gradephd/save.php at master · AJHacker/gradephd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
<html>
<?php
    session_start();
    $user       = $_SESSION['verifiedUser'];
    //Make Sure User is Logged in
    if (!$user) {
        header("Location: https://gradephd.herokuapp.com/login.php?error=Please Login First");
        exit();
    }
    $final= $_SESSION['final'];
    $class= $_SESSION['class'];
    $misc1name = $_SESSION['misc1name'];
    $misc2name = $_SESSION['misc2name'];
    $misc3name = $_SESSION['misc3name'];


    $abbrev=array(
        'HW' => 'hw',
        'Lab' => 'l',
        'Quiz' => 'q',
        'Test' => 't',
        'Final' => 'f',
        $misc1name=>'misc1',
        $misc2name=>'misc2',
        $misc3name=>'misc3'
        );

    $sql = "UPDATE $class SET ";
    foreach ($final as $name) {
        $item=str_replace(" ","_",$name);
        if ($_POST[$item]===null) continue;
        $s=explode(" ",$name);
        $a=$s[0];
        if (count($s)==2) $b=$s[1];
        else $b="";
        $sql.=$abbrev[$a]."".$b."=";
        $sql .= $_POST[$item].", ";
    }
    $sql = rtrim($sql,', ');
    $sql.=" WHERE name = '$user';";
    function pg_connection_string_from_database_url() {
            extract(parse_url($_ENV["DATABASE_URL"]));
            return "user=$user password=$pass host=$host dbname=" . substr($path, 1);
        }

    $db = pg_connect(pg_connection_string_from_database_url());
    echo $sql."<br>";
    pg_query($db,$sql);
    echo pg_last_error();

    $class=str_replace("0xDEADBEEF","-",$class);
    header("Location: https://gradephd.herokuapp.com/plot.php?class=$class");
?>

</html>