HEX
Server: LiteSpeed
System: Linux s1049.use1.mysecurecloudhost.com 4.18.0-477.27.2.lve.el8.x86_64 #1 SMP Wed Oct 11 12:32:56 UTC 2023 x86_64
User: xedaptot (3356)
PHP: 8.3.31
Disabled: NONE
Upload Files
File: /home/xedaptot/naniguide.com/deals/controllers/like.php
<?php 

require '../core.php';

if ($_SERVER['REQUEST_METHOD'] == 'POST'){

    if (isset($_GET['action']) && $_GET['action'] == 'like') {

        $item_id = clearGetData($_POST['item']);
        $user_id = clearGetData(getClientIp());
        $rating = 'like';

        $state = $connect->prepare("SELECT * FROM likes WHERE rating = :rating AND user = :user AND item = :item");
        $state->execute(array(
            ':item' => $item_id,
            ':user' => $user_id,
            ':rating' => $rating
        ));

        $result = $state->fetch();

        if ($result == false) {

            $statment = $connect->prepare("INSERT INTO likes (id,item,user,rating) VALUES (null, :item, :user, :rating)");

            $statment->execute(array(
                ':item' => $item_id,
                ':user' => $user_id,
                ':rating' => $rating
            ));

        }else{

            exit();
            
        }

    }

    if (isset($_GET['action']) && $_GET['action'] == 'deslike') {

        $item_id = clearGetData($_POST['item']);
        $user_id = clearGetData(getClientIp());
        $rating = 'deslike';

        $state = $connect->prepare("SELECT * FROM likes WHERE rating = :rating AND user = :user AND item = :item");
        $state->execute(array(
            ':item' => $item_id,
            ':user' => $user_id,
            ':rating' => $rating
        ));

        $result = $state->fetch();

        if ($result == false) {

            $statment = $connect->prepare("INSERT INTO likes (id,item,user,rating) VALUES (null, :item, :user, :rating)");

            $statment->execute(array(
                ':item' => $item_id,
                ':user' => $user_id,
                ':rating' => $rating
            ));

        }else{

            exit();
            
        }

    }

}

?>