From 8d736439404ba63e2d41f42f17ba7b60ba3d664e Mon Sep 17 00:00:00 2001
From: wibyweb <49052850+wibyweb@users.noreply.github.com>
Date: Tue, 20 Jun 2023 23:17:08 -0400
Subject: [PATCH] Add files via upload

---
 html/insert/form.html.php |  2 +-
 html/insert/insert.php    | 16 ++++++++++------
 2 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/html/insert/form.html.php b/html/insert/form.html.php
index 741cbda..d0c4e38 100755
--- a/html/insert/form.html.php
+++ b/html/insert/form.html.php
@@ -78,7 +78,7 @@
         <textarea id="enable" name="enable"></textarea> 
       </div> 
       <div>
-        <label for="updatable">updatable (0 for no, or integer value 1-6, 1 is default):</label>   
+        <label for="updatable">updatable (0 for no, or integer value 1-6):</label>   
 
         <textarea id="updatable" name="updatable"></textarea> 
       </div> 
diff --git a/html/insert/insert.php b/html/insert/insert.php
index 8ce85e6..5c6b111 100755
--- a/html/insert/insert.php
+++ b/html/insert/insert.php
@@ -37,6 +37,10 @@
  
 	    $url = mysqli_real_escape_string($link, $_POST['url']);
 	    $url = str_replace("''", "%27", $url); 
+	    $url_noprefix = str_ireplace("http://","", $url);
+	    $url_noprefix = str_ireplace("https://","", $url);
+	    $url_noprefix = str_ireplace("http://www.","", $url);
+	    $url_noprefix = str_ireplace("https://www.","", $url);
 		$title = mysqli_real_escape_string($link, $_POST['title']);
 		$tags = mysqli_real_escape_string($link, $_POST['tags']);
 		$description = mysqli_real_escape_string($link, $_POST['description']);
@@ -49,8 +53,8 @@
 		$shard = mysqli_real_escape_string($link, $_POST['shard']);
 
 		if($shard == ""){
-			$sql = "INSERT INTO windex (url,title,tags,description,body,http,surprise,worksafe,enable,updatable,approver) 
-	VALUES ('".$url."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."','".$_SESSION["user"]."')";
+			$sql = "INSERT INTO windex (url,url_noprefix,title,tags,description,body,http,surprise,worksafe,enable,updatable,date,approver) 
+	VALUES ('".$url."','".$url_noprefix."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."',now(),'".$_SESSION["user"]."')";
 			if (!mysqli_query($link, $sql))   
 			{
 			  $error = 'Error fetching index: ' . mysqli_error($link);  
@@ -58,8 +62,8 @@
 			  exit(); 
 			}	
 		}else{
-			$sql = "INSERT INTO windex (url,title,tags,description,body,http,surprise,worksafe,enable,updatable,shard,approver) 
-	VALUES ('".$url."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."','".$shard."','".$_SESSION["user"]."')";
+			$sql = "INSERT INTO windex (url,url_noprefix,title,tags,description,body,http,surprise,worksafe,enable,updatable,date,shard,approver) 
+	VALUES ('".$url."','".$url_noprefix."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."',now(),'".$shard."','".$_SESSION["user"]."')";
 			if (!mysqli_query($link, $sql))   
 			{
 			  $error = 'Error fetching index: ' . mysqli_error($link);  
@@ -80,8 +84,8 @@
 			}	
 			$id = $idArray[0];
 						
-			$sql = "INSERT INTO ws$shard (id,url,title,tags,description,body,http,surprise,worksafe,enable,updatable,shard,approver) 
-	VALUES ('".$id."','".$url."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."','".$shard."','".$_SESSION["user"]."')";
+			$sql = "INSERT INTO ws$shard (id,url,url_noprefix,title,tags,description,body,http,surprise,worksafe,enable,updatable,date,shard,approver) 
+	VALUES ('".$id."','".$url."','".$url_noprefix."','".$title."','".$tags."','".$description."','".$body."','".$http."','".$surprise."','".$worksafe."','".$enable."','".$updatable."',now(),'".$shard."','".$_SESSION["user"]."')";
 			if (!mysqli_query($link, $sql))   
 			{
 			  $error = 'Error fetching index: ' . mysqli_error($link);