gama.io/UnPS-API
1
0
Fork 0
mirror of https://github.com/gamaio/UnPS-API.git synced 2024-12-22 02:02:40 +00:00
Code Issues Projects Releases Wiki Activity

Remove addslashes from api (again.. check 6d43aa8972)

Browse Source
This commit is contained in:
Arctic Code 2013-07-24 20:48:51 -05:00
parent 5611ba16b9
commit 4250d7f6df
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
api.backend.php
View File

@ -38,7 +38,6 @@ class api{
$canshort = $row['short']; $canshort = $row['short'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Link Shorten', '$canshort', '$link')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Link Shorten', '$canshort', '$link')";
@ -74,7 +73,6 @@ class api{
$canshort = $row['short']; $canshort = $row['short'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Short Link Delete', '$canshort', '$link')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Short Link Delete', '$canshort', '$link')";
@ -106,7 +104,6 @@ class api{
$canshort = $row['short']; $canshort = $row['short'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Report Link', '$canshort', '$link')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Report Link', '$canshort', '$link')";
@ -128,7 +125,6 @@ class api{
$canimg = $row['image']; $canimg = $row['image'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Upload', '$canimg', '$name')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Upload', '$canimg', '$name')";
@ -196,8 +192,7 @@ class api{
if($row = $result->fetch_assoc()){ if($row = $result->fetch_assoc()){
$canImg = $row['image']; $canImg = $row['image'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Delete', '$canImg', '$imgName')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Delete', '$canImg', '$imgName')";
@ -221,7 +216,6 @@ class api{
$canImg = $row['image']; $canImg = $row['image'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Edit', '$canImg', '$imgName/$private')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Image Edit', '$canImg', '$imgName/$private')";
@ -265,7 +259,6 @@ class api{
$canReg = $row['reg']; $canReg = $row['reg'];
$name = $row['name']; $name = $row['name'];
$name = addslashes($name);
$ip = $_SERVER['REMOTE_ADDR']; $ip = $_SERVER['REMOTE_ADDR'];
$apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Register User', '$canReg', '$username')"; $apisql = "INSERT INTO `apiuse` (time, name, apikey, ip, type, allowed, misc) VALUES (NOW(), '$name', '$apikey', '$ip', 'Register User', '$canReg', '$username')";