diff --git a/public/API/queries/comments.php b/public/API/queries/comments.php index cb3f33a..3b3d46b 100644 --- a/public/API/queries/comments.php +++ b/public/API/queries/comments.php @@ -15,7 +15,8 @@ $commentField = new ObjectType([ ], ]); -function comments($article, $conn) { +function comments($article, $conn) +{ $response = []; $result = $conn->query("SELECT * FROM comments WHERE article='$article'"); while ($row = $result->fetch_assoc()) { @@ -29,37 +30,36 @@ function comments($article, $conn) { array_push($response, $commentElement); } return $response; - } -function newComment($conn, $article, $name, $email, $comment, $hCaptchaResponse) { +function newComment($conn, $article, $name, $email, $comment, $hCaptchaResponse) +{ require "./lib/config.php"; $data = array( 'secret' => $secretkey, 'response' => $hCaptchaResponse ); $client = new Client(); - + $response = $client->post("https://hcaptcha.com/siteverify", [ "form_params" => $data ]); - - $responseData = json_decode($response->getBody()); - if(! $responseData->success) { - return "Failed to verify Captcha"; - $article = $conn->escape_string($article); - $name = $conn->escape_string($name); - $email = $conn->escape_string($email); - $comment = $conn->escape_string($comment); - - $sql = "INSERT INTO comments (name, email, comment, article) VALUES ('$name', '$email', '$comment', '$article')"; - - if ($conn->query($sql) === TRUE) { - return "OK"; - } else { - return "Error: " . $sql . "
" . $conn->error; - } + $responseData = json_decode($response->getBody()); + if (!$responseData->success) { + return "Failed to verify Captcha"; } -} \ No newline at end of file + $article = $conn->escape_string($article); + $name = $conn->escape_string($name); + $email = $conn->escape_string($email); + $comment = $conn->escape_string($comment); + + $sql = "INSERT INTO comments (name, email, comment, article) VALUES ('$name', '$email', '$comment', '$article')"; + + if ($conn->query($sql) === TRUE) { + return "OK"; + } else { + return "Error: " . $sql . "
" . $conn->error; + } +}