Can you explain this code?

getphp

Can someone explain this code to me please.. I seem to be strugglin understanding this 'Heavy' code


f ($do=="add") {

$ttitle=mhtml(substr($HTTP_POST_VARS["ttitle"],0,256));

$url=$HTTP_POST_VARS["url"];
if (substr($url,0,7)!="http://") $url="http://".$url;
$url=mhtml(substr($url,0,256));

$email=mhtml(substr($HTTP_POST_VARS["email"],0,256));
$description=mhtml(substr($HTTP_POST_VARS["description"],0,2048));
$resfiled1=mhtml(substr($HTTP_POST_VARS["resfiled1"],0,2048));
$resfiled2=mhtml(substr($HTTP_POST_VARS["resfiled2"],0,2048));
$resfiled3=mhtml(substr($HTTP_POST_VARS["resfiled3"],0,2048));
$c1=intval($HTTP_POST_VARS["c1"]);

$error="";
if ($c1==0) $error.="<LI>".$LANG["mustbecat"];
if (empty($email)) $error.="<LI>".$LANG["mustbeemail"];
if (empty($url)) $error.="<LI>".$LANG["mustbeurl"];
if (empty($ttitle)) $error.="<LI>".$LANG["mustbetitle"];
if (empty($description)) $error.="<LI>".$LANG["mustbedescription"];

if (empty($error)) {
	if ($cat["mailifnewlink"]=="yes") {
		mail($cat["mailifnewlinkto"],$cat["mailifnewlinksubject"],"TITLE: $ttitle\nURL: $url\n");
		}
	mysql_query("INSERT INTO ".$db["prefix"]."main SET insert_date=NOW(), title='$ttitle', description='$description', url='$url', cat1='$c1', gin=0, gout=0, moder_vote=0, email='$email', type=0, resfield1='$resfield1', resfield2='$resfield2', resfield3='$resfield3';") or die(mysql_error());
	$r=mysql_query("SELECT max(lid) FROM ".$db["prefix"]."main WHERE url='$url'") or die(mysql_error());
	$cid=@mysql_result($r,0,0);
	print ("<HTML><HEAD>\n");
	print ("<META HTTP-EQUIV=refresh CONTENT='0;url=thx.php?id=$cid'>\n");
	print ("</HEAD></HTML>\n");
	die();
	}
}

DigitalExpl0it

does alot, not sure what it really does, but it looks liek alot is missing

Weedpacket

Originally posted by getphp
Can someone explain this code to me please.. I seem to be strugglin understanding this 'Heavy' code

If $do=='add' (and personally I suspect that this may be a mistake, depending on where $do is supposed to be coming from, but anyway)....

A bunch of lines that take a bunch of form variables and (at a guess, since I haven't seen mhtml()) cleans them up to prevent malicious users inserting stuff that could cause damage later.

Then it looks to see if any of those variables are empty. If any are, it creates a list item (the text of which is stored in an array called $LANG - that would be to allow internationalisation) and appends it to the $error variable. (Incidentally, the HTML generated by this step looks invalid, but whatever...)

If $error is still empty after the previous step, then there were no errors.

Dunno where $cat came from, but it appears to contain stuff about whether to send an email and what headers to give it (and no doubt other configuration-type stuff as well). If an email is wanted, then one is built and sent, containing the $title and $url of the page entered in the form.

Whether an email was wanted or not, the form information is stuck in a database ( and using "or die(mysql_error())" is not good practice in production code, but again, whatever...)

The script then immediately tries to find the record just entered, and gets the id number for it. (This is frankly buggy, as it assumes that every URL will be unique, and besides, there is a function to do the job: [man]mysql_insert_id[/man]. But....)

So it takes that ID and spits out a wee HTML page that just redirects the user to a thank you page, with the ID added (presumably so the thank-you page knows which page to thank the user for). Why header() wasn't just used I don't know.

Then the script ends.

After that comes whatever code is to be run if there (a) is an error or (b) $do didn't equal "add".

So the short answer is that it looks like it accepts and records users' recommended links.

[edit: and wow, because of the really long and unformatted SQL query there, every single paragraph I wrote fits on one line!]

getphp

guys thanks much appreciated 🙂
my apologies as bits were missing, as this is was just part of a big project.
THANKS AGaIN you guys rock..lol