pk/palm-paste
1
0
Fork 0
mirror of https://github.com/pikami/palm-paste.git synced 2024-11-27 22:25:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Pastes now get an unique text id and can only be accessed by it

Browse Source
This commit is contained in:
pikami 2016-06-11 16:32:49 +00:00
parent 5d1d051760
commit 01448c5d65
4 changed files with 40 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
NewestPastes.php
View File

@ -8,7 +8,7 @@
while($row = $stmt->fetch(PDO::FETCH_ASSOC)) { while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
$title = $row['title']; $title = $row['title'];
if(strlen($title)>25)$title = substr($title,0,25)."..."; if(strlen($title)>25)$title = substr($title,0,25)."...";
echo "<a href=\"".$row['id']."\" class=\"list-group-item\">".$title."</a>"; echo "<a href=\"".$row['uid']."\" class=\"list-group-item\">".$title."</a>";
} }
?> ?>
</div> </div>

12
ViewPaste.php
View File

@ -1,12 +1,14 @@
<div class="panel panel-default"> <div class="panel panel-default">
<div class="panel-body"> <div class="panel-body">
<?php <?php
if(isset($id)){ if(isset($uid)){
include "config/config.php"; include "config/config.php";
$stmt = $conn->query('SELECT * FROM pastes WHERE id='.$id); $stmt = $conn->query('SELECT * FROM pastes WHERE uid="'.$uid.'"');
$result = $stmt->fetch(PDO::FETCH_ASSOC); if($result = $stmt->fetch(PDO::FETCH_ASSOC)){
echo "<h1>".$result["title"]."</h1>"; echo "<h1>".$result["title"]."</h1>";
echo "<textarea class=\"form-control\" rows=\"5\" disabled=\"true\">".$result["text"]."</textarea>"; echo "<textarea class=\"form-control\" rows=\"5\" disabled=\"true\">".$result["text"]."</textarea>";
}
else echo "Paste does not exist";
} else echo "Error: id not set"; } else echo "Error: id not set";
?> ?>
</div> </div>

6
index.php
View File

@ -31,11 +31,9 @@
if (isset($_GET["page"])){ if (isset($_GET["page"])){
if($_GET["page"] == "create"){ if($_GET["page"] == "create"){
include "NewPaste.php"; include "NewPaste.php";
} else if (is_numeric($_GET["page"])) {
$id = $_GET["page"];
include "ViewPaste.php";
} else { } else {
echo "The page does not exist"; $uid = $_GET["page"];
include "ViewPaste.php";
} }
} else { } else {
include "NewPaste.php"; include "NewPaste.php";

34
post.php
View File

@ -1,5 +1,30 @@
<?php <?php
include "config/config.php"; include "config/config.php";
function generate_uid () {
global $conn;
$name = '';
// We start at N retries, and --N until we give up
$tries = 500;
do {
// Iterate until we reach the maximum number of retries
if ($tries-- == 0) throw new Exception('Gave up trying to find an unused name', 500);
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$name = '';
for ($i = 0; $i < 8; $i++) {
$name .= $chars[mt_rand(0, 25)];
// $chars string length is hardcoded, should use a variable to store it?
}
// Check if a paste with the same uid does already exist in the database
$q = $conn->prepare('SELECT COUNT(uid) FROM pastes WHERE uid = (:name)');
$q->bindValue(':name', $name, PDO::PARAM_STR);
$q->execute();
$result = $q->fetchColumn();
// If it does, generate a new uid
} while($result > 0);
return $name;
}
if(isset($_POST["type"])){ if(isset($_POST["type"])){
//===New_Paste===// //===New_Paste===//
if($_POST["type"]=="paste" && isset($_POST["text"])){ if($_POST["type"]=="paste" && isset($_POST["text"])){
@ -8,15 +33,16 @@ if(isset($_POST["type"])){
$text = $_POST["text"]; $text = $_POST["text"];
if(isset($_POST["title"])) if(isset($_POST["title"]))
$title = $_POST["title"]; $title = $_POST["title"];
$uid = generate_uid();
/* Add paste to database */ /* Add paste to database */
$stmt = $conn->prepare("INSERT INTO pastes (title,text) $stmt = $conn->prepare("INSERT INTO pastes (uid,title,text)
VALUES (:tit, :txt)"); VALUES (:uid, :tit, :txt)");
$stmt->bindParam(':uid', $uid);
$stmt->bindParam(':tit', $title); $stmt->bindParam(':tit', $title);
$stmt->bindParam(':txt', $text); $stmt->bindParam(':txt', $text);
$stmt->execute(); $stmt->execute();
$id = $conn->lastInsertId();
$conn = null; //close connection to database $conn = null; //close connection to database
header("Location: ".$id); header("Location: ".$uid);
die(); die();
} }
} }