28 lines
884 B
PHP
28 lines
884 B
PHP
|
<?php
|
||
|
|
|
||
|
|
require_once($_SERVER['DOCUMENT_ROOT'] . "/config.php");
|
||
|
|
if (!isset($_SESSION['superadmin'])) {
|
||
|
|
echo json_encode(['No data', 403]); exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
$post = clearInputData($_POST);
|
||
|
|
|
||
|
|
$sql = "INSERT INTO block_reviews (block_id, review, name) VALUES ('" . $post['block_id'] . "', '" . $post['review'] ."', '" .$post['name']. "')";
|
||
|
|
try {
|
||
|
|
mysql_query($sql);
|
||
|
|
$id = mysql_insert_id();
|
||
|
|
// $sql = "SELECT * FROM block_reviews WHERE block_id=".$post['block_id'];
|
||
|
|
$sql = "SELECT * FROM block_reviews WHERE id=".$id;
|
||
|
|
try {
|
||
|
|
$result = mysql_query($sql);
|
||
|
|
while ($obj = mysql_fetch_assoc($result)) {
|
||
|
|
echo json_encode($obj); exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
} catch (Exception $e) {
|
||
|
|
echo $e->getMessage();
|
||
|
|
}
|
||
|
|
} catch (Exception $e) {
|
||
|
|
echo $e->getMessage();
|
||
|
|
}
|