From 4269f91653baacde509669607b3bff71ad831584 Mon Sep 17 00:00:00 2001 From: Lncvrt Date: Fri, 2 Jan 2026 19:51:30 -0700 Subject: [PATCH] Make reportChatroomMessage.php work with new db method --- database/reportChatroomMessage.php | 30 +++++++++++++++++++----------- 1 file changed, 19 insertions(+), 11 deletions(-) diff --git a/database/reportChatroomMessage.php b/database/reportChatroomMessage.php index 79df474..a803756 100644 --- a/database/reportChatroomMessage.php +++ b/database/reportChatroomMessage.php @@ -8,23 +8,30 @@ $reason = $post['reason'] ?? ''; $token = $post['token'] ?? ''; $username = $post['username'] ?? ''; -if (!preg_match('/^[ a-zA-Z0-9!@#\$%\^&\*\(\)_\+\-=\[\]\{\};\':",\.<>\/\?\\\\|`~]+$/', $reason)) { - exitWithMessage(json_encode(["success" => false])); -} +if (!preg_match('/^[ a-zA-Z0-9!@#\$%\^&\*\(\)_\+\-=\[\]\{\};\':",\.<>\/\?\\\\|`~]+$/', $reason)) exit; -$conn = newConnection(); +$conn0 = newConnection(0); +$conn1 = newConnection(1); -$stmt = $conn->prepare("SELECT * FROM users WHERE token = ? AND username = ?"); -$stmt->bind_param("ss", $token, $username); +$stmt = $conn0->prepare("SELECT * FROM users WHERE username = ? LIMIT 1"); +$stmt->bind_param("s", $username); $stmt->execute(); $result = $stmt->get_result(); $row = $result->fetch_assoc(); -if (!$row) exit; +if ($result->num_rows != 1) exit; $stmt->close(); $user_id = $row["id"]; -$stmt = $conn->prepare("SELECT id FROM chats WHERE userId != ? AND deleted_at = 0 AND id = ? LIMIT 1"); +$stmt2 = $conn1->prepare("SELECT * FROM userdata WHERE id = ? AND token = ? LIMIT 1"); +$stmt2->bind_param("is", $user_id, $token); +$stmt2->execute(); +$result2 = $stmt2->get_result(); +$row2 = $result2->fetch_assoc(); +if ($result2->num_rows != 1) exit; +$stmt2->close(); + +$stmt = $conn1->prepare("SELECT id FROM chats WHERE userId != ? AND deleted_at = 0 AND id = ? LIMIT 1"); $stmt->bind_param("ii", $user_id, $id); $stmt->execute(); $res = $stmt->get_result(); @@ -32,7 +39,7 @@ $stmt->close(); if ($res->num_rows < 0) exit; -$stmt = $conn->prepare("SELECT id FROM chatroom_reports WHERE chatId = ? AND userId = ? LIMIT 1"); +$stmt = $conn1->prepare("SELECT id FROM chatroom_reports WHERE chatId = ? AND userId = ? LIMIT 1"); $stmt->bind_param("ii", $id, $user_id); $stmt->execute(); $res = $stmt->get_result(); @@ -43,8 +50,9 @@ if ($res->num_rows > 0) exit; $time = time(); $reason = base64_encode($reason); -$stmt = $conn->prepare("INSERT INTO chatroom_reports (chatid, userId, reason, timestamp) VALUES (?, ?, ?, ?)"); +$stmt = $conn1->prepare("INSERT INTO chatroom_reports (chatid, userId, reason, timestamp) VALUES (?, ?, ?, ?)"); $stmt->bind_param("iisi", $id, $user_id, $reason, $time); $stmt->execute(); -$conn->close(); \ No newline at end of file +$conn0->close(); +$conn1->close(); \ No newline at end of file