sql);
$sql_exec = $stmt->execute([':id' => $id]);
if ($sql_exec) {
header("Location: /index.html?status=200");
}else{
header("Location: /index.html?status=500&error=SQL Error");
}
exit;
?>

44
api/opfer/edit.php Normal file
View File

@@ -0,0 +1,44 @@
<?php
require "../api.php";
ini_set("display_errors", 1);
ini_set("display_startup_errors", 1);
error_reporting(E_ALL);
$api = new spamhasiApi();
if (!$api->checkAuth()) {
header("Location: /index.html?status=500&error=Unauthorized");
exit;
}
if (!isset($_POST["id"]) || !isset($_POST["name"]) || !isset($_POST["mail"]) || !isset($_POST["number"])) {
die('{"status":500, "error":"Missing fields"}');
}
$name = htmlspecialchars($_POST["name"]);
$mail = htmlspecialchars($_POST["mail"]);
$number = intval(htmlspecialchars($_POST["number"]));
echo $number;
$id = intval(htmlspecialchars($_POST["id"]));
if (isset($_POST["enabled2"])) {
$enabled = 1;
}else{
$enabled = 0;
}
$db = $api->getDB();
$sql = "UPDATE opfer SET name = :name, mail = :mail, number = :number, status = :status WHERE id = :id";
$stmt = $db->prepare($sql);
$sql_exec = $stmt->execute([':name' => $name, ':mail' => $mail, ':number' => $number, ':status' => $enabled, ':id' => $id]);
if ($sql_exec) {
header("Location: /index.html?status=200");
}else{
header("Location: /index.html?status=500&error=SQL Error");
}
exit;
?>

2
api/opfer/info.php
View File

@@ -19,7 +19,7 @@ $sql = "SELECT * FROM opfer WHERE id = :id";
$stmt = $db->prepare($sql);
$stmt->execute([':id' => $id]);
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
$result = $stmt->fetch(PDO::FETCH_ASSOC);
if ($result) {
$json["opfer"] = $result;