include("config.php"); if ($_GET) { $word = $_GET['word']; $word = str_replace("'", "'", $word); $word = str_replace("\"", """, $word); $word = str_replace("<", "<", $word); $word = str_replace(">", ">", $word); $word = str_replace('\\', "\", $word); $word = str_replace("/", "/", $word); $word = trim($word); if ($word==""){ // } else { $ip = $_SERVER['REMOTE_ADDR']; $submitted = submitWord($mysqli, $word, $ip); } } function submitWord($mysqli, $word, $ip) { $sql = " SELECT * FROM tmsBingo WHERE word = '$word' "; $_result = mysqli_query($mysqli, $sql) or die('Fert! I died!'); $_row_cnt = $_result->num_rows; if( $_row_cnt > 0 ) { return; } // submit info $sql = " INSERT INTO tmsBingo (`word`, `ip`) VALUES ('$word', '$ip') "; $_result = mysqli_query($mysqli, $sql) or die('Fert! I died!'); $_row_cnt = $_result->num_rows; return "
Your suggestion has been added!
"; } ?>