Webbserverprogrammering 1

Show sourcecode

The following files exists in this folder. Click to view.

webbsrvprg/projects/

bacon-egg-pizza.php
cquiz.php
create-account.php
create-account111.php
create-quiz.php
create-quiz2.php
createaccount.php
delete-quiz.php
drop-rps-tables.php
legacy-code-rps.php
legacy-index.php
login.php
logincheck.php
newpassword-verify.php
newpassword.php
potential-code.txt
quiz-db-init.php
quizhub.php
quizhub2.php
results.php
rpsaccount-ajax-user-search.php
rpsaccount.php
rpsbetting-ajax-match-finder.php
rpsbetting.php
rpsbettingleaderboard.php
rpschangepassword.php
rpschangepassword.txt
rpsgame-ajax.php
rpsgame.php
rpsgameresults.php
rpshostnewgame.php
rpshub.php
rpsleaderboard.php
rpslib.php
rpslogin.php
rpsmaininclude.php
rpsproject/
rpsusersearch.php
table-init.php
verification.php

create-quiz2.php

106 lines UTF-8 Windows (CRLF)
<?php require('logincheck.php');
    if(
$_SESSION['isadmin']!=1){
        
header("Location:quizhub.php");
        die;
    }

    echo
'
    <html>
    <h1>Skapa ett quiz!</h1>
    skriv namn och skicka för nytt quiz, sedan namn på fråga och antal svar och därefter svaren och om korrekt och sedan skicka och ett nytt namn på en fråga eller nytt quiz. reset session för att rensa (mest för debugging).
    <form action="" method="POST">
    <table>
        <tr>
            <td>
                namn
            </td>
            <td>
                <input type="text" name="quizname">
            </td>
        </tr>
        <tr><td><input type="submit">
    </table>
    </form>
    '
;
    if(isset(
$_POST['quizname'])){

        
$_SESSION['x']=0;
        
        
$currentquiz htmlentities($_POST['quizname']);
        
$sql "INSERT INTO qlist (qlname) VALUES (?)";
        
$stmt $dbconn -> prepare($sql);
        
$data = [$currentquiz];
        
$stmt -> execute($data);

        
$sql "SELECT * FROM qlist WHERE qlname='$currentquiz'";
        
$stmt $dbconn -> prepare($sql);
        
$stmt -> execute();
        while(
$res $stmt->fetch(PDO::FETCH_ASSOC)){
            
$_SESSION['cqkey'] = $res['listid'];
            echo 
'quiznyckel'.$_SESSION['cqkey'];
        }   
    }

    if(isset(
$_SESSION['cqkey'])){
        echo 
'
        <form action="" method="POST">
            frågans namn: <input type="text" name="questionName">
            antal svar: <input type="number" min="1" name="qamount">
            <input type="submit">
        </form>'
;
        
        
        if(isset(
$_POST['questionName'])){

            
$qname htmlspecialchars($_POST['questionName']);

            
$sql "INSERT INTO qquestions (qlkey, qqname) VALUES (?,?)";
            
$stmt $dbconn -> prepare($sql);
            
$data = [$_SESSION['cqkey'], $qname];
            
$stmt -> execute($data);

            
            echo 
$qname;

            
$sql "SELECT * FROM qquestions WHERE qqname='$qname'";
            
$stmt $dbconn -> prepare($sql);
            
$stmt -> execute();
            while(
$res $stmt->fetch(PDO::FETCH_ASSOC)){
                
$_SESSION['cqqkey'] = $res['questionid'];
                echo 
'frågenyckel'.$_SESSION['cqqkey'];
            }

            echo 
'<br>antal frågor: '.$_POST['qamount'];
            
$_SESSION['x'] = 1;
            echo 
'<form action="" method="POST">';

            
$x=1;
            while (
$x <= $_POST['qamount']){
                echo 
'<br>
                svar'
.$x.': <input type="text" name="'.$x.'">
                1=rätt, 0=fel: <input type="number" min="0" max="1" name="iscorrect'
.$x.'">';
                
$x+=1;
            }
            echo 
'<input type="submit"></form>';
            
$_SESSION['qamount'] = $_POST['qamount'];
        }

        if(isset(
$_POST['1'])){
            echo 
$_SESSION['x'];
            if(
$_SESSION['x']>0){
                
$maxq $_SESSION['qamount'];
                
$x=1;
                
                while(
$x<=$maxq){
                    
$sql "INSERT INTO questionanswers (qqkey, ans, correct) VALUES (?,?,?)";
                    
$stmt $dbconn -> prepare($sql);
                    
$data = [$_SESSION['cqqkey'],htmlentities($_POST[$x]), htmlentities($_POST['iscorrect'.$x])];
                    
$stmt -> execute($data);
                    
$x+=1;
                }
                echo 
'question inserted';
            }
        }
    }
?> 
</html>